From b8042bc0f0dbbdf899274f2db15957cb2d2ff570 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Tue, 21 Jul 2026 13:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jul 21 13:20:03. --- .../20260721/20260721132001-Binary.backup | Bin 0 -> 390591 bytes MikroNUC/20260721/20260721132001-Config.rsc | 5545 +++++++++++++++++ .../20260721/20260721132001-Diff-Config.rsc | 5 + 3 files changed, 5550 insertions(+) create mode 100644 MikroNUC/20260721/20260721132001-Binary.backup create mode 100644 MikroNUC/20260721/20260721132001-Config.rsc create mode 100644 MikroNUC/history/20260721/20260721132001-Diff-Config.rsc diff --git a/MikroNUC/20260721/20260721132001-Binary.backup b/MikroNUC/20260721/20260721132001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..824eaad6f0b028d6a1d7b6767ad93c1d4914f10d GIT binary patch literal 390591 zcmeFa2Urx#wl-WnGr$Zv2SFuDP@pHzpeQ*gAQ@2sCjt@%hao8nq6j9$h^VNTF=q@Q zVip4iFrt_h6-*$C0{>GJ5Z$=9=ll0LXWx6B=b^j0>FTatwQ8-m-nF_re|zbksx~>G z2mlaL?NfQe3IIR=00bcUVSAP3dX*J=mCeOvUlIZU0U`Xn0P7_3ME0pdzP|MI zj?#5kcXzjjwCo1}a0I?2EC5>&pa^_PH~{bf01N^Eq5!%OMbHHh&_w`ppbOvK-Q7(9 zT_!*sbeZ51Sh0y3;wE(A;YsD-VOo+~6be#Av5C?4DeUMZdk#NZS$eMy(hI}21MnrO zfG$J})`QnT`hzZOyDekf;t26HN|{%VJXLR9iZY$+o3XSPT>( zCK`OyflhUxavg{~2P)rzK_T?H7q)zcFG(2(@&RbY0tDayPytXKy1)l4Kt5ps0epsw z4!E#`?Sl8%AO|G(`0e(@cPqO`P1vu7I6%O@hmsfoh0ult1dRCR-=;(ih?*(Bc}cPN z%@6wZn`iQ=WE#pN+p@V7o-Kt>VfA_Q)IM*X`ro|y+;2CZdj#oGGdxsNc>l_<^X+pG z*!jJbP0>Xd%Z=vQ`Z)XH0b(@`@g*67uC)N#4u+Jw00Hy+fOalO9LpuP?K{kLYA=XtsWfM3M{APoR~ z9ST4?0QeVJ05Sl;QXe!=d69?q`r)(+-Yq26xRvjH$sHn(yK^mg-f_jPu)p8t~r3w}H>2VOy}tG#>f z?zb_EheieVoJSuvLf+RoDA+wvs&JAXQv_Xz0vr}_IQh!~@Cpm?@}c5eHyI*`<%OpE zxw^3^o>ZR@Qb4HJ;AD#Pm^4;WPy#pBEj2VW#wEz!!=D@M?AU|_CPRF^=z#$=Z-I+F zKY-%n9ZHHt#{_am2cR5*2Rkk*3v|7F<&4w_GKlD zctT@WL1H40BZ?IymiJOhXe0kbDHYgar6m5J)kx&OrjalA_E#vmA+{xw;*nk&3EkPx zG?I`OZ5!$q6r0HUQ7J)>QqGeq?p-YY(7_p86d8}N!>AAly~O(^m;)ohJYr)g_4g8!BgQ}_Z^AD$im+U!>2AYl%drkvQ zV9#0bva<~R;RLXq@C3@R9ZKd_UZaD8{hWQ>dsU4QB#RPR2|U<6(LzB=(lDvmDbo9c z!lO#dunUONGQ3xsv$$Kq1^ zs)K=bTBLQ#W$WJU9Y5R%7pxFSIcCkARa{CV_RdjMZj zA^^xF06;PTVhx6_J`SRB=sbA<;PDCo@ZkpZ+R*zGkR-U62n9zZkty)Z@jPynNEjO( z%@ZcWZ8!jB6BM|Ha}EgX5QxF!1<|%Fv8zaioeh7Bq-!|dAn<@c*zvM5?0DHRu;bTA zk9mxN`^EDQ0D-Y00PqqBoFHfd07WbY2MVwWcmVLQLsbAEU{$4qR1N+|1A+sHMSwP3 zz%dGRV95k7FmM5t2Eq(o08B6{iUbH2AY#DA3!-}zNj`y>AP{C0{##mveBUDEms*75 z#wN%8d)kBfzCD;@KPX;lc_#5nI`a5CSpU10pIGt^Y>W?^Yc1z9QRoV`|~=m?LXGR zz+s8|R!2rwu#ys?$$_SWD>Vyn&6S#F*p+Gk&V{7D0M0|8p&($yQxKWUhO=e>C+2_% zFE15VNCu0|6O%SruWcJkriU>f%0RJSDECldCY*H%CIFT0{9m5s~ zjX8ouer$A#kOf`6aSSWjm=nWFjOKBN7$?Q^SjjwNAun0P5{isPF+5`lVPPDbXe`4R$(mw5N!aUO@jsu(FXwO zCo%Hi5&*~m0FZ$IAQ0X_xMK|fVgmqT3r(=tp8~)Xb1wi41pq*^4T+)Q0Duty04D$t zX8;iBTp(T<2>=)cfS4%q2LM5#!yp1c7(fL8j|BijlbT;T00adF6uj6yj0FIXrT{Qb zx{iVWiG{O5L_7l}WXHh`8~|{>$W4$MWjJqyyn+A#{1XfD{FLAXCy@i-{1IELCSj+p zh}Sr9RSig-bSon9xo|C}ux`xgaT)U8T!(o0L+=3{071G|1OR_XNo*?c{vH5oiunI3 z0N^LQ1OPf10Mr3=FdERo06n-cfUP+1v1A0F)lz-4%JEj;jwxIVxb zL)p~;Kp1ub?okKeB3v6o6_wN(3=bay7lH7C(qBNYvU{(xTd%Tfud++8@@TPRV4W#lHM@KSi9j3i!ix^yH5ONljTJR+oJII?7A zXdos?_e1nIURv(x?(Sww%U`;?ySdUbWWhMna%XpUcf7O=fr{*$6)FG(Bfg|LSZMH$ zV*r?i1z-UdfI_Uq9GPPQvJeZ9C0GC!B7h*b2m$z)asaeJ^z{(|1X4RJeL?{Kih>x6 z6OhkvPX}ClK>$JVDUTtAPlpE_h=9A14RHqn}|qSyA&Rfi~Xj35GKj2WW?Vt zQ_TNanW~Ek+(e$pR!VUH{ldlm^Ms50&nT>VTC9*4&r43033tNZuDQ5>o^Y}M8R2Rr zXC!iBgn~ptN{@WU|LyXX`{&8`Kcu{BF#=I?lAy;hu>TI(BE38r9{SdQo_OW{GwQ3E z#F=E9k`ymsab?zl`*%nf(_6w2vHYKvur`!1SCE$2TgIHfL&m-Fm^dE#&y%sje@2V7 z1c~t(wlORrH;pCa*@|&@{NFBO2(bToB9{Nph}bA0C0-OO5v}dN9j%E|DE@h}{$Ylp z_-~qFs7OJuZE^xDUd)mu3524kcmXF)7QM-mPKV({QdaH~mwidb;`|ju;7b|+XU_xS z0uO+RB1{pn7l|^0P(vwe0?9E+C_x^UAfJp8GZtd{2+r)qd~CLbn71~8fg%%N1Q%v- z0jEQd!Z1-t<_Tk2@o3gBU7q+$m&g3emnT9RUdZC6a_z;@E*XCoDHRr6M*?4xj2e_t z>MB6YYlyj$F&HtuPQXHe^bqVYb|InH#DN1b!=?%M^w4Z@8c#R}=kmg&WY|j*eo*p* z`PN-02?k|K@(^fW>o3xat` zkfoDL6%kQ!_%As&Axg%j$q2o%(i6hB`1kx5Jcz&!f0h(gSXQU+agtF*Yf%K|SII=Q4W}$RH%l7^>XzhJBZz#q3H0Gpmpf;1>rOm&(7 zKr~6)v)IGB;_Jox*;cxyHd)c*3$AwR+MO{hywWhPiClXWF$RFB9@x+O&93)ao61Hn zJx8BA)dcFg9E+O}oA|G{=6n#Yr!_EM)4MfZtW48_$Tbh*47zR@*eo2i>9a!9bgO9( z1}<+gh~IMisiZaA74t5c^&creD*5Qiu@$aq;?{^c_Jw`P=G(v)%Lc{>#X1XRD&+R{|*FS(wDc^fGOw^xsHGaa$#sd9DAiYskejc*o6T9Y0* z@YOJ{S9-&0HxyLeF;|AI!TZL>2?c&3t}qtzSDghzgFT(~U4vi@kbwKvpeYB{XBkfG zd`J)X8UKN&RDjqDo{s1XmD#2Zfv;Nt+qE_9_c4!%*QO3 zh)B5b<+F*=7H1fdZW|+#c4osCDfoViV#1+e&tkD;gHjd*hHDsum6OFN!~;e=9K}>E zWb@Va4a~G1?=F|Q<2f&x43t*%Kj%t_@ zVbEihx)2Mg34p^24~G?ulZxHPHxnos{1PLmB~69;7GQ){8>25Z8juWzLzMuTV5uvD z%rC|qZi??k>`26Z#RQs<0X+Pxm_o%{!3S7Xb1yp4dNcWjQd6+=K^e}Q_g@J|) zMhCgJ$q8&*C}Ei!=*x!6@)t_gfW+sC&#_ib90u(&k&8~@C5xbBznwBUh9&HAEv{0@ z!nG^#B~>UvlJ%%~3C}HcHOOHl0FEe0=vJ}07GLL(5-`EpC#A4qJ|{LQg$-?9az?U< zmjLr5;LlFFhQuz6bHE>DcV#LwT6~NzNou>Lbi6(kFXZH*yD?F5PZ0`|c=o=6WR4(B zM`G;}aSTW{UX_6_X$S!L17VR9VOUO_xdD?WWY;m1UK_5>B&oJ0N`46=IqtrL8DpIN zp~fl#EI=eVVX~yuNrGg1QTn6_(%Q0Y26#8JGV}$qGW4IaGV}|wa_>wCC?k^ed@xca zEAK?$@i2J>K<^|D`$JDAR$z#PVCY^FB7@O00-_2xVQ0vy!GPL#)nEka$7-0KYKZh| zf2fA(qZ*9NORk3bSvBnU)i7db+fxnuvue0Ls^NO7;eJ+4u8(SRJ=Nq$5=s8y-sHcp z28WyEw&Z_SL*ZvN6kxB4QI0J3D^oV860$NpNLGejFDt`3P-_PQfLAnjpC~K)8bltnnp-ORh!i4?OaEt{!xfH7fNfSGu3a)_a3nY=MCDQ$Hl`btqaMUaXbns9X zY?!od_oT5K2r>nhDcfjL!e-W1Urh691H=1-0~O& z0PtC+p#?AlMuH(>GHSjN05H#Vf(0BSa58{_kvMEF0QgcEJOTiJ0RuoD+$qjOhZnUC zcUOZxO9=q<9)ji|x6vGA!dff_!C*AN229+#H}RRqb+~DfyiJR}#LV!&;fm`fjLk9m{%Q!)jl*Fvh&-w$j}7Us1-Io; zEP`~S{oxK(oGwm#{kcJ73rc;iP&r>$nw@jl8Tw&#Xm2@UqXEjrpy@ulPENJG))s=< z-l`Y!VeFTtr&krqb`(73T=uJ4VyH%S(6vQB806bJtv^r@S$+tE8bm%@mzmpmtl`s1 z>bi}-`yyZGw483sDL#RD7E)e-(rS=N%~r=RB${koVmahp*U;Gjs6(}Z3Y-t4p1I{Q zusr>D*Z*(t`UP-^&jY~3iASXH`5YFP%0^KVl};w2D2>BnQOGPJiO3?6xC|bXj-q@D zpUvd(8B`JP)_ zDvw5G(U@cgItd~_slgM#tUYKi;$a?JNKg<#VkB`=BdH2TJG#Y2$GY-_B4h7Fjusdl z;+U3}X2*?J`)oo@Hqssc;s3I_9-w9^yi_Iwl&FKJH3nUGI*LQWc;|N7|NxXz8w8zTs!=gFZ zU1$!bNMdEx@k1Yk7P@%sDNUJpK78TXk*JD1!Dg1%tacRyk&^=`>w7z^gKA0atg`Ha zP%uOTR1fY}(o+9XJVax3fW#E*_0;%YNYFH+G$N5GvCPmklZm}H{}WBfK}>t!I3fqI zIfxoSa}Y&L4uXJ3Lmz4g?{C>~eSO$g|8)zL(hAS7+t{LcdD%FGV0;l-yx9*e4{CQk z6$`>j9?dtsmnZK8rV}n-Hk?t_cxmV)k4HE7XXW;#TIw#CvU+yGP?3%31 zl;>rQj2Kv<_i5X)7OR`0tjX!c;khx17@P1osVYsq>MQaw_x2Vy^)aNf z6#e?E>yCLovYgnug8a!FKVfcN)P9GVRi#@;`b-^OJ31;pHFE7J`oh%>rq2>CYxgUd zc%kdkK5eev*>TpZNmcJ#I<70Z)NLzwCf!l4d-G{}{n7bjMjSAF;cc}p=?)QhuYIrX zdmlwVg)Pk^9U~89tuH*e%Myb{0J5HgvVQPAv;NHYVDI}=L$CTA<-cA3$k6a)(O$=^ zA?QHpn#^$esBU)O2Yj!8SSbAqtLR(3v@{hv?zycR9k{!-aVM@VBLlzQT>tB+!84EB z91 z{vg|H3;oU88yORH?{9yhdMRslZfc`z8 z|G5MD8zQ2RDGV0MV^Sy-4xPbalW0^PN@Z}VJO-0OVN3jy0 zOkq(dWDXrA(uiV2)R&=!h^Wthh*1*CAhUTWmBvIVBnpj9WD)698jHiEGMPjUox*}B z>1X~r2>_EnxOoVrzJml(NVP)gZ-rEzq+ftk6WJ3Wr0P~9CijL^SO}?HRmG4B&jR51 zA5j&4tz@d&3s~99P>aOCc#?vBf&zn_gS?zcR2m5-p{~wETVfwb>mm-#!JR{Mu)C#5 zOS!F5esCzJb@CzqA!Zlf@_TzarT+lZ@+65T!9G?44w0? z_4AGA4;NG}-S&Qhvrf`oP0(Sfcp!{1ZtC8E#gmq*PIO)}j%wI3rQ_)7W9DdA=$lg? zrWQTcZqxR?uvz`R?#peaZ;7TFtk}XqN78Q>4SYP6zb(aWY4W-4-ESfk=Y+dH+`iXA z?St3Xn{o7NPQ!hV8+YBirkZsYz6ekl5U@U~+1n#HYe@d-R;^VWFpN|_C@%B1RD zx?w&`JY6!^om(~aS)Fh2E|=mh)wmOBt8REbxvcTPCcF5pYf|lq)VQlY-rLM0PpIT{ zdTiMizxX0M&?RNjrxhKMk$ZQuo(>#%IE%3Sg=5EzEYH|d3Bt-ja?l)P8miedqsOE2 z2-1x~K(9%?C^!2!|7;`uer=^SeJi&AvF1y9-vKK>(_mx$rOzHGK2z)HIIP($ueX5t z2jnIu2`q5BsJ1+Qusk9sr+`IzN*FX%Rz?uqL^K99mu;iSEd3afD9ORzUcgCC`ff6W zI`tfdnMIKv#bLp@Qu22P{xGcIe8rOlM-l1*Z+#$cD9S|XYpH9=vxu_O2;<4WbdGq` z5uU>sM?)#7l00F;EH7kMXFLW$73Afjrz;}}ikFv%1sBiq*6+}gc#$9cPv zLvL>WD9E?|ijFX!dGuuYl*I}|cICyTlAA$D;NI}nPYz%C(D+=f>)xkRht-AC3Am`* zqSbb!l!Dq7W3Gh}r_qt=d-)00{r2z)30D&fTMu{GBig6OhjNkIQ}ebkg4WE9@JJYc z#&YKLx@q&~tzQ}V{7n99dZx{nw;^L0LiJlftJWv^?p8W=i}m!_RjC#C^`{ip)zrR; z#&+Vyn&|H7emSDCA*bzCYxp8F6?2=V7Ctql3!l}MZ_g9$dzY}j`0nTW%9&1U6qZ8> z3Jq!x1f9qhv-6O?`EBV))Zdowx23cHZR!3OSh{c6oWnp#R6di>p;7rn%~0+A@0%ZlfzfYFYg0yh?yn*sSw9Pm!$*bRoPr>DSJyjx0l@`R#Tek_M2;u$-q zh++i7SW$+t?XO{W?y8aEz>?mJtlpR%4>5bZRiCjXNQ3qP*oSxuY{jjzg`mQ=SF3D$ zT4n1=`hgcc4|&nkXbxtF1g#_B2NZx#pYc67mWG({S_)FB5w%bah>I1p6u$|N*bmi* zI~BDwddYAIBu(vzMATjaq^*8cl47oui84_sSqiyQI*~*s$`JfNqm_TfzEn+O#uLm_8!w@IzwyIX=7Jp=*)M|a=q7BzWg}T&~NSjyGhH>l8`-e!xj8mT02JD zhoh#?w;6=SJ<3-2`aw4(n;9_W>1XOekzd*T9IYn@N0eb_bgVlzM`vQzeWjBJ4YcKI zUY^{7TQbxmlce$i@J-Lnk4>P>)6g%!zSn5Nentmo-sS7}JQVIL4u2Jqc`ozI?!iGD z7O`UkEaX`I+@{YPQs%nMtZ}=;^cAYsr;W;*A_g2>y&6?yUVfLK{bf|dMbhhBwyOmN z6KaVp+&?tQW<=ti7pwA-scY&!-wjHbP*OGI`Iv2oqCCD{K4pj)o`W^28L|QsaWryuAJGn^slaYO=p_cWg_oXkPMuhRYqfDW5PYhdMXzxw-S>&HGvx zg4CzY@wi&lQEoR_V_V^F%k0lD){JeUui5sbF@9gJUWwyv^U)a#sW+l_v7Zc{lznRHIwrnJ#srXzWt?9n>f;_ z_d=ZCDvmUASHVYc#ZdM4F#kJ^(eGjYdzk;%hWR&~MxhcZD4R^8(0Obohr{4d*%Us? zrL(DIlu6{%A;E<*m^>Pf%A%2ZBszu3<&s$(7L&+i@VG27PV39M_C%F2s5ox?%WfKC zu0Q(wM3_zg4H_iCNVF6?NZHc#?*h>NK89elV@P7`WS&T19L(dyBnn{S6EE2~$j;f$ z1V*DFyh%wg{)TekD-?QgjuAv@(nErUDaj%p*VvCIN)rg16s?JrxoYLNMv( zf4zNwWtAU)nYvzhU+N^6R zrs&hn*sxN4X2e8p#u+4h`!M22M&>o#wNX|tjH8Asth?x&eD}l7(Pu;J$8KIWyW_*Q zm^!mr;g+=o%ZlxZ!Wl-Wu<^mVrfUyHDF&4`tEcD$;|y=QGIxYnoqp8sXzTGOI~m^O zi>bM5nC{m$tbVUKFW^(=6Wgq|?NP6E*X*&qdgS6lmoy)X^Mwq--M1IN6bvW|A6`Gf z@0pxcvv-Eps3Tr??LP~zGi$mA-l7QG_B+)Qk(00QYuM^V3_Rq2HPT>n?0p5YRgM4B z&zplU1kdt!FZ=BMC*bQF*utk?x}eZ){_*ss=A(rbk7m+6QriE3&H4ycZ`!iM^fKbO zX?-{QidV_pNa5~ux5o`ey9k|TULBP-rw)hU4ydo6Z+TxShjXRnzA`<-d7SCq-7B2O zZ%TSlcO~tD*>&(BKGgnUtcuF*tyLz|{cp=}+|s?2er0RdqkV0~w(c|MJar-56k+V! zXWuGrs<5o{oPR{c!zis*dxO#84a8HctVCE!H`!p&#wHa}`S7AMsV^*-t>@o+xbwa9 zxSHjmGm?{@%<6ZI=zPTfn61{>RDs_Mzv-$Y#$ip@Y98Z{(HMCFduqRpjqNhM2h89K zuj{FnB`a*@H=TdYyteJ`niWcx7^?Lir=`z7zgQKLZ{TsGoYFS!GIPak#=C&_(L*5k zg4ROD6G96j17E)f_n#W;Uot+w2lwy6{a+j0-yj#2LuF8C3@(+*r!sgHCY?v8keLh; zm&B%`C=q4TxI`M2OsB9odSuI|8Kkm;XiK~oLM?F=6pnZaC-xmK`|BWfwgG>Xm=L?xEg{6zB`?rX zgvjfu#bCefhIv`H+JjgYTVtuIb>r(`Qck_!axhjU8*U zOes634UOR=ZqE@vkD!(03GGXc1r?5QUqv{?Q^((RzNvYq%v-7PR`wjiVs^m+eyv6RrJ0BJjM%_byNy}>O4Da)=7%`B zvPj(-7Y{{0dZATvaa_)IpMA~ay6-^>)fUTV8QyW#S+g1w61GhHUEnawyd_r6104|hy40^h{>NvoJQL@4 zWS+_Bbp;{pg&$&dZdK$zKDAY;^Uao~Q6V<+#t9+m)&?z6==f3Q8X?{0D-t7Z2Dd2r zuE}ag7)!L5x+)O9OekwH+NL>g?TX0F%O{2>%pHOMa_*}8E`1$tp{820mEGw_=6+wt zynfs2-etP)m3_gr+wLs6>LS6GRN;cT^Ju%OROBvCn*VH*U|{^FN$k_NuFMcBzl+wG zt-MOhM@VU`sGrohb<(|uhvVlB(~RKVsSMLR=o;7k^u8}&BcQf;=WD%#FD5OVci+3~ z9(B?>9m^#~wXDa3jtbUCTbM*VyVqaIF2-e)J8xu})oQbX?(vp!4|k9LpwI&B>caCb1UfH$+3I<-h3g!WIX@h;^d7t9 z#Nn2)R-&03SC$u^RaR(hn@tmuZdg_C-mUatmCs3|8($yC9`N*-Zoe*P+jWjx(y95~ zw&Wu_7EC#il)rPhL9LV3t*_?_k46-mwgo;Lb9!Jt(X}PN|IIT6!(1o!->iRss-x~Z z_UD?yEuCVb^jdchQ3`#I46FaP|NjwJ_1pgcw*SBF|8M*MU$Ot+rgJ_y zoij#>d@hYkM)@2TnZu$ISqvhZ&7o0H9+`@gNnDuK@N4)U&glA{DL{g~_sjw^?7gNR zQj(n||M#XOlmB`)cigul0M6!|s9)f0PV(HWl6Wd-Dw)dt@QByXpPTJ3%el3cBqU3+ z96ZTC%->uwXbxrsnuDB{&fnxhLMz@!ZlF?6ZcwY=<}U305a_@C2`f*scv412;XI54 zpYwu=3vh!f-TY59;U|ym-rIcp=$u1JUzD;;uDv~WEcpXDqF)8&<^3}&E3Pd4`1axz zr6a6y0Upy<+pcLT;3(_8R!C~AooVMZW7Ufh&IvuZ zcfj>>bc0zp)@c2s;lC2+pVbTB@4M@@;dANfTRUma7d1GsZ0m|qXL|P*HU^+P3=!<8 zcppDPbL3T9=1E0DQF3cOZC<|R(P#Pd{c|^SKCdR-=Py=!cX1D4!M*rx9dTJ}F({Ki z?gV%Kq1FBkTk5^nHJ@#`>Yb&B96C2^f#1CR!CO|8%{hG)RDKG6wBqTw%zc)65FkR8 zm65qnjb#Aww}J_K(%!{SdwP<8E7-rPVBb6tnaJYOXcPvYK}0D;GJ``WGx%gCk3}Jq zP$HR3W|Dbi7Lmc>pd=EL#^W>T91@GeLXpnNWs#imf{q@O?Y;z|COo_V?VtC@BBV6mGB) z5mFC?vLB8T^;*3er6m28sQxlqp^Y|#Y0yN%*kcerOGXdd}y^efgM3Ov35({?i9v5 z%EXcs6-&eu+Ce^wjl?0KZFxtw(<%Vk-r!lURhBKz8EKBZ)S+M8A<$1vPt7T`7_qS@BZe z3R74aoK7&Abp7ho{3XQx~saNU)LI!$k%nn`L~UNfd(s!dB_cry1h zO%!QS+Qyf&%VO%3*?jSzTaX*u`e*5PzlXmpsruh(uznB!-^2gEHvGRqIueIR%`D;d=*juyW9R<>}MrbQo(=?!A(GH+$11C%t#)FXw1| zp_RwSzZ!VS=d`y)K|*olHrDZ)yva?Sl^O|=dzmd`&W#$oZ*oGeit+o8*bh^7bAsvq zCr$44pG75a5-$00sWvdKs(P#AiIw@;XQnPTySd9mj&%Nwaf5VMwq+k(joW*xB|acv*^y7~Yu)=WY+42&RyB|BIuI05=UB9d z*dRZ^LSg%|Cgfe(jffqSFucP36_KvDgZHmU8?fBTv*uRCqy?XM@NTHA+LikJ+LtkB zY45|8ZTfY0ee&NFJL`=_E614SvnsS|Vez>`3N0QVL*_=6mGV0Ej$g`rl@<@`df_1~rbpqBFEs_oUg_k)uvLVsO&zp4QIZn`+KY znlima;q2%Y{WHqy_w768=-~FIAE~Zi;ESg4*4>roR=0;`=H9JriJ!Z1)RArZrJW0h z${()dYS@deYrPZZ_0;u3TlQK*q1JH58ztw`y8}l*Qo_d54&ZpJx0Fjdw$=^#w8XX=55xv zH2rR*cku?ZO9krD_lIxOy6HOSU>GZ)YGs!RwuJjUS8cX>#Zlc}6|x zoTSrl88zm#<)u2K%DIkuxX@eWwi6rnjg4Q}z4%DWT>DVMbjsbNfa*$b!Umm_i*WQtw;_$!#(cjn!!CWvrrZIZ$ELJ~Dm!{j4#B=TQ}&3B=#*r;9J(=U%?#%< z&s7Nnp^3Jv&Zl9HX&3n!k0%n=4<9w#R|# zF*R3Ru7#i2n%YcySCoD6Lx^ja-qni{%eD_lkh|%pW9WVYjBy$7vgJt(eA}NgoCxC4 z9OSKppTz4t_V>^C9I@~RNR68Iyg*9%XVwqS(C9GhNb*n=QN}GYP%@E%(#QVNIsOVX z9SZaxGvwgQ^0{s3n8lWPCZ0L+^KLxfgj3&Uvajf3dtS!K(K;WSH7GZ=tj*|hR=Q-< zjg5*LUz0Wut4EdhEcdqydSzhrVPgOFF|W?$o;$KH5_6qDi96iQe(r1)mYn$}x$f~A z_q{)mH|Qp-t;g3_rR!Yr5ee%&%?*<~LnpjaM?+?Ar(Hy++}oaer(OH@tIjyr%Ox+WzC^A}+ShQ;q5AV= z_lF~w7*Ay$$oF4iz07^E{)VUMMhE9E*8pc>zbw!7$dkuUwWhQsI4v6RapJ-~k+~f^ zCI{=7Pf+;fIn%*jRHo%(txLSIn?4S$FKic-q`2b_EGhb-gT;?5S0P z=f1VisZGR}(&RDQvIZbK%Ri0T*id4&{Wz}Mw5_djk1H~B4#u?1&EV~=F|ABR#g8ki zwFlr{*NEC?v^$%KH2Z&&PwQN8>rBw_h?{~Fp|8!o%-SsHRIArC8M+=94joQ1H|ck3 zSk&e=&to;yHznJcpRAaA+49ws*R!i<>1$CuE4x>hY-wQ(yW(^hbgt{X>Qd1-;^gk8 z?O{ucc5?QrCP$4bTg+TiRmE8zI$iL^db4&*v&J^BmV~zYLQ*|Eh&qw# zPNt$%l)<3T$sSCiIF$7huAt#Z0t0^PNA{*~0v>+JRYmq$pFgk|sxlS>auzC(v%vSf z>-#61g|@66ehgfr>8n=mZ0X-j>^i+>gy6Z=%Mt^n$BaQQK25DJu6e~CGIBR{uT^=*yNu1pp3ZK4 zIj25tb9PX2#JrT&k9QaE6rcld+9^IWQayX9R>uQ-IKu5{_4DELy)Rw6AIx5Q@6HV6 zz=tkTAD%ew$%yMde6$W&S{%*cU+srkHhX`Pk=~V~+sm>qZ!kauS6nqTuQ>CHcb2)J z`_3G~EHq`u&Isj;0Rv2@^0pAp?KQu@<;H632j0)L;}hKIIjJ>`*-55uT6$)c0h*78 zsuNEPJGxtN>&87~`;F_Zn?&wSk>i$?7}?ccZk{9zb zH$#FSRAQ==6uRvT&MeS4c4}79m4LZlmF1s*Fv>fxv{L9a{QXHc{ouz(>%84U_fQ_F zznL@kZJXl_zqTg}Rh*8D=`$iL!0Wq>tN?pE!2`>;mmei|(=d_LaoVAC3t4!kdX zI5pEYbfCG}AfrN&Q)#(Q?ea3F-WgEa-G7qS)0y(tGv-7a_BHq^^`#B6$gZFoY^`PgS0$;&LBzYcI% zaNh6avKLIwGs0?O5jL9PTxYR;#L$+92luseh~q9lv`D#kEby)StMQ*NF3Udqe0;;a zBaYLX<{aN$$(f)^#n&5Ijy?NkT)^D&u!v6^r#-n}xwyEJb^O`-ajxnc!p&~J((5Rw zUNj%&ojh=SkoU=4r?}+U&mT6co>38~={RUw%2?byDD_e z=xe90lP0~NcP^%Qb+^U9wU-MA&4|yqpd>eL{u6`aZjO8JPEZ`WDB5_1bK9sikBzfZ z>JB};(p2w4n0D!O%+V!jDRx%p=Ld$^$-_ibl=jb@R%^7haxR*S+_4lK^{l?I^#M*T+#_wV&Wn`QPDOdkGkjk*cf!&x*ey` z_{Pn*Y4$2t?{LQ^^H-)=_Qo(5(%w36tMs!gUzNw%szon9S-0Vr5lAO6lVTN^j*O(zM_h(P~c;gz^>+s!k&Fc-(2!V^)j^X$< z8?>u$j)8=Q0VFJR&>W;wN?1(3j_S^xyW9DP`Rp%|4Sz*g3?%kP4aI?KY{ut8%l7y*G@yt8O$~ZPB^cwelroPUV+n z#afS^?jJL~^txQYiY|*yT)Tvl{L)Ifd75uFwl?DPj@(P?2o5+Jcu+TRbLrqhoyJuu zVCDhqqOp&TJ6oD*G`&|#v)6ANuYcH&S{i7hpE3MGp7N4{8LwhpT&gyzD+b1))5|QE zB(^wm>?asynrdfi@1WsdIZSez^sHgdjQ#OVX_P&B*?E}C87`wQC>`E-tKZjIXV#ZZ zJLN86D*{pf?*qEH-Mz?(+3t(fz8HJmT6u1Y24yeba_^hnOTT-IVqZS@hu#*m7XwCQ zKCW8*`qW%E%UfaW(lusB)@n{UlA1kh`^^zMLN%Nfv(;q+NB{u8ZT;TLC&dl;~4+tM+t?}uL?z?mSw7xVx)}xP~ z**<&V(VW12bLjh`FZlsxwlqbSjZVg;bzVK6+X&J1^= zvx{rbcXo8(bU_2nK|V{T3&Z3~qaWLJ{g^WNw@eodW#8YyD*vHHe>qiXVS2B`oDa%;9cL-R5}J!Cwa zm~$?7^JsGyYvU;|4R`oYH4tr>xp`+9W8c{W)T{>L=8mqs0dE~V&fA16Kd2c`s>*-2 z-#$W^(aY54_(VC80hU^OVxckcG zmfI!e2<0I!qiNUdPe!@w=E%SJyhHz%JkWR|9HwUFIFOcSwNS5&>oVX;isSy76W^H5 z+V?RlAjk7CRm|v;Ryz^U+&UISiwLg#? zVeZ5$usd{;s{hE{qT=``$B#n~KYBFw%oCGWBNNp2cL-)_AS-$G24gx6wjSGaCi?2Q z9X2|z&E(oACc1|9$B(E;T&i{S?$+)dc_Xg@PT^MP(UIv92c0ceGQGyHK33HEBz2!F z+kDLa1guQ_1d`b(g$WboMom*>hpGG^Tri0Ml8A5 zeCPNRQ18Qdp|soWgTV~l#bLV+w-5Hp!JVBlY@*v*!Ih4Y=g-VY**fM%VwC8Cg4wkf z@#%6$Ov~ubZ6_PgC=Bf)og3pfKi?(q!SJq-V^(p8<{lkY8d@~MwtoNgARD3X&bn)+ zXBGBQO3npD+-rnf<5~DA)RSlq;w?*#!e!Z1c0Ks+%blpDEQcJc{HJ&Smu%xNpXetK zP=<@{=p(Q8tZf;InY{4W-mYAa`PlVCyODkqpFG=Ry}>4Q?&ht@M%{DoA1-0ox;zit zkh*~1_Tkk{3dcdKJbm9tmc@lfQ;4g5NK5M~zl1Dw)%?0;@F>mjNkamsu6=7@*8D3E zQ1;F`GPohHUUyV;Xw>HC2NicU_wQ(FGx*~Jl<0(zt)WH(Qk+T>hK;(Hl#?*LXnO@E zwQ=!z&!ZEsZohacqUivsR%?Pw;*`$=%!;cLF+@idchweSgTyKgx4iLs4;**tH@ZCBB$z#2_s`tj?@s<-(#g<3|4*?l(yy>G=u8UA zm86rDRd8#vx}RDyE{r1f3x6Eja1l={^O4`H?5yWrL|>Fq>rfd&s~PWcP`@({z9=~ z202gt%b9ACb-CY~)z<67Rh?(fY>gV+75%P!O2UOZtA;(G1?pX??5~g2b=~mjNoMW| z>yG)U0k^8}rWBssxudC;ywyo(fq6nYX;WB;nd+yr?}mMyxAwfR;gs&lhy8Q3j*Zv- zN*36SZ1cIcgtjDW@*d_j)ga$#-P<3lH$My{4BK)KjdH%y#eT)3?3lj$^y;>Tt8k`FKbU^cUBmzor1bDi&6T)Y|L9$`nVH{BgWJ`d8p+d zX1{*sg4y%!Sf=}yy<1}&J+eE{yCz`Vj4w6vr2`H12h`ohpvf!W+|o-on7E~>KhB}% zs^R;+FG3VF_rKH2G#b{l#Q9tttGOoJAtm-jTi9og!`kzI<~x3O`2WHV7yFU_Ay!A? zM|d)U-r1OXz3X#a8Q5YO5 zpHAg+#q*KA2BdgC($_$QY@n(;gG?bYJe-Lx?#`00;r!eR{r@5ab^gSy{3O{)JTD?L zJlyCMnmd(2r2L!^3?p0%SmRX}_QRa_-$DrXZqZ*7f{mv`79G*8wD8{0F(s0)skO*D zJd6Cs+&h7<6@R5PJ3gW`R5iZ-PRm-1UV7xzm&@&v#`}%B`StM95+C;J{lwIq^6IBP z3B0`c+m_zm)diob?;)yFHFhySXv`7#2DKrWJ^N_s3$2_T6uov#(Yu#Xe5~aTW#dJo zuu;DDdS~v3><-*lJUTHyBfnu z*{_NQdm3!pZ=vh@u?;Z~IkRrtE35xZ)c7CEMG zUw<)~$KFva&k-$nGX$({zn%RUw~}Byjx*)KiRW^9RgBYSzd{H))HGoj`+d(_ij!>gVxUKdTmZpv*;Cbx*aMh32zOnv2wR*6f;bc9Zbb zypS5hX>Tk0SAD^>R?D}&eWc01)UYo7gpx9mk%$^oPB5g^~8u)ZHN1=ALlWLi)=!%j)R?xF2CG< zbm;!^Yt{|9{x(4LEV`k1v0Pb5Uc#SwxjztszlY54A%py%A2QzvK_Ztz;qizp3Wdht z&}m#MpG#-3SX}tUXcmjlCv*8^7N5n2uij>%GzOE-<-wP5(a84LIOl5_z4aFdpJX$rtv08{`#_yB-t06-i7AQ1o{0sy1{0MY;e832IE0Dx=& zKpqfR1hWAEa{vHy0RZy=0P_I=1pt5r0DwXOz(N4PA^?CR0Kgdl-~!-vx)2ilc64`l zH&wc(OV;MEHpo;)tJ~V=XhhgDD0WK8bLQi@ged*dj zx;BJlr;&7H0NfZT-7o`ykZleCLD53GXAnG*6Vf9$<$Y$REh9u};w?yjoop6QvL znU%D&gIiHKQ{*(0OeR?`va@DbtVeUFSydvdYGzfe=?-QF$(YKF$c>03i_=x@k=B4m z>(|JTW&aT@1AeRp=w+=0|1ee&&|k?GWD5d%jPIOtUy+d{yQkOE z0!|bvlM(lE?z!ilbM86ko{Rs!hyUjA-}&Ivi@_9blVC7*75DUE5tkS+SlA^&z?mQjF3a!N zf*|;={5~6C2>f~7DgTD^8yL{-oC^Z1Zu(45;rT{;DhPf7PQ%v$Oc_Amc(`z-btSz# zR^*H+asfH7$`6v=c;UNa#a=VT&PRiyjPu*^!NsvsXHBWI8_A<5;{d&G3cN8$`u#W` zFY<;h!aa=_dD9lzi}GkMo->dDx8SqqOp&klvO$!j%_5HS?tZg~%dgeW6nGl&HX|5C zOLygWM$b3em?5-21-f_(bitezq;T&2tSIkCgZM5N1Pz@(gMx=B_#3Skt;Nefda(J! zdz%j)KfK&}(P|kOzvjc(Pl^(go(zXs)(5Quul`2Jq7(f(2p{NhY-;oIN-D;K`~ z?f;&@dJC(8TD=ei7tez7(avGN8+H2)Y3GJBK>Zuy>Z|hn_k$p~5p1-v(7yJ|;QWO% zza&yS^V%V>U1+{|L zgHK74QpK;*6f#Rib6D>Hyt}*C62O1p0Dez?WBq(0zcD+1L4N;RQ$g^9V55EJqu~6T zQ||=lr(Sy}I3IlZo#6aezJmYW!81bI*YE-}`1*^Y*}ix7o#5i@2T?C8?n(V~w*GHT zXylC7$Q5ejO={%I-Y3CE``kytFJ24&$vNygbLxH&&@f)ZSiT9k-}opv_qWdm49*4l14B6D!cT%mC<`$N~HNE5jqrQO}V zzD(w_Gnq|iGU+bPAfU-yk>_BB`Zvfz{{}PEzrhT3o9CV9Ups^6JOfiS1Fy?iFJPE~ zMkSGgi^{X@d(FkBsrk{fC#L2(LJ(@4!Jyx~a<6&i>ebfon2G+ue|w)$9sH$-ex(#1DPOl)5$yMJNtGZ-+1!YaH`sP^G>vnRmG<4PR$vKCrAbMa6lXJ~>iUl>f=6Sc~ z>+O5Zg$3+74*T8SFe>-EyL+1VYe@{=uchodN$8EXS+HPE!Ow&9uK|!Ry(pTuqcVCJ zmHQA>ZmBb-)Hz)QlzG_i7BTpm?iI=hKIj#@4SZgTLULXSy(n38Q)d*InG&A$#*3o4 z6?f07;NpcFEnIbp%%!yMI>E+x^)r6;vp;&c+ODe%VbIIUg%|UK=TTEOXIc{d837XC ze}?%s?`ba3auB6d#u`OYcXv-Ke_CI`H>CDiNUYb9+zOHsD4>ne#jpPO$IJe|FJoU9 zm-ET6Z0;ugGS1N^1Q(P%eDM8sUyP7^fijw3na{IPnWTI4t%vgSZK;dzZ6IulHO#lB zg7e>g0BC*#yS6_M2;ZDyk#TM+2!4KHDmWi}X(~8>fspmlt~Cv8BZ4H)*o@^XF-+$wKsO5TNp}UJrtEGXxla z6A4c7%L`}t8oT2I$0$u%AG#Wr#bob-ls2}I= z1p#sBzbg=8>i(Ymo)3cHugY(TX>6$RSqOsQAIa~%*Mi{hGCWgrQ@nXz0QLsh%mSF^ z?*+lRfAV|^`*)GO0ONai4&wYs-HwjbR&25<-$@UWJWB_0TB;{eoj-<}H2{q?`N`cpvv7NDQ2hd#8>ukFX(=jv{jtH;A$RK{wHAS9^U%X|H7C+f?y z^|UCXexJ*&s0Nqxp90!%0$OUtd-qpQ3-o+F(5epTyV3Jl-O7{R9wYjakLY=zd64zy zS2vpL4|k{>!T6QR!#@}Y?)3aCCqwh-Uh`H~5-e{EEd1ynIgtG0#UPlU3eNpJd+(vb)r0F20 zyau8*M%Oi>(Xm;M(w@2%b)S!hs)*B`N;BuOw=z?AHln0IhcPt$F<8>&>P;qxJA)|c z3$=b@b))7b6r~8FMYG%Lo&l>LDl_=P+hDt2M%2XH=QQvA@|&`i4tO4iSzZ>{I6yM~ zEm_dmA?e@Xzu*@5>`meMMjM>^D?u;?z6&|>jUbr%%^;ZiQ$YYb$P~oJo582SZv{c{ zE!olkcEBMWO7_6#f={QuBmII63i~^cZ9Z-I&%@{kb6Rlz!f$|)kU0SB@w?bQ%#ful zL=l+Duz@-cR(byC;FDKL*nE2NUk7k!^fu@?h|hml`0_>@qx&wj-EN$h^W7W@HGSUJ z&x*K&pfd&+ZEL`{7ywAufT4rZGk_4@K~~CN{pwf$2AL(RTVyt$X!-v~(j&hADA;I! zn~bpElxdc!ow^WwN>QGe(k}(U6i5P+?8j#?{lWRyKy|!j{W7NLt9m|R+9kn_*#y;` z5B@Y#N&Ff7`WF8CZ7FaO&4grTCEWqi^1?TQ;Nn~TI4a^MOM>&Td#0oA?f2Invak+< zAjV?S%S7)Q@r?}=aPh-40Z|vAVPZRjhJK?Pr^Duc|8US8?&mwrUiaYl&fz)j_KGC? zLDKDKquyLM8@v_-7k_&rd7fwYAFsVvQ{X1-uJ06saySQY<_0mUVa;e=Aub9s2V8w5 z`=)1tdnk+gH&(R%jZLurjdAMV*f;6l*f;6l|MnUDCTjvMN@xw39d+KFgbP7%ZuezB zc_Rq^R3rEw1P1;<=ljOm2M-?KzWc%I=AGvH!{%zQ2gnK8CpLb@ZT!1$=$-u+)A(y{ z~Df(g>f8B2!dZGP%4xInCJE3p5jeqZr|M(x+rg?+)>rCjI zZsW6G`9JA~XZ<+=@~=QwkBh7iYi*ZQHoZvyP@2H^AF{Rh7f{xNKRgqBjSYZU{})B& zzNnuKp8uT(c!uxSf?(>aK>!=?IhYK<`BvV5e`Xnmv)~*o*KY;Ex&QG^@+zHs=W;;Y zsRxtu*CB1b4t~)4dJvrZ#cz;oBa<~r80sDhHM$~)i8q|0jLM{o;hbjIfITJwIKMH;(@2;LIB{f+{OYew1z!^ME|+mpo(n!DkKywmIQP&0oBt{4 z2f?{7_x^kWM*vU{_4J!lK`^cdLK{DeCgLDaA6>Zg_JvE!{j6&=dYFXOQ?>llY$wIf zXDe@CkOJ|G;a1+Yf8R~|F^c<7U|O(GZYMb&sIVLicZ>NDZ)6AYqbMowW;t4Mp04jc z+Ka7fo-_(g;3avekJK^_w?C^cv1k*-K9=z)@pB9dGkc zlyKUM`_YkV7d*@&E(O1;+Q2YR($X1T2dx1NG*jtpV%e3qFI;-MJRFr{%~#+nvQgfR zpAm>uoM6wpRhS84O#w=Sgo(sZ@Pg)jx}hmxPBnD#85%R_ZciOXd77kqD%?(+wV&;D zTR>19>SrtOZl@of_#sk54@tV4q4{mozv`&V=8wx03KIAo1{%Ln%m?{nANfQ!jJ{4~ z4w<4X5eSl3UNIsXy0{Ws0Oq9njEEf6(+Lgi;WOP7){0)pd#q3k!8xUA1o4ZwJ1S%8 zsuMnax;%{XB39d>{`IkcA1_Ts zFUcBS#2UUdkA_v$>+vKts45zyRkU1YMVTwJnrQ7(4J;Qfth!lR#%Wn}WTon*=d3;I ztKqOtsk`#_g%h9@PV-7-X*16AEEit5r|2)NkUN{34>lFAlREN$_4b8JUf&bDtj;kL zRPBrse#R+hMPYGNY&T$$Sq|nb3xy`r%;k86d8ts#`X;Q(XEm*!Za@!F-Po&yQj1O5%6+AOon)zyuvGVHVR)xW7wxqFNgTCf1WZ8I96NrZy)nb13L~om0W%h#7@xnKPJK z%FEsTUpEk z7xN4yA zGo?jGqfK(al)jVpoTe82rtXgh{4yO4RAb41xfz$E9D{fpttGo^`ss2%PF3UnXz)yR zREsrb8Vecg@~5IpIJx3@&Jdc5~trf_mC; zC-r2aQsGRf7D#TpJn(75Zvn*=}QXZ=_}%e|MDHp3%{j#VQZl&l5IUrO7WAq zyz#&MKmLGt<6r*gzfZgoMilZ!*7L@1)HVoSdHBvH5uyrRC1%(EHX8zDXKtK|oADq! zh*g=7;+2X(Rv(kQ(%op^Nu`45ZlWG9Ks{c*ByDfT5R=@4G)(+gUat;V11caf!~L=x z7R&SVc~;DkJ$f!5c{YSzy!+rVjdK;!YmkX;>28u2<>rVv9WAp}^UN@2rECS;HH4n? zN_QiVFX<}86n+>VJ&F3Gc&p5E=;5fSw_>Y<$HU&*<_C9qsQydO)WNmD3+!V8k{Prs zGgL=~n37Pve92sXC(HUIPE?0F5(ch`u>ESqQsg3WI;Aen!y}XICf%rvjS~hx)XpgB zmr2?z^HEVY3yiBnN{$|YtM`NrG5bBv`_yDHk2^@4zk3Ilc!#Q2l&qSBIUXOy^w_lI z0+9?zyN5>7K|OWtRR}oFQW-7X-TJ$CLJ`;1IbxuPc{W7EWe3g9I>3vG$a&HUPA$N6H z^ZM5FA^D%1QQB*chCK}yZ7R`D#dd>v%D_oFwU#|?J<#SI)o@m+uEB2af|k2phm9@L zI_a7Gz8@c|XWG6f>!8NWDF(*E;Z*prwM3#QU^tUg1ESFg~@9(OoY|NBi__caAhHTKl_&9YGgDcUzARPCF1me&>R|^B;^(<~g z*gPKMZ)XCvSa>|_36LIR*Gy5jI8nUl0`9`olq7;w&yIfV+W2WXj;$z`$vot`CB^S) zLDnode#;6&&1&YAN~^Z!t-qM{lxt2fwwA}41;@$Mzqs$jv1m4ck0yi9y7op0iu(Uo zUN`O#@qX5oSI2!Pv6$5XYj?8JD;$Ql2Tez`!}!uXOv?RiR5rVL|BK;4L?~p>YFPad zBB|l5c>Gz!5CL~yBn8;IS;Z3`*Dmf$#5tTA!aOdCS=uyOUt84?^Oz~kahEY-KM8+w z>0(}Vp$$F3QG)IK``hUy=q7PmcHlhIaA4thyyR34wDD@|aLPPYysh>$Xd_P9wWgua z?llJh);q;Q&-~PN$I%?PyYFdo0y(uhDx6c!1FnJ%r*TVh9d4Xp<~sHP)lsxFbxrHo zsgk)IQg)?5s>MoUnDvwH(MqG2rDZdZe{YoJadQ~wg9M>CX|dAiN2GB_c^UUsuwiX> zvr$^EG~8cBK(^^@L8LuO~CF^9kA()dM5KYDS5zoVUOL}a)!9Ut`7yyCB3hI&!j z>-f*b%}SlY_{alX>1CC2Bt~4#;YrkAA+g<|4!9RDvK1D$bTrtp&CblsNWrn@fMc({ z_rCL;dMdeD_jqPyx_MLU86Zu;(oAiamJ~ERMO^aW>?;jT^QO9Fsf@HIXBd0)WV0B= zMG@`Ao#{CR8QCylvb&k;C=D0}IWse}0%tZRrw(aYq~y}>{3|A*=}(jppPHUi6-Gg$ z{67AlnOV64EUy^%k`UO;%*@*ybpChGY17BIwdvz_c9_B*pt`FMFBj@z)O{Z9#f5A9 z_^aW+AmhiwZ~XxoKM*wn{ z#B+6!MC$Tv&s6)8 z7A-|Ih@0ZBT+Ja*~#r>QSX`soN@+xqkEay4fHk=%_vVyBT%EIaD>n zyxF-nx6p=h$t=1u)6{~W7(Z3f3x7AuM+1Ms9VGE#nGKWf+;D&R{j$?;wU^q9WN+1R zRXAmwlySF&%_~VeAFD9R2cF5L=7Taaj94xfi^N7mR2 z=61>k>~`MOpam;;$StH{)`AEo;yLvoRgqe1EzRPr3JkqbNh@08Zx9{f4KH9qA%s{l zjJwHh68AjXzZgP?Cw#G4hrBh*zpYi4uV|HJbpwa;M?+Ufx&KFR{uH5?h+>6q;>BH_ z(=`x!Y5ssd@;ATbZ@WAOz#8Z>PJ~f^c*$D1R%(~^-yjYao_ZE_#0D$ksJfO7kMd-1 zzf{xR8P#sJt~A@N_Ep~RDUSC4f%dW7WPcFq3HK=sXPVU<7!2x$SELsoB;B|P8k}W% z6!5vHU_Brx2I&K{+`Vp(eABpPFb9%&2L{rFJu5%Sv)A(%q=oJ|?FN^!9h zTuM6FMMBFQn}qF%EyT_PW0-I)pQo@(G{yik)=_9wpT$6G#%jTwj(8_4ra&IPckph) zQ9TFY@a~b|EwMdKqdsP%vavH}8%?8vAU>Lib7W-v?o5A1^cYs<`TcY!h}H{FVL84; za?ZnnYoQN6xJ#me{A;qYbKhU=sNJYvh%XIvZpD(&U6Ott<4VPvg7}M??zIDfW0uM6 zQR}o26n`dD9JOY{Do)q<>Fn#=G+|3jAo#64dk1m8lNE6%&Gc3n%)t6=*L!hVCgqV) zOXm}LLSZ{t-xTDaCl!2H=Ayz-bP+a4Z-@`u_Ov-lAEez_mWnP7r#LmL-L?7!?>dMc zNRQ@V6jr7;2O9_(D76=sqb#gnxw_QJBCi{EhTuKdaC;98c-~Wjji557xyN~bYqYzY zyig5|Qm(=fKhFENu{VP0lw#ux`R z1^=QcLGcs-gRIJgx2nalN;I%L0`Jx5VDuC~LA?Nwi__E74WM^R&Q&&VhQ32TO1t}6 zUW79eNKlkMt%3Y9so}j1*JVzomxLyu0ps1$Diozih4R2`|VOOu-CSWfz>DR{;zzTR`= z)1=wvj~f-E!SRMT76suqi73!&6a+qA8^2!I0Y2kkvcJq(nVP_=bEFUS63=F*CQ)Yn zj5>w|H*`S;Z9+3>Dlc}_fHekYb3l(KwQ@SIXhjnnjhJ~56=vwWfqazH~>n$QglA5v(Rb{3N?scbQW67GM)1a zq+%%5*c^~Jqeex_RKvBgK#U==e*UPswJAEs%)Hp)GApBga}W<;BYmdk)gtj=S~7HW z#E!`wzH%b1{n6Ks-(sNMZu=O(r-}uB#=4^P?|ZS<@|d00Kmu95j)t0ocB7;p_m)|} z+{tr29t)UOe5e~z?(93E8U)pn9HhZj)K?w0!prPH(x8BJQG1SaQGl?plcfe^7Y5oE zd$i%pyn6WX3@u8wM|#!5XW$iK=q?~<`7~PCV%^qFSGtT}6iHEPlC~pl*ahN*Bv-}v z@oo3AxVQ|9M5PO$?x|{MP6U?W?LM4IP{%z8KkMlkN#SXG!2wG+YRCdtxm-EgPm20z@mlyo|+?01zaY)DDWxWO`|DBG?j3xRSwW78_i$ zpci%p^EL#bMi2TucHl#?X62S6keX0;ZRkR`pLL%Tg-}MKXA@qQ363mV`w5X^#cE-6 zBRa{V0T>UBt3ss1GL7lnS^++$eSr&pxZ*sbm?@9qP7%ddf!g<<*u&1+Rc|8rD)o$w zMr;h)h9$ro3yl}Mcd`YGk2qC#Bi4##r$C*;R0H~ALieF3E0lmLTt)O!I?brnIJ5JV zL4}e%3A>=8dF!Z2n_$)q(9Mb1_n|l~?klzagkau>dJN+ZKUnSc2%|I;%ZK|oKn9^z z4$LbOT;OY-;N_$4bPj;{V0CxF^FiBVa1fbr!!CRXPd6Jh%`8;wwvmo9f8wSC`$tE$ z(!dJ4b9RmhpGwNY-H@6wSZe}MC{g#|e7BC)?h9$tmZ$Pc?=#Ilh{|FsW=3c&55CP1 zi;97TNqI}>$0Hp}xCzC!vrKa#W%m3ay>o!9bmpAK)lS8mkx?3Tc}>OAhEXJ5=kJ2dYf+xHmU9M}PF=2+MG8JAFhcH4c-0U+v)B zglHZ+aX&kpW#S=yGap2Kt1jzZrL1}Zjw$hjEFvEs4u~duqdcOs8pu4iJ4(Cw!)giO z5}EoKWUQrwT}904Pv_I%78rp01gzc3mN9HVQGTQqqu9yUsFkF`%&G%`V>@ImNxBgQ z%h+mb-+BbdlF!}J@e?D~$OpPn?5We>k0(jY9QcgsjM(F4)ZU!fPn;beE0?B-296@# z;S#+pGWH~&Vwev41$O|ce;7Iin86xGS+kj4k z={|#7^-q7}bZ%9*9`tJ&nS=~3i{W05OUql78*`;zJDn@_N1W4XkQkB`LyU&ZL zpQQ0c>zmLf`%`*B>@YUtsCQ&EbhvK;F29G-pFF92jzK$A5lKS!Ta+ARMTwQ(i+7VW z?x}?Gk%E%tP$HtVv;kbVVBzMD7>g%3TlFfjg~gk|OG&?`9F<$6LGc7fyN>jZ$#%*0 zUALWVs!R*aQ;YRfy3z$O-rMocXiwDBW!vaOB;4V5)S9}aH$Bx#yb3s;peqQ0pOnn~ z(+%6ugM&EFlO9gY8zQD%!OS>3IPZ#%9+dky6~kOnO~Y_At0)iPEb%YITIH%34RL60 zMs=eUb2lmw*ifj$xZkJnpmo(l;99Bjm?^s_;cIbsKT}OqP(23`6dV>uJvFTZi}Ip7 z7awN%V6GR><8p%e+jnj~zBjjD4*Hj)MYs{vw=iVlm&S?-Mo z)?q^$2d4?^)Nz%MIlRt02`b@o^|33Ey}FUxbd7=v%@qcCX&2Gt04ls5b+e0@oTF@{_9Gl5&V;vs>fv_6nekF3y+TccM5!PAd2t39 z&T>kHK{lphPTd0(g^K$9><~>+U9$3X;7Os1WH9QNQ5t8XqJK0uj&nv-@kn|nLF=Fh za<_^^es*P{y|i?_eZ6&!A1t)4U%PSj`t>#i!9gFtgsNBCHsw$oO+lQ zMY7Y6Ip(!khVs4Bk7rdsOZS?HeVJ8AHIk%zvmmp$pAB&+#*ToFgT<22K!sc%c(z5b z<=c$Y_;8|UUAy98Kr!N<62?F^)2q(3^9W|H_F>&CN(TcesxEQR3h^rt=fPrr)GQXe z`J&D*6fUK$a(^**pMpBv{-Cr_cMH|-){9~k_wG8R9;oLWNmDB!0xfxJ*9w z8KT(Kbds6?C^C(ZWPh;50BoR$?P5hW+&3#TbJ(|BQdz-eEC|W2iVmWr4^pGu58LYt z0UZ&=h|ismcFPzc;$-ujPWI9)j|=tDZkBgrPA~KkF-re~h<2|Gm?ah`zN7wObW})( zy1!ZM3{&Ez*{GBbIV@jrq?+~3);6cIl((8dnI)&&@c~Z0tf$@ns28t4)Z9Rm8;{6L zFJaeCh`XR11k^VIdPJ%u6+VoM=TUxz#2=B;-A4~~nsbwn-@?c+Y({A>8{DQ0jc_~q z5ZaVZVX<2dm*?mC<|mt?f^$K6+{()ah2zdZ;{?i^D!2On1<+KSWO ztt7=Zw!(zDTfFCmI{CfbMkITaOVw!6yq8sMG(upm(qxO1JBeahOKDbpu%BLge{+`2Ek)9gQ)Hhgo+rbZYJ0lA zyDiz;dSCr8J{kwJ*vDhHd&dGf0brDvSVga`DpXX7UiPe#jG;F-_zcU0&QN3{O1;q_ zyy5n!Hwiv^<&K^(jA$HEVL4CTEbZi@ras@%lUzhlE2BJ*j^GC8^hCt!oHin4lBF#Z z^568p&v^NPvR2b0$0dkUQiZXRv0b&Nrsq}jruuLOHSw&BX=R}L{VW~kaRJLJ77HCo z@#lMpQzR9ZQ^ffPNl~gW8kLYI*{Gb$ligY8&#d3WBUU{wDLPhXtZF1>qV!00DOs7_ zyo>kI|5(2pZ`oXXIeXiAtJY*YUNbw0^L}&`s%NvX?0&8`KM8+Q+vxW8TyK7kP6bi2 zVtsH$bb`8sz~kUb@`gwExQi!IjxgNWQw+3HlU;cxmoS2YE1@Plc)bf2{2`j!`mwl( z_CRZFxpukf773m(ZR{DX^D%-G|ZFr#og?ZpQqhdZhv zKS{5vmf7UQds0mPLdlxxI*z#59XWO$T}(@xkMGmTbQ?iEj(!mGvB(!n*VvaoJ>(;4 z2cwW;V#WZTfY-yMSMIApls}JiwH-P@*W;XgVH5&-NfpT+jy@d5#Cx!*K9W?*RxY!7 zPYZbQzljePPIG>L(e(m}5&jCIsG!-yg8Owb2(q7D*3s|(Q*EyO`k1*EH18T~|MM%i ze~N_T&p*6Pr(Tew9md)%_eAd7o}CM(TK@?Qwg2}&Ii;bNS1sTGa}kQJ+G)*NK$$Tc z?f)moU1qI=$OISOd6AS4erTkXxR`hh6#7t!TsJlra>8$p(%;E;RAUQwM4`BAnc7WW zAh8fVqSz~W02<&9wd3-VS%Jb6&Ic!pW%1%v=ogPC?hs{wQ-^@J`UP3lQa9Qd>z1Bc|c}*gaA9 zAC=;U3)ib`@vxDk$?d3&Vb$6yqXACSXrMNb$e{WX>qU$f;w3JWo>K1g(KWSL=lz7^+5)W1*pUnK-+(F*Jym_$I9`t)-7_H6jq~UXnQ_fiK#U;NOL-n1a8x7;TS-u(X-Fe|uS=*10 z#5c}2M*T7w_TA>pyUlpmkGd|_*7|Xjg2y9UhT9yTi;7~0$I|Xrp2WKzHtr;FZ$5Bo z;x1WTK1e77h90dMSGxt6RzXTmr z{m~#wp+CTa%MjU@>&4wszkjrrr77tRPQCTw_Wi9*x-cq95nQ1gTrY?n9i?=?jw~Si za4kX@QEmCnxQNU9rN8nwp5IPf)Y1tFr~2jq6X-m^pZ8*ytv^na7wy}by96HR{X1!w zm%oP5xr)MRj@QBmS=W^WutI7Vms8gDCqXSE7nbuL)!Z`2ylT7e$SZX>%O};P_qUE7 zrwN86gsX@31WC4{GTu5$%gCjvN=Sm!p_RPg4tudX2K#O!+2g1ur>3y1N10FCo17r5 zr*nchHL$6mD4xo*2dRE)N$W1ICwPCf7h{fHpy&lGORIZvT5gqYV<=0R?A!{D;gFan zh~ELgd98C<)V~F;CGJt<+wdEQ7ug}KrwFnrpF}Q*_Ti>SxWqiGIr)8=YQi~XH zTuTB;$M5%*lH*{D<~Z0D=TrwQ8`O`nTxmqX6~-edbknNLmMgGI{3jpgl_S#Zb2}Dm zf-O1BptHj3Ox@EBZlifKltD=fL%F4(jzCnyDi(F~E>KA!IkBaCM$!lwi8eBj4)gH& z9(I}%)CHqlUDL$Z;H-foLQsa7U=9te&LFu#aX&*jqV}iFp2eS2-u*Rqvm8m7qcVo6 zobz)IBZLQ;6S7G9iyH?=ML0vZHL26g`S^@)J5b5$Fks49$nszwq7+gx>%3A)VSTgO z9znx(mpWVFOb&&b0_>d-nt}ntS?@6U$bC@8)KS43OpJZttJL|sU_+TOciRmQHW{}2 z%pJL~j*D`_3`yj@vUOqPV+-rFU0QB}lVjN~k{CHV62<5A$Q|Py){{lz7Y2W3&yC*- z<3)}ZjI$d;|FmBPDW>BC*lzi)kLK+nr4V2X%gw#mY9zcDl1j|fdINb_khGSQj*wpDln{tGe z5K>+P;THHCCr7}y5GTP4RC5mEmLwbP0N+zr{lg>PQ5Yd|TYTE7`mS2wRV$@_oq;)Q zNJPl7j7Rtk&{;<$7P%+MIER92EBPGG%13Z$r)@14PQj{05di2e;ZIzDV+E@;1yDdt zpNV@>v)(c}fp@X$0bowxQ=(Mxa&iRO=OI;lTzt}k@|hRk=>{M{v7YtFwxzjCjqM4P zY)_3<3rtw*{(|wi;#do2KpF_g@P^KX@p%(Nm^80kgYnoKm}!_3y5+^$IaXTC!DG)o zQ<(!*owdw=?V7NhH@-p4n!hF%@j;U6we{*&zhB!~;bh)Hrz{LSbC-P#;|K0xtG9BC zB$p;m&#QC|8O0V|I_0t)-EH$`D2krpHoC6p(Uf)+Rq2di!*4NE)A|^&uEx7_ax(~O zc>L>y^TuH-rXIV@$;}`!<-ih_S1;DoGhqm0&ID&L(tshB2~8l8PLB?mRqED~Qw0w) zP;}*!&xz&qX2ltCg~NK&KzALbqd~}fPTphj4Ba#r)iKX!)K$QFs^p$Je;Qk6qs47$ z1yawAbhJq~-PJcS?F0I*YD0Nb-BzWV#Ws&@y5V%&yeWxisTazc1=Z9w zaG2iwMQ@aTi$B+D!E|d->ZHn`mE|%B3wfO*QiJcdt`~*Vs>Z0pcqX?i3rRQar<{?- zYZ|0=P59v9@&B4BN!P03z+l7%X)`_o-B1=iAmMK$j6L2)dCiFrH*X>XKx_>z8dA?w zHMw#wzAVcbWu#*=dU6{D`MsKa@qul~-~JiI@Myd>q8FYXu+V3Ll6#`_WGj8{Arf%GIb?T%ZQ08k|7;2?6O$;dP zDseSMovBA@i*!fiRa&pkG}m+IV{%*SWK7NuJ_byaH))m5eQV|t~Svls%?pu>-nDs#~~|2W@hOJ5%J0+N|=ra>u|mw!9k-LzoN=TYZ~m2VVz? zd5P{V$MCjk%3&YUn`}<~7j}J4CZ<46sfm;G!fqIgP|p!HiFY~)q(+{bov z==rnlp1Lx3tu z#A0%kBJ+&f9}a?0(FwKZ5Y9~P%;`o>=$!KXcj@M-6Z&4m%>dof>DsMZ({uQKl=r}r zmaEushXlQa6dE*)S*i+7%5-&73kXVc8mN<^r)q~Jr_+#@s;DfpG6|sqyCYo3Fp68O z=jyrmdp3f1Mqnh9>Grd(7BhwV}Dehmk% z))sXs)Je*5zC@m>XK-b)ZdNg8xzSlB`m078AuYVV@bt&8W~|<4g8rOg6xX2&3IseNPV#?@=> z8&}9K$`%SeI_Ja-0>{W`u^)H!AsFr6(ONKFEpB%djRma-i=W2{LgciMOnP!64#A1~ zch&c#bz4$;**B+;9pW@j-Mt?_&34>lhkSg@B;DluQ)xtKz?$9Uq#kP1sWQA}ZQga3 zY4_ta-ZyWC!w8|s#JoEyOkk7*a!zjF%W^uG^g1;yJ`=;FHidGRaDeiS0sU+*fg(*k zIvzqCwK2N_-YzJ;=rNTxUeC^?4qq_weH_Xsi3@47DEA9DyfVBBfhfCloPE_;2mEfG zZ3Vhld59ZFX+uK>NL><$)yH#OQ?DMedC9v`HgxKj)4Cbl`$=g$C||AE%S{(8b=~ER zK9V-!2+BHS_tY+>bU4D$8C-TVeE{`RO}Es$4vT7Yv(BDVhkDy^Zu`>ehW@U0d{V@- zmG9v~vj)-ZVjt!)E*>!(eX}f0i6?Z+yHlcVN!}flGoVFVLP*Ap$O#yQ@?)j| zLQIcZmr>YdOg9*3--FABBq!w>ZV2FWDio31AV4_?gP8zB_vmOCKfrDCdRaDjV!U1W z2XP8;v`eU_gdh+~my1wdX{sT;2(Z#Nk*K`E#Thup?vtnHQ$LK4W*N~*+L7+OKs|`#r`Zml^Vf#d zibEA)oSc162S`84j}Xm9iP?~eOASXm{iLhbA4-P;o2-63= zH$Sp*-b4*{gt$?|xlIS@1)I3FCF^xU^4*fM*K{%}caGwssRM?)zy>`j8P3}4`(QCvClyVyE?<#pJ+m8*Pb8n=HxR`!UN!Z(W-i;uYr3H4}?9mF2d!ZJfl|nia!#3Gc4FW~0{91XkMLcfk?D)0(l>tE+ zU~Pxv+KtjD?NWas{j#{{?l`ig(LGUEGr&fxRq$}}WljDJa9kD?JZ{km9jcc0T&Z%%&h^4kB zj8+6`Q?=zXGlJhVQq|u~)RKUWndTOt@p_uA1f)-BZ@eJ~7OmY%@6T8Xl-5rauFgTN zDm`tLPH07ym?T1v1E-!MI6GI*D8LrBn?{>LfQ%58C@Z1M3SHeF4IH9d(v#^6y}C^kJWpXq5dq)p?N;4%URt;#k6q+e-|inN?Uum))tE0^_nfex)5n>pl|rz<@5 z8JFtxk(~9ph28)P?l$70i1uQ4i)iLebSs-$*<0cEu|9?Gz1EAIAM!+TqGy)_)F*Ck z0PY$0pubNo)U_GC;g14ueewmZ;WuhtL(8^tW@aiDSh*13DYvTnn3cNDjjJnkPOx+1 z+KM{lY~!69iz|FMrE_CJ%OTy`bhy26>nV0@4Qi=*v#|hPG@wWH69rlWItJ#F_XpV? z1d5OIhkBAOtF?D*B02>fc?-QJDp$_j}+`My6*LYPd!SbqrjVj~&TPH5$ z#|5$q)GlS>LfTSeFFbLM1zYn|ZL$Muz?GrWnZtQeMD%HmZQ0czxlNLmaoUTK?3^x| zGY25;ooK`crQPZQNv3rMKqo%((y{F3aopVR^_m4#6ZK5Jr>-wvzkaoK-S;6??l1N3 z#_Z<(roP#pMn*@Tyn9ejs!rFi^8TOidiOTu9w{2+B!%1yulA!tA(=J?qjvjIv9EYI zJ0nhgX8ep{f_rWF(vFz-M%iIXIR>5mnp)fZfK!Vf6=giosCJRb0?r|?Q_bl8%%#Y^ zcz3Q{^ZMRg z!xk)-O;GdLtX8^n?pVUfZ+k_r-;L3vob~J;c6ZnZCwq75Ul!42c-5Q=FH`1DlU`Y$ zU^cci_m(BikJ#TS{0;<3q~wm?j^9$5*vP&hJlw3@5nDZS%a`#WGbs<6F4@K*N|-Dh zB=HIB6R|X>w)V48zlS>`vgZz#9FGpENjyA}3UOXOi4gzm-8Kx*mFHPHX1-bVG6yZC z#pca0dQN^Uy0#NMkk`+X$baWPEvSY&ORmJI!01pT>UG?Pq-!?idgnC_7olY5`PzM! zyf}mK!}y4HwOeJD!<=nLk{~fU*@l}p!?pWzgx(0NNyOdVkCK#*-`A6Mf~@@AY%uJ{ zWjw0}NkLaFaA5-k@`VX&SZM zphj~MorGP(91C0AiV9pZ!jxH8z+86k6>(sJ?rSb`(@nVfkgT>-mvqIxHFFo zo8^+PhxDQA~R`*~EvoiOy7tDg;^9y_0%+xWZDv5D~Do^%cKC)43i zs=_4v@M)`gFOEKxfTvap6y8RCJDgt7!T_E^=`)QR`zmitHlh-lcgIc6+6JYS71rSF zZU(B%Bs5GrfOZ<(MV9*)2AijJEdu{J17~#0v2|)U35|Y?zQ&C-p}L=`0ftl+{kz#H z?P;y7Zox4oYixMlAdj01uOKvg2Ajr*FcytTk6p^PZsH7%1!7g^?^u72@1!xl0x(qa zfEWvc?mzTAG2-aZok<7tASj^hdx4?FAbGftN z`e9U-aqgV`wy2iDOQxSns8vH()bU;k4uKHa2+==fC%U6EOP5G!i{|_=rAqsBipyq- zm;?;9H3rK_TYWVwRE}6dB?`?00@&i@6O2BAfr9xo%i=d0uvdxm zc%{Cl7FsPdk7lJ~w`5yQH>koq3OXf-Pdyq8+sIskSKi8^N^R`U1&}$_xRs>T)*1xNsB@}@qY(MrIPIDYv|HLC?ofUDUO;8TG|Mocs3JKP{M!2yvmyGr`> z%;Q^3u3B@^qSK4q7W*kU!9KR6^Yg-ucmnx(ZO|#zKzS9;>r)@bN~q@>t-_SjK_Q+D zp$xn+sHDFZ46f);unJ$A2o0g8;Tux4$#KJ{>83TIvhGay4z=vD9;>iabPiq&HJE3q zJXvj^m1u^dSs;x?cVVa=(`OOJWu0|2#^;G2|JrAYDDr(=RI$lPjB>hbqI(&vBjIIx z35l$O*YMG`cv7XB!G&qYPHa<)Nj5uhdrVA(o3I(WyH(;p{33kCfiX%)EpRQ}r|t}~ z3;R(n88;0ba50Y(oW%KNqO=Nz3sonIpT}t;v1uG&q}3}~qP5bea)`=X)0|meGiB;~ zOot`ChlK#Az=O?oWA(>sp@oHAX`ZH_%+ez6@-RvaXqwxe^Q9P#CdB<`Q0bmAGscJi zMEFOc<2~dQmVbpn6?qdElA}(VWimF_wM&Uezm== zlM_2C{U5{HWEF{FkcB1kiToZ|;M3vuHtqhI62-KO*ORD~=z*tKbFLbSy`$5-S5b}^ z4}LhAd6AXgjh`|!%NV6B@$UO-d{tF>A_*_??YwrtT{$k&znovZbJ) zcT`Bm5l5XQ%n1pcX5S27usViyb0Tp9*3GO;R9P!Hg|8RGtc>kc zxc#CqTj~3AhNK7%p59s3Lr!aTm z7i(6g%>!bR^cKIWZ+qG9u9LPkY|SpsUYWf%dwq7H6;=vwY@k;io5|fyH>io`&GwA_ zy*N{?Nn#b5t!d-4v0>iRlH;a6p`#Y_bNGiN7Y=@CwBR&j@Lro;SeRXyU7TH-y=ve! z#kt>Ui4YB6yol0xC(4I;bTmpw{n1`L?3UR<++DqY=ho`x!_C#-eSH7%2aoUFdARoI z!IL{{;VFl!nhTIIZLJ;?1T?mdn+t7+lWwT##s)Npw$; zu~Ju+qPxuqdpt%XFDyoRmAKJ@M&)ybk)~6^Qd=z{Vo*Qp^}w6mC-1*seKHuRMZZ>2 zsH^IlIXkCAA!`KTQ|gu42eG5)Mz6=;@4wIAg8_dRg>I2&clj7m>A1JUU3tC-RC zE&GrnsBLvXn!PdR?Cs(_eXdpkG)f*Y?|{G-RI?i#v)S?F^4;TF=ku%(2G%z6BrMR0 z7Ob!vyuw@q6raa3L{Q^=qHz!b32w;*$MdGM-ZvPSLG+@tfII*ET#%y0n8ePsp?E5N zIZ-!kAUBAB=1B>i92LUNRr#4=&C(`m0Udz|+Z?*Uoxzte(QF8EWnAA=iv&t_~P53EQ_0N(~)K09TD8 zQrM8YAM+8S&A9%yYH&LlQ-y9PxhR2-L6!$D2oY5Bv+)CIbgMkvA3c5b`?3n>R6`mT zT9?I=#;(}rd;}=O$jyqq>is5~-+m|tSQ&hJe zh$p|PYu_brFT3ZU96c7&dbMlb;$<8nJO2Vw<%(*ocb4F}0>4JZJ388)PL~J~NG#Kt$SE7k2tV$8h`5z62 zcX2jx9+T`!-J+kBost@ZV@rMtqZb)uOy74|>MVHs3n|1cljE2>>m>#5f3pV{yjld= zo)_y%cMdZsNnxtbsyK~y`boNHsS50g212i5GRxoP)1UazMB-DKOy?c(EjQ3st>tk< zA(3cUWxIq92FG^XU|ALtlsdCZ9WiSFqh4sE{_&ekHwTs9&pWiVfDhI)QS*;?=fuif`WQ0>!hmMvX!6tJ4s-A zfJ=2;TA9%9xJcfJ=z=oC=|sAqQIBQgL6v3Kg2KV&l-bBgRFPJ7U$q zA*2ao0uqd^hCpg5B*NGeA1(hbcFY8Ap`X6yt`4ALc*;EE1b(gB%Jgs-2P7cTt~ zf~wS4ohxD6G-eVg<1Cv=P-D&#;0b(t^~c1unZOp*P1Vpw1!47kWYYYFJ3@7)vyJup zUgh^rSy{~Du=aWv=vL*&pZKsAGeVuTrlN;cFIur8Qrjr#_TamDCg-eu2Z~qdM+y5D z>rZNnAzerD5IYf|sCCO#%uF+IOg?sdT8;0JA$W~pb4p2WOq7QZCjZL$mITy_6s=Z;v%lcnU*gEK2!Cd8B$3)Cj>A=j9KfU; zI<^|Pbp_bj7e;22JrE1aM=@!iq%j#Yt!IxilhgL~{>Gx$r?#lr9w%7HH6U_5mpB#1 zBVsB>>&61+w>1NTg`tNLQr{S?LBg0d^y97FRIS2o?UE{S&hjwJpBHqd2k3~SR8h8? zVpjE&GR~vE%2It|i^EAup;%DCwl!DN=rzwQ9=4bz9qp zL5k7nIb+Ir6Ci*(DEzQ3)1%ii2EoZWIw37qRyPQX+#jA2?r11(d6LKD73i_80e%O5 z0*p6r0*o0+2O=ENUVvFsmSC8%K=3STG0v?z(pw*0&`Gb&JjfiZMg4w^^XVRGFb!zZ z_`Okr^USt{amjIsA4NIk@pDR?rRbK5v*3#ET(gP zgB1Y}nIsT{&pfTXwHuq7D{RM-K!YI1l-vek8A>oDi2HiN-sTZ_>v4WinR^$=~ua<#IJ)|a(2X+9>IEByQE$0$GRIrqL9SCs;HxXdS}mV-@}^ z&a-eug~S5z16%;#c{lWsdb-{k>uMUk&EeM^I@Tvpn5SwH$Xq{3DV)t*uFQjZHtU~- z7R30`_}qXN=`1lAs~yH`Wi^W&)%qG5Bi+$zY^-UM{HfEP-&L&_ySr}msP++$`egza zGJVfW?_*-eY2J!A@E)20hE^}iiV#F8o*yYT5x_+P@R(+3c28>M%1N!{-4olmR%t`n zjpjNhPsgM|iXwqHW5W2%j2SPX<(TPU60~9+3(eD6ZQ}0gdgeEdG$A*ATuuNq zZ%TK3G@~{pD|K^R%}SSy#NWww_=0Y$*~%N40IM(Q5GQMhGCLG)@N{yVJO1FY4C%~7 zc;pPmqon&hEC$YrpWIFh^c(Ea|nx{z%VnOhxo@RqPMv8D` z??7a^tVa1VD}xF+)C&6kn0+UtFO%&t=Okh3`SX5vK5 zig^k+V612{C18ogiLdRc%#K5rS`LdyoJ_&Zo3I z5kekAD!C&^LmrmnJk&@(j&~o=F*VXY2gZCErk86ib9A?)?if$R+Dui7RXT;&6gmNG znn~Ye@q>b?U$zP+P^pWhX1BH?!W{9%o)SSR9}4tz-I_i6s>nR5+moH9v_LyeKhnhR z5#{Vem18laNLb9GM7M=uda&4y7#j^}BX&R2;Bb_Q3rJGv`+rXh1XD&8j+-5r3&sI- zS49n?Hjq)NB;jAEaz9EnGy-uk4)QD#uEr%iybj20j^dHksZB=tu~Ed1vQl@}zpAy2 ziRXl9<)5JeI7c}eP?>g8OW_V*^tx;O25?GaE8d`%vJ90mw=9S-tkEu3Z`5VBq>nTg{#1@#J>KXxLK9|5+1%bEql1iw|B0hk@qX0 z2z);3N;WTZJAlX9{jFY{_S{>&NTIC>xiA8%QXbx1h2*DxGi~H^$?{|mm!Gs&R59B5 zY1}P4jfE98;OxSkMteo|lk|C~vACj&q#vhcr?I4H2gYVB-RT{iw&5cmD~eCS$N`WB zGA8G_cR*wu7OkYqO7+I8-7X@4-FNyVjO0DnLRddWeC6!zr07O@5Brq~SE=dFky5g@ z_2$in+vE({ODB}v4#}qEmM04!B09V}nvSg-aqDQXll5;MJx-Hu*5f>48a9m>xyHh} z6{#7G8|@VI9&)qAofl;u@e5{$@?1@eDjh~UQFl~?opAeZYx~CC?bU1Bt8)HZ!LAeK zgC-pzL6JM{?dx~9Z?$v`5WG&=Ath^-*Q;yW*RNGxkA}|6tL9}l>c?p>%5C2_7Pqfo zao*>>CSu!~JJ}1T(6#OBi?+~ylq1D|H;*Ia{d3AKZePDqDVL=6<*wUu{cO||aBp1S zzP@1JkKZ{rcMW_1ost>h=vgs(tjTp}pa@x}WUrHxIIY8STZ*BH7dPb7OUT)sBf0 zCno7$GfofUel~Q0T-;u@XhFU{xETyUvwwE=q5#x<+OY-IcwY3+otcLn`iyL-@B!k zVvzLXqvkNmOI$V6+>N>p6suRZZ&@OjviNd~qQ~pow^nVB+~#4DA|i~MWGt0gx;Ju~ zzj1xr1!WlJ&-<}63TNhvVH|h&n>$gzpJgs0+S{wnXi7t&tGBmr*x8lc^d0K!qhgRy@U?KC& zht|>wP%*BXH>Y(&4Vt+b93Yd)bwGv-?atlpTi3CmG2d08c{j^ld2GdIjnYsca!C59 z5tN?%_1@bsAASrxdm`O!8TK}7tkP(x=#M(dMq9_HkVVggfMMJU*N%lc{)Q>F66vMY z9v%}E9Wp*s7zkPa2_3YZkeW_F6K)5o(L3a!dgdo~aw-BcZzdk6$&2>wjLj-`z{{n+ zpwiJ=XgmbbSGmtr?m8su1uLb^U z^VcGOE%DbC{<_LvMvT!X{7(BiKfl3W+a*=CXnQEIYpCJZutp5uOigwT=jaxhLv(wmsU%~p8Ifsad@TCaTGZW-{cCC0&C5-g zwCeWN`$?RZq$}|0iuwZ_B4#JlEXt@H@nMm$I7++w zd6p(Wi}gLk#(4oU9fMd9#ml#XJv=1HjnVq?kes+y*YR%Q81dUl%g6SuQ7J3Q^U6&C z*HmdR3^WTCJd%$BT@%Enr_|JYPc07WXpQ^xG?TE=qT?}XIaEADu)*33H)iQZj$YEE zgNQ)+oL0~(NH)FuP}fW(CPzr1lkyeF#s}24KA;n79?7+A){I39ijY-DgZ-o%rv<0L zMSlD~?k}d}7r2C^l2v)atfSsehFvpMHmdyM`c;XAaInipG2r%o=AzccYaaLM2Fxr~ zn~&B=4_teHlW#;3Sjph^;`&vKa(~GSP3R?)V3B2`9<8y_5E^-tXc$Z!#P69wMV%E# z=TqfZ=i4}&QLmTB1r{6$f@J88Rs18C0);i4cA>dU+LWXBM7-vwElaPxXv(x7I zAZjv;;~)UX#meQus>y#kr^Ds^rJg5R564X~GtWt5Vg-f7k;`&x0mhYKbi7z6Lyvnk z5E}u!pB<{v&>kGsT+Wky6&l<^ns=QTgAURf%H$02y!`cUfx=JqaVLKGB+97~2};$j zJ^dIlFlZ8G+yPJ63*bm9hCGiWj4IpRE#k6c8td+l(&v13b+LWz>UF}7lcik~nsf0o z?<+(aX+TaMu~g8b(3@Y`%zLVxf$nDgNR9qNSy6<1h)(IhI`YypSGNNiqI;bk1ITq@>ZV2yWaDvB}P+(h~7y`5w{`Yb~=1q#Cdad zFHXy4wSnweW%8WwJHeiAly~Fi&F~=3izG|I@i?)V`!dSAuvvD?QO-&F9ao{0wsG?F zge)~p{-Nry(fo=I*ms7_40ontYGHJ(r$rg{`+OA(A->Kn$hZ*%Lm8+ThZreb>VABP zzWKsmF}x@n{-)<_Jxy>8$OzjmTEe0YFx>0@W{rE6`(oBMKe+47B;#Q%OLrwm-Fv%^ z8-0_~zoQtk8D|Wl(q7K!)gp~%YcwdH#CfvoSFYmStB5+clYBMpX};sVuGZZe?d~T2 zjYrzV>D3!sB;H#j>-HX0iCd6cs}zl&UGtjK=PUI2AMfRu7uJ7EM!||*)hnS7JZv4M zW#pqlh^Sakh3+(=h&Za7LKSXiS*d>aPH66rfhvEDaMCBL$*1q$@Z?@Kubptu{?V_jYmA#tAjIeQH z#Ou9VF^tW8u|Z;1I+qz+%DV8_3nnA3wHf1zOfKRm2lDoIe2{eG4L+=+_t`yq*u?!; zq$Plb5gQ_dLuK{XC~SI6*aBe5yFpHFJ}6xf+Sqg*$8L->44fya=M#1YYt<`a5_Fjb zz$yS1>4T%ZFNE+oH=#bF5ZDnsophuWDomMW{du~Q=@hq$85LW77A0G56(hwp8YeZ@Q7YH{MN>N|OkZ5XghN-%3FM4~j~#`Qs)VRn6JG8vCZWTE~^_!ECM z;EbEI%9$>?Macxlm$m8^Ni&rmjq>HzT2FV8iL)`zoneh8P&u)NtU+`1$dDW#u)QB2 z3Tb;RYCrCcaBPztJr*{3?1o?>nGi#kkoLu-R4dG%2mqonLri~(NF@LNV2;d=VX)O>Gp!U7|CXo zm&r_(l!Yn`xH<+*z^~S@duV)QKPO-Q*>2)Jj9g5A^JbXrrCCn4x2j3YADOc$Tt^i! zfl~}-Rz(G!tBi{>c5b}EN5Ww}^OiuZ=f&_2R+4JiBsIijtqbE!hUS{^-Hs8H+2K%S zmiAsuzTjpjD&poS#|RIW;p(srKOv%;gitBDw@-AoYJF1n-g<17#z*vMz0JW zB}sok;e_8e25bIU)h17dr9NyRkU2AP`av1tb*#`66x7QjhjDx%l8fvyl$b~Z$L)?| zb|PV|_F#)G_hY@t2T?kT`u(HttF7nBP&{mM>-l9?OFGaEE~_Nf`#@`{9U};rHrVmt zQ;%#F@o@!{WQn;SAJ&h^E)z$l-p>TwF`+tu8S^UuZ0PVa&@C=cfH9TIc-lajG*z*I|E{H>L9aIX~}3YFJI~r(6}a*8>g(= znP3LM3UZ}K5=kO4xOZds@9rb+cTU|&VKB$(fw)j$uVtnHl|NZZIcl?GBCNCf=+83l z(IOk>q#5JS7ceMxO{>@)OPQ(hQJl0w9M!F6vABt(uv%JbVM)&aoxpDG7(HhDL6$u) zR6lthJLV*_)d4egBtHv&Nt(6+2;%|;lTzE9q zW0t`Q8xO6@NqM;;ut7H)I%{D%+-@&wtDWqomk}~)*Kd_8xh)b0A72j+ULDp12Uroq ztIy`fjBVIMLxB|2QSbgC$G^Yz~(^lAhXjc`TJ3! zcH%fy5flf16_Yv}_lvk=g1(LeQD*itbgmu5A}A^<-!W9~@X-I4y|;^vB+Jgk*sIZK zhEi)KOY7a$%8OgUoS9?~GntuWkyWhD(y*#n)tqh?sUoX;Mn$SBm>DFaD>EV|B9bgl zPmdRdUu>`c7V_@G*aZZ^Plmnl8nWID7%*Vi>$M?2`WLVt)-N`&u;ix&M#gu}xqp$7 z{OjtGcD*^RQZnPlz2}~L?)ksx5|CU7kG`|}7ax)CChoDl3nHy@#36kF*Q8D`lZjGQ z3&c+l#g$l~HM?Y!nL1WF&H|6VYkb-U+q)`gHCu2wk`hHMXd=dek0l9@w-Xm)Z)XL8 zyOMcgBIHLcc}_gYPzFg#`indmMg@Wf=jj;kMhZ8Qs@|N!rKSl1no)Um9&G_h6;9I2 z*Tx9}=;bk6N@!quHccUMeba(hvztxn@#-UBtilijlmANci>)gisX1=7nV^Ck8eY za6!5aa2t?(-JkvC!kNjIak%usga?4u-E&y5&uoev=9B0p?~zI7o$04f#alnd^^0|5 z_~FI<{bv71!?ZuY*sL(?fLt&7S>>+xf@HMO=^vi5_x5CBnk8x*W#(5vMv_*b(^Q$f zad2IiZgh*aS0wY<)KF_1*X1xCK0Ya_&$4l%40e$45g*?})e8F~P^4p-PBp)d1D-Xz8 zb`cd2^x)v)oGnt&yW`W9<**jqb$ZJw?Z%N!w*uXvyUaRS(5{wQjY^C5i>$&c?dm&@ zfoWf+6NqG~)2i`?qr#wC6%J3sc!2v{CT*5Vtrs7&zz*aS#A<<|HiY6c(2d@Xc9o`C)_0forh79!vuSTJeyaCl8bow@QH==pjckM{<#X{#XWBbzO z$eF%7G05cId1iI>Zevn+k0Eby9Tin4tF2lpq>0d)q&gDEm*NyrpPm^hp@NG_h;Xlo-5+*U49$4wr3F8l9Q4+vXo%%kB3&xE6?CXdj8}~V)b1zyiFCN;_#VC- zw#Nf`JWs~Hh~wR0PNlV^k2%;~%HdR|l7$N1Q?Yb`OoucnVvVw|`FH!a zYzY5~Q}L}`d$FEIXE{+LGv-`{Swu(tO8i(`Fvb~lb!uX--vq(kGc%}AX=EKqVaSaZy>xNL{UaZCqB52`Bd%S91ypm};0JsVskY_L@0$Ftzx? zaA5+*d~mHFC&Nzoq=_#(+4}6)(ivrlQwXyc%$7x`Z}gcs7{q8<->VifzKya7R_2G7 zEoS{q;aDSEgt&{NE7KG}5x%rx{Ow}*-_3@a5cLZxe;toTPSTMs$u&n+S;_K?-)OVY zWXQccO93|onN^xC>SnxKY%@8{D2uzDY#{AW1wMk+XTHHV-3nBn<7}k#rk%{e#%YwD zt4HCv+Kmbg!bWl$XK6x*7CsKM7%CdwOy_P#dm_Y4%*~So5qA-^-Hi&K*+y~-qNNat zHGb@LboQf3zn*+sdq;Hm!(?N2YZ^aPZ;p<>cIhjfsKC`*Yz0jYhh)pCBe4dohr0-B zh?uF}7=XFD$2DQmDW?LA%=G%e=za{c7#b#4b{A3hu-#Sbe3_|NvpF?_5 zjpi=j`i&d8Z^_CQ;V57h3aqNK%GUTMG@ZQqCQ3|JaCMC@kP@9AZ6l1{S&ce?Uk;zFmh>4s9z2% zTKTCd;YymxyR%=P`N^$cl75Xw@drP%)%o?AKl$BvX8wg4Ub{8Qrh7Qfi*)$4nV-xQ zGcz-eC=<33kQ|N2*EW`;8}U;mjO%*=f4AHRNQ=6Gi2 z*3X{eEX>i&%&nhyx`}3H)Z?F-n|*h7&dqPcX_GFF9p}i8G`*Na0O zC46}pzJ8hI;dk1t<`VtaZZ$_^q}iKu&A}y2@6Ez7KlkqJ>|B5G}1OE@o-oBtmRv zaTNf*(~%&l)|B{%wNkuM13nu9}Pd`BGQlB>&GlvTnUJDK;Og;4~^usHmj-`;H3QEpQ0> zZxO}9jP{EcpM2srz{9yklE^3(xri>E9VH`4MU*c8y`zr9B03At`R^y6_yau1;{I_2 z`1o7n(Kc0dbbyp59;gDT1Ir%x^ibrWzlh*7uh)usW98eR@FbYoBg!+ zI?9@HifgRDRKj+M7h&xjlw}Ut@x~B0XcCFDyC!=PZ#1{^x+t651(ZdgSI{Ig#cDrPkPVl0kcnHD7Ri_e;MwNZy zcLF&a;RN@UU}UwW8b^dSH6QU-x9cb$@n(vk%k$;`&x&bB8&DyXF4#fArtcmis?{>Axq= z{%^^ad&k{!f4fWThvXVW$P}Hxe?%Al%B)?Z z-HG{L#ZlwhYb6&=$;#V3&x>eij+#1Yiee%;Fe4xm=j!S9p4#2myQLn-Z`3BD3ukP~ z$SjSsprp|{zC)^#C!{Q;`PyUB zf{X{5EcfIKbSzlsU&B9 zGC`5wmrBlQtwqw^)C=W+d8>b(gu}S!>Khtl?c^<`)w-Gx7a6>Mmk4^W8yDK`-5WEI zotkEzzp9lL;a7W48V`JJlOd_%o6qw|?MZ=EgmHT(VZkTiC~uWrE40u#j&fk@gh`*+^aR&j{poN`*+1f0 z(Z{K-?msi`l#<`(8jdwOE>wEmI^9gn87VVUyl+71Vwze148`Rty>VPUjl6N*9kLGp zeW6M+!$~l!Dg&ff{NYJhtkd@8$xB|F`}j$gjz^rHRQ0%2u*iLLv!Cx}V;r!b+W9t> z1)KW#**HPj)5_-(|K5C54coIY>8Ha-(IE6|7-<0a($`T!z=IFynN`)+@kZB2qWvH9 zUO0*#r`faUc*8H|1K-BRn>a6gDBo&vM_t_LV;D!d5AW9c_dHOyHlO-`zkU?^lbMFN z$%2tgf4KO{>k_4rG?w3DStO^jpf?=-?$vgdlw6T*BKQHO{!VhYGGC~|WeXwZCic+a z5-8`=fENs|MYXAcqV*C-{89YORZmK48335<08YS*LJdo;e6nW~7rImdGdfbBml6pX zg?f+{P|hTON2?DypG>z!Q{LK=SVraaz0@+obVd8mRO=r7Cl@l1n4UI{L#r~7En?0& z4c;(rbLOP7j+#`ew!aFVr0P-F@1HBGvE{T;>*L}i&En!*HPn;N^=ofA9K7yTc@V>* zUr~+AW(ZxESl#KHrE-4M`-XF|9)(3{gexEYP@7a%soO^S;T(wKUvk!0-u=ey2jA#))%r?RW}eg ztEL*N?H<{*Q6uS=j*f1s_tmluBwX9ER|P~OeKwB z7fwuL^Qmgzo-&VbtK058@R3{j>h;zn%@?iKlT@dvPa{h^ca!$$ z&pwQi4t~tnKI%dMH{O1-t-iav{S@k2Kgy#l4hN{(idtpePxCZELh?B3GRSQE$ZJfS zn~!vHR^Fr6s9tYORSD?FNw;1DFpc{GpPij#&t}kijlVYT2Tb8FMZIc>m!IG_JfRdJ*`Fe7WyDQG=ysbHdCOy#H zM}za1Mf%e8K$?M;Sh7D&cU!tQvlXo#>f|NXFB+k7UxQ0%v^m>EuegLkkJ43bvNZH| z@)-}V+Cqg^9iJ1(>_l02m_F@6#yLrUcUmwM4Z6+o#K$PZ z>^1{!Pd0;B2hIbxWf8rp=y2}@HqmB(B9*`{VVu7#(ox)VmeB227WQR9Ju%90DUgUe znxppPSd)b}h>Q5m{(_H9+t^2^mWRLvN}2Uh{H11FPo9WUN;gK~KPZG(c?C;S)qfcp z&6C*{)2RqFamzP}f$}cX@aq>Q69Nfmq9&vX>Vyu&?%)qIUcJa&75s+BT=--7h9o$9 z%oj!k4q7E?5%;*BiDXnyun^0UrC-kgac}ChBitiDN8InCCY#3Myt${75;%OdLa7X# zqDZ?{v_j3z|dhk(@6d6cqEnc#v7^;NIrc+!rhTfscvnQBL4tr2u5i8lHX$$tKb=tm>b zNWmGsA_M@UrP|EyF^qq}N$&zp#dJjRmU>Ul-`0GiAN!ljE%SQ)=sQHGdf7l^>_`DF z=l5%qM;h_*R6x8VC@am=o_W$6Rwj*vJan4aLkjkudamnOnE*Dg|`C3=VQT$}|0f#I~d#RFYg$a^?)yKj#X-v4)WjQ!B zQ%<~gUaRJ;_y~91Ey5zwW%}($o>JnBzAr=HlGT7<*0*O=`I&GtS0tE>E`0$qGNO=f#kueM zxIzvcl?hb^m%QIklZb9lM$SUFPWLwu6s?w{l<`N?fa7R`IMAS=s{mzbY*|Q;y@{_@ zbz1r&p~}h}G8Q-$6ZZv@Q0y|k^i<^FNo1BwS3}|AgbOM!;=uq(^0cUNqLA))oTcNW z-(>0KSljrNXhkEy`fT0#^HPumoW5;^gWhqr}Nv%>}nquXvR#Q|qx>%YQQuxDK)z0VNCN?oHm?u78 z)}GAyW4)pxXexTRU>DKd%?#W&RTsCg5uKDuP4MSx{XI>^57)%Lm{8Q{avw^iq%6Xc zK=CN79N^{8h1}a^1zhcYicX<7)Wor#va*4NaDx{&vK?62np~r|Vm|y+PUq8&o~tm# zs`V?|1`bO%Unglx7^S!n_M$h1st3=aUKF3A0ED)tgshT6EN9B2>lLK6dVA1Uj`g-R zwv;jIrC|5G3c%dcaiPp3RS&qFx)^Hq0qWpY8D4>^Z$4rT+VM0{IkPyKYAyRTPa;q2 zG{(dcJMLl&r`m?GJGRQHs+~5#xVQbkw0-whcHNh5vqsT^2bV>m1kc})$vwNy$zVp}Z4`B+LWIZa8 z!zb;KQM7u))SA6Holo>vC-aHiBjEZ703F)d{D+)T^zTSArk76i7i~I`*8viXraeQ7 z(cdlAP(=cfK5SJ^&fI(A_g$52#MT#Q5_y1tW9ik$i+?()MGIbHrR2gq9*px74cl*y zqcJi7^us4np&x;oD4#?>b0>(iVJIAdED-&CXPg~J`t5SZt{&pNRr3NaG=%)1K(>ZY7o)hM^R$@T6(eRfsRA+vRpZ#C3rbWey~EwgrO*v8MdpOQ{t{n zGb#j-LERxFprO-Rn%wnda-#V%YuX4PfoM1?=zuHa9Sb5G?O70dMzp6iZR-uzQ`cE8 z`W-mLBu=P&@A2dgo^!-J;#kdLzg-bxCkCUo4A; z>1ioTnljI(Y*ayyr?k;PdLLP|X(2!!+r-tCdL&W6)28m=i)HE!(|I1^prPK#lX*Cj`a`^cn@*LHrZ^a!agyqwGI3>C zGwkA7Xo*&a1lN@D_((FdTvTEQmQz|N$Sa3T(YUYToEf4kZ76MovlisOGn%H`q#~bV z(&IjDY>vTC8@(bIgiY)(RtRd2O&TOC(A~N*Qn}*Ls^tw8y%|NlB3Fn=Q#Py$v*R%e z?+EkrtF9S?p>aRZ%Doe!7Dd7}F;tC3nr3f09_{fw{o}@)A`>Q2k@A0GPXG34lx4Bh z94)_X#kDuAC#fo*n1l&P!g8dN9BVMFHm#+x1rj_K!1_PNZZ5>s|LOK36u;d zpC93$&+yOZ_@{|~ZrRaATQl|p0Ove0nnL4#4JdT=Fk?Szfictzb) z%=*=TU_mKS~3Yy3^TP*6gW&|~Y7ss}GKVO|_n)_x=uv-_RAF77lZ?Y-p)qASlYNjEe6p#6Z^|+Gm##rUjV2Z$j|WkLqZc_j$C!9s!lUf_`=(&bX38^QM#6YwXc*6;!erM!{moIB<&#s}X1CdH=hbIQ;u77Okg}|XTz@Tbi0ja;HX`+UN*R?)&t^~YkZVocwb&** zGpW7Ry->xK({Rvj537!I8%d<>+3mV1wL2MML#5q{Ukxb}i{hdub83VDG`Zn5_Py}& zWPI98RU7>JJz6zdpGgGVDDWVP!5})$Leu-_h<8&J5_bnrbF_tp8bo1UsNyVDd69ty zXqOu*wNnPNlkG>7tB_54u5Mc{YcM@&sddlf4At8A^oH!#I`?p?@9S=D$s9GREpwKS zWoCN7jjNWSzXnpKdLO;n*>z^ek!vZG-Hh%t1%(5Tk7mD=UlJnFa2H4uK9N*yJpWV)?-WI z{^hBiBAe!~{;c4WR`x>^3Y1@+qX}+S5gk)>UgY@NyQYMyorCkEo{Rf3*1ioNv2=!g zaYx=cHnDc(I@m5%y@uCrQTTzr*6NjLGGR85bu}ww+lbF8LN@G+QZx z8q{lTnWk%|Xir70ZHz-nu>b(p$^pdZqbNPn5C_17c2fWV^nYKq^7)(g&(g|8nRD#O zKvfCnyI`GCdRpgHTz#E|S7Mz>+tB!}(J#UKQpWo}FL|km+~f+iUV&OAePSaJ zJ=?{SMFj7o>^e&##8l)tRdAsjj^w#^R_phXu;)J4&T4sX>5+RSOI-%-s(>6*o->xF z#Rr?}HL2U??Guy4NDs}qLS)IhQasQME>Lnwy!eFV4h(vmZoZD*#PC?rDG(aiv(GU% zZ~R+zMA*}euM_zZcFd1x8gkgMt`9I#t9dxLwMRtXWx+hAz6f4Kg6BpMYck@xOe95^I(HR%Jg*4FsG!<@r=7GexR4w!)a+fBQ+0_q!|2 z<)!8-pfj~Arxd1~6L|Y;s(pL0wY=DAb#CLuPol#-E}}KEA5q!&I4(}chs|C(Ts(}T z^XL?!rQ$o{pkgLXhel%}+ zJhKO#OEc+E&^i>CXhSJ=zB-}w0Gsi;cPdcHg+I%s-zHexKNq<-6zN}7vKQ2r?TQ?Q^QFOYQ9HpB{Z!qphn>()RN-u264K6BJ?K{P3 z>Dg`(W(CR=s-U&Bw%lIptd^VLP#|6D#FsFw(ltyIH{4uFFf`FO7_3$#ATr=&NHZ1n zjr2=PJjwXQ8=525E@% z>cx8p7_ie+wT@~igYkOQJZ`F>-49f~A036`L4mYh{4kHV__d{`sx4tiEQX@hkQZC6 zHTo}DP|oZ6vPY=twwL9msx7OADLPzFN66&~2j<;1sBKcj&%y7SdLOg6j|0*I(e0+H z-Bt~?ohZJ~OP?|qxU8py?$P1fy|@?L;N?%YvT=MTcoxEZ`8&!dVs<(ZYz@EI<)kK;4G3H0v+qNqls)kVi=#qqOfrmJZXz2MGj# zb##VZZK~R;S%XLLDau?w4U@%Id$E0Yb;>fp0clb9G%X^gr1#V$8O6EQUHS{OXW|^> z+6URjRD|Q`oWU~-g}Sy`1b}3hG*O+J-eZc?vjJ7ocU}~%sktZ*h@NkPM&El61bU=2 zbvX2IPH~O0^fc}RL``+%Gtbo-4yhkT1TytTAG%VBs>t!S{lPfyy~YL|k9flk<0Kx2 z?obQr>;#AN`Pe&;hs}62h~C79@c?BB=~7-&uj3!mCFL~Y#+z_B8UTdwn726z47id# z4yl6Sd4o{_E5$4SK>jmN57Si{D4t5bx-0Zb``YqN6>Oc0JzyCb?Hok8SmBd@J)*ik zblPO`C#-$BBDu{5W0!<>R#=-+CqLMRl>WfJ3ge$(J(ZoWT07GM#pY8P6Bfc-cWl~u z{ep3uCqSX!xs^z^cVhs%z1xNp-P=bmH1o0X0&vX(e@rdn?1;-cb-^7`H=7twKbXQ^ zErv^T)g|TaxVNju)y*cx)eo-1V*MElceMkrR1GYxCdQTDzc^R+fudz2)@$Kft%A!o zoB+)}s#tn(YF>KE)T~G`pA*d{K618jL^Y5X@MDq|s-gLDTySEaOC&bxWH@+Lz1)+C zuYjuz#Q1I~OFi(d@Wlp>b^_4wC@eV(B!>B16Byf(voF2~OccsEKuo~y zs2jnAj;8EN4*Gc(x!pufr85}V!do2T2KsY{se*5D(FpIYZ&jRS@pTas37237scbq* zz&op~3c9Xa9!~Ei`I8oo3@?7H1vex8bov_!{W-J^UR+ILY>!KE}QYv#Y znL6$q=hR1ZBG%Z@WQ%X_vWFJg(Z1K`? z7G^teuta617fpCnE!HN-*Qb8?$Sd0$8Z%Yro6D#n=1Njs^7+|Iy`J>SD6}x~Uc` zp+NUVx~4-ivW|$#H20J5r{iyBkqXsun)cOUdVWjI&+jLj-x{hxI8OLP8Eipp%)z`W41P1C|OC&dHY28-^kr zPogBs!ognZ)ODyJX6NZqn)M=X;{3`#?1;~1;=yj@RhwXHe0UNjNd)c1)}g3$e$FYm zDmz!Bu;`u0`#8UbTG|!xV!x(24->GTd4cQMUXj1%6*6%fMU)L+;Q%lI z%E>RmY(~b2kJQ%scekH4w>F<{KT|`3g8fMp#OkQ~{AGpxCUCW^G?$l~ZI!={N293E zKp?XP!K9-UU4|-&&Z11!lQe12%;xo#ZJ_!iDi&y%f1Kn+I2ddvgYzAXuL0DwEXF+B z4*J6BptI6!EjO21ju*J6FPOt!$L4~9v$M0N6Fj2}<{JIzlrEl~lf)KD%FWd%i;m(q z2DaU;9ThxyZQ1i0dxixjgpVoItCRGD8r~4cR$ipQkm`>kB5tWN*i<{nnTk~JBt2NMASVa3Wv2m7GEmn7?|!g_JDiL7wJjABj*D~{7I9B+vTq7K?FZ_# zS@ZEnnq1T`kK>L3sk5eDRWa{Z3p&m!q=j}K@xNNYwer14V8L@|gS}eNl+UE@Q9s&F zp@~=Gm!DIor|R+Zrw{iwx1a9fkGVO!*HBxN1h-JqJ-$N5`^mQ6ijx?&JhZCaBBU!I zWqG$A?d{@{y%)8KMi6pxHa5BnR+^n=JK+Dn92_V$r=)Nq z@%rm@u+(h(9T4X*d$<~ak`wYY%GxIDj?-gKqpYK9oP{{2=rC`O3n~o5PgB0GZ5Ssh zxlTuE5+#LHNeL|)Os0B-!@#{_3$Jd`TN(n>mer-8-}cj@tzN9rO-3~|2%3RW zw_rrns6|&b+N}C(%>a$H8PD@!s9#7KF!a?@^tS1b+hvr4`)auI=vHmr(i4?9vaL<0*&2Jq{@wUi@Y zK3~s`i&T5B$D^DCIZqOP$~b|(h_buh{X;pR!JqcEQdO>ympIFURO+t|ci)_5NDvIIT=i^BqVYOK=as>U;f zX?fsnRKJdbB2K5&RMBttW3})%kH1{uPs1FG zHN|pS3`P?peg)3vA?%fw>kBGQM&kma)FSN_sn)P+=3tw|bRfZ$yfR+OH3!dR0+Fx6 zq+Z(o$Zr$mMHV39C!E23Y&JBykqL2nA5X{(slH`j`xaD00~Nyc!*O09m=`MOlT>O- zb|%yTHVIraZKCsi2de9I-`r0&$xbcxP^9Wx5^xk7>01^O@GfUO75FXDkdVQMsFkUR zEl>z!LuiZ}6wKZ|&sE@b-sDHzr?*Ma8W~yfvHwDr_bOUrALi;a=~+g)=lscC!8`_B zb8~7Z%8t@(sQ6rmfJiViwZPyc%@KRC+UvrO0$waqM_~l=gbd5l{Aocy07t8$YM@m7 z)VgVo%(s4;6pbk9W#^-!dmicQ`YgFIzP+1ot=@eBbYC1aJ-4pGlLRWtzzHe%%)mpu z1bX@wGqQ%f<$;_zs4#RPHzxyXb|_}0%Ptvo7 zh5eFlF)hFE>EvnvCO)96A={yFyz5F!RG#`t+>b5=S#z=q3KGs_;6tJWl3lg5vfN7( z@WdoxCHHohryH$p0#e9N)JQ^_yZ8^aV@#!c>}Bkh%HPWZ)%cFD8@2uweO<@xeYkc&U&_ z4#jH6&p2emqDWPpS|A}Zi}GA72ILb;Ee>l!pvVyag^WL<_^>F#-U(v%xiuv2ku=1O zagw_L?jQBhHC}g23PlbDz)F7J-S8+&%dBR-D4=?ar=CuTG8q)9dR6mrLVh}!8N2I`H}<~2rf};RMN-4$ z96r|5I34GMbA58!bi`Col*;BDUW8{Z9Tz)Uq*lDU+3}Dn=S3MF$}>*btJhyF7C7A| z$08u=2Vq_`a&mV;CB>DT>EJX@jvM_XXCvm)cjBZm%F<&HKC(eIZRny;C6I78q(24s z6+yCV5)mF5yWwG)70~H4zW8T-A&;hI6&@9E9QniOV3<}%F5y!)AF8SNpstgIGir`RK*VUJ&tf@{ znv%~&(Eu2|r%{GH1V*(!u4A#s{a+w-=4k0?-DvK-L>Lh+`(wFw!y{+4Sl$xV8*%zB z)LW4EE~AvTo4#G`BJ$#?vcjK7NwGi~kZ@eZiF)PI_bW}^hMx4McL_$l?`;Zq;}NmB z;9X3&nq;9W3Zd|WeI@a3=Ocs(r4bqhCZ_-Ok zd&$FtOh&6oq7Aq2F;biz=x;yTdu)AxD(2MVIDvmU>ctcpI1G^;o+iX(1$H8z38ZyZ zKuR$LyoU`-9Kw7A8J-4>6CTqgj-C}pp2}VA=EKftA{Db3Q`pHNiC5l^1p9O2b8lgb zlFr3P+|+59#R%PEW(X6!Hb*BUzacN85fq_4oGO8CB>N;z;)3tD?yHk1gHe&88UtC) zp}r&l8weH$hX8F<=y1&Ae;j6eVRjr96eYrPIzb|*5eFZ4i-;oRyveyw{HAJCn`)+P zGYOG_u^1(%ah4`@YDX$qOzXmBvp9xstu_g40)mpCiMD|QA3`g@`keah-*%#hzx~@3 zJtReQlkutDqwFi!NuA7~G%xmn@bw?~5ti&mC&FfqEq0sHtktXi(z~zV|Ae`gN5ujh zt8^h!oFKeTUR%y9Y3fk0M45FZoeLxbQQXJ4{M;Up=toC!67|&}gc4Dv6PJ%i8HJy~ zc--G{E7Cd}0u@{oIUiu3c5Aa*@iDufp-lQ%6^?Ew#^KZqz$B;6=>bM@iG-OHo%o1z z6{@o|dmYj>g|wNm9UO;Kv)!RBoeug@rd>kJzrahGFH8eK>>z?bs6sdiztL4et4aTJ z*xe*eXx2}7mOeEtNX{@UI|mk6e3V1*%0I*V>Sn~@ZYmnZS=&n~nxWSRjp-PSdi-pA z>#~_RW4z_*%;_D10%_ikW|>r#UIT&7hGD?6d|D%ugmZB-X5W-scX7isr*b>z7gC5M zf7r0etNkhfugF0_Ocm3+A@S&w>^dW)0^weQ2%(x2mIO7Ek4*~G)D}2Vhf<}C+{qsL z(P=bDM|801B7R(jS+BQi;M9NbW?OMiea!klo$sJ@#TfP8hbtWPSyz4ydT#pFs0(z>Q5vfJ* zq(PZ;JVvgf1WFZxN4Nx#FRqk?rHOncU`YgQQ&Eb_)O0#J)jJ*`m;(Qt(2mGqQw8h- zK`hp`RgWeAN78&Iu~PBe?v0DlBG64z4`Iqnyka~-GRl%heMd%029PKxl+0-`lx9`= zhF~y0FA(s$)~KGUb#pI zr%EM#Sq*)EweDb1M~~bOm#0Bj-XkQRaO_t^753DRQ#MTB(G3eRQg>pqoQ#^^!LNVSb{cb@-B`pXnWu$I0!7lxo%h z;5t$86k^^6RCtudxw1nUmfFO76rIMsNHx?eQ}UT|=E#F6;NfMsVQi@ub)ED_RX>fg zrnVC#$8KKjCp9-=)X{6%K{7~>kw=P8Kv{8iFPH|lJj+nhF{wZc3b78-u)k;;=9Fz( znh(z%H4zm1M@ZMyvvr;#!HH4e{Mb~1AP?@k44I#4vc}5_K~eF_w0`!JM%CwreSz@T zYz6Nd_Cnc>YpT|dIMMNj-8@Lc46YM5@$!aUacZSXD7TWk^z$um*snE1n8mKCQ-B-y zrf{Mg4)b6f5BlU%BR?%i4t-{Jh$eKD>fnZh@LUdoboKZXWv(e)Q#B_A^@g1bxr1#J zkZY=@xjVj)K&aOYpY~5uH-4BVQ3GLJb-)F*ufI#4k04y8qHj!(8Fh1WYIDcfKK-bO z=xR#sG*GqjfdD$1gycXg&UL)$NmT5N4>#rF5*C0vyyMCeznL5H4<$l0%KUd0;zhGI8e_g2;YemX=j{#-9vI^vr`<;(EV%7lt~{3GFmP{XbOo%_bUS~FjG(>rfhal^7fr-6Cdunv_>JLY zt{Rw>71QA^yvjNg*Nh2r)JjX373;Kvok#|ziZ(k1w37=SODBx1sU7%_#pwuA(}W@N z!I}*f*87$1IOA}*va#ocI!%yJcFiuAlPlX;Q>Y zi;dRx-_=o=^5C@CE}qH)wW%JCvkXgY?HX&&I97`2h7OR<4QN$2b$dhe1jvKQ%n=_- zewaR6+WC#6G?UE>$1L4h-x!6*n3FC8uM=I33*AQ>vkY5s;(aL;`>g&_Pc z$-I#m6wDjUg4wC}dRGNcqiX)*Tc#M;(E+SIRWU4VhrDPw#uY}Ftk^FE25oLXlM>*U zNyg)opb!Ugmpo`zQ`nthVT3tMKc3F-Ec0<%GXpI#v#M?@xY=a0DeTOfzL5-KMH6NmM}h#og}lX^fk` z?Rv6ga5DppR1|kK>z6j6TQ)`sUq-EY>;CC#ZL}iMos0#6ZsIudWP4#f(~dZnw!CKn zBT|i>ZH+ztSVqKgQja-XoyG2MDb7cA_Cn8{YqcJSzh0gF+7%Y^jjJ?pk2{qavny+P zI=Hu1sDUcAXI^9bhv#NqtqPHsZJv8&A6u5?Eu1(X>|JB35X zV{T!$85fuXH^&2`r9aN%Ca zr=hESLS$DI-{P{AoI(SWUY$`+%~@1NllBK-iG>&hTIPnrNvc+A5)rb$tT*3<*!Aoi zo;ybO6FGNmZBWh-JB^eA80j zs7LAucIuV+fymb+#qkxeHs9F=NjoTuYV6OgH&aWu~Gt~+syT2WI>UXeF3*XPL6 z+&fk4?nfOL*WNJwH(X%aO7@nq9AN|y@+-X`&7A}itK6YSk+Usl2&v43gI-#@vZ1% zAa{t#Li81>L}zoNjP=H3)o6(;S38tDZ}W7n=nr0<%eIz$1a`C@5x zU)JA=l&D}{k^9f^Mh^&PPu@>_%^w$IsOpt7iM8!sMN@BM*d3ov^`LWdEXkj_$8lwJ zxIFzi6CRxj)89>A2d@Xx7WWf-p|?RXHxt7A0s~1869Z}aW!HTQynx*gDDNjP%}1^$ z$J(Hw3BGIJ=9R_?_LCRyz4xBl+t}SxyL;=;_SAdty?3ym>>~gc_bB?!VJ41=$xnQ< zu>11H(?{~E@vh4G4`OgE{Dgam5{9hfiqm4Hd|TN=le-GP(DD)v92xP2cqlwg?%@!J z85)yF>kTB(CndFSV#xI6=qDt+;fN*nBo!L4qRwnCIMvGB>ER#>6ELUoNDxftVWid# zz;jNrIy{RHh)P~}c~s4&*gf5mvozNHs1!#PoK!+oQY2CLYTS7|gXlEM&go8b@No79 zI<}bW`dU!Osb<7<%fTf2Nz8JMe|pNo$spZVF*sTaB?t7RxSEhaOKM-56X-_7BIP&t(2qKyj#QS8izs7{ohV*p&yXOa>6!Frj@2K<+3*Z`ZMty2 zRChD8A`rk?%v4ZEg?`q$m61|Lhevf%qzKjn8-_3e4BaZzB=X?Ho##7`8c#RAx7T>E zy}j4iTi^Zgo^!94UhK*<0;;AVv-b}<4NK=6)PCUF2m66Djy@67%3WZmmW(v)$i`;u z)Xc@Cm6LO-4C_}6&WQTBtSx;Vk8FWtKIn*#PUG-nDB8=QSE!0%%{g9H?Ue8xm?+IS zOi$TXD8l?T5xzdEB1{(1Zgb+!g-B26lI7JjBsw$8G_M${s`;B6AI&!0*L^T-i24E| zsE1mZ;Zubr8VqDl{7WlGoWUkib$s|~)YDmQO%-fBd$#>dJ!8}fd(uc#`|cT;GEK5> zYKzGdP&$B!89{~6cNXZfupaxSS~&a>d^o?D{i9#y={qfa3^)&Db*_#CbqN+U2=0`f z@!VO9 zd_0;_N@SJ0G-L4fQ^1U!nPYFTtA#=&vN@)071hvo7}J5nN~`-Lb#{t_TCcIwObxR-^p{p8rpRdgM{V4OE~~4Zan}S5-;0&eo~ar}$U_ z>9k8)cdF3O$|7z*xIh3x3%jQBbx-Yc{Q!CIwx_e{E5w9JSL$H*f~%-n-YRRH@=Ecc zQcli8e&5oX9E}#QY@O>f2zm26T$53e@k0fa=ib_0L|tWaHSh+b73z8^k;agaxQk3#95z=h6VCSVOzPxrah~|rwjl1uy+)=L<6#GNNFUIuXR`kxav^w3o3s~C7FWh z>YS~MD&lc^Q=|F$8qXIN&?UKi9d%Ea{HxaS_-=3~1JA*q+2mKmpy*x(UDFgp)*~k| zbYm>tnywXB>4Q8z>oe9fAWn=D!Ie&aSGt0C(_v(s0B2d69E*X>ww|WwX?*`dYEC+VcG~i;F3nqY%V`Ey>IxE^ zVlI>st80-_fsr`sd+rY%KU?qdJIVsQ7 zR}If`k2(>R9TS3_Ug__q3XG}(@57aa@HGe7PpYyr)}Tw2P`2Q~pnWaWk_`_>8@V9QL%aL_qA?X?`PuK_Q>Rl)I-ejs>W0WCk1aMJQCSD1juZaWGa`W{j=!& zCLp!E@N<*7$c|`|?CGZ%zFQNAQ@}t8BFRp|Tnee_Kt9S+l-0f|FD&R@;4lVvv|3XJ&5wEZqchG&6JS z7udsxO7vJStAlX`T26V73L!MGYpp!%i?+ z0#9M|bk*Ww5}*_vumTrd8NwH;R$lN)j8PL5u_XMm6LVT`h7=~dp|?dB+#G!rB^NFQ zRm7XC9%c&4TB=69y_51zPl2=Iavd}=|V&UaV3gYqXkd*+wFsdwvN(7SbgtMT{@ z=M_JS^CEZm>wokI|Ah8yckPd9zy5o&U%%q+*I)GC$Hp!FgsuDP8*{g^yoXCkJ`VdS z-IHLnL17!p?+J@8RTAV%%{8S@a4)EMNV!#DQIZC76lc*HZfuttJ&gh8gI8=Y2Xg&|Sz6T|rq{oBmO_qnzy-jizgxq);+3*qi+vwas$PKsibuPrWSY2MU5 zEcVmh;?Y?Ha4-J*dy` z;a_Wta-ZT>vtn3Ha1MHVT&Om#D>K4?G`ELQhC6D)LCzA$n*MkalgzaTHu-fe;bSD%ZR1iQ`_|*A z=$(8pK8{dJT9hqm|G{_|CZHRXV0k*`v#|Q%=F#3slx#2YcmI zwZ-)Z4*@B+Z$8`Id;ak!-~0Y=g@?UpX7~D)1o%)4Ed}>^zBz2U(c(P8`TIqP=Ce_giY1UZ}NRnw&;i zfx3lBjzSdOVgEL!d=kAe?P_h+f(+H&;Q>#yjV+=M@B`f$0R-{?T1sEmE}#?0>>raG z2C>%qJ8e?vBt+hx8w3Jf*rAgsFB*&94TKs8E7*$qdewR`43qE}MYzw)SEG8{ly^4m zVtmy*nl`T2uo#YbH|ybPWQS_nK;dn7MaZjb-m93Ws4k`nUDP=MQPup7>Y)sp2sD?d zC+y+C9QV}ud8S7hlx`5+RPU?XE}HT2bP3!Dj%`B#$pQ?0(1lJtjo1;M(Cx+9I zmz@R&VX8XOXXAcLW6}{ZSSsNd@+-4VkdWb_^u8eyrb}*SF8pzZ3j%$w>Sg4y6J~S~ z=p;?3C@HdYp#e<7fbP1>X?7EyU>TK-k!d73y8h6WM;XCs00xn~W|9n83pGC=f>`Uu zNBG*s6n71*n2pv@+pl$m#%KV5tC~OIJ%dpeiw~1xz2BF5&ZdipN%1U#ze#5x+18Tq zQhKntbGj@gN}^oVKl{8i%;wJN%0l(^7UrI;!r(>6P5IuHtA+W79DL4}REn~uE+og&7zURxveI)h2qCUy87phj)hK;&I zQ$0}aR%e-Wo*!JeSQmi^mlEv{D@qbL`zJ&Rjd^`BB8$%~E~k=9!aV;S6TG?5Jx`IW-` zSYbC9)*M6w@M9JH_KQ~I?!jm6g{9B;_nTMwqrRwHbv~c}js4mLuFV2JMMh+Km5KI5 zdTc&=rk33FO!MmQAk0s&F0B4*fXN7OrXv#qgJsL8#xIi7vC871(XsS^jrejrvSg)) zY1w`bc(>>ey-RSLwbL)vWo*6xRqPb~(AAdtGlc+YE&!?q2oDs99$(40RW%y=01E62 zRkQZ7s`Hcg)lz3()q$oaH=ajpA7zGS@F6h7uH))p@`nZ8$2X8yuXz%?alghdHSX)T z=2guKRGG0mFsp+aJDLu|#t+vUzjg558YqnaSli!k9(>!<+|t{ixpwD{KPjfipC-|* zOcKzSPj!^j;-UtsEP&W&DLTHy&1zX7|5W&C11TGX!TMc0H{Bu>jm+4n8e zgFe``s-U>O`4{c?DEX>*Gil0talw#CpQ$l$0*b?`JP~#&Z<5wpt-k_?GPJAp4lP1- zA0$Lj%5g%%U2KYx?E|j`n53B)ab%4YFIgO)0O=OfbZ&gq>xR;H*-X|aYwWL{*PGhoVX$HV1q}gN` zT7Ra?Ihr?JjhV;)8?OqktZ<%&& z;$k_T2&Ui!g(Uppuz^6;IZ0#E0qg8=quZ06`7iBm+l-oUrR--I^ zbB*&0@{>hV??c1%}w}aVhcJgdvYkO})chYX%ZMIvh&GzbQ zbM@{GyZr7$-QC@5gY(_3O*5l*>-y9A?$-ME%;=rgwa4FWo40T9a!0@1URt^S&`bL5 zX0Wi@TD{Y{vvjB3pl^3Ox37=W z4-8h?E3Lb&)jPLucN+Zl?(*I1BkBW#s5Y{sI(L`vEH~uq>T>(qxZ5EC<4S>0=X&Do`bNvo> zH=cdG@$BW!^9Q=4^!DcQ!$EuT$;z9_v-baTXnq!>mvK2S_L^#e7cYfu`m zqw@nCD402UM@yN%I!za?_#ooc!B%NW}0ESj0Q z^?y6E1Nt7_7M_Pi*j_A#qeTO5BOLZumYYSGHIIMD)m$*w?rBt<*h#4Oh&X12I(=b5a^yqxynz5jXeHg)Lq_^z!T+%!_-CsT zJR6?rULf25>#wej#)S%WKwZVd@K|ad=izCjPU0cVq;Y;oxDICN()Yz9aH+m--7A8>r9Ct4iC;kFTGc=iKaMCB9bKX~Z!rB_4|kY>s$6iS1!uJP z`|`Imv{NvEY8aN9YCX^6;{@jdaJe)=g26|6E(DS`xMf~#%**U)4Ugb&xv8G6@2#m} znEzlLQJq(_vye=BbQJe^1Rd2-Nm$S@y^}Cbx_Q>a4|&$34EQL|^|&pJ8`5}g%Ogl4QZ^DXY#?` z-p;PNTb|4((V=?2c`eY3o&!2{cs+5jTC#8*kHVDt7%n?NW)aS8_ zu3(deMLaWh3eWPL8kGlCuniY6&1f2`qpL8!Hf$nyi?Ug&t zcB@quL)_o2HztGB?^nLRAf z*MeE9u}Kpr1%s8&VLDEV+-ic2;}ja|QS80!FbMNTzYlSGt!^OTx{KjxBtsBjhGF-P z^q8}=b63;lJjI#4H?3x?*>1F2OUs@L4H_)c^m27CWLbW8yciFUftQQBC7C@(N?;%g z{KYTmRl+uLctn+15Rj_c&x;B$R_yGMHBdxs9#oKp$DA$yVA`8%5$NZhVSpm19tXyb zwC03xaV9To27tZrXn`VfgM`ijs=MO6;KZ|Cyv#X>VcuOaMHi>zJj#ek;LFr)-ciR{ zIv#b;vbcyQccvPJd485={q88rUx(T4+wKse3?d9i`}8b2Y>Z=KOel9NCqA_TTGEAB z9~JG73wpe(S<;FiI=bV+nuJAs8mUj>EP4VHxsgZNX_P58 zjTeX|3mC1}Q7{nnivA?K? ztu%>?G;6GX@}%?0lLIeRjM7b{!>d4ZX zVsRJ^52LJVhPFedDczj|ghcmU%-XlgU^wqlRG{KzGAqE;Kp;_a8W8+mAUX+)syEYd z;aFvXf!Ow-m6D2KwT=>CQ*}tVEiSe6tD5hVPEz$cZCg^JVBUAm%%J8?yUj;Yl;u^O zn8w!y{-PHv0H~Ng!(T#~kS(l~Y44C1s&jVS{5Bjl(@FoLKDq&v);4*5fVhhN<1+=z z5!4PMN#=@_TT|J?C9jmq-AzMKnQa|#$&|11?}_nq{uRS5wUX1&chNU`F2@X)nPdKa zmt#&AL;2OJe&FT&e@zt=KB(^;T(5Sr1^3Jw?#sXM=9_F?$+|;b|)VYyRGB)rVx$ zzgE|>$@O+NK7OcE$MAB>+mJ@TR-aSdFYuY2Bh!=Vv(Zpn@#`$z zi(i{^5~{9UQfun8Ge0}0P?n<6T4^k`RHw7ny0g~q%zi;2X6IB3RaJy2U7Uv- zCw+A|E@*9O{!zcF9;ew5{@`3iZ;IvLVE8p@?7$(QzIFaBc&o|w&4#cb=p*=l9i6Ke zi$#y(5>m*J)U({yVIu9Cj8f(yADS2;T1y-gs^DzGbrgmE&1LW z`FUPM!!CeTgYYmKbn#3EF(vJna_5(~PZRv%DOFR3w3tF4_~;duC6aaE8g~n7Or%3n zHc%kLidUGtyf&pypQfO`irzlwE!S=;qqj?0pV^XNH5QI#w$_wzHFDv^Do@8*k14mL z1jNIVWq{pPWf)Yq!#(k%EINJkbXNuRu3cIE`-`%=iZpCj(KWiNfJ^!+<+KEF81FpW z`1s|cr@O%cyNoN?0dpN;P##nA_>bG*i$b-#xBYDW$;PEX0SkM>Q6Hk55JY>AnGy)Jq?+8FYp;k!i25Io7W+v~x$*4N$h(1lC-8N3 zehqp+J;27wB9IH+d$*>{J0y{eEWDJUoC&hSl&@_i%Is37Ok?igRtw>F6_D^t2ACTg zn1WNn=T$m!L!)GDw(mAqZ#O%wJ7jMPAzsx|)i2+*FB^jo#&;Dt`L?PLzj^s4=BnS7 z^;um=(qeS_?^b|O(TQucy6+3&USxA}_5>RXmA0$lzZZ7Xt$Xx~(qfjk1oIUPpQOxn z`^?5KvoJZ1@|U6tHM6`|+5L5R^o3CTcyeZ=@nBFjDBwYb!> zSt9Vq%5J`kJPfmq(Wmw>d9Coeq4x5K)P?qQlh+IVc!?Gh2^AiHafbqXfnl`Nv`%U} zw5l5ewI4xA=4+QZm5a1;Ttz}RZ-#@x`MirY%PI`&!~@Oy3t`*Su!xWm)(w^)esKQu zs~LN4oXpe5@u1KC-dy->EqSCcJKIhasIvD_kS~a zboc4)2OFc6sM9+A_`AQkciMWg_38QP2hUsGKt)NPY($-4;;v7-Wgk+UcOd(cV!3H$?vY{;2H_u zRd1VI+siY&D_;L1iPlx!8ECGbX60fsDgd~~nSiRd4gN1Z6j1T@Pdl@{3Is#oS50lN>co)sb#mLQIx^_Ia&miB zFB94AvvcZpQ$2dRJNub->1E*=Y{3`Wkc1OO49SCgx{EI$;#ePzfCPypQD1YV{TrFthJLzvI5OeaJ0>- zr`vlQYq%=_)#%|BjdQx|6&PV_cAQa3eUjT{JKI0PL`^uH4dn(o4MwN*&N@NF>&#_e z6YIx$f!ox(?FwfbJQ`TQm8L0{wxF+ohi{(KLX5lP`V4>_PlBkLc)I0gEbaHM@F|It ztQd|cSXDP|VQ#Te;=53;zHaPM5{O(M6|W7^Dti!0uAT}{gobYz4b$wraS|V&bUUrq z*6inQfFaC!CpO}eMeN|Df$%6UBC<*vux-gj!yZDUl9)J+_m*5A;57gEg& zuLe!__i$%$%P3uk9*^rad55cM@uoVBvID2rDCxVsQXjfoSe-9SMHg<#MZw~M_y&2i zRd%8f@@2CSUfE%sq?y9DPsT$7CXLrpx^oAxe0+2izj1w(+{61_)sgTD53U=!;Y)Uh z3tr$baQmUP>Z%~jhAYe7Jg8;ejf+wf1TJM19J1#_CBZz;j!bi>%S$`FYIi?Y!J9iP zmvo0yE?4M~Ce~Gf>5WUY2G5gxJc3;k^*uUWQ#2(HjpJ-!qtC~2aWXz^_R`^E5f2Zu z+$R1xG4aJL8bo0p<%@$57k@13v#g5*kvI)N9RQHn06j2X#0%Jm6cI2lPVx_~--ZTY zB--)L?vY{mIzj?<)GN~Lyy9gnFWniiR6#8gUgRPv9| zRI@1B<B#i%p^GmVy$Y^kX^CuJJbWGMAJi81h#m9>^)S`}5;7kL-ST`0pbq)va zK|c|7p6k^h*2+N8@>VpwXz#L`L2{5Ji+<&O)m~X$UG212oINCK>+K-!z}-C<(N81L zSp-ehUfFu^ZIwlgwmw~AC9KXx3Nn|kh!)KD3f^!epXBKvYV^m$QL}hcloQ0z4{hF0 z!kBbx6jnA`Dsl}7Dmr^&qHeb->Sor=@g7DA@>?Wt*P#p^LZ|oIY#(~a-#DO`@btMi;}8~cr}=~4M8>fs_1eFRVyCs{f^KB4={OnR;WOer1Z zQ5EMssZb#mVGz*{c3Oh{!9c7wZ|*edf79)n$;~W*T{{!|&4Fcnm_%0x1Ls!Q{d#AL zeRW+pxKtf@*SLtLqN5_*F?Ar%EVOt#u+z8Sl-fN>&){R0rDHhqseriWucks^`?uee z%?v4bUW)9D6FPVxyxydl+pebO(xic z-t{^{TH=58YdSS^9foAUdcDcl{1`!jG*Q7R=(KGgP#GTX%{2Zb&0cfL31w>9#{2*h z-87*~lVINPwFDZ72Xy9G)dT+0sA%#rj(u1sC^spmuB&VuQ6T!47XJ_8b2v=^AHWMsHMUO25sbNIdM(LTO z9jQvTrzV^NPFGuW3`e+|$;_vIs)A!#f3X5A<&WpkJSYmK*$_W$vpMDyD5$3J0@AT=9`mOo@Y z5b0x-pfyRTz&7XZn<}7_OLUIk{!Zi2Gd-Anh5_gAO#tqRFgAZ_hy&VC7JqfZ#7_mJ z8{*PiH;Y75b79RaijNdVn3Cbj?K&w87KsoA;2)i3FoTOzt*((HQD-c=y;l?EPiY>&_I1Jcpuack`=e&(c=ykd z(TSDhv*FgM#ru)P)$Cm9?F)H_XbR#W(0T)WpG}l^=A+Qcqi7yXnpR`_YQ0XKh`c_H z9>sMJ7X&+2L{8%h2QAbupFzFiwJC&ilL5`-2u#9R<%neHMoE!(gBP1RYwlonhcj+I zqy+ivWZcY36~06o zmR4qWmsD3R-=5uFR$bLuo&5j}D(c3~etIl*-eb|mTIic zZUQzFQ=Z)fL|$}wb`y};IPdJ{ZF%F){n^h(Ofcy+DvZspbB5C94roT( z$F127$#nwV7`1G6$0RL%sB@MGNgy81t6~VQl~*;v@GfLotbbEt84C5EYEET5Mp{Gn zxE5vlqj@#Qx^k!3*Qn-Dy_r$Ap-x-~da%Qg<}CnRo#)Jl?d&F# z#4nlKl{&<{Oh0r20-0YAx1T=Vd?Ml1>WST(9!3VbO;=ulP*4=x09Sn5OCEFRv5c4M zX>4sj(ot(Ul3$XM7pd2zz_3WlUy}k;3`ZBq#*)=dt*fc-lCF&mDM|XO0Vb%)CIM16 zat;JESveO&Us~G1JuW%=)#F_kh1NW5%GIf4%1SZwshUQ8%8L~!^$XhZ-4!%rV*}&9 zRLX>K%G}u&WV==aSE`6&do&Rn2Tr$(Ds9fSH|x$q0p;2Qz+f2<0RWfPm`*ir2@uv< zD9E9^Y@l?X?efCK)jH=?SV2^0albfO<5-Z7MHd5reZet$sHJ0`notlu(5{*VX31bl zNF#0%tLLtCNXh@z)X<`zwG)QM*2P!oi71!+g!D4{*^aA&PUlg+Fd25Djc+y!@f(VT zO zQe0~8trwSa#+X)J3arL=_7Jz=%B7IkC^+>~sV?OJd%f~fE=#iUElh(rhvbBcE<2sI z;yBZnSYGO1lIYfx4-n!`aVHytL?+HJ%<8b(FX^yaF&w?52%H;I`;-5TLu&ua_8Ch_r9-oH};TJXh18poa~kwr!FxMez^gB+Sk! zcY=Bx4Z;FN6Z~-PM{zQKqbS+&x_MGIG*nLUL#hzh@*AN02Io?m)CHyNuxm z_bac-nDWkdA9nYHyVD+SZDP=NYwFuu>)*rsooOKLw()rC(++xHTA4EZ2Y9){bvLa! zdaH2gO>4e{!K*H9nD)Xl;iBSJhAA)D<3Qd0Yn@4S`m4JOY|s0k39c}%WOcTrg%%CW z@Vv7=uy*zXO5|fc;tR2Lo_p*vEsQbX?!Fkq9xTxZA;y9cgymG zkdR%D@MjmoeJnQw!o4gvNj5-$1OmI8<@}bwF0kx!UkfZO{O#}eUR8Bhw^}pfiL>l} zALHLolDq4!_g=mC>K%qwx=O^p*A!+{lSe-rI1j)i4jgzR%oNV6@BR9pZ0W_%U}18^ zjf0qdoHqmS*O|8PT1Ed9laM|E%P!v}|J$v)e7$=M>-{<{i!R>U=~#2|ziy26ww4fL zQ>$FCo=(``A^zP&2)Tj(ZYG2z`R`Uj$Ta^AwKM#88zE$#|L%~UcR~;R`NPeG93s>G zYYDlRkT!CXbdrtzvmFre(KbzQ%&S#2aKWPf);q(L`c_K zhn5WLY$hkg&l`g6HZ^P)+G~RL&U4#qS#T=Q7 zgt4_Y6Vm?Pc0#*7#Y>Z8G4J=I?e1t6}G`kj>z3D8e*|u7(7P0LTG%bG5 z2b*8n?AxI6E!|S%Em}p#F>4il)no2}W-pYRZPO~cJ7)gd4vu*xOCm#8Cvs`+%yz{v`Z`}5}^tJE*vsW&xZTgpw{Nk+dNAGym%jT!v zmU;gTwQpDY9&Z1upZ(**Z#nY35B&3ohhOsLL-)5Iy6;tQfAK^2m-TU!L=+zpU+i&VPRRMbB&*{`#-~;@pAme|mW5^xBh(vG4uXPu{s}%l`NE z5AAs0tMXS3?Yib&H}w|v2fy{gM<1D*`ObMSSa`KI)qLA8-ZKMKC-_Cv4=v#mC(%;_lmE`+h@aNanie*EFYz?W`$;a`0r^3AWbY<%APTHD|DkNt1|Y329#&eiDC zMh-oG{578$J$_3h((=XMT>I~@|Hh7wZ~M&RAZQWf*zy19Oo8S6C=DXMb>oa~n^TvBecK_df*M97({Qtf0bNlc6vp2uucmI4x zak}rq_q{hV`r5s>J^P*i*zwz^e!qFsYpF|<_(difBVmOeD2&W?~e|>tL564%*-Enm>$0P4V`aK{Cw}TT0T4X<%fr# z|IULiYWc&7`$m5Jp~rsq`Mx*=YPMY|A80%^_4$5c;vk1 zN8X_I-1*Wie@7m@xb60jChmT850EtN4G-M*)~WZaZy9|5TmJT6FBw~N>T&zzhL%@7 z@P%vs<24`s?cW}c=^yNWEt$oKsU;W-Ee)xyC6=q)YiEV|qfB9#Bc>2q~aOnfr z=0Ew~zszlY=y{bBFLa*sqwn7Kll%Yc+qXUc`?Iy-+|~c*<5RnepWC+kZ#K2e_P_O> zcb-*#%iO?Ee%kI}a`~J88>}g;9=*SOhAGq!2cc&8O z4*G$ozvlPX=?{FMbMfL|?cMmb|L2Q8_{o@9ZPr?Yufh2)UDdf1q!?`qjcCzg+W`d*~aUx@|D`mA;+d`Pwf& z{Gr$H-+koQuXu56_havP`PcvD)93uIZ|%Q-ZPQ~5|GN9eTWd}4zHVdB&?_Fit@!0D zZ~epA-|zjG+iSlwKYrC;9eS+yqVK%=Rew=^?i-XhUpn*9c=GzO=s#7iylnhuyFT-Z z2fq8Z`(C*9KZfSc{%-RtfBnh-bN}yf5RZ?G! z|NR$_y{Gt$FCIE^`%CWl&b$Bmwog7!-}&10ui3bB@XqV!j(qxQ+nVl+_Py+tk3aO{ z>FP6{`TE4O-Zr*+4N8WX98~Og)k9c`*x;M0xs^ZOpY>>B-R!vn9p zrDfx7pZ@Uv8*X{(PcQvs_YJ$gvHQV~14mse<#G!Ju=%`>GarI~2kIw&w-7>L>);RQ zoOpin)TvWv@#n8-g6GryXU~zl2-!GC?rI@t6GF}41aNaHy8R?#@hFQM%l!S>H0)BTVP z7&Zr%wFy|vTCIi_1LD;CFyA%!{xDWJbr&$4r|xRSonL!^6}XKMatS&0#wN0zl(k%> zY!`OabR%n?xJpIWg6qeI)xlA9_mDb1td5PTqZ6=L{OCkrfklK(Y$F7R0{91@w+=V& zR8t!{)xMFOB@ykKA

tA@VlbqsQ zDO5M81JS18a{UShX3c|qVrLW5+{b^PLrAmAf4`9sGDxQTn+bqv6Crms!)TjZ2x;Cx zPNFagt9KS5%_wzD#byxp`go-#faYeXNQhhkI>ZVGc?GquLKBWkt^^~4O6_PFYETEe z0<@8)29BgzYJqgnO$gb_XR@0RvW@>v;PdHzAqoTFcQ+Bzu?++g7#cRbEl^~46Cv$a zHQ|2YjIk8J2y~xw%4WV=qI)?8h>l@%VY%TCutPkDjUM37VZ$%tzd@oG<-frP3d`R_ z&LhBDq4drq7!b)pbiTq}yLg}otbA9iv*1*=x@Fc~o#u$AUN5v2CLY5V^?4~45uQn z>>ytO_&!Lc`_~hIzfOdmRzg6IYl78jC#0!^kfu!xh?`Ib-$+P%d?O*73F%mKHc-HG z;p05`fUSjn=)gs%VT|Nf#FUGv>dq^li67S7C%ol8jH z+Mic%zAW<`K!3|Dn+9Bmz#xEL2uy` z1bQv+>wH4UfAQxR5JEo2>jK@lpZ~s)5ON!D2heko&;4RJVfpV%2qDi0>PiT?ln}C; zm%oeYUI`7Uh!nXG7SeF4fOW*0_8tRpfxADqX zN~35^TU83R){MtT=O^W2PnC+DrRB@IaXmeul`AC*!Fiz0+2c3FW+rDdvGM7|OeQ`Z zOH9cP3`q^F!3LnxdA>@J!1ds4a{P4bLDJZn*mPX3cb(MVxqKPxR%iW0a&{&ipBc~0 zCw-&6TB_Y%F>R+{QP4GZt(}|PJDW<&Jq^oc^O~b&H5*rP-P~*{J(-NBGUKCAVKZOy zoua{*RC8Uf2r-(=w6A{vIy%d(EU!vk6W2;jbZGhG)PShO(7*<_0a%{U{^d0~KNQr4 zpry{a`O&GwSa6NtEEMn?9DS#kN>^U0T~d|ygt4F-y0ZvfY#N;%Kb%P=Zj5K964MD> z-*&NGBT}vKVGcqYYZ-Jye{NMD*zy^ASOc}r;*;Yy=o}8*2F^x=Jq!7c9x~nkC?Q?z zqB%29qh*@cwa*g}3(3i@v)#onnS}_xdkQbVC3;-5q9r{W6&ru76a_$WE1&19EJ|I9 zy`A6=t_DYe6jzmkyWnx3lbR`$yLyH^mFoXm&Fp_qLGzWV*iv`4*5L*nJb} z>May=;N%^(sb-W-t3((32BW^Qh{a-7H}YPlLYwSczDcpIQk&j#H?eUxks~Cl*+nIi z1Ecwh69G$uY9$X&``fm;Pk0(ZC97a>jEgfs!K0z3*x32Qjx ziPvIV-AkAA32FbssZ*ye;IBIfQO;TmrW)X9%!x(GEOh3nowHOWCZ0{11<1UlLCBWl zw4`LgYXE!~Dn-*Vl_O>q?Zs*|t7w%Nd^cC@Tvtbcrvv?CSLnh|y9^A|Z zv7W=^1;e<+MpXo_>E~5f%9M(U0)we4-N11QRFs)9w{!Qj0FD+bFAd6g@~YAajddCW zsoOr5TQQWn)s_U)K^(POqgiY{3{cq)dEAFPae)WJV#yeLtgR_x3J>*okq7(8r0Eq5xn^59+8G15BV?#)4j04qe~yKYWjY9C(0_wBXz|jc7qD ziAp%W24y3V%{Gk2#`Y!SsdQ#MmX0A)3{(+_xh&Y7!`F;|p~D*!Dn)hXN$zVvmR{FJ zb6T#5QuD?`Aip4BLIvLN8TwmnL;hJeliDttpdd(3^q$5hVEjno))%*(ZW=-poI)R z1Svd7vk}n8jHDxk)rcrAJ^(uHK{Ug{z*M{M7_RII!6~<_A4m2u z>~Y^RgxCWJg3szG9e}>-?>&V0!JrV%)j<1BxuUv_Ln#KwY8bHN00QKDWO!s)#Sg)k zHR29|FWPqoA;?E0kS4yTr4daeaK~~lnkU@bNk zDApRat>eK0khxjm1p?HFHvt<1x0}#J9p|*(>qbZZshM2JlusRS3n1&IYBVdfR$y-` z+npjkfor9En@DdcF*(bFa_mvH`EXX=lN zS)A5FV*w={AjEaO<6lS)m5cFw2qHf@}!D`FQEhl)dTnTuP}~x&tu>bwimn zdjgaMyJrj}DAOgvVX&NYx>4{E2evK<+gxC&TeEP?!-|O6ss~6|lwn&wzZeBDQ2~Ae z&%>}5D}>-~0ON*xL0lKu23_siHK6X=HPFc?h{8Qr1F?BAYF^S9(Gd=cs^VBxig=m( zZ`daf@DN#dtX&DRHZLoD?BFQ2IjU7E(VSM&vlfliXx7EpHh832i~h6u&0I`*X}FlO zFBF}&g>ku3pVHa9PI|n0Oj{FnJXc!ThDtpMeAAR%iE4lv4z(6E?rxN|%o@ac-l+h# zLAYu-m_=An_&*&r&7(F?POTYUa-1=?pq>uRua%U<4Owzy7!;8QxJq?pU;jV=Tip%z z;q1yb2C>i$`H`t#Mo{O~o%VHSZU~YB9&$KSgODhCUC;}X;*DjSQI+j*Z<8rgM+2g; zof8U0aWtzy9aY&L%~fs3EW?@PM4)g_J_=tEQK!c)detB#m8$ga9%M?4I^r=htPb}M z4 zHwn}#>o&xjwt@c@N*^n##uDR+)IR75N&t)JmKf~o$Gi8I>G-rL;IWNOL@;xm zm~;hs1^0~UfMg^1h@CQmV|(sJb@z;}_y;y?_1B2!d)xThSsTW* zy;?ABMN1qZV<@lfHEqZ*gr2CD65&5)Q_2C|a;jQMnbvYe-JpTzNRJ~2c zrs@s_MFCJ#70BxVf79`4RRIv<{|7Kr6@a=Yz?b!$-ew3OLB#n;^GX=3CNj(!sIF+$ zwxSsMF=`Za<3zORluNQ2$c1*F-dBM7>+7%7T~G(xheWOw<~D zuzHwp3uB+I7cdW<38d)PXd=1%D8 zt6J3Kw*vTpee~!?RKfwcMXeg*mRG)xWz$Ch3f!IGo8Ssz!2pa8_x0|Q<%2p17re`I zn~jY(kmW&?-+QK341kvHGlK2LhV;IP$hIpR4$safGh-8(^z6R)3{dv<>G_$N_!N5p zt*%4W(?SVyM0; z3PhE#sV!pdi0B27irh;#Beg>F1==G4xkTuF5bll22j?CU_ew}V;R0N#XWYHU@O=o4 zmO(;Qd?3S{pj*;Y$s#{8~}tBbb+VaaIB%w2QlL)})!I5vCB4 z%@do@V9UKBT(?XyenBV~lZ_DN=P-nIa|dIY*xZ~jB$VHKsJOgz-^CB7b*M23Sc$E{ z>uJAO|9ge0$lyCf<$gM1y|-@Ci6l>C^_bfchPjJe>n?TdVy-t9P^BG6Dewd+lL4oc zX+U%fmTiOW^iGA@zUq)aOGa5#1yHL_Yi8zYP+yj($7#u|l&Rr#>N(S3m*rrK)L7&S zQ35!$3<0dD?TKDSm0$6Kk&#}8yCxS#BPFw7_EZcoqYANPy3Q~&Am@ST{uEU}y`RQ- zjrnLysER-;D;XcusR+DcNH#Dgp3>c`_A((Ugz^B!s61DsxUUq(2LeA;m&L_a6-B}t z)dvSa{u&`3QLL=W! ztc?dS2XeA$Y<6aRK9SDE#>bQK6tlU`nMS^<`z|kAL8A#3E_W+TP0b$6jO~q&?aNHe zCNuMMpGjwu@%{7hRNA-FvWawi ze=qyIl*0eA%N`*tEkJ@-P*GX5q+>eA9PpQH zGuV|7+$S$8H?djV9F(9~qdk@_ahFSoP^`F*@SoPQH6WJ5DnOij?Gi%p1w2ULq+P8o=L7`F5~R6Ln=*|;%*dx`&Z17r zv2>#_Z_|9*Oz8z9U8FapW@ir4Y}!0Zja~f%yMUl|-f%FTVK%ogP`71|h=FT3yU*@G zWj}Bju1;u!7zti{`Q{hDo<%!O2KOZFw{PaO)N^Rv*o4 zw0H>U0bX#Rw|971+gcAgROPhci=&qez5MpM5o3!x&9BKp?**`ig_lrCMaS5#t#p@s zfP@J7sfJc{%_uqw41-|U%n7NaXUlq7E0xS#gy{l%Y_n%(b}o)MH8q}@OU9>WW6TUU zXI2&~n&m9YCVK4VV)NYL^xoN-`I*uAiHUfUp|@8-#zN1M4Ox8`1;gaw)Fy^{@Esx# zUmwb7Te-iWoF#8`L(TRj4<4@1Duw(v_?u~Gs9ohsPLmdYlw6N@6cvTiu0qA~R2 zJO$c}Sk$hTk=>|PN~V^#-7J{iE%zcK6qkq_qwGj;Z=bgg62d}M`AAtaH1ISufDH-} zSkc=+WuVbOT;(v~!`~%$AQXv5`Uh0}5T+q@@*)=u@e7*>;bJ_1Rh1P0IX0sxTY2Vf zMc@K3bQZ0Yv>fOsx&a@$*~WDDce47>_>1JM4`UY)SET>p4 zXAMm+QB>yu^{CN2n1h4jK{u*!o*24agvF~?aJ~9^ZADvfsD&ZI?PApd`whj`3x-yz zyUB+^FnFrF!@r3E0OWjUe-c2zpO(wHRtoTE)yjEQxtbRTM+wZO>(vj1aL_0`{mI5z zAmAP)LJI!+hT4TTa+Sm*wdKtm&=R21LD%Bud{&n1&rYS2von*K@ln@_2x^7<6gTIy zU@$BW3b~tlAL8bG7Th63;jUzSZYnkw&m2so_hzP`PtOM`vp1e(XG&~tPU6!<4-m~% zG_;+&v&>nhW8UodQxdOC%RxD|4Vn`U+k8D#_r)N)~1osCk_}J^Ygx+S&H{< z!Q0n*-uDuZ{EMNheM1qgRM8E*Fl)|dK|fJnQ#v^KUWsq%^cHi0`?UHdF7i5OyRf^b zU+Q`dK3x5=zai|{e>Fe$`IyC_KMiVWur5EUbCb1P6^>dBjm|}01SMP5OYC0Dp;|d; zTh7}ISc9&X+s^y#&b+m%-zX%RA!n@XfQrtk45P&HCW0I=-_!;#J^gV#9%4gvM?Z)2 z(|1W_5P*%=S;q#UBfM)Yg^1yrsq<+yXqLYf-?CmlWHCAUQk8B&*_I)C!mP<7qpH%q zEaeroWa6bN-D1_TAEg@MAtqu|4 zd=|6@Pv^Hbyv}SU5JX!XV9K${zTDhMv1}iWIs1nha@-$nq9ZZZ=c5mG5GcgVqjJVp{{pIJp(;`^{WCGxAkOSGCVt~XEj6fs;^}aR!{RchSB^Bxfai*&RzcswHWp6<&Cp7Vu-6I&gC#1R11MJPRP3Av20NgBjwR&a3c)jikD(`L zO7b1+DqO4!SH<|I(ty1A%itCv`UTK=``}P-pNbzf%FWe44%t4^-`lI=hk%VnwruDb z746$#}!6@`NpmaRKXWSC>p!;=jH^@xEq>XQxa z=9rU>pi!;Ey(7qwZjMjIr{T)$V0_fOhN2}@3V1{$cm?zp?tlQ_F1~vva}%LRdZov2 z9H%+QwDfY6_XIuf^7z}lzO4Zh~dP#Q{J&OeKUn38? z7Y#BjmMfa0vljt94DY8$ml3n^^$#!J0LGSBG6c#{RPgVus=&5~AuK#s@k1zJmN-yv zICBezhb*5r0`RFN09ba^?G!Aqi4MN)GqdCIOnl}5G}uW`fb&M)(rO+AH(`_kCMTH{ zCkiKN29&c}#dDc;kG>|?GW2040tKAfnA;kNt@US-+XwFVF3g6YKtvIcvB!fL#DIDR6OWuAY+%_XkYQxi>lpx5 z1b@5XrJC#o+KlG+jHQEsVh}bN^tlDiF|8=%K(uwov^>X9rd$UD6{vJkNTrIUAJ-g7 zW56Hy^#L#AWdH7PvL7B>tj8n!-XPsye0wA1YRS=o?S*COa9^(;EzSx;6TPxMHMHV6{fNI^ty~ALe&9IHhaCI2Ob@WStB=!faAcrp|)cXOL zzd}Z8=FD!4AGi?ZMjMKCE$B7lvP@oJ8g5V8wxC;d!8`#%P)I2rzDAUS+bU7&LJ=6P zR;%^++)hxXJCR7nCuR>p>OB~+XhA;AmJ1l+m){;~q{joJT9Dr!;srh?2Mz3~(QE`q z%8t9S(BrN<%rud&jC9nANvs~B&kjTA9b69M9m?p8k`wUZ9HZq6GhrXftaqFuRi@2b z^-@VwCd{glM-^Rwnd3cx5tSrnNv7gqH)y`|Pb>=J0GA<_Upy=wwCNPng*y(sp3|Mh zj9KBlBVPH?9I&Qp)xg^zgXWd3CQtB()j|(T0PQ_esG0}{tMNaPpmR?{IL0pO2!!z8 zkc>V9bY=h|x+12uV~a3P~4Qjk|P zJhYpA*EX#%1H1)5TLRbUZvjH295LmfGA;f6fR|nEsnp)Of-)UgDyWQ~1^{Y<)t(Q< zL1a6h$8Pu*#BTVOE6wrH4B?mTmxEDpmRbcshbW(b_*VNcP=lD)>M{PDFpPhbIKtVg z35=g$|E;%iDd~lxQ={;y2&XRq5|%g%oDV!tCn+ zBEwOYal`P5@9WUC*F#7w0BG9Z->*V9fNJJ{^M)|2WV?V^`HhB>q|8do0piM4n^w#2 zrP*5ce?JGjX*ub^}z=4eKN8V&$rbiuT39kUUxWj|MsDd&b^is51k^dk^O z*tQn+LNUVZTDej~)>Nj(rj;Ej?gOigVI;Du#jdWVU8|9+6qX>i4jG`sh@C43@Ii=R z%LRMAE?1USU<0od-V z94f+)pnGHlwI+fm2Cz>*8OsZ>%|Qe~`?U=%z5H&5KF6x_CX$KCSUR3brc-miYlpT4 zOD|{+_0E;$eVZT@Bgm2)nE^(WH{l{r8^3}E>{;X9BisdM{GgFwFjz;Cfl>0<|?mzIsq*4kY=lf@T3% z3jtJ05l1gmxKJ>&M`#XAiyWGR8|fY;Rw@C8LfQckYjqnUGc1@^nZl`<(@M;f82k|w zFyAR^RvujB*&PKw&S_<8X&6Kj;y*$Zq!QJRQ}(uKmT8@A%%;$DT+dTkP0Ic+tB-g| zhSnkWNdvvMvX$8*Dbz5lg`$FUbxgE4!l)C->L1rE-K;{a38tGu+z$9GFTJ%`Lt;L` zbw1mzY!z|IAx*Zl9yY|9W-8^JR?1aNjE-tq^LT@M=MY92nR*t8PW2;QC~X=99vVMt zlyk<=Lig~fD`GpE$yS$uij)8a-Jza6EUKb~2Pq5o<}V<{G4L*G zA8aJ(ivYKfXBjB4$hXX*I%2+M@F*?RsGZ=x;k`VA4)?y95 zSv|QsKaAWha7G5(7Q`+k*|AUR%qa&9FVTV)^mT3+sQ`E4&O#F7SIMZeWk59W-wC>X zgs)T>#t!uM?yi@7`#DeDui89pQJqlDICUQsxriy~2z7F7B>1L*IvdgM>Xomnx8Df) zA8V*cYa%yF%CBpZ^Rs(v$Mm^mUvdB9XsvX^;rIcX9=LI2&MG8lYNNd)L%Ro#9UPx4 zBtQl}cQTQlij8KHv$JU*-?Fx#J0&gau`MkGj&@*6)`=OHG%uDK#~2X`XA@g9vj8h2 zmum&S(_ad11%jnu-I;J8qKJ$x5k(~2;;qZ$OIh>$E0Uv6WGZCy~ zfmQ`TC9`VfD2kk52+eO36mS};$EA{%4O{>%i%dW;)YE_h9~;1i8-{ec*=P|F>VrBo zK5sM=7MTkq1$fB86$Xf^ayk>)idM;@q1ow~#OQp=_1L;iyazk$SRSHdEh?r{q!u4+ zkCo*pEo8AG1^$a_xgt2y>yC|_8F=-0ZHbtP8Hhf%U8wBX^n0Y-P0SP{An9)(?(Oa8 zmu%Zbn-OI@kJ~6eLg~MOJ;(L{B`RsMSqLB;H}7-NQP`+Ql~K z#%EGKml_{Kfc&|Zhg>!}2&syCKd7;wmmCTXhxKHxSVc1DpQyw^EOQaS9Syi*!zD$Y zibF8J{&-=0J&{QHISkBjQ@`d|(ucxZVP^Ok8Tr8hb#MT=^t>T+{_Ht0_tNvN5H(xD ztgjG{(`yAl9PCAQ$ME2Xc3YD(EL@riLEGW45-6{1JEav zBtj@|1O|`zvuBW{uYpO(c(n&c;k7yrJi=@;y=R!0haq6vpPRZPk-TOX(d40fr_v36 zsol&Iq>iU@$(4tdb@WJh_OTc45#mpN13IC7XAm$M?Lx3e+I8C!cMq}wsh4Q)qR9#H zz?e@a(uaA9K4Fp#jkgsnZ9y}%-4e&n@3N378jN z032;WL}}n~8!n<;;gKTVh4_YKUp!v3Jipabqzl6+l88mfI~OELG6R$>KH-`Hr4tPj zUs2__ZdbLEek)T81Z)k0q=+qGfaNNi23ULm1U=`YYhlYg zM9y#MdcbcPn;z%U1~6R{4^F^xGPY=y$^i-Kb_w%*H5x5KgtEMub7KYt9hO7^ke524 zm+?{IWCZQXvF9$}t_F}$<+|jO{BwiFo65F_2lo+p|iDPD|q-9OGOgc`LvSuAcXHc343ML$& zg`zs=6*hyUP&9nnmrOum>l1AN^#DC>17hf+qqKaD$Y8(|N(_{Sq9*){QV#PptYEf*`lasuJeOjgBo9c3a)@ZUGx$&~>oes_7bH-+n^my)2K^i4A z&H?J9DoB{5hFC}!KapK3Xah%a)rF}5F~Ft+N76uVU%z`IVSy!hKy~#{4+!p3I6Qbd z8Xi22uC~JkOFwzKj~jQwcZdiGp}6Wrz^*U@Cb;L(Y+JV-%|K~;BRq+?k5*4;E(Ssq zOy2PjPbuK({lL7cE`wcbOyQ*WBnPJ$I98eIt^VVwVkb>c) z%s&|)mV11%ubaU9!{B}Ua9{s`iXX01PaQcDY998D&9I-YTfP*HfW6_WEFoV>F$s7p z{EL^%7_`>2sFh2sf-B#Nw5~i=Fm?@pxr!1ol%<;re~rB;+eA)RMa~z%h90$Z)Sxyi z7)%qu69wFKv+@+TeW|=Vz_4;2u(8I2g`e?EU!#^@aRLPwba~|T1kEXxMW<*QN~DbN z;X;@a!HhwAL5z}j*4^og%;4WF22*wM8MyF~VTD;CC6HND@pmr@fnHMlRv?f@=0s+} zv}&4_r+N4#(Qo*3tSZDX%2X`#gzn|Dg};c1j1?8JvAp$El`h@Lm8yA}DEQXS#^sdC zu?K-N)S$j1E*w08i0NAz(JD9s0yGp4g6FSm6pr#-pSR3fyCM^K2QPjpu6n8;5$Tl!QH^%c?Z4(o)BpP%C%~{8mM6e^iQwwevu$9=&WSo$R)N&o7R7|^o>(i2vBx4&WGARjEX~rX zS8_9N(0wBuiI$gyJ9yQ6*3WB#`6TH0Ld_^!8eNtOyDQX$7pS3E?I`O&zHwkrvZ3ti zQ@kdCAVxrkD*!<4+ZAC>mbs#7<$HSudU_+30()fl_VoAk2DX1Rw2y9~)j?zW` zr4B==sG~L0Vg`Ne^&aCnsM6M%Xh1GDQv9NoK!gFEqIRgg}qMBqettH=v zKpI{}kb<4nR-L_1+0O81~K$yTK|;!&G>@3_);1y9L6gDsWoz z?mSYeDnMWTk7KFS!P(@vV5KBVstUG^Uf zF~3t$7)tv@-_R!=vZi%UQhTs42ApwenbTxI*KjaD0KM9vb!96j&70*?OV0@)RNpvS5VZ z#a^Q9w1b?h%o$gaPROC zP@kbCbT0mDFVQOlD2{m%g@cEOGhR9V3NhrSCvmlXz=LRWM?kD;_dVzw7U03?IK61A0=PMT^!&$1SL|R55;$omy})Pg~>jkl$bt(IAZY^M4Cs2u_^S7yUl$;8M{ImLF*6-YOhLqjLiD-Y79SAJ0{pDHi1z>?S!=A6P`;-=fPU|}Vmnk#CSO`SbeXJNRU z-L(x!J+%%{3lanG83t_(jI%BRFB__?Nn}r;@W$!Gsr^%~0FEQYaSci%-QXLSR85G| zUNzZ{W<6N3i`hV}b696}ZVIeNd4L`6nn1lyR!`W`vEm-7Y$31>AT*qV=FeCc#RmX- zm)q#X=a|0&HXF*HA1EIb8Q8=l{4pq3q1HxMG{Kc}J6Oj$z=wX0W}H*rSQzDPZXjex zaUa=?@UvglDq60{TubmtjqBKe&_^Odt;8MSB0P4YZWtzHl{(pe>eQ)I&5%QD*|MbT z9FG@gz&gyVX~c$+rcQFQNg;%6ASau;2x;mjr0EJm$d!bUjf6CiVY?)A~5)qJHu&EI(nFZZ%TgcW_=FURa8()VIT|eTgeA)1J zkH2FEgE%puF1~jHb9p_1rM@ygJcTSo9yVjSx}yfW;*jFU5iIXsL@xt*ShxXGhjAv$ zn%-d5*a+}bAPTk?IM;@IF^w*ZmVyOB7T6{C+%Qw#W~`&IBCwPyq`eZvpTBgKn)Asi zmG5{lId775gQ-PBx5t0+ z$Y}!oH=1y{EN&53)YM*SA$&7{mc;ebvPhldqe6ua z+p?l&mYlX=O;*&BoF{Rew|QtraQ1j2H5W^d?Tsfh7?&}DfYa#}lM@$ux7?FlMYEy- z+#;>}MgjTk=m7}3U@9@1jL%G`GO3yAxy;z?^z{5pB7JzpO9fF51*&)!(dW3$9*oD* zd*jLJ*xZVne7e-+x~rpu%GK;2jQ5g|hBK+Lz47t+DdcEZv?!32Q4D$=%eI@*@_EL9 zPR&kc5_6dYvE+(J47rF!d+t7Mgd}!}nYsBiw1tAfiUud6Z)^YH&@@tl>G_sZ?Ti z=5$Xa*~W&M2%ViujK{}f$&5z>Vb3MnC*xF0AH#x8^K+1Z4bwxW5;v|K;boj!(FSZf z5S!W;KkVB9whmxIB5=K##ar%3O+zlnd6r^#ja_ysdD(ns!-8pEUnpyO2^^JRe_0Iy z>8yrqqq7m(=n1JJz>ZasO@Lam8bbUA9E=P(tgLKp)-pJZDRyesLm2V z1!q}08JolNw8Q0)kF@aaq6RK@)QZ^DiLmht{SsQemRKa7z^hEv&>`GjCa23P zg=hWo2Sd8fm1Jnm(zSe6?L)Jq=6v?4q2@>zdo=_z3hxeWudRc(Wx#grgnnH1d`if z)BMu4ArfLCca_f^>SMbh>lL6p>au)KCqz%iQ!RWxVzt~KSgc;%2DeC3$l{Qp$-<1P zfQ*ApDT-fY!gSvZIu#|r`l(8vTPrBhfT7aAwo#QK0R)~!e*K_UW(c|xEKuq- ztxU(twW@feH9(TU5r_*Af&s_?GfPrv&13cXiZLdh*}4wzmLI04QmSII3t)wn6P$VQ zd3s7>u!Ao_TnRp7RB^#H5yt3u#tjsU`1UI>|9X<_wUccbH{GeU^O$=2}~e?p|d zk@~0OmR$);HzzA%V*lvJt>U7H(8H_{LB!qHpD+aPFZlldi6NC3&rnJ4e=~*%-R4SA zL^@yaWI?O;kyYy{P&+D)9lWf+VhN*J*$;X1qCOr!I#H$8=-%AOjfW;dtJ^MEOVqq! zyO`}&*1N9E>{Y~^y`KdY3e8U#9CzD3Uq3G{DvCle)w7NyoWGx!0}GD7l7@ zvlVJ6DHe$~RiQMmq^a%nC^M!qQPS+J?XG)i!15KY3=u>G)1UH;5AYpg|E-2x{n z?q&f-S9OU8+32>D?mA1Kfr^4N^bk`5V%djN8?a6+;p5R z24Yh^Isv}K&&bXIns9JJ6nR;DBb%?aXfZ1;TrYP`4TUo$kLwk!6ySh^Q)TVkB$(qt z7tQ&seCM}*n&x$lCG5ew(qJ%y=6v>P()Dg%Btngxnb(cNp6&DLiQ(;V!lm7tNuJJ&Pe(7tulDWc05cy-8V7}oaalW&H!VXq z3e;lQf|*YP|B=`RzP_ucnpcET%?OY3h4{)xAZVuyBpW}aGJs4vAaIR#}|S<(lP zdX~-OI>jSdvle@lgacJ&AJQyUGzfrS(sGy&9m#LXG&IZFsU$U^K0B4!Dn9vB5HRG{EGYUZL5<_!t(Nja8kZ(%;jI zCAF$kq=uvCc>Wk8?^T(z%vwnkeKU``Ap0Zv-1#6Oc zC(%JwIc=JXt<`aQVpWjvcoyj5@p9oFLoT{jh2c23zw)*bUkXyR~?WxioLg)(P{reDn@%G!@D3i30KPrU)GE4= ztgq$;uJRSA(JV`n_#DnYHj!Y!Sx&JeRLR zy3P?1igB{+)0_P2DZsWc3h-4y0bpST1=tHYQ+ZNEjGe`kC~|j1e#SB{JV(!#cs8RJSoP?_A3lKN5J3(KeP%n zV1hGx1d;{89;3D?6#WAydx#1w0N<)Rb8JwN-+SDjyeQCb1II3u=&ygG`{+R(5`f>Y zP~GL_6f2wdv8wJkCSr;!6{4}MkQ+BjrAnqJI<}NdjNIHzL^{-)+Su6&-!2BXmXA3O zm_S3qR6t#bx93CQ&YDn~+6}al}S8N(_hc8Ke9qz-`W8(HOOuU6B`*GVB z*cfM{QKrRWD%1PZX{AhUTPsi{YnexBFkXV&NKgTcl^}nHtp9aO`>@J84;!sV7{c@o z4-csL0UN_X88N2M#Tcf-W~X7@xyca69g;B3fxigk5mKdhC6h77EY?U^>}9tdjMd9T z4)}94t3Vx9*)FxlTJawAzynsL5t>OI2fJcx2@C@@996lEFGWeW9coYu7m7dAN+q+F z(G1gAEJMat2m{1l1#1D(;m;}%rX**Uz&uo5Q6;=RU@fj(5i9}Pdti>J|GkE&--=Nz zg&NO|V07io@JuE?GclVSi)T{tbUHCJnaWHgrsA2ocyc;{-X^F#YcYlmIU=vy#5vGJ za(-qeo=j!pGqKUBINm2g1zGv$Ij5ZkH8ANsyDx!$Bv4*9DL3+4A9p@La|DP zaqfbe1WtZ714-B71*i@`{KGAsjbVTMlm_dAcoF2Thjx#sgG0NA-IF@xBwi7$O0kX< ztPudsy7v+|sY(E5I11Ont8Dt&fHL}l57ByL)%ztt3X%NL3mfU`qXc5W3M4;GUA-Ik zS4P^k26eLL31IYtx_Y-f#I_ZEo?(r>+lTBhs-*W%PR}{DWBL9Qx!#%lk@EQA@nh46 zNB7Mi(Iy7sD3*ll^4<1ijlML;dR@L-;|zMR`6hE@;NYNb+m%}0nVFv$Sk!M#9XO&V zvvY-G(-R~68QBY%k^?w&qMdUN!js6C8m(!oN@2Us8=Fn0GPB9VWMYOVAc;+3G##!G zmm}KwJuGD}bzXRfw8zqV$zJHZ<2HpU7CJ#|De>S@bcpY zWeDu>jbS}&oW;YHnwDcI;3&@K1yfTQ@Zf_}TPiN6%EIDjdByj|4+l#777>TNffbiS zzccwv<^m*G;A;Y#BLWlf3i7}`E`YZ`pNeNvDH$-AEzZ3gdFwK{a+#7%lgZfJ-u+WD zL&D3;FtBELXjd;rDL8NM?0hP|FCL$RxcrHkbUb+=CXY&vm%jy7MGSt#7pgCDyQkyh zi5Tipq}`Ag&0B*_)A4jNG3Mi&_%LPoU{HN7GqC5zWwCT@G?tP#TqXm4gx)OI6dtU+ zpK%Fby@6dJ*GSB8W-YZZF^5L&2ja=Z1jZ=ft;l}mDiTqf!Z|QE-XFi!(Wht4WLDcXbSySqJb2^4=xG1sf;MhU zkIj~b4xOM*aaU~e#@U0%dlN?|7srQ6Ic;ZuBYy2(lawz$<^YSAIE!6ajEIAB>Og zot@nmM!-CotZmf>4WLqjtDQA|#T4Ux@a9n@ln9jA46pziIy*|8oB%#N3 zZUg~F{8J|Kk1yA_ySm=_kizC56S<#;9(ZT!Jfb$EUsx0g2lz%Q}Bgxg(&rmSd1 z)6aT|wXxlW%jW*TRi7VN(&-xJh2j36kOTICrMxhoNEgJF&UMr8j16eRT(N(8dQ%++ zAO6+*ny+N4tLkFusY+r(cuGzorGxGQWxXJ!mgvmtH5yliX*53E$=tYEze0~{o29A) zsqx?%5=>`GA}4y@%vIqE6aLR_YPd&tok9a=Qqr=)YslqXxRH2eA-bu6guYrgSDY(1 zsR0eU@Nh>tzX9<1VojX(8mxlmtauHU(`{fwb^5cw(ar2=I+t^f4<}yO1D?Tb@!)b| zxOceUpF$;MKSQ-Assh>-Y}3upQ||}OBl89D(dY59LdR}~cb`RqJVT~$KZH`y3FAgTLDC`*|_d=&0MBC8UU+nLLG zFrAZJpKT9_ynK-I%SN(e(2FSGG3BEoB;UhoLtGQVqo~-Jx)hH z%R|{dxvm#J6`?)0Z)mZ2^oHW}!NlHu^TU%vw%$KDH8^*;xc|tmehj`Feud)=*Qf9F zO|kwO$E$VPsmDkj;6&#%Sw7A&A0mbGI3D&dMxpH^%+Dveq( zcA`MHVGAYq?`ki(QkT^cDO{Ph(^ERNJc&vtVH33h%|>grTD0htz1##+kU`-W`zofc z3Gs_U1n)ewx zd$!fJqMj?lJ4j?|GwW)e1kR?pszsHBs)5dxHtIbfvZP`cH3(z36J0O0tZ8YEew<>y zxSeQ-T{bNmH02PaK45>1p(>f55~xtZ%{pZ5hvYC*pG@Hl`^qeL8t}t8pa|h-TJWXN zg#=#zNgdKSg697wbqJ&L4OAg6^mC7l2+QAsAX2Xd7*>awA3A8$LUaI62;S;F!cG^; zmy)KId)G+Z@}09QR8lF5$6PRuhM|}&Py|bOqFQ*V0F&Znu1d_^%nZEigaKx73b{4J zfs2gzZGTMS3oM<-dLm1IcXK1_EIHUf6Y+S6s%@bc8BEZ<^^tf8;rQ^@rLKIM8u%<- zCLNS!&dg_{>`OA0Udx`W{;<3z?6ACAm@8th;-s80BM{5jI~bj!<|t0pGQdD_5jPoP zwJN&dn2Hv1^4S$FS9j=PAAu7OmJ^!tnNah|BgWUo^I|Xk3lvH^`g(i)3d9D$D(@^d z)WAL&YK>B zTl#TofE8_tJ3H6iH?j5tR{W9`Eu2~+j0-Q^5C}sTB@7PxhKGB>hTl8H>fq3~dt8$a zr`-~O*nj$~0Wc?a41vyWXooHn!Dcs?+$N;!c*zkpoP|Y~3~oHGK{WMTkw)OTAetRa zB_x+@r%n#bFc=kr*8@ugB!UbFa7o@o)-YEw*%NFHG8!PFUgAM)RyS%o%~PwWQwv85 zQ*VWVte$*E!XWik0#coYMFFPpTPab;hPVNWO^v)#soF*G=F}GiWI}X-MYC!tm7-}- z#l&Q7M;)`G9M?6W-BK1Tvy226QnXbah!;?`0qSkNTq#jyZ#q4v%+05vKCm(h#8juY zQwR9Y!eWnIluXB^8&)6CI}436(bq33f@si(6ITLY*S+Dx9STE?f!^LhnYXJ$ivYMW z_fHS}uuZrsa>0!2AYn6rSU($n{js;g1wBN$*%hLkpz}-Sh(5hoN6)#4c~8K1$T`qJ zf)9&zWZar9P=_61_;dAG1+EipO)CD{%Vh170rvz4E;{vZ{@P91UQI&-=66ue5 zkR$P5JQo0UbOT(bS>THTo({U97`J9o&aOieY(K!BFa`CKoD-KX;?hx%SRvJ+h3u`y z(C*<8KjPxxeTP-!oeM+8?a-u(AC03Qi3JX(n+7Blw*c%L@o)bb-!cj25S<=uh)ylY zX$w=mc9G2yPKqtFbMcvj@zLa=5Y=yoS)oRaW~~!)Ts}$r8>}p}zg|V3$ttEWTbCNj zfYEX$K63!3;Fa|>p-lvg(wX%eh)*Rw8+FIxp0ptX$Mdk6TV$bHDoLV;H{8`DdNd5tKgbc?ou|NcO`LEwn&nv`Y;(b>X%iZYmbdQT=$G%cf-DT0cMO9K=SJQnLxb@nM@gULV4(bV*Ogb|@dvFFaU9szvie@?atj`CAZ3zH;TWronKVDLHt!atRC!yE| zu-4Cv%_o!bnK5Q~%$iL}hQB-QVDHHynZ}B5u2Y%XQpB-D-$m& zUwUnbS1q$bqodR+=~!#Cs0GF!H_pz;oyZpYZF8FCM8-#PWfC)~bZllU?wKjqFF4z% z^}dwiZb4Mf^;g8?uUWTBb3W@ANM6(MCa8&wh5DIpmC!%ySf-)p>?o{IB%ke* zh$&x-)l<^GFiJYeGexs45oDBaALE%kQtCRN@(?k=FF{2w9kgjs!?A(Q$^*+pA*3Wu zNy+I}uBz8b7!tkZor-Us0ZO8|%LkcZHyqdHiZplBlQ6(vo!z?#V)hjI{(}Z0g|Ve* zM4=mP5z@z?P{UWXfdX3C*|4m}r$ZY!G3KO6L&w!y9^2GRfP)bFCGi5Ruv!S z^LBj{PF3RbN&doz;Hm%~F~)|pS9Q&cWV9Dg>x4Rv&`g*M;yv#yqR1#5C@SN;TRxu+ zlwt^u@9VAiXr&Sm-3uquQxF0zlQ--P z3wEFzg=sU-6o?hQXqKp)aMZ`>UM6ZoOan|=l+h}BMqm#c95&%mW>4k44#jHr-X)aW z`vQn%3%QU53h5YZCZuD~<300+UH|H=RzkYqmC*UTdi|Pw_C4tZ_kIXQ)#%t)r2eo~KGIuZ)(=9K`Ah-1S!U2<%diK^=(*a+7!{9vUI> zI>W?RUSNCw6pss)?t9sljjX+4!)rkC!d9#vJ+><2Gbv>b%&=VC>K+_W2M3}~uA=4* zTjWKGi09S3@A+0`oGxh9lEbxArp3Ae8L@k~cUY)=L_7ZSHul}4Or)ojnqDd?1qknf zm+*=W_xHA50OmhOEv`+Yom&}88&SG7q}vA zj%|*jp|;La#`liRDJjGiKL4!|rF&?%IW)ST`Hymm$XgLZY&mG044!U80iV;`S zqBiV|Za|Du&B&W&ueB@%K0veC3iGioO+i#;yC5ba7|d2BA=Y*rVyj!*Av`Jrh^J>Q zJzt=ci+x5 zqVVmVUT%y!2y;{Kowp@SuLh%pHN@er{_q)q!{_$_ZRpE+C@bhg96fU-dO~pT)KT-2LNuSp_P~}lZP(WIiT5&MYS>#5ZoxctXYndK49+Gs@o08_brpnq3y zugX3fD^PJk)PUKuz+|pDZ6IZMc%dq16ze*LcOFchlWMjOJbkOiBnNuJp_T#E4I^p+ z>-^mR8F1)g9@4I%osE=AYY61^6*^&0r+d-l1PgSPNFNSS3AYt2Z9y}%aE0*s^_7K6 zSX7i1!fPvKEtkV6CP5SLR%0QbmE(a(Wj)hh(KwcthqOVns8&J*uGCP`9d4S96=jkt zR56=TXaZdypRmjIujdcYx&YK>po%%iEiU{jk9o$mZTYNgiqP!Z#(a`p^R|C#+8ITLZ=lF1G_)Dif%sVvZ?J`gC#;r413p&qt@iczVC+S)87j8UOBGYRjtH>2nWeM z0&-)q#;gF>!l^~5jKkDC^>U0@c_f8(_CHH)PZ(+L?;RXe;R7WVu}DB=8Nro&4sFaF zq$=C_2&9;W@aKg&M5YVpFTliCG~%^n=Zdtf^;8P>F_(31&{BO-+c7Jdf~DnXra~>< z%rmVDfKsEy;UI_e3vizig(D?Xl>nlP;>Su@Aw=ki$o7?c*qpH}$aAjwBoL*BFU2Lq z9v^|iM(koaW9zq4Rq5^@94ezw$f2;o1jDc!n+hDr1HHW?>cBDymg`Bk7_0wUrM?_Y zST55Tl=y(rTbRL@-LqJ32n%95gMo#I4YC#5N5fuAO$bOlAa!VIW+gt=7Rep9`Km9+2~=zVMn0{WW!B4@~IOmi?T;^7?tx`9VFIk>tT(~YBX^h^)Q1?#<6c&J9bs_LqGKw~tt zX;JcWcO_fLhGom*k~V2cmP|__uCznhp{2AsLKIgNL$X4Y!z-;fHo|*awsmb->fZSN zJSyvW02Mu~MASt0orEfZ)H(_|Sb-e#*6SS>TMYDQ$X1{;nUhJ#_y zSZkY&!DblId&@Ch3N%9sGkFrS2Otf7AQQTPLg*uE`0I|@3J1w~>|o@DgP>K3U9>rZ z>0u4Gz0g=VE^39Sz*-NiaD#eJyStmvXTz!YPR*#uBc595THtlurnkOcGuj&(JSwUN zi%_(-HNN(~_WN$8W7qf)Q{y|P!~mubJI4(pIbwBTjj5%XiIo{+1#V=G*-OU!!iq8T z`t0(`a-w|WWl;k@dbW&7_&Hpm%3!$-lm9(BXbgnWfU57y=Ld~}sKF!028{trWE>}mJiKyY&=}}6#UDu3 z?%bhDR1p(UjI3gna)w?p@<%AmFe;6c?+(f}ULHoCrhqm~shfUKY_ua@zzDU>-#V|= zas+KcSTTSVo#2e{wr!m+t_Nm|2cb1VxFrCgpjNcqrd=FM&W;yngQsp=ibqwpI7C2eiRb4F$xO3qUgynG;YgwEfG!K zV7CHZ+8984p}(%7V;m4dKd>XK82Al>Iu0o2onm#A|H-ihR4xfO`YRVu)gQx#oTsZyz-jh0A)s0<@Z*pO+4QPK6r zfMkn>dAgD7+U(SdLF{5oFF_@n)r|foUvks47<}Ms zn2v>cfSeR*og`*0i)ghk?5}ANhS87RAN@7sBPubTI4ghp>mA#P zX5IdpQISk7pZ=JbQ?Nx|V5h%k^othvrvVs7f5&bjMX_jH<~DJoSWNb^VSFN;uitVp z3+m_7(@gA!-Rv5NjrUWY;{_-+Xw^-Os#VCkD&&6UT&9x!Fo`1dM2t$~C1b*|f+)i)3p)p<(-D>RW4Jztyy9;+1J#|GEuoziFAla%2Y4oaaUx{WX2615EoHE1u^> zwx5b3L~DK6@7V4ph~gt3i!s>mo37O1CUei+PfpDYqu+Kz-)eyArL;^wIl21V zrtjNsD@`c!(eaa%FY-~CH0$I$DckpW`oqZb({vX|JVLHTN!4d2~xYx+suOEE43CPL-)@zqe%t0o;oaFDHm0mAJnZ*v&;R zkFNS5NrtOQ_A-qA?f#lk9mxdWNeUPK^zUR4oUTAx2;u1$BW4c$^n)3$SaxdzMB5*> zGsx~=_q@o0G|zTcKkXe^^0on*C_dc|DM65+KLgt^(7&Aqf!F1seEP#qJIj5VIF(O- zxZweld2E+L5m;fv+rDC%O)6KrY>Gdr^!?n_Dilq$qf#BJ3{_IC>E}yLXlS}6If&b1 zU^fmb=4lb4B5f}^^8A)7mV^GAtkSkE}MXZwKy^{j^V`4xMD)z4(;0P)frMkrz&ny{}H?>qL z!aOajZz{^=&C@71$#wB$Qq!3FvEG;_J2=NcQLeXLJin1Za)0EBn7E)c zIN!#>4ggKZU=w&i&T7d>RX4ZMWqeqVu`y+st5z)L)&<5k{d^O-9Zeqj+&eI&K zv{})v;R{E)?Hbm7Ar;vD`CR#f_woI#c;}oj$Uo-xeD22cz}t4rfKJi(%0CW%(qJ@i zKk3`@q=6_)?j&6lfAe$1w%fGsSb@Ralm^(Tc4x;R!?WSJbe6~W{ElM=h8Y9~Hi(u2 z%WOoqLh47%xf+`|6@v3JEjrvqn^DOh(v}(6xV3rl#u8nKI~125c6_K!p;7mu4P(U% z0vzgE2~1EUKR2_={ld)hDuzSGEDk$~QbHrN%(i2Np|itFT=rZu2nLNMvq|r3Hh<#? z#gavVhPS?MVb~-eOpX;g3MwWfBBNU?Ie4#_^+}(|uiP@=BNyM|f#7M;GsbPD0Agb#_$-`nM&*lXHhix+4uEimhKJ8Iu9@fD%wn%H=Vqs}iZ zO-xSCuFPGRmw~P=UR%99JJ0Vqr;=s%`0xT_IEj3O;Rd<_W4*YNyGOj0ygh8TZ~M|c z=h#J_0&kT9XTBtej|g{(c&h}5+qa|Wj40$w{Tu||D#a0`2<1734~SCmR!NQ_NpU;G zIfepV^qxIE@ZR|JfNX7TMDqxpz{A1C|M@)e|C2)e%Yvo&U+^tgY-l&y9VfDjwA$YA zaHK2@%@&;z3%pHBoGO@@yS_*=bng1fiWJ)^87B)#%Q(-4!LaMG=oZ}D)#x{I^jU&S zNS-}#nJ0Wk&tItGhVyC-L?d*OqEVqB{);ngT;D9hx8pE;I}X>-w<>rHA@oC3p~3-R zl)#KqOi}C=&DnRqD>sM@oU+krcB1mS??{)~B=>3S<7UvZqME^1zGb>Jc%Hu7Ia96N zY)M^Kz&|33T8n+355{4)BkiwktG!+q#a3B4!c#-he~+?Lv+G5bF%au_RA+Qx4U1y{KKR?YeE|3=|KX05GQFZ z=)%~Au^Rn!*MjzQoD}CYryoYgXv9PeV(iOhF(07|>ImQu?(QD@gSltwp1<8OcX0P* zU^Q`UiNAEWA3WsXL_U^7c*$xu?a0^; z>?pEaI9OQfgy}I)bCM+L>jf?GsnNE$+Ot7ctmG(1HAzs_ZkWlVtFcNsb*)|(K@PeZ zyr0H$`k)#TeSGh}1ZaW1OPnW7xwOvlboh#(9lT@lX!q-?%l`tlX*3jaXL87J~XA&;l4SNzKHM|Ldu47OvAwzv-%v&KEU0 zb@IoNKBRs^#Ww43kReagCv#~S|+RDvEnlqkK)oq)$17G(tw+=NQ25#ZtxWs`gAOtXU7XpVzM}{%) z%&CC9@hVvXT<$C@ki=NF3G$$S5(1nLN(c$uJ(t0OJj~I06}F>HrBY~Ko?BTIx3Xs2sT1p=k@KUd(=*9NQU3f2#a50Ux_k^i7oN@W zxsbe(L|qXNgdofNDT{QpH)tqgc3ZZ4C+Rg$Iea*@y}g}ui1}+>J@g;ya)rbT@$}oV z>wy{UsN?3f$^~FcXTdje2k+q+hN^e`1$Go8cyZlt7fr{vU2@ToB-Ts0ur-$vvVI&T zF__b;P>MOYQc%lN3i^75eksL^R0v*EPLF5jCKe59XF?AU*QzUTUuoNl1ekKpkW?&l z$9y=y;^hfnPKKruBy|8;NLOD36035L@GjS`Ypw*QCod|{G}31s4eSyxW!^d#wSRn^ zyOqe+RTKFFetMkf0$<7cizDax5&ov-TW&L4^IT3WC`@5hbWuiA-rn9$N^L5xn-;56 zB^Pg$JVTa}S#=ReDN~yGaJh0pdQXMoy=xP|29#>=M$`h2Qg+wtsb*`4&(rMTk%dx_ z8?B*cNr*SiFH1KRX+`RVbW!!iL`~mr!yU64V`X`24UcfRN*grR^oYRoB7U`r9F+A~ zT1n);L;i;U0d$~zaO*pn(n^Wq@kGJS8qPI^#@S9_(@)7L5io%H@L4lxg?c%k$OZgY zjE^Gu*$n)3GmIK7?mIRnQ4(|G<#M9ocx3WSYbaJdG8t`dHI}EAW*1l1F3nz>fiN)6 zHoZm%%dBfa*;$#GALu2->J7qU^F1g@xch1Lw;3NDdij>$dh3>Nwccvk>u>pP>#ar@ zzI7{n%WimY-Dx{-ZF}qM^iw^TMUZvJw*xCQhRe-#t@!c2HOFgVFF6>_x7ZWcAUgUkORw~6871v~x7epT`L1%q*d1hki_4&(d z55BqO~f>~gLOw>?_iDEG{w=840Y*dUQEXj_wWjV&S8NjiRypf}au``4B zmyw;(mbZ9T@v4n!iZH(d8}q&FTB8Oa?lbB;%`Eo7cl3TBPxbv?VGk4KO2wDVjg6gR zVA07Zx>a|>Y;0n?n9;T(6X_cp290ECtyi;orJAD~ya+&2k+qt(*nW^174s1*2C8=3 zbelEfe)^4aW(Gq6A!P#VHeAV}rOQB`YP;x4DmXQikCn&9lNTiBXq%F0CF{p`fbJ_mH}TTQ2nrFIX)-7Ao?$Am9aC0ZX< zl@tAUHebG5_n6_f4%*1pFkKk|XDVJ`(E@7I4t>Ymk$DH@ z2O^@tu6Iafb$Y&Y>!W0zCCff+v8n?Gz_1YJ14R2b__19+u_x4qPyuGzrooie~iwW-48M;(U!qrE`BbHlS zT}H~|sPeUisflZe_UVZat*%TV=}9D&_uc3X)G29TpF^msrI_N#TI$F;)``}~+Vv5t z=k(+noJuXv&^nP!j%_-Uh#wcp*E+6^)30j{o2reR3)ikqtjsRZ0*TB!q~$%*-U)Bh z)aeu@pP!$Z+AY0=fdWoUPbL{mkQICu%ewW_&DV8)B^YWny*jt3CS`d!)E#Ay%GAqO zXBXF&muW^QbLcLt`zqB7?Y8fk*iF`S2^$Ec8{nZ;{2 zR~9m88tsOrWVSS>^kG5q)ss}x%C+US8#7C@mu{{t&g>frc|@iU35Q0xu76@~;`Ozq zndQ}MD|Bz7>r)6!PcVfztyX483aXjJv1Xm72J&9N*lE2Wc$HGSs;Z#o5EEVJ z5Iqd6lC_dN8!tf$J)l;p42=xY3Z@+6^9?N8W^Sq+|1H{)HuI3!Klr@kV&1&t#tFW* zD3Bs&9k{quZsj&Z+^Q3AxJ@l0ik!H_vf;J!=K;A(i1`~LCGJS=&e&OGEXORRQ8)9D zrMD&lP#pa6^7e_06q++DNNSq!Ny4=&X_|;Nwr+7!w7~z=9{Ok!XhMyw8U1@{pgebG zCLzc@UZ^B?fDwqdqzghRHcfB2colF`c-2EQW}|XtkIC4JM)5u#D%vn!G?r$rug)&b zOxJKn;p`OdMKq+*NF}-tz!EZa#H%wmaW3)xRae=o0J6GtAG1U~xgdM9~Q~5BWN-Q7i^+ zI)UbI_=Xuoc4)fBrnOU3Ad5wKuKDi3%q%?=sv&I@Ke+4y`nl`@Ogo^= zV^}5~Uyp!#4a-|q-cvxyV+zoShGJp@NXMiU;RN0(tD3jea1K|W+vpXdRM5X`#(IJG6>eL~CpqaFPO7aOs(d z=LAEhZ#FipAurIEBzV5$!UGyc#F3d~P!v{J!t5dg?xr2bp-ud3TjF-w3|Yhri_|KN zhS*ezbznh|IEdf`ML)0_fn`QghbrOASp$n-$N3TnX>W9Zq^N_4o`&{ytmfgK zOMF348{Rq8b|2>waT6tXVsVsz9-QbtoJVwDR78hzB-wF44}7IfU580W3XQ;OctO(& zjL5Vd555_2oNKr9iSO{CLxC1`=+HM?R?Uz%tn%2QD0|E1eayu9g2+=- zz=5%GY#qSQgC9=3_Aq+~ydo%zxaB+c#VrMLAON$|iIQvG>4aor+D-ocfY=c9eTk!J zO8(|wQmAjZ@mv#Lfq8MmnkYWPE5KOcIJ;Xg7-Of{-NG5h3jK@~&N9Z{#~3@!Sm6j` zz4z|jyVuKDAA6CpzCwZB?RzDUE&i>>7AUqzg-G@YZMWrE(k|q!!^38@L5yHJj`VQC zZ~vr)bVnnm1ezhl&G*Ti+QgM9kwT5c2$((Ni{3!zweo|vUA>rVQZ+V=MLki-P6 zOz=K}DRM}39#^y&SiTp+F~E*yh-zXhmFL44o=^SQ5NVW5-%rEi=fLRV!6E7IJ~4_A zdJ+tx51n~kC&mIdGHutAHY<*0Fi>oQy#0RW$rG+4?!RbCD2_~j7e3w z^&hTl!Fi`;XL9-?4s6{g2lnE~V8@9<#eT;`Kypjo9tVkkTy4oKv7%{+3z3ZCx*_40 zLf^8Qn^x4===j)jhC+uL;g-HDuXNvenQrzq-NFYIn z`9p(S9Sp3;OW4F+THbLRim{K7{{pb}VYSotD+Zs~;GIx4v6KZDKYzH&6X2~9oJQS> zQN!o1X|S%CmzJ&*euUEA?$`~U7)#NgbC0|t8sS{`@SMz3+KWyhOASsZEVL4ZC zl?~S?dpV0kMcOoWQQI?Cq+MfiNM-<*W&!>dQlu#Ta3~6=h=gz{8e_v_BQ^Tb9SBvc zIN46WrKsW8Q1_UQRRMakPE#a{NjOedDOWGl=$F#vQ7ZM}>O*hsnv<2crO8y*vic0~!m3V<-{~Q++eWN{$^^Gb4aj5Br z*{Gw38KWrfnF5Elvn$Km@^EA|HsIm4(?$)&;Q=)IcpP(ZF)@{=B|Is_L|lNB6Dz7R z#`OHMu}mX3O`hH40&*wX@B$n66>V9D85-M`}V&wZ8feuO&^+WSkfj4f|$EH6U!GgG0cRd zi6;PY0f(UcjvH# z5e!~El~U3xiW*+~F$?qiuw%1{h($iLp_B7{74cM?{Ul3%Br)D>&w ztV4W8*uj1%-wp;hA=!cN-K~vA0C!#?rk0(sJ#wei@k7`2YonCTIsFD-9bPGnuRqe0`cM`o=>59cW+&2ZPF zXsU^;{<3TO4?I2zOcA|_dGRjz>_W)oZAt56O4e;q$gu#AmB(SM8s}#+4n)8hYA!t- z^lL;zg|nh*d}WFDMdO24yf89wuK7c?4^By2Ef1jdFaZsh%hlR2 z_PEJ;S~s=;0lzRoI&2ptru&wN^H;lSD~D*JAT2c~QaiPuTwM~UMfeU6wWIivPQZP| z6}hiC{Yds>0tk=6o=NPMm3W;M!yV;+L#twpD@_Zz9Q9I6BOO>TN~z{+HkNcn4$fPb^LXn=C2uA1 zFZpXVm`u3v!;}V%#9XK2(^@jT;HzYOqLgAhERjg~>D6!HyiZqnWKuy2U3hCZyb&Yh zT1!-qYxH+fBT~geDxpSQGGR=JU6Tt+x~S-lQfBy_(@Raz5vAFUQ_m|r3y+HX>khDR znv95z-|ouBy8VG0Uoq)8Mf*Br|0uHWg|Nc5RB0&f6%C5*6vuc=Y5gNMRBZh&H&o!A zm~cqrXGbK!TP1jeH@--&qg*S(iCq{!w?$&SRpOH(F>UGREP3TVS(4MV#*)1f0|)2D zD|x*5OKDyd+$4N#@)=A?*fNB^B3*2TJ7HwCxt0gjPx;j%8tJ-2ejluPKO>?LBKu?6 z1YYy`LlPF>IxfL0t`kHh`G=bYQxlcZ(UHnXjsMEg5Mv}lhADiwmLezxA8AG@&8SR6 zbhIa<&ODU9O7bm77x8WHzW8=OZfWJY^q=qQ8n4iWUo@YzTV}_Jw#}evxtI=ZSvs?v z&|(kHFSB|4VhMiHN|3xV;TonxtNmoyE%SI@vp;{A(5B6(6mp&byC~esdT+Lv@ z)Y5H-Oph|8|MpovKH;rK6d2O`#gNm}!xP|*1hn3EG~5Xtuf+$OuZh8?z{XgSM+|Xa zTNBM@Fw|-K7i*)H5ktmxLTibTBrb~87xTwt!utop&J4wBr$j{CiUPY4s=o;_ z+E{l=Cgd19@GAeSc?|sPl7aPJkt_^fS=f*hMn!9V-D-f5`Bogu40no=SA?TSc%+h} z1kRJ(5TNFGyM~l;WYF-vZ7W#sIN04t4kc1*s;q@TN!l71-|7KrBG>w5CXP2^wah}l zOtTxVDQ8Ay%_xj$YE1!*shF~-czArII##2f#JGpiureZ+;6SL9H{Ks`Kq4hEQGe$< z4T2y^lq3rNw|$yRpjkqdeL6;>=$1YA%l)5XSs(9&G~k^6kzBR1vJaLM70|fuQAsi~ z?%<4fHIMOLOEaFRg5*833-^T$(;-JzE6dZ97#cm-Qta5Ye8&@;=`yQavO%Jt`(!SO zq5I@7nN8a;ecvo5V8naXQd~9$E~6iC8OF+~hk!j$d4>px(0`z-cRYR0c7$QC2?)Kf z6k09lJn>}g(Jec)0?#eV7`do)yaWSwxZ!DuA5)2C6ublg@`+Nk(P`IR({^ImkIUq7 z95$yQ{mGKG1y6_#$JSpoJ#hq4o=kRB~Z4(X};V=jn zb9n1c!}I*e3QD3JjU|uCq7OU-Ud!V|d0(M`E*Wq+wrURY<9mkZIy=TZt`y|EQK!Vd z72}4DWi})9)}hB*L&j@1cD`C>)PXn0u+!MUindq3Wi=wBX+;=IJ$KM(d*oJ03t2ZC zII`LBTKuk7Dhs=0264|{%igj=Y^4-E9L4)yW6=7kw>v(O??p<%t=)e$!fKjAv1|$2CHe`nPeJU)$~6y z3HM&}8yg!N!tk7?HD`|;uP-15!2OAGTi*KqE7 zZEbpCZen&`*|>YRO~*0oW?~zorrMYRIp&qAa+ZZ~-UUMWMKbBZi?2$&ZPiQUSRurf z1}!TV?nn9GT!Cyv=YJ&qis#&LSxt6Jjr zl(bW+IE(J5Ck{oG;FW7)dTw?;r=Sa(=t>myn93xNJtu3ZU(NEYyu_f$mqLngeGJD8 zDE;{I%+%7%iu9-!S52>QPn8^%J^AWuD{C{aFU~HJ!?Cq13#&`y`zOw&V5c8c zfZ(M9p!xNG$stp- zg=g`lnZfrlhFW!gDS2w_6hb;Nc^BQF{gzTX8+N}^wsl%kvx6-6Wo@QdWHR28U; zTFF6{ z)WkpRI?X%8aA~^S^priGc68gSN1op$k#Jis66wCpkG@9vFwP!XnO)(oWJS7oeAG82 zafzZvM(ub=ysGt8u?O(&^d3MAv)D-Si+P&_`?jrmk&f_lb9esubtZ39GH<;$vlC6w z#;<}nAkOx8Kzt!@{Q6(yypE722d@dbP|d*hlqMtzKin+8FoL~)X==u3TH$8o`8sJE zTeeAtD{)mBhMRieZHHFIR;7(;j_r2t@b%^rXTqYWP{WL@mKW^AUesuMXm+ra2 z6=}F!8N=qp*cCb;50@)twPlgh85N*0ex+6KCjUh(@}7rCCXW{$fnCi zxt6etGuE6*z~9|v67Um3b1$$_RxC>E4o;Hc+F^dZRnd1kE!(|FKIhh4+J&+v-8AUy z`J)Gf!1TKxmFv;+(D|W};yN7P3PS4Q*CtjE6k+M|naeLtKHsMUkHtLs{O97do+?p_ zXl!G~{m}6)HMyM)`y02ddT2*tdQr!|jnsrf!MlGWTt&F6XcnSY+@mvapx)$X z^fRKg$q6%7#bO7BT@;^g!adj9U_z=;P9x)MR-rZ#4{ob8=eIg(sXSmZpHK|I(Q|O3U|4>0Aqy!wYGlUp?Jz zRO(}i%d8V#>mPYz@^!iASxWUjvt_x_;I>uQy`&$hl*^;!>0Zwx-Hpe2^t*he06lXQ*De)ty@zI;r05a!~K>&H8-&|J25?(^eT)NN)OcCtA85)I>{%b zsy!)5R)Fg3c0c7cU&|sZuVsOAIXO%oebcPh?K@otZ!OcDmdThm+nd3w+m%~yTyHK6 zUzwY4c=gu#iCdR~D^B^%*M*aLx+O$X4BD!J)31=;7Y4fx`x;E#5tq}h)Yz|Oh=vs;-MEH-!sb9pvc?ynjJ@5KRU(ph+tSQk?o0e zHcRub!3nNtxeaLq>^6`eZPu|n3dUzZeV#m^!tbG|jOkcG#4lcqO@~j2kxq}qIafe< zZyJJihx?C819@5iNySTZL#Nb0 zqgAIpDoP4Nr${kyn2)la&C9!K?ZjCh(Xt{!=6qLP&M+Qyh<4J2-Hu?xV6*5q%mc{#305(=ydyd#PV z5_Z-eT<5%=r*qyo#%7mH>~(^MWz1XAwij#~bMc1Hqyd}5 z>b`?b&Iq(y$7{w!vu(RIQ4OF_ZXlH%Lt2lR;KxYo(tVUTXBMA3#Mbs4TnJo_{wa2w z3jeWE{p1ADrNYTx)@h|%os&a*%}{y^W#F#5`OwduGQ-2Sh~mSmbTVF(z0B><$+5S# z=YXBa#`QqaT{^tfl?Zz&K9o15%fdkyl-Z<%uA(sj&8uAFzr^R#d6$T*P+XKt8I#U}0V$Ijfw1IT-7NS?o=QtjDkDc0{C}UX z3?ntG$qElGfpqC!9_5lHBkzD%QUk=rtg)(a+%SkA_a*ZvWw%bz>cgj@X=$e=*t5b^ z5^3PP#tAx68oQ!Fo?J1g6zd{ann8JL;?Gn{@F!-orTZL4Nm<~f(McQO~0 z1@EyEc9oWHd0RWC3#-qjQsHvEdVG2J-N3)8jChlb{8<-WFS6>Mw>jkR7{%he_-n%V zhazv&axV@Hq=Kb6@8ZCKZqb{37~t5Mv$s3u4z?xV>i9d@l8hA$RY}cQcT6NWxaPE! zr#by?v6>>GOY}$`D!%ERj+&ZuK1cUwtIH%ZNHl#5Y8 z>Q5qdf;IPpI${fT>gB=vjNoNt3fG|0bW3SdTEW;D+)>NTwNN>_*|@-aS05t!!IzJw zyO}ujVpk3=ki&FoX*fwo7A?NR3wD&puFc+Bg6>emGG<;i?!RcGZk5LuIA)7nyhXiTN5dT_2<&f}`@7hEOFm)tbb ziM+NM!5d}MGF~FOf$?y2-SM`CD_Wh;W*qyD9mFh^Vj&5BsA=h5)^#4rouz!x_0~F} z6=2fzp_<;S37(VS6HK=s)Dm6i=qg1cLojfifb$FFup^gY%Hueqsu_i`jyP5xC+D{n z_>ELoNAJl`uRLf6fQb~*5c6#B>qHu70Pf-uHif5O*r^6a9%`HLL!aL0*$;NjFphyy34?O4r3 zI+cj|Kzh`@3Yb6B{{#P8h9+;ze2_4>>rouI3Tzq##xfT$1Y*yR}jDt$?;Gx;U-G z&q)c-G-3vtIr=}*HsADIV|lncS&DMvZ6DIvO|IzWsmY&zP5VyJEf4QPxja&q3I!si zVT@zX1^t-5O$i_{$KfW5ek2ihQDR6_gYNOlgQ869Vj|g7j4|5}tp+9`R%5+&k}+0b zj8zza@Wvt!HVK_zj6K3wUk@&dD4fDZjpO(M(3636yJLk>5ohI|P*8o#3fBC<^S#h? z0Q)#&>|+8p-Z-QK*vA+v9L6OSxR&CR*9+_@uBE`;6uo_n^&LJgZmT$f;FI`4C5{&u z>pKaTx;=*&>plDmd_Ubib4+wI3gfLqJy87Jd-v`=DT>GYN#disy$CBX^YGeZ+PxSNLgyl38XcV;!O>7#*-*~39H+&DH ziO@IEKRrhn>-!`+XAE^DQXo@(?=dcc7*z|JsO*J4#u!EeGiq#91!x9ZawA`uDZ>v6 zvKtZc!1Sc}KBRpg*1nHu-ybY6hW+)21rkv=qL2cJ<0wQUF%T+t?)Y5QxOcbr_-}x{8hi@DC@XvkM7hm|_|N8&)ihFbF z*dILi@1OmhAN&48zcccu-+Aii-hAs1|K)%E6CZl>Z~nsQOW*SkUaQ=G6Gd`wSjCO) z9~MPkK)FJA_KR<@^e4qPSo)0k21^f%@1u;dZ;I+3)4oBf*F+i=C`S_rdl?StBEQje z`HkUjN#y_9$bYhR|VucJJQ5zt_v|(nxoLM!FMX>;bVCAl@#PF`nc9 z*ihMcxzPy%%Z;2J16$8pR@1n$<6A-ThOuP_QO9(Q8u`|!1lA4<(Y+?;O z$Fbh?&v?EwLXde@=*CqKK>79@IR^We_?1ikCpQ%bYg08R$#cwG5ip~C>&NKQ%f2> zvu7Q;W9cX#&XNeaFf=@@5cC*HzR%rb>?iNBBtsv`pi5`P%6`!`J3S+?mBY{ngAyaF zk|Ma=4%2JU9apE2OnGliqpb2x+Tex3A|dsT>PYIr@Gv%9E8|}ter|{nVQRXxv@mBF z5-~$%gHzIhGn4q=4Llm&I~T4;n4qF{$3#85H0)TmVbrYM8#Zl+o3v`r$2+ZI2hE&l zSRVLn!$eWn3Uk%R8T(v;J;$1MxLM-im7+jX5zsLH7uX>dHtUIg?aeg*W@tucF1<>$ z1Kwb4Z7adV-L>H2hbTU5)=4FJ=b#@!UkguHH`xM4rUd9%OQanvID%a7k16 zG!OLYxH<$LfbqmOow4d@8TyX)r-G}6Jy1s-*9#{GeCJS!w!CxDA4*3(5H3%A3zs_4 zKM*cYehZg6E|(re7@x}E@*_f)?>5Ljh&X;H;Xfdsi{Y(;S#jWnu-wY|{TIZ98SgK! zx#|(de(VT)n$1;VV8tpIW2_fjYhibIT&yB6cIuc2JC;maJu1SF%Cx=f6&|);IV#g0 z7Vuz${l=e-HDMk+0!y1QSACQ*2GiyXj1}I)SmC{7p(E?uV|^dQgq%-cu=}lP!5B&p zX7D1S9Y(echGjVpF5+s%z;0SH8fXyFTaM|5G8}e=I&K`50YF1N+9+YgRfeIaA~VeQ z4L1rL8FxAvXWdbdV0I9>)|=A4tB1DZP*kH~I+iKH!ibE0Po=P7`D+bxjV=+wh7K>T zJa7~z@*-d6Mr-4UKtV-A;&8r?Pv(JDrLnQ@xvBwFDaY$HWfHWg(GGCaePg{PLmxpX zKWtSBcS7taLHT$d)83D+>Qf-f(IKD>H0+ zWKl2tKFH)7P(x67(~4XxDuz~s>)t|H_&EUr?{nOm+xrA#WT(c#lHSJ|gF(0VF~(?- z0Dq&2&5ef7w_^$jgii|Po}|yqa4ZyP;cK2x{iEVRt6IEl-1mw6cz++)o<7~f{^Z`h zdw+cI-o2+7`>_H$&gQDm2<~|oW9%5a%W!e`DaH!8r29$EIeqNCz=eUIGmQ1#z1PPq z{DCEc!sA$ud0e3lcHfttLoBqFW4tky_W+Mi;D-$Ks?LGsm^-Q|3NaKc5df~E269>| z)or(FyNWchV4_F!gUB*7s6&r+EHhLLn}*C$tE%%%Dld;-3$3_w(hztR6@+x%!cN__ zRF9`)w=B2mDP93*KzmnWgpg*3o5BYs7G5BOpNBb9tZjXYjEIbV_6WkUs&n^qjJ?4a z`)?UzKf@UNI8Rw<@O#(^KVKC>@=eCrON_DaV2pi=G4@@IF)W#UH)HJYFjn{>#@OFw zjKQ`Fi#qrPCfr5XO&RN*evGm25#;ni#(MuM3H`f$$0kJNWyX5{=}E?BMdaUOtncZo zBJjEh{D^q}JZQ)h;GPrj7sUHL7)yGXqRBq^51>)yMe#l>-gm_N69D(^;*Xb+{V-#1 ziND{E$ghwcmOuZ!_Wko9+he#BGi=uX7XJ7_{QPY-Ir&cfxq}~|8|;9*!S>>f;}4ZL`i{N_lq@Cne-N%_D)|{Kq7!L+@)le}Q6+{fS8ORI(FM_fAL=AabIJvKr>7nL{^Z{K%AR{#RLB~o|ke5hzZHH01MUGVr>A02}7NIn> z%+L=!z?1MXwzdM($JOwp5|BeS8H-^%8C&=6#2}$^C8HaDr){-m_H6uyWjfJD_jnr) zmQ|Ir`EPfuP8|P~UOshSssf4D@dQm%kwi}RWcfJ>k`;iSo@^561Mb0nFXF&tThWm+ zg0yQ}b)+7Z>K;8R47Ly}0fMq5Kz)LQO3QG#3bmTJO{Hn6PSrDRw`?_0L0Q!P;j-SbQSEg_)=Jmyp* zUns0H2Uf!!tEox@N*$|NO4ow2TTy7ajbO)DgooC*&4#aO=cq&5Y($o$=1#IOG{0?y z8?;+Z1_Fd@Mt<8@+(sa%hcX~A*L1C@BzBD!aW{&D1i2vN;@J|xM~*>ih29?PCUhdJiM)-7@UVy}OycZ%>V%R%)x9`ZmJH-0fA01-7BS#qf6Olpgu*3ZM=-kBe%FNQgImFHkj*ZWG z)fxB3=xaA#ePd+q_K5Z7==JNH6V>+3JDWG!v)8Ln-lYBe*^B=d%73%7 z6fV5Kd98Hoyt!>ozV=3GzU5w7dVhUte)ZPUYjyL=CBOOR=DfQ-a`7(?v2#6hRcJcz zU9_x#&H>S^V~z%O?C*dUV|y-aHrRqBHbM3sfprX<^Ke#E(mW{A+w$cFS1KIr?E5Be za*#=RkY6%QWs(AQ_`Y9)#1jrFWoq!a@B1DcRr0e%G6wPknfO5j8H&pJk)Ke`s6>Rt z#xXFIkFccu3uG3ImfF4(mV$80FZpJyHNe~ujFtkg1BqYa5~mdES{L|NOX7w8ddUo8 ziyp?vbbMmq0>x$$xM741(6WhnX9!P*R82eemQR|iEactEiipO- zRM&B}A@aSs$*em#{g_I6CO4^r`C&G3s(PaM*y@?z7wdXoV4&7ei3SG#rm_{MuxN*N zNJ_DeX&7KN5F$-v1<)2Hrc$W(?RMBssMjedBEfp27`1(+%;Z9;hk?>uQW)V-8u2KZ z8z08;;4!T&4bN994YXA)YTa}rGgPr)m0+~gYWu}oo~;N3Vq41;Yn3Uyr&W_wJEbOh+8#!3Jz&;`T;tkU090(D9;= zVYkK!8nh#Ob9rtO8#Ip2Eniufn?Zx%>_E+=fZH(KDEfiDWkyzF@TMwzjm^+rPjG!0 zW(G)1K%(_{90f-4cV-@h-iZQp9mgbvL0lpmRZ&sgKBzDSR;M_-QRLIT$O}^W`*YKf zk`WantL@XRVzM+C%(D;!bGvH}S%*Xw!YHuJwt@<2kcFC)S;b?d=i?r;-_WAw)Ez$`_cACHXa8w%w!Rs{$IK;f$rbt;O#M>3kCfvi73la|_eC8Iy=^dmT5TjVfRs$?kZ!L>>P}xoP9w@C5lx7kuGtmr4Rwp?&{e>dHQz|grYl=8Nl>QG^Ra zZ+76-BHLy|;U4{>MJ0CMrQ#AgG{g_`wL78RNZ9ny>^SDO7Z&Lpw&+u3k>(i@-3%Lk zv2CgpNzff_cV054-8ClY8iV%9n!x%KR}?Wts|6Pt#mJOQPpVuhk?o39fwof-k|LE( z0@IU$#8b)IW}`?~ZOD2_n?1)6)ys3Os^==j6+6ySP-v|n2}gDxhZAm?emrGP)&o6T zv_sFKTb1(bL1`SzggPWsBun5&=4BihBd%ibcUN`obvDT0YfWLqRj%D8y(6jDY4i|({zy3GipoVJGZEF1*WraIowb-o3%kVT0-cE*rgDA}Ri*?V7LO6&n!cl}oQU<@iZk~q) zMWGOOJTEg)q6=tmDBp#O_QZBJR8%<82o=wR?zCknSrecYE(nr3POn&B#JjgJSAC1I z&-JjUn5Kjb(VoDepi^SloA|jN_O9IM+Gx34EZeRI zt9`@FAj2{5lHc>%_h+>4&oai|Bk=QiEga`QWZoaqzJFBv{)gK4k861NN80xnweNqd zegBm9{nK#VAnNcXEgYMiW%$o(;csi-U)H|=iT3>!#%RS6&o5|g{6$TL|0S*dzs%^~ zGJ1YREB99!!+uzLeocdqjn<$8Jio4`{~BXN6L@|@OaFB({cmdNzachiipY^b0p35`x~yc^I?BV3hE&Vu0T zqwgt%zgwoKTER6)-_sPHD187$7(KiQm4%9cHLmXm6Gc#X3E@A4@N=>V3daq-eV@&S zk0Bg~U*oD$dboAz8$|e60uG!F^;NRr7ZLuGSvV62{}RG4Cg5B~_&?2tUqSdUWy5C? z{;#s|uOj^aK=^C|KD?gvozJG9NB9`RuO-rd2H_1#{~n!?K8tV*;h#ASUoDkHuFoU( zz1dQ}fN*qN-{%wQe+1!Y5&nfl_>Us|zs$n>UqtMNiaj>tk{^;p2mcb%+@dtN zqeB(^%Ty=PlAji3OB@sQUqOoR6)Aq17mqt>RPn!x1mCA8IAXhgCrY5@*O2H3WTHeB zzM8Ex6uf*4RC2+}} z!oxT8N>GBMUMET;;zu!|x!$ALt2=hC#zM zlb!LqNcAsesze>WnXN;rGk#C6!#8v40CrP#pae&oVU(@|I8W8#n@~B;H#>nk)``Np#Nf}g6G6qELlhyW4CxE=zWWumuW2-=X~WJ z1G(gfb|W0T2#;=j2@kV?GtlDCz#s}WIYUk< zF(nXnBUK(#N`%pjP)4M7P|>zJ+BveO?P|qDK+bAS$2OJS066gd>=p$W4+3k;3PKBp qtvfrk8A)XWGWlka^c)$}Nj^F0xJ^|_Om}%G+2YoVv`tnv;r|8B`bKX6 literal 0 HcmV?d00001 diff --git a/MikroNUC/20260721/20260721132001-Config.rsc b/MikroNUC/20260721/20260721132001-Config.rsc new file mode 100644 index 0000000..3bf6ce3 --- /dev/null +++ b/MikroNUC/20260721/20260721132001-Config.rsc @@ -0,0 +1,5545 @@ +# 2026-07-21 13:20:01 by RouterOS 7.23.2 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN +add name=bridge1 +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no +/interface wireguard +add comment="Interface for Master Connection" disabled=yes listen-port=22022 \ + mtu=1360 name=MASTER +add listen-port=21641 mtu=1420 name=wg-VDSina +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\r\ + \n\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n\r\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n\ + \n:global MkDir;\ + \n\r\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\r\ + \n\r\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=*136 +add bridge=Bridge-LAN interface=ether1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set ca-certificate=WiFi-CAPsMAN-CA-7DB23C23C976 certificate=\ + WiFi-CAPsMAN-7DB23C23C976 enabled=yes interfaces=Bridge-LAN package-path=\ + /tmpfs/capsman-packages require-peer-certificate=no upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\ + "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \ + endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \ + public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.10.0.2 interface=MASTER network=10.10.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system package update +set check-certificate=no ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260721/20260721132001-Diff-Config.rsc b/MikroNUC/history/20260721/20260721132001-Diff-Config.rsc new file mode 100644 index 0000000..f2166cb --- /dev/null +++ b/MikroNUC/history/20260721/20260721132001-Diff-Config.rsc @@ -0,0 +1,5 @@ +5394,5395c5394 +< set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ +< enabled=yes +--- +> set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 -- 2.52.0