From eb4d31861d03af7ff77967fa62e7b0b8e7431be9 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 16 Aug 2026 16:00:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Aug 16 16:00:03. --- .../20260816/20260816160001-Binary.backup | Bin 0 -> 390807 bytes MikroNUC/20260816/20260816160001-Config.rsc | 5534 +++++++++++++++++ .../20260816/20260816160001-Diff-Config.rsc | 7 + 3 files changed, 5541 insertions(+) create mode 100644 MikroNUC/20260816/20260816160001-Binary.backup create mode 100644 MikroNUC/20260816/20260816160001-Config.rsc create mode 100644 MikroNUC/history/20260816/20260816160001-Diff-Config.rsc diff --git a/MikroNUC/20260816/20260816160001-Binary.backup b/MikroNUC/20260816/20260816160001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..bda6fb154d2e38aa4e74cded5b5e89a0ec1b4d7a GIT binary patch literal 390807 zcmeEvcU%)q*Y<1@Affjnh*T*GY27-hy}#nuz-MF zET9551iK=F1rSAn?>9+6^w#_KdEfgf-}{(9c271tyEA9zoO8`}W;dC83J&Ie5Cf6` zfM}{kJTE#XBr*a803ZMW0uX+%Lu9cbvcwSCKp?x25C8}W;pYM@6TyqMh>zy0i!N^^ z+V}PM_bZ5GR{($&a3NsPR3?V*miXB6;Kx*#rUL zB-A(nKo>YA547?eF0SG=)4+o?Hg8$Or z-#>Uuab9dNFPbP15M4zMjmu(E=~Od1jmb8nP*@BUAi4^C)RIoMq;f5ZJWDFyl0hN- z@F=YL0vD1r4rBt*i3JG20U!flSNDMqEI>YD0Reo1n;y6^hxLMOY!m~+HhyiMptS>S zRD^w|i30@ed#DL*sDv&oAYcTIe;eno9k@`?c%eA7@gsk|@k~CIOhb8OGd7pPGo$b+ ztRFU>`oqRk|DBD`_}ci4lgQvO!^0s6+b<0}-y$7>oj+u-N!mn*aD#Ye&epDYfEdq5 zTu54=Z!3Vl0a*+HSPB4G1^`$N0LTUaWbtnLd0N`I@0Z0M>Pn8ypt+}vR zGQ3I}00QT-03KN=`jP0qA)pTr%fZ-Vg#kcU5l!Ut4UBD_o$Otw2HJT!*_jMR z2N~f#L%4z5xDc-Ocb9>;9K4JInurnyF9W-6@GAI$tBm>X0y63Zk0s1Ozw>gyNW zh%n?X{J5|%ny`SN_JcLU!2*pO!4SjiZ5mQWoXz5d#zoP8R7wn%x|fC*w8vmR^7T#< z;j9Q&5HA`+gfI>_HZqPA3`aNoI1Jf402fjO0LW|rKnwta5e(f^C`1R);CTSx@e%;= z;TPy>pvNL0QE)R0Dvn4ZQ{a`uc-+9)=#ZcwUUUrn4h?VsFu^^D8-7-a_R!v-vxFbm@dGmK_6 z4jUF3G&qpN!+GJ6(MdV~lo}!5)(H8f8sWGhF`@sQ`e44T59ZhE!{Y=;{&RW^`)z%& zzf>RbXkK_^EN{!VJqAQ$2q*%91Nk40A>6k$!u_B|vhgf#WXuG?);v1y494mcjhI47B4PmcjnK46OV2WiZezabL>}OrBU#5zys8*TEIJ1-R#mTr=!S zIRNpSC>B8M1RVtdBY;fhQLUUUR6b}--#%ytH<5Y0*$ z@UI79a{&%hfNlo*6hs{WWSG$Jf@=UE+5jLU z06_ErKp+A!0RS-t05OAJQ4rz)U;=>t|0Kr_+4FCj%KAZ>uL7NHy9t!}529MAIAV@HvA_VSwIskYy4uBb=eK7nb1R_gB zfMN-$q3{b10Ejuc;UXsqu_v6HL;`?+YAC?Cgb5IcYC{Z)t&tPXUTXz=9JnC|gh8_t z5yn8c7ff**77V&@@vp92V2;q6Lx)Td?Ii)gAD0rCF5b-nz@8KQE&~95<|_c8!v{bf z3_5(E1`BJzT3v=4O#ldzS^(hH)d3g|&z=Clb$Ct<+|&xn1B?z-Q#AmDu~*;`c>u1$ zy$&2Q!ZM@a>7(Js1Kv>daUUYv50UML$hJddn<4TPL7-tpxC}YwJVbUHB2OG58xN6< zhR6m(Wc?wstZ2qQJB}B}i%p8+#UzR>YpQ5M4oA1YNQTZ}K!yf8Q*<1nF+Y*q)8F6E z7RjIc`}?^f8P23RBDuG}zduYQL*OuQ%`zDPrXnt+rC8{IDlq^o!UB+u1t142bPont zfULv!ITKp>T4gv01G2H>|YLO=xu;4_r~sKN+~>0$vM>RAsf{9PX_{2fB4 z^_Bn_Vuk08gy-P^FoJskFveJ6O<{<@EQYiCOt^s~k+cL#%S0Dk4!^8`n=C9KNUVa= zYPc~&0AZ{-Y@-Ei2Z{iKG7%Bhb}c+11N(LKLD(|jwfz5fonroLbt*3)fg*UZW+DRY z?^iDNKTo;1f6aiEPY8+Th4Ery29!JVZy&k1|2*Yl|24{0ib;y#1V=|kM8*y3*Y9uF zuh@T{e*Z;-S1vd*HYO@^&@r(84&5R{A{idW*8e>9iv4SbuVNHuwpm=6EVAnPa=A4^09>A0AX z@W2>eEL@`?NGrh4bir1*pAK9|kh6dbB_Q1oQ)w_8C>R}(AQCQx00gKp0u~bg0{$ma z#QXt*fZ&6b(S@{yE}kC}9S&VFhUfc+N`EamaZLBq(4aVjyu* zgMsI}kmLa<5~dQh01zlZko^(#m6Rx51p5VJ0sy|!hyY9nI|;Yn^KKc^-NQO{IYKJs+wQW%&Bdh(L$~{h3Ei4l=m3s^k)BirJco7)?T77o2LuM zx)_Ta9uo17*XFV(Zm>2me=@W-6Isc6Spi!fhHCURXqc{?yz`SpOPcZgha=XvYlIcu zeI~5U9?8Ym^oLIppB!`Q?DR6*1VL>CocGEf>E^3p3v>f>c7ibrbu%GBQ=l7xp~J)( zTwv3uE7Z-@4RUMal|N@V<}BVp$-29FvYp=egU_U^syEbjDK)>z7S<*)U_|TKiLGj5 zYqn=q+%u4dwZXfDghofYdfCF<#9wt5Ow|o`);AS`IXMFEYlY?>lV7AczxNT{*V*qC z7g+IoR`1C$?mRXoWOY}tm%Tis4Tgg0!z+Ant~OdJ^&%~*k1FH}+V%2&^4 z1sPso1laBHkJ^_CYb4?FHLD0s!-BN8TtKUaD>O6)y;2`y zC~^VNtnkpRVBS&?KEAp@q45iypps}g#n*%%^x7D8k<)-=Ff>&HWP(MZ2r|DI1Nc?Y z7C|5p#1&oWKC}l%k&Bb90z4uMH!^Sovj}h~>q5Fu7wSV7DrS(86AT#W$Y8dPYZepE zHiH@-2m?Rzp#$p)3gmz=<_WH`RZftW?9&wsisQw^Ld|}?WK1wCdN8!uiZl!Nw!no{ zCIv~>Q-UqLwkXsfC!_#4DJ7&^1@2mKpW{+M7iSR_$A;^@uu*Yr=<{NdVq$sWaNPp@ zn2Yw1*o8?B_<`*1z>t|DILC#g002zYis*QCC_zphh8tZO`?%=HD4vB&WDF-VK}G28 z5kXF7z+R<+3u!a}_*1jeX2CR>U?l}y%rI~tebK$)USGHrPglw{d=kgrWfWtYwHq9< zk^l=3;kuH6MQgJoV=Q75XU`Os9#~xfTQeZTSTG>N_&FfMxG*3OU6}xNL=s&OW{w8r zeF!`sE+zpmItkM7Fp>!dFhoKyl`c$K!E6=*k%eDjXABgB39fI7!SvDh#V~`#5YgTK zPz>{fVlY!Kyc_0c#jxKN!w7=yU@`2^is61x3^!N|_p@SRKPV1r|*_?1K=Q<+re^ndtz@u6=c>>}Src?3UJ5#uGg-&FHLJW@IhDSbIMur?(_8c$aW2b#&R7i z24}Qbmut+d%KA&(6^ch)O2?Z|3{F}`Eo&e5S)!e9$9fG{ zg5SkZEQ0i-!{Gs0oGMPa@Y2ZXSq09uRL+-;`j;&Cd3Q|l9;!!d5J0&YG|_qg*?DF+ zySy-aI@P>7rhjgEc0;0gZ`Kpeb=QhDnsQW2RWr0hBhzd`;nA#s(&HFZBjEYA)fjiMwfolHbg8i&QAkXb|$kwqeL89XK( zMfnsyo5|rbs3bm0V$o3si$ X*AkW0Ej;v(#zm25&_WFVNp;Ljm;wQ_%sfkLqfR} zltSlGc{D1E#w0V)*$@Sa99|?`Q3w4+7+hoK<>^TfI!TsLR(2slA-25eSRJPb zjuM#SWtEVSV9pH*3gPggW6e2{;lrQ@9X!i1ERxL%(-GXj*7_GbYL%xw^r)!^ePe^5 zhZQWN?;~KKQ!UXKI#t%UP8ESGfG5Bezyf!QKzFJ=Py=BF;Qei_%{kGr=25)xKy=W{ z9>${S*!^faCRgZXrp!sq^UVm3@Y5$vu5hhb*1mxVP&q`#Th1>Nfqzgdu~bD)RmN4lkQ2^z4@3{e`>|F@kcdZIvH<^x<|x4 z=su+S-dWOBqNr_>Rlw1d!kn}FjWAdQAcY*1^EqN<)zlxK@a_1+LhWDKMBhD8Nl~)rf!(Gl9tS#`_u;ydlJJEF>R%?0 zT3BgzqW)rEXVr*lSB{5oniKnCy-A6}(I-(`3$8h5=B-}7GU{=OoYv{p#r>T6rxG)7 z6;|ZWAiS&3dg9rc#pxNp>;4gbGn?OVBf@&cd$Xgj5+-fQpZ0i^Z{-C2HZ$XN`*BHA zSB+f%Fm+-P{mt8kq?xKsdtS<3i`ZkQ#;|a@_sD*n=?R)=jisA-xB1I+K2BjQUG;k0 z-o&w^EmK2xweD9@Zn?9h>I5U~@yf8J{oE4?hCXPera|GO#+GKsu1&p7sN=^S40@-Sc-o<+nlq zHt7FcgZ_$$C}awQh4Ppb3WY;waM&aom4{LpTq=*jq)^xtE`!2n(r6?$mqg>TNmM$Y z!6Z{y6bhL`M~O6|01^Gj(LzM@!yg1F31yJkJd{dfq7)K^#wN0ebSjO-VN#h)B8N_4 zL6r2fcpU|R?jOQDgi_x?0uiLzAoaIGDo4^UK&n~nnGjO-%MoLSLMkkTRJO7LNQGws zQ29qxh2JWisty5G76Yh7=wKX4Q=L6MJgq$^T9c?W5=ugCt%+vDA0Vx(I5Zu12~Ecy z5Fst;u5$5F-k8og$K6KjUwz9T8tJ6|1xU-0B$xyfQL<oqf|nmu!SPMtq(fcAO6 zIoB~S_la_svdfiS^6yn&mFT@C>M5{7az>s^yqi1X$vl2ZoZZ@(OMCj?_)9MJwSBbb zkfmJ5#4oo)=~bM@CWnUm_I>m8dvjj8OK7_n2DUjlOidY`dA?I=Q?ANb?8^dXV~8}V zYQL(F^BPB+SHrfEBP0j=}k4|CiLCd;iucKseJ>iT=k~vsIPtgB;vVTPtOU(HgUCV z<{yxofFv-)siMl__)+4Bn3x0>8I&++{D6!gxLIg0YB2B}MHZz?qBta`eZD7+!;Kra#l)ja^mAr^JaGB^Z@-JN@ z47GyS(81AA3MwT|n7L>ovZyx0R+u?7j?xr zHzYSXwzslp6rW8=%3WJ)%4DRwRv(0Fni@bWn1yZPyf+K%QIa(xdzo;x8QokqX~ z*5qzBC&gveY?yY_hd7^(q#fdin+!Y1CxqXK$mu-MV}U52_w(i=cjqlGVt8&@=I;>h zcfn|3THXBR%L_Mpytt70nx1U>`K{M+8lBB#Q5keLl|-jA>0~CA&Lq+)G%}yVAd~kb`35BwX7& zd!|_UqIxe%G`vF}r%HV3P>oAvy3c*~iFz#7wRlCk($iz(i?IuOww+$8GApG?>g+KM zWwGj4XNz!a#yBLCWI6y}@6w8paN2SO_0n61v}PV*^k9}>zxBXDqDgXGtAFyPB) z3c)^1<^3Ub2lJLgb9-M?d6pY8B;Xbm{v&V5K&&R8iuaACf;k>u|;EU^1 ziq37EG*$e3%Dj5K++(f2`D(}a1bnDdJ!DIecKNU?^hn-9UiF;J$B*q!`*pw4>Jnrc z)m{qLx(YIl+)eOVTme-5ZRUTcGx}}jzs>yLX69dU8ih)vplmXULg%rW91ep+WmEVl zm(He=Q6`a3hXfbOVDe}@DvL(uk?0gAmrG`GSWF_5!Q-+7IPFK?bug=pK?Ql^Uk=j{ zbNw;iN5GZ!U!g%b%tVW@gNQ9n{3ZeI=Bx>(Sb0T+%;CjG>P+Qvf+Hf~A}C&rj;Fb` zxh~8`LwFMxuJaY;ghWPsMPFJFrHM|N8XXrC%j4>}@?sMrqeFiwJH14$eY+M9pQiCsO%aVyLwJsqlJ=kLYv5v7C5@kIO#s0dM3h7#l2AICK3z?Q#Dow` z^!49fzrXUzPd?8pj6Qkh?PcY~U7?8UqlgI-C&P{WQ@UrE9iD#CJ+NduX(wy(u?V?E zH&IOP$J-%31?o)yS=^)xi0_`U#7T_go4A{kjbG{nj*-}Q)g|VB$G#~Sz3Zp%TDPR9 zqa?Uaf03_I4Z)~vPek+rEi}6M;kK5Wk7DCA%1t-VRhf#@ylut%fY@vu{!l~4CE zoXA(>Gqy18Z*JfGUU9km$KPnjgXT!@mjL7?MuYS(b&h;Hv zKhyQOm~op^lG5ap6YpDmioV6H?i+E365VxVLJbi)`?^WNOwE79akm=*8oNT8B*@0q zZfig7ntEmGA~*ZuPfmXVzP^GjeEhX568#1r&R=Ugl~eY3A>ARa`w!Uc2dV0vMSJzG zBUU>L``NV<^OprgA4s%&(x|nc(5pYOr`+`12`}7H`N9=OO;YKc+V&=CdXn`Fy+a2! zSo`gadRSMRa7F(Xco^nw@hC(_=I-ta-88qm;ya4^*V1cu_dPz`m1kzZaOpD}!tGd$ zMfZ|Bc`ao|b&e}e$~b5x)F^M)IAD0ejE3nI_qC@KEI9ow{id5jQcC(qH?GV3XQ>~Qu$N{kHVz$=oB)O zLE@6wR1_tmY#NtHqmtK=Pl`%wHf};>>39_Kj;)R^pH@NJtlh~;m{K*1B>}J1^5R(_a zOh*zTuV+R-MP37ot%qc=M-5iV%)`@q2q6{{8S#}8`woab7DLm;n$UFY1yS}I=?zD} z6jr+zX_j$isaUh2!B1KYplO*yV40Wa02zi?lKiSjqOu^diIY&08lq34HmW5=a4J7k zE72Ss4S&Zf84kAO&y))R8WBZFLpd@AN+dD{IkNwps-|Q9xb6@G*BxRcG3gitq$={% zXtHPT;}6&F@sWvdyJmFDd9T|7*5lneE(9|!q4D~XEmy6IUw^2nYJ7L=V8dLxvBD_F zd&~=EmKsL_cb3n~FXY%9i+^7{X4J}$k0WbetLo$s#yx%+ds+R+$~rdpeoCSEyG-?2 zIeKHu`jp--R-XIe>4>blr|uUNf*kPfR~9Kx9bZQ7n;*8RUo~I7+&zoBa~JQ*HkNI6?%OZ6jyl3;dTIalPgbR)kA0Z>;L;04OP77lOH2JW94XbY zs!q|P?3+I(n2*@KKwKR>H*1jhj&Lf_Qcpen=iYAf6yeEw2Zz!P z(wHGv)4LHn%D|uTAa< z6)O%J>|Hy5lr$SjsBebN5xU9V6#y zxu}(0er-Flw!%7aLb07)XWk2+#hcwm_)IMt*Bi^RIOxVBJfCJ`Zad8R$Xi24-yWRy z>bj8*libn{HJwf@{Su_|=(5j3Z8=Uu3;Se4pqKe8zYE5AoFVhL?5N`R&be9=<7GU$ z+TK{C%YDVFU!kdIQpNP$qbAi%O?`A{V`cvPLsq zo?NawWm}dPdu2z6%AK;zC+Buc^}Z=;ne1gMt`qK+Xrj>`i26-7Q1I$E*bot5I;vgD zWlKso!dRoc)>eY>d1i6DR*B;Bts4S%t)Jx^zHB`H^Q9a1`_)yrIf`;I#^&cA8@PU% z_WEt7eV^XpR*S5gckNkXRk@Kx@zL4KmeclE$cSB^z2f=K$Pr;XXS2`Wsa+5){Vqsh ziS#BV=V(fES^ezh-LoG&IuW*ftfD{fUb&CrG277oXH71A1^1e~eXrGyy_~&rd6QG$ z1M2K;Dn@IxYFJN3o{B6CGSu~d{$RM2d9db~^!=|F1ZC8%caJ@IA}@7Ge@dc;U(%$R z=Bp;`bEcb)zI>5=N!GucHlzBXp&@eQ!7zzU31EC}WBqHZx}H~X~z~V{8#+&uC`u&VTA03#|A<+)Z>wFhq@vvU|s?+gyJJ;GPd4(@#?E`lH znG@~Pjbj(?*jSo#QCgz8YY8ou)L>k7;DFS_P0nYv8ooRUIqK+;X0a{3fDNc zGxEv3*>jIZW$qiNQ8U5#&X-F$r~LEux;&mwJ3k_mXxpAS{Pu;cv9_~@?^17?XQld% z{i!;qs8>Lg-s~SFN@2_y!0NyK|Gy+u{r3OA{r_+O|J(onTm1jm=^T&FBy*T-l*H#U zSS%u$Ml3+UbBU~~# zozp>yd@hYkM)@2TnZu$ISqvhZ&7o0H9+`@gNnE(9;n(mzoYDPwrT_`{p)(7}un(Dj zh)8yp_}{xEnf%wYxk{HFcQ~7yK>ZA7bHe9lr36zsJ>gXDyGOi!{@m>Ffi<^g!Uf5~ zRSu5i@8)l|7&IL-9!*Eii{@`)UfyNz1GZDCXSd7Mm)J)SeF*fQ{)CkySuiOhqi`NZ zg3o!ug$wWtRrK{=QH7s8vio4y-BU}COMR9~(Y^Wh^y!!mvj4C$%B!Xe8_R0fet3Je zR_Y{chP%W3&1PHLvpCXfuO*_oY8IMLSg`5kc#GW!5VlF#b^3IG;9?n)s{b-d#ON$bJx3(i57p6@xPQ zGtO{V9N+BLSXA${t?gpt4W|?};Rbyhw%VF{5`;;2baAIp7wMk{~lof=m7f~fyhJ_mqw#7_zWUSA(9y!I+?*IGkGiu znS>I_WHOV?BeRGM4hJQXm^2=rN#~GQ943!XqmzkTR1krFWI0135S2=$(%2k6i3%@E zB~v+M76s*VsVp{yN+t8Rq`;V*fUnPmk+p4f%K4gEv9E_Z?W#ZlZq{rJzu`F-( zvyR7ZS6fldm)Ld}glueDI;>YoXVVd<1d@q&?}^vTAL#W&HyW{W+doWS_&P%4#FEjC z3un~Fehv*hzhsBJ#}Wsx&f{@f&r_aG-8cE8SF{gCD+#x zgG*0ZRr%T>AmvfGr!#y1wGmRBQkqC#2@u$Kbjmnd|lnhIy}y|cD=0Z^QJFnUysOn_mx%q15Nhx<#)-_q!GLBqABO* z1sAf53a*z(%rF|ts!0i+8ApJEZ;#;=Y~-4}F&jptXE5vH#nuEoGF~0d_9vX#T2yx+ zj`5B%EC1=1rHe+oKOcSLf?32`ok^>Z*T{01crH|<; zdM81l>|Bq}p{K^2yOrebdM&3jNJ8V%Scf?>$h`B@UW7l-K-D%FoRfcu>wfq?rEa%m zzs+!Z+nQ%wUqzh+#x2q~Mq1pun4aM5gIBJPIRCn5)BKwG2j5AU9s5#Iy}hC~S8P(* zD|KT`PWjYCg6`~FH|7n$t9qcAWmPK)^uAo2dxgNYml`u6t$SWFscU`pw5)li?K!?N z+)uRF0KEDSv)i()jF8ShTYmT3{0A0Q|1%xdZ}b0c{{J@f{|f0y93GLw zM%jEOm&9lCh$xB4B=gxk5|K)zk~m~GiOWSfEH;-%3pgH z(*4Nm4njK7vboP_wmmi*d1bHM6xgqY`aMRC_8)w?pZ2 z0H8&S2N0IWNRqWl8o!2I)y}Nup zUFkEeG%T!j#5L#hPKH_Gc>yJ?%Id{)T6)VB!UGO5+oxTcJpJ&T@C+H9_aCqwa}RK) z(%sJLJ{Z1;O5Pd0rsGD9hYc#_~5lHu(*KNt5$g}xiujS)QNfM zP0>rTr_5Q#ySb(4eeyhVQ$w=k0}r3FtdY%AYE{P6sGilIK56oq#|%z_`LmiOhvE&m zQFGJsB`!|cFg&Ta{_x?`R+e^ehLP%qdAw}#?L1I^X>+$va>o7g_ON9;CZ87_d(A4 zkajhrCb2hPZi{>OMplp2uqaq%@6I(j{K<2}{&U%DPuQhwJx#vha{2Jt<~4>L%XcYU zOS>Q7l(${~T9$lJ)9C(^D=7z5GVW&**5ul5ubUQK;63(B{7AbSKIL9ZV&7mlq;A}( z&=xmCa^;=a;paboTwgWMDI!GPT;As11+a)^p5SFZdzW;y^yVU^rQ>!zH3*9tr@U>a zwHIN!_@!xw%Y3sGBO`FU;32ig2* zyz5``-qhgtGsCY+q%YbuHJX-0R(6Ozws}6TC{>=cc%KJ9eBwLlYF8H9QTKQ&c|kqs zovku#9X0s8(X~3Q@?}T&mAcfwy_!UObi8r@qN>ilVMSExm= zb3dX)>K~1}k-beSNNWH358M2SuXj6{c55wI5@71IBs5wlSYdq-fA@knwO_RMgo3o- z>KisUeb4NUZzH|SO}*OTW!tBAXRB!MFQqn*3esG3HhpUc+4@D6NxJ3p^CQ?xP^k2HhUxB9M z9&Xb{AA420tP7pC+Gw$^W4ieAh8H_=@+G>5bFX$UPMS1D;0Y`iexATIbm4I!6P|m|pLht@5bX!acMr@qJ2WyN-|gTru%F&2!bvD-VcS znYLE~aawc6r*1cW`aEl2-HefoCgvRK&bZgDe7ChX)b@J*%Zkqd8>0?4KCrC%G{^qY zq%}J8m`5|+HkholAEmzi8M?#Ly3f|#I(k@&V+h+=_3L$Yl^?W47B0o;729dNy)&(oDJl73W0kTt z?sau+*Me?q-B`upAH@@Tv+rE+9Or*K@{IRugNgcGMoX*Yt6MZ}E2GDZBN^xpJ2y6P zSC`}I>a?9PrUqxr=3O^xefoMy)gpBzieq{I=KP{|#@N~kCqVDE-WxV$&EwA=XxZbl zHg_NAkZerg9?i)wiINLUHEUelgGM&Zd(#Q-F zjl-gIP!y%J7;FZc$P&Dkn#CiNsVJXKCo*_UK8;4=5y>1Ti!4lS{Rl}7@*wg=sy&&C zQc(tjLMJ;giGoztPq>1{?+Fa}w?6}K`X=Dvzq-l{{Kd~7SPa<#76Wn?GLW;t55DXB zC!B@yKt29QSSZ{gJ<%-?&);u!yiw}7;S_rA+3=a<6QR?UaU*uP_3mHdmsO;fXc~B3 zyEARm#(nL>+lYPVw~UW`Vf-pzL+S}*hr2w*`p^NpdK-4iFov)VG zC+te~jPYL{*ZJZ8>V1*uh}-6p&$VPP91UtAk0Q{U=V<0VBgx>HHhRFzc2aiPBQ5J+-Ge_4;-V)MLX9O@p!vt-OoO?EZU8 z35(FUz5D#7uexjN&EpjjE*&yxDr(ql^3dtIa#*+>Jw3j7}j~wxii+jC1A$7d@b{u>un3i%N8`8w5VK8E_-)fD^b5<`wSH9zU?*j zVL7HMN}}H)>q54|>2r&6Yu%T9krsc^p|$w3)W+xu6{2l?aW%Yx!NW~u{$-FEqt1-hbgqbbpCL^hfQmaI{H56(Y$0c z?-2(2Beim3Clr*b)U2P~9h?;R_;PpSw!|y-s#kAay}I;^80JIRnf)r*lyv+qdiO@J z1gE^*I}@|tx5->cpva}nT}CLYuA{d0XxD*ZF3OTkky@ z7k;eknV)&evFfbzE7_8zPLyK>cGr9EYO19_X12VzIWFAua>(-?i6mDy3~s={2G^^v`TAP zT6v(HGgFp|uh%k~e(}u=_hqF%{vUVDf7(>OIJJa>yU z`~C7u!Fike4M%Lfo-=YmSke_Ku^B6#YE;@;9lAeLa?GkAoekDqlM@_vEQ+f;{;0O4 z-i9#$+WFv9f$Gi1`RC@CKO*yI`yGxtJ=5Ao)v7x?Z1b}_1-XGAd+t3E!}>hTENnbb zmRa0QeRT1@ILWa4VI*ObQL5*eDR)~vvoD`ETVfPrka>z325$K&luO~UIY-p@C7)xb z^nQA%iJdbxcCOTsh4X8))|M|rGmv{mk*6H1uIzq@lk;^*SgrChe@riD>@(w-npqDf zyvcr~7s+?U#p|7W zoq6h$D@u-U-H(zjxp~H~+wb1(S7^0qBX@*HNDj~6ybfFUquWQ8f$(-`f>++NyKRYrl zt>BiJ`-VQlom}(q{LF%KvE_(C{ zuCzANS7>=JmtdjZ?5BRhm0I9os-86N%3|p?SqoZ2Y-}oa$V+;JqG`oOYa-gMI2JRt zlJ%66mG{!{t(LPV%zoaubit9ZmITT{wbaF!@&z_iu1KBOac9_3?1C-&C$}ojJsF?6XwU8Od%YD*ZtP7BUUlr^>6X0x66%cI_Lcj6YV1+IF*f@4d`Di@YB+wJvT^JV-)kl9f;2(kqQ&TKkkxpH#{$jek&lBJw1IQ)YF0 z_~G$88g^`7k@(~hFQQG|^a^KqUUG_qy}R#Z6NQhTRo`72ru4b_i5lH+VfT^|r_wzR zlQ$8cecI@`lJv5aZME>)*<*fBvVHWY?O#0JLw0c|Eig2TxaG`;^l@bk3MXS)sx)Tz zjEN*oKX2%#HSEx<%ge=|_j&oa8u=Pzinlk8*n9J?$;Zd4*q3Q;w_J3}u=v#*8GpuJ z{5G54X7dx$@4ww_gjB|F4E!4d|Hi<-G4Ovn1{P2mRFq6%()biUk;@`8*&GgyP9>6v z94^XdGdK(~lguZwNh~rK<)J(di^k^iX)Gd&hRaGsIS6Vr+2b`@%~iaj4a0ZHCNm2RXzpv&Wx8*2kbgD7O1ZF*?*#Y z)Wme$#kpf=*=>!i?U{7>!h*Qn(;6ZIV;@TB-+URCD0Wh>m~P#5w)uj@m_E{_X|5|W zZ5BTq*XMQGIQ00kQPQC3pV^&2YwZ5&j|DSu`DS z8c5ONQcTPH9)9!xVW`o-N;a(YpSJ!l=RCiBp`Sd);TwBT9cewdwS5w1&dSq=`Z63= zU<=3eBg1AreSXknyQ%lGUAtqn`j<7G$Y+?@yzto`pUv;;XuVD0SSpn!9-hQ9yz+Q1 zakDdNZC&|iua&lnUy4ReR`i`c+GF0N)?Gqof+8nKlt~ zKWXddRYYKjAa8NHidAV8oU@y}>BF*3MLHT06$*BX{nQ>>?N@KM zd9*WfNt)`P;q%{}{C}jA;kvv3U%ZRxzu*{jCI#j4nIsmC!Y32S6h4u{qm$SaI*G|+ zv3NW#k3!)QIV=iFrEu6h8k0{Yk;o{KN#W7?g5`lfGP0qxI7*>AkgRR&9PI5;s^HDZ zf9j-szK8sCJBKg0{k#s%cX@}DnM#hR45ZrN;7=qqcz zaA9ZQsJ@_grE|lt+}kwvA$3<{H|XlsN~PH)TCt z=J)S;BH#ANgD|$}0UBss+sAI@QTC=CIKR28c!r#u25pJ?+3jNYpIP2+v99z=hwk-7V&>1V+AfZ%SHN@~ z>eG<8vDAL+TW;lJz2v6MymqJ9zH3(3s{ev|dUMglEx+aD_-gUpZ>~;P zvc5e{wf!6F=||&ws2W9o+lhJ0N}O>;$XptW zNu!cjbSj%nrSK_S3Ykdd@_9TSlg=Y@C`2NUMqzNMd^(lO6~vJr8KhuN@*_ipa}rs5 z2AM))I9L;H?5&0Gx6^l|Kn9KS{aD+giJs5g874bPCO$${Gzb0`6f6CQ8vSJkqxrnos*|eahECgi z<^~XUcIKM+rjXwlIEC|-!fFdr!~6@pWy9+4wQt3!B?ioUwcb3+&vo+cFDKUKJF_<* zA;zbdRy}hL=PeGqYvklqmG!ae0U|q3VL!7&VQHj`XBUDwc$k*B(%9Nka^l{(Y7dg~ zPPgBq?6|7sGug#L?Lw2+0guCZQzCriSEYNLxLz6fGC%g=x=r=&#~Tc2OFzm*-i#^^ zs8^1-uP~03+L}AcQKRIDp{nhNF2um=!nTs@BPA$oms@R$4Lc(&u@fb5N_htHH7Aw* z_t!8D)AioI{;a#4y*E#s6Px{JG}zjGH}wf_BSB{dXYRu@FT~U;80YnWC4*sE-GX5p zaX~$-JQf$E^38F!HMzjN;`nqpA#F;O3dBl(?l-BLoN;2a+7tQIW{u(L zpS%NJ?(my*(=c@lmSuL?sN`}6DM~Tz)xinF96qV1)ZmU5+ephEtg3Zc98P<>0k^O#fWn);+jUZPXz1mrt^u zW0~z2_JtSZH|$o^o9=Wd)seDsuk3+3XVtzUzY#Z&mr_hH6=9n+^iIwZe6(ldYS9mMJzf;+=$@ar?=D1i>Z>-fQ z>)h+F_M94X#Ba;C(YM~Z$372g%v&v1?6o-j&!XIKllg5jLtdUX@R;X+yUBcg&Wp&U zPICL79%IDGOZd;W%H2lt&@IyXSW zOWpS3F>C9CZ(dy6o_%(uo@w2=ppVkM<5g~tN?X#rtX7G!A=qGIY`)^_zPHC85?^3l z<>g1@tVY|%HuWw_Z=LLSChpbN)ekpB-&wsVq$Rh|YP9d_%=nzWOlrifX58kIe#-se zNB7sLF?wEea+};oymNUyPsgjafTrAi)Fvu4WKv9*aiP)zgG=L{Sbg+VJ24Ej@TWxO z>~tlb+j;d%?T9bSC13O#Nygi)vb-@P5p$%<|6w6jc8-{fd&ZVbJ@1@dEtOr|A1pkCVPCo?$d&$buYInoW7OGr`sEqC)&LkS3E6m{_vE7BSp?j4x8qU z%CcGh4@KVJCiB~5kpFs<`5JjSOg5WKrqk&toxxzUSu_fX!$#?Bluja2$qWXG$|jL% zD2cBG`cl~?qFlhw0Cf@bs!H$-l1XU ze-(Mv{#TKgVNbNSvHf}Ewc1EX-Z5&H+rKXI3TyP2k@u#&<&wiyC**ErYK`~M-yc*E z5wI?D-Rm0Pu*t5g_(O_8#Mw0wOsGDZsv9ATaHbC zcKASvq=%C%YI3;xMWyU*ZQ`L$2hg)&(K|Qtee52cTj9m{%efoHA77F=U`z;+MNsS~ zy=j)daj5OZF3Wtn!WGM%2NovFnFUC^56#Gp(aXy{cljzO?N=hNukF(~v)zviCZ?%2 z&zaLal~=YQ_kR?5EsDgRt%%z2k}$DoSm3=Vm22-CZ#XM&+7KKyY1+Cy?2Oj8^)>sz z46!5i8a-ldJT=~lQ;R0fD!E!QZQR3?0b`m!7=nWA|FB&+@U!kZ!x& z?GyRB{Ar*?X!Dn%jD_1I{-MbG+hl&54Dw%ZGG8MviOQxhNi>vBMQKz9kw>9W$S9Cv9ffc8%R_5@k>7r|%1w$1`{l6-fvKNzsS z2ryv4u;DL~0Rsm7L0=_XkS!cAWBelG{maT~a%Sf&AK*fxtC;!z#ETa%B3?wic$ec| zFWOz&ZC_cuv=HwsbX&Vu<92H|TD%fn=0KP_R`z1ayLj{3jn=iRYpa*rH?FK+rrR-S z&&!gR#mw1Yqa6gn*;l_11i^4PoFC@dZqko`38@={Aow5Tbn(ZZeDcXZm*0Q)B|P6~ ze=We3iN8Sqhe7arLGXGIOzj3iuoncu(;x`aAPCAJ2u48=90oyf6a>MKgCO`x5CnfY zpo+n72SM;VK@j|vAPD|y5CnfM2!g*J1i{}3g5YOC5d3Zs1b;IKf=&qY8NmG=`TlMYocYP0p9-dekIx1;i8OTz#a_aH zuj0RR`0p2`onMmgUzYD*L4eOU^LTLu|4rAt{pWwSXOm|6Bolge>Q84jzaq2QjMHv@G{j{o|KFHc&{2^N zhRtp^7>v@SOyc4-p_ccZ@Ard^_OArN?@tB45^S`85v2O{8alzcdnE{vvnV(hd<>dB z8+;Z2eGUJ;2KxE}{(CtH&c8Ao?evo_k^EPKAn5IPhx0|8AH?~5o)MC+0G9ugmneO{ z69mC`f{ivhIvoU4Q^Ch)@O~-?&fYr}1m|CGOs~DWe(Uao_cm77W~l8qf{)Li>-Lj4 zE#DhN-LF@=;-20s;t~S}3%ei#KNSSQMfv?w5Cq?r-=_l%fj=)h9H5s?fma4ezaQu0MP9K*xToX>9+jN==nw)GlbTsKo_rpE|{}|6wbVp z73JM%5Z~s4prNy;Q1B21f1&lPwRrLS_cp(GXY<~}`xjf!S}gB>u_7{TSr>BB*-~8s^KKIRU{&xh{Ygi4`>bW2|e;SmJb`Ja9sM~Ky zJJ*~6>faDoUzX>;6$HVxV55zN_LZLnXV0Db8IjtlmwpzU`ROO0d~*6{!I^(Zi{s<7 zQ|EpboSk|ZLp}2|5)Kn8{v)n<_8FlCwSt#}k4chJ#V^woGD}5sSnmM5ySvvCz`yGN zen);|{d^?9F*|=re*fjEAoy;u(LVKlaQ4-yH-fWMFTD|*4ZiqBaP~`I!hdhz86oW} zc!3#w`B~9y-#Pt8aQ@|ksFxLYr2ZLO|5qk7a>{GuGBxrlHFA0HqhO7N8sFaIQ%LffZ&uucK2m(b#H>iyu1x*G&EjF&K$uLJH^-Ve_F z!_xtSb58!i5Kg)96CwO1>HX#4{d4z%pZwrn@O%IHz2Kkx>wCffcH_Q*;??(qDfB@@ zJ%x_Wyr3h13>Z&)FjD{i&^0O2MD9mvcXzKZlez3nX49EWx&=E3XfjviIhdjT4YJU` z!3_0pFhkwuS?BpzPT@Jvz!c5E%QDt;7-pbRNu=PS@^t%7bFpb^zW?NrsdMLVaFWFu}S(B^2I#zYb zP7aoat~x$BXHXSH4{Tv_uG&tqpeENm>(+d^eW$swfL+I7zuOx|<$iZ}PxF2)iNX7| zlwBtYz0o!c7R)L5NpSWh0P=-rMe}AncMS^s;i{+5F&X)RfJcmPCI}fW-HoW4_IMnsc-qL@AZAMp4w=-P6jS)>rTi zseKv}>t&>sgro!tXk&E#%Rl(Rvj6Xk*w@A7d@?MXyGg%{bF>M;1tkw3e1Fv!BP3s- zjOLf;^K4Wm=^lOSq5Nc9>f(DF2%BOJ^R=nq>^JWLnqR=K?Kc78t5Ym8&P)ZtPtHvR zXM-x+uE)ac|U*^S6V5*yy=zhHS+y7@vh82>zM;-g_ws{*XbMnw#Ps?*fKAzz!6^G=C!q&iu=# zQ`mHizyv1Vymb)gN9tyDq_$#n`M|C8Ajz|I5T~Vj6y-^@(~pbhRB(QIzBnq%cragd z^JG}64^%!%)#`>^9I}?ByUE^)|M2!G?XIZjyFqaNORF2rt+?b{MsB4Ce>@H{ZN1x5 z!I{7J+p9kU^sfQ>xq9eB3;o)D+_ug)wg^Iky1l&D&vv4|JX=qTGV1ra z+=^;&N&hLJ{W_qfR=jtA=cGW-*8{EUfW93)jn$1j>FqJ1FZhU_2bu?2Z+>;7xqg3# z$`OoTsyzIiap2B=6X^VQ@?D_w%zyGzmS(W?)X>A1AH@B5FOLRlZ9gj2jjY79pPvlP zgFDR|SxKy0sA{{W*-G>5svZE>~|dIoujVNnfb-YpWYI zFQMH;kO!JaRu%oJAee%l3tss;c;y!n-v9a;%`m_Cs_cIQp2uO9mj#3i8u|lS&|s9{ z5cvF8^n9ZYminb2m;!?Y!~a?kO#NaIO#M<2z+f>2{{Cw4aqufa5PUbGPA3%(`%>MZu+v@1Ug%N%T8!P#@a0LDRkcC5cQwen9Etq`SP&H`IJ3-)&QC*W;g z4g%hv!d!@5!JAO?x^Z64cXMcx^m$!BE8-Fy-dGy+CL7J+8VpWV?YDe19Z8;`@(+jrKRm`uKH0o1kjyT<|e$bcCWW1i=(g40is5Q$S~M z_9e_5@72DDF@IU(2sTZUSj6mq36Fmn*^B-hetiS~{i+l=k7h!$FOtxN$T;`4AUOY8 zKaPsH$=viT41VdTd-I*O`z)n`Ac#Sbn$+}m3E$W$02kjo70`?U8lJ#YXy_NZaXM`7 z_YVin;eNi;>~#-*;|!kDHm69k?{$vh%gIckeyCdHdbf&0Ed&`_0u} z50DeGk8S*v+xWL%(OcTjr}3BE#;0HUzopsFr}5Kns=TkKPB`B$Jk@aDw?2_7}7wPXyGx+{}Hk1Ao zT59n7r-HArJe@cmK{Ono^BVB9=|y)ro8$}4b8EW=_HoPo*q zwIDe2KfX%tlrwK!42V1RU~Byf-^t;1(FqHt0k6A-9srwSL7-1hEtSL znRGFnlc?)hq|CpHn^QsX?@tB6KRw4N_-j)^@ER63b|)_d!Jmk~;>XZdAsT`p_>W%- zf@Mf4_<2qT!9VyK|NiaMLGWAuihuvk=^*&WU>@-QoM!(IK7aLe5c~)X2L7PaK`@ju zfBke2bfn+EaXJX@!IF|H0`X z__Ay=|Mux1*adS6g5W5d=Z-_fH4G72p6u`g9O{Lw;lHJ16b`qtii(f&s8$?r`CUl8;zmvK>^2|gxQ z+0!66^Kbs^|0(GQ!I>}ielvju9H@ti_w}hD7}uqs(Vj*VaS*8Y&s})^+=b$?y3D4Pc;|N@o+xuDpKk!sF%P zs2pp)0$-7h@^1WuK&0XXd)}?WOb}}dP#PpmB!+?)H1E?5O#ySNp^MMZm_c`Y>M+XF zB;8ZtcG|4{Y^U1-g6dE|TX}aoeec*0ks5kP(%lTrZ=3#AM_n|3T%1sl!0#~7_>E#d z$RGH~C$eGmbt-en6lIA(ki7Do5z)}amF%Z6C)H;}o`frEn}MtV z@B#H@`nFJL1ZX3JixmCLBBkMt+5oV^eLqL%7Zg5-SLjR=s5HfMDxAxU?slscf-aYP znX*h`mzMi@X)1a_*6nvh1%og*`h!-gvNU@v)m~tH$YQGCnZeS`S96S&=f}4y3{JBpjr}6; z)+{5_1D4Tq65bUCzm^S#{kV+JV|=flQ&^CbFk6xFG=?#;p6tnJltwbOIcb?gLD%b? z3ciS#QJ9uFgPEngOm5{l_yhMdUuIcia}yM+zqDMfUZVGoOk^CMVzZ)R1}9<-t%AGkBUMSdAA9#NR_eqgHVcuGn;2Y z4^Vxugb2Hp#Vmk<_XuQEdAeb%Tg`{-60-z9wcXO5`n8v}68oB~#4fm6Z12DL8ELT} z{LeolEf$*w*nR(2y$bs>RM-XRu)lxWO1^xQLYa6J=j!n?$p*6&uuFqxLqk1?^CHR8 zCn}r{F+ii>Nds&9QJThmaBtR)ZNsQ%pWlb%TpJZ-HsEH!&7Fs$aw?^DY{&p5!l1Fh z*tIXCyflET1`0n>T68qpBnM3CTWQZ}YSC}%?r6X-)6qaRF8MDv<8qW^5U-=PWLHf; zUhc=KYTO+So~Vv$v8GI8K|^6Hd`?9L7jXe7he`J-!#Lfb7?ihAe@01LTV?*_$%?9W z0jR5eFg#w9XbO!-dHLkIiu*+jX(jYaBj@RD5HM(!=#)vc(jFCQIfb6Ter`D@9H@rD z1&z>dPJBX8j~ni!9#2#%oC(ze$!(VhK5qE!QUQ>RPhX$1JH_3#CwKQq=$+;q^M1jf z_-q)b&a8;4M4*du(Ae6zuhz0rpKR+YepcpD7uzxNp~O9PZ%ZLoAdUNKH_rxoiK(K@ zlXP!cy|0IUuUJicvcTS-6G;a-0G&i}NA!DEb;+62&-Mx_1_i_{0FMp@fo|h!n#T3k zf}zQpLbRrAo85j^#Ci!b<%BcDBAhZZOuYm&eNkPY7)3RGNnt#FPQ36>-q5`88=4ok z7Mdd2*3+aEUz5ul|L*_(JH#9R*1!2J;*Bt(kVmhcH-4?QLGa4MH!g?}Rp=@)yZ+bN z5Fk5q_j5@$v;}dozZZ0f`yzm*ucno}bUNVvg+5bNR@#A@t(idxvS9tB_uUOl(WHle{Q5N6hJHnXQ^< zhA}H;E7-0f^qg0^8+m*|S0SeGz4+)+)E~uLWtKw^M@79ATOB+c_SQDvz0E`QUwWnv zt_5CT9}|$wpk0}vIx57JgzCc&nal5FS)as->QG0*z%>!JpRZVoTqI7X)P;F?WRl&a z84N3(aFQ%lhq20I zG@{D=SUJ6ruaNB|NvU>@u!r1>b9yqTHsF9QMtQ8_XHmE8AE|ObDO8sFZA^zU#&AX@ zg(~*5!*ot&*BcVh$wSc<)MM9Pg-F{hmC@35;lF+>6meahBL;eyXG4SX8Pbq%fX(0-;Mm03RH*12RaWZdE7zedymn&iE^ z^Lp#{gZs@La`}ceuWvjZk`K2TrM>28*wbLqrV{N`Y&V#v44kA>YuVG*18v?>4QG|= z8tghQXu0ck*w`Yilb*@%yYZoVqV0>a4rJy%@lQu6UB=z;4VB(Ng_z~?C8g?jh~j| z*otDA%tNkQQv9A4WX*!(x2!PKtY%)Rv}$YK`ioglx#k38Yk8bmaI8uFi@Q!Nh-L%$ zXfpV;Yj1?WqW^#8b>j{Z@26dPb=-Fni&-78b|)*n!eMB8&~!vQj4#c@q}p)-YFJ(=BKVZj^@DKeNU4U$f?y);hb_Fa20Ggja!QAaN`6s z*Rc<%j-s8ZYg)%nmCWUkvMUWzEmj)Cte1wTo5MICBnZVxipwiBO&{OXrjMK1VG4VI>aO0u zSg89^_i3~j7q0Q+?}Y!Bj34*E@jGPvK-36~A7|^0AHO)ENti$0I&(q2RqJFnpSLh= zACi7B@$;dSp-{Opd8#(EQ5om=wq&*orA(RkCV=yvQ|3h<>gyyhD{U*;OUnJx4g&M$ zi+Cq0$|On`7Uu_u>noF|O$5}(c~(fYVL_%Jj0l0>k?JLR+%2>GNWq_g-R42kgSLZh zw6Lt6Duz)vMy1tWPep2wbn|TMrs_s{&j50mJWb|ww*(KK%x^^LDC#e7aRB+vq<9Jt zRF*^RjfN^xo2wg5JXZ%vq%O|)lHw_82<6c*?ob?wqW_zN=vlK!ejIn&tqoQ5v$B&% zgNw#!-%D~8&U4^NHyRd$C~Xdf!k`GUAr!+Fx>MxzOm@vUXURLuTpMA;DeM5rt{N4< z$i>lcFOPb06OCUKarFAR`6Mmld^hUG^M}c9qPwOorgYB+kp=+NZEzHHu{qrEu)RJAW?(NaW%xGByK_D}FOz?yBfDO*EEJ1FAkY?F}6>an9V5Qhvk9feOg z_(0u^;oDPLzo&Y#tZ8Q1!{qNkX(|O7)ZRy-%n+0fnHWex;F;{nW{qixuFfqi&Z=IX z;DOrBa`YVM>M+UUeq0n}=eg3l^UjZznUF$7Ig#xUo|bHvh`NY}QI4Ymp{@#36EUJW z^Cprjx`Ld@r3bP%^q3AG;;YA23U)k_YNUfcsMCuy0f9#!g=x~*cF>oz%7}3vC#e%%UqZO)dC|@lzGO@OQI(H1HSPK@uO9*)ZwO4fluN zDLd^}`%-(6?5#Sk3dd`cGVYeJc_nG*0~JR3z%#kjd{E}fC3iP9{t2HgU3u@gLMj|2 z!(t~6pF7)RtHo*(VZaQ@xdx${kB`?A7k=?@REY45C`se|xPpd`cu-1|cMU0lF0eaOcXYPF5GiUg$yAi#tRS6I!ku~;$xt*{9yPbD6Xu--YatmpgwIG6tcuw6*RirMpF3sY+2MoPYNh@08 zZx9{f4KH9qA%s{ljJwHh68AjXKOaJeCw#G4hrBh*zp7Q1FKLx!bpxl-M?+Ufx%)@2 z{s^I$h+>6q;>BH_(KQfyY5ssd@(17Ww_P3sU=4H`r>dwwykxChE49n|Zx9CyPd$q| zVuKZNR9(x4M|rZhU#jWujB2-9mz(WY`wH*(6i54iSNmA5vp)#+g!>eRGtFua3ay$Nxkv43V2vbrd5*Y49XOGfeu`IQ5nv1bPkFC2>I=M z5KJL_&ZZ1orMTEJE+rl8BB5oDO~Q7>7GmdtF-*9Y&lA`s8e@PN>nJp;Ph%i8W3^yT zN4%32Qy>rDJG?gGxSNA;c=t%~me`)AQ6IBW+1MGgjiymS5FhWuSu8SsccwojdJL=b z{C>IW_l|O zW?+4`>%BNFlk&)@rSpkAp|BmSZwhkIlL|g8b5UU^x(FMjH^hf+d)geO_tI`GOGTH4 zQ=A&r?ppnVcO66zq(^fw3M3IZRmjh`><0H1L%*opU$zCKix{9A(3! z@(5S!lHe zg&IW9Itwjkna=qIQZbZjYz|1AQKKSds^QvLAjXhbKYvu++7z8*W?t-YnUzt$Ifw_a zkv>uLYLR#_Eg3pGV#nkTUpbN1{^)DRZ!yqrw|xxYQ^f*5V_i}D_q|wadCX30Ab~7j zM?+0PyHV1Qd&?|fZsoZij|EICKGY2Z=Z0;bnFpsYF1!s6EH| z96(su$x;Kd3j=M7J=*YPUOjwxh888;BfVKbQh4bd>Somv2N<7D_zFVilitt zN!yV&>;iE@lB?qT#clVpxVQ+5M5PO$?y+iUP6U?W?LM4IP{%z8KkMlkN#SXG!2wG+Y zRCd@Uv}~A82oSCG@-h}n0zi;pQadO%lj)_s ziC{}C;Yt>uS!{60f?n7a%-axz8r|#n*ntnlnw49QKx#tWwV?~$e%5_T6hc{jo=kXI zCOEQe?I%Qv6|05Ojp!tc24Flit_qP3%QU8QYX$g#_608Z;fnK!Vx~NbJ3$m*1!~`a zVh=lOSG|egtJE_#8nH2G8^>M@Kv{9v`$ zBaG5aEFbRU02zcVa*gVo&y&j)Rf!9irg4ZH9mJlSl}G_z2x z+eSLd{IQ!3>>nM~N&_qG&e=I4d@3mmcSCB%V66#2p+wz-^W8XFyDOwkTb{}*z0WlJ zAS#Qkm>Hq9Joq+4EGh;TCgm-iV~%tz;U*N@&N9t~l-cvW^wt3~zfFfSfs3tTWjh65 z4o^BI+hM~ovTTEeatmT=&`q~%T9%x6ljnOoe2+~k)Wt~}*TifrF_3TDsnL>*V4}b` z<+Trqs7$6l7mMtA5i~NFaZR;)9EKlw&4${W198ON7I1twA<8=Rb2MZR_CeI|EVghM zp&4UlIt`g3p`Ut9bUR(Ycz~lMX{=&o`J-*}EIFXl>`<*=9H=tMt?kMfz5341BOJwQ;kg=8yb`>$FKbcR1TVMe060mkBTgI>fMfs6djAAF}p;nR# zGph~&j_r`OB(tQTE>MwuoWNuZr9`tJ&nS=~3i{W05OUql78*`;zJ((-@`<&`z zS>4RiQkB`LyU&ZLpQQ15>zmLf`xAOW>@YUtsCQ&EbhvK;F29G-pFF92jzK$A5lKS! zTa+ARMTwQ(i+7VW?x}=wdV-SWP$HtVv;kbVVBzMD7>ma^TlFfjg~gk|OG&?`JdazW zLGcJjyN>jZ$#%*0UALWVs!R*aQ;YRfy3z$O-kb5xXiwDBW!va|B;4V5)S9}WH$Bx# zyb3s;peqQ0pOnn~(+%6uy@NQ3IPZ#%?v?vE6~kOnO~Y_At0)iP zEb%YITIH%34RL60Ms=eUb2lmw*ifj$xZkJnpmo(l;99Bjm?^s_;cIbsKT}OqP(23` z6dV>uJvFTZi}Ip77awN%V6GR>BP;*>&09Af-kIAk2mK3FwaMprX3(Kl4f@&M9uoJG z)c`R_MTbS?EceC(>#!k>gVTg{>bS~>9A4+01eI{P`q&l7Ufsw|x<5dLCU-wx+ShbA z>`t7nb{Wi1`sU)ssP#oYhS}+AJlJs_j~*R(+5?jnnm> z3YQkIwU(|dEw(Q$udd!%e6P2#zx!yjy>VrDXLax9_pbbfgZ+E)rC+;tH9g9PhwdPC zQ%KT^mYNH#*5Z}Lg~isj)|JI@MO_FlUA}awwRq{$Wg3%uSRhUYhPP}yQz|`;bbw4( z(X@dJ?B&^Lh{@I1)g3?B&*P|vt`}Rn1E}zN)Xgqpa*nc*+K+IMI1}Cis)ySNXU0pF z^a?c%5~Y6d=lL06ILj#&2HBX3Idun66e{ZXvqLmRb;-)lfhUD3lEJ87MroXlivH2u zIL;YS#RKV`1g(Q2$lWRu`Pt=#_N7Zp?WNXLez4G5x_a%((o&m(;GmCRK-J6bYnQHG zzPfmcuuaK&AluvPTUrp;gDQ>&J6XTLq`PEXIJk7XEWV$V`&&|{!g?P_;K*9m&+>b8&`%e! z@ZXFPd$^7bWPXz`IkMp&$?)KkUFq4uzIXQ9t$I7^_i@C`){TbATrx~{kLI#`kLtaC z?!pC~6TaRh-Fi`s;@&OF$mH}2;zM`L z4tQh>&2AcY>L9@Oxy^4U0E5<8c1wom)wIU~pMo7{)v!8+eAaLl6?t+f(xa*8K119` zRH!g3h{TUL7?;V%K0_3nnod#^07a$|lI-`k7=R5Fv0bdFhWln^W)Az73o0wPj0GXt zRnb9|^g(L0`(b;1A)q6o81cFD(QX+dM4W7%)5%_%<#D0j-_7!F%;|;RCr0Ui5Yg_H z0kg#7#COy`jE)NFQ1>^BoncD6G#i!DA&2D)j#RV0+1ln*mhx5;D6`~rGd{q{m-V#U zANAt(`JDP$$2)+lXXua;X|En)kAbjYbH}Rhn#ZvIp8g zva8aJ_od^g9=uE0M+I(75kFwa5qFxENFyqzQmR9z!c@lkf6>S-zFSS2sn*hOonE)% zv`EV208#L}uo94IB1ttM)h1BhtxuE6NUj#8S58;&CfztKVkyn45BAe*?`+Ppxur<@ zaf<8{#nWUsQ*BSzcef>5Tkojv#Yf{{7W;VYcJEjqCjg8R6RYU8RfUQw(aWAyk}>q= z2A^S>&>4zsM5#9#gg4wA^(MhbuiViSh7pZJDlF%zo28w6)YRuYdXkF>YGst?(GlF> zoSukSozq5yOtQ3PLjIc`_!%!hP}XXCao&%PLiJ=8mfg?P=11WV zYa89(p6kue(WxLxR;&-Mh)z(K5O^G1N#5|_4tMb=$`OV;dxC*hYO*WOT(H>}xE!R#r!O%wm*^G0ZQ8T~3w^Vwi&?3PTrj0$LwZ3b8gc*B0 z6J``{r@i=q_y`YL@4@Vyk zW8yv7R3AwyWhhr8Z5g)agzRu+B)!_cHotqR-Mh3H5!2KFaIpugcT_k^pQhO%Wu@`oQmTn? zbyQNi27m)SVwf!}_ejjF+9L}lVB0z3$PSdq%2`xswU%3#ms^XfwJ_JZI)~$4&xUJ)Lz% zRi`3}JyXXy+D7aj)`3cewNbvBclT`_uOIj9W?gq{qg-Rwbm}!A>*U~0Nx(RQ!9nN{p)(a=2E;Dm6&^rZPJNtvodBHnD&n`fe zcR_6>DU6tg^JDi!*?&}u8!lY0vcyehRBPvN?d!3vzMJilD@dTeNyj8>m#aDMd``O5U8Sk&J6lmyJsefinCZn@t;53by1}cR&G;bExshdt>G@WiCsF?{ z<$tL(xAQ2@S78S8TJtmH%9?O$`tQeI*cu-2H%3XnhbebzY~F)oQG=ktzW;O&`Ps^- z9J$Evj`BQC#n))b*>=KW)pG}V1M}v=R=d~ljbXGlyOV~`F-|#Sxf7TCVhq){if%NF zZ)f>tym#xFQ)O*GLK5FN-x&4FWY~9`Gw(LzVL$4+SX=AIQ3@W9Y#DBIcrGf69Ue=& z8+j7%df2#?z`c3TrHR{Qb$K_T3>bQ}W?bzSU|Iz!Ih|HszZ1IyG%v?+awm`7Wp9%? zI!$k^{=off9bsA;s&__%D24t23ob)sU#=IoNB#cMT9&4yH#qgyi<@`1HtE8sBt>wA zZg9OIc65}|{W`LM?8CJPVMMj%H{&8M@0R|`-*|d6aZyVrB%JD-15BXv0Ds*a zeMerY+gU!TF1^2T^e{~@Bq3ZqtVc+)6_xSUQCdbWO;th?oDQwz1$Wqs-7(mA8_6C= zJvlXnWj)Az+TP>@VLhD_#HoQz1x4{xp506JQ%hR6aXrC1qrDh&>;gqEU|Cw-i_>ze zbQ?oi%4FwOa14jUG(r3h0M2Wj%cA}*a4m6<8sCQBIK0RXVLe5VMfoUlL9`DyJ;EjC zSVA-I4jO9ur3a&67L7|&gWwu;_ zRpLMSFs~euW}n*&u_oA(!wfnryw21;-QYHw*FzbUq%f3Q3hD?%HLPM$H}3+K6p|BL zx@RPfkdbI31L-jLpYCC&DM4K@%GEVZd=1VTI3fgPhzaJn94an=P*KekU1fXq`$ava8!gdbX$`;$()bR__hO;tPTUFjD;)@ z<{?TUC9}>el@!)DtL+gqTz9Fn70%>Ps42kS385(%Fr4)claJg7WlS9vyurlS2fj+3 zzY8{$33IpI@L-c+yU*N_3+p&9C(MvU-YZ)dMn1N%PTHmACOA2k?IMYhvm;S_PLJF% z-eEmiBz|G=XZGCqtuS8XXu&wUA@ooCRghvjK9DU|ICIQG*QZg*j!LIdUG_uRkwaOW zuPB@`EJ=<{iPaV-H|=dE_NbUQ0W`}TaVs|9>c-E?FQX||_JvlSxMaZeBX#N+kXOK= zSns(vDg1_cAg?KQ{t=JCwUUfuw-}8ESxw2eZYZQtkgO4l!-hnJypZt-p8-1Sh{PiII2q?qP;Dij!&&(V4(+t9<-!SAwI~7r z-6i~q>u;=Jm8Jj+i0M;tFKX6XCdcqDRy_dBF?>pt3SLf*Ap0z&YLAOgT2Mao;yc{{ zBq-Li9@(}ucd4;Gfs*a1v1)+{OWj{E9#Zjt2D#L0P;t|6n?qD!Y-mZQ6EUJpglGu%ek6+N2Lj-o1^5p4J^ zhH6?L1J>1ecTR2wK@E?8y>Q+*Y{k@LmpQo^B&Hl#!t(0HntCP-Va%D}3`QC-#4@1? zB+}{8A+t)|T5_u3K?aJheDXQAoZhTBBd%~*ZyM;XqjWR~dC$pvES{n3=At_0`HZ>> zIFFUwQ|C`(%WSl`Ev-Q6xsi@G>888-CZ>Hr-%@QTk$jJy-C=7R1jHV05S;UziouxARDzR<0d&0q9J>9_cEtrkqT2Bl7_3|d((gRqd-IU+UqZtHqcIIU`o zI*ey>yRwjU(|*bsX}qRETGxaR9v=U%nUZv^8V(FbY>+nNBhU?H(E}3xM#9+RZIsuX z_;B+&G62NZ;G!Y*JXMn`=ic24 z!9lWp>H67B0Yh6rTAeU=;b&=EW3J*}97$hWt5%n%Nu%DU8&)AeMmpnm4`=GeU00`0 z>H%fGriGzaI@82}!mbimQ`DJyl(tBBL|&!!>P&MzcRnW9l~qP5a|IEyG$z;aBsV%U zqJDB6-H%uzwM_|K$}158BD#)m$!bx$g%ek`=1^T#I)6d0w74|`_PNC5T0-&7-6S6z zMmaES>;hF5UsF~qqcvorv-Y2)<(jfDXj$xlE|TgN?&Lw6oZ-$CIiohKysq2};2K-r z4Tm92hK8-aO|yfqgT%Z<_m*RL+cf2{59v)dr~V7ON44z6>3u#Y0L6x9M%&ra!H`6EIvA3r*n7*a zELF3?7W7s%N~$o)5UbJb*+no(`o*-)?I<5r-r8y1MNzoIvLz2^JNJ~{z zmRXsEP=VbMu45R*E!J~(n6@Zpo-ugheyS3Atg{N~0M9J1o#Bl)QZtW}1}satc|A<~ zI5c_!`UMbD4ORxKCO8>y%_4<=>2x}*1mD{lBP+|I$efAm-lv^*KUW~7u?aBN;9kVP zgZyzRSW5)e#UjC1NM~#oOs$;zv=mj*pH4WPqRNFZX6q%un=eN;&#_U-rF|)5^`tqN z1YCSh#CBs+4Nb5_wyb5zS`Q%iw9)_PMoQ&HgTd+ z8328qlDC?Z22-OQx?>qv@s1hIZLN_yq*2ocXrp=E=ZtlI)y}4229ms`7-I_6<-?i@ zZm6bQR0)UeQSg2Z2d>r@bt%+I%5lC#o~b8rWwCBnF=x5aStk0cMjIh5yuR@C2hV4$ z-e-dToPfbG4bX``w3^IgwVbEDqRdr4PWQ_F&STZk1zB-TM+3fQz1>nz=rmR*T)nY& z^VaP<@2vmY_uk#Od++|A-`sle@X_~w@aume+UfS<-M#(fM^F2MG#ma#UX-JQ!)Hf7 zZY{JIFI~QJb?F)#`X)mEPW+5u*XpMR$KL1u*?_hHFpvNP)&jz^!61iCo(KS72B*_H zEmdYOK-{JFwM*BoTy0;wOm?SAmP@7Jb;VoyX`3yOh%52t#LZ+0FDW)JrwpQg1mds?E(hdrlqd zZNs_kORF3DyV~(d5zkiIi_>y5rd-S#M6-*%pU1d(#BB7VV5!8V4S@Pmkmiy$~D{&z~@vbBDX<+au5bH0fz3u z(J;P;+vfGMZ1BW*yYP486yRu=P)!LzAe1f_p}f*mLwXTlrEMZnd4r2HaE#q2PtB*k z7az?sqLZ{E-P^emn{Gp3Kn_uw&8nE^Ayfc-8XtwK@xA!Spc1hvMhUUoG*eqg?}DZo zt4>wSf{t_{H2XI4>X?fX=Jd}tlyPMDV<;?`ERARligt3DSvD?Vp3CWQo9z15N9jW) zDCWX0G0GCuR3q(#j?0hHfRBhQO=#mFutmeTNk20PXa|c!%N_%R2m@~xkXk>@D355R zN8(|cm|jFxV^mLfj*{wW*^$|*>gA)ZtEHBsS}Q8SUPwlCOI^Lnl*r*&re<||nbKTC zmVoWa6n(79p*PKd>JP=yqzQ|1OE?GP$ik^vIvv_V@+-%{W?mv)RKsn>9=@Y~m>vCE zwu69r5XXxAUHC1tPaWK`}P#YIyG z40nMIbj-;HJ0oP#iHassjzau!FDfG&Jxm`8AL?AzmxxRX+k}!sNW_loHrptvZWdXidOlx z@??v6+|b$aYxye!f-=C`4#%|{rBB{ZRQWVQNCN^3D|wTx6+U^th5N=Oe3?-w3X8-W zXqG#s@p&4p**z26XLTE@EToZsr%@YH8qs?$eu*5?*_11PxLh>IfHi`^}vnK#j`Y-(k1h1N?l1tk5~Z&b6y6>X5UIcdjk2@ZprswFNDQbZgV$_QH+F*s(RJrRMd<0(jAY z9??$}XbtEXm`mR8W_yrd4%?(@4c``<$#vvt0#_sBbwg&9H5C?Y22~%a>F|fsoR{oF z(oR35!!#e_$m7g*BlK=>tW@r(kgCW&#L;XT?`C_9tC~90fm=t?-oL00zzG%au&5t8 zl4<+VE0Ep^_UY{kGki1PP+khZATe)VVsFJGqJvpXogO8?1_adm1ZP{Q!@CzZ@0`;$ zUKLBQyeeR$%J}})i3|B*fvf_xOPRQkw$#`QPn=`H*8EhP?0_0@WvF!Ka9$Jaxc8v zj|zok+8B)5?MKDF;^FL!IQ5zFGlmK7wc$%UV%{5NhbiS4boOg%ZS!4DEq+v#@j#>6 zMJ5Y4hrCWSqjxixBKMMmIMt0?lb;u&V&p%_@6+B?`gz=-d*b_ZHEDnNp+&bkY4!Ts zb44$!5YMr9=h`)|@69!A!D872HIL0|r90=2C7k@WSM>Vb7){Dq&+cJ&hkbCecc=bE z5nYB?&8hGrW$rZTmGuc`V@q>yS~q4y^~xQw)g!lj z84og(@}TLGZ5*P6$-+SrpRhg_OLJ;#KO6OXxHBSq>R`$7=#ZMk!xO0x=jEda@xR_} z!|+^ro~0MeH>+Oepry3fydFkR$&W?Xc7g};`gs)j@7$*a)o^FYl^7Km9co0qj@yuQ z&8A%Myr$tIlG#jIQ3TaRA4dVFAmCbZh26%@R>JF}IX-*T8 zpcXKYnorI(o$jf^JYg0d#=K+j?9Z<4_jpS$q6<580}UIB_v5G+=gr+D?)N&=A7H~a zhDy~ySjKb5K`<@Oet)I`BQR6U6Du{tn$z(BQryhD(_*hEo5=axvDLHRk9 zW^Zz3;&zVzIO49NzG{Q8*05?P^2JkUr}!c#4My_FA}O={=)AW18{1`>slij=16O6Z zCVlVlkX~M&PMspI=jid1xw0!W!u74qJDmCb2MgFql9K3a#`v87Tr@TQFbCI~A|h=^ zNxw|eCS6s-igq}oK2jmwmqpt%gJ%6XVI%cg8-G5N?pA{^L`%D}5g+0llBq&c3F#zL z9;=XBq-&HYYDKuSs|gvIp#Gh#b6iIo>ieoJG0*G#sPiFn5qO9?kFoPZR>I`RxDum- zyrgRS1CNhAhbhxc@9~TNh0C6hCVNTbeCJRf!*&Y5F}4lDr@``|!bSKaH}%y{!Z@F) zoqKU~{TzHIylA&!^~wUNkMy6XGO~!G4EU4{)nTW@s3?Z}c~r!mF!Y(LpADcMJD;B0 z_`A`uiSXc_bPe-I)8P-R!X$j}ajSXl$y+dCiLFqkp~~eUGmRVjDsN0S zq7s>R$4$=K2Bno1*5K@J2CB>?G)y~yb{gD8mire5o2PUw0{=M!XLQT4b!s;Wjed;2 z#*H+gx|^v1hEx^(yV)r1X|1eo!7(OlYtQr+A zA#~#?YSX$N^0FmAhU()`?y=P=NR4Zd9b15CUYGE;4wqmB#k5AYC7&B;`DXWk$lY2+ zG6(-)F>6QP0^7mO<<5fZ`%ziOxpVg0qFM$onSLsvRt;TI$9p9>1VUsZME{tb=#I`T zT_T|^n)AbyD(%xLE}JQ05-`-(7%U@g_0_OYIbsEsC^QcUV2hJaF!}@r3g*)+i{EI# zo+~okbPPw+uc2%*Yc<&LyoJ?#x%Kl$v!`S1T~3W1x*HB!T^_z)Pu7f$BXgUQD9`Ze z#+?WEZ<%a}$W(SeJ5&-|3%*C4dM++{ve0T*{KPjB(32Op#zi|+ct(XuXyf~MQ8MD* zR#ea@Bz|XPwq{lmSkLxz8HFo@31$pox`F@Sl%{Fy+6BhF&hsnuem^_(_XymI3E^d$ zmA@P7MvF0A=)qvPKoJ4(O1-HTS}in>W~F1dWLr%)sKPu7IwgotJs1qz$XtR~-pZm% zZS2kkkU7=3k)$Tf%CHYpFr4%39Qc?8NC0T^raqt0O2Cmge)&W-s|8GetJxCZQ-McD zOf%;@+#oZ-0g*AgO8WH7<6BIwT658&(~H~|`zbiVKDMOu^TLgI0{MAu&?(hGc@@s< zQy<1ksOKB4!j#fMA)XAO47@R@q`wvnuINv&3SXKC4WXvt8&b5%al8OiYBEuo=3$RpLMV zB7Dw)F-k`*a4p@Z?hLUD`%x|#Hw_(dF^>|Q#QA2Tv7Fn%#)tnz_(!4RJ>(RYe}zC5c@r0sqfVM-GB(f`D(kY5*^lx9Q6h7X zpKLd#XFh!Mt?zvBe0y6bCw5f&KZUi)DiXsW3rpk^`8}|}r^D@S+Wj*nifI?GCs8ZW z15dB!Ts0JXOQ(6Sq8u;oeQz@JA}hTcKV@i^F-lqD-S^e_s;crt5?Xpi7SyO;U`ycf zI~&(b-B(m1BQ@w{OF=>JsE~{!j#LfxA<$5T?4^-NBJogAZF2L*&k|hmLT(L?=W%@- z7@Vh)ou6*-s6SHS52rr_Bl?hrAt6T7I#!8F&5#Zuhe14HPDtQ1`)2rp)iJD_6NwYB zZf0eo%38rGe7zWEWo#$H?dOHrO5dLuuXabbQN5AJAlAsyLGm=unBI4?tZ#z~?QMVE zK3_LMVu}%dKo=)JhPea3ShF&19uSkHxA;|k+sk%$owTiCYxdIY<=LyVOS22Duu^zq z1HJ0lOzw8NK}|HTw`c6{#hGeN6068;O&gz$4fCFs95?k59krOB!#^CkaPUK;1*aK< z_v-Az!tBEA;_Ri_D+XRuoco=Y2+{D_vnY*sqI{S~N27GqAMM4%ZkZj#-POCdZme$J z-(3Cmhj$;o`|!@K`)d#GJ-W3Po^ZITxd0i{*6J}qKx5muzR-3!>4utaY(R5pTg_f% zzK7mvY%<t zJ@97t$vf{WaE*&d%vj$QnWTn0lr5LG0+c(d+T|JMZxKV8Gu+p`lm=*mZ+8z2NP((Sd4;D}@Os!|Im8B%Jq#+Zx zs{;m1!uG9$QbUIlz*Xaj6gK4U$9#lnGp@g_8r)3ARH2(mE=r(dkmZ33LIjokZ2UkP z-6{|FM^9hbH#Y}kXBYOGxS*KA_*qhv zmC7+IPv@%kDWSM~{WHUhSHwrm1^CpkB z@UTi;x}Zm0y5OH4d4UBmbxB`_yl`f~P}c;1OV~?_r^k^V8kXragY?M`=z1Z=5tPRg zoNoP7Q5^cNg>IbM>IjV>n?z@HV_uca$V_RphB2N#StG#kjK5A8p1y`XJBJyRq%hTIRh&jU{UqJ9R0Z}#1EE(jndNWu=}&xU zBJrtArt^;YmK$iR*77)_kVrJFvRy(4gJU~xuq+D+N}buIj+ixoQLi@v#neP|5It+c zdkS-L?J<%vE2DmM5D&5(XGG`KqUMy9h$0^*mq!b#$6`t*54dK%uzF!pYDI{__ZYT$ zK|#Hhby8Jr*~-uSog^?lz@<7atxRZlTqJKqbU~TnbRu2QsK>JLpvtmqLE+$X%53Db zP!GIuK&);M_47FD9kFWQ5YmJ(0SU%dLm;&j5@B`p^m-k0>4s(owF==2X6zVF4ALc* z;EE1b(gB%Jgs-2P7cTt~f~wS4ohxD6G-eVg<1Cv=P-D&#;4yrA^#{bYnZOp*b=A;D z1!47kWYYYFJ3@7)vyJt;Ugft>SXs>Cu=aWv=vL*&pZTyBGeVuTrlN;cFIur8Qrjr# z_TbxjCg-eu2Z~qd`w9CN>rZNnAzerD5IYf|sCCO#%uF+IOg?sdT8;0JA$W~pb4p2W zOq7QZCj)#xgRB+DKy7_Z%&yhNI;;!}kh(2+%prT{3>ZL$mITy_6s=Z;v%lcnU*gEK z2!CR4B$3)Cj>A=j9KfU;I<^|Pbp_bj7e;22JrE1aM=@!iq%j#Yt!IxilhgL~{>Gx$ zr?#lr9w%7HH6U_5mpB#1BVsB>>&61+w>1NTg`tNLQr{S?LBg0d^y95vSFOTr?Sd+C z&hjwJpB8kc2k3~SR8h8?VpjE&GR~vE%2It|i^EAup;% zDCwl!DN=rzwQ9=4bz9qpL5k7nIb+Ir6Ci*(DEzQ3)1%ii2EoZWIw37qRyPQX+#jA2 z?r11(d6LKD73i_80e%O50*p7W1B@9-2O=ENUVvFsmSC8%K=3STG0v?z(pw*0&`Gb& zJjfiZMg4w^^XVRGFb!zZ_>ED5^USt{amjIs??*Z1@pDQX=PDIWC8=-qrQWi2KM(9k zr*K4WZ};BX-k!tP^mNo8?nfW)#AWnh-u-ZUdu|5LKOE120F~6Y8QsmmS(2XImvnDS z-%2S;vhLK#6v1j$&0;#&H&_wykVyhD_{`(VTf4ETxx#iV2{Z_DOv!B!mZ1bgg1E0I z>}?)^x4y^^DpSufOw;6Ko>Aeh+%6xgkn^sxYuWWai=Ha=NmHGUO4W~}qEtv@nCvE9 zr5lR+NqID*a>h?#kx#(@25mSJr|zSTSguyK(fYD>Ce6nrbA^9D{TStEJ?GvxtCR_8 z>f9~76l!cWU^{fr)^sTAK=(&I@r?rw>V+~!J~sy(+>HUUX;6|1$vM|(sp;@h)bG(f z4WHW%z+GrnL`)1#;nhtEoK)-C0>!_uZ^N(#N{A`X1aVb$m=Or3r#qqu5ZV)HjaedJ z5Rw?q>I92M2CYN*e4xS~$9Wd6sE}9yet-+$JMV@bQcu=fV_i+7w>kWpL&y3A3iDJg z0-5V4DTT9{%awUBPiFnI(1I908lM}`BAq1$W3|J0t*mB|qgr1>W28G;jg2*Jl0S9Y z^INL*Y3vM>IL%w}2Hrz6z|iVNSrLLL#q%S@CIYxf0KT9Z zn%(1CxqMtJdH2{hu2$L*cB8q@@zXJBkfKN+&X_PhGh@a}XnDbOFbP_*j)mswtTu6X zbv^SNM;bfKO$+R#+=wLqaJ?hf#LhVx;&~-c*ks6K3)a277fVQA1%s6`LfkdEQVB`b z(#T{_kT8n;w)I(NBrYcan%AW}KAKURl9jr7QO!!1jKp8dcKCvBtJ%sMnERy@}iVpEFdSCAZ~zeig%Wf zQF*PKp+c9!M2*z=j5yMm=|D=x-KWg|^l-{YAX{#T-*3?K5D^mtlIj)-p$T zOX`mCSgg%drC6m?cuk=bu%?;xO%^{WnEGX_U;>r8SZa1_D>g3hPER6`>W7vmt$BH?OW!o%x;%;qQ_ zS)JNslph;K>?kXBXZ@>M%b0lHIFd!;9@20WO{LQcgY`;Ljr)eKOsxv51bwcjWt<;G zeFakq)AGD(>m!#ex$uHQ7yiZcMSLpn*zc42c?e_GhGkjGbbQARmVOblpwVOeEqH-?cwEMOH^gQc0b4N>8i z2&9<8&Z>t@{OT}DD6RsBa1epdM_tM0Wo`%XSi8T~i_@Nas~0J>H6a&9Kvl}ao2!ug z)NiJZd@fm@?BVj0)`}`dJ3orMWv8*Qq6VB@xYKB_sD6?@?KBowRFU-KwCpr4DcXUt z8B2G13#V=P$j6G}Q!sJ>q=AgddF~w$8HYtH>9SJ2@oKk=2w?Y}J_#dv&$STNj}c!v zdowAzQQpITWx`czx^twItZlt{z2P=FL-x`MCAUMeDY@mz0*HtXua2f;>qgu<8ti2K z8%Gb*q?`3PkC=u{BSx;Vux>?aM&m|11-*ydY;o&ZnMeGB*`YjF)1pd;(N5GI6=5gb zzTMisc6)pE>h`Lf|5mW;MERgeM@UfQR(pHt_V$gIjsb$#DLbTOt@3(xZF}iz<@IRj zyu4ywcB6ir_M+VOeQj}j>9X@a?==zI*4)XSIfbrnFD=?a`%#V*|J^)}koV6ix46A@ ztx_&Y>&q?Ka{X-76L7CBZ7(g@H+fbdaw*rCxOQ`UY0bQjqrBX=y)Uh8FWodRcauD} z@2*|iUbVyA?PtT`QIo^dAIL2b$ff&k_;EkzX?y9mX#^2uP9uxk*X*PWvKCP#{} zFga`6OKsD4(ap1d-|yYhOEF0L@lkUaC0qN0{11w3pBUU-Hh| z?FsQM3eKbhZ%@=E91|AqDf|$=tEjIJgSdp=Y+Y)$7M%H8-M(?d;JSw5s}+`RZZFx% zsjINiYA!lGEZuThTXmt-G=Hrf>R5JXe>SZ#)zsPf$F@Fo!D-m}kT9|d?nryVmQK_r zl0?{(IhzUDo=OA~Zx-blbZ9M|02Sl9d3{u9 zTdh?%AiveRNnh<2e=YD=o4*$M>k@xm=C3RKWyBbL!f&;g`1v*d;?~@wH6%ylkvoy%P33KzM`MXqv@t6b#jEyG&=l=28@vZly9 z*ep4I2hQX|XB42xANM6_Co)^EY@R13qCWV8cjA|zE`b*xtwr7a*uR!`-Mrj{N$YMow4-X+mt3jOHb=8;^> zX3bc%pa@xYG}uqNaawQ+T;#{^Qs%KarTG@+MFf<=~%dbGwy zLulkpqG2#`5Wi;z6?Ik|osX4Yop0l8M!jAh7g%s42$G>UR`HKm3KZ6G(uL+SX=mQ- zxfj784Wi&^TZ_W;qITh|?p_{s<6ZD^*#4Mp`M9zSpR%{VGun%BR?d2>v=Ty>yH7F* zu|&m1m-4ak2-@W;WysM?c~_k>9Ki`f(GrC0v*?Xs7P&H(VBUNCS;I(lRGils9Y6G* zj2{;~+2sJN8pK^5bwwp-$2;M}$>I~HS*XIwU8@|bMo40G>to2%d=!mx=lcm^ok^3# z4MN@xK3%Dg8CRt$FIj8McDz)Qq8ipLIlY(1T}opwO6vr^%6gP3GbTjVBEfqCPKDTqojjcwFI;lsEDu-u0eWEisxR zMD$Klint9Cx6|RnBF>wudvRJWs|{q&DwC&t-wF0~qr4k8uZIV5UL;uxj>n0`+?P?_ zh0U^Cj&e@Y@3;!3w2hOWCuFH<@()#qjpkQ$z`iqVX1FsIQwyVOJuS+p-{-4X2=R4p zLB@?B7|KA!IK)WdQg`D+^vxIkis41s@HahY>uG{(Kt|Yh(GnJIfZ<;EH*4Ip+!wR9 z`R;9RCK(TFS-LAh>fYOR+~}K>{vE}T%{XHamG*K*uNG-ETcbhoD9)2zzj77tUPaWo zndGZ!PxBq`b+zu+Xm>a9Z#>c_POskBBJtiLS-1C~O5B3nTBT_G?3&k~&LuG%T5^nq;oy+E7ipCprg7epYO)#Wgcr`|MOW<{sYg*SD{wpo zS2vJD-!6KZUfHW@%m^DNM!ep;5yRNb7aJsIrE{6FrK}5&yB5Fg+KIH1J1ZPtDNbQTa-*-d|9h*ku+23(I{VTt@U&lnK&Ec+!@wr z0+kbM$Qm?9j||E20o%Lrp^&!6qW0t72*)r+sxyraGW9P;jd?Xy!Gj9phdR`3gU?r)BO;STl z*19mxWN5Al-|ZMNnH>&QW@+!m#>8hriYZnfU>=3ne1?0v%FoH(756YQP}X~ z5vgHcb9vDv7H(j%Duqj-o&Ys!h09U&96Q`@24X;N!knOT7+i3g0qn9rt7h>z>lUK7 z5(N++*69^OcEhprBuSHEf6N0%m0%GzB9}MF#4JoZxD^r0$?54iCE~!xH6r3OVF`%E zj});J@_5nw9Qz+WJVvNS$iTx^1x^;lsour+c&T-1Or9FiV9jv+F-uD~U&AM%iB&YG z7ja6D4sA}%(O_^iha0^zc$6gl0fiHO#~7^nV^y0x8J7C6fk5WW#K{L`gx3p&o}i#! z9yyHTbCFzRkD9f{8$J@ zQ78Kz%u&4DyLo@tgV@j)uQp@y(s5mM0edY>Sd^<9O}pz&_Q+{_d|?EQhu#?wgHs2Y zok~mp4|{JH8%dU(iLqBRqaI4Fl`O4yS1T`W1#_m8J+=bZZ&8Ogt{9%z)&-oT_dG_4|cE=8&)XK~REaa6a8&Egi4!ft7)_OhJ+yMW!=IeN_YqclCv z)gV5O9Cwm2b-+v=$`bI(3RVNu+UnTadd|~QaU=7wlFYcYWo550xDF7DpeU()=TN!BLkUPOgh$`m{fm!CcN6z` zx(y<&a>OBh0oSBXFq4T=RSU#V5XF^Ppf$T>lbJeJI?e)*zH5Bi22ZzD&}z2eawH{+ zSkOd_10PEg9&aZu#NN&d0(T|z#6-xCTJoHDkf98cl=K&QFpLTW4bIXr+>I1&BvrjR zg-cBn0yLxY>O9;8k}8~}7q5*I0?^B2wv^DoCd;sgo1S~$mgsmCg$Ua&m;z4*6%RK( zN2t|mB?S%FV(730js|i^Qep;GEUE6sv{n@%Ex`_Wj{|khd|yyz5Hm|>I~eW5<@xq) zeYU`L?!HO#GG)%8N|eYea284(Frsiz9pw+{%ziUZ33gwVxDW}zNAE^IFzN2_seY>| zn~g)8tQAQ~wo7waw#aW>YonMMA;XZ1v%sbOhpNhABg6kLS#_+?7ySvT)kB4c0ez93$)&aR*^s~xc?*++dqtib;W$*3D z#57CPHpcTL;Uhl0 zi>ej&N1*I3pEJ--H9G|-46 zcj7uB#lHW5jDDR>Hu-!rK4kh5=_L}HU;8LMM43$eh+`AlBL-)JG^i3|(t3j9dp#4^ zXO`lNz-p?-$5i($_vDIS>g_x#An3ut#W`D~pm)coE6ZUmxU2M*Q`(Iqn{EWULwA{V zvY=fpvl^8cbxwHcoCjwE2#L^T-$mMWdX>#nMlpNa?2vAs=GVqOn;*EL6Nvfa1zGXY z1fuJnnNGxGk{4NpSK8Hg90Sw7OeYY@Qm0kp4M&ARwJIE*gz*6PxlGzDm0B-8W`P~Z zCy3PoF;zXmX9{iDx6he^5MUL_I227lIu2eBdON%oCTpV+9}OAm4PK2xA$bF;Kj`#r z=x#*wvhUiF;ERRMW5)KSi;**ZcVdvqyYtNI>fOeq?jA$lH8W7=L6T3g`su-H_&Pxk^G&$(4P0p3bTlg_?7svwqT4i=O)>R@W|h2g>kjQQYNKTd|7@JSP2cCz)^ucb4}5T_7kFPJThPT%M= zaWII{vc6X>WPBTC5vFDf7lYTwg zQ)qQcYoahL8O$>p&q4~55e_`lUSlR{sfIql8jHG zRb5OF>LgjJSn6wb+x=-v^Umxflhqit!u1($10=qOgIL*_`kcADqwrA^ooB(6qfM-O zAdH8#QNDGUE*ON?slI^pq#Dg#zV#b7a^EEXrdLb=3VDn)V3IMiuymCAqclV^jiVcv z9hO*V9DSfXk8yIGq^C(RPhlp0M90s(y6x zV4P{2n)KE+=d7963JsNO{iZED_Z%fDdAF@$vd;(ocZaEUzUE2M)3zfx7qoPnLqj6w`Tr@ z8D6_p%BFiT&Wm*T_RLRbikX?2e0{5&Au}`=jJ!!v`H7oj&tNk z8s7+SC>&e_BAWZ*@!}9i319Aq$1k%y{BFC|T%!Nlt>$QqG<$QdIk=$d-B~#1=iZr} zoy*d+XbzKcuel%gj>n@Yo8^aZ6vW%@OM@s)1w>D$vkqO6@0ft)OO(rJn3C+h>QhTs zKD;t@W%MvuBc##JtBa1QU}kfR<9xsEuM#kXWtr8Jru<8s7sR|DKK%e^+b{+%kS2R3 zWrtbtJN6&^ z(%+7;V}J7de=Ek0{Wshl`-i=m(vJOk=^~n$x$!NHWL+ZS9X(xMKe}l6E;!1}r+-ev z@-J#w=oaAUL7Eg{oJ5(+MSlAZ!}P8FzfCaxb%E*6RdbO)U+M~+<-%>%l1r9;~EuvVM(SGsb<4@cMcsRF65*ei;7ty7&qhuthh|=Z1x71-+ zM5o~y|NZzAe}Ma0+&_!}AAf5+d`cA^9U!HN2dY5oz_L#rm7vkR-+gBm#aje2YUDv_ zhA?wuXubELh|siUs8N~~)D{2jzftaKgJ1xLXtD9_AU-60I17gjluGTc+`7G~vgk0* zi|h=CRG95!tLh)y&3@WDj7+GzphEYGGKIMvzT-$7HY%ynW zx7>gJkN!K_a{uQq|M$e%|1H^aZ@F9U&zCxYrda+B`|n@*nxCfo&g`7M=TP)i=#MTi zXv5loHosQYdIH~tN;92OqvDZfkWsF1@&Lw{FggXsM`t~#vj^$uEQ=413RUmTt4^zR zv(agFZt;0<^*(7B-_?4?JyI*@0K`O=*n$okcUPM2J6;nfnP-8|u~0uEBzQWyAl0Yo zKDh=FGDRowAJK)sGHcgpcVfPman!i>TFFIIvhudi@**0Vqoz)pqL@ey%m|3Yxq9++ zM{Td~+)$6=*J=aNg;O?VWR}KRP||1}-yv1WawPbGiJKA^}bBT-=>M|0RyL6(l zL_JsS5f05b3429+5_OZbOi<+arIK@6Ymsy}^+Gvd-sqnt;V|yG`i2HsJ9$fKwXP<_ zMFy|lC4wI8#)Wo!=h_TptEQRfuW4mP_|?wi#(iH~`PKj7kBD`y{F6T-*7wNnk zsF@j;d%olK0N&~U0?zsG&t0B#G9*=e^LZYr9VxJiFmCTCEchfG<*l-7g%&!;Q4VaK zFzFMUp5U4*KO3$o`$s%0`Z(3){b$CVQu5ne!Ldfig-Wkmr<;j6BV}fa_YEjrOf&1B zp}1V7H;${PkvGn}L)PKHFH}ipI0RjuWBCo1MRF<&dc)E0UTtSd$rafqf*)Y& z?<99C^Mxv0wh&@&Vh;^2fpRVlc+TKjRGS(oS}$?LAH~mH^`xYh0f5O4-~>D`)Uedb zCwn$=p$io-qay`+DUpy-sQYOF1pFQv?>GHBIcaa;0@z8XHF{Xs7a-2`>Wt_svd^@{+Xg0TTUCbHZG3REH2Je zLp|^)(g|bn$Gm6ByK#?VIN!#tE~iodC1-u*-EZBz|E*3(t^)g3r-KUvZ1q&9s3q+s z{!As+7pk_o_I=e-bpwI3YO0~y?vYI!HIi=W=;(%eUoG1}vi{gi2}$hqD3ZLw>Np+g~G_tgFH))Ul?86x8;D>zeqb>w+?d>Pq>U-NypFmyfM|qUR;Q&=zQLC)` zX`UuXNFGOB2AORid5vjvDFrirg1Oev$K=z*$i5*@z=(^ zfGPZC+&8OW@F@C6B`L|MwEaxCO(j`yFF^bn8%4^vkanEXEZm%@ZBj!mShCd&P||WE zUrWw#cf}c4+bqz9V&XmIwjNMD*BNHfq9OZKPfZd3PWwxZQToxH^Qc_TFLX>bXR zHfNjY6_+sRQM#&4mWJL=KI6evnBcDh2Ziu5uV6{4`Y%JHc{1B#Iu(H?ZuurLP~K%4e*MB^LLlKx)PyuaozQ{U9sFU& zs~5Seg5UI*3x5pXkOXIs`ND|6L8~M!;vUyCk&NmI7GgQF^y?WQ?oFL`guCSDi2GgC zWYbujH}`Z>0*9|wD3yUz6lu4Lwul`nrm(o*t!b*A=tSQXii6daRbo~7rZ`T9(S%6* z5RiI0k21H8()}_AJ4aEnKFA|tdR(1Ai18rK^5P{?7#JP71M9&D(O|&mr0SIon<}`0 z97B$NuJW z%e-Dc{w~p}UN#UJJ5qql`Q6&&kw$zx6%g+T%1ZOJXP)$il}RHZ&mB@;FK$TeR4@wjJU*fPx(Q+lq%tdATr#>j53UL#^nhU2)1q^v*-^ z6$vJzOJ9JDj3}gAaqjyru8>1VWkOZK1@HIMB%<4sk+aaP)BOzuMXTi~W&F`J;5gbK z4m2p}DnMBpTNct|Z{n*}otC~xsIoGLj0H}`#C?t=6uXQsJry~46q)7H)lj%N;eyJG zcrZYcJS}RRD5U!xX6ZQTH(7c));2yRTG0rwK3jMGyc8q>r*B(f;TO)#xdeG~UUJ~! zG%k*C7@4+{h~En)AgX$r6gWWO-@tLsjT=>!rb{DzRZ7(xQmfQgrdau^)fAPDE|%tn z6#lSUwe$J6iA{_P=84ajwI_4_Sg)uEnu;FI*+q1BGXwXOs*79Lh)znSCiru?{+^`b zhihVAOekt}xeujMQWjxJpm-Ek4)F5lT<-0%0vC-aHiBjEZ703F)d_=lWP^zTSA zrk76i7i~I`*8viXraeQ7(cdlAP(=cfK5SJ^&fIzI_g$52#MT#Q5_y1tW9ik$i+?() zMGIbHrR2gq8jSNJ4cl*xqcJi7^uxzdp&x;oD4#?>b0>(iVJIAdED-&CYn&ZM`t5SZ zt{&pNRr3NaG=%(1K(>ZY7o)hM^R$@T6(eRfsRA+vRpc$C3rbW zey~EwgrO*v8MdpOQ{t{nGb#j-LERxFprO-Rn%wnda-#V%YuX4PfoM1?=zuHa9Sb5G z?O70dMzp6iZR-uzQ`cE8`W-mLBu=P&@A2dgo^! z-J;#kdLzg-bxCkCUo4A;=}9R|nljI(Y*ayyr?k;PdLLP|X(2!!+r-tCdL&W6)28m=^JVHa(|I1?prPK#lX*Cj`a`^c zn@*LHrZ^a!agyqwGI3>CGwl3XXo*&a1lN@D_((FdTvTEQmQz|N$Sa3T(YUYToEf4k zZ76MovlisOGn%H`q#~bV(&IjDY>vTC8@(bIgiY)(R|sm3O&TOC(A~N*Qn}*Ls^tw8 zy&grqB3Fn=Q#Py$v%@h8?+EkrtF9S?p>Z$J%Doe!7Dd7}F;tC3nr3f09_{fw{p0%U zA`>Q2k@A0TPXE)BD9d80Ia+?(ifeCJPf}GrF$oipgymlK!*hqOk^y>Lc~<#;7036W zcyJVEVXufXs^i!TVO07HKaXY!_MVUu9ewYw$XJo(dVAUuvu=3)s@9N!iLQA_18TV9MjL2>~on*C8q3hme6AQ z#cR2;xeNiW_XxV5<7!RZ>-`GhPxe+R6^sU9oY2#kc=#Uvd4YfS@J}88%;TS*;Gb9c z=bj&G;7>4zN8iCe4gAx^KR?DlpW~k|@J|!}+_0mIwr1=H0M2=0G=;{!8c^u!Va9&c z#)G-^gOEw@NxpxO#JJJXnjQFv`t=&Jf*QMo2+8`okWO$(DaV?R!pzO1byZBA(?ToV z6-4uxT0qo;SFc`4@QS*pnDwhyuS|hl-I5;Dy3i0pWb6h3xO!`pI9uZ$$pA7qM2+wp z>rKl&={*ZkURPJ z*O;qRRWq+@aEOfjY4Z`MY181RmzsqgOuBRw6l0C(M|35ry%>iQ>^9haBX+)~AhLy+ zc*MJ)O>B)9D^J+kPSOGzo2FSe-^poO|NINC=BycCHcoKky_?#qA93vGy_YY&pvUGz zRS#a!e)2>nk~#Db*cp3nENFs2C2jx;6}H7;*q1NgbMg@cl8>Tfd%XW?)H8Y^?>}!z zKZjEe6p#6Z_6?H zm##rUjV2Z$j|WkLqZc_j$C!9s!lUf_`?g@rX38^QM#6YwXc$kU{gerM!{q0eh<SU^+ZdMe!@NP~lqQd{(SH7!Id7|7 zJk}K<2e{zT_TmQauCg9m%v?1n7=pMEB!?Is)07kOyF!sZM=#-4MkR4|`pa|va1dt0 zMsJYzj!Ocd%=hBlV|?PT&f}yPF>|v;VyHW+HPT0x@t(K8NwKMFTf{?d8@!~l5Gatp zAE|UdPX|$f3m&Q%piJA+2BC#~`c$!AD|~{}dG)!HxJ0)mq%5l;*I!E<;wp5jjYz$o zQby&%v)NNTZ%lMiMD|cDrs$?M_D6P-(Z~S3}Cg zqPXbEoEjkjO>TINeJ^}G8J{*&)ds(Qk5-M=XA%L|3OtBnFo+Jb(DeQV;@wn*#NENu z9BpBt22q$7syIzmUSwba+U15y?UaG+Wc$(NDrA$MtJ{{#8ca`GYTY$CL$&r@y&=1` z&RtyUd)%!pnWILvWzO=k%uElse%UhgS3t^C@1r+6yUy%5axI0jo6&t{oR&lizOrGS z`3}u`uzYm=`feeJJsOP&4Yoa^=c zrN7JBHUF+;*X+2(dTc4&zdW^5WYhfBuM0kDWj{2bK>5`@x8AG_g(y- zad8x7PcuuzCEtRKW-CQdgLjd3U`768CnIe_?V6r~3m;sBV?ZVCW^ z{_m+)K7ZZ*Sz5U$bB-Mus4C%n2dq;{PwSkD%dfNWN~|+!8ydeg`XzW@%6Q-7B`+0` z+pY17T~1WRD^RPXPizFDXS-Okh~RycU1v#zn2J273NCcRkv!MVYW+SE_T1;%SuM{k zJ#w#Psmq{U6_8`fbH>uN_+V4LCUx7qePWUr>7hASh%8xGiU*p(1xhZ77oU*afkAK6 z&DYWE7#=G+1wsRR_BrO}jenz#2z#3Gbs|5;j`=Z7Lk=6(^#LYoH4o>u_K4`aESRTU zhZQ)>X=|NVWJ|iouY&a~Q{b1XM-|8eE;9W4e@$mU{)Xn%YnzSxRJgmr2iw<&VLWiT z^s{gLF;!LjNBAxXd`sZCP{TC{`K?Y>?6L9Q5{+BONVy&{@s_aLpfq-+TJf8|> zrbyNLW*F1^Z$1g~UiVgWd8xSq=uGX(DTOKL1m6CtYTsOJEiZOjott>^lW0GWi)fYX zM^yGbjEkf3ezTVj7x$y+EIL6eS1(Xe152jro2b{AkFyA8eAQ8Sg2P-WB0SEbzM^$i zIoI3Zl+ZLCmEw+R;a z&qeMvMf#T&xmpUqG`cA>LaYMaVvhz-rZaq0y152x}z85sGr4>J{wjQJ96psED$hUTQa?1~(Wz<3W^h5!?DW zABTg%naXkPS!k}1K^o$`dhy;K2JAFdt)m*sV7wkR51T4z_XAb$M+f0}P#~=rKg{DT zer>6#YD*Xri=k*W=A0Z?Pa;CYRjr&iVoM)5psFLfq8coYMT`C zbMU*W-p4HN;efP2bhD{yH&sJDO%&hfrB9g)T-H-U_vrBLUfc_A@bV{H*|*x%-(p0q-vjz|0Q2mr}0X`(tcy~h-(X9KFF@4P5j zQ*%)s5Ix@njlTCD2=qW{>Tu}aoZ=c~=}FuNh??riXP&E598%wp2xRJwK6IrLRgvRu z`=fE(JH`ebk9flk<0Kx2?obQr^azLZ`Pe&;hs}5}h+fD0@c?BB=~7-&uj9|?l5!ex z{dG7T4FE!T$lII*23*M=hg8Avtih;&mEx6uApe=Chv}*e6i+2z-6eXZeQo)s3O3Kg z9-fhE)?(L%&n)%px0l4O#Kc*IO zcEn|!y5Nqen@x~v>XPzy+?!S7>Shz;>Iau$vHpyOyV`+oRShhyCdQTD zzdTp=fudz2)@$Kfse;QkoB+)}s#tn(YF>KE)T~G`pA*d{K5({hL^Y5X@MDq|s-gLD zTySEaOC&bxWH@+Lz1*XSuYjuz#Q1I~OFi(d@Wlp>b^_4)C@eV(B!>B1 z5g6N%voF33Occu4LrlQ#sB6K5j;8EN4*Gc(x!pufr85}V!do2T2KqCHse*5D(FpIY zcPq}a__~ORgiA1kR5l$Y;GI=g1zp!I52yE%{7DN(h8I890v+Oo9nr3Kb!eRFPT1>m zGZqdFt4Vvybx{jfDU~^yOdWTQbLt~H5o>H{vc;cnvxgSh(Z1K`?7G^teuta617fpCnE!HN-*Qb8?$Sd0$8Z%Yro6D#n=1Njs z^7+|Iy_WPXUT8<@=T8Uy(hMu!aFq`;S?sE+w%`7?MMzgkvEipluM~^{{;OWMI*-As zumD0Pr3T5htBc9g8cLN$T}h_)7(vdkdEKYA{DB`H0`VX^z4S3pWjV3 z-W{qzI8OLP8Eipp%)z z`W41P1C|OC&dHY28-^krkE0~Y!og1J)ODyJX6NZan)M=X;{3`#Y>Cfi;=y+0RhwXH zd~g&dNd)c1)}g3$e$FYmDmz!Bu;?Ah`#8UbTG|!xV!x(24->GTZ%OHX~!i2WoTedrzM=H#eR~}wt?yos92z3{&A8Q z;b8DI8Julld<~$cWijU2cF-422c28Z)^c;H<#>U6`hq#!b!;vuI6XaWI>9r#V6M@R zPUzyL)bNHlw(=qchE#tX z5pheE!KT_m&Qzp&M^W!s4bnqizG0f7ta}m0gPa`DmYoJT$v|BTyt~0B?r<*RV_PaF z92e;@EaINtWZxEg+6~l6v*zQEG`Xl>9>*O6QfF1Ys$$-+7Id6dNDJ*e;(xV(Yvp^9 zz=G$_279%jDW6H*qkgoVLKCmVFF&VFPSm64Paf=SJbki_Kj!A_UPEn765K*bclin# z?l;z!gxU-E*_FmK`8bRb~hNI7_RQ$Aklx8p;bW`_Qb?0Z{ zxP#Z$v8hf+ux=N|4+ul{RnwU`q{Im`NvU4Rb!lAw~h~=kDyZ)V+3j_ z6akvdv5Ap_WXceoL|KmWww&UZtA2cN5M{i0`|JqjHI##IVFV?iPvAHgQaHM?|?Xm*~8TUl$?+!QPwtDcbpz`5@j7#<1EBE zMTdENTu@;cewy-iZNoT8$#ptPlPD>qN=j(aU^3Ms90u+cn|O7T-qH}5CMOZnw5%=# z{kESLZS`W6ZZfK&LC_40x& zOO&8`ji-iMzGS!1tDIOaiqL~}I6^QED&sk;mmaA7v^dhsr^)@DSvDqWlZyyUv|&|D zd)SeZAsSdHGJs$It)(3K^7(phT%_7N9*=Sof zz#xYO>HcIiU7*kg${3E<`q z%M$niEDj6csj*6vs~XP`rsbZuQT=9miwODHmmDL+*n3Q37y;^<-nq`tP}Wp!i8!57 zQ$@eokJZB8JpO8hKMivz))dQSF&IsZ_!T&thp<;#t}m!K8I22wQj4@#q*}wOnS*T- z(}4t2^2&HAR~OapKu2EvDwh*Mkd7ReLNvEqO-b|%yTHVIraZKCsC2db-d-`q_$$WATwP^9Wz2{?+4^sa>j zyvrF+1%693BxEomYGo>73lzfG5E|nK1+%x$auqn8H~A6w>1`6UMn+bA=)aKVy^7Y@ zhq?M(dX|yyI)8FkFpmM(+??8qvV$}mDn8dCAQH?>EigDqbHrY(_PVg6fESC@Q5bL;YJ3o3o8pOT0Kw1kGwZiqeICPr8hos@~ z#}?q39I5oF4zxkTNyjiw5XTUWbr0#pd+L3)VqK^-dwu6XuxO?`9FZm%WqHIk|D7e% z``afeIB4YVf{A|eqx7_4VZWeTOv~?kI=LEvi4W*%$aW|k@4D0ym8X6b_oE9z)|{+@ zf`l^}_>d@pWLGV%Ecem`JTXZad0-f!8pK60APZYkuY`v{1LBAql5mPBkpo)d73|10 zzm{LUpnD$p(rgYHa!<0C_B_{D_0FK%++6@vKJN9RJm>nDU`doh13i>9G=9UM`SzLF zw-qZb`SHRxy#a9u8-ZU=!|5;Z5d9QvFNOXW=Z;D+!6GgaN!p#r-o$f|#mjpMdUMl2~L$TWOGY;9XC{k6Y7D$N9qC6Li0r`Ydi^G}_C^E!)rI zJ}io`cZ8UIZVidMBn@$6oa8Qm`$v6rjn^HMLXkrOu#%s5J3NR~5cY?0^4)$q4C4eT z@_`E2(om?yYX9m9r)dT%V4`bl70R;YAn95Z8gIW%THN+CO6p z#D8VY!AWhI7^l3ZZIEw2AN9%iXkYwFeUC2HGOJlD3aH-Vsiza7Oa?`&Ue$b@ke?1_ z#`fBy^_?HAD%?6ok<>6bgOBwjPRIG+OrM-K9Wm7trLsAP7vY&p$Hi6_saxLN?086( z^P&t7 z7w{>Y@&QANG;>~cEoKn~H*l1eOVt^ttEzTB{^oJupQzj1I@`XhL{WocSHfPsj83?q ztXeTgEQ@3*K}2NJPj!(qZz+jhi?mxJRL!xvHR?fcU9c_riMA{lm;CK)RfdF8MQ|vr z>*~u>)>Nk_%k4v?yV8|bP08n?XaJ1flPE(T0;5_V*Rj~+{?8FQbF_4{ZZvmZB8&)^ z{h?gD;gPdiEN_YGjW~T5>Mh87mr+XFP2a9|9(nOpS>ey4q*$N~NI0(IM7?t9`<13{ zLr;3sy9A@&_cn#Q@rc-5@Xn`OO|noGg;01_H@YPZV&x`U_-w|7W0K1{`(IW}CmgJL z9qVlbCJRZR25Cz6H|eFNz2xCRCZp9P(T3Z187a;V^tT`FJ+?kT6?5uQoWMUF^PZMIY0y~k<1k$=HAf*@r-ou6^4q-lm3{Qi`36JR#N6!i)Pvx$5^I>N+k&0Q2 zDeUBs#4B${g8jMixi_#yN$27tZt5h=VuWrnGlU6_&Cvot1MTxMSPLRlH#KFhy zBBBU6Z*uMvzp2{PrkW|+OhRN}EJn#moTUk!+K~zt)4FikERLaDt4#u%fS}}OqHW;7 zhtLYJKBs>8LnnIp!yi)gkQB`g#;10Vvaehxbuxp}yx0fA*MHzgSh5?P2%9;!*lk9$ zR#gs7}-DIHYR|X)|LxI1Z;~yF*(#9rUA2yM&m3ftNC0mVvnqpN~elm6$hyGfeRte@~KeQH{eoMBjY4lJx_^JgnJ1hglbM$64XpS zHYrR~Ti`?;N|iElCwu5eC($4s(ZQzk_;D3xz22^XQ~$l|ZN)kDG3)7{OB8Kh1XX`m7JE!m=^?oP?onTRCt zuJf>SH6pMJ=&5!_q!zuS24&9i7`ciPC{+j^;SxZ;xKa|9Ci0blB@wVqMJXy%)9L6` z?|6h@3jA|IJ0gco6|i#zu~^$yJ(m0*N%NV+O2u=#H_k_kKsQM}gefoaitz-=C`%gk z9T_PZK%$&bGN-{%npNc+g2DKZPwa+EV+*J)%=EI(p=G!vX{`)tzWKf@VclSzRQ{ z%M(gc@pHbAyh3GB_3xS%%qNm*h)ljcY$!E%$BM+j0 zhnL}ov87tnRni|-{Upko+D?!hyLq*n)ZBzoN3UfE$sj#M9w|NnWyRUOU>ex+EJI1h zqyjA{#5zdB{-SA^Q?_YoK0J5SL{RJ>Azf3?)_IBqCq{wuV^al!Jh8jZ=#xv0{Inc7^qJW{n$S_Iy=xA_bJ+*d)uT_8 zxu$Sc)tnU6Yj!T=4z^7|uBw{m?)X9ipgMLu#+I>t`cVv+@SsMs3sZ^*?ZEC9F0`-8Z* zF*2sNs_AC>EYOvi0Qc#@Ep>a#V^N+Z`{B!W{X`csb%Zg>{ea_sp_C(k!Ll6xx>7Gz zijdGM09OHmyLM%7?bGKh#9WCVFPU>WZ~w@ zRp-C_y(J`#vl53B7vmyrh=z;n7+LWp{hSVCXgviFjayLrDm?T^8Zqgn-U&7542->P zhV4f=1w-gW(sGS zi=tC;(L^j`lDyuA-xyBjs)0#aF&%EhtE@9|&6prZt+a$$u|_-CiDY1^XtPy7J2~gE zbi&A*+JXOAoQ@zhO&B5{tl3auyG9I4IM>q!{4(G3Sauf26 zU1i>Or8^oapv+L(DeOBQa|^r8xWF7B|4}=U54%@*->v;BX z%wF8!&`^0VO2x)dj8U@*-P77atLGUCI%bN%Q6-^FlDj2!ZA74|D3~61hGL7zoVR$9 z>7UQKCtTWYuCsQB3->}k4PE6EBD3pscvTnWX84&H)Ema!cUO zig=u78fMp!FC7k47SX{jI)KFmB%;0>6)@#cDSIx(Emf103nry=icL1r)e*9BKxOCq zDKU3RUc|JiIFDre08+^{N^m=4yCse`lu)KUCzWwRsNDHDD%H$5OUIceAX7i%V4UGy zcj6YcqNbR@8!-_ajaoIiWLkOKD$_STW2S zaxUh-A4Q2nMT0Zl8@v1HD1km@1YaO%*(hw~6e)v;N@i7ImGaK0o)srnUN|X73$Uq} zB8X(BrS%qGVV2reR?XBz-O$CFSmSW*X@!fBG@ThYfrZV{7(=qpmk;cK#+eUD@jjoN~LMS(%hy(zFNOxg)G(hHQv zu3e8v-!(^dhyqCS#nS4&tiKZ}QNg?-_n+a79uUl)yr1}*KQ6{l)hlNbYumkwrryM` zTRxrYLFeRHl0S2g)7%zP+Qich;WmsQ2D`Z*Mo* zMF1@BQS_U`OdJ!FpZI2B_vQ5`59L+kU6u16#Nb%?3HJ~s3|Yq&r^QP7wz7vNcNKo2 zNUa-y=bU79corWJmAvlqsG3c&d%7cMX{`BCDUK>Qsf4JcNTTl5 zxbt`h(Mgn@(Vgbt;p`1`Y%$mMwV)1D&4}rigGuz0nB^M(^pu5@LAtMEaI_Xm4(Lg7 zH6hD*;{3rN9rr&-^CIfAi>G3i)V?$)(2a;i%5UzWA9X|>sVp5AQN|uSQM|~WAwfpd zGwIJ9t3Qad;VJUkbm4rd?q+61Ab_)&si2Mu{j7B>Bc+TEkLsjI5v&I`3}FHox>cr0 zT`&o9%^BRPZgGEFpxd*FRdJL2AfFL@&2b#PiM6?Rj~f-+0$q0 z8KX|vlSZ1_byjqpffIRXlsGi@M^^5Wl%_bsi;(P;6?*10}|kT<`>H5nBdKU6?@?v3q5)Kw-| z18*=|p{|z_X$%R8yEqo8-HpXjob}0QSRjuSwv|h4+OsNry6}$=dq;swG$6Z%ltvQy zT8CwTs}2Rfpz^0wk|~(3&e^)CA|9tVHJYEV@qB3kU6RXJQTKGoziJ(i?*?}=@ErV^ zO@2uXitc65HBB*OJ#rF5*T&L~=~{7>KFH&0KsT5T12BItq)Bq(!485%}FQF zPFvp9rFpAvInBUIT|t6V%!M*ybuBU~FcL?7&;6m}XR9)Cq`sAg#3^0Q>#E9}6pPGr z4w`9OKcxAI9mP62C*_&?s^K~AQ759ZV?vPAEB)P6fl*c9eYms`zTzOeNmX{nDs+hw z$`(8rw6BF)vf<%qBUc8Z=H|%lCTv0HIuI&D+4(`eWc%RXz8 z=@lq~3I0AyMi(;ExI_rawlnnlN5s1!on<02A8s@6Bdc<}drZnN_nGk@~CZ_WJb48ydFByl`P|kEb3_c83eN37R2{c` zJj=Qo%l+)B2CRE3p$B?kN?=}$M6@rYmK6U&IRvQN%{9`9`IURDPmF=;OJO#Tiqmsi zC%y)lZ2@ypgNg326HJ!C6Bs>RwYZoBC`AXXz(rSv@P(?C7km<9)C5H=3BT;boYtEm zg~@K{ZP5icMju7Vxl2J6@#d%RKd+>I>n;Zl;1!+uKlBp7W_*oN|Z!lFx+1i4akRp}Gl3o0H`ZWUORq=6j7S#*jU z+oeWNV}SXf7o!xZdT(BJTCJ5vr`5T|kf`^G;e40=ZD!+pT-y}yNwxdjK)RrXaCfEI zzJn%5MKQ`(7ZMQ&zBslbz=ofGXi|74FOk(uiEDtNOzbn9 zld$d{et=5`_yPP$C?K1isn5k6DZL9j6&yhQ_{U0~nb-BRdFxJx1ksMpdcb{22_YbS zG0n_n2V4@1Lbq@|s4wo~UdLzl=_PTr1s}9O*iqq(x0FoN^{_MGJ{ygKD znV^se^_A& z8%aNUjf#W)=yh|D7i?`w3$wFu4*Kc1P;FdSW`qH0ZV#dichrP~oF$Mo{qZCwnQISh z^6Of{$4IVwic5v;TaTimcl5#dFhVV9QMRQ02jgLwfNoHN<;j@O!s>?`2Rlbmvd&=G z?mkKnx3W0l5{0_$lc?AX^JA%sE4|B)w>)SVl^>d{G&MOKa2+P&~>5kHla#n zVC}gITJ6r#^37W-x9>Dp7uW7Tc)0%P@dq2<`|zX9Cr`J2>)H0s^N&CI{ttdT-0$_H zgTtfv)8oM~Nk>1*@?v~)`ugm%hOvKfWMzYV1l<Q2f8x? z2;%>>l)kK8KqrvdKPEQ}Vy*Re+N97)h`c>F2n4#YLnl#QG#0%Z2sI8?uod<7s`X$P zCgCB9aG#a0M)kHS?`+z|_^Nj_ZCtNmF&y!3*2B}t4%M`Q!kg}jkXP5dS20gfT}%_Y zsB-|Ks`(q$Lm4y?Xf9Dt*u$PV?y2+hOph`s-5|Q5-d8tWG~?sx61Wi@X%nQ7B8MDl~^eM+6nWi^MO-Ya>ma9L__Ne-(qKaI;)4LY62UbKxWxGdxftQ5Iy z*-$8MTRxZH3gmj#_;VrGHI!|>l#cFC$1d$4dhF&xU|VTYa3uH}#)QkZOB45f&lipR zQ0jk0eUfD_RIRKH8+C`Kx~JN$&NAmb-#>S;&I1uHCE6cWlq7KWPlys4^Xg(m7N1#M zf;w{_#YyDI5yK{AM;p~sb7^+q;4NIX#15p-15modD$%o62B|6BP1=w1#iXV?k@p7x z1p?lnd67|9!fr6EIfw?}Co1^ii&o>#-skOwr7w1Oo0s{czNlMuzL@{b z-P#1M%>q9`Mr3)FiS|T#Y&?9XmfZAA^Xm2>%#W}xtp00&$p~FOt)- z%HpBXvGjnA_;Nh5WTl5`*?#tTx9AVOOK_XD(=XL!Y`y?h>=gab)t31)g#c+T0ICKE z_Y{a8U&**tH5z&k3hWD2v-Yv7^ON`0QfFS(fu<%mo=0mRWrk+(Auz)=`nu48!iK)9eH+pGlg(pP(I_x5r@r&_j zQM;xWT@z}NI4vJ#-?dB+`e4_pg5vt-U$oz&=PWt~{-AX-tMVm)1? zJd+`LMI-~wl#ew9(bg8e2&ekE8quzU62T*3f)2$9R_MEj7DpNiSDw_&{cU@4>rY|h zP95|s-n!?rMT7CLa_ipu8E)OFXuj&^y(HdTI)$U=PjT~J7R}e#yi>9Iv)R6^3c+i( zAX-tJbbZa)aok_T@IDBW{s0VbpMo&r<+Nisn?hUmB5f8RH28wFuDsxld(p^iee%Iy zNtzYuG$vb?W&mtLnoWkG^=G=A!-<8se;0<1&KBQdNm^Eqn21c)mXLXMu7r%Vo|*XGssc zI^|AfNdGL+?qyN^hH2L(E|%koUw zEXoaeQHH}qx!rSUHOkW0XBb8uM`zu&PaePgXk&Y4{R!Wq*9}&0-fZ2x8O&a>lV|Ij zPj}XJC+*gqX1lf0Y_F^|SMFT1%kMqV-QBq|IN#gcFf(emu0EabZLWRajNWNodHn6R zdHWhKcl68crCV1YdP%>%eD!&6FYA{(D_0)*12gI6mCo|g%F6QX27SAIYv~%j87!={ zR&KX$FWqi8=-Zvn&8y?|1A~?Jt=65^%I%vsI}QGNXZg<65%qyVR2x}Rojc37mmBhR zWx0K2+-(@#y}z$ouUoBFyVYthciQbvxV+rC_kO0@oqP1`cB|8AwOY4tE!{d;Szfuh z(zz9N`b*2VTbx}Lw6XqV#~JR$A{84x2z$}uX`Dre<1p)! zKf*ZxdV1I}Y<*9S=o*y9adfta0|hfjZ)qv>ms}}h1O#$rU3v4r{`Pl2#Yutx;$LOC z^S4Cqyj3lCeg#8&okcStDBX3fLTxS9** z+C7PiBReS-B`0L<*!Lj4b}86``aX0H);v^Mnih?IoXLpx!5}@v6$0I}C|CK>u#v}~ zMcw61IqsY$4V)3jQ&;wJ(Idt;yNrwQ@F#)kHDEm7`gx7#Uvco<7LH>4 z2Y;Ut{5$_MBltfS1b@96!L#A1?gg^_zy8MRXk4g32h>$O3=gH|aUPyT>L?zJIPw=znxV<;EW^}p>U&(U zes(#7Sxd(J2sA;9rWe{6rtMbqPV-K)v)EZyhhY(&hG+V>wjQTr#@Wx}{$WI^=;#u? zd4uWadbs@zRONyrEjXjS-owo>Dun~z&D#}E6obzS)9`4V9y_JspaJ*^_va=^|fIVeHMqGJXXK; zeB*%{#>2Rmoz0&MQ6HPLK!t}Q?WKe6xIbcgO0%Mi5dKs!>hp#5YB;|>#Ks*nG3+d z^O{Xpir_KRmF9=z*l6;ftlxk6e0%+wh$=c0;V`lb-`!f<-j;ViOVc6#FB=b{&px|s zC)?`}o~`e^{BZpT(#^9ld6*8jqh1yjOP%er;ePs2-dXD0?5uR|EVX}h*^XhOtUr0U z^>pLOj&$8_HJ9kWc58Kcc}Y|9M`_4KUzuy0?SmqG?r7NRlS0YiY0f4!JjxX{(p2rv zPD&g7Y!IGBnInk$sn25L>4h?E&d0|4rio*~NcP#OE(mi_c#*a@uwW zIr?|LAx!ths{fIioc@oidx139{~u0`EF7wSjM_89(Lo-}&Mnekpe@8#yYw?ZYz)KK ztZuYhtxc5=(xRJ%Lya_&mpD+BLMLaWh3eWPL8kGlC$niY6& z1f2`qpL8!Hf$nsg?OV5-?N+NShPc03Z%hWM->-as$rI0R$1K)8r1xkIz0P?;i)E=R z^RmpnsvlVhfW~*L%K%N}t_8DHW0NLM3I;2k!*rY!xzz+4hbc7FgV=l7VG!nxejnoW zO5H%fbr-|YNQNN548!gn=rLz!=Pswqd5SZ8Z(7Y(v)yR5mX>BZ_^$g=$O za4{Yp0x#!xOEPpBEKi+_JMn)<6-lc~C(X9&@(* zgK2N7MWCO1h5?G4dK?%#(wY;(#hJXU836XeqXmk{4H7yBsP2mMf)men@iONihIx0z z6kVK-^C%-GfiF|Hc}E>)>3GyV&Eg`O+?i?==J{!w^}C}eKMu2-H{Bsb8AKS4_UUP~ z-x$Zlm{9IkPJC(ww4@8MJ}TND84ytTZntjVsnUV0eh4MY*8v^ovZNJ3badN=H3^IO zBvPNmS@aktawCtjlPFVc8ZQt_7CzYYS*x|GvDJxXh&^rD))aoa(rLC=un&Em-haI$ zHYTJEia1Zo8nWD*U)L7pUvy++=k%~KPNa~9D;WPq?I8)o|HO3^|KVFRbhQ8HH|exi zhBLyy3?t9&1@iFszedNc$hLg0yT{ratsm+GwK36$3mQTYQKcCjgLZ9bom?fb6yqd` z29$tG>C1}Q7{nniu|Kbe%`}ONG;6GV^0@QK<2^4`jM7b{!^=Q(VPD=pO-J68EPv7( zW9Rfxri5d;YK1DqI&vK>VsRJ^_oJ+8hPFedDczj|ghcmU%-XlgU^wqlRG{KzGAqE; zKp;_a5)k}eAUX+)syEYd;aFvXf!Ow-m6D2KwT=>CQ*}tVEiSe6tD5hVPEz$cZCg^J zVBU95&7kH@yUj;Yl;u^On8sHH{=63}0H~Ng!(T#~kS(l~Y44C1s&jhS{0?#sXM=9_ zF?$+|;b|)VYyR$R)rVx$zgE|>$@O+NK7P0zC!veu|M4E<_&+@#$MAB>+mJ@TUY}Fl zFY%e3Bh!=Vv(ZqS@o|>!#K)$bgsN+o)T%n^%+Jm#l%;62ZZ(!#s?%9*-Ck{XX1^p5 zvvaD2sx7#%ag;?=(;|4-pg|B@ z51!LG+~?c(SIM=`Srm2C*P?2-mT%u&xkcx#)#iPIU_O|~A$k=J@~A7r*veZn9cR7C zEx=>%IaSQ%P>Jy2ZJdW2Cw;X)E@*9O{!zcF9;Mk3{@`3iuZ!j1WcW2{Y{4O*-aUI4 z-fFUavmq=9`Uw7yqcinlv52xEF40uRX@WmIrE1EM7E|a0 zAHBk|M6wQC<8DEXiF8QH1`1?Y@d}fd*QV6zlN8if(c2fi<=RbU^mZxhGg}g@#=^18 z)|wKoMlPIK<>@%#;MJErRY^#9YwJWQCe^FLfk%sLm zx<*$Oa7kaKoR$C%}wAHRI~WINbnmvIF2WKyA@zmbmAJV?)yTx=h>W`J;BC8rR{3?@44M{ z>mL20w3y{B!F&b7CnGemt&`dgt?I@=?MG0O`PyYpJb@j&zb zLfG~sEFxrtb%W&xADlfo+JBng=`1a-pFMeaINtpJ_rBjhJo>1!vGn}xv+r-6W@}GA zKKvl>2Bcv{3FTgN+siBMmN6YUNy^~Pfr9;OfWrl5gHn_qg;~_+$vk^< z@@QqJ-8;NloPEFdgWpOX-g$EK{`%-v)M=f3{Jr1WIcYuK{PgVPgXgVoprWKtHlj{2 zao4BavX3cJakG89(^BDJke)_;^9CG~t!8VnrAASf$9WMYMdLV%M&TeniMs99bh1NQ zQ>(eOxYU`37m&wtQ(58Zrh@3}vfPA@iqvjia+48KmD`Ppxv3DB>*Y%)cUM4m`Rwkh zm#>uGUD?4^^1CZKxI%(=)!Qc5_Tmihir2qPqIFew2AZp9T32;vl7O$1YF*W#$p*eo zu60F+Uuj}*#du#TvzPnxQhVJ<`s4|Z3IMKfCZOtVgZ~Q;1ysEKv(9X<0>KdYWmDU$ zIx%E@mE88Kjtn|4o!nm4%S3kj?3}vUR1cqQ&wj35dRcf1TkwT8B;iC6Lvrt~ZlrBc z6ect$YI7>0v09{ImW5}k#yxTU3ptF=^-1Mz$6?8CThpsf3XHHdJI<)2KFRH}o$ViCq9z>9 zhH`_P2BTAYXPqG8b>_0KiS^^Wz-{W?c7?MI9t|wut)?lKwxF+ohi{(KLX5lP>I{G# zPlBkLc)I0gEbaHM@F|IttQd|cSXDP|VQ#Te;=52Tzi#YN5{O(M6|W7^Dti!0uAT}{ zgobYz4b$wbaTFgObvv!r=Ij@4fFaC!M>gV;MeN|Df$%6UBC<*vux-gj!yZDUl9)J+ z_m*5A;azjl3; z+{61_)sgTD53U=!;Y)Uh3tr$baQmUP>Z%~jhPRfzc~Hx`8yBS}2wci2IAqU)@@ zjXod7#nE`b*-M9uMLgWka+~<)#Kae~Xb^>YlrIiKT>P=9&$2EOMB+36bpSwO1N6Xn z5zk>CQbfSKILSY_ej6Hqk!Z&|yGMrMafAfws8^)fS;fm(Ub-`yuhIY^6EX9iK>6$! z+>;Y!BgYjDh^ds~sN^4^sb*2M&7n(*N9tNWdahO8cRg9>)oQkZ7LB8Rzmbo^9&s8Q zL?R?;G*HyZ?+-rziCBmm1Jxi-i-IzW^nBdT-&dVmo%Zsw6HqV#&`;K$J=u8jcvXFr zo>HJn5$rk;>UM)*XlI!sp&v>h6#gF&Z=pbGh3eeA_2K;{`G0B6$$_;UMXTmohs%-f zT%6FB?;%aR0n{)`L9^7c?4S*&nFBpH1I3tmQeE&kIb2mWY^BCME=HvZm}#_}WJ^uW zIVsbaCPS&;S;SP_=phpso`TYXi{Bo%2B>gAw>q%ClFM;^7XXJ}9sI*XvG+P60Ee@A5zqpeSuSP83hk%G+SOQHp{y@WR$$tQU_ zh#LLzaMUbb7v%&o^h2BXlQ1UT8ikdOmWo^hf{MQCIiD{N0*!?^<@3~I|`TMZtFZJ+s1yQYkE{Zih8(+L>~cE z#Zi`y50B`+GLxPw08>gwc~r%DPbySMMHoc1gPoROe=rcM&70dz`rmZBW^yx2VAsyX zesf?M?I|Z(o^`D zW$74>d@3OB`KzfA*#7M|Wivy{otGjzMOrA+D$$q)QnR*Z_+DEFf-zbmVk@2N5|=%NzhAlLxmZ|(TnMXZ=)ZbEHZ6bJI)wz zL=u`V4H+3&EavGapuUVT${@Dw)=m#`5kQovV0C%9wY+R+xORF7mda$|R{uc)vK(~_ zX6Hyszp3MsAPDE`!inQG+dFH|b}A0o_^$yP=)QaeGbC;0?yMVSrECrpV6E}?(f&XF zlW1N${`e>C5u|2A(ej6^2O@op60|A_71-w7eNzQ=a*59I+uvy%dZq`n&oJQp-3h=w z5ys{(4Y5ZX%Hpq1nE081bWL1(>t>N?YA&prMe&is2s1Nto)Wrju7HOse}ReP*)GmS z;hO^ph`IzE6Duk7r4tzFpdOC%uU;jE!6Ff&0Q{q~3}$eCs?`;8BW&U_SF zc@)iqNz-afU#{1w6Oq@a(WAKT;euetipXhP;h=^3#WSc^yf%e!t}~#S9DzwVs~nLG z-6$#YZt!A5XU*-+ZgIxVhm;_Hm5iHNsbY)!V~rj)3-wL^u(|Vm7SXG2$^4w%%A)5Z z)m8C`%?O%HqJY{aZ}#7eQ$R5#a0w$d$WAS zFcVCAg$iS{Yn-99u?3pZ_Hk==U2>g3H%2X+-7-l_AL^VXLK29F^QstvE9F&9FuZeF z7VF=XScXFVCz?|kkCE2UJ+4KW{%Bs!u`b;y_BEI z9%|{BrzR9c545Xhfmt$G64Hp9#Ok>#9a8dtH8r&8XYGWcv32nkdLqgtKOw!0ezxQ4 zpwn5DFHDA=XycpBLi~neVbhl1nYc{a%$LU`$-~nmeyL|if0#*`3F*0*d9XT8;5(2{ z0)BVWFmUPRyuc3wz6TeK6LBe5l&Xm@5lIH+l2Ui^rnQhkJlY_2tFx5Kph%CUaoNi< zrHAWOm71K?HLFUAg9@~e%ZyAbYUxgiklWw}YR0Rkit*xfAWw*+>9WtaO}U}52Jf4}#ts=Kb+O*Xy^Ci;w~P7RL&%)4q8IY~f)s<_DW;(;m{kj+El|tQ zN}x{Bb5z;k1}E+7yNX5Az)KJB8nwqW^2J;HtZr!50@_YsiUdZCIyZIQbOL740(Jxq82P zyOb1l!acB9q?D>5?F~H%d=mf?mz4M1+^M3c)y-0)QYj`8@3}cNO-7wM`$qQM+&NV5 zi53$q4hp6uA6^GVB6ngcF_d(}jNgL`_ z*oA8ml9i!O1)`fK59~dQfQ{65VR@=fx; z-KxviySK33uQRgf;;o&DH5dQu#8_{u2_ZJM$_4A`g#8`n-wlM2ef)PLAtcFvHxoi8 z`ERJ5;lEo5A+!88baDu zZ-W1xLrClC)2B~2kW+0ihPDfu;Bf;X9jhH$GN`kWoDx6x1>0??+b*=%0PUUUw%0W0 zRG=~VP6k_A-Uu6^#Tl=~`T2QlaejV&a``R7*qR#&X?<@iAzov)UBt$0yO;?!#wNN7 zmZk+h!j=-6T@B6Nv`K2VWqy7>V%sHXTKt|3Hov^tw?N}tI;F;&w2F>n)++jn$J_?Z zUMM%)qE&Qv%>1_<9P@IPM24<*=;rmpAj@*ESLI>W0bQ%>Z+&32BAxfo*DRBc!bXL9v~Xj=t1*thawaT__IBX7>;6 zOH3Uf9Xd3w4eg!i-Z!*+Y+|%LH__`9PbTTmvF^UfN-DOe83O)Vwg!WUK#argo}Qj2 zLU`)9210sZEZrBtSXyATmaP#&ni^oZ4GrW?$=6=d`SY~e(dB5DKKS^T?>%{GWPNV_ z)6ahK6PJJJ1(&Sqc+pGVdh4J6_JyDL{yT1d^S%TBy!no8>xN(cs|{c8ct+u!&)s?B zw%4VvegB`ma&C3QzkK8uo4y~t^HndKop@X3{rl#>UFmtG^{;;RkB_|N=<`1C&mSIq z$(Ij5(0cg(SH1nk4?j@W|M}|OumAN8%CoL|!}u4!^vb_H=Tm<o>bUa@}9( z>%X%(I(gBm=C5D)_s1@}^GnbAhyVP~CtlPxeA~aB`>x@){^X^o z>XmDX&*}QBUwpj$nvtf*|LtA(%zxqM-!R%g`0?($$(nZ`dh`?TTvhq;hZB8Yy7h&B z^@YecztXh+dGBj(ecM0wzWt|_-`_VgPj4PN{KSdZd}jE>t&vF67k_i@zrX$)J3hYc zGYe0cTW9AVKH75PoUi@hZ=d#tkL^S!A??2S|)(11+z2RS<@$;!S z-Z!-S|L(u`V^`(>@BN=UaQ~mZ`4zwW=R1p&Jr}<3y^-P9j^F<5cm8ABZ=d%4#toOR z=V<1sl-BaI=iszzA_QmvVjIxICfHQ67VvHzd;mH&wG+|} z@nJ)8J*XZVqzUPHsx$QS|zdP{j2dcY%aIC*4*Z9>xKlaUik%oW!&v$(8+%4~q4!o=B z+Luht9(;rzx%dt3Z%_Pu{8>$(o%!-3gU^5Gp%*p%;pF{8KmO3;Kl}XO-qqd_eR1NA z7yio+TA#T4B^RI0ykXUJ_Wp1F#Xnr}tl6$tJ#Oy){KvkQJMVkt1BF+-<^8YiTK(@m zciyADA^OC>y>zVgO+R{F%kb;(c>J0jM=tqQqWB+k=b!VDKdjIF;jc$NGPP<;X8*U*U=ltlqxBujU|N8dr z&;S1P{9x|t|MT&QUB%CB+x<5inx=c-dha_omESV+Z#Sea>-n2I=Ei^eXmxhoBX7F* zop0IwnrA=o_MhGS)sGJSVEzNQ-}3HM!rVbW@buUG{yP1^540~_{HyWxU;BT)_=BH( zX~Xx2ul(j+r@nOSwNGF5;E6{+^^*%f|GCzy`Y*eGZ0FA}t={`%`<~=2J+pT;Upn^P zmQ&h?AMSfRli2--&Y@3y_O3gh{`}cz{>Nk2^tQa?w(sZCxBkvP`rY=cV}y{q$oKnt zMyp>fJo?L3U%8jQ;c46Yb6@G%`JJ!*;=><${ej&_fBlLV$96ydj+cM^Up{@#?|N4M z``0!+KKHM?Z@g{3;oaA*?;3c;L$?>deC2I_82S70f4O7+cjm{h`m4i_cVG0KSHJ2n zs?U9c^5#pY9v)5JFcSTz%9WRm{%qH0Uh&{}-**2CxBkb#%;xVlzVg?f{67!;4hQkX zQ0$`j4iw&T*}wFC_8A}l*%P1bNDh7T=XdP*&96UH zdFgNOc=0oS5qs6S*?S+;hTpXI*YO)p|KfP>(A}S(I+Qtb%o)7kxf}l}`n4bBpZnb( zUU>3#7ryAPKljAm-E(~}JMXJ6yyvce{?9p8v>CjR(hilBe!0bR2p7hkyRN z?${mnr=Iu2k+wg(=i2+Kk5C*RwA^B0wm?P&|Sx4ZO5lhZH%2ln0iw4Yx3$4A$K>C z&4iG12_aBsEj|Z6y?utXHLZaUDxI@}+hV~oX_L~Cj_t&&f1LKFbp$|9@-1Zy%<8N}?Z}zv}(qAav7SVEx zPoe=k2x%M#-z*wO`6aY{BiQ~XGT95sfMIiBSsQ@GoS&aZive-!eVFeWe18}#oW2_v z&eL}{$O_y}2)Trueq#gKPRd#?Qnm{_=5-@$p1ev$*Mb{H2G#yyb@zZeI;f6} zsKa|p<>9&TAEa z%74F+5YkU3dm9OWX#*j5H^OKen+R!KM^2$I39Gk>kVcd`CSp?vdp*2T13+^lR3t>M z03Bk5L%f1oQ=tJzC0BxxL8Vr-3^k~OT>;uiQv*lREVV#7=p=+}aK=~)U=fx_}Pkn;$zRw%tQ2?j)R5S_1Z*Df9?0xRFq?94fp zt!|k$7x|lM!e(?U*T;)Al24yQ$Y;)B{G8|!__~ej0SHdDt->m{Ub%=&_KE`VVm0R|<=7Qi4#TMkEIY(k0KN~A$=(8xnnkUpginYo|lL3Jelm(3AwM4w6mJ6?U!BFA%2&Sy?=TKBJU|E4e#11 zQ>~CW_WuJ#F}lWk8c0VghAf<#9XXefp4C6E-f~&yIe`9_SvC#04uL@cy%3lR-+*Y% zxKQiJDIB^C)c_($3_+)nM|g!r*D95t!wg|E>)4E7(rY<$4@J&}+42MIJ@9}pzz%-G zz}FCe4x923Xn<`FSdMKIW2oJF9UP>6z>a$@_JqdM3A@gy0FooY?U4+!*H-q-nrkpJS(FCc_`jMoLa@c{pQAtB^; z-VUJW0-yWEaKiH6mk>gp57d>Z}`*K3a-|^oHA>`wHjva)M_rOa| ztFGW>fJAKNzkw9I49+A%$dyw2K+6Cp;cq)3m*@Nr&4 z2)T#PeJ3HL%6~_s_3R>qO!Ic4gph~$Z-BX9@VWOALhj?gfs~1L+eHW&fQIq(AY?aR z^8rH0Kk+dGJ?`Lb4iZ8XK87I}8-EU`(DyieUP}mhCT|Crum9lf?18m|jU|L!PY9Xe z?L3VT(#6}kfe`X%{5MD!1^#;&=EB<<0l4J9N1;t#1}N&!c$<3(A+O`V#|R;h@G?O1 zKgxf@+0x2?gCbY7xt|d7173H65b{z!7f|Ycf|s9yy#z#owI_rCj>6vzz%yUx1B8&z z19EWX@SAy=6d_~}|D6UFhW7=^;SccNTYuX?$hyhiYfurq13$Op=Q)Jjw}CvHO!fkm zZX~254LOa~X!Is6m!r0wn7KtA?Cu%Z8Tzjwl zQY%+V6oT_Woz0{BVpC(&nb_!LVk#4#j3p-I1_q=CR$&8B={#R0NZ@*CIyri#^&n~N zRBSRX*Sk*Y?_9o&HLJ6BZ*qDn9iJM_%qD%Ky;`c>S}|>>U{TODcC4Nm8=p?4<(>xR zvU$zXvYL&nxMpTLl^#pRQ<>3WsIZYQ`A*SbOscsiSA-bNW!lr*2OVv4E6b}=)5Nt> z6Kz`l1T`QkF*LBwZ2*=hw10Vx&JP8(0cfdxW_EZYF%n!OI12^*21noSrP7s`YL`@{ zHDS!@hVCpt7aNABM~`Gui5ugYiNs_A*SA${*N{{ze3<>v#%c!L(4Sk?2ey2M9@apu zO?-0v2A#u!+rVZ-*iFcHbdky4#|Y_I6U~`<8ZFbju6>?>SV&HFY<3sFWELX$?s{H+ zOZ0?hMN4`%DmMOjDGGq%RzA;HS(LgId%c8nJ2RIfE6i?RR)bm`E*&oCZ>QPY){m}1 zZi*L}r`e5!+}A`7kjdUA~VE0X=qq|Vdfs=RCrkYVUtrA`6>5uxxA{L8T-N<{H z3T?7y=_bXtN^N?}-N44#K#r2EW*3!64vgk2P6R9ss+BxA?Qh%WKH+HumB@l3R_%Bx z(lfx;P`4v}P?~wON2uXg3m8JV%PzX*mCkmtCP0ag{&#juI?i)F?Ootddj=4O#e^b+ z05{(NybN%i9fUM=64C&?3h*c(C9L9%CtizfbuV4cC#3Zcr%#{0fWK}dMA@_&Of|sI zm=lYVS!mBwJ7=j%Ogx(~3y^t9gODvJXi3R}*8un~REnl!Do4#K+KbK8tfEyaB@r#7 zg1MFe&ulg71EemkQfbd=4lS70f(rRE^VOWApU|C!_B@@_swF3qvuK_gj;@u^4Z5rw zDjpQ=5bsmZQCn?S+--y33d=&K@(l(^7K^6#3}6Ac^w*5Ms$94s)%ERS90G0DVMe`_*xtl=p!vo6D)MXELF>F1>rB^ z+kS7=>QO3e!!DLHwtgE`mCoM&fpV5j1wt!omZK_FqeN{x0%=StG~cc$f_7kK%onFB zOOppti%}e`3(^?ha2PspM(SXUL2J1tQn!69w`?eNt1Swq{WxlMo@TN2FhFHH*I!pco7(HybSHv1$$EGR}Ina91>!(^}1ZV}P}4AcA>{ zbLQ!W%R`u_1~L}P>0D8=8S{j;cPu1z)E%_M+;}rt`AOawc9Q?5ft}=Tr|vPX;KHHZ zURKNM)b3EmX{ll>ISu^rz~}=`_S`YWE>T+9smxIdiL&jTN?zA0)B+C$$QZK|4}GUv zF0(v(5D%|JHOo-6tXXAA7b_4OGUwnhw%dw9Y2H@mb*Bggc4)RzuI7qYDTONJ?*k9A z0Gl8M1afEM{W>d5gWIkT%a^l(h&DCnPj|mM*xkJZVkbr+LLVnuiUNQwJ*c5#3^0Lm z8FPAJDRh0q|L{Eqa^L|z(t>kW)uRQ?Br4(fDwK^tHd{9w8`+Ak zp4BLIvLN8TwmnL;ih#}@ghnRSHZ^G^~qM~q$R?|TM8F+K!&oZQ?2;K90BJ(g0;M5M$!?&YD5$l z9{`>9Aev!eV5;4B3|IDq;FMd|k0W~+_PB2uLhJzq!Dls;4nSY^_Z~w0U{DC>YM_0m zTv6S|p%jB-H4NBs00HtnG&nS<;)meN>T!p_7wtcb5ac5gNE6@FRF5VSxMR5w%@gix zCZMGSO3;pB1#?(0s(5on}Cgh+f8VqhI3l$ zb)zHy)JQI5%BMEC1(5Yp^E4~8R$y-`+npjkforAv8c262G1=rnIrgab!m_Pmy{}jm z(hNl7_W@PNhdBdA5FV*w={AjEaO<6lS)m5cFw2qH zf@}!D`FQEhl<{bwe35y8@I1yJrj}DAOgvVX&NYx>4{E2evK<+gxC& zS+j7=!-|O6ss~6|lwn&wzYqm5Q2~Ae&%>}5D}>-~0OJO`L0lKu23_si)u-;-)z{7^ zh{8Qr1F?BAYF^S9(Gd=cs^VBxig=m(Z`daf@DN#dtX>YXHZCcA?BFQ2F{)K6(VSM& zvlfla)2xfJE$~RQ7W`-Po4J_s(r__le<(U_3*&O7KBcpHjr4fsn6@hHc&;?F4V8Kj z_@*hj64d}T9BR#J+}$W^ne!0qd8Y!{2H~pVU>0FP;s12lG>_RlIkjeZ$#F*5f_geM zzgAKbH)P3;VNgUK;0o21J-vMaY;`x-hqKGu7{o$1&027zJBf=#d(Zs@%>;wY4Lf)r}~q zefbl8PPs|xP$F|maMn?Gc=@by%eCOyESMfep}C@|bl&8f#w~8DBY;S$HV+ri{&JXy z!Jcpx{PPy#}7EqB;UH|kF{AsU&} z@r=-(a@qnXgiJQ^oEWOh)HRVyB^k1z2L#CGk(pV%k#EWsE#S{QU03hmB$gOWr1nEk zPy$#yw?uzWFW$X3O~xlh0gr8LAcC1|$D}LBE4XJ&8zdXSN9>dl9NTj*s<~%$#XqoF ztGz}%-{U^e>%-BHMRP?<3~1#?$?7ns?bU*5D_Y_R89{k%+_WLT5PG6oN`(KIPALa< z%c*K5Wm3x(b%O@Z12JU8Kiiyh<~55-v|r-E7P+Xpj+QIVf>P0Jd)~D2*ZWU^qUEFf z;p>G^A0U3)2X+q$=7|x^8p`f&qv~xkHdS*dC<=g@sz6=`_?wJRstSM*|3844ssPkI z3BIiB%r-*+2_nu%8kfUhHIPBhKy^f`wiU(5k5Qwb8z-Yhr(BZNKrXcV^u7YrUtfEr z?t(hlM%04(rQ-f7ryIrsvTyK1Vxm^zgO$U4OBnlfgMfMHOhEml=2-ek5%grv%vFJ5 zf>0x6&C*L4-ow_xL}#Z$OSGUFOkZo$T-Bl;zZJj-?4wIJq7n|kEo#*ex4iOoESo+8 zP~h$a-vn0(3kG0(u%~;MEFaWBxZquu+H7pRjw}zN{P@{gF#uY&&j_~b>(cuMBHOO4 zJ2E|+%#7^Kq^I}Cr+~7rP0vnE#V6PUXmt&$p5{uBBibY6XzO?%THD^&K%T`Rvw>Vh zm=n7ai5O-CJoLGRgjF?Un}&-PD@HmbdgOI4{mchPwsPoh4TJ6j0=j{Wv$+cxA1Ogz zEL6`SUBS0Xx@s7-v{TWPyhh8Wp*Tg&Q6Q>>O>GftM?^1xRODW|8L1VTFVHRt$R$GW zgK%$DJ~;P?xK~2@2^Zi>E#vMrhVMgYv%Dc8P9%9EE63cn zFw9-xT6d{q7jwO_fGX`^N`WUpnG86kOar1@uxuM_r*|sM_Em@cSu)C^Du7xwS~D|G zgZi>OJwZ!mrA!T{UC)^YyDSG=r1~OPh!Vh|We8wJZBO(vs{D!r{8Y!6t zv#Vl&8C8fS({+ZK0XYvu_v=*w^?n-THRhu+p(+BYtYmypqayH%A=$u~cuHrt+RcQd z5Xu7>qw-vl;=WQC9|-(ZT^1KxRTK$pR397w`Kx=Bvm>215mC6&251u)!r+@Ap8!fj z`~XcN9O%ij4`f05gCuQDOFh1HE$Nlyu@)Y{9LULrk?Eu>603)W>?h0a@``URr8a0g(` z_~z@Kbd2frjAX!n25xdL*b;h7O@+!!5syn^qY=C3-%RPW5_4JkN!1>9QvJ|9sStX+ zQwsmfE_;NqGzSS@K}BWJl8)&dbHHD+&0tqTaG$)O+{9*aOHhJhjdoeK#9b~TLb2jL z!hc4~R)<&)ssM5BwMz)W7w{l~lZx>hWx(S^T9ox+nyR=4qy7zz)~m&_T~#cah=iu%uv!)$J0pl-_^5d+t7cAwpb%6{N5T%FK5F%rD^_A}+5Si`7Ys6Rym`cKzt zhqk!dpDmqgm2@57w7(b8N5g1^(eVj3mgpe%(E zuSKl@4U=xkf|HSm+R|qH;npo;tUj7oZ}AY&1H52gclY3uwzVE~sLC0`7e_A{dim{h zJ;oMynqQNH-V0z23ooLQijJ^dTkbCT00|NDQ+2KC8c}o<7zV+xnG;e;&zAMFRw|jf z2-5|2*=E<&^h_LaYGO1qlZ;PH$Cw#z&a5m{G|O3#P4w8!#m1Q<>GA2Q*{R{#y?f(H zhTdKU84Ep2He~f(6bzGxQyUoS!FPx}d_yRsajAD=dL!0y5@X>FY~={JHVgqj+r%$r z#YzbbbgEz{TPmB#PArJ%%DUm0ipJ27^Au<^Vo|$VMs}lGDVbW{cC%o5x7-VeP+TIe zkFrDE-96qqNC*p2g`kULzsrt z$ctPs#4l_jgp2V2R#lb(t1TRSV3R=%p8_Y}ku?*azKU{@__L-LGBncB8ipthn} zR545kvX^NKG_UN)Rvjg$8Hz>oRWShY&C-npC96BUC+TV&{v!VC`rKSWFdx!I{cU(H z@4f@yolL>fax_z+mTu-%rKjJ9#d3<(a@NrF5=C_mP>*?<2Xk;xJm^Lh&J#noi?Ddr z3a(dAx2`wv+_|tMZ*Gd8Y ztod?YRj%g6!BGNp>3a1;AsjRcPk*X$76`aUiI9T7zOHtmgqFd_&w@LIDBO{Z&rHNd;+aE< z^mt|h`t*FDGUM?iJ5ypaGZLRBdVpxAqM_~Fon^){9rG5ypOScGS`NywEzq2B*yfAk zNNr6BC&1$+H4273uxe`UlHAbK3;7AUyL#0AU46ZxGRXA!jG&&b~5tM9IFR^i<(n+S5id{gVZ^z_HIc!&+v9Q_>5&)g-IK>#*dV;viWj_|Ir6e5Oerp~8Tr&<11 ze9L10bBB!jGE zjTG0@=a=GYp@38G8Y+i7w}@mlurfr1^I6auJe}WK_d2tYKoD(lfGNkvdU7*E#j<@Y z<{UVFFkaX@wQu^+jRS|rD!We{9>zPyjq!vqmOL9K-@XQ6^r)nC~=QX24L0uG2vCA$exi3AQAz`NpIUb@g@i)UFC#+}4tP$?)u$ zp4AM^tG=2&SUJsKA4c;p)hIhK%vD+JF7K8CKGDam)Nt8lR{TovP+N*(g%FN0fz=odie?fnDY zJt}_8Q*N#Xa>(|f-tKM{KLl*lvt>iiAkWUn*RiKi38AS$#8Q{UN1TBI8zrHXsz@l; zt|%O=ux!m?BEuY$9-e9ts6`B>fgfbYpxXJ_%P|hvLKDH54tO zQoti3!7HG*a0dkVcJbXancEwRq*r?U#tE8pOiM3Ec~9W;AoFjGUvjKNShs#I+)tCw_V!LvvZ|26WUd(j}nV!5I@I(re&!|;B(bQv-0U;pspbzp3f zB}1SLMFs!fstRm-7{bDH6+eUmW|0GR-`QI*JY@O25r9uG0>HAPZo6QCO?2>Wothqv zXW~-_p}}@~5}Y^kmNxG}a05meU~-aKaiVaNW+ZSL!pqs68$w0IXs3%7lN6>}D)%#ky~e4BPE@$D$fC7pfQ$9 zZ_X^`sbvQZ)ZE_uCjmTOrV1X_ltFhgx7j-A1?ki`Cg73A>6gnB;!^H<17O`YA1@dFp4+;Cm7t_i(nT$afTOvCL- zTjq3&&Y34c2ns31!`FyXa9brxT_^&h&Ckzw`P@!WrMowgjPIR345{~Ez@i2DFk32M zgkOGpw4NRhjA}uCdzcsam>e{)ZJuT$I8t`pjf5U|onfYld}XAgPE2Cu2)#KBp?7dO zjCUxbGfGathjWaUFU*8}D6`&iid302Z_`U9P1$Q!jXbL80?Zum0gR|5F-tNP54%D0 zoqu9c5C^ynvGn3$>7Y%gm@eFL;PssDEM&|I=N<9NhvtAaRjUTx1{pN3Y&Cg;Kdcsd zSORG8kwVo(Fj$TMi3FW{>cTO0Q9~ev|Au7r8K5(L5YY_+e7T1@Os229rw5+)z*7d2 zZ0cSdx}L%kQRv`OXB4Q(lZ6WzC6R)>qVA#H=)1OQh8f^30NN6`Mt^e*^uTM)b9Tdp+6Lo=V&VdSBX zCWbfWBNR(4cs-OB@S`fdy{wSJELoU+9YAC_sxodEKJk4Gns$2#i3I>ndwY9T=mt>D z{BPb6hLvm=5G%h?SCW)jX*ob#xoXpD*}XJd&HnG_fH!PsSX74t4)+z5Zp0kTC{V)z zK#b0rwyk3}!qx2O$}#2KFibIAOo4s`q6pj8qFyLQm|ZJZYRH<()X1c=BgK7Sl@W|Y zR<+pG)ud}Ra+Sgo#MU4KbQrO7@GPDWP^dGd?zYl#p8Kiax!V!S&zRIB@3<)}ihEQuFcwzwi^i#3C0NWfy5VT)g z*V4=HX6SRQI&W_>F&0b5Gs$#n#&_+|GH2-p&7t18vb1j#gkl6)ay>J^i1H>}p(ykn{ z&kMusZwaoKwJuOwGvuoWW$Iv(-zsPpaJ3LXr4(`WGKC8TGkcWgz_iGrIk=JTQeveN zU?`*=0I^oLAu_|9X_YCQiaD*sJc+>{K>_ofqGsj6MV{SJ;NzTDrj~|5Bq9DIL_sQ1 z?F40Si)NYD$i{36T_^NBmDQx||FZgsmt<%iVxQF4Z7W-uJ(5BVvsx%BI9JC+izAFW zfvo-s&C<;(#F}8bDa7r7&+_71i!~(X6I|!Boyt}bmmJb$OY31ntZAlF&S|AwwZ!PC zmNie*xpxj>l#!`tf#_5}(uLBde&C_;W1e!(7+UBY9NOKZ;)lyhi@RHR+uy%S#ScU# zY?)Q-@9&2f{ZS`ZQ8^xky{_i{uS3L)P(lRv(L7{ACsNXT|5re>jO0k0|7%%nMSy6prAX{vxh}hwD2Hh!QT7@q&NoNMeRfN1bq?U7V<0u1s3_1SyV^Nw+tTT@lX+8 zXtZ$v7##zDsXbl2ySn-#5Lyxfe#2UrcPTW~YV*Cmjb+!zM2L3xiw~z3Z3d7jG?(W^Sl5a2Pse4tMhb^iRsu`#5 zgCZ9(1s$PIj*SH0)KO<6+FiZ;b@lceA^&4_6=@CRMoIZ~O>%a6eEzsTlk6!TSQwr! z?K=`bNYi~c4$WAF^0*pfA3#wE>*rN%Kvgu>at*32xx%E;xKf$#K}f?I)LDOh(V9Ed0)!;3@_3AcFb z@c2^JJpYR1sH8jN6J0r0T@Z#sX*w0Z_@TS~-d$Cm2HW+XMxiMrv`Xq-6sa zKuaPM5DfJUpuoolu;GRwoo?1!M1=aF4vo(n&4fkf0!aZLa&UzKqN<$9M7E+;vS?^} zaw;)An{qw2ZWr&t&N`Nd=vWJi=@hBO2is+3IZ6vztVn_XqFSy9j`X@?BWDI)JziTP zW?}}Sk8Kw!J2w3;DR&by#Ry3H+XuV5d-)~XcF|@;+0NrO%8yX`uVc@#JwS;{nrs#V z2*=I)TyzvR>JeqTN8vm?WUoCQY&#^PU>U~6;d-Dh;cCQit3qqv*pK;` zT1Tf+u1;=s!PMrp1=(yGY%9a4M0G2Mc=yt5G6Y7$67bY*&cl1WV}pLmby! zBGlxDVC@GrUO&h@D9<$I4O>KK^=?@Y|J_JcAB!p02&=zRaUu6|-EX zG|E=PN4ju*R!+LMgpscM1nI)Y1?ifQG<~B}DW6M?k0C(*T+2f)n;e8xMZF)?nA1xR z1&700GFPl3ne$In;vkl|2;hzeT(RMjB2UF3m|uUqFutBhr2HHPX1J+cb1dmY;jJ(; ze2k2If1ldlhg^EzkU4+$9GH9Q`BsRUtzgzyh{x%*0w50dBD-Yi0((-xDp5&Kq?8?S z^-u961XcAwv)1-a_3d&@DvHZ|Hi!ZyA{!<PkXclC9SDCaR&{zZ zmcURkP*o0GvT9B%v4oZzppV()1jMuv_n1%`0=WxzsZ}0S&`r%vk0}S@^69I?UDVuq za8-4paP4d%AkMyZQhuVd=v!YJDskOJ1t>^mXl$e4^aZuAC%Z6h;zTxLcGM zub_z|W~roQO}I=tL6x#*9YbeOngZ2-1n52eSNEbhmT`Xt=M{(7KsQ@v+ zrUOS(Uw2Qhdm>?hMR-7U?sZ?2;F&WwRlLua8l-+|@&zp>mj3=hznTdETIhB|i z!%0XLePUW)cQ-0{Yik9DC)Z*DkhauxbZ9!cKh7d5@<{=IFBYq*rx#;KUS6kOCY_j! zPtVFjg$rX*U9v^zR_45qI)%8wIxi%PPX29P&)l~|c3KWU!XkdMq9L0s7i|`SFWPx= z|31rc;^ci>!{ZRbK&0K0!;UtCF9L!ZFB@oDb{1<&r7-HrhSA|nDm|Tyjm0zRBQpp= z?E-9jcFDpkUn=at<=01tVK7n+Ir^#({=C`K^kvHhR5spMlOTuluYCh}dHNkumbbO&^ zluh+6ONHGPYQhWD(5rTobs*n3uqWA2cJ+F%2_T3O(BTRIP~u_Y=zm#C-I56OM0KppKZ|t|$zpeW1KFF~By1u*_O&R}?{=dUpAm zeR6axv`eoid>w{D{s2Fs0v1<7)mmKT7%Ty5Egu>L4rW!^o=T0@(em@%&1aXb@?F$LQBF{$!F+ggv( zQfXmMH)PBbrtOO)M-p~#H4?65`tF&HypbPu@Ew9z;TCL{gaQm7F48OUpOvH3!SDoK<{!J?f4w?SHNaN`SSzigCYZ)c!WO&!pSO@sf&(Vx>${P!#yp45)3@Pp-n-PBYs#-;GHV*KVWgp*oN7=AA?wJgh7Lj+ zItgjGf)H{gA!I!v4XX&j9$N`%BU=e+YiJ;++LSOJ>fPKL1}7z`{eHkfrk2CV6x)0T zgCOW|?#UBvz_k#{mOyuB**g`jK#d&8LSR*h(dZ1F2DvTlHE>2O(-~VP6skl7WEX5| zL`!Bt_uCe-HI=!ukoCsbAw<`YxGG;ZyxrsPn86@U45*9moxogPPhhF9j1NyC3z3J- zSgz)%!LB%@_;CcwyBE<*KpqyZ!_;A%$+D)`Sv58S{1k|Stp(1t!EQ{W%c7-Vfsh4u z$vrpBl(!k{D69x9r3z`U1o7uDU8Ux1azf>M9c5!XJH#IQsj~@8;ss|Awj`iTfoFVd z5x!Th%9Go52dw3`(q0S z)2V`88aOy)AHj%=ycvOMyjS_|&(~||+Q7wnQ*FbZ;-K>v*zUUgV8y96%PSeRNo;&|zDa)y$&P7Ocs#T9Wf5uJJYx%?LJ+CQ>u8 z^vHNTnZdY>2?U&Wub7;;(7WXx<0_hE4d7O3-Pa4qXGae}*aZ`b;beSjGL=b9P0nOS zrY9$7rxNKS%U&voawt&6vxq*&ZT3(+mL88MCu1|qZu03;lWVSy_A6Jje=y!lLK@Db zM#kf#vlGbCE^ARBDWe$l8kTK0qvi9A0iBp0%Oqwp2V==)j~H?hi}u`oS`SI=5>qp? zX=n=tgJlg)M&IV%{((uP1e5W}>Ew~jL}D_rd^nzv#?{o*I|wapoStD+WimeLCgxn$ zz`~(XC=8d?#I!V^cAgbB$_!uDCgZUQSopok>B(iUyzC>e;c#THFp+{^Fx&N_)$w?2 z^bBaIymEdT%568!h>RAbX)9ABDLT==S06TGy_LiJ(>)8hv3&<~@!^Br2jjt(cil8Ue4kz^YiW+JpXl^BhW#F8102Ev|8v`@yV zrXGd`8)j!90UM@=OeJnyKElg5wX6-;a4CC15Dym=GAs|uPQ~rQeZYA!_J3Dx5aQssm+K2|2-6p|klhW; z(7b^>i=YgdS0WK6;YToJZiQMAjIgw)M~Orr{g@TWX*OjKBVYhy@974!)}jV3cGQa4 z)QPb13;hyWy_Q%cp1`Y2)zBf_UM8o@DurkL@draX&Xr_n&C<1eR_#Hvq{e*qX`$vw z7kf1XGvxjV5TGx)x|V$;n$?Xcv!&k7EtS{;DiN@nqDI~{N(;&YwUtQ3qQ|Scg((7+ zD*|+6yS#?`&StZu<3ew4Y>cj{70irLFYtn`^;=kKRaUdff`MOcWvSborQNnr)=oyt zNFT6U{1txRuvE7m=7xKNEmhw|bvl?L{T)LH3%72dWYfA^5O7kx*46ago23l{D}^uM1f7v&;T>t|03dyj2${ z86b%f2r=E0r~Q6@Aq8BySXDYDFhrj_YfxmFdAv^q!ob6HJ*BMuM5 z7Zpl-vQ0ZCj^Y~1Ix8e##{E%mjs8R>6c4TcL?!%McMhR{R4Sn;p7ug$a8(E#%@IIY z%L^gXD=nbVdk~IN2Kh;!lVaI8y&~+_EcS>E>ivOza>1xK&&f5qg+qB8a&A z`V)rW{RQ9uKQW{d;~6UH{cpw)q1#*zib&@Ro-An9KD1&z1!_mdv4fZOS1e*QEBhgD zT+m13$M#mKH9Vdhy7BNBXmwi!Yl)gSY!|b=%6ix3nZ1gbvk$PKLZSHy!$Wpl8D{h9 z4Mj31mj<|UeNtzbKIsIvDEGP*8YS28ak@ecCB-7qrYe-?l{B@TE@jG8_LelexD$Tu z(@tpk;}Ff-Cb$CN|Awojl3moDV6b_wyZVYIPzZ>Ogku(X z0Enst;RkC-;0=GvF>~!>=0IrM4t6b5XLpGMkc>F8wJwhM-Jt-8;fi53v)y$s4OqUy zQOwQ2at%@ot^a0iYETEw{f2cX&D|`(=&C01ARB&{R?YiT(Ehhrhx4UdN%$I8 zbr~p!>j!ucP|0l{900c|_^2PMhMSJF#XxMTMJK?Q_*vN*Kobs5h$1g*t!MMK8ZBnU zh3n<6siAPDCl>!`aaH_1H83S`X=%O*7mGAu4PSU)tv4lN%R~igv(3sEOEM4#R zL?YD4nR(qP?Abn>-aEJ*ZrE}W48!KoJ=;gb14ug$|Aqd~bsa+!Q;GEGa3+=yAy8wD6t)${*FG{mwKp-A8BO4oJHOlU&fI3SvI9c2 zbVP%7VjIxZda?9tUMzYqh^$NDxC@K$A6tuxHsrR+jWZq@HE-gii5D)~tmtCE-9-*@rYs6%7L5m$V$_ zLr3zPG7ZhLb}C5?sLxJi`UJIXO0AvBtWiN%Hw##(F*v7}aYiqvrQ9M2zPk|ApR;Hl#-WvLVLdE`k>_D%r3_v3G|TM6qdxAc?me9ZqIKCM;fn6@ zOTJk!dhV72hx5hWGm$B*1X5O2S%L}&`;+LPs+=)R#nx&#J+UfCcsvVq@p!3lk0BRb zE5dLbT;RMN?C$Pc@(Ro&!m1*X#PG@bw1V*Gak?Hg<*N=M9kc?qndJ#5qHW}qvZX=Z z(LWJ}ydnq#Q2wmH;-FA{66f*{3)8l~aIiVHDu2f&#$83JNd| zIa7I3M2wxqlPGd`M1ICHFFZ%jmUuR@SXsNxG?Y|dzXL4OuXbtvo5l^7bnXJBPsF1wXV3Ghl)7jVpS&p0Zym=jl<04Gvis;k9TI@wFH_y+D;1)#tdJYmOQlMt zCptEjOpM&zNJKi+n_Ae}3g0dUHDZadVV7A_Qjrj<(Od`2@&W1$QgTOkY(e-*3+M2A1CK$w!8SpxG= zc}11*_JFmxa#^qhXzzhJqW<^lqJA?*u@q`NH-gcXQ-f2P_|)F%$|tf1Y#NCa8f) zf8v>u>FNCm^do`tvU}+U3<4fC%sh>D8H4ENxdCbdmyy{!J;B|Hpq|WXcw`MiihK3_ zWX&%Qbe+!#5`4QP%i}3PYgntrx`1OI%u_d`#-PDIVP9ZSD*C_n>=Hhn&RAf>kNjk%Bb>pjq=?0w+}ozzj#>8hDjWKkHCNKky-1 z53P8=1V|y0KXzd~U44{53|N8WXQ-=pyV{^m);tM}eo$BMmWSB3qR+Fev3L8B z9Y&S(fw9RMXa0D;_hhbnDu1**dSvwYd$LAfnq#dl->q>L zJ=lDcIofxq-?r__eBPOw-P^aI-!c5?K*E{I+@B$Clh0dDV~5NHi6M}xI$cxXy^B^l)cn>;T_T*OY0?jq4Sb^rIO3q zsi2?v(me_>lb4ho=9pL6y3ygxp;#iF8I2FmqDvVsDhJxx$UyrBj5!3!Wbtl>C20|k zfgwGxaO13);P+uac+u_B^c#Eor8b3^A1^3FV4H6YYgywg9 z4^C~VxST2ri*NFZ?~fk|l=dwm4tpIdE{A?+@|ny9NU*@y1U5$mCg2t1fqPs4Z+|uw z&!kc^U@lpldpGjdWpd>*B^$<)v6=A$6EZ`>%gZpZYH(mzH%2KqZ+v<-72h9^&p=%M z#8f(-JQ$NlCCAI(f~q10KjI73m$==N@zF#K^(fMA$cyH!!G_6rI++;p@lAY~GJG(o zK9?ETbK|mDIyM|j$r~<{0Y5@-lxqqPR^HF31hC$~u8?aarZ}^f+Mk#~qxOUGWMVJI zDB!Kge&x#|X}-yX;E}vu%>#WbxV~>50eq4xc=OmG&%+O9vhQvK!T?Vq5VEu~jQN)~ z;Em3g1N6t@Nc0AC85_(pmh+4co3Q)`3|nQyuIG^+Qq&uD8ymHM@pNf|dqfUrt)fG! zd6AnIb9Hm{h=AW!)zF;3y1dspI5XNC zzs=Dnr_E$m+cj`JHd#D$W8d&_@7SC+YD|tymj(`>q)u^HZ0yGALnpcu$Ho>$2TD0@ zcrPMoDn62or-2Ac2r6%}H~IAl@~PRGcrtM6_zrRF@Mx}oVgJNTetup{_iDWd?Hg06 zzVgt*!Lj*)p=s#$9JiHBY$lOOPw$UoT0=ffum}<$vysKb%bR6QH-yXj2CqI+=6Ykt zy3pZzuR?$z%i#dL@|(T#OCh8PfV=Tfe0Y3%dVd%J^JKD?6&o~wN(ruZR{0fEjQ7Et zN0Cq>P-26}9bqxR0%&M+lsY*9f=nym%7xqr0sw&-U%-7p2$6RyFuO1>EOu>qKmp6~ zOek9TgT?Cb{620kE&PFBVtom>y9iBL(Tt{_wGwN6y9<}i{ei1KKe(vVHOvdc{XZ!O z?1PJWVLq8Ih%24zrr#MG(1y8U|MbkJItV`eEB7^D&Qw>_#o|+y#DwsaoI*+m-37{e zK}s#rnU!lat_ss=e7K#takGAf9@REWRR>bz!8Ih9&Xhz>^t_p?!WAa`pWD=MkM0_U z2F|3UWrNp{OSy0(@eIjKEX*3}XkOjdJ!fJfvXmUlwGTeC5x!Qa9QEG7*`x;E{eQ+( zWZ5p>xGKwX@LoA-!9GHCQvnHmrEab`S8h@R8g}8~j&gn-;Pb_rIO8=~0nJ(V8Z4#T zz=mq{XMv-e+0nEwE@Tn`X;Z~?pO7YcMItQk%@ZqC<;lva zqDfG=xMG=qlikNW6a=y^qMi^~r8NtGk7y^%W<7zkrX5#gRhJZYdEKCB=)+B)f>vNk z%}KxnG__V{<6T6A*F>%4C8KTxtfoN@Q$q^!S8j`3+6pVmU*TO&|BBdDLh;zX;^d*k`2N|! zu>o7}?VsqMIZ`}ubXPA1-wnUQ@rLWuclxGSdyV7OI%CyZ*yRfoAZ2ShPmQu=DtWCDsOxx)xotmCP zrIWCUT8Cz%^Yio3qEq&A6G%Y@g`LcL7Nt$19(#KR_hUVrcl0^G_};bdg7MvoL#1pN>M!Kf^jqq#bkjZ zSi%$4!b=616fbjCV&)cR;9VmOFoRRbtsxFvWW;a(V-jCr={(jGS^9e#>se>X!3G+L z$3s+Y3%$r-g6^%4#6t+jhqo?v<&Q;X)&L^onlIo3-HbZgNk5$I)S7*Jm3 z0wuOCpmM^T=U{1>1xqWJ;f4vWpXdo{IFY=ipP&X<(U!QgbIpAdYcF8MFImyTsU^a= z@WOS0FmzGE;IL-WeivKV_v6uY87>A;YeZX%`lLalg~&Pq`pc(sx!ABz!ZKfCFEm#wyFd1 z0;)DZy{(rkC8~_4(=*DY&^#Q#zS1%KN?V=)x z27NejB>;Ba8$R5jFvRHV?(Ua)yBf3zfE#oF^uQ0>gsUPK%(xB`HUo(Dv*Fhtdn;Vf zLzJ6dCdvsqzi5u=GmCZfoQs(E1bl~_19c?$uvkaNZP@~K*b#<5SB_QS%F+6V)2B~g zz_TK@5u$ubU==nl@M;SG$6_5-SvVt+{+I_j692_>0Z>Obz-5{Rz9``7pc{&DTNdT) z8YIE?1MCS?P(Q^varq)H9`%S7QXN{z-ewH!9vt!`E)L#zSk>RTFl5{gO{(}&Kl+ha z;9$CGKtgc~z`hax4xIHZlVA?f>7lyl)P$V2Fx6`n*&N}d*fKp6pE?vDP96?X{kEAE zYRuEDbyAMYCux6!m4)`#tLQUX#S~_1QUe(58;-(q+#ec*u5Kqq3rHk%(E&C^!TM9KMR8;JOSUG2eV0%0J84Ao+rxt zU=dNf_sn<55BP|_zgS&Q3UBk}uw;hc7sVzfrVnLe>2z#ld@??j&WuhUnu1JM?E0jl zSx!Fd^MPSo0s!9b>k?@s%8Nq49k zjYh9LMlFMux+<1=l;)gFUbn79^v!2MThIjwhC}jC^G0PK3fEe9J;XwrO;1lI#*(o# za~)t~kd4F}DOwM&9gXje%}%5<6ET*Ri5HbGz1GF6mRX_EVQQ6hthG_p0^^Sxr>Epj zWDEV48O?GcqrCW%#>>voNd%vun!qa#tz2PEIS}C=@Gjo0#gTKcOI^m z&=p0im6ECDC9_)o0EjUZzsO&_Qq7k19J@w#Y2;e=G=pciAgbs3D`N83tXriqpY;nQ zuc>#qS=-RGRn7)@k|~m zb)8Rnh#26PprV%!+BB%)*uZAxfn}l)QWB@6SJ^-6SX0x z0j4adc$gvB{6FO9f=5XlXxf|8X@sI!^Bu#V0(YP$AwDwz3j?H*50t;)uDJ{ zD^`mhTb0qNlrjTmST1gL_V=m%eNiV@QS*i^@*+jV^J?Dre5*1_=d^0c;o2$FV%>m@ z*g4oeC{#Y89e;Tn`|eWqrYDqny;M>P5Z(hX;T0S1?`^#R%zutrT$@JQw=$MCqIB-s z)u-;-g+uk4pEW=gMGZ%Bid4x`h{T}JaYfn;+Z;thZJnizj*rYJDZ~{%|E&?Fb6~eR zup1^?uho)nNKJ#@4&x?zBd5m(cqHtdXUK#Wq&$eU%awJZfbK(pBj^RX>X zK~!bCASNOh%vL2K)^-$Pt6SS4JSqc-r)MoaU!YGH!0(O^hMzZV9?k`Z0gfYzT{Nqu zJVaErsROg!u9ZrnBQdfX%BcE^ZB<5fTg#THtr$*4$pMZk_JWaP%2oHIhvvaH1T?Hv zNt&Q-olf!crsX}EO3wt=#&9YbXfcDUe?lv%%JyzH%)sflRoM$c`>18>Hf{`u4Ok<7 z59ab0Ka zBneFxOk6m}VRpH>oLM!Tu1blX>~c;-b0tkLLxBQyn7Ug$IR-a1pc&U}hbp?G6sd)3 z{PvlN_~FdRL@a^Xt(&1K?{sQBtI^-@xr1p$;oCdC+!%Eb=BCy=Z%de74MquTh{Ij^ z;nN3)&+h};(3kU2R?vqydS*)Wq~PAEt$?|bxsykL$7L;=j>+#20NhMND=}Rr4_&Nt zK(if-YGouKxKValvm7OT(B8>k0WxOIle~D@%!0{Np5irG@StP6E*)}Adn%n-^ECTZ zD^p<A62B9PZt=!89; z?nPsJS)i*#`bdaMxTRoebDE)rD}>Lltt?c+qN1!2UR^0`xg16@37U8}8*}-r91lb) z>zV$F#<8?Kq;;A_wGtw5WgZpX;ilPGQ6{NE6|)hACeZcq3APQjx53UDs}B$Ph8!o-p%b}$TO1CH=z5@!T^s<=6oF$5XpWS}|6w3K<>DJuCa z9v8NT*U5b4l)Ppav!-U{l@q#M)k-{waFE<1AlDab%nEQVoLYp+I84n`E60eHM^ad0 z|FhWkgpuan?*4uiK2TB-i}e4t_a;DgBCHTOl%kcA#_dLZ@d_g)`B_ai}0 zUjTZ5KG4U^U`TGWUcKtqg|1gssH)eE9t~}-D0#WNlC5LIvSo2eo3tcLrlk;9+M(>w zQnHQ^MT=rcR)}(VrS--}c#nwH?n<^dECUsmuS<6Zoq@WZOCpfF5G7R31d{0i-4qPmsGvdH71Xm%{9DR$n(8!Yzxd=_U z7fmrZC$*e&(Q|^%&ly+A2;s_Jmf`YkH0*l2nX=F}OdDHlK-v01*d)um9ba+%?egs6 zmDx8$@(%DtUDrV2H4OlREql$gw^KDpiduBrO~<2YxZ^nx%GnkKJVnhQF(sQN z-^R3I;I&tk9^zjFRXyvO@AL zS|-pYrpYo=yv=4aw3}vZ*NoU~4p^=kMFUZ2t+h;Rpb^FN-f~Tk0?mlROrC`70Z2n1 z$b>GS5c-I%VBIyF(EvG*9f>3|pYJA6(7{K&l z=cHkzN30I4F|{-^u`*+Taid&QVvSTSbam|b33PL*%GENZ|<&!#a6KZh%ne17%D z4Y^`rR0gz!)JJPh1Maz(UanrekWb%l^y@iVrnMG@7T)k0Uy#01Q~z=~8&Q0SoS+$F z@5Y!B)ofo4HzTUczS24Y!F6z}8?c{3XMbgo{-v7g1O)v6IY8u8%HGYSq(J1}NnU*lY!Bju+V> zPM$$nQxIw3emkZR<1N@|3p%n=sg~%!QK{7Ef2vbC@OIEJ_kgX}d~s=ZZer<{aed~N z@iL^MVz~jyO8lb%dngGgXf~p1-t%xs~hD%0t2@Fa)A}$DyzwklvAzr(P z7ET4aO!3;SJXPpTZP@%cIEE||CqtDBdVC5MUc1$)R&ao@w1VDVkk#S$G{qmo14e(d$sR~?9_@u>|#tWKx$o^oxhsl zxy&1IFs&^u)@{fH6IDV`gOr@N|8}0C&-}S_0cI6fPQ4*|m94 zEN4$NW9p#On1S<})YIgx09cg~6EB_%Pe~X?<>Xn;d;}6n*Vzf|nw*Z5WWqbHHVf2J z^F_QG8gWg%RAV|!T00QlcPUcnGd<6b zX|*rvt7#F2(TCk1eKq5wDlwiUD}VaxZO4sgy}p`Jl}s(4zJ!=Futi>Ar>|!8i5B-| z0T@PK+i4(0sbpN`HgTg=O82s1d@`G_&-O42>f_VXThbT2{)=iA6 zLy&btko(mOxk~oIB#P7%2`Y`3j0x8c<0zk6wpkf1(yjTVhV755Z>@!WcEh2GSFUw^ z>kg>>mTiX1u^Gm5z87!w)%2+jFdb~H_`VxEK_-e2t@UA_>v)?WijRIg!C+rtdbUfU zs&ZMP*uC2o0z{`5%c?xyB$lOUlO&%(Us6>(ed~_xHl}=U-Dwt(V4q;6Ea?mKv;-Yw zX`UcM@SxY@4a}*1x1si_Bu}O`l+S8MvEM4F48@wR(*!T|;f!Do2^@g!x(j6KF0M8u zl2k@uw4RbrLCp-K&+($bw!rjKTBe_ZTzxGw2pq4OB^3GS_({tb`6x`9b@H8*?|VFb zQEUfUx=Ws-E~0F*5Br*-ZF_|nrF2`S+eUv%$7SiKpy7D-E;Y0pdzYy^x}_go6v!tL z3G&IN%2l<`-?GCH?nQ`~Q^b%-+}8}9#-d+DSACEq!$WEIGK{|MzM3&Kk_*0@7B2kh z+sPp~TY;<)!qX>4%mVu912bH+o#qCJwl8YsklnZL`>_pap6{$a+B>r3Zv!+@e6}4@ zf*?U(4z^*Sf7=#;*X5yn`l5C#&wZLWl}}%^;RBOJY?nb1SYgB8zGj;ZDp$K~ia(k3 zecaS46iu|FIy6`vtY%u%$CsMW&}>Tz5Vyy`ZX8z1$9W@O%&BNqH5$j$^Zu3c8i9JY`^lSC=;P5FhjFt$97mm6UoylKf#cL zHn-gr)I53AkR=@+Ez0uq93-Et?2}Ichw&#@NHOdJy28_`sSg!Zl6Jn0EYW8Lk4{&O zDE>C83UDMIg(_(;|2DEDYVwalR$55^{|99SZ7Y<8ea+Bs2a_1v4mv8}U|$#`XD4x} zjs8&#M|H(Qws837j}p_eng#7L3Z;K>Yh9=1V6Y#}Yxh}{rT@-=>x-S3%nE(Wv~R~K zeb|_`v9X#gC>c6Yt>7w#)`p}It$@BDv~d(ss)32Z(Z?4|6BTYmpQguVZt~R^+bvw* z4&0~vX`eb&b1cJ*MV5(9i$|Y@iFi9YcoqTA_uR%aoOnS2dVmv ziTPErP-?Gwj1_@3l*$TeeZM4x=jk&3fY4a zlnOeN`bnaF< z)0q0O-k2pjILAOyp1)nXxRF9~U+jyRq@XOgz`?-|0L{i=6%*O(p}!s3p$0i&)_K08 zM~@TxBY>9?(Y#O62IHH2HQ*s`V#Ef{vmC0lS<$ZHOUF9x8rFRwb+Lo_T>0Y<@cpcK z7o0FCKIZm(;l}gO-*(NAPSN+sKMsG=V6wvC35b1$arUKq^otQGkFi||Dw%Rbx@3Q=*s z&>?p2?nceT?9{1p5vpYLk6#?WSfiiL2PraVCVJUD!|eJtoxaO-3gM}Q4~fk`+~uIy z>)K(97icXlH0yOIZrv&K6`{tO*m#Je&Mz!YOis?O%-xiifvzpySiL$s&+j>>l4bVf z@B(8viF}OV2D&cBdT=Fow|Fagd(>>*38Z_@vCBLK-YNyod`S==748!8Rtb)_?!@sq zQOKA3I0(E|iepF-$#V=J6s6#;lAJ)2(sqP%3|(~5d;avm`;*fHvbD7l%_DRQ4~G~3 z7mLLI&j|4^3zp)4A+SBMq1|Y;-PkG7YP;p*NLdt_O*$hM`kS^mRWLDkbCG1|+|890 zDYi2*P8O1talQwGVaH?9O}MwK(QoSLvjmrtJbU1>NcfCiyflOx&WCCs8lj7nj4B23 zUz}m%`eq5f9f#rDakz%QRl#Ejp&z0O6%GKS1ZI?CN@A~Q!M^)lxj}5;l#R}^6P4F_ zN4m@=xldakH^ZhK*9^Y$Ez@Pe^Yoq0nQG{iJhD&++X(h1kx z$JAei$925fd?p zu`id!e1z^&M*x3hclX#IDm+v7{GGPBgS#(7yMbd%{H447;30=6^05LUKlkS_NYrrC zo$Dk%l|p9={wUT%--}D|?g|&gOLn8-#Kv~$#Ifzc!NO8I%8q%OlO$1JKWvImjkd+r zo)%fL(xV*JBt=!bVWx<##;TRfwR#-{Ip}8KAdThpK{X`$_{dbN;tG{0PEsbkSgc%{-v=nRh)5r?Ow@d8RR`lM<_HIOc`XmfJS zSejX0F}QyoK})EnQ8%s4Hau21nC8+9ST*cPd>QZq$q*+y%mhGQmX6CQ2I zLr2L9?FO!HHQfkwkDN9B%FrQVBo2wpa>q1zwgO~R^4!ratYK@OuQSqc3#|#_- zps5*nwDV{iF+V(1q}HI6@?bgzDr(|nRojDYpoBx0f!#H!8?{BdLtsh?7@jXE4;$kX)cT>0bbdcJWj zUyrq6dQH1Ug%uxI*Rx`LkVPJ&(`uMIKDD&4IzK(NI?1o6oSs};xwS}h#xttAEz@z~ z>t5#8p%%lyEgT$|IB*4o0EX^D;OOYcFy@^F6_7Vxr7M8Ton-~m7|S<79`sK`fb&5K zA%(l=ayXD@S@Uf;NHyf8^yzBoSU6$3CgcGS@p!rx%hzY;^TjV|ZFoA0+*-Npw9H`8 zzDwuOF(m}7_oQJ-?{>xA0=EDXFGt45hj#%`+%-2f0HRV+E6!CagXZPAl|^wYYrdU2 zu^t(@IEp$wlWr8{FRoBx<>;o%$KZ3}*#e&n=^IJZ74bj_vV13Hk&gBT3`NXd)A8=6 zz2+&04@b7Qx6=+Wf3u^9{v#c(ka!`Pe!EURG{YTr+`Lx31Z?Rn_-5hYJ)FQ$^-jLP zj$#Batp}}==?0ERE*jFrdZiGy<}yOokE0|3b5<2fF^5+QYDG#xZ;#L~rFfAF!RyND z@$B5hqCxFU=>g(eb>;0VYg>^3GtL>(ie=%L59e3BJmJg9&{Tr74j>EZ=!-yNRqheq z<=S=4mB94mWd)i>`n;ooUE-z8yDW#5Vr@fJsS`g@wj%EY9WUj;)z_+GM41F5uNO(Y z?M26wy}&Y5GSVVMjCPmxv)ct}AT|@sH4+bg#10ImUK>6+#Q7= zG0yA>6648bG2C=2Rrp4w_7)E=d*r0{kB@V=68XAnB45DIjuRc=D_MVe?JQ zYeZ|l$B6}nDXfYv%4y2m+uLcWO~rN6Vs)zI;*FB$$Wk(^E&?fKMiU>dR4+;IsZhLk zZ35VUQtjP{TIf^C&U!u7Yz^^6nms(SPzrLRHP|Q%@uvA@>4YM!NWG8_s=k=0>Dz6% zV^(9VB2TU15e`>rgT|U35&C}2uQri`vK~t-iTrmk*a$v|4wMgWeJ4{|IaNHKINVvo zxu(cC-wqx6DH~-11~4BvZ-&iCFXxkmfd7*5F(f~qgTHP@vDM_hV-pf3F*jbRq#BM# zCeO8oV$~y)(dJfTd1`5Pab@kw?2Q=+1LJ(dx7t`{T?5L_%f$RZFCkWM5FUr`K}o~i zPqV+n_}Jjfw}a-}w*$NRcGFpZJMfxsTT%4(?dWaC^54GOa^K$e*VpN1=t3Sr_T9h< z?Z_CeG_tkg$NSb?zlp_UJyz~K`Xr1k)dLUv(4mr91Wocj*>M{~H`86%zbq~$UJU)% z|9GujPA)30$tXXJKVF8;`snh^#L^q{SJ%jO^y<)7`Xp=oqE+Lv~s(RcWwi zMKwyCyW!Oy@E)fDpWh)QQm8DaWfoWoxb`bo4gcnDR?BYo-wFk@iw!VQLm?(grO4c} zjp2$>HA=7~yY`mt8rxd-=6S4M5Uo z)OVU$?1As-{a}&m`vbxrCd!qHFPR&yol=mswWkXB^vh9kBgb$TMvh zT}cIJhVrq>*m(Ma!~$(oGOc9&GM%^jI{Kz<-14xM_NR7UP>+1j*Y!}X&myX6c)z8yQ8 zb~tElBskJUr?xdi^XRJ@R!#|36`Yb%`{|BiNi~i|E4B5aKu&=$YX<09NCQxGDnRjC z%>e(2WC@!bK(eXU2^p7@=t%;ue$;g5z9gw6J&^TITlm;TJbmgfnr2AfR5d4&*Y{MX zMTLGcT1qK)BJ!NTcF6DT*|}TGH*c)TYg0&!w#?8m8+9z<$t*^A{jI4xBQtOMQzNUv zcx7QEm|u6sh8x#b>oXS@s@o7;0+zHh=&~0enPMZa}m_zqLtk*GZmV+U;eV^tF{^v@xCv;}@z- zPE1{2U0mbtQ22nt5mnVNk>q-m=K|{17FU<9rn2a6hLbG4xLsy?W^(na4qk7=NqHfU zPnSdKH)YA@y{6S>7#?LWj?^}%CWpS$ZB2#k760n|=$Lh9>s7yX>GtrZ-B^EPHuUaX z55`+tt3z|vWwe;!UZ0^$wIp19R6J&TrPXDmJc%mbSeTl)k!qiw_{i$Y6q24sQhDEv z-aws_`u916s#=OEj;y7QtP|~ceXLai9kBZ>HNk$kP~IXL~g zW;s-Cho(+vDEa*S%+zk_B@7gBYI-uwV1lgRvsl)x zhi<;E^DDtnqv_STMKvia%AxKkdsL=gzCOFSw!BO;LYYH%VclCDx#>de}W*-5<)`YO^%GmcGb14a?R zetK?V_6A)Rw>C33IWxUBH?wkWflEPw6@9JsksZJNN@kJmEP=qe=e3FHY0^Vw)*%g{ zJVGBxlnc68A@D4 z4ymrIR)%QxjaMT}5ITm7aP$}zvNW@J^R)eQjc8 zhRkxyx0Y9C=GLZXm#^y-ieoI2^G;LFHGZ~?XmoLP^2Y4cZu#{o1g0mLLY!4AGb9Do zOyWeNPE!MUuV3P{UJ$%Wsa;jorRES59p@0;46Ks3l02I%K?*&fR;><>4AKgw9OH`( zEZSynsvQ3f_A}g&C7J~Y|#m{U?VWhFm@u-GdAs=ngUrW!E?MrL#IQ`O&Ld=UKnP(?EDL?zk9I$4H$zD>Hn&YWBZ6f&4C}m-F`*^xDkQL!lbdM)8BoE});w9>BB%$~=Z;((&~OsMoN(4as{7D0xBw8qrWpLIByA zj3S)EJ7rb#mKx6C>T?^tLX-;ncg^UR^BCE;1V&fwcZDPq?gk8Zcc-RfxR6jy+xj0` zuR}f$2hX_r7Y z8@PxOx}#%lK1j)Gnq4!R{8EXW+9l1lSVO{z6R8hjndtf5v}k=^L>AJ;eI1iY91HYP znUU{?Y9>=~6yli|`AIRnlcNyo>cZi|smxQ!R0i<1S;$fRefTNJhl{2l&x<2s0IknI zO5CBcVdJjSAao+Tghe!K!+?_%xPr^hM0__KGy~Jxum}B6Uy|VY(hCo07!gNql0i{e zVTtmK47i(i9EUdXvu%spX>(+eEG$y1FdAZ0CDwrjLE<2S8sZahJ(u``pfJAO}l2u z8&-MjV4S~Y^8j;k4kX1Tg)4I$hamFI6tI7699swQ^WcXQZ#>N20j~(kB5wKaeQ`?{ zIS_!^=~UUX@3tc{G3_RQe^_h?`oYvuG$ntFFDcYF-1wdeufV*xVNDbt;}u}6>m<9^ zWiZChuzOwS80+d|tm`~u>;sIkvy62eW31=?{rmTO80%#(GS=JG#qRaKQp6Vjx5gGI zwnT+U_J|y>>DtmRo!wDND+-tvM)E&>nb+Q9|`svwT z91YOzDrOU*Sa_b8r7i1j_L$oC_V%E}1guQ(K7uK7M0B21v=rKbAHgxej%J8zU@Mg$ zz!+Xk{n!v`l+7T>!sF+_=;Faa>F+)@iV%8I45AO6MO`Px0xvcl&z3eTj%6@VVzElX zGE6mA!T3`dtEy%04#N*YAPObW9afA;G{l8SMrqxU@XJwP+l@^-wl>-Uww$5RK`YwQcjc82oR{fl zU(<_yFKWf9vVf`6slpG<>=Q-I{u#;aTKh7?h_+X*X~s?z*iNd7QZg*HJq(zR-*7B` z+ywVc5nuy)l-P$dpf;fhH1gxBqvh|~<+IAA`m2@myFq~d(sa554xkAJe zI~ZBEp-uI?cWbimMamQhB3=JjWenTf`Cbz_N0cg_aX?}q7F>MTILwg`vDyFCaqn3- zt*OZM8Ewm#+RC-#S@DMB?YT8frqkDJ_VR}Yw>lVDPnNNXyS%*PS&Ffbk^cg)^-;Cc z_NxY;*x;Q~HL;Wh7e9Zp$`jzN5}ZZdO0gAi*ECpHEJ{n)2|q$<@3b9@C&rRE62G{_ z0pkt8l=#Vp6IpQCzEi4)zS*$MC>9QU4zlG;Von?9dsX1!*?$u3pS>^sj@)u43zf`_ z6&1&8!@C-dj7YE%;+9H&svrpcW@xr(uUQgj^VE@1x8rTw_KbMj$2`1+{b#s;s12vo z8Tq2h&YVC)xtcel;$gdZ0ZD;O4a!Kc?m%d02q)X=w;WqR4RufGSQVfrYd1u)goKlH)ymMN z8vRnbBI>2Yos@>d-v$4%cayvz^Ad(3fp@B-z|;NnaK|GMKs|I!py4HYg|!cfF8Ozj@V-_C3)rz%ayu>f8a^jur zw$-HaG<|4zQCXWH2x9K&OsrVYBrsEwCYb;v3AD~CV)?$&;jv1Meqd5EUIaQ&sO5W+ z@7l)8*H%^*<=tu}q_2$*bH?=|kzOcAip51D2#exG9fcN-$Th^>zn%CW_RSyr519Zm zOhKZcZ(mc4ZidZC5Cu<^8~(Nj@6J&fBN)7TDy5`H#_grqq^BdF7A7*hQ*wh#fZ`+Q zg~L}InqJg$BHS2Ex}F|zcp)%dq$~WQm@4Q+NHL%}=9(fOG?_78&r`=a%hV>kYdmR9U-F%^p97@t2O!|^V#7C-N$mB zl%p8pkpFX^ixBeI-Dy}&%0ZoOQdg`|unzHAVF&xsVmlbzgyaXl_ck}I5bnGpOfB0{ zYvgXZ9YmfP)J9SNm0bG@(CkyAOVbRbJK?ZVqEJC84d5f(w!GM zUs~R>-PpeF!~@1vpUhf|KF(82n$fOD(Nq&xgJsVQ9(a5bm?C-;^Wt6b*@2MB+mhDD zl&sUBP+$QbtBk`~HO|ju9EyN3)LeNu=+}sb$o;eXBzGy|dkGal%5Jp&i`)fD&sRmw11v#k4Ng&VqGc6gYp4{t4qw~P3ui^s_{tOQi^hkp z`B7}(T=R!(ADWW3S{^{@VFDViREBE9*yASWX`R>t1pLAT>98G;nC)94&fn;$tsJ3= zg0$3}%IwsBa&<|Z7U4TQ)Q;ju+9CH9SK_|n^ds4i2_QTMdnU0bHvu(uV|HeKr6Z_m zZD((9geA>*)7}AyXH;zjh>6veYvOcAwnB-$C|Tw{QRa1440oLW4XuhXt~4zaa@0!+ zjkICCC}*0l*;uj_IXrJ&E#j@8ki3<~zvQpga5Ck>4^tX65_6q)Kx@hHg0GVCiBg8~ zutXx^XIH<4^FCeSkx2z9bl|Ps@J5VKXf07auF>CRjYt&>se~GJ$%F|Zc1$iP>9V3X zN}1z#PA@e-Gn3e8r^W4DIWX{iDdf2f_;5 zQl+7^M>Ht0Q=H%}rS*@*P_gv~+)#mcYQiCnpKXxBKu?66kdz@LlPF>IxfL0t`kHh`G=bYGZU53(UIy% zjsMEg5Mv}lhADiwmLVtwA8AG@&8SR6bhIa<&ODU9O7ks87x8V+zW8=OZfWJY^k3@e z8n3GZzi2*bx6HO1Z<}Gm_AnjVvUO%TrNtheUuKK=#TNXcl^}U#!ZS>lR{P1Y$7^NK zED3Ave6aw#1U76K33%lNhZz%#vjb}0B-|j=WC?~AGj`y~gQipd`nqE|rmKPAq?BDt z(AFv&rstHJW@tI4jyO#lrJL=YcqcU|YHjSmU0RBCFLY)t?aX$DYlbV8i}HX3bi_~n zMI)5dP_2o?2m7_3OP>x;l(!rUS2LI}wRGAc)2$5YzjvOGPk5^l1%~uKG30c2^8|P! z0j;+kk9H#0Z}P$B>te9!Vq>htBL=yzt%*h>9Bem&%eB$!h#}+Jk-bD-k!Kev5*Nkl zi}_bmGZHMb^7rPtDp+rVa zm9-Ek$yx)GTRk968RjDEmn7%Qh9 z0`@@VIU*oJ|KX0_@$@;{F^0V+AoSjHWH+JnB$Kg6x17iheXk^A)CLA=vVGu6n@Yh|-_k-9D%c2~OB~Qqr4?P6lDB?tUU!j05 z8E`qVY7X$@dxr11JH|Y&6y&>6r^LP$<247%Y)0g-Lyxrwjn^IQe6`KE4R4N7+uFd2 zwqL((Td~owV~nM~H(<1Ua;v0;teX~&Y+8Pk-_=TGVVBGR?)hsvTXux4wBmxqZEQLB zjZNDQ4AV309a?;#D-bvQmOa4rV;ehdOmD~V;|)8+0SU_{Als%FBfl6~v+LplBiMc8 zI_o=wW}vS-@XK@#FgKMwS}a03_q`Y$)0<*tZ(&tI^RQg442`rpox2cu6g$?`7lFZ? zR3(wDR!bN%mndPdn)aPbrm=051;3jZ_QmCUM9y15w0|7+KF&K&j03OSDFrfeHYUKZ14HC)4oLJCWVRy zX%bg8^6(;eu1Mtmu26ntkp(i>2yL@ba^ey+2f78-m3JAX&$37u8MC(ZMzw`$e6f&{ z?Uf&?S%nPjAgyGy`q)*&F^rD1w10nb{7iL5_ZhBKN2HYiqOj9+rHCAr{NXf}xC2ib zm!(6>(!o9s#p?r_H0s=gU|&UA#J~L~J2`-Rl=HQ~Tf4Tfxvk!>D>I^^h z)DCFhn_7Q5Ap&rh6UMZ?ZOor+#ivuyc`%`=Ua*75J)RZF$5u2 zfhn~YJ2t<)T#S5%hWNNnXJiatD_&&x^yUs5q&y1ZyNT&wR{dEzIFquKF zZ>%ytDn>az3g(76L4VwwF3FQ%<;)H65i~8AOS#J34mp}If?^gR{G41?{h(cRB1VuT zPS1t0qBuq}S^7#DQCK4Xi!<~1P9R=1ma$bDijHhRBGpxSS?RCR7D@HXL(=`oi^fC{ zbU>4m=$9p>D5pdv5lI64GWjc21?nRC@~#qGWzmK2zOuY%T*0wTK^6*5N-SR<;$D7> zE+5JEdpDSF>cj!=biL@ebEiNwTLmkhqcFX^JZ1yr5B{YceHwOz^k4n(Tr zi|I_8WDkvAlymG3c!4hXkp~o7=|Ps%#6Rgc%{#(yX}a9>ls}$!eA}+ae$XM2a9b`C z>Aua6zfSou&K_HtUE!`|MY?2s)Hft?iK0eE?RZGCs`WLo2k@Qj9zYDU*huj!MVkbB zx9xg~j_`AHck%dju4q#-Z@o6N6HU;@uP$*wobB&`_(IY6^*_sb9U)B)UK4bont|;p z4M-AxxLJN-1bgGk)Qr)vqs`b4bka7q9Fq)J;;J$XH}%lpj_jPRN*mK$$7|o^>&<1( zge6fS%Z%-&Yx)M$EWwy~5IG|bqRE@|`yCV@O+B(buzCyptxYO8QQC~5&AUCh6$ zv)ZvSj18d7^?5`j1G%f65`n;ic+YcK-Xh#tkwZJoYccZ>%dMWl$iS9;SpL?B& z{Fa?6qm!5K?gkw(m4YZ;v5af)Or^T{l=iXL7nY_Mmu8liaVMMfbt^7V(Y?f`VW+dn zIj+d2PXf}}o=TObqu_ug%2~3=rprdTmavO6)`CgE-`Zso@Y6zb?_#5@RFc*moFv1w z!~A-yQsB0mj(3@S&aHX03uR5ZY0%g6M-K^s>32UW*Q1rei-RMjbvV8igw(;WO`;ws z!qVk4mtUHEKA;1S#UlCq=i;=UDp87PY-7g#(8(?}xt$IB8@KIxV=k@GdH zP@9Sex79ktNhVImb9zb*Vx1|F%F0Z_#&Ft5yFKH82uR5p?(|Phs#0;qO-m&yZXupj zGVWe4K_HaU%0VfeYoT&@AuaT4XFH8by)1Q^b;@h~BX3T=A@@8>sorZgZ7&|!w(Gi= z^kdaZWt2SK>v^QR@g$Fa*RT;@85^sQUc2P_Z;g(xj!w6StdXg8duk!NS>JTI-}0yC zCYEL=rYF;0h0#Lkfx2_`&%$3P`Gi!pCnd=aQGMO+r@ZECS!Ct4EO0I-hson_nf1DJ zx5MDAWt!768S`dqGkkTsdi%|rjfLTBbMuy8Z(f|ZeI>l+R^EC;IGLwgLL|kYtr|G} z3h8}eu+y-w!NeVL1?|d={aS`(s60#L1N+%~>6k6Yig>LNtuzK3YHD$kLTDi#dI9o1 zqg)M&ye+@ccD41RGdzz7hUF63p2%jiHUAo%;7Ybb;V5bV3$e^eI8(*j5)UYaAH$->E^<*djr!l5g2 zyugR6)&di-xs>-@HhmPiWebf~o%X0GDT>?@#lT@c%6hga@20(zWPL=-iU^tW zJw-XA$X&CNgJ@^8yp~#e%-7dz1#xIX_halnQOcv%omkh4*PTWLyDYfg)xGr{!7iqPPG3gpe z+~Q&vfDx@J-d^)^Qj;_kSQB_hloTZFtUbKWd9z68eC-6cY4gIR!a0+;?VNJWC^8ms zr@*q`4lUc5x8rR;+%)Er4WDTPHiy-D2b-J`Xt$2njEP3e@oJ(PK%v|~Dm#X>9x=gB zkk+C5C~?6ozHo@G?K!v*xB~rC>^2qtW2O4Z37|uT)4i#H!>mD|Tp!SCSz)P1iq_%cNu1os4q~~ynL#d_U5sJ5 zY$80H9K%<(cD9$?i!Lgq#;aUnHO6HjBMZi$E-&4K|b zml}bvN;$qfBRXAxF z#E<)ud6cqKr)c%z)6lH6(-Q1iVJe9uWCMEb2 zv)S?ihfz`%cxg0~{W~4kQ}mt8UCM&@SQ)!Y%eVcl9n*u=XH%(g1ztVAviok}-%&=q zNk;yxOP(Lwb>H6{40eoCXzhAfLO+E~8?A-Y~ZF2|P zl5e+z9c)R)3WlnrW~@6Q5*%K0S}M|<{)SjhkB~n zYz*$G<>p$b9Gz@j;Jxb)5&huHN3-2b9D2DUhjx*}bZKcgO-B}OzQYT4l*ew&zBV(t zuy8$P`{;306=)f4}T*=zx=R3{0%mnT(w-pRX-%SN|rCVX`&tbEi;BU%7$&cM05k=;pV#QZwptnI-kwB&Rr)= zSSrIp68vDp*1fFjJXAPK`H<(YwIe&kr0K&oy;oB_C&8zfZa=6cx-QUFN=A-g;5q^4 z7sz2pA;VP0aYR)!3S%8{tTIl{Z>#VdsjiORlb>FB&<+3-DWW0f+1}TQG|m9r#UpGA zPru4-3V17nLE@Ah*A(Wh1=@u1wi)@}sMj1GDz|o=KqKj+`1|nWyi!EYF9~u6Xi3Vm zi~8m-a>T8;Ol?N<$6WMRPTZjSaQRfobeR*GG zx3_PAL?*v1+ydgAkfa$n?-zEk3nBsDNdk3|0M@eeH2X|quGgIAMk%mE+OFu~v=TojB|OuJ8EEe4|3u4t%lC}s;m%|!%1O3;NM|>N zqL-&8fBrS?J4LrVyaVO(NLeZrh>V6Yjy)IjV+IZ-fWRDwn<)B`MBG7%Ax#as$14wt zGOde=WX~|hoFK9-OhRmHy?L53*2NgBGXCI=MILMtI>i`!gt6XkToloD1{*a_;s-!a zhxVPe9mOS_m3u-#4QxAH3qn8eBhv-!lZ>&C3)pz$kPcvB$w|x*3Mcp^xFY)cQeMG6S?t*=U!AERq56XMq*Jg zfq0fNcK`l;Ru`G|YHTsa>TGW4d49T)y%()H!C3Eo;2OGYo<0 z=c$6Qf`$T(qLz_~O~d#b&y@Ct?_o3%`X>6P`xs-rpF-!1p^iifWUB8u!6gu*YC#i~ zz0k`T!)Rc}*2a(k%|J_D90)UI^dUiZBO)G{o)q6lwC|(Z_c87JLtTtvfBjK`MAVHa zqzlAx9HNmJ2o<|S~9N7gzbzcyU?gC+GUl5M%0%14{p@%Wn4w|9a;CzDT1%ZFOUtn`XXThE)`9(33 z3D1BAKsRO(l*Eu9RlsPBvC9I$g)YXfif_1^|DgE(^ZWPjzaqZxQ~J4~Z!q?G#(tZA zf0MD#F!oKxx_*nXuCFuJdk>s;54MM6I3~73;;bH)%cL#$za{vY{QC5&6uIXXxM{!0;Twebe7=| z2l5+Dm){tlmPFoPI?LFlE-bQxL>^`AGmsMO-`v0dZ}0c8do(niqM_-O7%V`YU64nY zD;R+Be{8T~yll0@(Dq_?$G~2(rrj{E?F4pMdd=8!!nkd^#%ot6jF&@ut7cR#TmY3l z7=&KN&KJTx*gto|ksqPzyi%M(`@aq$hDdNeKwY8&PVeAf$6 z_#Ge0;P)dBSpUxGKc%%kjsMDE8A%Iah ztV*VqGU>K)gS)Q#a`Y`9jzzasp+CPsv* z>GIOToMA}B3|0(INr%o%;(s^rXn4szdiPoJE_3Y5F6ZwWwvvzOTv=eR8GCLpd zw1yovbE;uQ;PVX=McwF{8+x3v&v&usSi^}n%RIbV5@;#`8pi)Fc7#QZda7T0a?QUL znXy?&uM+KmH;|ae%CJdyEV%SxijNv~QVHHY=*Q64LKOirpVh0Y_frayr!f}?nH-~L zV`dFp(wsZX1HC$~j(`VX?Ql$YY-qFseMkFK!PUYZsH0Bmg%bn5d#FTP-aY6KrK27Q zm#4msOP%N+2$!e7jY}PuOAjK9&*X6VQ6bBB8)P3u9KW0JACS+*@K(jFIP@c!TIKxy zi(8}(4&ko*dkwGtm}P@b-kZVYGh7(toK8hkn;%) zwyQO4STE_p3|>UEqS%qaFa;;UCESG=It^P!0}Ud2%Qd}7hQqE<#}%P60BESk8)Yn! z$}rSaWQM)n^5W2yac9$U_FV-DW(SdLy&(;3EV{pBFjt zh8HTBg<+T@6L{AjflR&$H3Wq>?AWv8QY3D!mxW&tAn?Ax&96OAFh+)DoCN84oH1Bn zdmdwqtoryHO>Asf0pC9nD#Zw82pO(sPJ~wsL|urushM@d^BpMP1c7v|V#YHANwYf+YgL zb<{vkOXa%bH5^Zo239!qXnt~7W(IZWv94`Kiea;mIcimPp2_6p(QA>NbWRomucCsG zty|Qtd$#KFZ0wfpHGIV@;0$Q*N{kTFoM=-xt;9+RWbpGaXNtwBPm>XmvCkbtIF@1V zeV(y58Dsw)W9;V{W1rwDyDWZjI^pMQLP);F7<-8^_T7xJPcz28mobJlj_+fP{Y}QY zev~oxw-{rvtzIEG_vk$5BJ8G&^-Mp;*!K%^`VeD1f0=~-z1|ZOBJwI@J^$!5W3wXi zZ!^~W^mP$HzTV}(LzKCRBz|Y@77_HNO9`04u2G0Ksksn876Kjwk!=H8hm?~@uf8M~^UFVKB zh-*_zl_4A?7;HJ4p&vV&HJUYDL%KQqyn>&P;OE0M4@a^UXY(>b#sSFN70?*cUBb^r z{EXtKA3xuLp9}c;fY#h+7(4gr!9h$gvAwQ*WB!fhTgxkRwMvD5Pp&TG8xPBJj>-NZ{@zK%Y(xvKHy)&TlKS5ZSFkio z90|?VE)4NM{TbxiyT%aDcVvjrZ0(;Np6|#Gq1ieFGhkW!99F#vJw$>SryG7;y(`9h zA$a&0Na0WeWhgX2v7Bc4o@ZMs2BU(A!M*^Q0pLY2wu`7CPYWl1b22^DJdr-6djn*I z20v`ODj0CAR%p3iTz0&)YHPK^To`V<#)ZxjEOaUvRtgcLG(cV=U5*{a*%rBWDWdaL zYFLEQ&@`hU^Z`%8$Jp8o%>Z|~lS)7y)MPA%?R0G2zng%B%9W0`f_BSp$?W;~4cm0% zjn457JR++q=kwob+wCO&DZPB^zDxyDt>XzArXq=g?CJ6g5~M2tJw4qd&;>2 z%eT)s4LJ6Qm12waV;-|^)1s1H0>O9Xqi@QyK3$v z3q$i;cCy0vf_f+i0&`8zj>}@3X9<^?NJx+iGA@}d5q#tb6@8#H z5oFinQfhvTo|6&l4z2-`u+e@Q<0XuTnj+W<;)|Iasi>CeH4{+R%bhZ<P9iZSdbjSnrdQsI?Ld_%p(^IzZ|h*C!LBYG@{_nn zUVkf)HzTQVkW~Qb$Npev^q3JahkW5Y6 z^=3dClq}@E>57QP!erF;G*SKj!esVc9GlA|Jy)32#XKdSI8!}Qd}4ho?u&K3FEC(e zs6+$9U{l#FGgx#YCnDuc$21Iq8VHdlwnJzw5>pve2Tm($rPRC(6p>)vD#fip4XTAu z>QSgh&VY1Uf(LIrc%LRSIp3?B=_S4nlj~xhsn&EK|7HJ1!$I_YVD*uZqKv5qZw~dNOXI29X`c zmQs*tV`ZxzZJ1#);$i@bT6HLus;W>QrJnD4frRHd$ZTQgS z0vNd@6w6XWEfhx;tOOd>Pt--Wp2A$q+17wk`Fvh%T9zHD#6XRRuuN-1p-{`fmtbUX z|2t6(-v5rx4Rte!0eC}tFRemh9k=M@2Sf#cVtEc?7y}pU!rCoO zi)cq>O37jB`R$>SWr9p(KLCe#@TT?jUqC!2p^hgrnA|P3ojj}`$ zR4qxEWz-~!HG3v#Ji_+&D788b1UY_OZrzFFay|4nwb2MuDnGD2I{HjAM_CjwB4czb zE9RLBTGXy{ai*_^W4chBq8!?m+CPA5)#GqIDn;$OI0q*S#~|5Erl;seg6KEu?TGqV zrX3#)@NBe zSGK|!R?z4<(uMSVBLU8C+-#CJLp!$0+sz?!yD46S;N*2&Tr=_d)wQXG`75(mX`dob zRkFP;S|h;u9WWVSEdkc?+Q>*{WJG1XF}u7nGhdVyN8M!BWn?{Dt&9&=E0+eVmo5!n z8do5eX66=FW{N;af6FL+g-Yj(`N-OXiq9=f7iLT&y5+aMm^Ms+c_h2z-4u2FCvx+^ zd*MRxnGX2E86%@it9b%u0aA~ zx$_NcGh7SIc+DKYW!+vf$DPso)m!ew=)|khTyXo1v7t*hD_!hdkJ-ZNh3A&L7%s%b z=3R)x!7g_0dGdc>E0;sN3GV_srD}4e^2IKyF%5qu`u-G2@KJn=6K3fqk)2JEGFN51 z0O}ov(DR~+P*ddhHTtIG)N<1YA0Fw%5ze8~p}(&4oziq8&Cg@6M>htqM!R9>X26j0 z?Z69KcEeF7Fo+-(m{YGHVnRFe-7PyTn+@HZOVd^vweE*>)p|&DwI2&7gbj?WG`Ul@ zc_5ZT8>H!|a7a;v3xi{R;MF2qrloL?e$k>*yTCGWDIFT(2l-m<$gxs3Jv2Lsx#LGA zI>0OXR9QxOMnpFvD=4*0l_Cwgt?d#^$Fw@egdJnhK3Nl3f0BwKrertad!ZDYlIcm6 z%Or9_@DCpHUYzaOYKM@oo5b%Fk?%>$4ltsC3cZmM%?CI^w5%G}T= zk075^EH2uU?L%LsBDKYgT%1-RsFG+xtL?^42@cMJjZoWohfaV=Exizi0fVDW14TnZ zvKnD;1*&$!W+)db$hNQVML-SJ=FiMJD$0s>qM=fwo-7B`Ja{`D1`eXIASl&+KaSv8 zxC9Ra5=lAy2D*7378Hd-*zx?_K#4A(J&JrcB-)eM*-%m8eIZgj54zKqp=3>fR-9c= z>o`5)$T8kMU2{WkGxqsz_7u~UkU`p;HW;?c41450-_71r7+o8!R4V1?^|+k=0=z(O z{Uxl|c2u=rDF}KsLn;f=KOw!-lxBZALo?Er)jC5AK*P7n&?#728zEgQ-Lx7!QHk zMsQFcf`mJP@@-#jvPK_hQ4$DfNIHm+VGwI#4h-&!?39g$TgW`WVV^(3RW=NNcwpVc z*n$TFO@0HO{04o>^pNH98*iBgOH%S1Rz>;UucgNhW*J`AzTy8shL36Amx>ai;Q4JW{WrAq zzoVu9rr0oy=XbUAzo(`Dr&{{o*V6ximL854WPScnOaITb^#5E-|N05gIh`*NoAogr z!Paxy0{pBVg_9uM0ZEq(KZ;q-8HAI!onxu+vj{(fna#0O5l=&U!ka`s>N!N!WR!$P zrwHB)XlIc{l}=t};Bun(DTKdQrl(rLMMdw^6rL)*A4M45ymXa?ihwn)_eWAiPP zKZ@`RvIq*t)vmpt%ZHC49EUKIs#5w7B76YhV<|ZBQqx<_hhIkc&*b4uApFY+znp?| z72*FVAASwtznTx9MfktW!@rL3{~h78DfsZd(R(qUejedt2)~g^|5=1vl>U7>A$<_8mk)u>od&A(iVZi28of zkaVtph^W6NqP_z6bE+X<1)kRd?Q>XC>aGq-A|Sr~Wkfd-{Z&o`u#g}##r_InH&pD2 z8ISy7q&oOlk>)m~!Q~FB;9sLUiI)7FC|lx~p#M5j{D4UDYrJ?|W}=G!4J7zMJ;5=@ z3)*oCEx(CGKP(fas_?aZ6^7DP_$|E(U*lEi*Q@Y#y$Y1zgs|15D)HNTCBBxb#5eMl z7*1E>cl1hpgI5B#vnf1$Q?CRiIPSOOEFykaufsP|b@)9*{f`1iKVQ@r{}d_yNTm3^ zf;#*@68y2A;CK{To|*29KR~K~AycL5@U46uGM({xX};AC)$uyaKk(q)%TH|f9)+eX?DH_8VS<5!MR@T31W!kjfkx#o<2p{*Z?R4@ z*p5oJ8O5ccLEN}Ixb3)(9}m(gK$yMHzD@zg>asCoMs!I@CJ6d3Rw{T-ti_UrlreUj zSAyQRxp|q^l5yTt?lF){erPws!HaMO#+UFg3pfWY{v0f#aA?I{Qe&z4j67ab+VuRG zmYmTlnk8uU(U&tao1$o^9Bl?!(>6@Xc_-!#q5-7uW8R4{nl|bYa#m})j;ZVhz(Ek? zwBk{|`TL Bs+<4- literal 0 HcmV?d00001 diff --git a/MikroNUC/20260816/20260816160001-Config.rsc b/MikroNUC/20260816/20260816160001-Config.rsc new file mode 100644 index 0000000..2125254 --- /dev/null +++ b/MikroNUC/20260816/20260816160001-Config.rsc @@ -0,0 +1,5534 @@ +# 2026-08-16 15:00:01 by RouterOS 7.23.3 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\r\ + \n\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n\r\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n\ + \n:global MkDir;\ + \n\r\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\r\ + \n\r\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=LAN +/ip neighbor discovery-settings +set lldp-mac-phy-config=yes lldp-max-frame-size=yes lldp-med-net-policy-vlan=\ + 1 lldp-vlan-info=yes +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set ca-certificate=WiFi-CAPsMAN-CA-7DB23C23C976 certificate=\ + WiFi-CAPsMAN-7DB23C23C976 enabled=yes interfaces=Bridge-LAN package-path=\ + /tmpfs/capsman-packages require-peer-certificate=no upgrade-policy=none +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-name=Europe/Amsterdam +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260816/20260816160001-Diff-Config.rsc b/MikroNUC/history/20260816/20260816160001-Diff-Config.rsc new file mode 100644 index 0000000..352d272 --- /dev/null +++ b/MikroNUC/history/20260816/20260816160001-Diff-Config.rsc @@ -0,0 +1,7 @@ +5421,5423d5420 +< /ip neighbor discovery-settings +< set lldp-mac-phy-config=yes lldp-max-frame-size=yes lldp-med-net-policy-vlan=\ +< 1 lldp-vlan-info=yes +5488a5486,5487 +> /system gps +> set set-system-time=yes -- 2.52.0