Merge branch 'dhcp-to-dns' into next

bump required RouterOS version for all scripts
dhcp-to-dns: allow to ignore for specific lease
2026-07-30 13:11:36 +00:00 · 2026-07-08 16:07:46 +02:00 · 2026-07-08 16:07:46 +02:00 · 2026-07-08 16:07:46 +02:00 · 2026-07-08 16:07:46 +02:00 · 2026-07-08 16:07:46 +02:00
3 changed files with 73 additions and 1 deletions
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@ -55,6 +55,39 @@ Then continue setup with
 [scheduled automatic updates](README.md#scheduled-automatic-updates) or
 [editing configuration](README.md#editing-configuration).

+## Install from mirror
+
+In case you have issues with my default source using a mirror may help.
+Just replace the first lines for updated variables.
+
+> 💡️ **Hint**: You may want to set the same *url* with `ScriptUpdatesBaseUrl`
+> in `global-config-overlay`.
+
+> ⚠️ **Warning**: The mirrors do not provide checksums. Each invocation of
+> `$ScriptInstallUpdate` takes longer and generates more traffic, as every
+> script needs to be downloaded for local check!
+
+### Install from git.eworm.de
+
+      :local BaseUrl "https://git.eworm.de/cgit/routeros-scripts/plain/";
+      :local CertCommonName "Root YE";
+      :local CertFileName "Root-YE.pem";
+      :local CertFingerprint "e14ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666";
+
+### Install from Github
+
+      :local BaseUrl "https://raw.githubusercontent.com/eworm-de/routeros-scripts/main/";
+      :local CertCommonName "Root YR";
+      :local CertFileName "Root-YR.pem";
+      :local CertFingerprint "e57b7e6f150c419102e8d5c055729ff967b9d1a829bf00cec89ca604ebf4a86f";
+
+### Install from Gitlab
+
+      :local BaseUrl "https://gitlab.com/eworm-de/routeros-scripts/raw/main/";
+      :local CertCommonName "Sectigo Public Server Authentication Root R46";
+      :local CertFileName "Sectigo-Public-Server-Authentication-Root-R46.pem";
+      :local CertFingerprint "7bb647a62aeeac88bf257aa522d01ffea395e0ab45c73f93f65654ec38f25a06";
+
 ## Fix existing installation

 The [initial commands](#initial-commands) above allow to fix an existing
--- a/certs/Makefile
+++ b/certs/Makefile
@ -13,7 +13,7 @@ DOMAINS_DUAL = \
 	dns.google/GTS-Root-RX \
 	dns.quad9.net/DigiCert-Global-Root-G3 \
 	git.eworm.de/Root-YE \
-	gitlab.com/USERTrust-RSA-Certification-Authority \
+	gitlab.com/Sectigo-Public-Server-Authentication-Root-R46 \
 	lists.blocklist.de/GTS-Root-R4 \
 	matrix.org/GTS-Root-R4 \
 	raw.githubusercontent.com/ISRG-Root-X1 \
--- a/certs/Sectigo-Public-Server-Authentication-Root-R46.pem
+++ b/certs/Sectigo-Public-Server-Authentication-Root-R46.pem
@ -0,0 +1,39 @@
+# Issuer: CN=Sectigo Public Server Authentication Root R46 O=Sectigo Limited
+# Subject: CN=Sectigo Public Server Authentication Root R46 O=Sectigo Limited
+# Label: "Sectigo Public Server Authentication Root R46"
+# Serial: 156256931880233212765902055439220583700
+# MD5 Fingerprint: 32:10:09:52:00:d5:7e:6c:43:df:15:c0:b1:16:93:e5
+# SHA1 Fingerprint: ad:98:f9:f3:e4:7d:75:3b:65:d4:82:b3:a4:52:17:bb:6e:f5:e4:38
+# SHA256 Fingerprint: 7b:b6:47:a6:2a:ee:ac:88:bf:25:7a:a5:22:d0:1f:fe:a3:95:e0:ab:45:c7:3f:93:f6:56:54:ec:38:f2:5a:06
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Author	SHA1	Message	Date
Christian Hesse	7f6cbd456d	Merge branch 'dhcp-to-dns' into next	2026-07-08 16:07:46 +02:00
Christian Hesse	89f1c54543	bump required RouterOS version for all scripts	2026-07-08 16:07:46 +02:00
Christian Hesse	bda5992376	dhcp-to-dns: allow to ignore for specific lease	2026-07-08 16:07:46 +02:00
Christian Hesse	3844685f95	global-functions: $NetMask6: use shift operator... ... and drop the workaround. This requires RouterOS 7.22beta3.	2026-07-08 16:07:46 +02:00
Christian Hesse	12940a6f3b	update list of contributors	2026-07-08 16:07:46 +02:00
Christian Hesse	d37772a1f5	Merge branch 'break-in-loop' into next	2026-07-08 16:07:46 +02:00
Łukasz Witkowski	b46b437a2a	dhcp-to-dns: allow to specify domain for CNAMEs... ... in network or lease.	2026-07-08 16:07:46 +02:00
Christian Hesse	cce5b9288a	Merge branch 'continue-in-loop' into next	2026-07-08 16:07:46 +02:00
Christian Hesse	b1126486cd	telegram-chat: fix indention	2026-07-08 16:07:46 +02:00
Łukasz Witkowski	8f84583c0b	dhcp-to-dns: set $LeaseInfo	2026-07-08 16:07:46 +02:00
Christian Hesse	6bee5e6750	Merge branch 'early-exit-with-exit' into next	2026-07-08 16:07:46 +02:00
Christian Hesse	486d53f699	dhcp-to-dns: fix indention	2026-07-08 16:07:46 +02:00
Christian Hesse	25c4c87f82	telegram-chat: use :break in loop	2026-07-08 16:07:46 +02:00
Łukasz Witkowski	c97e7b1aad	dhcp-to-dns: convert DNS names to lower case	2026-07-08 16:07:46 +02:00
Christian Hesse	78f2370fa9	Merge branch 'compare-ids' into next	2026-07-08 16:07:46 +02:00
Christian Hesse	88197acd76	global-functions: deprecate $ExitError	2026-07-08 16:07:46 +02:00
Christian Hesse	fd7d7e2bb3	dhcp-to-dns: use another :continue in loop	2026-07-08 16:07:46 +02:00
Christian Hesse	721ee221ea	check-certificates: use :break in loop	2026-07-08 16:07:46 +02:00
Christian Hesse	3ad2651ca2	dhcp-to-dns: support to ignore networks Closes: https://github.com/eworm-de/routeros-scripts/issues/119	2026-07-08 16:07:46 +02:00
Christian Hesse	b7353fd7f7	global-functions: deprecate $HexToNum	2026-07-08 16:07:46 +02:00
Christian Hesse	3173dce47b	update-tunnelbroker: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	4dcd1ad4eb	dhcp-to-dns: use :continue in loop	2026-07-08 16:07:46 +02:00
Christian Hesse	90d271d563	log-forward: fix indention	2026-07-08 16:07:46 +02:00
Christian Hesse	9c92ff6b09	update-gre-address: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	fe6c5d48eb	telegram-chat: use :continue in loop	2026-07-08 16:07:46 +02:00
Christian Hesse	697cb9a269	log-forward: use comparison for ids This was introduced with RouterOS 7.22beta1. Initializing $LogForwardLast with boolean value looks odd, but this is required to match the very first message.	2026-07-08 16:07:46 +02:00
Christian Hesse	00e717b9e5	telegram-chat: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	e59e47b4a7	netwatch-dns: fix indention	2026-07-08 16:07:46 +02:00
Christian Hesse	35958dbcab	sms-forward: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	ca7bf6f21d	netwatch-dns: use :continue in loop	2026-07-08 16:07:46 +02:00
Christian Hesse	986f64a2ec	sms-action: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	9d16a613f9	netwatch-dns: fix indention	2026-07-08 16:07:46 +02:00
Christian Hesse	957290397d	ppp-on-up: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	0d66c6c406	netwatch-dns: use :continue in loop	2026-07-08 16:07:46 +02:00
Christian Hesse	71aa5c9df8	packages-update: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	d1b0544610	global-functions: $ScriptInstallUpdate: fix indention	2026-07-08 16:07:46 +02:00
Christian Hesse	d063b8b602	ospf-to-leds: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	e6680834bc	global-functions: $ScriptInstallUpdate: use :continue in loop	2026-07-08 16:07:46 +02:00
Christian Hesse	4ec6d886e7	netwatch-notify: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	697d1a6a45	global-functions: $CleanName: use :continue in loop	2026-07-08 16:07:46 +02:00
Christian Hesse	debe35a952	netwatch-dns: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	d73b80b648	fw-addr-lists: fix indention	2026-07-08 16:07:46 +02:00
Christian Hesse	534027370c	log-forward: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	97fd06ca03	fw-addr-lists: use :continue in loop	2026-07-08 16:07:46 +02:00
Christian Hesse	04c77d11cc	ipv6-update: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	e4187ee12b	ipsec-to-dns: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	4e98986e2c	hotspot-to-wpa-cleanup: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	5fe843fa59	hotspot-to-wpa: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	f423cfd4fe	gps-track: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	1264b19cba	fw-addr-lists: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	2b09e3cebc	firmware-upgrade-reboot: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	291922af3e	dhcpv6-client-lease: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	447063060d	dhcpv4-server-lease: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	fba21f2cf0	dhcp-to-dns: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	1f39138a34	dhcp-lease-comment: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	b4a9f48698	daily-psk: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	766a699fff	collect-wireless-mac: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	45780599b7	check-routeros-update: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	6efe4fe50b	check-perpetual-license: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	065acd614a	check-lte-firmware-upgrade: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	1772c1b859	check-health: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	b87950045c	check-certificates: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	023aae9e24	certificate-renew-issued: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	19439e6aba	capsman-rolling-upgrade: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	0e8c951187	capsman-download-packages: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	93b5327006	backup-upload: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	add430c664	backup-partition: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	92b9f1edd7	backup-email: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	9272568ebe	backup-cloud: early exit with :exit	2026-07-08 16:07:46 +02:00
Christian Hesse	4480282079	INITIAL-COMMANDS: warn on missing checksums	2026-07-08 16:07:44 +02:00
Christian Hesse	e906deda04	INITIAL-COMMANDS: give hint on url in global configuration overlay	2026-07-08 16:07:19 +02:00
Christian Hesse	5f32948f20	INITIAL-COMMANDS: give option to install from mirrors	2026-07-08 16:06:53 +02:00
Christian Hesse	0c69d49480	certs: add 'Sectigo Public Server Authentication Root R46'... ... to use with gitlab.com for mirror. curl -d '["Sectigo Public Server Authentication Root R46"]' https://mkcert.org/generate/ \| grep -v '^$' > certs/Sectigo-Public-Server-Authentication-Root-R46.pem	2026-07-08 15:29:36 +02:00
Christian Hesse	b960a9d2fb	global-functions: $ScriptInstallUpdate: log and print error It is no longer expected to fail... So let's complain.	2026-07-08 15:29:36 +02:00
Christian Hesse	aa14c26488	global-functions: $ScriptInstallUpdate: skip checksums if not rsc.eworm.de The file is not in git repository, but generated when deploying to my server only.	2026-07-08 15:29:36 +02:00