From ffa31c7ad797eb63a896d241651773423c7126aa Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 10:14:26 +0100
Subject: [PATCH 001/988] packages-update: increate log severity on canceled
 non-interactive update

---
 packages-update.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index abcbfd86..e0e1f6de 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -109,7 +109,7 @@
           $LogPrintExit2 info $ScriptName ("Canceled update...") true;
         }
       } else={
-        $LogPrintExit2 info $ScriptName ("Canceled non-interactive update.") true;
+        $LogPrintExit2 warning $ScriptName ("Canceled non-interactive update.") true;
       }
     }
   }

From 3fcdd395fe93a501de297f7678d57b5c1064b05d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 09:19:43 +0100
Subject: [PATCH 002/988] packages-update: support passing backup failure

---
 packages-update.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/packages-update.rsc b/packages-update.rsc
index e0e1f6de..634b7bb4 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -23,6 +23,7 @@
   :global VersionToNum;
 
   :global PackagesUpdateDeferReboot;
+  :global PackagesUpdateBackupFailure;
 
   :local Schedule do={
     :local ScriptName [ :tostr $1 ];
@@ -96,10 +97,15 @@
   }
 
   :foreach Order,Script in=$RunOrder do={
+    :set PackagesUpdateBackupFailure false;
     :do {
       $LogPrintExit2 info $ScriptName ("Running backup script " . $Script . " before update.") false;
       /system/script/run $Script;
     } on-error={
+      :set PackagesUpdateBackupFailure true;
+    }
+
+    :if ($PackagesUpdateBackupFailure = true) do={
       $LogPrintExit2 warning $ScriptName ("Running backup script " . $Script . " before update failed!") false;
       :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
         :put "Do you want to continue anyway? [y/N]";

From c82f7766326f5e24ea81c2fe4a2a745075c86984 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 09:25:56 +0100
Subject: [PATCH 003/988] backup-cloud: pass failure to packages-update

---
 backup-cloud.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index a3dfe0c7..14af7762 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -17,6 +17,7 @@
 
   :global BackupRandomDelay;
   :global Identity;
+  :global PackagesUpdateBackupFailure;
 
   :global DeviceInfo;
   :global FormatLine;
@@ -32,6 +33,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set PackagesUpdateBackupFailure true;
     :error false;
   }
   $WaitFullyConnected;
@@ -74,7 +76,9 @@
     $SendNotification2 ({ origin=$ScriptName; \
       subject=([ $SymbolForNotification "floppy-disk,warning-sign" ] . "Cloud backup failed"); \
       message=("Failed uploading backup for " . $Identity . " to cloud!\n\n" . [ $DeviceInfo ]) });
-    $LogPrintExit2 error $ScriptName ("Failed uploading backup for " . $Identity . " to cloud!") true;
+    $LogPrintExit2 error $ScriptName ("Failed uploading backup for " . $Identity . " to cloud!") false;
+    :set PackagesUpdateBackupFailure true;
+    :error false;
   }
   /file/remove "tmpfs/backup-cloud";
 } on-error={ }

From 5f41bd1c1ec98bea8d7cc1760ff740ded20aa4d1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 09:26:24 +0100
Subject: [PATCH 004/988] backup-email: pass failure to packages-update

---
 backup-email.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/backup-email.rsc b/backup-email.rsc
index 9f6e31a9..e4dec3b8 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -22,6 +22,7 @@
   :global BackupSendGlobalConfig;
   :global Domain;
   :global Identity;
+  :global PackagesUpdateBackupFailure;
 
   :global CleanName;
   :global DeviceInfo;
@@ -46,6 +47,7 @@
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set PackagesUpdateBackupFailure true;
     :error false;
   }
   $WaitFullyConnected;
@@ -109,7 +111,9 @@
   :local I 0;
   :while ([ :len [ /file/find where name ~ ($FilePath . "\\.(backup|rsc)\$") ] ] > 0) do={
     :if ($I >= 120) do={
-      $LogPrintExit2 warning $ScriptName ("Files are still available, sending e-mail failed.") true;
+      $LogPrintExit2 warning $ScriptName ("Files are still available, sending e-mail failed.") false;
+      :set PackagesUpdateBackupFailure true;
+      :error false;
     }
     :delay 1s;
     :set I ($I + 1);

From 51b00181cf6524f173f0464a237bdb63c3f0734a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 09:26:39 +0100
Subject: [PATCH 005/988] backup-partition: pass failure to packages-update

---
 backup-partition.rsc | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 1238fab0..13ed8b97 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -15,21 +15,28 @@
 :do {
   :local ScriptName [ :jobname ];
 
+  :global PackagesUpdateBackupFailure;
+
   :global LogPrintExit2;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set PackagesUpdateBackupFailure true;
     :error false;
   }
 
   :if ([ :len [ /partitions/find ] ] < 2) do={
-    $LogPrintExit2 error $ScriptName ("Device does not have a fallback partition.") true;
+    $LogPrintExit2 error $ScriptName ("Device does not have a fallback partition.") false;
+    :set PackagesUpdateBackupFailure true;
+    :error false;
   }
 
   :local ActiveRunning [ /partitions/find where active running ];
 
   :if ([ :len $ActiveRunning ] < 1) do={
-    $LogPrintExit2 error $ScriptName ("Device is not running from active partition.") true;
+    $LogPrintExit2 error $ScriptName ("Device is not running from active partition.") false;
+    :set PackagesUpdateBackupFailure true;
+    :error false;
   }
 
   :local FallbackTo [ /partitions/get $ActiveRunning fallback-to ];
@@ -45,6 +52,8 @@
   } on-error={
     /system/scheduler/remove [ find where name="running-from-backup-partition" ];
     $LogPrintExit2 error $ScriptName ("Failed saving configuration to partition '" . \
-        $FallbackTo . "'!") true;
+        $FallbackTo . "'!") false;
+    :set PackagesUpdateBackupFailure true;
+    :error false;
   }
 } on-error={ }

From e39e8a00834192211999b89f5f163a35c2214707 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 09:26:53 +0100
Subject: [PATCH 006/988] backup-upload: pass failure to packages-update

---
 backup-upload.rsc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 2b427307..769972b2 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -25,6 +25,7 @@
   :global BackupUploadUser;
   :global Domain;
   :global Identity;
+  :global PackagesUpdateBackupFailure;
 
   :global CleanName;
   :global DeviceInfo;
@@ -45,6 +46,7 @@
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set PackagesUpdateBackupFailure true;
     :error false;
   }
   $WaitFullyConnected;
@@ -151,6 +153,7 @@
       [ $FileInfo "Config file" $ConfigFile ]); silent=true });
 
   :if ($Failed = 1) do={
-    :error "An error occured!";
+    :set PackagesUpdateBackupFailure true;
+    :error false;
   }
 } on-error={ }

From a7cb3e520a86b44cb6e1bdfdf6df24856274e0e3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 09:33:17 +0100
Subject: [PATCH 007/988] global-config: support loading snippets

This adds support for loading snippets, which need a name starting with
"global-config-overlay.d/". This allows to split off configuration if
desired.
---
 README.md            |  5 +++++
 global-config.rsc    | 10 ++++++++++
 global-functions.rsc |  2 +-
 news-and-changes.rsc |  1 +
 4 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 1af718ca..61b17256 100644
--- a/README.md
+++ b/README.md
@@ -139,6 +139,11 @@ Save changes and exit with `Ctrl-o`.
 
 ![screenshot: edit global-config-overlay](README.d/07-edit-global-config-overlay.avif)
 
+Additionally creating configuration snippets is supported. The script name
+of these snippets has to start with `global-config-overlay.d/` to make them
+being loaded automatically. This allows to split off parts of the
+configuration.
+
 To apply your changes run `global-config`, which will automatically load
 the overlay as well:
 
diff --git a/global-config.rsc b/global-config.rsc
index 983eedba..85731c32 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -250,3 +250,13 @@
 } on-error={
   :log error ("Loading configuration from overlay failed!");
 }
+
+# configuration overlay snippets
+:foreach Script in=[ /system/script/find where name ~ "^global-config-overlay.d/" ] do={
+  :do {
+    /system/script/run $Script;
+  } on-error={
+    :log error ("Loading configuration from overlay snippet " . \
+        [ /system/script/get $Script name ] . " failed!");
+  }
+}
diff --git a/global-functions.rsc b/global-functions.rsc
index 7f5ba9fc..d2386f49 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 121;
+:global ExpectedConfigVersion 122;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index c5117cab..46b777a9 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -46,6 +46,7 @@
   119="Added support for IPv6 to script 'fw-addr-lists'.";
   120="Implemented a workaround in 'backup-cloud'. Now script should no longer just crash, but send notification with error.";
   121="The 'wifiwave2' scripts are finally gone. Development continues with 'wifi' in RouterOS 7.13 and later.";
+  122="The global configuration was enhanced to support loading snippets. Configuration can be split off to scripts where name starts with 'global-config-overlay.d/'.";
 };
 
 # Migration steps to be applied on script updates

From 1feeed145d6b63ef60fc3c0abbe0703b7bd73837 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 10:38:09 +0100
Subject: [PATCH 008/988] global-functions: introduce $LogPrint, deprecate
 $LogPrintExit2

---
 global-functions.rsc | 21 +++++++++++++++++----
 news-and-changes.rsc |  1 +
 2 files changed, 18 insertions(+), 4 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index aca4cd82..1220ecaf 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 122;
+:global ExpectedConfigVersion 123;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
@@ -53,6 +53,7 @@
 :global IsFullyConnected;
 :global IsMacLocallyAdministered;
 :global IsTimeSync;
+:global LogPrint;
 :global LogPrintExit2;
 :global LogPrintOnce;
 :global MAX;
@@ -654,12 +655,11 @@
   :return true;
 }
 
-# log and print with same text, optionally exit
-:set LogPrintExit2 do={
+# log and print with same text
+:set LogPrint do={
   :local Severity [ :tostr $1 ];
   :local Name     [ :tostr $2 ];
   :local Message  [ :tostr $3 ];
-  :local Exit     [ :tostr $4 ];
 
   :global PrintDebug;
   :global PrintDebugOverride;
@@ -692,6 +692,19 @@
   :if ($Severity != "debug" || $Debug = true) do={
     :put ([ $PrintSeverity $Severity ] . ": " . $Message);
   }
+}
+
+# log and print with same text, optionally exit
+# Deprectated! - TODO: remove later
+:set LogPrintExit2 do={
+  :local Severity [ :tostr $1 ];
+  :local Name     [ :tostr $2 ];
+  :local Message  [ :tostr $3 ];
+  :local Exit     [ :tostr $4 ];
+
+  :global LogPrint;
+
+  $LogPrint $1 $2 $3;
 
   :if ($Exit = "true") do={
     :error ("Hard error to exit.");
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 46b777a9..6b0a538f 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -47,6 +47,7 @@
   120="Implemented a workaround in 'backup-cloud'. Now script should no longer just crash, but send notification with error.";
   121="The 'wifiwave2' scripts are finally gone. Development continues with 'wifi' in RouterOS 7.13 and later.";
   122="The global configuration was enhanced to support loading snippets. Configuration can be split off to scripts where name starts with 'global-config-overlay.d/'.";
+  123="Introduced new function '\$LogPrint', and deprecated '\$LogPrintExit2'. Please update custom scripts if you use it.";
 };
 
 # Migration steps to be applied on script updates

From ac3b755fdc630d4daa40a9ba5254d92f8a91b03f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 009/988] backup-cloud: switch to $LogPrint

---
 backup-cloud.rsc | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 14af7762..cccb41b6 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -22,7 +22,7 @@
   :global DeviceInfo;
   :global FormatLine;
   :global HumanReadableNum;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MkDir;
   :global RandomDelay;
   :global ScriptFromTerminal;
@@ -43,7 +43,8 @@
   }
 
   :if ([ $MkDir ("tmpfs/backup-cloud") ] = false) do={
-    $LogPrintExit2 error $ScriptName ("Failed creating directory!") true;
+    $LogPrint error $ScriptName ("Failed creating directory!");
+    :error false;
   }
 
   :execute {
@@ -76,7 +77,7 @@
     $SendNotification2 ({ origin=$ScriptName; \
       subject=([ $SymbolForNotification "floppy-disk,warning-sign" ] . "Cloud backup failed"); \
       message=("Failed uploading backup for " . $Identity . " to cloud!\n\n" . [ $DeviceInfo ]) });
-    $LogPrintExit2 error $ScriptName ("Failed uploading backup for " . $Identity . " to cloud!") false;
+    $LogPrint error $ScriptName ("Failed uploading backup for " . $Identity . " to cloud!");
     :set PackagesUpdateBackupFailure true;
     :error false;
   }

From 4b69144ee476ada47c640f1e5a65952bce7241ec Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 010/988] backup-email: switch to $LogPrint

---
 backup-email.rsc | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/backup-email.rsc b/backup-email.rsc
index e4dec3b8..64ca69ca 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -27,7 +27,7 @@
   :global CleanName;
   :global DeviceInfo;
   :global FormatLine;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MkDir;
   :global RandomDelay;
   :global ScriptFromTerminal;
@@ -38,12 +38,14 @@
   :global WaitFullyConnected;
 
   :if ([ :typeof $SendEMail2 ] = "nothing") do={
-    $LogPrintExit2 error $ScriptName ("The module for sending notifications via e-mail is not installed.") true;
+    $LogPrint error $ScriptName ("The module for sending notifications via e-mail is not installed.");
+    :error false;
   }
 
   :if ($BackupSendBinary != true && \
        $BackupSendExport != true) do={
-    $LogPrintExit2 error $ScriptName ("Configured to send neither backup nor config export.") true;
+    $LogPrint error $ScriptName ("Configured to send neither backup nor config export.");
+    :error false;
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -66,7 +68,8 @@
   :local Attach ({});
 
   :if ([ $MkDir $DirName ] = false) do={
-    $LogPrintExit2 error $ScriptName ("Failed creating directory!") true;
+    $LogPrint error $ScriptName ("Failed creating directory!");
+    :error false;
   }
 
   # binary backup
@@ -111,7 +114,7 @@
   :local I 0;
   :while ([ :len [ /file/find where name ~ ($FilePath . "\\.(backup|rsc)\$") ] ] > 0) do={
     :if ($I >= 120) do={
-      $LogPrintExit2 warning $ScriptName ("Files are still available, sending e-mail failed.") false;
+      $LogPrint warning $ScriptName ("Files are still available, sending e-mail failed.");
       :set PackagesUpdateBackupFailure true;
       :error false;
     }

From b879f8fef2fac123d3929f2964c9528465ce7a42 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 011/988] backup-partition: switch to $LogPrint

---
 backup-partition.rsc | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 13ed8b97..503d3824 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -17,7 +17,7 @@
 
   :global PackagesUpdateBackupFailure;
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -26,7 +26,7 @@
   }
 
   :if ([ :len [ /partitions/find ] ] < 2) do={
-    $LogPrintExit2 error $ScriptName ("Device does not have a fallback partition.") false;
+    $LogPrint error $ScriptName ("Device does not have a fallback partition.");
     :set PackagesUpdateBackupFailure true;
     :error false;
   }
@@ -34,7 +34,7 @@
   :local ActiveRunning [ /partitions/find where active running ];
 
   :if ([ :len $ActiveRunning ] < 1) do={
-    $LogPrintExit2 error $ScriptName ("Device is not running from active partition.") false;
+    $LogPrint error $ScriptName ("Device is not running from active partition.");
     :set PackagesUpdateBackupFailure true;
     :error false;
   }
@@ -47,12 +47,10 @@
         "[ /partitions/get [ find where running ] name ] . \"'!\")");
     /partitions/save-config-to $FallbackTo;
     /system/scheduler/remove "running-from-backup-partition";
-    $LogPrintExit2 info $ScriptName ("Saved configuration to partition '" . \
-        $FallbackTo . "'.") false;
+    $LogPrint info $ScriptName ("Saved configuration to partition '" . $FallbackTo . "'.");
   } on-error={
     /system/scheduler/remove [ find where name="running-from-backup-partition" ];
-    $LogPrintExit2 error $ScriptName ("Failed saving configuration to partition '" . \
-        $FallbackTo . "'!") false;
+    $LogPrint error $ScriptName ("Failed saving configuration to partition '" . $FallbackTo . "'!");
     :set PackagesUpdateBackupFailure true;
     :error false;
   }

From ca822e1358d59f43d2ef359e2ec3cde44c589f46 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 012/988] backup-upload: switch to $LogPrint

---
 backup-upload.rsc | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 769972b2..ef5b7c72 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -30,7 +30,7 @@
   :global CleanName;
   :global DeviceInfo;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MkDir;
   :global RandomDelay;
   :global ScriptFromTerminal;
@@ -42,7 +42,8 @@
 
   :if ($BackupSendBinary != true && \
        $BackupSendExport != true) do={
-    $LogPrintExit2 error $ScriptName ("Configured to send neither backup nor config export.") true;
+    $LogPrint error $ScriptName ("Configured to send neither backup nor config export.");
+    :error false;
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -65,7 +66,8 @@
   :local Failed 0;
 
   :if ([ $MkDir $DirName ] = false) do={
-    $LogPrintExit2 error $ScriptName ("Failed creating directory!") true;
+    $LogPrint error $ScriptName ("Failed creating directory!");
+    :error false;
   }
 
   # binary backup
@@ -79,7 +81,7 @@
       :set BackupFile [ /file/get ($FilePath . ".backup") ];
       :set ($BackupFile->"name") ($FileName . ".backup");
     } on-error={
-      $LogPrintExit2 error $ScriptName ("Uploading backup file failed!") false;
+      $LogPrint error $ScriptName ("Uploading backup file failed!");
       :set BackupFile "failed";
       :set Failed 1;
     }
@@ -98,7 +100,7 @@
       :set ExportFile [ /file/get ($FilePath . ".rsc") ];
       :set ($ExportFile->"name") ($FileName . ".rsc");
     } on-error={
-      $LogPrintExit2 error $ScriptName ("Uploading configuration export failed!") false;
+      $LogPrint error $ScriptName ("Uploading configuration export failed!");
       :set ExportFile "failed";
       :set Failed 1;
     }
@@ -119,7 +121,7 @@
       :set ConfigFile [ /file/get ($FilePath . ".conf") ];
       :set ($ConfigFile->"name") ($FileName . ".conf");
     } on-error={
-      $LogPrintExit2 error $ScriptName ("Uploading global-config-overlay failed!") false;
+      $LogPrint error $ScriptName ("Uploading global-config-overlay failed!");
       :set ConfigFile "failed";
       :set Failed 1;
     }

From e40da1e7e483a07592477ef82c4a665f6b2a7bde Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 013/988] capsman-download-packages: switch to $LogPrint

---
 capsman-download-packages.capsman.rsc  | 16 +++++++++-------
 capsman-download-packages.template.rsc | 16 +++++++++-------
 capsman-download-packages.wifi.rsc     | 16 +++++++++-------
 3 files changed, 27 insertions(+), 21 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index d4e900de..a3bd4a59 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -19,7 +19,7 @@
 
   :global CleanFilePath;
   :global DownloadPackage;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MkDir;
   :global ScriptLock;
   :global WaitFullyConnected;
@@ -34,16 +34,18 @@
   :local Updated false;
 
   :if ([ :len $PackagePath ] = 0) do={
-    $LogPrintExit2 warning $ScriptName ("The CAPsMAN package path is not defined, can not download packages.") true;
+    $LogPrint warning $ScriptName ("The CAPsMAN package path is not defined, can not download packages.");
+    :error false;
   }
 
   :if ([ :len [ /file/find where name=$PackagePath type="directory" ] ] = 0) do={
     :if ([ $MkDir $PackagePath ] = false) do={
-      $LogPrintExit2 warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
-        $PackagePath . ") failed!") true;
+      $LogPrint warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
+        $PackagePath . ") failed!");
+      :error false;
     }
-    $LogPrintExit2 info $ScriptName ("Created directory at CAPsMAN package path (" . $PackagePath . \
-      "). Please place your packages!") false;
+    $LogPrint info $ScriptName ("Created directory at CAPsMAN package path (" . $PackagePath . \
+      "). Please place your packages!");
   }
 
   :foreach Package in=[ /file/find where type=package \
@@ -60,7 +62,7 @@
   }
 
   :if ([ :len [ /file/find where type=package name~("^" . $PackagePath) ] ] = 0) do={
-    $LogPrintExit2 info $ScriptName ("No packages available, downloading default set.") false;
+    $LogPrint info $ScriptName ("No packages available, downloading default set.");
     :foreach Arch in={ "arm"; "mipsbe" } do={
       :foreach Package in={ "routeros"; "wireless" } do={
         :if ([ $DownloadPackage $Package $InstalledVersion $Arch $PackagePath ] = true) do={
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index cd4a83b3..cad3bcb5 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -20,7 +20,7 @@
 
   :global CleanFilePath;
   :global DownloadPackage;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MkDir;
   :global ScriptLock;
   :global WaitFullyConnected;
@@ -36,16 +36,18 @@
   :local Updated false;
 
   :if ([ :len $PackagePath ] = 0) do={
-    $LogPrintExit2 warning $ScriptName ("The CAPsMAN package path is not defined, can not download packages.") true;
+    $LogPrint warning $ScriptName ("The CAPsMAN package path is not defined, can not download packages.");
+    :error false;
   }
 
   :if ([ :len [ /file/find where name=$PackagePath type="directory" ] ] = 0) do={
     :if ([ $MkDir $PackagePath ] = false) do={
-      $LogPrintExit2 warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
-        $PackagePath . ") failed!") true;
+      $LogPrint warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
+        $PackagePath . ") failed!");
+      :error false;
     }
-    $LogPrintExit2 info $ScriptName ("Created directory at CAPsMAN package path (" . $PackagePath . \
-      "). Please place your packages!") false;
+    $LogPrint info $ScriptName ("Created directory at CAPsMAN package path (" . $PackagePath . \
+      "). Please place your packages!");
   }
 
   :foreach Package in=[ /file/find where type=package \
@@ -62,7 +64,7 @@
   }
 
   :if ([ :len [ /file/find where type=package name~("^" . $PackagePath) ] ] = 0) do={
-    $LogPrintExit2 info $ScriptName ("No packages available, downloading default set.") false;
+    $LogPrint info $ScriptName ("No packages available, downloading default set.");
 # NOT /interface/wifi/ #
     :foreach Arch in={ "arm"; "mipsbe" } do={
       :foreach Package in={ "routeros"; "wireless" } do={
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 633830a9..909688f9 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -19,7 +19,7 @@
 
   :global CleanFilePath;
   :global DownloadPackage;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MkDir;
   :global ScriptLock;
   :global WaitFullyConnected;
@@ -34,16 +34,18 @@
   :local Updated false;
 
   :if ([ :len $PackagePath ] = 0) do={
-    $LogPrintExit2 warning $ScriptName ("The CAPsMAN package path is not defined, can not download packages.") true;
+    $LogPrint warning $ScriptName ("The CAPsMAN package path is not defined, can not download packages.");
+    :error false;
   }
 
   :if ([ :len [ /file/find where name=$PackagePath type="directory" ] ] = 0) do={
     :if ([ $MkDir $PackagePath ] = false) do={
-      $LogPrintExit2 warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
-        $PackagePath . ") failed!") true;
+      $LogPrint warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
+        $PackagePath . ") failed!");
+      :error false;
     }
-    $LogPrintExit2 info $ScriptName ("Created directory at CAPsMAN package path (" . $PackagePath . \
-      "). Please place your packages!") false;
+    $LogPrint info $ScriptName ("Created directory at CAPsMAN package path (" . $PackagePath . \
+      "). Please place your packages!");
   }
 
   :foreach Package in=[ /file/find where type=package \
@@ -60,7 +62,7 @@
   }
 
   :if ([ :len [ /file/find where type=package name~("^" . $PackagePath) ] ] = 0) do={
-    $LogPrintExit2 info $ScriptName ("No packages available, downloading default set.") false;
+    $LogPrint info $ScriptName ("No packages available, downloading default set.");
     :foreach Arch in={ "arm"; "arm64" } do={
       :local Packages { "arm"={ "routeros"; "wifi-qcom"; "wifi-qcom-ac" };
                       "arm64"={ "routeros"; "wifi-qcom" } };

From 12435ff1c53e7ef3b8b63b28860a3f35f8146184 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 014/988] capsman-rolling-upgrade: switch to $LogPrint

---
 capsman-rolling-upgrade.capsman.rsc  | 8 ++++----
 capsman-rolling-upgrade.template.rsc | 8 ++++----
 capsman-rolling-upgrade.wifi.rsc     | 8 ++++----
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index 16a34983..11bfd698 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -18,7 +18,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -34,11 +34,11 @@
     :foreach RemoteCap in=[ /caps-man/remote-cap/find where version!=$InstalledVersion ] do={
       :local RemoteCapVal [ /caps-man/remote-cap/get $RemoteCap ];
       :if ([ :len $RemoteCapVal ] > 1) do={
-        $LogPrintExit2 info $ScriptName ("Starting upgrade for " . $RemoteCapVal->"name" . \
-          " (" . $RemoteCapVal->"identity" . ")...") false;
+        $LogPrint info $ScriptName ("Starting upgrade for " . $RemoteCapVal->"name" . \
+          " (" . $RemoteCapVal->"identity" . ")...");
         /caps-man/remote-cap/upgrade $RemoteCap;
       } else={
-        $LogPrintExit2 warning $ScriptName ("Remote CAP vanished, skipping upgrade.") false;
+        $LogPrint warning $ScriptName ("Remote CAP vanished, skipping upgrade.");
       }
       :delay ($Delay . "s");
     }
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index 45a5f8e8..e0effd48 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -19,7 +19,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -41,12 +41,12 @@
 # NOT /caps-man/ #
         :set ($RemoteCapVal->"name") ($RemoteCapVal->"common-name");
 # NOT /caps-man/ #
-        $LogPrintExit2 info $ScriptName ("Starting upgrade for " . $RemoteCapVal->"name" . \
-          " (" . $RemoteCapVal->"identity" . ")...") false;
+        $LogPrint info $ScriptName ("Starting upgrade for " . $RemoteCapVal->"name" . \
+          " (" . $RemoteCapVal->"identity" . ")...");
         /caps-man/remote-cap/upgrade $RemoteCap;
         /interface/wifi/capsman/remote-cap/upgrade $RemoteCap;
       } else={
-        $LogPrintExit2 warning $ScriptName ("Remote CAP vanished, skipping upgrade.") false;
+        $LogPrint warning $ScriptName ("Remote CAP vanished, skipping upgrade.");
       }
       :delay ($Delay . "s");
     }
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 63245dc2..8ec6f26b 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -18,7 +18,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -35,11 +35,11 @@
       :local RemoteCapVal [ /interface/wifi/capsman/remote-cap/get $RemoteCap ];
       :if ([ :len $RemoteCapVal ] > 1) do={
         :set ($RemoteCapVal->"name") ($RemoteCapVal->"common-name");
-        $LogPrintExit2 info $ScriptName ("Starting upgrade for " . $RemoteCapVal->"name" . \
-          " (" . $RemoteCapVal->"identity" . ")...") false;
+        $LogPrint info $ScriptName ("Starting upgrade for " . $RemoteCapVal->"name" . \
+          " (" . $RemoteCapVal->"identity" . ")...");
         /interface/wifi/capsman/remote-cap/upgrade $RemoteCap;
       } else={
-        $LogPrintExit2 warning $ScriptName ("Remote CAP vanished, skipping upgrade.") false;
+        $LogPrint warning $ScriptName ("Remote CAP vanished, skipping upgrade.");
       }
       :delay ($Delay . "s");
     }

From 7c38b9a35c972a9b65c16c581c8da1b4d456b0fe Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 015/988] certificate-renew-issued: switch to $LogPrint

---
 certificate-renew-issued.rsc | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index a360a3f9..45805c54 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -16,7 +16,7 @@
 
   :global CertIssuedExportPass;
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MkDir;
   :global ScriptLock;
 
@@ -36,13 +36,13 @@
         /certificate/export-certificate ($CertVal->"name") type=pkcs12 \
             file-name=("cert-issued/" . $CertVal->"common-name") \
             export-passphrase=($CertIssuedExportPass->($CertVal->"common-name"));
-        $LogPrintExit2 info $ScriptName ("Issued a new certificate for \"" . $CertVal->"common-name" . \
-          "\", exported to \"cert-issued/" . $CertVal->"common-name" . ".p12\".") false;
+        $LogPrint info $ScriptName ("Issued a new certificate for \"" . $CertVal->"common-name" . \
+          "\", exported to \"cert-issued/" . $CertVal->"common-name" . ".p12\".");
       } else={
-        $LogPrintExit2 warning $ScriptName ("Failed creating directory, not exporting certificate.") false;
+        $LogPrint warning $ScriptName ("Failed creating directory, not exporting certificate.");
       }
     } else={
-      $LogPrintExit2 info $ScriptName ("Issued a new certificate for \"" . $CertVal->"common-name" . "\".") false;
+      $LogPrint info $ScriptName ("Issued a new certificate for \"" . $CertVal->"common-name" . "\".");
     }
   }
 } on-error={ }

From 36258087497df000a69cd9544595ba87d216077f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 016/988] check-certificates: switch to $LogPrint

---
 check-certificates.rsc | 32 +++++++++++++++++---------------
 1 file changed, 17 insertions(+), 15 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index edde7f36..75049552 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -22,7 +22,7 @@
   :global CertificateAvailable
   :global EscapeForRegEx;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
   :global SendNotification2;
@@ -39,7 +39,7 @@
     :global CertificateNameByCN;
     :global EscapeForRegEx;
     :global FetchUserAgent;
-    :global LogPrintExit2;
+    :global LogPrint;
     :global UrlEncode;
     :global WaitForFile;
 
@@ -62,7 +62,7 @@
         /file/remove [ find where name=$CertFileName ];
 
         :if ($DecryptionFailed = true) do={
-          $LogPrintExit2 warning $0 ("Decryption failed for certificate file '" . $CertFileName . "'.") false;
+          $LogPrint warning $0 ("Decryption failed for certificate file '" . $CertFileName . "'.");
         }
 
         :foreach CertInChain in=[ /certificate/find where name~("^" . [ $EscapeForRegEx $CertFileName ] . "_[0-9]+\$") \
@@ -72,7 +72,7 @@
 
         :set Return true;
       } on-error={
-        $LogPrintExit2 debug $0 ("Could not download certificate file '" . $CertFileName . "'.") false;
+        $LogPrint debug $0 ("Could not download certificate file '" . $CertFileName . "'.");
       }
     }
 
@@ -143,9 +143,10 @@
 
     :do {
       :if ([ :len $CertRenewUrl ] = 0) do={
-        $LogPrintExit2 info $ScriptName ("No CertRenewUrl given.") true;
+        $LogPrint info $ScriptName ("No CertRenewUrl given.");
+        :error false;
       }
-      $LogPrintExit2 info $ScriptName ("Attempting to renew certificate '" . ($CertVal->"name") . "'.") false;
+      $LogPrint info $ScriptName ("Attempting to renew certificate '" . ($CertVal->"name") . "'.");
 
       :local ImportSuccess false;
       :set LastName ($CertVal->"common-name");
@@ -159,10 +160,10 @@
       :if ($ImportSuccess = false) do={ :error false; }
 
       :if ([ :len ($CertVal->"fingerprint") ] > 0 && $CertVal->"fingerprint" != [ /certificate/get $Cert fingerprint ]) do={
-        $LogPrintExit2 debug $ScriptName ("Certificate '" . $CertVal->"name" . "' was updated in place.") false;
+        $LogPrint debug $ScriptName ("Certificate '" . $CertVal->"name" . "' was updated in place.");
         :set CertVal [ /certificate/get $Cert ];
       } else={
-        $LogPrintExit2 debug $ScriptName ("Certificate '" . $CertVal->"name" . "' was not updated, but replaced.") false;
+        $LogPrint debug $ScriptName ("Certificate '" . $CertVal->"name" . "' was not updated, but replaced.");
 
         :set CertNew [ /certificate/find where name~("^" . [ $EscapeForRegEx [ $UrlEncode $LastName ] ] . "\\.(p12|pem)_[0-9]+\$") \
           (common-name=($CertVal->"common-name") or subject-alt-name~("(^|\\W)(DNS|IP):" . [ $EscapeForRegEx $LastName ] . "(\\W|\$)")) \
@@ -170,12 +171,13 @@
         :local CertNewVal [ /certificate/get $CertNew ];
 
         :if ([ $CertificateAvailable ([ $ParseKeyValueStore ($CertNewVal->"issuer") ]->"CN") ] = false) do={
-          $LogPrintExit2 warning $ScriptName ("The certificate chain is not available!") false;
+          $LogPrint warning $ScriptName ("The certificate chain is not available!");
         }
 
         :if (($CertVal->"private-key") = true && ($CertVal->"private-key") != ($CertNewVal->"private-key")) do={
           /certificate/remove $CertNew;
-          $LogPrintExit2 warning $ScriptName ("Old certificate '" . ($CertVal->"name") . "' has a private key, new certificate does not. Aborting renew.") true;
+          $LogPrint warning $ScriptName ("Old certificate '" . ($CertVal->"name") . "' has a private key, new certificate does not. Aborting renew.");
+          :error false;
         }
 
         /ip/service/set certificate=($CertNewVal->"name") [ find where certificate=($CertVal->"name") ];
@@ -194,9 +196,9 @@
       $SendNotification2 ({ origin=$ScriptName; silent=true; \
         subject=([ $SymbolForNotification "lock-with-ink-pen" ] . "Certificate renewed: " . ($CertVal->"name")); \
         message=("A certificate on " . $Identity . " has been renewed.\n\n" . [ $FormatInfo $CertNew ]) });
-      $LogPrintExit2 info $ScriptName ("The certificate '" . ($CertVal->"name") . "' has been renewed.") false;
+      $LogPrint info $ScriptName ("The certificate '" . ($CertVal->"name") . "' has been renewed.");
     } on-error={
-      $LogPrintExit2 debug $ScriptName ("Could not renew certificate '" . ($CertVal->"name") . "'.") false;
+      $LogPrint debug $ScriptName ("Could not renew certificate '" . ($CertVal->"name") . "'.");
     }
   }
 
@@ -205,15 +207,15 @@
     :local CertVal [ /certificate/get $Cert ];
 
     :if ([ :len [ /certificate/scep-server/find where ca-cert=($CertVal->"ca") ] ] > 0) do={
-      $LogPrintExit2 debug $ScriptName ("Certificate '" . ($CertVal->"name") . "' is handled by SCEP, skipping.") false;
+      $LogPrint debug $ScriptName ("Certificate '" . ($CertVal->"name") . "' is handled by SCEP, skipping.");
     } else={
       :local State [ $IfThenElse (($CertVal->"expired") = true) "expired" "is about to expire" ];
 
       $SendNotification2 ({ origin=$ScriptName; \
         subject=([ $SymbolForNotification "warning-sign" ] . "Certificate warning: " . ($CertVal->"name")); \
         message=("A certificate on " . $Identity . " " . $State . ".\n\n" . [ $FormatInfo $Cert ]) });
-      $LogPrintExit2 info $ScriptName ("The certificate '" . ($CertVal->"name") . "' " . $State . \
-          ", it is invalid after " . ($CertVal->"invalid-after") . ".") false;
+      $LogPrint info $ScriptName ("The certificate '" . ($CertVal->"name") . "' " . $State . \
+          ", it is invalid after " . ($CertVal->"invalid-after") . ".");
     }
   }
 } on-error={ }

From 463393647fc5c28faad5e9c671af8e9b441478c7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 017/988] check-health: switch to $LogPrint

---
 check-health.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-health.rsc b/check-health.rsc
index 91330fc5..2a97ad6e 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -28,7 +28,7 @@
   :global FormatLine;
   :global HumanReadableNum;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -77,7 +77,7 @@
   }
 
   :if ([ :len [ /system/health/find ] ] = 0) do={
-    $LogPrintExit2 debug $ScriptName ("Your device does not provide any health values.") false;
+    $LogPrint debug $ScriptName ("Your device does not provide any health values.");
     :error true;
   }
 
@@ -148,7 +148,7 @@
 
     :if ([ :typeof ($CheckHealthLast->$Name) ] != "nothing") do={
       :if ([ :typeof ($CheckHealthTemperature->$Name) ] != "num" ) do={
-        $LogPrintExit2 info $ScriptName ("No threshold given for " . $Name . ", assuming 50C.") false;
+        $LogPrint info $ScriptName ("No threshold given for " . $Name . ", assuming 50C.");
         :set ($CheckHealthTemperature->$Name) 50;
       }
       :local Validate [ /system/health/get [ find where name=$Name ] value ];

From 7f154a178bf41a6d053cd86e339d8533c0028a51 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 018/988] check-lte-firmware-upgrade: switch to $LogPrint

---
 check-lte-firmware-upgrade.rsc | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index f2a6e37f..e7f06f35 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -35,7 +35,7 @@
 
     :global FormatLine;
     :global IfThenElse;
-    :global LogPrintExit2;
+    :global LogPrint;
     :global ScriptFromTerminal;
     :global SendNotification2;
     :global SymbolForNotification;
@@ -47,19 +47,19 @@
       :set Firmware [ /interface/lte/firmware-upgrade $Interface once as-value ];
       :set Info [ /interface/lte/monitor $Interface once as-value ];
     } on-error={
-      $LogPrintExit2 debug $ScriptName ("Could not get latest LTE firmware version for interface " . \
-        $IntName . ".") false;
+      $LogPrint debug $ScriptName ("Could not get latest LTE firmware version for interface " . \
+        $IntName . ".");
       :return false;
     }
 
     :if ([ :len ($Firmware->"latest") ] = 0) do={
-      $LogPrintExit2 info $ScriptName ("An empty string is not a valid version.") false;
+      $LogPrint info $ScriptName ("An empty string is not a valid version.");
       :return false;
     }
 
     :if (($Firmware->"installed") = ($Firmware->"latest")) do={
       :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
-        $LogPrintExit2 info $ScriptName ("No firmware upgrade available for LTE interface " . $IntName . ".") false;
+        $LogPrint info $ScriptName ("No firmware upgrade available for LTE interface " . $IntName . ".");
       }
       :return true;
     }
@@ -69,7 +69,7 @@
       :put ("Do you want to start unattended lte firmware upgrade for interface " . $IntName . "? [y/N]");
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
           /system/script/run unattended-lte-firmware-upgrade;
-          $LogPrintExit2 info $ScriptName ("Scheduled lte firmware upgrade for interface " . $IntName . "...") false;
+          $LogPrint info $ScriptName ("Scheduled lte firmware upgrade for interface " . $IntName . "...");
         :return true;
       } else={
         :put "Canceled...";
@@ -77,13 +77,13 @@
     }
 
     :if (($SentLteFirmwareUpgradeNotification->$IntName) = ($Firmware->"latest")) do={
-      $LogPrintExit2 debug $ScriptName ("Already sent the LTE firmware upgrade notification for version " . \
-        ($Firmware->"latest") . ".") false;
+      $LogPrint debug $ScriptName ("Already sent the LTE firmware upgrade notification for version " . \
+        ($Firmware->"latest") . ".");
       :return false;
     }
 
-    $LogPrintExit2 info $ScriptName ("A new firmware version " . ($Firmware->"latest") . " is available for " . \
-      "LTE interface " . $IntName . ".") false;
+    $LogPrint info $ScriptName ("A new firmware version " . ($Firmware->"latest") . " is available for " . \
+      "LTE interface " . $IntName . ".");
     $SendNotification2 ({ origin=$ScriptName; \
       subject=([ $SymbolForNotification "sparkles" ] . "LTE firmware upgrade"); \
       message=("A new firmware version " . ($Firmware->"latest") . " is available for " . \

From a996bdac2aa42728676fe2acc1f0b589aae6673c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 019/988] check-routeros-update: switch to $LogPrint

---
 check-routeros-update.rsc | 35 ++++++++++++++++++-----------------
 1 file changed, 18 insertions(+), 17 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index a68762b0..e209610a 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -24,7 +24,7 @@
 
   :global DeviceInfo;
   :global EscapeForRegEx;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptFromTerminal;
   :global ScriptLock;
   :global SendNotification2;
@@ -50,12 +50,12 @@
     :error "A reboot for update is already scheduled.";
   }
 
-  $LogPrintExit2 debug $ScriptName ("Checking for updates...") false;
+  $LogPrint debug $ScriptName ("Checking for updates...");
   /system/package/update/check-for-updates without-paging as-value;
   :local Update [ /system/package/update/get ];
 
   :if ([ $ScriptFromTerminal $ScriptName ] = true && ($Update->"installed-version") = ($Update->"latest-version")) do={
-    $LogPrintExit2 info $ScriptName ("System is already up to date.") false;
+    $LogPrint info $ScriptName ("System is already up to date.");
     :error true;
   }
 
@@ -64,13 +64,14 @@
   :local Link ("https://mikrotik.com/download/changelogs/" . $Update->"channel" . "-release-tree");
 
   :if ($NumLatest < 117505792) do={
-    $LogPrintExit2 info $ScriptName ("The version '" . ($Update->"latest-version") . "' is not a valid version.") true;
+    $LogPrint info $ScriptName ("The version '" . ($Update->"latest-version") . "' is not a valid version.");
+    :error false;
   }
 
   :if ($NumInstalled < $NumLatest) do={
     :if ($SafeUpdateAll ~ "^YES,? ?PLEASE!?\$") do={
-      $LogPrintExit2 info $ScriptName ("Installing ALL versions automatically, including " . \
-        $Update->"latest-version" . "...") false;
+      $LogPrint info $ScriptName ("Installing ALL versions automatically, including " . \
+        $Update->"latest-version" . "...");
       $SendNotification2 ({ origin=$ScriptName; \
         subject=([ $SymbolForNotification "sparkles" ] . "RouterOS update: " . $Update->"latest-version"); \
         message=("Installing ALL versions automatically, including " . $Update->"latest-version" . \
@@ -79,7 +80,7 @@
     }
 
     :if ($SafeUpdatePatch = true && ($NumInstalled & 0xffff0000) = ($NumLatest & 0xffff0000)) do={
-      $LogPrintExit2 info $ScriptName ("Version " . $Update->"latest-version" . " is a patch release, updating...") false;
+      $LogPrint info $ScriptName ("Version " . $Update->"latest-version" . " is a patch release, updating...");
       $SendNotification2 ({ origin=$ScriptName; \
         subject=([ $SymbolForNotification "sparkles" ] . "RouterOS update: " . $Update->"latest-version"); \
         message=("Version " . $Update->"latest-version" . " is a patch update for " . $Update->"channel" . \
@@ -92,8 +93,8 @@
          version~("^" . [ $EscapeForRegEx ($Update->"latest-version") ] . "\\b") ];
       :if ([ :len $Neighbors ] > 0) do={
         :local Neighbor [ /ip/neighbor/get ($Neighbors->0) identity ];
-        $LogPrintExit2 info $ScriptName ("Seen a neighbor (" . $Neighbor . ") running version " . \
-          $Update->"latest-version" . " from " . $Update->"channel" . ", updating...") false;
+        $LogPrint info $ScriptName ("Seen a neighbor (" . $Neighbor . ") running version " . \
+          $Update->"latest-version" . " from " . $Update->"channel" . ", updating...");
         $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification "sparkles" ] . "RouterOS update: " . $Update->"latest-version"); \
           message=("Seen a neighbor (" . $Neighbor . ") running version " . $Update->"latest-version" . \
@@ -109,10 +110,10 @@
             ($SafeUpdateUrl . $Update->"channel" . "?installed=" . $Update->"installed-version" . \
             "&latest=" . $Update->"latest-version") output=user as-value ];
       } on-error={
-        $LogPrintExit2 warning $ScriptName ("Failed receiving safe version for " . $Update->"channel" . ".") false;
+        $LogPrint warning $ScriptName ("Failed receiving safe version for " . $Update->"channel" . ".");
       }
       :if ($Result->"status" = "finished" && $Result->"data" = $Update->"latest-version") do={
-        $LogPrintExit2 info $ScriptName ("Version " . $Update->"latest-version" . " is considered safe, updating...") false;
+        $LogPrint info $ScriptName ("Version " . $Update->"latest-version" . " is considered safe, updating...");
         $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification "sparkles" ] . "RouterOS update: " . $Update->"latest-version"); \
           message=("Version " . $Update->"latest-version" . " is considered safe for " . $Update->"channel" . \
@@ -131,8 +132,8 @@
     }
 
     :if ($SentRouterosUpdateNotification = $Update->"latest-version") do={
-      $LogPrintExit2 info $ScriptName ("Already sent the RouterOS update notification for version " . \
-          $Update->"latest-version" . ".") false;
+      $LogPrint info $ScriptName ("Already sent the RouterOS update notification for version " . \
+          $Update->"latest-version" . ".");
       :error true;
     }
 
@@ -146,8 +147,8 @@
 
   :if ($NumInstalled > $NumLatest) do={
     :if ($SentRouterosUpdateNotification = $Update->"latest-version") do={
-      $LogPrintExit2 info $ScriptName ("Already sent the RouterOS downgrade notification for version " . \
-          $Update->"latest-version" . ".") false;
+      $LogPrint info $ScriptName ("Already sent the RouterOS downgrade notification for version " . \
+          $Update->"latest-version" . ".");
       :error true;
     }
 
@@ -156,8 +157,8 @@
       message=("A different RouterOS version " . ($Update->"latest-version") . \
         " is available for " . $Identity . ", but it is a downgrade.\n\n" . \
         [ $DeviceInfo ]); link=$Link; silent=true });
-    $LogPrintExit2 info $ScriptName ("A different RouterOS version " . ($Update->"latest-version") . \
-      " is available for downgrade.") false;
+    $LogPrint info $ScriptName ("A different RouterOS version " . ($Update->"latest-version") . \
+      " is available for downgrade.");
     :set SentRouterosUpdateNotification ($Update->"latest-version");
   }
 } on-error={ }

From 5016f4d28ccef4d3b0b1ab55cacb8cf3ee9d0cea Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:37 +0100
Subject: [PATCH 020/988] collect-wireless-mac: switch to $LogPrint

---
 collect-wireless-mac.capsman.rsc  | 14 +++++++-------
 collect-wireless-mac.local.rsc    | 14 +++++++-------
 collect-wireless-mac.template.rsc | 18 +++++++++---------
 collect-wireless-mac.wifi.rsc     | 14 +++++++-------
 4 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index 54236241..dcb303c0 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -23,7 +23,7 @@
   :global FormatLine;
   :global FormatMultiLines;
   :global GetMacVendor;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -34,7 +34,7 @@
 
   :if ([ :len [ /caps-man/access-list/find where comment="--- collected above ---" disabled ] ] = 0) do={
     /caps-man/access-list/add comment="--- collected above ---" disabled=yes;
-    $LogPrintExit2 warning $ScriptName ("Added disabled access-list entry with comment '--- collected above ---'.") false;
+    $LogPrint warning $ScriptName ("Added disabled access-list entry with comment '--- collected above ---'.");
   }
   :local PlaceBefore ([ /caps-man/access-list/find where comment="--- collected above ---" disabled ]->0);
 
@@ -43,14 +43,14 @@
     :do {
       :set RegVal [ /caps-man/registration-table/get $Reg ];
     } on-error={
-      $LogPrintExit2 debug $ScriptName ("Device already gone... Ignoring.") false;
+      $LogPrint debug $ScriptName ("Device already gone... Ignoring.");
     }
 
     :if ([ :len ($RegVal->"mac-address") ] > 0) do={
       :local AccessList ([ /caps-man/access-list/find where mac-address=($RegVal->"mac-address") ]->0);
       :if ([ :len $AccessList ] > 0) do={
-        $LogPrintExit2 debug $ScriptName ("MAC address " . $RegVal->"mac-address" . " already known: " . \
-          [ /caps-man/access-list/get $AccessList comment ]) false;
+        $LogPrint debug $ScriptName ("MAC address " . $RegVal->"mac-address" . " already known: " . \
+          [ /caps-man/access-list/get $AccessList comment ]);
       }
 
       :if ([ :len $AccessList ] = 0) do={
@@ -74,7 +74,7 @@
         :local Vendor [ $GetMacVendor ($RegVal->"mac-address") ];
         :local Message ("MAC address " . $RegVal->"mac-address" . " (" . $Vendor . ", " . $HostName . ") " . \
           "first seen on " . $DateTime . " connected to SSID " . $RegVal->"ssid" . ", interface " . $RegVal->"interface");
-        $LogPrintExit2 info $ScriptName $Message false;
+        $LogPrint info $ScriptName $Message;
         /caps-man/access-list/add place-before=$PlaceBefore comment=$Message mac-address=($RegVal->"mac-address") disabled=yes;
         $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification "mobile-phone" ] . $RegVal->"mac-address" . " connected to " . $RegVal->"ssid"); \
@@ -90,7 +90,7 @@
             [ $FormatLine "Date" $DateTime ]) });
       }
     } else={
-      $LogPrintExit2 debug $ScriptName ("No mac address available... Ignoring.") false;
+      $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
 } on-error={ }
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index a4e81a3e..7c1122ce 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -23,7 +23,7 @@
   :global FormatLine;
   :global FormatMultiLines;
   :global GetMacVendor;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -34,7 +34,7 @@
 
   :if ([ :len [ /interface/wireless/access-list/find where comment="--- collected above ---" disabled ] ] = 0) do={
     /interface/wireless/access-list/add comment="--- collected above ---" disabled=yes;
-    $LogPrintExit2 warning $ScriptName ("Added disabled access-list entry with comment '--- collected above ---'.") false;
+    $LogPrint warning $ScriptName ("Added disabled access-list entry with comment '--- collected above ---'.");
   }
   :local PlaceBefore ([ /interface/wireless/access-list/find where comment="--- collected above ---" disabled ]->0);
 
@@ -43,14 +43,14 @@
     :do {
       :set RegVal [ /interface/wireless/registration-table/get $Reg ];
     } on-error={
-      $LogPrintExit2 debug $ScriptName ("Device already gone... Ignoring.") false;
+      $LogPrint debug $ScriptName ("Device already gone... Ignoring.");
     }
 
     :if ([ :len ($RegVal->"mac-address") ] > 0) do={
       :local AccessList ([ /interface/wireless/access-list/find where mac-address=($RegVal->"mac-address") ]->0);
       :if ([ :len $AccessList ] > 0) do={
-        $LogPrintExit2 debug $ScriptName ("MAC address " . $RegVal->"mac-address" . " already known: " . \
-          [ /interface/wireless/access-list/get $AccessList comment ]) false;
+        $LogPrint debug $ScriptName ("MAC address " . $RegVal->"mac-address" . " already known: " . \
+          [ /interface/wireless/access-list/get $AccessList comment ]);
       }
 
       :if ([ :len $AccessList ] = 0) do={
@@ -75,7 +75,7 @@
         :local Vendor [ $GetMacVendor ($RegVal->"mac-address") ];
         :local Message ("MAC address " . $RegVal->"mac-address" . " (" . $Vendor . ", " . $HostName . ") " . \
           "first seen on " . $DateTime . " connected to SSID " . $RegVal->"ssid" . ", interface " . $RegVal->"interface");
-        $LogPrintExit2 info $ScriptName $Message false;
+        $LogPrint info $ScriptName $Message;
         /interface/wireless/access-list/add place-before=$PlaceBefore comment=$Message mac-address=($RegVal->"mac-address") disabled=yes;
         $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification "mobile-phone" ] . $RegVal->"mac-address" . " connected to " . $RegVal->"ssid"); \
@@ -91,7 +91,7 @@
             [ $FormatLine "Date" $DateTime ]) });
       }
     } else={
-      $LogPrintExit2 debug $ScriptName ("No mac address available... Ignoring.") false;
+      $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
 } on-error={ }
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index f647eb3b..b8c5ff87 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -24,7 +24,7 @@
   :global FormatLine;
   :global FormatMultiLines;
   :global GetMacVendor;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -39,7 +39,7 @@
     /caps-man/access-list/add comment="--- collected above ---" disabled=yes;
     /interface/wifi/access-list/add comment="--- collected above ---" disabled=yes;
     /interface/wireless/access-list/add comment="--- collected above ---" disabled=yes;
-    $LogPrintExit2 warning $ScriptName ("Added disabled access-list entry with comment '--- collected above ---'.") false;
+    $LogPrint warning $ScriptName ("Added disabled access-list entry with comment '--- collected above ---'.");
   }
   :local PlaceBefore ([ /caps-man/access-list/find where comment="--- collected above ---" disabled ]->0);
   :local PlaceBefore ([ /interface/wifi/access-list/find where comment="--- collected above ---" disabled ]->0);
@@ -54,7 +54,7 @@
       :set RegVal [ /interface/wifi/registration-table/get $Reg ];
       :set RegVal [ /interface/wireless/registration-table/get $Reg ];
     } on-error={
-      $LogPrintExit2 debug $ScriptName ("Device already gone... Ignoring.") false;
+      $LogPrint debug $ScriptName ("Device already gone... Ignoring.");
     }
 
     :if ([ :len ($RegVal->"mac-address") ] > 0) do={
@@ -62,10 +62,10 @@
       :local AccessList ([ /interface/wifi/access-list/find where mac-address=($RegVal->"mac-address") ]->0);
       :local AccessList ([ /interface/wireless/access-list/find where mac-address=($RegVal->"mac-address") ]->0);
       :if ([ :len $AccessList ] > 0) do={
-        $LogPrintExit2 debug $ScriptName ("MAC address " . $RegVal->"mac-address" . " already known: " . \
-          [ /caps-man/access-list/get $AccessList comment ]) false;
-          [ /interface/wifi/access-list/get $AccessList comment ]) false;
-          [ /interface/wireless/access-list/get $AccessList comment ]) false;
+        $LogPrint debug $ScriptName ("MAC address " . $RegVal->"mac-address" . " already known: " . \
+          [ /caps-man/access-list/get $AccessList comment ]);
+          [ /interface/wifi/access-list/get $AccessList comment ]);
+          [ /interface/wireless/access-list/get $AccessList comment ]);
       }
 
       :if ([ :len $AccessList ] = 0) do={
@@ -90,7 +90,7 @@
         :local Vendor [ $GetMacVendor ($RegVal->"mac-address") ];
         :local Message ("MAC address " . $RegVal->"mac-address" . " (" . $Vendor . ", " . $HostName . ") " . \
           "first seen on " . $DateTime . " connected to SSID " . $RegVal->"ssid" . ", interface " . $RegVal->"interface");
-        $LogPrintExit2 info $ScriptName $Message false;
+        $LogPrint info $ScriptName $Message;
         /caps-man/access-list/add place-before=$PlaceBefore comment=$Message mac-address=($RegVal->"mac-address") disabled=yes;
         /interface/wifi/access-list/add place-before=$PlaceBefore comment=$Message mac-address=($RegVal->"mac-address") disabled=yes;
         /interface/wireless/access-list/add place-before=$PlaceBefore comment=$Message mac-address=($RegVal->"mac-address") disabled=yes;
@@ -108,7 +108,7 @@
             [ $FormatLine "Date" $DateTime ]) });
       }
     } else={
-      $LogPrintExit2 debug $ScriptName ("No mac address available... Ignoring.") false;
+      $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
 } on-error={ }
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index 063d6dc9..b8ad9396 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -23,7 +23,7 @@
   :global FormatLine;
   :global FormatMultiLines;
   :global GetMacVendor;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -34,7 +34,7 @@
 
   :if ([ :len [ /interface/wifi/access-list/find where comment="--- collected above ---" disabled ] ] = 0) do={
     /interface/wifi/access-list/add comment="--- collected above ---" disabled=yes;
-    $LogPrintExit2 warning $ScriptName ("Added disabled access-list entry with comment '--- collected above ---'.") false;
+    $LogPrint warning $ScriptName ("Added disabled access-list entry with comment '--- collected above ---'.");
   }
   :local PlaceBefore ([ /interface/wifi/access-list/find where comment="--- collected above ---" disabled ]->0);
 
@@ -43,14 +43,14 @@
     :do {
       :set RegVal [ /interface/wifi/registration-table/get $Reg ];
     } on-error={
-      $LogPrintExit2 debug $ScriptName ("Device already gone... Ignoring.") false;
+      $LogPrint debug $ScriptName ("Device already gone... Ignoring.");
     }
 
     :if ([ :len ($RegVal->"mac-address") ] > 0) do={
       :local AccessList ([ /interface/wifi/access-list/find where mac-address=($RegVal->"mac-address") ]->0);
       :if ([ :len $AccessList ] > 0) do={
-        $LogPrintExit2 debug $ScriptName ("MAC address " . $RegVal->"mac-address" . " already known: " . \
-          [ /interface/wifi/access-list/get $AccessList comment ]) false;
+        $LogPrint debug $ScriptName ("MAC address " . $RegVal->"mac-address" . " already known: " . \
+          [ /interface/wifi/access-list/get $AccessList comment ]);
       }
 
       :if ([ :len $AccessList ] = 0) do={
@@ -74,7 +74,7 @@
         :local Vendor [ $GetMacVendor ($RegVal->"mac-address") ];
         :local Message ("MAC address " . $RegVal->"mac-address" . " (" . $Vendor . ", " . $HostName . ") " . \
           "first seen on " . $DateTime . " connected to SSID " . $RegVal->"ssid" . ", interface " . $RegVal->"interface");
-        $LogPrintExit2 info $ScriptName $Message false;
+        $LogPrint info $ScriptName $Message;
         /interface/wifi/access-list/add place-before=$PlaceBefore comment=$Message mac-address=($RegVal->"mac-address") disabled=yes;
         $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification "mobile-phone" ] . $RegVal->"mac-address" . " connected to " . $RegVal->"ssid"); \
@@ -90,7 +90,7 @@
             [ $FormatLine "Date" $DateTime ]) });
       }
     } else={
-      $LogPrintExit2 debug $ScriptName ("No mac address available... Ignoring.") false;
+      $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
 } on-error={ }

From 4ab8dbd774f6d024db493359a7cb345f3bd76c8b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 021/988] daily-psk: switch to $LogPrint

---
 daily-psk.capsman.rsc  | 6 +++---
 daily-psk.local.rsc    | 6 +++---
 daily-psk.template.rsc | 6 +++---
 daily-psk.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index c9c0186c..43651d07 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -22,7 +22,7 @@
   :global Identity;
 
   :global FormatLine;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -68,12 +68,12 @@
     :local Skip 0;
 
     :if ($NewPsk != $OldPsk) do={
-      $LogPrintExit2 info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")") false;
+      $LogPrint info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")");
       /caps-man/access-list/set $AccList private-passphrase=$NewPsk;
 
       :if ([ :len [ /caps-man/actual-interface-configuration/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
         :if ($Seen->$Ssid = 1) do={
-          $LogPrintExit2 debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.") false;
+          $LogPrint debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.");
         } else={
           :local Link ($DailyPskQrCodeUrl . \
               "?scale=8&level=1&ssid=" . [ $UrlEncode $Ssid ] . "&pass=" . [ $UrlEncode $NewPsk ]);
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 228efc87..2dbc61bf 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -22,7 +22,7 @@
   :global Identity;
 
   :global FormatLine;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -67,12 +67,12 @@
     :local Skip 0;
 
     :if ($NewPsk != $OldPsk) do={
-      $LogPrintExit2 info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")") false;
+      $LogPrint info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")");
       /interface/wireless/access-list/set $AccList private-pre-shared-key=$NewPsk;
 
       :if ([ :len [ /interface/wireless/find where name=$IntName !disabled ] ] = 1) do={
         :if ($Seen->$Ssid = 1) do={
-          $LogPrintExit2 debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.") false;
+          $LogPrint debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.");
         } else={
           :local Link ($DailyPskQrCodeUrl . \
               "?scale=8&level=1&ssid=" . [ $UrlEncode $Ssid ] . "&pass=" . [ $UrlEncode $NewPsk ]);
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 4403fe6f..e190ffb7 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -23,7 +23,7 @@
   :global Identity;
 
   :global FormatLine;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -79,7 +79,7 @@
     :local Skip 0;
 
     :if ($NewPsk != $OldPsk) do={
-      $LogPrintExit2 info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")") false;
+      $LogPrint info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")");
       /caps-man/access-list/set $AccList private-passphrase=$NewPsk;
       /interface/wifi/access-list/set $AccList passphrase=$NewPsk;
       /interface/wireless/access-list/set $AccList private-pre-shared-key=$NewPsk;
@@ -88,7 +88,7 @@
       :if ([ :len [ /interface/wifi/actual-configuration/find where configuration.ssid=$Ssid ] ] > 0) do={
       :if ([ :len [ /interface/wireless/find where name=$IntName !disabled ] ] = 1) do={
         :if ($Seen->$Ssid = 1) do={
-          $LogPrintExit2 debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.") false;
+          $LogPrint debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.");
         } else={
           :local Link ($DailyPskQrCodeUrl . \
               "?scale=8&level=1&ssid=" . [ $UrlEncode $Ssid ] . "&pass=" . [ $UrlEncode $NewPsk ]);
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index e9b51990..ee3e1b05 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -22,7 +22,7 @@
   :global Identity;
 
   :global FormatLine;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -68,12 +68,12 @@
     :local Skip 0;
 
     :if ($NewPsk != $OldPsk) do={
-      $LogPrintExit2 info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")") false;
+      $LogPrint info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")");
       /interface/wifi/access-list/set $AccList passphrase=$NewPsk;
 
       :if ([ :len [ /interface/wifi/actual-configuration/find where configuration.ssid=$Ssid ] ] > 0) do={
         :if ($Seen->$Ssid = 1) do={
-          $LogPrintExit2 debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.") false;
+          $LogPrint debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.");
         } else={
           :local Link ($DailyPskQrCodeUrl . \
               "?scale=8&level=1&ssid=" . [ $UrlEncode $Ssid ] . "&pass=" . [ $UrlEncode $NewPsk ]);

From 5638bdcc2d6a6c333c5a11df4946ff88cb3ecb43 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 022/988] dhcp-lease-comment: switch to $LogPrint

---
 dhcp-lease-comment.capsman.rsc  | 4 ++--
 dhcp-lease-comment.local.rsc    | 4 ++--
 dhcp-lease-comment.template.rsc | 4 ++--
 dhcp-lease-comment.wifi.rsc     | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 1b61167a..4ac228b9 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -17,7 +17,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -32,7 +32,7 @@
       :set NewComment [ /caps-man/access-list/get $AccessList comment ];
     }
     :if ([ :len $NewComment ] != 0 && $LeaseVal->"comment" != $NewComment) do={
-      $LogPrintExit2 info $ScriptName ("Updating comment for DHCP lease " . $LeaseVal->"active-mac-address" . ": " . $NewComment) false;
+      $LogPrint info $ScriptName ("Updating comment for DHCP lease " . $LeaseVal->"active-mac-address" . ": " . $NewComment);
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index 5401a77f..a49f74f4 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -17,7 +17,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -32,7 +32,7 @@
       :set NewComment [ /interface/wireless/access-list/get $AccessList comment ];
     }
     :if ([ :len $NewComment ] != 0 && $LeaseVal->"comment" != $NewComment) do={
-      $LogPrintExit2 info $ScriptName ("Updating comment for DHCP lease " . $LeaseVal->"active-mac-address" . ": " . $NewComment) false;
+      $LogPrint info $ScriptName ("Updating comment for DHCP lease " . $LeaseVal->"active-mac-address" . ": " . $NewComment);
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 6ed8fc3b..0f0975bb 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -18,7 +18,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -37,7 +37,7 @@
       :set NewComment [ /interface/wireless/access-list/get $AccessList comment ];
     }
     :if ([ :len $NewComment ] != 0 && $LeaseVal->"comment" != $NewComment) do={
-      $LogPrintExit2 info $ScriptName ("Updating comment for DHCP lease " . $LeaseVal->"active-mac-address" . ": " . $NewComment) false;
+      $LogPrint info $ScriptName ("Updating comment for DHCP lease " . $LeaseVal->"active-mac-address" . ": " . $NewComment);
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index 62ed03da..c9c091b1 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -17,7 +17,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -32,7 +32,7 @@
       :set NewComment [ /interface/wifi/access-list/get $AccessList comment ];
     }
     :if ([ :len $NewComment ] != 0 && $LeaseVal->"comment" != $NewComment) do={
-      $LogPrintExit2 info $ScriptName ("Updating comment for DHCP lease " . $LeaseVal->"active-mac-address" . ": " . $NewComment) false;
+      $LogPrint info $ScriptName ("Updating comment for DHCP lease " . $LeaseVal->"active-mac-address" . ": " . $NewComment);
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }

From 5c775fdb3f28aaa2f354db3dca8ae3abd29c3d9d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 023/988] dhcp-to-dns: switch to $LogPrint

---
 dhcp-to-dns.rsc | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index d0638c7b..5b6e64a7 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -21,7 +21,7 @@
   :global CleanName;
   :global EitherOr;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global LogPrintOnce;
   :global ParseKeyValueStore;
   :global ScriptLock;
@@ -36,7 +36,7 @@
 
   :if ([ :len [ /ip/dns/static/find where (name=$CommentString or (comment=$CommentString and name=-)) type=NXDOMAIN disabled ] ] = 0) do={
     /ip/dns/static/add name=$CommentString type=NXDOMAIN disabled=yes;
-    $LogPrintExit2 warning $ScriptName ("Added disabled static dns record with name '" . $CommentString . "'.") false;
+    $LogPrint warning $ScriptName ("Added disabled static dns record with name '" . $CommentString . "'.");
   }
   :local PlaceBefore ([ /ip/dns/static/find where (name=$CommentString or (comment=$CommentString and name=-)) type=NXDOMAIN disabled ]->0);
 
@@ -47,10 +47,10 @@
 
     :if ([ :len [ /ip/dhcp-server/lease/find where active-mac-address=($DnsRecordInfo->"macaddress") \
          active-address=($DnsRecordVal->"address") server=($DnsRecordInfo->"server") status=bound ] ] > 0) do={
-      $LogPrintExit2 debug $ScriptName ("Lease for " . $MacInServer . " (" . $DnsRecordVal->"name" . ") still exists. Not deleting record.") false;
+      $LogPrint debug $ScriptName ("Lease for " . $MacInServer . " (" . $DnsRecordVal->"name" . ") still exists. Not deleting record.");
     } else={
       :local Found false;
-      $LogPrintExit2 info $ScriptName ("Lease expired for " . $MacInServer . ", deleting record (" . $DnsRecordVal->"name" . ").") false;
+      $LogPrint info $ScriptName ("Lease expired for " . $MacInServer . ", deleting record (" . $DnsRecordVal->"name" . ").");
       /ip/dns/static/remove $DnsRecord;
       /ip/dns/static/remove [ find where type=CNAME comment=($DnsRecordVal->"comment") ];
     }
@@ -64,7 +64,7 @@
         $LogPrintOnce info $ScriptName ("Multiple bound leases found for mac-address " . ($LeaseVal->"active-mac-address") . "!");
       }
     } on-error={
-      $LogPrintExit2 debug $ScriptName ("A lease just vanished, ignoring.") false;
+      $LogPrint debug $ScriptName ("A lease just vanished, ignoring.");
     }
 
     :if ([ :len ($LeaseVal->"active-address") ] > 0) do={
@@ -88,9 +88,9 @@
         :local DnsRecordVal [ /ip/dns/static/get $DnsRecord ];
 
         :if ($DnsRecordVal->"address" = $LeaseVal->"active-address" && $DnsRecordVal->"name" = $FullA) do={
-          $LogPrintExit2 debug $ScriptName ("The A record for " . $MacInServer . " (" . $FullA . ") does not need updating.") false;
+          $LogPrint debug $ScriptName ("The A record for " . $MacInServer . " (" . $FullA . ") does not need updating.");
         } else={
-          $LogPrintExit2 info $ScriptName ("Updating A record for " . $MacInServer . " (" . $FullA . " -> " . $LeaseVal->"active-address" . ").") false;
+          $LogPrint info $ScriptName ("Updating A record for " . $MacInServer . " (" . $FullA . " -> " . $LeaseVal->"active-address" . ").");
           /ip/dns/static/set address=($LeaseVal->"active-address") name=$FullA $DnsRecord;
         }
 
@@ -98,20 +98,20 @@
         :if ([ :len $CName ] > 0) do={
           :local CNameVal [ /ip/dns/static/get $CName ];
           :if ($CNameVal->"name" != $FullCN || $CNameVal->"cname" != $FullA) do={
-            $LogPrintExit2 info $ScriptName ("Deleting CNAME record with wrong data for " . $MacInServer . ".") false;
+            $LogPrint info $ScriptName ("Deleting CNAME record with wrong data for " . $MacInServer . ".");
             /ip/dns/static/remove $CName;
           }
         }
         :if ([ :len $HostName ] > 0 && [ :len [ /ip/dns/static/find where name=$FullCN type=CNAME ] ] = 0) do={
-          $LogPrintExit2 info $ScriptName ("Adding CNAME record for " . $MacInServer . " (" . $FullCN . " -> " . $FullA . ").") false;
+          $LogPrint info $ScriptName ("Adding CNAME record for " . $MacInServer . " (" . $FullCN . " -> " . $FullA . ").");
           /ip/dns/static/add name=$FullCN type=CNAME cname=$FullA ttl=$Ttl comment=$Comment place-before=$PlaceBefore;
         }
 
       } else={
-        $LogPrintExit2 info $ScriptName ("Adding A record for " . $MacInServer . " (" . $FullA . " -> " . $LeaseVal->"active-address" . ").") false;
+        $LogPrint info $ScriptName ("Adding A record for " . $MacInServer . " (" . $FullA . " -> " . $LeaseVal->"active-address" . ").");
         /ip/dns/static/add name=$FullA type=A address=($LeaseVal->"active-address") ttl=$Ttl comment=$Comment place-before=$PlaceBefore;
         :if ([ :len $HostName ] > 0 && [ :len [ /ip/dns/static/find where name=$FullCN type=CNAME ] ] = 0) do={
-          $LogPrintExit2 info $ScriptName ("Adding CNAME record for " . $MacInServer . " (" . $FullCN . " -> " . $FullA . ").") false;
+          $LogPrint info $ScriptName ("Adding CNAME record for " . $MacInServer . " (" . $FullCN . " -> " . $FullA . ").");
           /ip/dns/static/add name=$FullCN type=CNAME cname=$FullA ttl=$Ttl comment=$Comment place-before=$PlaceBefore;
         }
       }
@@ -120,7 +120,7 @@
         $LogPrintOnce warning $ScriptName ("The name '" . $FullA . "' appeared in more than one A record!");
       }
     } else={
-      $LogPrintExit2 debug $ScriptName ("No address available... Ignoring.") false;
+      $LogPrint debug $ScriptName ("No address available... Ignoring.");
     }
   }
 } on-error={ }

From c8e4cb05267f50ebc06d5cebc30186f0a5618252 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 024/988] firmware-upgrade-reboot: switch to $LogPrint

---
 firmware-upgrade-reboot.rsc | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index 6499d274..038f74ea 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -14,7 +14,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global VersionToNum;
 
@@ -24,18 +24,18 @@
 
   :local RouterBoard [ /system/routerboard/get ];
   :if ($RouterBoard->"current-firmware" = $RouterBoard->"upgrade-firmware") do={
-    $LogPrintExit2 info $ScriptName ("Current and upgrade firmware match with version " . \
-      $RouterBoard->"current-firmware" . ".") false;
+    $LogPrint info $ScriptName ("Current and upgrade firmware match with version " . \
+      $RouterBoard->"current-firmware" . ".");
     :error true;
   }
   :if ([ $VersionToNum ($RouterBoard->"current-firmware") ] > [ $VersionToNum ($RouterBoard->"upgrade-firmware") ]) do={
-    $LogPrintExit2 info $ScriptName ("Different firmware version is available, but it is a downgrade. Ignoring.") false;
+    $LogPrint info $ScriptName ("Different firmware version is available, but it is a downgrade. Ignoring.");
     :error true;
   }
 
   :if ([ /system/routerboard/settings/get auto-upgrade ] = false) do={
-    $LogPrintExit2 info $ScriptName ("Firmware version " . $RouterBoard->"upgrade-firmware" . \
-      " is available, upgrading.") false;
+    $LogPrint info $ScriptName ("Firmware version " . $RouterBoard->"upgrade-firmware" . \
+      " is available, upgrading.");
     /system/routerboard/upgrade;
   }
 
@@ -49,6 +49,6 @@
     :delay $Uptime;
   }
 
-  $LogPrintExit2 info $ScriptName ("Firmware upgrade successful, rebooting.") false;
+  $LogPrint info $ScriptName ("Firmware upgrade successful, rebooting.");
   /system/reboot;
 } on-error={ }

From 6715696ba1a4239b626e19a466cafae9e698c807 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 025/988] fw-addr-lists: switch to $LogPrint

---
 fw-addr-lists.rsc | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 4ec41051..64233ac1 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -20,7 +20,7 @@
 
   :global CertificateAvailable;
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global LogPrintOnce;
   :global ScriptLock;
   :global WaitFullyConnected;
@@ -57,7 +57,7 @@
       :if ([ :len ($List->"cert") ] > 0) do={
         :set CheckCertificate "yes-without-crl";
         :if ([ $CertificateAvailable ($List->"cert") ] = false) do={
-          $LogPrintExit2 warning $ScriptName ("Downloading required certificate failed, trying anyway.") false;
+          $LogPrint warning $ScriptName ("Downloading required certificate failed, trying anyway.");
         }
       }
 
@@ -68,7 +68,7 @@
               http-header-field=({ $FetchUserAgent }) ($List->"url") as-value ]->"data");
           } on-error={
             :if ($I < 4) do={
-              $LogPrintExit2 debug $ScriptName ("Failed downloading, " . $I . ". try: " . $List->"url") false;
+              $LogPrint debug $ScriptName ("Failed downloading, " . $I . ". try: " . $List->"url");
               :delay (($I * $I) . "s");
             }
           }
@@ -78,7 +78,7 @@
       :if ($Data = false) do={
         :set Data "";
         :set Failure true;
-        $LogPrintExit2 warning $ScriptName ("Failed downloading list from: " . $List->"url") false;
+        $LogPrint warning $ScriptName ("Failed downloading list from: " . $List->"url");
       }
 
       :if ([ :len $Data ] > 63000) do={
@@ -103,13 +103,13 @@
     :foreach Entry in=[ /ip/firewall/address-list/find where list=$FwListName comment=$ListComment ] do={
       :local Address [ /ip/firewall/address-list/get $Entry address ];
       :if ([ :typeof ($IPv4Addresses->$Address) ] = "time") do={
-        $LogPrintExit2 debug $ScriptName ("Renewing IPv4 address for " . ($IPv4Addresses->$Address) . ": " . $Address) false;
+        $LogPrint debug $ScriptName ("Renewing IPv4 address for " . ($IPv4Addresses->$Address) . ": " . $Address);
         /ip/firewall/address-list/set $Entry timeout=($IPv4Addresses->$Address);
         :set ($IPv4Addresses->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
-          $LogPrintExit2 debug $ScriptName ("Removing IPv4 address: " . $Address) false;
+          $LogPrint debug $ScriptName ("Removing IPv4 address: " . $Address);
           /ip/firewall/address-list/remove $Entry;
           :set CntRemove ($CntRemove + 1);
         }
@@ -119,13 +119,13 @@
     :foreach Entry in=[ /ipv6/firewall/address-list/find where list=$FwListName comment=$ListComment ] do={
       :local Address [ /ipv6/firewall/address-list/get $Entry address ];
       :if ([ :typeof ($IPv6Addresses->$Address) ] = "time") do={
-        $LogPrintExit2 debug $ScriptName ("Renewing IPv6 address for " . ($IPv6Addresses->$Address) . ": " . $Address) false;
+        $LogPrint debug $ScriptName ("Renewing IPv6 address for " . ($IPv6Addresses->$Address) . ": " . $Address);
         /ipv6/firewall/address-list/set $Entry timeout=($IPv6Addresses->$Address);
         :set ($IPv6Addresses->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
-          $LogPrintExit2 debug $ScriptName ("Removing: " . $Address) false;
+          $LogPrint debug $ScriptName ("Removing: " . $Address);
           /ipv6/firewall/address-list/remove $Entry;
           :set CntRemove ($CntRemove + 1);
         }
@@ -133,27 +133,27 @@
     }
 
     :foreach Address,Timeout in=$IPv4Addresses do={
-      $LogPrintExit2 debug $ScriptName ("Adding IPv4 address for " . $Timeout . ": " . $Address) false;
+      $LogPrint debug $ScriptName ("Adding IPv4 address for " . $Timeout . ": " . $Address);
       :do {
         /ip/firewall/address-list/add list=$FwListName comment=$ListComment address=$Address timeout=$Timeout;
         :set ($IPv4Addresses->$Address);
         :set CntAdd ($CntAdd + 1);
       } on-error={
-        $LogPrintExit2 warning $ScriptName ("Failed to add IPv4 address " . $Address . " to list '" . $FwListName . "'.") false;
+        $LogPrint warning $ScriptName ("Failed to add IPv4 address " . $Address . " to list '" . $FwListName . "'.");
       }
     }
 
     :foreach Address,Timeout in=$IPv6Addresses do={
-      $LogPrintExit2 debug $ScriptName ("Adding IPv6 address for " . $Timeout . ": " . $Address) false;
+      $LogPrint debug $ScriptName ("Adding IPv6 address for " . $Timeout . ": " . $Address);
       :do {
         /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment address=$Address timeout=$Timeout;
         :set ($IPv6Addresses->$Address);
         :set CntAdd ($CntAdd + 1);
       } on-error={
-        $LogPrintExit2 warning $ScriptName ("Failed to add IPv6 address " . $Address . " to list '" . $FwListName . "'.") false;
+        $LogPrint warning $ScriptName ("Failed to add IPv6 address " . $Address . " to list '" . $FwListName . "'.");
       }
     }
 
-    $LogPrintExit2 info $ScriptName ("list: " . $FwListName . " -- added: " . $CntAdd . " - renewed: " . $CntRenew . " - removed: " . $CntRemove) false;
+    $LogPrint info $ScriptName ("list: " . $FwListName . " -- added: " . $CntAdd . " - renewed: " . $CntRenew . " - removed: " . $CntRemove);
   }
 } on-error={ }

From 9dd1b768ee533545042b6e46fc9710bd39cc48d2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 026/988] global-functions: switch to $LogPrint

---
 global-functions.rsc | 162 ++++++++++++++++++++++---------------------
 1 file changed, 82 insertions(+), 80 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 1220ecaf..d33e3e27 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -102,18 +102,18 @@
   :local CommonName [ :tostr $1 ];
 
   :global CertificateDownload;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
 
   :if ([ /system/resource/get free-hdd-space ] < 8388608 && \
        [ /certificate/settings/get crl-download ] = true && \
        [ /certificate/settings/get crl-store ] = "system") do={
-    $LogPrintExit2 warning $0 ("This system has low free flash space but " . \
-      "is configured to download certificate CRLs to system!") false;
+    $LogPrint warning $0 ("This system has low free flash space but " . \
+      "is configured to download certificate CRLs to system!");
   }
 
   :if ([ :len [ /certificate/find where common-name=$CommonName ] ] = 0) do={
-    $LogPrintExit2 info $0 ("Certificate with CommonName \"" . $CommonName . "\" not available.") false;
+    $LogPrint info $0 ("Certificate with CommonName \"" . $CommonName . "\" not available.");
     :if ([ $CertificateDownload $CommonName ] = false) do={
       :return false;
     }
@@ -122,8 +122,8 @@
   :local CertVal [ /certificate/get [ find where common-name=$CommonName ] ];
   :while (($CertVal->"akid") != "" && ($CertVal->"akid") != ($CertVal->"skid")) do={
     :if ([ :len [ /certificate/find where skid=($CertVal->"akid") ] ] = 0) do={
-      $LogPrintExit2 info $0 ("Certificate chain for \"" . $CommonName . \
-        "\" is incomplete, missing \"" . ([ $ParseKeyValueStore ($CertVal->"issuer") ]->"CN") . "\".") false;
+      $LogPrint info $0 ("Certificate chain for \"" . $CommonName . \
+        "\" is incomplete, missing \"" . ([ $ParseKeyValueStore ($CertVal->"issuer") ]->"CN") . "\".");
       :if ([ $CertificateDownload $CommonName ] = false) do={
         :return false;
       }
@@ -142,12 +142,12 @@
   :global ScriptUpdatesUrlSuffix;
 
   :global CertificateNameByCN;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global UrlEncode;
   :global WaitForFile;
 
-  $LogPrintExit2 info $0 ("Downloading and importing certificate with " . \
-      "CommonName \"" . $CommonName . "\".") false;
+  $LogPrint info $0 ("Downloading and importing certificate with " . \
+      "CommonName \"" . $CommonName . "\".");
   :do {
     :local LocalFileName ($CommonName . ".pem");
     :local UrlFileName ([ $UrlEncode $CommonName ] . ".pem");
@@ -163,8 +163,7 @@
       $CertificateNameByCN [ /certificate/get $Cert common-name ];
     }
   } on-error={
-    $LogPrintExit2 warning $0 ("Failed importing certificate with " . \
-        "CommonName \"" . $CommonName . "\"!") false;
+    $LogPrint warning $0 ("Failed importing certificate with CommonName \"" . $CommonName . "\"!");
     :return false;
   }
   :return true;
@@ -309,7 +308,7 @@
 
   :global CertificateAvailable;
   :global CleanFilePath;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MkDir;
   :global WaitForFile;
 
@@ -324,23 +323,23 @@
   :local PkgDest [ $CleanFilePath ($PkgDir . "/" . $PkgFile) ];
 
   :if ([ $MkDir $PkgDir ] = false) do={
-    $LogPrintExit2 warning $0 ("Failed creating directory, not downloading package.") false;
+    $LogPrint warning $0 ("Failed creating directory, not downloading package.");
     :return false;
   }
 
   :if ([ :len [ /file/find where name=$PkgDest type="package" ] ] > 0) do={
-    $LogPrintExit2 info $0 ("Package file " . $PkgName . " already exists.") false;
+    $LogPrint info $0 ("Package file " . $PkgName . " already exists.");
     :return true;
   }
 
   :if ([ $CertificateAvailable "R3" ] = false) do={
-    $LogPrintExit2 error $0 ("Downloading required certificate failed.") false;
+    $LogPrint error $0 ("Downloading required certificate failed.");
     :return false;
   }
 
   :local Url ("https://upgrade.mikrotik.com/routeros/" . $PkgVer . "/" . $PkgFile);
-  $LogPrintExit2 info $0 ("Downloading package file '" . $PkgName . "'...") false;
-  $LogPrintExit2 debug $0 ("... from url: " . $Url) false;
+  $LogPrint info $0 ("Downloading package file '" . $PkgName . "'...");
+  $LogPrint debug $0 ("... from url: " . $Url);
   :local Retry 3;
   :while ($Retry > 0) do={
     :do {
@@ -351,14 +350,14 @@
         :return true;
       }
     } on-error={
-      $LogPrintExit2 debug $0 ("Downloading package file failed.") false;
+      $LogPrint debug $0 ("Downloading package file failed.");
     }
 
     /file/remove [ find where name=$PkgDest ];
     :set Retry ($Retry - 1);
   }
 
-  $LogPrintExit2 warning $0 ("Downloading package file '" . $PkgName . "' failed.") false;
+  $LogPrint warning $0 ("Downloading package file '" . $PkgName . "' failed.");
   :return false;
 }
 
@@ -444,7 +443,7 @@
 
   :global CertificateAvailable;
   :global IsMacLocallyAdministered;
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :if ([ $IsMacLocallyAdministered $Mac ] = true) do={
     :return "locally administered";
@@ -452,7 +451,8 @@
 
   :do {
     :if ([ $CertificateAvailable "GTS CA 1P5" ] = false) do={
-      $LogPrintExit2 warning $0 ("Downloading required certificate failed.") true;
+      $LogPrint warning $0 ("Downloading required certificate failed.");
+      :error false;
     }
     :local Vendor ([ /tool/fetch check-certificate=yes-without-crl \
         ("https://api.macvendors.com/" . [ :pick $Mac 0 8 ]) output=user as-value ]->"data");
@@ -461,9 +461,9 @@
     :do {
       /tool/fetch check-certificate=yes-without-crl ("https://api.macvendors.com/") \
         output=none as-value;
-      $LogPrintExit2 debug $0 ("The mac vendor is not known in database.") false;
+      $LogPrint debug $0 ("The mac vendor is not known in database.");
     } on-error={
-      $LogPrintExit2 warning $0 ("Failed getting mac vendor.") false;
+      $LogPrint warning $0 ("Failed getting mac vendor.");
     }
     :return "unknown vendor";
   }
@@ -610,7 +610,7 @@
   :global IsTimeSyncCached;
   :global IsTimeSyncResetNtp;
 
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :if ($IsTimeSyncCached = true) do={
     :return true;
@@ -639,7 +639,7 @@
 
   :if ([ /system/license/get ]->"level" = "free" || \
        [ /system/resource/get ]->"board-name" = "x86") do={
-    $LogPrintExit2 debug $0 ("No ntp client configured, relying on RTC for CHR free license and x86.") false;
+    $LogPrint debug $0 ("No ntp client configured, relying on RTC for CHR free license and x86.");
     :return true;
   }
 
@@ -651,7 +651,7 @@
     :return false;
   }
 
-  $LogPrintExit2 debug $0 ("No time source configured! Returning gracefully...") false;
+  $LogPrint debug $0 ("No time source configured! Returning gracefully...");
   :return true;
 }
 
@@ -717,7 +717,7 @@
   :local Name     [ :tostr $2 ];
   :local Message  [ :tostr $3 ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :global LogPrintOnceMessages;
 
@@ -730,7 +730,7 @@
   }
 
   :set ($LogPrintOnceMessages->$Message) 1;
-  $LogPrintExit2 $Severity $Name $Message false;
+  $LogPrint $Severity $Name $Message;
 }
 
 # get max value
@@ -750,24 +750,24 @@
   :local Path [ :tostr $1 ];
 
   :global CleanFilePath;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global WaitForFile;
 
   :local MkTmpfs do={
-    :global LogPrintExit2;
+    :global LogPrint;
     :global WaitForFile;
 
     :if ([ :len [ /disk/find where slot=tmpfs type=tmpfs ] ] = 1) do={
       :return true;
     }
 
-    $LogPrintExit2 info $0 ("Creating disk of type tmpfs.") false;
+    $LogPrint info $0 ("Creating disk of type tmpfs.");
     /file/remove [ find where name="tmpfs" type="directory" ];
     :do {
       /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/get total-memory ] / 3);
       $WaitForFile "tmpfs";
     } on-error={
-      $LogPrintExit2 warning $0 ("Creating disk of type tmpfs failed!") false;
+      $LogPrint warning $0 ("Creating disk of type tmpfs failed!");
       :return false;
     }
     :return true;
@@ -795,7 +795,7 @@
     $WaitForFile $File;
     /file/remove $File;
   } on-error={
-    $LogPrintExit2 warning $0 ("Making directory '" . $Path . "' failed!") false;
+    $LogPrint warning $0 ("Making directory '" . $Path . "' failed!");
     :return false;
   }
 
@@ -926,18 +926,18 @@
   :local Warn     [ :tostr $3 ];
 
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global VersionToNum;
 
   :if (!($Required ~ "^\\d+\\.\\d+((alpha|beta|rc|\\.)\\d+|)\$")) do={
-    $LogPrintExit2 error $0 ("No valid RouterOS version: " . $Required) false;
+    $LogPrint error $0 ("No valid RouterOS version: " . $Required);
     :return false;
   }
 
   :if ([ $VersionToNum $Required ] > [ $VersionToNum [ /system/package/update/get installed-version ] ]) do={
     :if ($Warn = "true") do={
-      $LogPrintExit2 warning $0 ("This " . [ $IfThenElse ([ :pick $Caller 0 ] = ("\$")) "function" "script" ] . \
-        " '" . $Caller . "' (at least specific functionality) requires RouterOS " . $Required . ". Please update!") false;
+      $LogPrint warning $0 ("This " . [ $IfThenElse ([ :pick $Caller 0 ] = ("\$")) "function" "script" ] . \
+        " '" . $Caller . "' (at least specific functionality) requires RouterOS " . $Required . ". Please update!");
     }
     :return false;
   }
@@ -948,7 +948,7 @@
 :set ScriptFromTerminal do={
   :local Script [ :tostr $1 ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :foreach Job in=[ /system/script/job/find where script=$Script ] do={
     :set Job [ /system/script/job/get $Job ];
@@ -956,11 +956,11 @@
       :set Job [ /system/script/job/get [ find where .id=($Job->"parent") ] ];
     }
     :if (($Job->"type") = "login") do={
-      $LogPrintExit2 debug $0 ("Script " . $Script . " started from terminal.") false;
+      $LogPrint debug $0 ("Script " . $Script . " started from terminal.");
       :return true;
     }
   }
-  $LogPrintExit2 debug $0 ("Script " . $Script . " NOT started from terminal.") false;
+  $LogPrint debug $0 ("Script " . $Script . " NOT started from terminal.");
 
   :return false;
 }
@@ -982,7 +982,7 @@
   :global EitherOr;
   :global Grep;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global LogPrintOnce;
   :global ParseKeyValueStore;
   :global RequiredRouterOS;
@@ -991,12 +991,12 @@
   :global ValidateSyntax;
 
   :if ([ $CertificateAvailable "E1" ] = false) do={
-    $LogPrintExit2 warning $0 ("Downloading certificate failed, trying without.") false;
+    $LogPrint warning $0 ("Downloading certificate failed, trying without.");
   }
 
   :foreach Script in=$Scripts do={
     :if ([ :len [ /system/script/find where name=$Script ] ] = 0) do={
-      $LogPrintExit2 info $0 ("Adding new script: " . $Script) false;
+      $LogPrint info $0 ("Adding new script: " . $Script);
       /system/script/add name=$Script owner=$Script source="#!rsc by RouterOS\n" comment=$NewComment;
     }
   }
@@ -1013,8 +1013,8 @@
     :foreach Scheduler in=[ /system/scheduler/find where on-event~("\\b" . $ScriptVal->"name" . "\\b") ] do={
       :local SchedulerVal [ /system/scheduler/get $Scheduler ];
       :if ($ScriptVal->"policy" != $SchedulerVal->"policy") do={
-        $LogPrintExit2 warning $0 ("Policies differ for script '" . $ScriptVal->"name" . \
-          "' and its scheduler '" . $SchedulerVal->"name" . "'!") false;
+        $LogPrint warning $0 ("Policies differ for script '" . $ScriptVal->"name" . \
+          "' and its scheduler '" . $SchedulerVal->"name" . "'!");
       }
     }
 
@@ -1023,7 +1023,7 @@
         :local BaseUrl [ $EitherOr ($ScriptInfo->"base-url") $ScriptUpdatesBaseUrl ];
         :local UrlSuffix [ $EitherOr ($ScriptInfo->"url-suffix") $ScriptUpdatesUrlSuffix ];
         :local Url ($BaseUrl . $ScriptVal->"name" . ".rsc" . $UrlSuffix);
-        $LogPrintExit2 debug $0 ("Fetching script '" . $ScriptVal->"name" . "' from url: " . $Url) false;
+        $LogPrint debug $0 ("Fetching script '" . $ScriptVal->"name" . "' from url: " . $Url);
         :local Result [ /tool/fetch check-certificate=yes-without-crl \
           http-header-field=({ $FetchUserAgent }) $Url output=user as-value ];
         :if ($Result->"status" = "finished") do={
@@ -1031,11 +1031,11 @@
         }
       } on-error={
         :if ($ScriptVal->"source" = "#!rsc by RouterOS\n") do={
-          $LogPrintExit2 warning $0 ("Failed fetching script '" . $ScriptVal->"name" . \
-            "', removing dummy. Typo on installation?") false;
+          $LogPrint warning $0 ("Failed fetching script '" . $ScriptVal->"name" . \
+            "', removing dummy. Typo on installation?");
           /system/script/remove $Script;
         } else={
-          $LogPrintExit2 warning $0 ("Failed fetching script '" . $ScriptVal->"name" . "'!") false;
+          $LogPrint warning $0 ("Failed fetching script '" . $ScriptVal->"name" . "'!");
         }
       }
     }
@@ -1046,7 +1046,7 @@
           :local Required ([ $ParseKeyValueStore [ $Grep $SourceNew ("\23 requires RouterOS, ") ] ]->"version");
           :if ([ $RequiredRouterOS $0 [ $EitherOr $Required "0.0" ] false ] = true) do={
             :if ([ $ValidateSyntax $SourceNew ] = true) do={
-              $LogPrintExit2 info $0 ("Updating script: " . $ScriptVal->"name") false;
+              $LogPrint info $0 ("Updating script: " . $ScriptVal->"name");
               /system/script/set owner=($ScriptVal->"name") source=$SourceNew $Script;
               :if ($ScriptVal->"name" = "global-config") do={
                 :set ReloadGlobalConfig true;
@@ -1055,48 +1055,48 @@
                 :set ReloadGlobalFunctions true;
               }
             } else={
-              $LogPrintExit2 warning $0 ("Syntax validation for script '" . $ScriptVal->"name" . \
-                "' failed! Ignoring!") false;
+              $LogPrint warning $0 ("Syntax validation for script '" . $ScriptVal->"name" . \
+                "' failed! Ignoring!");
             }
           } else={
             $LogPrintOnce warning $0 ("The script '" . $ScriptVal->"name" . "' requires RouterOS " . \
               $Required . ", which is not met by your installation. Ignoring!");
           }
         } else={
-          $LogPrintExit2 warning $0 ("Looks like new script '" . $ScriptVal->"name" . \
-            "' is not valid (missing shebang). Ignoring!") false;
+          $LogPrint warning $0 ("Looks like new script '" . $ScriptVal->"name" . \
+            "' is not valid (missing shebang). Ignoring!");
         }
       } else={
-        $LogPrintExit2 debug $0 ("Script '" .  $ScriptVal->"name" . "' did not change.") false;
+        $LogPrint debug $0 ("Script '" .  $ScriptVal->"name" . "' did not change.");
       }
     } else={
-      $LogPrintExit2 debug $0 ("No update for script '" . $ScriptVal->"name" . "'.") false;
+      $LogPrint debug $0 ("No update for script '" . $ScriptVal->"name" . "'.");
     }
   }
 
   :if ($ReloadGlobalFunctions = true) do={
-    $LogPrintExit2 info $0 ("Reloading global functions.") false;
+    $LogPrint info $0 ("Reloading global functions.");
     :do {
       /system/script/run global-functions;
     } on-error={
-      $LogPrintExit2 error $0 ("Reloading global functions failed!") false;
+      $LogPrint error $0 ("Reloading global functions failed!");
     }
   }
 
   :if ($ReloadGlobalConfig = true) do={
-    $LogPrintExit2 info $0 ("Reloading global configuration.") false;
+    $LogPrint info $0 ("Reloading global configuration.");
     :do {
       /system/script/run global-config;
     } on-error={
-      $LogPrintExit2 error $0 ("Reloading global configuration failed!" . \
-        " Syntax error or missing overlay?") false;
+      $LogPrint error $0 ("Reloading global configuration failed!" . \
+        " Syntax error or missing overlay?");
     }
   }
 
   :if ($ExpectedConfigVersionBefore > $ExpectedConfigVersion) do={
-    $LogPrintExit2 warning $0 ("The configuration version decreased from " . \
+    $LogPrint warning $0 ("The configuration version decreased from " . \
       $ExpectedConfigVersionBefore . " to " . $ExpectedConfigVersion . \
-      ". Installed an older version?") false;
+      ". Installed an older version?");
   }
 
   :if ($ExpectedConfigVersionBefore < $ExpectedConfigVersion) do={
@@ -1106,14 +1106,14 @@
 
     :do {
       :local Url ($ScriptUpdatesBaseUrl . "news-and-changes.rsc" . $ScriptUpdatesUrlSuffix);
-      $LogPrintExit2 debug $0 ("Fetching news, changes and migration: " . $Url) false;
+      $LogPrint debug $0 ("Fetching news, changes and migration: " . $Url);
       :local Result [ /tool/fetch check-certificate=yes-without-crl \
         http-header-field=({ $FetchUserAgent }) $Url output=user as-value ];
       :if ($Result->"status" = "finished") do={
         :set ChangeLogCode ($Result->"data");
       }
     } on-error={
-      $LogPrintExit2 warning $0 ("Failed fetching news, changes and migration!") false;
+      $LogPrint warning $0 ("Failed fetching news, changes and migration!");
     }
 
     :if ([ :len $ChangeLogCode ] > 0) do={
@@ -1121,10 +1121,10 @@
         :do {
           [ :parse $ChangeLogCode ];
         } on-error={
-          $LogPrintExit2 warning $0 ("The changelog failed to run!") false;
+          $LogPrint warning $0 ("The changelog failed to run!");
         }
       } else={
-        $LogPrintExit2 warning $0 ("The changelog failed syntax validation!") false;
+        $LogPrint warning $0 ("The changelog failed syntax validation!");
       }
     }
 
@@ -1133,14 +1133,14 @@
         :local Migration ($GlobalConfigMigration->[ :tostr $I ]);
         :if ([ :typeof $Migration ] = "str") do={
           :if ([ $ValidateSyntax $Migration ] = true) do={
-            $LogPrintExit2 info $0 ("Applying migration for change " . $I . ": " . $Migration) false;
+            $LogPrint info $0 ("Applying migration for change " . $I . ": " . $Migration);
             :do {
               [ :parse $Migration ];
             } on-error={
-              $LogPrintExit2 warning $0 ("Migration code for change " . $I . " failed to run!") false;
+              $LogPrint warning $0 ("Migration code for change " . $I . " failed to run!");
             }
           } else={
-            $LogPrintExit2 warning $0 ("Migration code for change " . $I . " failed syntax validation!") false;
+            $LogPrint warning $0 ("Migration code for change " . $I . " failed syntax validation!");
           }
         }
       }
@@ -1149,7 +1149,7 @@
     :local NotificationMessage ("The configuration version on " . $Identity . " increased " . \
        "to " . $ExpectedConfigVersion . ", current configuration may need modification. " . \
        "Please review and update global-config-overlay, then re-run global-config.");
-    $LogPrintExit2 info $0 ($NotificationMessage) false;
+    $LogPrint info $0 ($NotificationMessage);
 
     :if ([ :len $GlobalConfigChanges ] > 0) do={
       :set NotificationMessage ($NotificationMessage . "\n\nChanges:");
@@ -1157,7 +1157,7 @@
         :local Change ($GlobalConfigChanges->[ :tostr $I ]);
         :set NotificationMessage ($NotificationMessage . "\n " . \
             [ $SymbolForNotification "pushpin" "*" ] . $Change);
-        $LogPrintExit2 info $0 ("Change " . $I . ": " . $Change) false;
+        $LogPrint info $0 ("Change " . $I . ": " . $Change);
       }
     } else={
       :set NotificationMessage ($NotificationMessage . "\n\nNews and changes are not available.");
@@ -1191,7 +1191,7 @@
 
   :global GetRandom20CharAlNum;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :global ScriptLockOrder;
   :if ([ :typeof $ScriptLockOrder ] = "nothing") do={
@@ -1277,15 +1277,17 @@
   }
 
   :if ([ :len [ /system/script/find where name=$Script ] ] = 0) do={
-    $LogPrintExit2 error $0 ("A script named '" . $Script . "' does not exist!") true;
+    $LogPrint error $0 ("A script named '" . $Script . "' does not exist!");
+    :error false;
   }
 
   :if ([ $JobCount $Script ] = 0) do={
-    $LogPrintExit2 error $0 ("No script '" . $Script . "' is running!") true;
+    $LogPrint error $0 ("No script '" . $Script . "' is running!");
+    :error false;
   }
 
   :if ([ $TicketCount $Script ] >= [ $JobCount $Script ]) do={
-    $LogPrintExit2 error $0 ("More tickets than running scripts '" . $Script . "', resetting!") false;
+    $LogPrint error $0 ("More tickets than running scripts '" . $Script . "', resetting!");
     :set ($ScriptLockOrder->$Script) ({});
     /system/script/job/remove [ find where script=$Script ];
   }
@@ -1306,8 +1308,8 @@
   }
 
   $RemoveTicket $Script $MyTicket;
-  $LogPrintExit2 info $0 ("Script '" . $Script . "' started more than once" . [ $IfThenElse ($WaitCount > 0) \
-    " and timed out waiting for lock" "" ] . "...") false;
+  $LogPrint info $0 ("Script '" . $Script . "' started more than once" . [ $IfThenElse ($WaitCount > 0) \
+    " and timed out waiting for lock" "" ] . "...");
   :return false;
 }
 
@@ -1542,10 +1544,10 @@
     :do {
       /system/script/run $Script;
     } on-error={
-      $LogPrintExit2 error $0 ("Module '" . $ScriptVal->"name" . "' failed to run.") false;
+      $LogPrint error $0 ("Module '" . $ScriptVal->"name" . "' failed to run.");
     }
   } else={
-    $LogPrintExit2 error $0 ("Module '" . $ScriptVal->"name" . "' failed syntax validation, skipping.") false;
+    $LogPrint error $0 ("Module '" . $ScriptVal->"name" . "' failed syntax validation, skipping.");
   }
 }
 

From 5c567604ff14700ee90701e2b21af07fde4bd0ce Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 027/988] gps-track: switch to $LogPrint

---
 gps-track.rsc | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/gps-track.rsc b/gps-track.rsc
index c40e2e02..1aeab843 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -17,7 +17,7 @@
   :global GpsTrackUrl;
   :global Identity;
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
   :global WaitFullyConnected;
 
@@ -38,13 +38,13 @@
           "\"lon\":\"" . ($Gps->"longitude") . "\"," . \
           "\"identity\":\"" . $Identity . "\"" . \
         "}") as-value;
-      $LogPrintExit2 debug $ScriptName ("Sending GPS data in " . $CoordinateFormat . " format: " . \
+      $LogPrint debug $ScriptName ("Sending GPS data in " . $CoordinateFormat . " format: " . \
         "lat: " . ($Gps->"latitude") . " " . \
-        "lon: " . ($Gps->"longitude")) false;
+        "lon: " . ($Gps->"longitude"));
     } on-error={
-      $LogPrintExit2 warning $ScriptName ("Failed sending GPS data!") false;
+      $LogPrint warning $ScriptName ("Failed sending GPS data!");
     }
   } else={
-    $LogPrintExit2 debug $ScriptName ("GPS data not valid.") false;
+    $LogPrint debug $ScriptName ("GPS data not valid.");
   }
 } on-error={ }

From d93ffb9cb28843f95a970fdaae0d8296546cbb9d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 028/988] hotspot-to-wpa-cleanup: switch to $LogPrint

---
 hotspot-to-wpa-cleanup.capsman.rsc  | 14 +++++++-------
 hotspot-to-wpa-cleanup.template.rsc | 14 +++++++-------
 hotspot-to-wpa-cleanup.wifi.rsc     | 14 +++++++-------
 3 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index ba74260f..0540ad5c 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -18,7 +18,7 @@
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -41,8 +41,8 @@
     :foreach Lease in=[ /ip/dhcp-server/lease/find where dynamic \
         mac-address=($ClientVal->"mac-address") ] do={
       :if (($DHCPServers->[ /ip/dhcp-server/lease/get $Lease server ]) > 0s) do={
-        $LogPrintExit2 info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
-          " connected to WPA, making lease static.") false;
+        $LogPrint info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
+          " connected to WPA, making lease static.");
         /ip/dhcp-server/lease/make-static $Lease;
         /ip/dhcp-server/lease/set comment=($ClientVal->"comment") $Lease;
       }
@@ -54,8 +54,8 @@
     :local ClientVal [ /caps-man/access-list/get $Client ];
     :if ([ :len [ /ip/dhcp-server/lease/find where !dynamic comment~"^hotspot-to-wpa:" \
          mac-address=($ClientVal->"mac-address") ] ] = 0) do={
-      $LogPrintExit2 info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
-        " did not connect to WPA, removing from access list.") false;
+      $LogPrint info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
+        " did not connect to WPA, removing from access list.");
       /caps-man/access-list/remove $Client;
     }
   }
@@ -64,8 +64,8 @@
     :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
         server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
-      $LogPrintExit2 info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
-        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.") false;
+      $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
+        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.");
       /caps-man/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
         mac-address=($LeaseVal->"mac-address") ];
       /ip/dhcp-server/lease/remove $Lease;
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index c46d75d5..6f3b3e1e 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -19,7 +19,7 @@
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -44,8 +44,8 @@
     :foreach Lease in=[ /ip/dhcp-server/lease/find where dynamic \
         mac-address=($ClientVal->"mac-address") ] do={
       :if (($DHCPServers->[ /ip/dhcp-server/lease/get $Lease server ]) > 0s) do={
-        $LogPrintExit2 info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
-          " connected to WPA, making lease static.") false;
+        $LogPrint info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
+          " connected to WPA, making lease static.");
         /ip/dhcp-server/lease/make-static $Lease;
         /ip/dhcp-server/lease/set comment=($ClientVal->"comment") $Lease;
       }
@@ -59,8 +59,8 @@
     :local ClientVal [ /interface/wifi/access-list/get $Client ];
     :if ([ :len [ /ip/dhcp-server/lease/find where !dynamic comment~"^hotspot-to-wpa:" \
          mac-address=($ClientVal->"mac-address") ] ] = 0) do={
-      $LogPrintExit2 info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
-        " did not connect to WPA, removing from access list.") false;
+      $LogPrint info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
+        " did not connect to WPA, removing from access list.");
       /caps-man/access-list/remove $Client;
       /interface/wifi/access-list/remove $Client;
     }
@@ -70,8 +70,8 @@
     :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
         server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
-      $LogPrintExit2 info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
-        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.") false;
+      $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
+        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.");
       /caps-man/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
       /interface/wifi/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
         mac-address=($LeaseVal->"mac-address") ];
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 3e5799a4..9c796287 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -18,7 +18,7 @@
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -41,8 +41,8 @@
     :foreach Lease in=[ /ip/dhcp-server/lease/find where dynamic \
         mac-address=($ClientVal->"mac-address") ] do={
       :if (($DHCPServers->[ /ip/dhcp-server/lease/get $Lease server ]) > 0s) do={
-        $LogPrintExit2 info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
-          " connected to WPA, making lease static.") false;
+        $LogPrint info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
+          " connected to WPA, making lease static.");
         /ip/dhcp-server/lease/make-static $Lease;
         /ip/dhcp-server/lease/set comment=($ClientVal->"comment") $Lease;
       }
@@ -54,8 +54,8 @@
     :local ClientVal [ /interface/wifi/access-list/get $Client ];
     :if ([ :len [ /ip/dhcp-server/lease/find where !dynamic comment~"^hotspot-to-wpa:" \
          mac-address=($ClientVal->"mac-address") ] ] = 0) do={
-      $LogPrintExit2 info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
-        " did not connect to WPA, removing from access list.") false;
+      $LogPrint info $ScriptName ("Client with mac address " . ($ClientVal->"mac-address") . \
+        " did not connect to WPA, removing from access list.");
       /interface/wifi/access-list/remove $Client;
     }
   }
@@ -64,8 +64,8 @@
     :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
         server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
-      $LogPrintExit2 info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
-        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.") false;
+      $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
+        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.");
       /interface/wifi/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
         mac-address=($LeaseVal->"mac-address") ];
       /ip/dhcp-server/lease/remove $Lease;

From 369af473743623fd89685cdfd8bf31b3430ed489 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 029/988] hotspot-to-wpa: switch to $LogPrint

---
 hotspot-to-wpa.capsman.rsc  | 15 ++++++++-------
 hotspot-to-wpa.template.rsc | 15 ++++++++-------
 hotspot-to-wpa.wifi.rsc     | 15 ++++++++-------
 3 files changed, 24 insertions(+), 21 deletions(-)

diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index a6ad2a16..37c84644 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -17,7 +17,7 @@
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -29,7 +29,8 @@
   }
 
   :if ([ :typeof $MacAddress ] = "nothing" || [ :typeof $UserName ] = "nothing") do={
-    $LogPrintExit2 error $ScriptName ("This script is supposed to run from hotspot on login.") true;
+    $LogPrint error $ScriptName ("This script is supposed to run from hotspot on login.");
+    :error false;
   }
 
   :local Date [ /system/clock/get date ];
@@ -42,28 +43,28 @@
 
   :if ([ :len [ /caps-man/access-list/find where comment="--- hotspot-to-wpa above ---" disabled ] ] = 0) do={
     /caps-man/access-list/add comment="--- hotspot-to-wpa above ---" disabled=yes;
-    $LogPrintExit2 warning $ScriptName ("Added disabled access-list entry with comment '--- hotspot-to-wpa above ---'.") false;
+    $LogPrint warning $ScriptName ("Added disabled access-list entry with comment '--- hotspot-to-wpa above ---'.");
   }
   :local PlaceBefore ([ /caps-man/access-list/find where comment="--- hotspot-to-wpa above ---" disabled ]->0);
 
   :if ([ :len [ /caps-man/access-list/find where \
       comment=("hotspot-to-wpa template " . $Hotspot) disabled ] ] = 0) do={
     /caps-man/access-list/add comment=("hotspot-to-wpa template " . $Hotspot) disabled=yes place-before=$PlaceBefore;
-    $LogPrintExit2 warning $ScriptName ("Added template in access-list for hotspot '" . $Hotspot . "'.") false;
+    $LogPrint warning $ScriptName ("Added template in access-list for hotspot '" . $Hotspot . "'.");
   }
   :local Template [ /caps-man/access-list/get ([ find where \
       comment=("hotspot-to-wpa template " . $Hotspot) disabled ]->0) ];
 
   :if ($Template->"action" = "reject") do={
-    $LogPrintExit2 info $ScriptName ("Ignoring login for hotspot '" . $Hotspot . "'.") false;
+    $LogPrint info $ScriptName ("Ignoring login for hotspot '" . $Hotspot . "'.");
     :error true;
   }
 
   # allow login page to load
   :delay 1s;
 
-  $LogPrintExit2 info $ScriptName ("Adding/updating access-list entry for mac address " . $MacAddress . \
-    " (user " . $UserName . ").") false;
+  $LogPrint info $ScriptName ("Adding/updating access-list entry for mac address " . $MacAddress . \
+    " (user " . $UserName . ").");
   /caps-man/access-list/remove [ find where mac-address=$MacAddress comment~"^hotspot-to-wpa: " ];
   /caps-man/access-list/add private-passphrase=($UserVal->"password") ssid-regexp="-wpa\$" \
       mac-address=$MacAddress comment=("hotspot-to-wpa: " . $UserName . ", " . $MacAddress . ", " . $Date) \
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index b7869c47..cbce42a5 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -18,7 +18,7 @@
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -30,7 +30,8 @@
   }
 
   :if ([ :typeof $MacAddress ] = "nothing" || [ :typeof $UserName ] = "nothing") do={
-    $LogPrintExit2 error $ScriptName ("This script is supposed to run from hotspot on login.") true;
+    $LogPrint error $ScriptName ("This script is supposed to run from hotspot on login.");
+    :error false;
   }
 
   :local Date [ /system/clock/get date ];
@@ -45,7 +46,7 @@
   :if ([ :len [ /interface/wifi/access-list/find where comment="--- hotspot-to-wpa above ---" disabled ] ] = 0) do={
     /caps-man/access-list/add comment="--- hotspot-to-wpa above ---" disabled=yes;
     /interface/wifi/access-list/add comment="--- hotspot-to-wpa above ---" disabled=yes;
-    $LogPrintExit2 warning $ScriptName ("Added disabled access-list entry with comment '--- hotspot-to-wpa above ---'.") false;
+    $LogPrint warning $ScriptName ("Added disabled access-list entry with comment '--- hotspot-to-wpa above ---'.");
   }
   :local PlaceBefore ([ /caps-man/access-list/find where comment="--- hotspot-to-wpa above ---" disabled ]->0);
   :local PlaceBefore ([ /interface/wifi/access-list/find where comment="--- hotspot-to-wpa above ---" disabled ]->0);
@@ -55,22 +56,22 @@
       comment=("hotspot-to-wpa template " . $Hotspot) disabled ] ] = 0) do={
     /caps-man/access-list/add comment=("hotspot-to-wpa template " . $Hotspot) disabled=yes place-before=$PlaceBefore;
     /interface/wifi/access-list/add comment=("hotspot-to-wpa template " . $Hotspot) disabled=yes place-before=$PlaceBefore;
-    $LogPrintExit2 warning $ScriptName ("Added template in access-list for hotspot '" . $Hotspot . "'.") false;
+    $LogPrint warning $ScriptName ("Added template in access-list for hotspot '" . $Hotspot . "'.");
   }
   :local Template [ /caps-man/access-list/get ([ find where \
   :local Template [ /interface/wifi/access-list/get ([ find where \
       comment=("hotspot-to-wpa template " . $Hotspot) disabled ]->0) ];
 
   :if ($Template->"action" = "reject") do={
-    $LogPrintExit2 info $ScriptName ("Ignoring login for hotspot '" . $Hotspot . "'.") false;
+    $LogPrint info $ScriptName ("Ignoring login for hotspot '" . $Hotspot . "'.");
     :error true;
   }
 
   # allow login page to load
   :delay 1s;
 
-  $LogPrintExit2 info $ScriptName ("Adding/updating access-list entry for mac address " . $MacAddress . \
-    " (user " . $UserName . ").") false;
+  $LogPrint info $ScriptName ("Adding/updating access-list entry for mac address " . $MacAddress . \
+    " (user " . $UserName . ").");
   /caps-man/access-list/remove [ find where mac-address=$MacAddress comment~"^hotspot-to-wpa: " ];
   /interface/wifi/access-list/remove [ find where mac-address=$MacAddress comment~"^hotspot-to-wpa: " ];
   /caps-man/access-list/add private-passphrase=($UserVal->"password") ssid-regexp="-wpa\$" \
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index e728d7f8..86aeed78 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -17,7 +17,7 @@
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -29,7 +29,8 @@
   }
 
   :if ([ :typeof $MacAddress ] = "nothing" || [ :typeof $UserName ] = "nothing") do={
-    $LogPrintExit2 error $ScriptName ("This script is supposed to run from hotspot on login.") true;
+    $LogPrint error $ScriptName ("This script is supposed to run from hotspot on login.");
+    :error false;
   }
 
   :local Date [ /system/clock/get date ];
@@ -42,28 +43,28 @@
 
   :if ([ :len [ /interface/wifi/access-list/find where comment="--- hotspot-to-wpa above ---" disabled ] ] = 0) do={
     /interface/wifi/access-list/add comment="--- hotspot-to-wpa above ---" disabled=yes;
-    $LogPrintExit2 warning $ScriptName ("Added disabled access-list entry with comment '--- hotspot-to-wpa above ---'.") false;
+    $LogPrint warning $ScriptName ("Added disabled access-list entry with comment '--- hotspot-to-wpa above ---'.");
   }
   :local PlaceBefore ([ /interface/wifi/access-list/find where comment="--- hotspot-to-wpa above ---" disabled ]->0);
 
   :if ([ :len [ /interface/wifi/access-list/find where \
       comment=("hotspot-to-wpa template " . $Hotspot) disabled ] ] = 0) do={
     /interface/wifi/access-list/add comment=("hotspot-to-wpa template " . $Hotspot) disabled=yes place-before=$PlaceBefore;
-    $LogPrintExit2 warning $ScriptName ("Added template in access-list for hotspot '" . $Hotspot . "'.") false;
+    $LogPrint warning $ScriptName ("Added template in access-list for hotspot '" . $Hotspot . "'.");
   }
   :local Template [ /interface/wifi/access-list/get ([ find where \
       comment=("hotspot-to-wpa template " . $Hotspot) disabled ]->0) ];
 
   :if ($Template->"action" = "reject") do={
-    $LogPrintExit2 info $ScriptName ("Ignoring login for hotspot '" . $Hotspot . "'.") false;
+    $LogPrint info $ScriptName ("Ignoring login for hotspot '" . $Hotspot . "'.");
     :error true;
   }
 
   # allow login page to load
   :delay 1s;
 
-  $LogPrintExit2 info $ScriptName ("Adding/updating access-list entry for mac address " . $MacAddress . \
-    " (user " . $UserName . ").") false;
+  $LogPrint info $ScriptName ("Adding/updating access-list entry for mac address " . $MacAddress . \
+    " (user " . $UserName . ").");
   /interface/wifi/access-list/remove [ find where mac-address=$MacAddress comment~"^hotspot-to-wpa: " ];
   /interface/wifi/access-list/add passphrase=($UserVal->"password") ssid-regexp="-wpa\$" \
       mac-address=$MacAddress comment=("hotspot-to-wpa: " . $UserName . ", " . $MacAddress . ", " . $Date) \

From 56e39123b92fa0c6f20ed47bcc870db6ab1a4cd1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 030/988] ipsec-to-dns: switch to $LogPrint

---
 ipsec-to-dns.rsc | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index 03abf59e..dd40ca23 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -22,7 +22,7 @@
   :global CharacterReplace;
   :global EscapeForRegEx;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -38,7 +38,7 @@
 
   :if ([ :len [ /ip/dns/static/find where (name=$CommentString or (comment=$CommentString and name=-)) type=NXDOMAIN disabled ] ] = 0) do={
     /ip/dns/static/add name=$CommentString type=NXDOMAIN disabled=yes;
-    $LogPrintExit2 warning $ScriptName ("Added disabled static dns record with name '" . $CommentString . "'.") false;
+    $LogPrint warning $ScriptName ("Added disabled static dns record with name '" . $CommentString . "'.");
   }
   :local PlaceBefore ([ /ip/dns/static/find where (name=$CommentString or (comment=$CommentString and name=-)) type=NXDOMAIN disabled ]->0);
 
@@ -47,10 +47,10 @@
     :local PeerId [ $CharacterReplace ($DnsRecordVal->"comment") $CommentPrefix "" ];
     :if ([ :len [ /ip/ipsec/active-peers/find where id~("^(CN=)?" . [ $EscapeForRegEx $PeerId ] . "\$") \
          dynamic-address=($DnsRecordVal->"address") ] ] > 0) do={
-      $LogPrintExit2 debug $ScriptName ("Peer " . $PeerId . " (" . $DnsRecordVal->"name" . ") still exists. Not deleting DNS entry.") false;
+      $LogPrint debug $ScriptName ("Peer " . $PeerId . " (" . $DnsRecordVal->"name" . ") still exists. Not deleting DNS entry.");
     } else={
       :local Found false;
-      $LogPrintExit2 info $ScriptName ("Peer " . $PeerId . " (" . $DnsRecordVal->"name" . ") has gone, deleting DNS entry.") false;
+      $LogPrint info $ScriptName ("Peer " . $PeerId . " (" . $DnsRecordVal->"name" . ") has gone, deleting DNS entry.");
       /ip/dns/static/remove $DnsRecord;
     }
   }
@@ -66,13 +66,13 @@
     :if ([ :len $DnsRecord ] > 0) do={
       :local DnsIp [ /ip/dns/static/get $DnsRecord address ];
       :if ($DnsIp = $PeerVal->"dynamic-address") do={
-        $LogPrintExit2 debug $ScriptName ("DNS entry for " . $Fqdn . " does not need updating.") false;
+        $LogPrint debug $ScriptName ("DNS entry for " . $Fqdn . " does not need updating.");
       } else={
-        $LogPrintExit2 info $ScriptName ("Replacing DNS entry for " . $Fqdn . ", new address is " . $PeerVal->"dynamic-address" . ".") false;
+        $LogPrint info $ScriptName ("Replacing DNS entry for " . $Fqdn . ", new address is " . $PeerVal->"dynamic-address" . ".");
         /ip/dns/static/set name=$Fqdn address=($PeerVal->"dynamic-address") ttl=$Ttl comment=$Comment $DnsRecord;
       }
     } else={
-      $LogPrintExit2 info $ScriptName ("Adding new DNS entry for " . $Fqdn . ", address is " . $PeerVal->"dynamic-address" . ".") false;
+      $LogPrint info $ScriptName ("Adding new DNS entry for " . $Fqdn . ", address is " . $PeerVal->"dynamic-address" . ".");
       /ip/dns/static/add name=$Fqdn address=($PeerVal->"dynamic-address") ttl=$Ttl comment=$Comment place-before=$PlaceBefore;
     }
   }

From 1f938efcaff3e4c67b5be25762c97dce75fa104c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 031/988] ipv6-update: switch to $LogPrint

---
 ipv6-update.rsc | 21 +++++++++++----------
 1 file changed, 11 insertions(+), 10 deletions(-)

diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index 8ce1e4df..65bb9595 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -14,7 +14,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -25,19 +25,20 @@
   }
 
   :if ([ :typeof $PdPrefix ] = "nothing") do={
-    $LogPrintExit2 error $ScriptName ("This script is supposed to run from ipv6 dhcp-client.") true;
+    $LogPrint error $ScriptName ("This script is supposed to run from ipv6 dhcp-client.");
+    :error false;
   }
 
   :local Pool [ /ipv6/pool/get [ find where prefix=$PdPrefix ] name ];
   :if ([ :len [ /ipv6/firewall/address-list/find where comment=("ipv6-pool-" . $Pool) ] ] = 0) do={
     /ipv6/firewall/address-list/add list=("ipv6-pool-" . $Pool) address=:: comment=("ipv6-pool-" . $Pool);
-    $LogPrintExit2 warning $ScriptName ("Added ipv6 address list entry for ipv6-pool-" . $Pool) false;
+    $LogPrint warning $ScriptName ("Added ipv6 address list entry for ipv6-pool-" . $Pool);
   }
   :local AddrList [ /ipv6/firewall/address-list/find where comment=("ipv6-pool-" . $Pool) ];
   :local OldPrefix [ /ipv6/firewall/address-list/get ($AddrList->0) address ];
 
   :if ($OldPrefix != $PdPrefix) do={
-    $LogPrintExit2 info $ScriptName ("Updating IPv6 address list with new IPv6 prefix " . $PdPrefix) false;
+    $LogPrint info $ScriptName ("Updating IPv6 address list with new IPv6 prefix " . $PdPrefix);
     /ipv6/firewall/address-list/set address=$PdPrefix $AddrList;
 
     # give the interfaces a moment to receive their addresses
@@ -56,12 +57,12 @@
           :local Address ($ListEntryVal->"address");
           :local Address ($Prefix | ([ :toip6 [ :pick $Address 0 [ :find $Address "/128" ] ] ] & ::ffff:ffff:ffff:ffff));
 
-          $LogPrintExit2 info $ScriptName ("Updating IPv6 address list with new IPv6 host address " . $Address . \
-            " from interface " . ($Comment->"interface")) false;
+          $LogPrint info $ScriptName ("Updating IPv6 address list with new IPv6 host address " . $Address . \
+            " from interface " . ($Comment->"interface"));
           /ipv6/firewall/address-list/set address=$Address $ListEntry;
         } else={
-          $LogPrintExit2 info $ScriptName ("Updating IPv6 address list with new IPv6 prefix " . $Prefix . \
-            " from interface " . ($Comment->"interface")) false;
+          $LogPrint info $ScriptName ("Updating IPv6 address list with new IPv6 prefix " . $Prefix . \
+            " from interface " . ($Comment->"interface"));
           /ipv6/firewall/address-list/set address=$Prefix $ListEntry;
         }
       }
@@ -77,8 +78,8 @@
         :set Prefix ([ :toip6 [ :pick $Prefix 0 [ :find $Prefix "/64" ] ] ] & ffff:ffff:ffff:ffff::);
         :local Address ($Prefix | ([ :toip6 ($RecordVal->"address") ] & ::ffff:ffff:ffff:ffff));
 
-        $LogPrintExit2 info $ScriptName ("Updating DNS record for " . ($RecordVal->"name") . \
-          ($RecordVal->"regexp") . " to " . $Address) false;
+        $LogPrint info $ScriptName ("Updating DNS record for " . ($RecordVal->"name") . \
+          ($RecordVal->"regexp") . " to " . $Address);
         /ip/dns/static/set address=$Address $Record;
       }
     }

From 29a72e54dce7ad5a65b46d5b403db1ccec3c9c3e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 032/988] lease-script: switch to $LogPrint

---
 lease-script.rsc | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/lease-script.rsc b/lease-script.rsc
index 0f6b7f88..8e1e8f64 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -16,7 +16,7 @@
 
   :global Grep;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -24,18 +24,19 @@
        [ :typeof $leaseActMAC ] = "nothing" || \
        [ :typeof $leaseServerName ] = "nothing" || \
        [ :typeof $leaseBound ] = "nothing") do={
-    $LogPrintExit2 error $ScriptName ("This script is supposed to run from ip dhcp-server.") true;
+    $LogPrint error $ScriptName ("This script is supposed to run from ip dhcp-server.");
+    :error false;
   }
 
-  $LogPrintExit2 debug $ScriptName ("DHCP Server " . $leaseServerName . " " . [ $IfThenElse ($leaseBound = 0) \
-    "de" "" ] . "assigned lease " . $leaseActIP . " to " . $leaseActMAC) false;
+  $LogPrint debug $ScriptName ("DHCP Server " . $leaseServerName . " " . [ $IfThenElse ($leaseBound = 0) \
+    "de" "" ] . "assigned lease " . $leaseActIP . " to " . $leaseActMAC);
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
     :error false;
   }
 
   :if ([ :len [ /system/script/job/find where script=$ScriptName ] ] > 1) do={
-    $LogPrintExit2 debug $ScriptName ("More invocations are waiting, exiting early.") false;
+    $LogPrint debug $ScriptName ("More invocations are waiting, exiting early.");
     :error true;
   }
 
@@ -49,10 +50,10 @@
 
   :foreach Order,Script in=$RunOrder do={
     :do {
-      $LogPrintExit2 debug $ScriptName ("Running script with order " . $Order . ": " . $Script) false;
+      $LogPrint debug $ScriptName ("Running script with order " . $Order . ": " . $Script);
       /system/script/run $Script;
     } on-error={
-      $LogPrintExit2 warning $ScriptName ("Running script '" . $Script . "' failed!") false;
+      $LogPrint warning $ScriptName ("Running script '" . $Script . "' failed!");
     }
   }
 } on-error={ }

From f8c79abd382a3859297f87071a0836d6d9480bdc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 033/988] log-forward: switch to $LogPrint

---
 log-forward.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/log-forward.rsc b/log-forward.rsc
index 09e3b842..a919d8f2 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -26,7 +26,7 @@
   :global HexToNum;
   :global IfThenElse;
   :global LogForwardFilterLogForwarding;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MAX;
   :global ScriptLock;
   :global SendNotification2;
@@ -42,7 +42,7 @@
 
   :if ($LogForwardRateLimit > 30) do={
     :set LogForwardRateLimit ($LogForwardRateLimit - 1);
-    $LogPrintExit2 info $ScriptName ("Rate limit in action, not forwarding logs, if any!") false;
+    $LogPrint info $ScriptName ("Rate limit in action, not forwarding logs, if any!");
     :error false;
   }
 

From b7983d18c41d61746671a55ec2b9795eba8477bc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 034/988] mod/bridge-port-to: switch to $LogPrint

---
 mod/bridge-port-to.rsc | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index a78f31ba..441094f1 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -12,7 +12,7 @@
   :local BridgePortTo [ :tostr $1 ];
 
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
 
   :local InterfaceReEnable ({});
@@ -24,21 +24,22 @@
 
         :if ($BridgeDefault = "dhcp-client") do={
           :if ([ :len $DHCPClient ] != 1) do={
-            $LogPrintExit2 warning $0 ([ $IfThenElse ([ :len $DHCPClient ] = 0) "Missing" "Duplicate" ] . \
-                " dhcp client configuration for interface " . $BridgePortVal->"interface" . "!") true;
+            $LogPrint warning $0 ([ $IfThenElse ([ :len $DHCPClient ] = 0) "Missing" "Duplicate" ] . \
+                " dhcp client configuration for interface " . $BridgePortVal->"interface" . "!");
+            :error false;
           }
           :local DHCPClientDisabled [ /ip/dhcp-client/get $DHCPClient disabled ];
 
           :if ($BridgePortVal->"disabled" = false || $DHCPClientDisabled = true) do={
-            $LogPrintExit2 info $0 ("Disabling bridge port for interface " . $BridgePortVal->"interface" . ", enabling dhcp client.") false;
+            $LogPrint info $0 ("Disabling bridge port for interface " . $BridgePortVal->"interface" . ", enabling dhcp client.");
             /interface/bridge/port/disable $BridgePort;
             :delay 200ms;
             /ip/dhcp-client/enable $DHCPClient;
           }
         } else={
           :if ($BridgePortVal->"disabled" = true || $BridgeDefault != $BridgePortVal->"bridge") do={
-            $LogPrintExit2 info $0 ("Enabling bridge port for interface " . $BridgePortVal->"interface" . ", changing to " . $BridgePortTo . \
-                " bridge " . $BridgeDefault . ", disabling dhcp client.") false;
+            $LogPrint info $0 ("Enabling bridge port for interface " . $BridgePortVal->"interface" . ", changing to " . $BridgePortTo . \
+                " bridge " . $BridgeDefault . ", disabling dhcp client.");
             :if ([ :len $DHCPClient ] = 1) do={
               /ip/dhcp-client/disable $DHCPClient;
               :delay 200ms;
@@ -50,8 +51,8 @@
             }
             /interface/bridge/port/set disabled=no bridge=$BridgeDefault $BridgePort;
           } else={
-            $LogPrintExit2 debug $0 ("Interface " . $BridgePortVal->"interface" . " already connected to " . $BridgePortTo . \
-                " bridge " . $BridgeDefault . ".") false;
+            $LogPrint debug $0 ("Interface " . $BridgePortVal->"interface" . " already connected to " . $BridgePortTo . \
+                " bridge " . $BridgeDefault . ".");
           }
         }
       }
@@ -59,7 +60,7 @@
   }
   :if ([ :len $InterfaceReEnable ] > 0) do={
     :delay 5s;
-    $LogPrintExit2 info $0 ("Re-enabling interfaces...") false;
+    $LogPrint info $0 ("Re-enabling interfaces...");
     /interface/ethernet/enable $InterfaceReEnable;
   }
 }

From bdcf43a6f6644d0f88a1d38e4b28e90566d77d23 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 035/988] mod/bridge-port-vlan: switch to $LogPrint

---
 mod/bridge-port-vlan.rsc | 22 ++++++++++++----------
 1 file changed, 12 insertions(+), 10 deletions(-)

diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 72cf772b..522e9a6d 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -12,7 +12,7 @@
   :local ConfigTo [ :tostr $1 ];
 
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
 
   :local InterfaceReEnable ({});
@@ -24,13 +24,14 @@
 
         :if ($Vlan = "dhcp-client") do={
           :if ([ :len $DHCPClient ] != 1) do={
-            $LogPrintExit2 warning $0 ([ $IfThenElse ([ :len $DHCPClient ] = 0) "Missing" "Duplicate" ] . \
-                " dhcp client configuration for interface " . $BridgePortVal->"interface" . "!") true;
+            $LogPrint warning $0 ([ $IfThenElse ([ :len $DHCPClient ] = 0) "Missing" "Duplicate" ] . \
+                " dhcp client configuration for interface " . $BridgePortVal->"interface" . "!");
+            :error false;
           }
           :local DHCPClientDisabled [ /ip/dhcp-client/get $DHCPClient disabled ];
 
           :if ($BridgePortVal->"disabled" = false || $DHCPClientDisabled = true) do={
-            $LogPrintExit2 info $0 ("Disabling bridge port for interface " . $BridgePortVal->"interface" . ", enabling dhcp client.") false;
+            $LogPrint info $0 ("Disabling bridge port for interface " . $BridgePortVal->"interface" . ", enabling dhcp client.");
             /interface/bridge/port/disable $BridgePort;
             :delay 200ms;
             /ip/dhcp-client/enable $DHCPClient;
@@ -41,12 +42,13 @@
             :do {
               :set $Vlan ([ /interface/bridge/vlan/get [ find where comment=$Vlan ] vlan-ids ]->0);
             } on-error={
-              $LogPrintExit2 warning $0 ("Could not find VLAN '" . $Vlan . "' for interface " . $BridgePortVal->"interface" . "!") true;
+              $LogPrint warning $0 ("Could not find VLAN '" . $Vlan . "' for interface " . $BridgePortVal->"interface" . "!");
+              :error false;
             }
           }
           :if ($BridgePortVal->"disabled" = true || $Vlan != $BridgePortVal->"pvid") do={
-            $LogPrintExit2 info $0 ("Enabling bridge port for interface " . $BridgePortVal->"interface" . ", changing to " . $ConfigTo . \
-                " vlan " . $Vlan . [ $IfThenElse ($Vlan != $VlanName) (" (" . $VlanName . ")") ] . ", disabling dhcp client.") false;
+            $LogPrint info $0 ("Enabling bridge port for interface " . $BridgePortVal->"interface" . ", changing to " . $ConfigTo . \
+                " vlan " . $Vlan . [ $IfThenElse ($Vlan != $VlanName) (" (" . $VlanName . ")") ] . ", disabling dhcp client.");
             :if ([ :len $DHCPClient ] = 1) do={
               /ip/dhcp-client/disable $DHCPClient;
               :delay 200ms;
@@ -58,8 +60,8 @@
             }
             /interface/bridge/port/set disabled=no pvid=$Vlan $BridgePort;
           } else={
-            $LogPrintExit2 debug $0 ("Interface " . $BridgePortVal->"interface" . " already connected to " . $ConfigTo . \
-                " vlan " . $Vlan . ".") false;
+            $LogPrint debug $0 ("Interface " . $BridgePortVal->"interface" . " already connected to " . $ConfigTo . \
+                " vlan " . $Vlan . ".");
           }
         }
       }
@@ -67,7 +69,7 @@
   }
   :if ([ :len $InterfaceReEnable ] > 0) do={
     :delay 5s;
-    $LogPrintExit2 info $0 ("Re-enabling interfaces...") false;
+    $LogPrint info $0 ("Re-enabling interfaces...");
     /interface/ethernet/enable $InterfaceReEnable;
   }
 }

From 9b8d3f7970dbdddeb2a51db06f8358d8a195526d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 036/988] mod/notification-email: switch to $LogPrint

---
 mod/notification-email.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 88bfdac4..78192f36 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -24,7 +24,7 @@
   :global EitherOr;
   :global IsDNSResolving;
   :global IsTimeSync;
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :local AllDone true;
   :local QueueLen [ :len $EmailQueue ];
@@ -35,23 +35,23 @@
   }
 
   :if ([ /tool/e-mail/get last-status ] = "in-progress") do={
-    $LogPrintExit2 debug $0 ("Sending mail is currently in progress, not flushing.") false;
+    $LogPrint debug $0 ("Sending mail is currently in progress, not flushing.");
     :return false;
   }
 
   :if ([ $IsTimeSync ] = false) do={
-    $LogPrintExit2 debug $0 ("Time is not synced, not flushing.") false;
+    $LogPrint debug $0 ("Time is not synced, not flushing.");
     :return false;
   }
 
   :local EMailSettings [ /tool/e-mail/get ];
   :if ([ :typeof [ :toip ($EMailSettings->"server") ] ] != "ip" && [ $IsDNSResolving ] = false) do={
-    $LogPrintExit2 debug $0 ("Server address is a DNS name and resolving fails, not flushing.") false;
+    $LogPrint debug $0 ("Server address is a DNS name and resolving fails, not flushing.");
     :return false;
   }
 
   :if ([ :len $Scheduler ] > 0 && $QueueLen = 0) do={
-    $LogPrintExit2 warning $0 ("Flushing E-Mail messages from scheduler, but queue is empty.") false;
+    $LogPrint warning $0 ("Flushing E-Mail messages from scheduler, but queue is empty.");
   }
 
   /system/scheduler/set interval=([ $EitherOr $QueueLen 1 ] . "m") comment="Sending..." $Scheduler;
@@ -64,7 +64,7 @@
         :if ([ :len [ /file/find where name=$File ] ] = 1) do={
           :set Attach ($Attach, $File);
         } else={
-          $LogPrintExit2 warning $0 ("File '" . $File . "' does not exist, can not attach.") false;
+          $LogPrint warning $0 ("File '" . $File . "' does not exist, can not attach.");
         }
       }
       /tool/e-mail/send to=($Message->"to") cc=($Message->"cc") subject=($Message->"subject") \

From 279993e965a934c6f4c2f30f4c97aa09ab03158e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 037/988] mod/notification-matrix: switch to $LogPrint

---
 mod/notification-matrix.rsc | 41 +++++++++++++++++++++----------------
 1 file changed, 23 insertions(+), 18 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 8884b08b..c4fe100b 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -20,10 +20,10 @@
   :global MatrixQueue;
 
   :global IsFullyConnected;
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :if ([ $IsFullyConnected ] = false) do={
-    $LogPrintExit2 debug $0 ("System is not fully connected, not flushing.") false;
+    $LogPrint debug $0 ("System is not fully connected, not flushing.");
     :return false;
   }
 
@@ -31,7 +31,7 @@
   :local QueueLen [ :len $MatrixQueue ];
 
   :if ([ :len [ /system/scheduler/find where name="_FlushMatrixQueue" ] ] > 0 && $QueueLen = 0) do={
-    $LogPrintExit2 warning $0 ("Flushing Matrix messages from scheduler, but queue is empty.") false;
+    $LogPrint warning $0 ("Flushing Matrix messages from scheduler, but queue is empty.");
   }
 
   :foreach Id,Message in=$MatrixQueue do={
@@ -45,7 +45,7 @@
            $Message->"formatted" . "\" }") as-value;
         :set ($MatrixQueue->$Id);
       } on-error={
-        $LogPrintExit2 debug $0 ("Sending queued Matrix message failed.") false;
+        $LogPrint debug $0 ("Sending queued Matrix message failed.");
         :set AllDone false;
       }
     }
@@ -72,7 +72,7 @@
   :global MatrixRoomOverride;
 
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global SymbolForNotification;
 
   :local PrepareText do={
@@ -134,7 +134,7 @@
        "\"format\": \"org.matrix.custom.html\", \"formatted_body\": \"" . \
        $Formatted . "\" }") as-value;
   } on-error={
-    $LogPrintExit2 info $0 ("Failed sending Matrix notification! Queuing...") false;
+    $LogPrint info $0 ("Failed sending Matrix notification! Queuing...");
 
     :if ([ :typeof $MatrixQueue ] = "nothing") do={
       :set MatrixQueue ({});
@@ -184,7 +184,7 @@
   :local Pass [ :tostr $2 ];
 
   :global CharacterReplace;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseJson;
 
   :global MatrixAccessToken;
@@ -195,9 +195,10 @@
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
         ("https://" . $Domain . "/.well-known/matrix/client") as-value ]->"data");
     :set MatrixHomeServer ([ $ParseJson ([ $ParseJson [ $CharacterReplace $Data " " "" ] ]->"m.homeserver") ]->"base_url");
-    $LogPrintExit2 debug $0 ("Home server is: " . $MatrixHomeServer) false;
+    $LogPrint debug $0 ("Home server is: " . $MatrixHomeServer);
   } on-error={
-    $LogPrintExit2 error $0 ("Failed getting home server!") true;
+    $LogPrint error $0 ("Failed getting home server!");
+    :error false;
   }
 
   :if ([ :pick $MatrixHomeServer 0 8 ] = "https://") do={
@@ -209,18 +210,20 @@
         http-method=post http-data=("{\"type\":\"m.login.password\", \"user\":\"" . $User . "\", \"password\":\"" . $Pass . "\"}") \
         ("https://" . $MatrixHomeServer . "/_matrix/client/r0/login") as-value ]->"data");
     :set MatrixAccessToken ([ $ParseJson $Data ]->"access_token");
-    $LogPrintExit2 debug $0 ("Access token is: " . $MatrixAccessToken) false;
+    $LogPrint debug $0 ("Access token is: " . $MatrixAccessToken);
   } on-error={
-    $LogPrintExit2 error $0 ("Failed logging in (and getting access token)!") true;
+    $LogPrint error $0 ("Failed logging in (and getting access token)!");
+    :error false;
   }
 
   :do {
     /system/script/set global-config-overlay source=([ get global-config-overlay source ] . "\n" . \
       ":global MatrixHomeServer \"" . $MatrixHomeServer . "\";\n" . \
       ":global MatrixAccessToken \"" . $MatrixAccessToken . "\";\n");
-    $LogPrintExit2 info $0 ("Appended configuration to global-config-overlay. Now create and join a room, please!") false;
+    $LogPrint info $0 ("Appended configuration to global-config-overlay. Now create and join a room, please!");
   } on-error={
-    $LogPrintExit2 error $0 ("Failed appending configuration to global-config-overlay!") true;
+    $LogPrint error $0 ("Failed appending configuration to global-config-overlay!");
+    :error false;
   }
 }
 
@@ -228,7 +231,7 @@
 :set SetupMatrixJoinRoom do={
   :global MatrixRoom [ :tostr $1 ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global UrlEncode;
 
   :global MatrixAccessToken;
@@ -240,16 +243,18 @@
         http-method=post http-data="" \
         ("https://" . $MatrixHomeServer . "/_matrix/client/r0/rooms/" . [ $UrlEncode $MatrixRoom ] . \
         "/join?access_token=" . [ $UrlEncode $MatrixAccessToken ]) as-value;
-    $LogPrintExit2 debug $0 ("Joined the room.") false;
+    $LogPrint debug $0 ("Joined the room.");
   } on-error={
-    $LogPrintExit2 error $0 ("Failed joining the room!") true;
+    $LogPrint error $0 ("Failed joining the room!");
+    :error false;
   }
 
   :do {
     /system/script/set global-config-overlay source=([ get global-config-overlay source ] . "\n" . \
       ":global MatrixRoom \"" . $MatrixRoom . "\";\n");
-    $LogPrintExit2 info $0 ("Appended configuration to global-config-overlay. Please review and cleanup!") false;
+    $LogPrint info $0 ("Appended configuration to global-config-overlay. Please review and cleanup!");
   } on-error={
-    $LogPrintExit2 error $0 ("Failed appending configuration to global-config-overlay!") true;
+    $LogPrint error $0 ("Failed appending configuration to global-config-overlay!");
+    :error false;
   }
 }

From fb88521ed5ba5012cec11824f19c92ded44c4ce1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 038/988] mod/notification-ntfy: switch to $LogPrint

---
 mod/notification-ntfy.rsc | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 4dc6d84d..6d48a59a 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -18,10 +18,10 @@
   :global NtfyMessageIDs;
 
   :global IsFullyConnected;
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :if ([ $IsFullyConnected ] = false) do={
-    $LogPrintExit2 debug $0 ("System is not fully connected, not flushing.") false;
+    $LogPrint debug $0 ("System is not fully connected, not flushing.");
     :return false;
   }
 
@@ -29,7 +29,7 @@
   :local QueueLen [ :len $NtfyQueue ];
 
   :if ([ :len [ /system/scheduler/find where name="_FlushNtfyQueue" ] ] > 0 && $QueueLen = 0) do={
-    $LogPrintExit2 warning $0 ("Flushing Ntfy messages from scheduler, but queue is empty.") false;
+    $LogPrint warning $0 ("Flushing Ntfy messages from scheduler, but queue is empty.");
   }
 
   :foreach Id,Message in=$NtfyQueue do={
@@ -39,7 +39,7 @@
           ($Message->"url") http-header-field=($Message->"headers") http-data=($Message->"text") as-value;
         :set ($NtfyQueue->$Id);
       } on-error={
-        $LogPrintExit2 debug $0 ("Sending queued Ntfy message failed.") false;
+        $LogPrint debug $0 ("Sending queued Ntfy message failed.");
         :set AllDone false;
       }
     }
@@ -66,7 +66,7 @@
   :global CertificateAvailable;
   :global EitherOr;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global SymbolForNotification;
   :global UrlEncode;
 
@@ -88,13 +88,14 @@
   :do {
     :if ($NtfyServer = "ntfy.sh") do={
       :if ([ $CertificateAvailable "R3" ] = false) do={
-        $LogPrintExit2 warning $0 ("Downloading required certificate failed.") true;
+        $LogPrint warning $0 ("Downloading required certificate failed.");
+        :error false;
       }
     }
     /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
       $Url http-header-field=$Headers http-data=$Text as-value;
   } on-error={
-    $LogPrintExit2 info $0 ("Failed sending ntfy notification! Queuing...") false;
+    $LogPrint info $0 ("Failed sending ntfy notification! Queuing...");
 
     :if ([ :typeof $NtfyQueue ] = "nothing") do={
       :set NtfyQueue ({});

From 699f09c2820abb156cf6ca4f45fe3a8285b11a81 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 039/988] mod/notification-telegram: switch to $LogPrint

---
 mod/notification-telegram.rsc | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 5b79135d..506ec802 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -18,12 +18,12 @@
   :global TelegramMessageIDs;
 
   :global IsFullyConnected;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseJson;
   :global UrlEncode;
 
   :if ([ $IsFullyConnected ] = false) do={
-    $LogPrintExit2 debug $0 ("System is not fully connected, not flushing.") false;
+    $LogPrint debug $0 ("System is not fully connected, not flushing.");
     :return false;
   }
 
@@ -31,7 +31,7 @@
   :local QueueLen [ :len $TelegramQueue ];
 
   :if ([ :len [ /system/scheduler/find where name="_FlushTelegramQueue" ] ] > 0 && $QueueLen = 0) do={
-    $LogPrintExit2 warning $0 ("Flushing Telegram messages from scheduler, but queue is empty.") false;
+    $LogPrint warning $0 ("Flushing Telegram messages from scheduler, but queue is empty.");
   }
 
   :foreach Id,Message in=$TelegramQueue do={
@@ -45,7 +45,7 @@
         :set ($TelegramQueue->$Id);
         :set ($TelegramMessageIDs->([ $ParseJson ([ $ParseJson $Data ]->"result") ]->"message_id")) 1;
       } on-error={
-        $LogPrintExit2 debug $0 ("Sending queued Telegram message failed.") false;
+        $LogPrint debug $0 ("Sending queued Telegram message failed.");
         :set AllDone false;
       }
     }
@@ -74,7 +74,7 @@
   :global CharacterReplace;
   :global EitherOr;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseJson;
   :global SymbolForNotification;
   :global UrlEncode;
@@ -136,7 +136,8 @@
 
   :do {
     :if ([ $CertificateAvailable "Go Daddy Secure Certificate Authority - G2" ] = false) do={
-      $LogPrintExit2 warning $0 ("Downloading required certificate failed.") true;
+      $LogPrint warning $0 ("Downloading required certificate failed.");
+      :error false;
     }
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user http-method=post \
       ("https://api.telegram.org/bot" . $TokenId . "/sendMessage") \
@@ -145,7 +146,7 @@
       "&parse_mode=MarkdownV2&text=" . [ $UrlEncode $Text ]) as-value ]->"data");
     :set ($TelegramMessageIDs->([ $ParseJson ([ $ParseJson $Data ]->"result") ]->"message_id")) 1;
   } on-error={
-    $LogPrintExit2 info $0 ("Failed sending telegram notification! Queuing...") false;
+    $LogPrint info $0 ("Failed sending telegram notification! Queuing...");
 
     :if ([ :typeof $TelegramQueue ] = "nothing") do={
       :set TelegramQueue ({});

From 8c62c31604d00bc12ddd548da4c8cbd46c0de383 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 040/988] mod/scriptrunonce: switch to $LogPrint

---
 mod/scriptrunonce.rsc | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 38348a0d..ffb1aff4 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -15,13 +15,14 @@
   :global ScriptRunOnceBaseUrl;
   :global ScriptRunOnceUrlSuffix;
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ValidateSyntax;
 
   :foreach Script in=$Scripts do={
     :if (!($Script ~ "^(ftp|https?|sftp)://")) do={
       :if ([ :len $ScriptRunOnceBaseUrl ] = 0) do={
-        $LogPrintExit2 warning $0 ("Script '" . $Script . "' is not an url and base url is not available.") true;
+        $LogPrint warning $0 ("Script '" . $Script . "' is not an url and base url is not available.");
+        :error false;
       }
       :set Script ($ScriptRunOnceBaseUrl . $Script . ".rsc" . $ScriptRunOnceUrlSuffix);
     }
@@ -30,19 +31,19 @@
     :do {    
       :set Source ([ /tool/fetch check-certificate=yes-without-crl $Script output=user as-value ]->"data");
     } on-error={
-      $LogPrintExit2 warning $0 ("Failed fetching script '" . $Script . "'!") false;
+      $LogPrint warning $0 ("Failed fetching script '" . $Script . "'!");
     }
 
     :if ([ :len $Source ] > 0) do={
       :if ([ $ValidateSyntax $Source ] = true) do={
         :do {
-          $LogPrintExit2 info $0 ("Running script '" . $Script . "' now.") false;
+          $LogPrint info $0 ("Running script '" . $Script . "' now.");
           [ :parse $Source ];
         } on-error={
-          $LogPrintExit2 warning $0 ("The script '" . $Script . "' failed to run!") false;
+          $LogPrint warning $0 ("The script '" . $Script . "' failed to run!");
         }
       } else={
-        $LogPrintExit2 warning $0 ("The script '" . $Script . "' failed syntax validation!") false;
+        $LogPrint warning $0 ("The script '" . $Script . "' failed syntax validation!");
       }
     }
   }

From eedf092930992281700b591371cd2e960f1d9f0e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 041/988] mod/ssh-keys-import: switch to $LogPrint

---
 mod/ssh-keys-import.rsc | 37 ++++++++++++++++++++++---------------
 1 file changed, 22 insertions(+), 15 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index b88ef9a4..fbc667ec 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -18,32 +18,36 @@
 
   :global CharacterReplace;
   :global GetRandom20CharAlNum;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MkDir;
   :global WaitForFile;
 
   :if ([ :len $Key ] = 0 || [ :len $User ] = 0) do={
-    $LogPrintExit2 warning $0 ("Missing argument(s), please pass key and user!") true;
+    $LogPrint warning $0 ("Missing argument(s), please pass key and user!");
+    :error false;
   }
 
   :if ([ :len [ /user/find where name=$User ] ] = 0) do={
-    $LogPrintExit2 warning $0 ("User '" . $User . "' does not exist.") true;
+    $LogPrint warning $0 ("User '" . $User . "' does not exist.");
+    :error false;
   }
 
   :local KeyVal [ :toarray [ $CharacterReplace $Key " " "," ] ];
   :if (!($KeyVal->0 = "ssh-ed25519" || $KeyVal->0 = "ssh-rsa")) do={
-    $LogPrintExit2 warning $0 ("SSH key of type '" . $KeyVal->0 . "' is not supported.") true;
+    $LogPrint warning $0 ("SSH key of type '" . $KeyVal->0 . "' is not supported.");
+    :error false;
   }
 
   :if ([ $MkDir "tmpfs/ssh-keys-import" ] = false) do={
-    $LogPrintExit2 warning $0 ("Creating directory 'tmpfs/ssh-keys-import' failed!") true;
+    $LogPrint warning $0 ("Creating directory 'tmpfs/ssh-keys-import' failed!");
+    :error false;
   }
 
   :local FingerPrintMD5 [ :convert from=base64 transform=md5 to=hex ($KeyVal->1) ];
 
   :if ([ :len [ /user/ssh-keys/find where user=$User key-owner~("\\bmd5=" . $FingerPrintMD5 . "\\b") ] ] > 0) do={
-    $LogPrintExit2 warning $0 ("The ssh public key (MD5:" . $FingerPrintMD5 . \
-      ") is already available for user '" . $User . "'.") false;
+    $LogPrint warning $0 ("The ssh public key (MD5:" . $FingerPrintMD5 . \
+      ") is already available for user '" . $User . "'.");
     :return false;
   }
 
@@ -53,10 +57,11 @@
 
   :do {
     /user/ssh-keys/import public-key-file=$FileName user=$User;
-    $LogPrintExit2 info $0 ("Imported ssh public key (" . $KeyVal->2 . ", " . $KeyVal->0 . ", " . \
-      "MD5:" . $FingerPrintMD5 . ") for user '" . $User . "'.") false;
+    $LogPrint info $0 ("Imported ssh public key (" . $KeyVal->2 . ", " . $KeyVal->0 . ", " . \
+      "MD5:" . $FingerPrintMD5 . ") for user '" . $User . "'.");
   } on-error={
-    $LogPrintExit2 warning $0 ("Failed importing key.") true;
+    $LogPrint warning $0 ("Failed importing key.");
+    :error false;
   }
 }
 
@@ -67,17 +72,19 @@
 
   :global CharacterReplace;
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global SSHKeysImport;
 
   :if ([ :len $FileName ] = 0 || [ :len $User ] = 0) do={
-    $LogPrintExit2 warning $0 ("Missing argument(s), please pass file name and user!") true;
+    $LogPrint warning $0 ("Missing argument(s), please pass file name and user!");
+    :error false;
   }
 
   :local File [ /file/find where name=$FileName ];
   :if ([ :len $File ] = 0) do={
-    $LogPrintExit2 warning $0 ("File '" . $FileName . "' does not exist.") true;
+    $LogPrint warning $0 ("File '" . $FileName . "' does not exist.");
+    :error false;
   }
   :local Keys ([ /file/get $FileName contents ] . "\n");
 
@@ -90,7 +97,7 @@
       :do {
         $SSHKeysImport $Line $User;
       } on-error={
-        $LogPrintExit2 warning $0 ("Failed importing key for user '" . $User . "'.") false;
+        $LogPrint warning $0 ("Failed importing key for user '" . $User . "'.");
       }
       :set Continue true;
     }
@@ -99,7 +106,7 @@
       :set Continue true;
     }
     :if ($Continue = false && [ :len ($KeyVal->0) ] > 0) do={
-      $LogPrintExit2 warning $0 ("SSH key of type '" . $KeyVal->0 . "' is not supported.") false;
+      $LogPrint warning $0 ("SSH key of type '" . $KeyVal->0 . "' is not supported.");
     }
   } while=([ :len $Keys ] > 0);
 }

From e3d55819eebfbdf1f752ec474adf28dc199ae989 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 042/988] mode-button: switch to $LogPrint

---
 mode-button.rsc | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index 07788cb4..f453f11f 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -16,18 +16,18 @@
 
   :global ModeButton;
 
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :set ($ModeButton->"count") ($ModeButton->"count" + 1);
 
   :local Scheduler [ /system/scheduler/find where name="_ModeButtonScheduler" ];
 
   :if ([ :len $Scheduler ] = 0) do={
-    $LogPrintExit2 info $ScriptName ("Creating scheduler _ModeButtonScheduler, counting presses...") false;
+    $LogPrint info $ScriptName ("Creating scheduler _ModeButtonScheduler, counting presses...");
     :global ModeButtonScheduler do={
       :global ModeButton;
 
-      :global LogPrintExit2;
+      :global LogPrint;
       :global ModeButtonScheduler;
       :global ValidateSyntax;
 
@@ -52,7 +52,7 @@
 
       :if ([ :len $Code ] > 0) do={
         :if ([ $ValidateSyntax $Code ] = true) do={
-          $LogPrintExit2 info $ScriptName ("Acting on " . $Count . " mode-button presses: " . $Code) false;
+          $LogPrint info $ScriptName ("Acting on " . $Count . " mode-button presses: " . $Code);
 
           :for I from=1 to=$Count do={
             $LEDInvert;
@@ -66,16 +66,16 @@
 
           [ :parse $Code ];
         } else={
-          $LogPrintExit2 warning $ScriptName ("The code for " . $Count . " mode-button presses failed syntax validation!") false;
+          $LogPrint warning $ScriptName ("The code for " . $Count . " mode-button presses failed syntax validation!");
         }
       } else={
-        $LogPrintExit2 info $ScriptName ("No action defined for " . $Count . " mode-button presses.") false;
+        $LogPrint info $ScriptName ("No action defined for " . $Count . " mode-button presses.");
       }
     }
     /system/scheduler/add name="_ModeButtonScheduler" \
         on-event=":global ModeButtonScheduler; \$ModeButtonScheduler;" interval=3s;
   } else={
-    $LogPrintExit2 debug $ScriptName ("Updating scheduler _ModeButtonScheduler...") false;
+    $LogPrint debug $ScriptName ("Updating scheduler _ModeButtonScheduler...");
     /system/scheduler/set $Scheduler start-time=[ /system/clock/get time ];
   }
 } on-error={ }

From 8ea24540c4bd910717b33f93d07b1b60d3cd8bb6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 043/988] netwatch-dns: switch to $LogPrint

---
 netwatch-dns.rsc | 25 ++++++++++++-------------
 1 file changed, 12 insertions(+), 13 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 76f26859..50c2b4c0 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -16,7 +16,7 @@
 
   :global CertificateAvailable;
   :global EitherOr;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -26,7 +26,7 @@
 
   :local SettleTime (5m30s - [ /system/resource/get uptime ]);
   :if ($SettleTime > 0s) do={
-    $LogPrintExit2 info $ScriptName ("System just booted, giving netwatch " . $SettleTime . " to settle.") false;
+    $LogPrint info $ScriptName ("System just booted, giving netwatch " . $SettleTime . " to settle.");
     :error true;
   }
 
@@ -50,15 +50,14 @@
 
   :if ([ :len $DnsServers ] > 0) do={
     :if ($DnsServers != $DnsCurrent) do={
-      $LogPrintExit2 info $ScriptName ("Updating DNS servers: " . [ :tostr $DnsServers ]) false;
+      $LogPrint info $ScriptName ("Updating DNS servers: " . [ :tostr $DnsServers ]);
       /ip/dns/set servers=$DnsServers;
       /ip/dns/cache/flush;
     }
   } else={
     :if ([ :len $DnsFallback ] > 0) do={
       :if ($DnsFallback != $DnsCurrent) do={
-        $LogPrintExit2 info $ScriptName ("Updating DNS servers to fallback: " . \
-            [ :tostr $DnsFallback ]) false;
+        $LogPrint info $ScriptName ("Updating DNS servers to fallback: " . [ :tostr $DnsFallback ]);
         /ip/dns/set servers=$DnsFallback;
         /ip/dns/cache/flush;
       }
@@ -83,7 +82,7 @@
       }
 
       :if ($DohCurrent = $HostInfo->"doh-url") do={
-        $LogPrintExit2 debug $ScriptName ("Current DoH server is still up: " . $DohCurrent) false;
+        $LogPrint debug $ScriptName ("Current DoH server is still up: " . $DohCurrent);
         :error true;
       }
 
@@ -92,7 +91,7 @@
   }
 
   :if ([ :len $DohCurrent ] > 0) do={
-    $LogPrintExit2 info $ScriptName ("Current DoH server is down, disabling: " . $DohCurrent) false;
+    $LogPrint info $ScriptName ("Current DoH server is down, disabling: " . $DohCurrent);
     /ip/dns/set use-doh-server="";
     /ip/dns/cache/flush;
   }
@@ -100,7 +99,7 @@
   :foreach DohServer in=$DohServers do={
     :if ([ :len ($DohServer->"doh-cert") ] > 0) do={
       :if ([ $CertificateAvailable ($DohServer->"doh-cert") ] = false) do={
-        $LogPrintExit2 warning $ScriptName ("Downloading certificate failed, trying without.") false;
+        $LogPrint warning $ScriptName ("Downloading certificate failed, trying without.");
       }
     }
 
@@ -112,19 +111,19 @@
         "\01\00" . "\00\01" . "\00\00" . "\00\00" . "\00\00" . "\09doh-check\05eworm\02de\00" . \
         "\00\10" . "\00\01") ]) as-value ]->"data");
     } on-error={
-      $LogPrintExit2 warning $ScriptName ("Request to DoH server failed (network or certificate issue): " . \
-        ($DohServer->"doh-url")) false;
+      $LogPrint warning $ScriptName ("Request to DoH server failed (network or certificate issue): " . \
+        ($DohServer->"doh-url"));
     }
 
     :if ($Data != false) do={
       :if ([ :typeof [ :find $Data "doh-check-OK" ] ] = "num") do={
         /ip/dns/set use-doh-server=($DohServer->"doh-url") verify-doh-cert=yes;
         /ip/dns/cache/flush;
-        $LogPrintExit2 info $ScriptName ("Setting DoH server: " . ($DohServer->"doh-url")) false;
+        $LogPrint info $ScriptName ("Setting DoH server: " . ($DohServer->"doh-url"));
         :error true;
       } else={
-        $LogPrintExit2 warning $ScriptName ("Received unexpected response from DoH server: " . \
-          ($DohServer->"doh-url")) false;
+        $LogPrint warning $ScriptName ("Received unexpected response from DoH server: " . \
+          ($DohServer->"doh-url"));
       }
     }
   }

From 030105cc2ed46623b4628496cbd5665da245b0c9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 044/988] netwatch-notify: switch to $LogPrint

---
 netwatch-notify.rsc | 29 +++++++++++++----------------
 1 file changed, 13 insertions(+), 16 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 90d26f1f..9536dd75 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -19,7 +19,7 @@
   :global EitherOr;
   :global IfThenElse;
   :global IsDNSResolving;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptFromTerminal;
   :global ScriptLock;
@@ -32,25 +32,22 @@
     :local State [ :tostr $3 ];
     :local Hook  [ :tostr $4 ];
 
-    :global LogPrintExit2;
+    :global LogPrint;
     :global ValidateSyntax;
 
     :if ([ $ValidateSyntax $Hook ] = true) do={
       :do {
         [ :parse $Hook ];
       } on-error={
-        $LogPrintExit2 warning $0 ("The " . $State . "-hook for " . $Type . " '" . $Name . \
-            "' failed to run.") false;
+        $LogPrint warning $0 ("The " . $State . "-hook for " . $Type . " '" . $Name . "' failed to run.");
         :return ("The hook failed to run.");
       }
     } else={
-      $LogPrintExit2 warning $0 ("The " . $State . "-hook for " . $Type . " '" . $Name . \
-          "' failed syntax validation.") false;
+      $LogPrint warning $0 ("The " . $State . "-hook for " . $Type . " '" . $Name . "' failed syntax validation.");
       :return ("The hook failed syntax validation.");
     }
 
-    $LogPrintExit2 info $0 ("Ran hook on " . $Type . " '" . $Name . "' " . $State . ": " . \
-        $Hook) false;
+    $LogPrint info $0 ("Ran hook on " . $Type . " '" . $Name . "' " . $State . ": " . $Hook);
     :return ("Ran hook:\n" . $Hook);
   }
 
@@ -106,10 +103,10 @@
             :local Resolve [ :resolve ($HostInfo->"resolve") ];
             :if ($Resolve != $HostVal->"host") do={
               :if ([ $ResolveExpected ($HostInfo->"resolve") ($HostVal->"host") ] = false) do={
-                $LogPrintExit2 info $ScriptName ("Name '" . $HostInfo->"resolve" . [ $IfThenElse \
+                $LogPrint info $ScriptName ("Name '" . $HostInfo->"resolve" . [ $IfThenElse \
                     ($HostInfo->"resolve" != $HostInfo->"name") ("' for " . $Type . " '" . \
                     $HostInfo->"name") "" ] . "' resolves to different address " . $Resolve . \
-                    ", updating.") false;
+                    ", updating.");
                 /tool/netwatch/set host=$Resolve $Host;
                 :set ($Metric->"resolve-failcnt") 0;
                 :set ($HostVal->"status") "unknown";
@@ -118,9 +115,9 @@
           } on-error={
             :set ($Metric->"resolve-failcnt") ($Metric->"resolve-failcnt" + 1);
             :if ($Metric->"resolve-failcnt" = 3) do={
-              $LogPrintExit2 warning $ScriptName ("Resolving name '" . $HostInfo->"resolve" . [ $IfThenElse \
+              $LogPrint warning $ScriptName ("Resolving name '" . $HostInfo->"resolve" . [ $IfThenElse \
                   ($HostInfo->"resolve" != $HostInfo->"name") ("' for " . $Type . " '" . \
-                  $HostInfo->"name") "" ] . "' failed.") false;
+                  $HostInfo->"name") "" ] . "' failed.");
             }
           }
         }
@@ -129,8 +126,8 @@
       :if ($HostVal->"status" = "up") do={
         :local CountDown ($Metric->"count-down");
         :if ($CountDown > 0) do={
-          $LogPrintExit2 info $ScriptName \
-              ("The " . $Type . " '" . $Name . "' (" . $HostDetails . ") is up.") false;
+          $LogPrint info $ScriptName \
+              ("The " . $Type . " '" . $Name . "' (" . $HostDetails . ") is up.");
           :set ($Metric->"count-down") 0;
         }
         :set ($Metric->"count-up") ($Metric->"count-up" + 1);
@@ -178,11 +175,11 @@
         }
         :if ($Metric->"notified" = false || $Metric->"count-down" % 120 = 0 || \
              $ScriptFromTerminalCached = true) do={
-          $LogPrintExit2 [ $IfThenElse ($HostInfo->"no-down-notification" != true) info debug ] $ScriptName \
+          $LogPrint [ $IfThenElse ($HostInfo->"no-down-notification" != true) info debug ] $ScriptName \
               ("The " . $Type . " '" . $Name . "' (" . $HostDetails . ") is down for " . \
               $Metric->"count-down" . " checks, " . [ $IfThenElse ($ParentNotified = false) [ $IfThenElse \
               ($Metric->"notified" = true) ("already notified.") ($CountDown - $Metric->"count-down" . \
-              " to go.") ] ("parent " . $Type . " " . $Parent . " is down.") ]) false;
+              " to go.") ] ("parent " . $Type . " " . $Parent . " is down.") ]);
         }
         :if ((($CountDown * 2) - ($Metric->"count-down" * 3)) / 2 = 0 && \
              [ :typeof ($HostInfo->"pre-down-hook") ] = "str") do={

From ad65b62c1c0751fc3efee6221f4c32232f3302b9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 045/988] ospf-to-leds: switch to $LogPrint

---
 ospf-to-leds.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index 73c9922d..a22e5a5f 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -14,7 +14,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -34,11 +34,11 @@
     }
 
     :if ($NeighborCount > 0 && $LEDType = "off") do={
-      $LogPrintExit2 info $ScriptName ("OSPF instance " . $InstanceVal->"name" . " has " . $NeighborCount . " neighbors, led on!") false;
+      $LogPrint info $ScriptName ("OSPF instance " . $InstanceVal->"name" . " has " . $NeighborCount . " neighbors, led on!");
       /system/leds/set type=on [ find where leds=$LED ];
     }
     :if ($NeighborCount = 0 && $LEDType = "on") do={
-      $LogPrintExit2 info $ScriptName ("OSPF instance " . $InstanceVal->"name" . " has no neighbors, led off!") false;
+      $LogPrint info $ScriptName ("OSPF instance " . $InstanceVal->"name" . " has no neighbors, led off!");
       /system/leds/set type=off [ find where leds=$LED ];
     }
   }

From 8444e5f2703a90ae0441281239505a670c24c152 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 046/988] packages-update: switch to $LogPrint

---
 packages-update.rsc | 40 +++++++++++++++++++++++-----------------
 1 file changed, 23 insertions(+), 17 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index 634b7bb4..22ea5013 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -16,7 +16,7 @@
 
   :global DownloadPackage;
   :global Grep;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptFromTerminal;
   :global ScriptLock;
@@ -29,7 +29,7 @@
     :local ScriptName [ :tostr $1 ];
 
     :global GetRandomNumber;
-    :global LogPrintExit2;
+    :global LogPrint;
 
     :global RebootForUpdate do={
       /system/reboot;
@@ -39,8 +39,8 @@
     /system/scheduler/add name="_RebootForUpdate" start-time=$StartTime interval=1d \
         on-event=("/system/scheduler/remove \"_RebootForUpdate\"; " . \
         ":global RebootForUpdate; \$RebootForUpdate;");
-    $LogPrintExit2 info $ScriptName ("Scheduled reboot for update at " . $StartTime . \
-        " local time (" . [ /system/clock/get time-zone-name ] . ").") false;
+    $LogPrint info $ScriptName ("Scheduled reboot for update at " . $StartTime . \
+        " local time (" . [ /system/clock/get time-zone-name ] . ").");
     :return true;
   }
 
@@ -51,11 +51,12 @@
   :local Update [ /system/package/update/get ];
 
   :if ([ :typeof ($Update->"latest-version") ] = "nothing") do={
-    $LogPrintExit2 warning $ScriptName ("Latest version is not known.") true;
+    $LogPrint warning $ScriptName ("Latest version is not known.");
+    :error false;
   }
 
   :if ($Update->"installed-version" = $Update->"latest-version") do={
-    $LogPrintExit2 info $ScriptName ("Version " . $Update->"latest-version" . " is already installed.") false;
+    $LogPrint info $ScriptName ("Version " . $Update->"latest-version" . " is already installed.");
     :error true;
   }
 
@@ -63,8 +64,9 @@
   :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
 
   :if ($NumInstalled < 0x070d0000 && $NumLatest > 0x070d0000) do={
-    $LogPrintExit2 error $ScriptName ("Migration to wireless/wifi package in RouterOS " . \
-      ($Update->"latest-version") . " is pending. Please update manually!") true;
+    $LogPrint error $ScriptName ("Migration to wireless/wifi package in RouterOS " . \
+      ($Update->"latest-version") . " is pending. Please update manually!");
+    :error false;
   }
 
   :local DoDowngrade false;
@@ -77,14 +79,16 @@
         :put "Canceled...";
       }
     } else={
-      $LogPrintExit2 warning $ScriptName ("Not installing downgrade automatically.") true;
+      $LogPrint warning $ScriptName ("Not installing downgrade automatically.");
+      :error false;
     }
   }
 
   :foreach Package in=[ /system/package/find where !bundle ] do={
     :local PkgName [ /system/package/get $Package name ];
     :if ([ $DownloadPackage $PkgName ($Update->"latest-version") ] = false) do={
-      $LogPrintExit2 error $ScriptName ("Download for package " . $PkgName . " failed, update aborted.") true;
+      $LogPrint error $ScriptName ("Download for package " . $PkgName . " failed, update aborted.");
+      :error false;
     }
   }
 
@@ -99,29 +103,31 @@
   :foreach Order,Script in=$RunOrder do={
     :set PackagesUpdateBackupFailure false;
     :do {
-      $LogPrintExit2 info $ScriptName ("Running backup script " . $Script . " before update.") false;
+      $LogPrint info $ScriptName ("Running backup script " . $Script . " before update.");
       /system/script/run $Script;
     } on-error={
       :set PackagesUpdateBackupFailure true;
     }
 
     :if ($PackagesUpdateBackupFailure = true) do={
-      $LogPrintExit2 warning $ScriptName ("Running backup script " . $Script . " before update failed!") false;
+      $LogPrint warning $ScriptName ("Running backup script " . $Script . " before update failed!");
       :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
         :put "Do you want to continue anyway? [y/N]";
         :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
-          $LogPrintExit2 info $ScriptName ("User requested to continue anyway.") false;
+          $LogPrint info $ScriptName ("User requested to continue anyway.");
         } else={
-          $LogPrintExit2 info $ScriptName ("Canceled update...") true;
+          $LogPrint info $ScriptName ("Canceled update...");
+          :error false;
         }
       } else={
-        $LogPrintExit2 warning $ScriptName ("Canceled non-interactive update.") true;
+        $LogPrint warning $ScriptName ("Canceled non-interactive update.");
+        :error false;
       }
     }
   }
 
   :if ($DoDowngrade = true) do={
-    $LogPrintExit2 info $ScriptName ("Rebooting for downgrade.") false;
+    $LogPrint info $ScriptName ("Rebooting for downgrade.");
     :delay 1s;
     /system/package/downgrade;
   }
@@ -137,7 +143,7 @@
     }
   }
 
-  $LogPrintExit2 info $ScriptName ("Rebooting for update.") false;
+  $LogPrint info $ScriptName ("Rebooting for update.");
   :delay 1s;
   /system/reboot;
 } on-error={ }

From 88d4c0aff83fffad0952a44a6afbe888d1332c14 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 047/988] ppp-on-up: switch to $LogPrint

---
 ppp-on-up.rsc | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index 0cc2405c..61766c08 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -14,26 +14,27 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global LogPrintExit2;
+  :global LogPrint;
 
   :local Interface $interface;
 
   :if ([ :typeof $Interface ] = "nothing") do={
-    $LogPrintExit2 error $ScriptName ("This script is supposed to run from ppp on-up script hook.") true;
+    $LogPrint error $ScriptName ("This script is supposed to run from ppp on-up script hook.");
+    :error false;
   }
 
   :local IntName [ /interface/get $Interface name ];
-  $LogPrintExit2 info $ScriptName ("PPP interface " . $IntName . " is up.") false;
+  $LogPrint info $ScriptName ("PPP interface " . $IntName . " is up.");
 
   /ipv6/dhcp-client/release [ find where interface=$IntName !disabled ];
 
   :foreach Script in=[ /system/script/find where source~("\n# provides: ppp-on-up\n") ] do={
     :local ScriptName [ /system/script/get $Script name ];
     :do {
-      $LogPrintExit2 debug $ScriptName ("Running script: " . $ScriptName) false;
+      $LogPrint debug $ScriptName ("Running script: " . $ScriptName);
       /system/script/run $Script;
     } on-error={
-      $LogPrintExit2 warning $ScriptName ("Running script '" . $ScriptName . "' failed!") false;
+      $LogPrint warning $ScriptName ("Running script '" . $ScriptName . "' failed!");
     }
   }
 } on-error={ }

From 5a487d15c2ba464df46b82eceffac622d1f21604 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 048/988] sms-action: switch to $LogPrint

---
 sms-action.rsc | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/sms-action.rsc b/sms-action.rsc
index 11d35230..4c37565b 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -16,13 +16,14 @@
 
   :global SmsAction;
 
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ValidateSyntax;
 
   :local Action $action;
 
   :if ([ :typeof $Action ] = "nothing") do={
-    $LogPrintExit2 error $ScriptName ("This script is supposed to run from SMS hook with action=...") true;
+    $LogPrint error $ScriptName ("This script is supposed to run from SMS hook with action=...");
+    :error false;
   }
 
   :local Code ($SmsAction->$Action);
@@ -31,6 +32,6 @@
     :delay 1s;
     [ :parse $Code ];
   } else={
-    $LogPrintExit2 warning $ScriptName ("The code for action '" . $Action . "' failed syntax validation!") false;
+    $LogPrint warning $ScriptName ("The code for action '" . $Action . "' failed syntax validation!");
   }
 } on-error={ }

From be1aeccbe520be193906e24de7c2fa82af5970dd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 049/988] sms-forward: switch to $LogPrint

---
 sms-forward.rsc | 18 +++++++-----------
 1 file changed, 7 insertions(+), 11 deletions(-)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index c745b813..b0966c3b 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -19,7 +19,7 @@
   :global SmsForwardHooks;
 
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global LogPrintOnce;
   :global ScriptLock;
   :global SendNotification2;
@@ -41,7 +41,7 @@
   :local Settings [ /tool/sms/get ];
 
   :if ([ /interface/lte/get ($Settings->"port") running ] != true) do={
-    $LogPrintExit2 info $ScriptName ("The LTE interface is not in running state, skipping.") false;
+    $LogPrint info $ScriptName ("The LTE interface is not in running state, skipping.");
     :error true;
   }
 
@@ -56,7 +56,7 @@
 
       :if ($Phone = $Settings->"allowed-number" && \
           ($SmsVal->"message")~("^:cmd " . $Settings->"secret" . " script ")) do={
-        $LogPrintExit2 debug $ScriptName ("Removing SMS, which started a script.") false;
+        $LogPrint debug $ScriptName ("Removing SMS, which started a script.");
         /tool/sms/inbox/remove $Sms;
       } else={
         :set Messages ($Messages . "\n\nOn " . $SmsVal->"timestamp" . \
@@ -64,20 +64,16 @@
         :foreach Hook in=$SmsForwardHooks do={
           :if ($Phone~($Hook->"allowed-number") && ($SmsVal->"message")~($Hook->"match")) do={
             :if ([ $ValidateSyntax ($Hook->"command") ] = true) do={
-              $LogPrintExit2 info $ScriptName ("Running hook '" . $Hook->"match" . "': " . \
-                  $Hook->"command") false;
+              $LogPrint info $ScriptName ("Running hook '" . $Hook->"match" . "': " . $Hook->"command");
               :do {
                 :local Command [ :parse ($Hook->"command") ];
                 $Command Phone=$Phone Message=($SmsVal->"message");
-                :set Messages ($Messages . "\n\nRan hook '" . $Hook->"match" . "':\n" . \
-                    $Hook->"command");
+                :set Messages ($Messages . "\n\nRan hook '" . $Hook->"match" . "':\n" . $Hook->"command");
               } on-error={
-                $LogPrintExit2 warning $ScriptName ("The code for hook '" . $Hook->"match" . \
-                    "' failed to run!") false;
+                $LogPrint warning $ScriptName ("The code for hook '" . $Hook->"match" . "' failed to run!");
               }
             } else={
-              $LogPrintExit2 warning $ScriptName ("The code for hook '" . $Hook->"match" . \
-                  "' failed syntax validation!") false;
+              $LogPrint warning $ScriptName ("The code for hook '" . $Hook->"match" . "' failed syntax validation!");
             }
           }
         }

From 19fb5c5801a0769e3b94123b8b28aca14f0e73d9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 050/988] telegram-chat: switch to $LogPrint

---
 telegram-chat.rsc | 29 ++++++++++++++++-------------
 1 file changed, 16 insertions(+), 13 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 799569fc..c81b7141 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -30,7 +30,7 @@
   :global EscapeForRegEx;
   :global GetRandom20CharAlNum;
   :global IfThenElse;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global MAX;
   :global MIN;
   :global MkDir;
@@ -57,7 +57,8 @@
   }
 
   :if ([ $CertificateAvailable "Go Daddy Secure Certificate Authority - G2" ] = false) do={
-    $LogPrintExit2 warning $ScriptName ("Downloading required certificate failed.") true;
+    $LogPrint warning $ScriptName ("Downloading required certificate failed.");
+    :error false;
   }
 
   $RandomDelay $TelegramRandomDelay;
@@ -72,7 +73,7 @@
         :set TelegramRandomDelay [ $MAX 0 ($TelegramRandomDelay - 1) ];
       } on-error={
         :if ($I < 4) do={
-          $LogPrintExit2 debug $ScriptName ("Fetch failed, " . $I . ". try.") false;
+          $LogPrint debug $ScriptName ("Fetch failed, " . $I . ". try.");
           :set TelegramRandomDelay [ $MIN 15 ($TelegramRandomDelay + 5) ];
           :delay (($I * $I) . "s");
         }
@@ -81,7 +82,8 @@
   }
 
   :if ($Data = false) do={
-    $LogPrintExit2 warning $ScriptName ("Failed getting updates from Telegram.") true;
+    $LogPrint warning $ScriptName ("Failed getting updates from Telegram.");
+    :error false;
   }
 
   :local UpdateID 0;
@@ -106,7 +108,7 @@
       :if ($Trusted = true) do={
         :local Done false;
         :if ($Message->"text" = "?") do={
-          $LogPrintExit2 info $ScriptName ("Sending notice for update " . $UpdateID . ".") false;
+          $LogPrint info $ScriptName ("Sending notice for update " . $UpdateID . ".");
           $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; replyto=($Message->"message_id"); \
             subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
             message=("Online, awaiting your commands!") });
@@ -118,8 +120,8 @@
           } else={
             :set TelegramChatActive false;
           }
-          $LogPrintExit2 info $ScriptName ("Now " . [ $IfThenElse $TelegramChatActive "active" "passive" ] . \
-            " from update " . $UpdateID . "!") false;
+          $LogPrint info $ScriptName ("Now " . [ $IfThenElse $TelegramChatActive "active" "passive" ] . \
+            " from update " . $UpdateID . "!");
           :set Done true;
         }
         :if ($Done = false && ($IsMyReply = 1 || ($IsReply = 0 && $TelegramChatActive = true)) && [ :len ($Message->"text") ] > 0) do={
@@ -127,9 +129,10 @@
             :local State "";
             :local File ("tmpfs/telegram-chat/" . [ $GetRandom20CharAlNum 6 ]);
             :if ([ $MkDir "tmpfs/telegram-chat" ] = false) do={
-              $LogPrintExit2 error $ScriptName ("Failed creating directory!") true;
+              $LogPrint error $ScriptName ("Failed creating directory!");
+              :error false;
             }
-            $LogPrintExit2 info $ScriptName ("Running command from update " . $UpdateID . ": " . $Message->"text") false;
+            $LogPrint info $ScriptName ("Running command from update " . $UpdateID . ": " . $Message->"text");
             :execute script=(":do {\n" . $Message->"text" . "\n} on-error={ /file/add name=\"" . $File . ".failed\" };" . \
               "/file/add name=\"" . $File . ".done\"") file=($File . "\00");
             :if ([ $WaitForFile ($File . ".done") [ $EitherOr $TelegramChatRunTime 20s ] ] = false) do={
@@ -146,7 +149,7 @@
                 ("Output exceeds file read size.") ("No output.") ] ]) });
             /file/remove "tmpfs/telegram-chat";
           } else={
-            $LogPrintExit2 info $ScriptName ("The command from update " . $UpdateID . " failed syntax validation!") false;
+            $LogPrint info $ScriptName ("The command from update " . $UpdateID . " failed syntax validation!");
             $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; replyto=($Message->"message_id"); \
               subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
               message=("Command:\n" . $Message->"text" . "\n\nThe command failed syntax validation!") });
@@ -157,16 +160,16 @@
           [ $IfThenElse ([ :len ($From->"username") ] = 0) "without username" ("'" . $From->"username" . "'") ] . \
           " (ID " . $From->"id" . ") in update " . $UpdateID . "!");
         :if ($Message->"text" ~ ("^! *" . [ $EscapeForRegEx $Identity ] . "\$")) do={
-          $LogPrintExit2 warning $ScriptName $MessageText false;
+          $LogPrint warning $ScriptName $MessageText;
           $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; replyto=($Message->"message_id"); \
             subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
             message=("You are not trusted.") });
         } else={
-          $LogPrintExit2 info $ScriptName $MessageText false;
+          $LogPrint info $ScriptName $MessageText;
         }
       }
     } else={
-      $LogPrintExit2 debug $ScriptName ("Already handled update " . $UpdateID . ".") false;
+      $LogPrint debug $ScriptName ("Already handled update " . $UpdateID . ".");
     }
   }
   :set TelegramChatOffset ([ :pick $TelegramChatOffset 1 3 ], \

From 1c6154728411e206d651ad05fce093a80168f64f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Mar 2024 10:34:26 +0100
Subject: [PATCH 051/988] global-config: merge loading overlay and snippets

---
 global-config.rsc | 14 ++++----------
 1 file changed, 4 insertions(+), 10 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index 85731c32..2b688bc2 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -243,20 +243,14 @@
   "cert2-cn"="4n0th3r-s3cr3t";
 };
 
-# load custom settings from overlay
+# load custom settings from overlay and snippets
 # Warning: Do *NOT* copy this code to overlay!
-:do {
-  /system/script/run global-config-overlay;
-} on-error={
-  :log error ("Loading configuration from overlay failed!");
-}
-
-# configuration overlay snippets
-:foreach Script in=[ /system/script/find where name ~ "^global-config-overlay.d/" ] do={
+:foreach Script in=([ /system/script/find where name="global-config-overlay" ], \
+                    [ /system/script/find where name~"^global-config-overlay.d/" ]) do={
   :do {
     /system/script/run $Script;
   } on-error={
-    :log error ("Loading configuration from overlay snippet " . \
+    :log error ("Loading configuration from overlay or snippet " . \
         [ /system/script/get $Script name ] . " failed!");
   }
 }

From 9a21f4d3e3bf1ba0abe565058f7f8688024b68a2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 052/988] update-gre-address: switch to $LogPrint

---
 update-gre-address.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 78705c56..74967cdf 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -16,7 +16,7 @@
   :local ScriptName [ :jobname ];
 
   :global CharacterReplace;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ScriptLock; 
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -33,7 +33,7 @@
       :if ([ :typeof ($PeerVal->"dynamic-address") ] = "str" && \
            ($PeerVal->"dynamic-address" != $GreIntVal->"remote-address" || \
             $GreIntVal->"disabled" = true)) do={
-        $LogPrintExit2 info $ScriptName ("Updating remote address for interface " . $GreIntVal->"name" . " to " . $PeerVal->"dynamic-address") false;
+        $LogPrint info $ScriptName ("Updating remote address for interface " . $GreIntVal->"name" . " to " . $PeerVal->"dynamic-address");
         /interface/gre/set remote-address=0.0.0.0 disabled=yes [ find where remote-address=$PeerVal->"dynamic-address" name!=$GreIntVal->"name" ];
         /interface/gre/set $GreInt remote-address=($PeerVal->"dynamic-address") disabled=no;
       }

From 76f65c13d77759321f128035bd1ce4aa9b2cec46 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Mar 2024 15:59:41 +0100
Subject: [PATCH 053/988] global-functions: add architecture in user-agent
 string

---
 global-functions.rsc | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index d2386f49..1c2523a5 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -16,7 +16,12 @@
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
-:global FetchUserAgent ("User-Agent: Mikrotik/" . [ /system/resource/get version ] . " Fetch");
+:global FetchUserAgent;
+{
+  :local Resource [ /system/resource/get ];
+  :set FetchUserAgent ("User-Agent: Mikrotik/" . $Resource->"version" . \
+    " " . $Resource->"architecture-name" . " Fetch");
+}
 :global Identity [ /system/identity/get name ];
 
 # global functions

From 242ecef012f5208b6fa088a1222d0d5477e5b2ed Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 12:45:38 +0100
Subject: [PATCH 054/988] update-tunnelbroker: switch to $LogPrint

---
 update-tunnelbroker.rsc | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 9f316e34..c76b7eca 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -17,7 +17,7 @@
   :local ScriptName [ :jobname ];
 
   :global CertificateAvailable;
-  :global LogPrintExit2;
+  :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -26,7 +26,8 @@
   }
 
   :if ([ $CertificateAvailable "Starfield Secure Certificate Authority - G2" ] = false) do={
-    $LogPrintExit2 error $ScriptName ("Downloading required certificate failed.") true;
+    $LogPrint error $ScriptName ("Downloading required certificate failed.");
+    :error false;
   }
 
   :foreach Interface in=[ /interface/6to4/find where comment~"^tunnelbroker" !disabled ] do={
@@ -41,24 +42,25 @@
             ("https://ipv4.tunnelbroker.net/nic/update?hostname=" . $Comment->"id") \
             user=($Comment->"user") password=($Comment->"pass") output=user as-value ]->"data");
         } on-error={
-          $LogPrintExit2 debug $ScriptName ("Failed downloading, " . $I . " retries pending.") false;
+          $LogPrint debug $ScriptName ("Failed downloading, " . $I . " retries pending.");
           :delay 2s;
         }
       }
     }
 
     :if (!($Data ~ "^(good|nochg) ")) do={
-      $LogPrintExit2 error $ScriptName ("Failed sending the local address to tunnelbroker or unexpected response!") true;
+      $LogPrint error $ScriptName ("Failed sending the local address to tunnelbroker or unexpected response!");
+      :error false;
     }
 
     :local PublicAddress [ :pick $Data ([ :find $Data " " ] + 1) [ :find $Data "\n" ] ];
 
     :if ($PublicAddress != $InterfaceVal->"local-address") do={
       :if ([ :len [ /ip/address find where address~("^" . $PublicAddress . "/") ] ] < 1) do={
-        $LogPrintExit2 warning $ScriptName ("The address " . $PublicAddress . " is not configured on your device. NAT by ISP?") false;
+        $LogPrint warning $ScriptName ("The address " . $PublicAddress . " is not configured on your device. NAT by ISP?");
       }
 
-      $LogPrintExit2 info $ScriptName ("Local address changed, updating tunnel configuration with address: " . $PublicAddress) false;
+      $LogPrint info $ScriptName ("Local address changed, updating tunnel configuration with address: " . $PublicAddress);
       /interface/6to4/set $Interface local-address=$PublicAddress;
     }
   }

From 19802c0b6977f9467fada4ace3cab017dd98964b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 11:09:22 +0100
Subject: [PATCH 055/988] global-functions: $LogPrintOnce: drop support for
 exit

This is not widely adopted or used, so let's just drop it - no
compatibility.
---
 dhcp-to-dns.rsc      | 4 ++--
 fw-addr-lists.rsc    | 2 +-
 global-functions.rsc | 9 ++++-----
 sms-forward.rsc      | 3 ++-
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index 84a1e84e..d0638c7b 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -61,7 +61,7 @@
     :do {
       :set LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       :if ([ :len [ /ip/dhcp-server/lease/find where active-mac-address=($LeaseVal->"active-mac-address") status=bound ] ] > 1) do={
-        $LogPrintOnce info $ScriptName ("Multiple bound leases found for mac-address " . ($LeaseVal->"active-mac-address") . "!") false;
+        $LogPrintOnce info $ScriptName ("Multiple bound leases found for mac-address " . ($LeaseVal->"active-mac-address") . "!");
       }
     } on-error={
       $LogPrintExit2 debug $ScriptName ("A lease just vanished, ignoring.") false;
@@ -117,7 +117,7 @@
       }
 
       :if ([ :len [ /ip/dns/static/find where name=$FullA (!type or type=A) ] ] > 1) do={
-        $LogPrintOnce warning $ScriptName ("The name '" . $FullA . "' appeared in more than one A record!") false;
+        $LogPrintOnce warning $ScriptName ("The name '" . $FullA . "' appeared in more than one A record!");
       }
     } else={
       $LogPrintExit2 debug $ScriptName ("No address available... Ignoring.") false;
diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 6071f7bb..4ec41051 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -82,7 +82,7 @@
       }
 
       :if ([ :len $Data ] > 63000) do={
-        $LogPrintOnce warning $ScriptName ("The list is huge and may be truncated: " . $List->"url") false;
+        $LogPrintOnce warning $ScriptName ("The list is huge and may be truncated: " . $List->"url");
       }
 
       :while ([ :len $Data ] != 0) do={
diff --git a/global-functions.rsc b/global-functions.rsc
index 1c2523a5..aca4cd82 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -703,7 +703,6 @@
   :local Severity [ :tostr $1 ];
   :local Name     [ :tostr $2 ];
   :local Message  [ :tostr $3 ];
-  :local Exit     [ :tostr $4 ];
 
   :global LogPrintExit2;
 
@@ -718,7 +717,7 @@
   }
 
   :set ($LogPrintOnceMessages->$Message) 1;
-  $LogPrintExit2 $Severity $Name $Message $Exit;
+  $LogPrintExit2 $Severity $Name $Message false;
 }
 
 # get max value
@@ -1048,7 +1047,7 @@
             }
           } else={
             $LogPrintOnce warning $0 ("The script '" . $ScriptVal->"name" . "' requires RouterOS " . \
-              $Required . ", which is not met by your installation. Ignoring!") false;
+              $Required . ", which is not met by your installation. Ignoring!");
           }
         } else={
           $LogPrintExit2 warning $0 ("Looks like new script '" . $ScriptVal->"name" . \
@@ -1359,7 +1358,7 @@
   }
 
   :if ([ :len ($Symbols->$Name) ] = 0) do={
-    $LogPrintOnce warning $0 ("No symbol available for name '" . $Name . "'!") false;
+    $LogPrintOnce warning $0 ("No symbol available for name '" . $Name . "'!");
     :return "";
   }
 
@@ -1540,7 +1539,7 @@
 # Log success
 :local Resource [ /system/resource/get ];
 $LogPrintOnce info $ScriptName ("Loaded on " . $Resource->"board-name" . \
-  " with RouterOS " . $Resource->"version" . ".") false;
+  " with RouterOS " . $Resource->"version" . ".");
 
 # signal we are ready
 :set GlobalFunctionsReady true;
diff --git a/sms-forward.rsc b/sms-forward.rsc
index 2f549b1b..c745b813 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -32,7 +32,8 @@
   }
 
   :if ([ /tool/sms/get receive-enabled ] = false) do={
-    $LogPrintOnce warning $ScriptName ("Receiving of SMS is not enabled.") true;
+    $LogPrintOnce warning $ScriptName ("Receiving of SMS is not enabled.");
+    :error false;
   }
 
   $WaitFullyConnected;

From 39dd1f2a63bc8477bf444111189a7ecead77a667 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 17:50:28 +0100
Subject: [PATCH 056/988] mod/bridge-port-to: do not exit with error

---
 mod/bridge-port-to.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index 441094f1..567a7623 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -26,7 +26,7 @@
           :if ([ :len $DHCPClient ] != 1) do={
             $LogPrint warning $0 ([ $IfThenElse ([ :len $DHCPClient ] = 0) "Missing" "Duplicate" ] . \
                 " dhcp client configuration for interface " . $BridgePortVal->"interface" . "!");
-            :error false;
+            :return false;
           }
           :local DHCPClientDisabled [ /ip/dhcp-client/get $DHCPClient disabled ];
 

From 525e4325daadb94757c8632c1c07391d986c9e0e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 17:51:22 +0100
Subject: [PATCH 057/988] mod/bridge-port-vlan: do not exit with error

---
 mod/bridge-port-vlan.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 522e9a6d..aee5ef9b 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -26,7 +26,7 @@
           :if ([ :len $DHCPClient ] != 1) do={
             $LogPrint warning $0 ([ $IfThenElse ([ :len $DHCPClient ] = 0) "Missing" "Duplicate" ] . \
                 " dhcp client configuration for interface " . $BridgePortVal->"interface" . "!");
-            :error false;
+            :return false;
           }
           :local DHCPClientDisabled [ /ip/dhcp-client/get $DHCPClient disabled ];
 
@@ -43,7 +43,7 @@
               :set $Vlan ([ /interface/bridge/vlan/get [ find where comment=$Vlan ] vlan-ids ]->0);
             } on-error={
               $LogPrint warning $0 ("Could not find VLAN '" . $Vlan . "' for interface " . $BridgePortVal->"interface" . "!");
-              :error false;
+              :return false;
             }
           }
           :if ($BridgePortVal->"disabled" = true || $Vlan != $BridgePortVal->"pvid") do={

From c2dc8a0837cd848512a8587f406f9dadd31b957c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 17:53:48 +0100
Subject: [PATCH 058/988] mod/notification-matrix: do not exit with error

---
 mod/notification-matrix.rsc | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index c4fe100b..aa958419 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -198,7 +198,7 @@
     $LogPrint debug $0 ("Home server is: " . $MatrixHomeServer);
   } on-error={
     $LogPrint error $0 ("Failed getting home server!");
-    :error false;
+    :return false;
   }
 
   :if ([ :pick $MatrixHomeServer 0 8 ] = "https://") do={
@@ -213,7 +213,7 @@
     $LogPrint debug $0 ("Access token is: " . $MatrixAccessToken);
   } on-error={
     $LogPrint error $0 ("Failed logging in (and getting access token)!");
-    :error false;
+    :return false;
   }
 
   :do {
@@ -223,7 +223,7 @@
     $LogPrint info $0 ("Appended configuration to global-config-overlay. Now create and join a room, please!");
   } on-error={
     $LogPrint error $0 ("Failed appending configuration to global-config-overlay!");
-    :error false;
+    :return false;
   }
 }
 
@@ -246,7 +246,7 @@
     $LogPrint debug $0 ("Joined the room.");
   } on-error={
     $LogPrint error $0 ("Failed joining the room!");
-    :error false;
+    :return false;
   }
 
   :do {
@@ -255,6 +255,6 @@
     $LogPrint info $0 ("Appended configuration to global-config-overlay. Please review and cleanup!");
   } on-error={
     $LogPrint error $0 ("Failed appending configuration to global-config-overlay!");
-    :error false;
+    :return false;
   }
 }

From 0e2e7efdb223baa10d06b9f0d917fbe507264307 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 17:52:07 +0100
Subject: [PATCH 059/988] mod/scriptrunonce: do not exit with error

---
 mod/scriptrunonce.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index ffb1aff4..85d465a7 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -22,7 +22,7 @@
     :if (!($Script ~ "^(ftp|https?|sftp)://")) do={
       :if ([ :len $ScriptRunOnceBaseUrl ] = 0) do={
         $LogPrint warning $0 ("Script '" . $Script . "' is not an url and base url is not available.");
-        :error false;
+        :return false;
       }
       :set Script ($ScriptRunOnceBaseUrl . $Script . ".rsc" . $ScriptRunOnceUrlSuffix);
     }

From b829ec1fc9091fe8add28d56c81da64c7aa9be3a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Mar 2024 17:47:56 +0100
Subject: [PATCH 060/988] mod/ssh-keys-import: do not exit with error

---
 mod/ssh-keys-import.rsc | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index fbc667ec..6716958a 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -24,23 +24,23 @@
 
   :if ([ :len $Key ] = 0 || [ :len $User ] = 0) do={
     $LogPrint warning $0 ("Missing argument(s), please pass key and user!");
-    :error false;
+    :return false;
   }
 
   :if ([ :len [ /user/find where name=$User ] ] = 0) do={
     $LogPrint warning $0 ("User '" . $User . "' does not exist.");
-    :error false;
+    :return false;
   }
 
   :local KeyVal [ :toarray [ $CharacterReplace $Key " " "," ] ];
   :if (!($KeyVal->0 = "ssh-ed25519" || $KeyVal->0 = "ssh-rsa")) do={
     $LogPrint warning $0 ("SSH key of type '" . $KeyVal->0 . "' is not supported.");
-    :error false;
+    :return false;
   }
 
   :if ([ $MkDir "tmpfs/ssh-keys-import" ] = false) do={
     $LogPrint warning $0 ("Creating directory 'tmpfs/ssh-keys-import' failed!");
-    :error false;
+    :return false;
   }
 
   :local FingerPrintMD5 [ :convert from=base64 transform=md5 to=hex ($KeyVal->1) ];
@@ -61,7 +61,7 @@
       "MD5:" . $FingerPrintMD5 . ") for user '" . $User . "'.");
   } on-error={
     $LogPrint warning $0 ("Failed importing key.");
-    :error false;
+    :return false;
   }
 }
 
@@ -78,13 +78,13 @@
 
   :if ([ :len $FileName ] = 0 || [ :len $User ] = 0) do={
     $LogPrint warning $0 ("Missing argument(s), please pass file name and user!");
-    :error false;
+    :return false;
   }
 
   :local File [ /file/find where name=$FileName ];
   :if ([ :len $File ] = 0) do={
     $LogPrint warning $0 ("File '" . $FileName . "' does not exist.");
-    :error false;
+    :return false;
   }
   :local Keys ([ /file/get $FileName contents ] . "\n");
 

From 44fc69e82d1a612ad276998377b1c3f34310422e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 6 Dec 2023 23:43:23 +0100
Subject: [PATCH 061/988] packages-update: drop RouterOS version check...

... and allow all updates again. This requires RouterOS 7.13.
---
 doc/packages-update.md | 2 +-
 packages-update.rsc    | 8 +-------
 2 files changed, 2 insertions(+), 8 deletions(-)

diff --git a/doc/packages-update.md b/doc/packages-update.md
index 86eae0dd..fae38962 100644
--- a/doc/packages-update.md
+++ b/doc/packages-update.md
@@ -4,7 +4,7 @@ Manage system update
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/packages-update.rsc b/packages-update.rsc
index 22ea5013..2723b3b7 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # download packages and reboot for installation
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/packages-update.md
@@ -63,12 +63,6 @@
   :local NumInstalled [ $VersionToNum ($Update->"installed-version") ];
   :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
 
-  :if ($NumInstalled < 0x070d0000 && $NumLatest > 0x070d0000) do={
-    $LogPrint error $ScriptName ("Migration to wireless/wifi package in RouterOS " . \
-      ($Update->"latest-version") . " is pending. Please update manually!");
-    :error false;
-  }
-
   :local DoDowngrade false;
   :if ($NumInstalled > $NumLatest) do={
     :if ([ $ScriptFromTerminal $ScriptName ] = true) do={

From c016a6ef47eb08ad0f1f72968348af7bfa0acad0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Mar 2024 21:52:18 +0100
Subject: [PATCH 062/988] mod/notification-email: add display name with
 identity (if not given)

---
 mod/notification-email.rsc | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 78192f36..d801d788 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -8,6 +8,7 @@
 # send notifications via e-mail
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-email.md
 
+:global EMailGenerateFrom;
 :global FlushEmailQueue;
 :global LogForwardFilterLogForwarding;
 :global NotificationEMailSubject;
@@ -17,11 +18,25 @@
 :global SendEMail;
 :global SendEMail2;
 
+# generate from-property with display name
+:set EMailGenerateFrom do={
+  :global Identity;
+
+  :local From [ /tool/e-mail/get from ];
+
+  :if ($From ~ "<.*>\$") do={
+    :return $From;
+  }
+
+  :return ("\"" . $Identity . " via routeros-scripts\" <" . $From . ">");
+}
+
 # flush e-mail queue
 :set FlushEmailQueue do={
   :global EmailQueue;
 
   :global EitherOr;
+  :global EMailGenerateFrom;
   :global IsDNSResolving;
   :global IsTimeSync;
   :global LogPrint;
@@ -67,8 +82,8 @@
           $LogPrint warning $0 ("File '" . $File . "' does not exist, can not attach.");
         }
       }
-      /tool/e-mail/send to=($Message->"to") cc=($Message->"cc") subject=($Message->"subject") \
-        body=($Message->"body") file=$Attach;
+      /tool/e-mail/send from=[ $EMailGenerateFrom ] to=($Message->"to") cc=($Message->"cc") \
+        subject=($Message->"subject") body=($Message->"body") file=$Attach;
       :local Wait true;
       :do {
         :delay 1s;

From ccfbabde5eed08a021b2d47f34bc4498940fda1d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Mar 2024 22:03:04 +0100
Subject: [PATCH 063/988] mod/notification-email: clean name for display name

---
 mod/notification-email.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index d801d788..0d83d698 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -22,13 +22,15 @@
 :set EMailGenerateFrom do={
   :global Identity;
 
+  :global CleanName;
+
   :local From [ /tool/e-mail/get from ];
 
   :if ($From ~ "<.*>\$") do={
     :return $From;
   }
 
-  :return ("\"" . $Identity . " via routeros-scripts\" <" . $From . ">");
+  :return ([ $CleanName $Identity ] . " via routeros-scripts <" . $From . ">");
 }
 
 # flush e-mail queue

From 3d4a14d44935fff6777a97afb4b598238c57b47e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 13 Mar 2024 08:37:11 +0100
Subject: [PATCH 064/988] netwatch-notify: pass link to notification

This is pass verbatim below the notification text.
---
 doc/netwatch-notify.md | 7 +++++++
 global-functions.rsc   | 2 +-
 netwatch-notify.rsc    | 4 ++--
 news-and-changes.rsc   | 1 +
 4 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index 6f3e1ce4..806bb3af 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -111,6 +111,13 @@ included verbatim into the notification.
 
     /tool/netwatch/add comment="notify, name=example, note=Do not touch!" host=10.0.0.31;
 
+### Add a link in notification
+
+It is possible to add a link in notification, that is added below the
+formatted notification text.
+
+    /tool/netwatch/add comment="notify, name=example.com, resolve=example.com, link=https://example.com/";
+
 Tips & Tricks
 -------------
 
diff --git a/global-functions.rsc b/global-functions.rsc
index d33e3e27..e4d0fd23 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 123;
+:global ExpectedConfigVersion 124;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 9536dd75..adcfc372 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -144,7 +144,7 @@
           }
           $SendNotification2 ({ origin=[ $EitherOr ($HostInfo->"origin") $ScriptName ]; silent=($HostInfo->"silent"); \
             subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "Netwatch Notify: " . $Name . " up"); \
-            message=$Message });
+            message=$Message; link=($HostInfo->"link") });
         }
         :set ($Metric->"notified") false;
         :set ($Metric->"parent") ($HostInfo->"parent");
@@ -199,7 +199,7 @@
           :if ($HostInfo->"no-down-notification" != true) do={
             $SendNotification2 ({ origin=[ $EitherOr ($HostInfo->"origin") $ScriptName ]; silent=($HostInfo->"silent"); \
               subject=([ $SymbolForNotification "cross-mark" ] . "Netwatch Notify: " . $Name . " down"); \
-              message=$Message });
+              message=$Message; link=($HostInfo->"link") });
           }
           :set ($Metric->"notified") true;
         }
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 6b0a538f..1f1094df 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -48,6 +48,7 @@
   121="The 'wifiwave2' scripts are finally gone. Development continues with 'wifi' in RouterOS 7.13 and later.";
   122="The global configuration was enhanced to support loading snippets. Configuration can be split off to scripts where name starts with 'global-config-overlay.d/'.";
   123="Introduced new function '\$LogPrint', and deprecated '\$LogPrintExit2'. Please update custom scripts if you use it.";
+  124="Added support for links in 'netwatch-notify', these are added below the formatted notification text.";
 };
 
 # Migration steps to be applied on script updates

From 9b4e5ce369b4061f0d4b02f7cbcf9898cf86d0f0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 14 Mar 2024 22:12:03 +0100
Subject: [PATCH 065/988] global-functions: $SymbolByUnicodeName: add these for
 later use

---
 global-functions.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index e4d0fd23..2a3c0dd3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1365,6 +1365,9 @@
     "mobile-phone"="\F0\9F\93\B1";
     "pushpin"="\F0\9F\93\8C";
     "scissors"="\E2\9C\82";
+    "smiley-partying-face"="\F0\9F\A5\B3";
+    "smiley-smiling-face"="\E2\98\BA";
+    "smiley-winking-face-with-tongue"="\F0\9F\98\9C";
     "sparkles"="\E2\9C\A8";
     "speech-balloon"="\F0\9F\92\AC";
     "star"="\E2\AD\90";

From eb03a4608bdff08dcbb8ef5776931485625e26f4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 15 Mar 2024 10:05:32 +0100
Subject: [PATCH 066/988] global-functions: $ScriptInstallUpdate: use shorter
 url

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 2a3c0dd3..206c345e 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1171,7 +1171,7 @@
           "This project is developed in private spare time and usage is " . \
           "free of charge for you. If you like the scripts and think this is " . \
           "of value for you or your business please consider a donation.");
-        :set Link "https://git.eworm.de/cgit/routeros-scripts/about/#donate";
+        :set Link "https://rsc.eworm.de/#donate";
       }
 
       $SendNotification2 ({ origin=$0; \

From 2cf4f333d4ab3a0db2742965a430a5d5836c588b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 15 Mar 2024 11:26:44 +0100
Subject: [PATCH 067/988] README: add QR code with (shortened) upstream url

---
 README.d/upstream.png | Bin 0 -> 207 bytes
 README.md             |   2 ++
 2 files changed, 2 insertions(+)
 create mode 100644 README.d/upstream.png

diff --git a/README.d/upstream.png b/README.d/upstream.png
new file mode 100644
index 0000000000000000000000000000000000000000..fd5e877c7ba42c3475e2ccb0bcacb0d71748b968
GIT binary patch
literal 207
zcmeAS@N?(olHy`uVBq!ia0vp^F(Ayy3?y$VI!FU4&H|6fVg?3oArNM~bhqvgP>?Oa
zC&cyt|NlT{=%LGXKq}wU#WAGf*4!(Gj4X}<Ee<jd?x$KmXf`*fPDy3hmy#NFmvL27
z`3$4Cf?s(mSY8Op1*{AU|Kr_YJZIy^UCse)*390AYZ$h$S|2{E@sfw3xZ8M*!a-|?
yn^ldPR^M5QR-3OlBD<jBbDvkl>kj|hKN)Y?_<3AZsk#ibn!(f6&t;ucLK6VSvPZ)J

literal 0
HcmV?d00001

diff --git a/README.md b/README.md
index 61b17256..614095a8 100644
--- a/README.md
+++ b/README.md
@@ -366,6 +366,8 @@ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 Upstream
 --------
 
+![upstream](README.d/upstream.png)
+
 URL:
 [GitHub.com](https://github.com/eworm-de/routeros-scripts#routeros-scripts)
 

From 576a2c97cf88b7d1b36907469fb6fd34618523b3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 15 Mar 2024 14:42:50 +0100
Subject: [PATCH 068/988] global-functions: $LogPrintExit2: add deprecation
 warning

---
 global-functions.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 206c345e..c6167240 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -703,6 +703,10 @@
   :local Exit     [ :tostr $4 ];
 
   :global LogPrint;
+  :global LogPrintOnce;
+
+  $LogPrintOnce warning $0 \
+    ("This function is deprecated and will be removed. Please make your adjustments!");
 
   $LogPrint $1 $2 $3;
 

From eb7919c1d8b4ad5c77e0d120136c4f54e1e157e6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 16 Mar 2024 23:10:47 +0100
Subject: [PATCH 069/988] global-functions: generate user agent string in
 function...

... and add the caller and my shortened url.
---
 check-certificates.rsc |  2 +-
 fw-addr-lists.rsc      |  4 ++--
 global-functions.rsc   | 27 ++++++++++++++++-----------
 3 files changed, 19 insertions(+), 14 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 75049552..9aa24fd3 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -48,7 +48,7 @@
     :foreach Type in={ ".pem"; ".p12" } do={
       :local CertFileName ([ $UrlEncode $Name ] . $Type);
       :do {
-        /tool/fetch check-certificate=yes-without-crl http-header-field=({ $FetchUserAgent }) \
+        /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgent $0 ] }) \
             ($CertRenewUrl . $CertFileName) dst-path=$CertFileName as-value;
         $WaitForFile $CertFileName;
 
diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 64233ac1..3a422e8f 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -14,12 +14,12 @@
 :do {
   :local ScriptName [ :jobname ];
 
-  :global FetchUserAgent;
   :global FwAddrLists;
   :global FwAddrListTimeOut;
 
   :global CertificateAvailable;
   :global EitherOr;
+  :global FetchUserAgent;
   :global LogPrint;
   :global LogPrintOnce;
   :global ScriptLock;
@@ -65,7 +65,7 @@
         :if ($Data = false) do={
           :do {
             :set Data ([ /tool/fetch check-certificate=$CheckCertificate output=user \
-              http-header-field=({ $FetchUserAgent }) ($List->"url") as-value ]->"data");
+              http-header-field=({ [ $FetchUserAgent $ScriptName ] }) ($List->"url") as-value ]->"data");
           } on-error={
             :if ($I < 4) do={
               $LogPrint debug $ScriptName ("Failed downloading, " . $I . ". try: " . $List->"url");
diff --git a/global-functions.rsc b/global-functions.rsc
index c6167240..8df70f1a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -16,12 +16,6 @@
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
-:global FetchUserAgent;
-{
-  :local Resource [ /system/resource/get ];
-  :set FetchUserAgent ("User-Agent: Mikrotik/" . $Resource->"version" . \
-    " " . $Resource->"architecture-name" . " Fetch");
-}
 :global Identity [ /system/identity/get name ];
 
 # global functions
@@ -38,6 +32,7 @@
 :global DownloadPackage;
 :global EitherOr;
 :global EscapeForRegEx;
+:global FetchUserAgent;
 :global FormatLine;
 :global FormatMultiLines;
 :global GetMacVendor;
@@ -137,11 +132,11 @@
 :set CertificateDownload do={
   :local CommonName [ :tostr $1 ];
 
-  :global FetchUserAgent;
   :global ScriptUpdatesBaseUrl;
   :global ScriptUpdatesUrlSuffix;
 
   :global CertificateNameByCN;
+  :global FetchUserAgent;
   :global LogPrint;
   :global UrlEncode;
   :global WaitForFile;
@@ -151,7 +146,7 @@
   :do {
     :local LocalFileName ($CommonName . ".pem");
     :local UrlFileName ([ $UrlEncode $CommonName ] . ".pem");
-    /tool/fetch check-certificate=yes-without-crl http-header-field=({ $FetchUserAgent }) \
+    /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgent $0 ] }) \
       ($ScriptUpdatesBaseUrl . "certs/" . $UrlFileName . $ScriptUpdatesUrlSuffix) \
       dst-path=$LocalFileName as-value;
     $WaitForFile $LocalFileName;
@@ -396,6 +391,16 @@
   :return $Return;
 }
 
+# generate user agent string for fetch
+:global FetchUserAgent do={
+  :local Caller [ :tostr $1 ];
+
+  :local Resource [ /system/resource/get ];
+
+  :return ("User-Agent: Mikrotik/" . $Resource->"version" . " " . \
+    $Resource->"architecture-name" . " " . $Caller . "/Fetch (https://rsc.eworm.de/)");
+}
+
 # format a line for output
 :set FormatLine do={
   :local Key    [ :tostr $1 ];
@@ -975,7 +980,6 @@
   :local NewComment [ :tostr   $2 ];
 
   :global ExpectedConfigVersion;
-  :global FetchUserAgent;
   :global Identity;
   :global IDonate;
   :global NoNewsAndChangesNotification;
@@ -984,6 +988,7 @@
 
   :global CertificateAvailable;
   :global EitherOr;
+  :global FetchUserAgent;
   :global Grep;
   :global IfThenElse;
   :global LogPrint;
@@ -1029,7 +1034,7 @@
         :local Url ($BaseUrl . $ScriptVal->"name" . ".rsc" . $UrlSuffix);
         $LogPrint debug $0 ("Fetching script '" . $ScriptVal->"name" . "' from url: " . $Url);
         :local Result [ /tool/fetch check-certificate=yes-without-crl \
-          http-header-field=({ $FetchUserAgent }) $Url output=user as-value ];
+          http-header-field=({ [ $FetchUserAgent $0 ] }) $Url output=user as-value ];
         :if ($Result->"status" = "finished") do={
           :set SourceNew ($Result->"data");
         }
@@ -1112,7 +1117,7 @@
       :local Url ($ScriptUpdatesBaseUrl . "news-and-changes.rsc" . $ScriptUpdatesUrlSuffix);
       $LogPrint debug $0 ("Fetching news, changes and migration: " . $Url);
       :local Result [ /tool/fetch check-certificate=yes-without-crl \
-        http-header-field=({ $FetchUserAgent }) $Url output=user as-value ];
+        http-header-field=({ [ $FetchUserAgent $0 ] }) $Url output=user as-value ];
       :if ($Result->"status" = "finished") do={
         :set ChangeLogCode ($Result->"data");
       }

From cd371b69a642d9e3a0bc32795e959c7feef42522 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 16 Mar 2024 23:27:45 +0100
Subject: [PATCH 070/988] global-functions: $CertificateDownload: download via
 clean name...

... and rename certificates in repository.
---
 ...ECC CA-3.pem => Cloudflare-Inc-ECC-CA-3.pem} |  0
 ...iCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem} |  0
 ...DigiCert-TLS-Hybrid-ECC-SHA384-2020-CA1.pem} |  0
 certs/{GTS CA 1C3.pem => GTS-CA-1C3.pem}        |  0
 certs/{GTS CA 1P5.pem => GTS-CA-1P5.pem}        |  0
 ...> GlobalSign-Atlas-R3-DV-TLS-CA-2022-Q3.pem} |  0
 ...o-Daddy-Secure-Certificate-Authority-G2.pem} |  0
 ...arfield-Secure-Certificate-Authority-G2.pem} |  0
 global-functions.rsc                            | 17 ++++++++---------
 9 files changed, 8 insertions(+), 9 deletions(-)
 rename certs/{Cloudflare Inc ECC CA-3.pem => Cloudflare-Inc-ECC-CA-3.pem} (100%)
 rename certs/{DigiCert Global G2 TLS RSA SHA256 2020 CA1.pem => DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem} (100%)
 rename certs/{DigiCert TLS Hybrid ECC SHA384 2020 CA1.pem => DigiCert-TLS-Hybrid-ECC-SHA384-2020-CA1.pem} (100%)
 rename certs/{GTS CA 1C3.pem => GTS-CA-1C3.pem} (100%)
 rename certs/{GTS CA 1P5.pem => GTS-CA-1P5.pem} (100%)
 rename certs/{GlobalSign Atlas R3 DV TLS CA 2022 Q3.pem => GlobalSign-Atlas-R3-DV-TLS-CA-2022-Q3.pem} (100%)
 rename certs/{Go Daddy Secure Certificate Authority - G2.pem => Go-Daddy-Secure-Certificate-Authority-G2.pem} (100%)
 rename certs/{Starfield Secure Certificate Authority - G2.pem => Starfield-Secure-Certificate-Authority-G2.pem} (100%)

diff --git a/certs/Cloudflare Inc ECC CA-3.pem b/certs/Cloudflare-Inc-ECC-CA-3.pem
similarity index 100%
rename from certs/Cloudflare Inc ECC CA-3.pem
rename to certs/Cloudflare-Inc-ECC-CA-3.pem
diff --git a/certs/DigiCert Global G2 TLS RSA SHA256 2020 CA1.pem b/certs/DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem
similarity index 100%
rename from certs/DigiCert Global G2 TLS RSA SHA256 2020 CA1.pem
rename to certs/DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem
diff --git a/certs/DigiCert TLS Hybrid ECC SHA384 2020 CA1.pem b/certs/DigiCert-TLS-Hybrid-ECC-SHA384-2020-CA1.pem
similarity index 100%
rename from certs/DigiCert TLS Hybrid ECC SHA384 2020 CA1.pem
rename to certs/DigiCert-TLS-Hybrid-ECC-SHA384-2020-CA1.pem
diff --git a/certs/GTS CA 1C3.pem b/certs/GTS-CA-1C3.pem
similarity index 100%
rename from certs/GTS CA 1C3.pem
rename to certs/GTS-CA-1C3.pem
diff --git a/certs/GTS CA 1P5.pem b/certs/GTS-CA-1P5.pem
similarity index 100%
rename from certs/GTS CA 1P5.pem
rename to certs/GTS-CA-1P5.pem
diff --git a/certs/GlobalSign Atlas R3 DV TLS CA 2022 Q3.pem b/certs/GlobalSign-Atlas-R3-DV-TLS-CA-2022-Q3.pem
similarity index 100%
rename from certs/GlobalSign Atlas R3 DV TLS CA 2022 Q3.pem
rename to certs/GlobalSign-Atlas-R3-DV-TLS-CA-2022-Q3.pem
diff --git a/certs/Go Daddy Secure Certificate Authority - G2.pem b/certs/Go-Daddy-Secure-Certificate-Authority-G2.pem
similarity index 100%
rename from certs/Go Daddy Secure Certificate Authority - G2.pem
rename to certs/Go-Daddy-Secure-Certificate-Authority-G2.pem
diff --git a/certs/Starfield Secure Certificate Authority - G2.pem b/certs/Starfield-Secure-Certificate-Authority-G2.pem
similarity index 100%
rename from certs/Starfield Secure Certificate Authority - G2.pem
rename to certs/Starfield-Secure-Certificate-Authority-G2.pem
diff --git a/global-functions.rsc b/global-functions.rsc
index 8df70f1a..ca238ba0 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -136,25 +136,24 @@
   :global ScriptUpdatesUrlSuffix;
 
   :global CertificateNameByCN;
+  :global CleanName;
   :global FetchUserAgent;
   :global LogPrint;
-  :global UrlEncode;
   :global WaitForFile;
 
   $LogPrint info $0 ("Downloading and importing certificate with " . \
       "CommonName \"" . $CommonName . "\".");
   :do {
-    :local LocalFileName ($CommonName . ".pem");
-    :local UrlFileName ([ $UrlEncode $CommonName ] . ".pem");
+    :local FileName ([ $CleanName $CommonName ] . ".pem");
     /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgent $0 ] }) \
-      ($ScriptUpdatesBaseUrl . "certs/" . $UrlFileName . $ScriptUpdatesUrlSuffix) \
-      dst-path=$LocalFileName as-value;
-    $WaitForFile $LocalFileName;
-    /certificate/import file-name=$LocalFileName passphrase="" as-value;
+      ($ScriptUpdatesBaseUrl . "certs/" . $FileName . $ScriptUpdatesUrlSuffix) \
+      dst-path=$FileName as-value;
+    $WaitForFile $FileName;
+    /certificate/import file-name=$FileName passphrase="" as-value;
     :delay 1s;
-    /file/remove $LocalFileName;
+    /file/remove $FileName;
 
-    :foreach Cert in=[ /certificate/find where name~("^" . $LocalFileName . "_[0-9]+\$") ] do={
+    :foreach Cert in=[ /certificate/find where name~("^" . $FileName . "_[0-9]+\$") ] do={
       $CertificateNameByCN [ /certificate/get $Cert common-name ];
     }
   } on-error={

From 079249f3d7a1c4c11aa2b4d93b3cf239b0f5da0d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 18 Mar 2024 09:31:40 +0100
Subject: [PATCH 071/988] check-routeros-update: use custom user agent string

---
 check-routeros-update.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index e209610a..fde7cb51 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -24,6 +24,7 @@
 
   :global DeviceInfo;
   :global EscapeForRegEx;
+  :global FetchUserAgent;
   :global LogPrint;
   :global ScriptFromTerminal;
   :global ScriptLock;
@@ -108,7 +109,8 @@
       :do {
         :set Result [ /tool/fetch check-certificate=yes-without-crl \
             ($SafeUpdateUrl . $Update->"channel" . "?installed=" . $Update->"installed-version" . \
-            "&latest=" . $Update->"latest-version") output=user as-value ];
+            "&latest=" . $Update->"latest-version") http-header-field=({ [ $FetchUserAgent $ScriptName ] }) \
+            output=user as-value ];
       } on-error={
         $LogPrint warning $ScriptName ("Failed receiving safe version for " . $Update->"channel" . ".");
       }

From be231ce4f3a3d829e7892b6f17751d04991ccd42 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 18 Mar 2024 13:46:46 +0100
Subject: [PATCH 072/988] global-config: prepare a (commented) address-list for
 Mikrotik

This is AS51894: https://bgp.he.net/AS51894
---
 global-config.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/global-config.rsc b/global-config.rsc
index 2b688bc2..63a4a3f7 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -104,6 +104,10 @@
 #    { url="https://www.spamhaus.org/drop/edrop.txt";
 #      cert="Cloudflare Inc ECC CA-3" };
   };
+#  "mikrotik"={
+#    { url="https://eworm.de/ros/fw-addr-lists/mikrotik";
+#      cert="E1"; timeout=1w };
+#  };
 };
 :global FwAddrListTimeOut 1d;
 

From 6845eb69b3fb47038bb3d69ba239fd8678447409 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 20 Mar 2024 13:34:37 +0100
Subject: [PATCH 073/988] global-config: put example fw-addr-lists into
 repository

---
 fw-addr-lists.d/allow    | 3 +++
 fw-addr-lists.d/block    | 5 +++++
 fw-addr-lists.d/mikrotik | 5 +++++
 global-config.rsc        | 6 +++---
 4 files changed, 16 insertions(+), 3 deletions(-)
 create mode 100644 fw-addr-lists.d/allow
 create mode 100644 fw-addr-lists.d/block
 create mode 100644 fw-addr-lists.d/mikrotik

diff --git a/fw-addr-lists.d/allow b/fw-addr-lists.d/allow
new file mode 100644
index 00000000..8b59ed7c
--- /dev/null
+++ b/fw-addr-lists.d/allow
@@ -0,0 +1,3 @@
+# an ip address list for use with fw-addr-lists script
+# https://git.eworm.de/cgit/routeros-scripts/about/doc/fw-addr-lists.md
+git.eworm.de
diff --git a/fw-addr-lists.d/block b/fw-addr-lists.d/block
new file mode 100644
index 00000000..5e9fef29
--- /dev/null
+++ b/fw-addr-lists.d/block
@@ -0,0 +1,5 @@
+# an ip address list for use with fw-addr-lists script
+# https://git.eworm.de/cgit/routeros-scripts/about/doc/fw-addr-lists.md
+
+# example.net
+93.184.216.34
diff --git a/fw-addr-lists.d/mikrotik b/fw-addr-lists.d/mikrotik
new file mode 100644
index 00000000..3b31a94f
--- /dev/null
+++ b/fw-addr-lists.d/mikrotik
@@ -0,0 +1,5 @@
+# AS51894 Mikrotikls SIA
+# https://bgp.he.net/AS51894
+159.148.147.0/24
+159.148.172.0/24
+2a02:610:7501::/48
diff --git a/global-config.rsc b/global-config.rsc
index 63a4a3f7..f393abb4 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -87,11 +87,11 @@
 # This defines the settings for firewall address-lists (fw-addr-lists).
 :global FwAddrLists {
 #  "allow"={
-#    { url="https://eworm.de/ros/fw-addr-lists/allow";
+#    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/allow";
 #      cert="E1"; timeout=1w };
 #  };
   "block"={
-#    { url="https://eworm.de/ros/fw-addr-lists/block";
+#    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/block";
 #      cert="E1" };
     { url="https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt";
       cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
@@ -105,7 +105,7 @@
 #      cert="Cloudflare Inc ECC CA-3" };
   };
 #  "mikrotik"={
-#    { url="https://eworm.de/ros/fw-addr-lists/mikrotik";
+#    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";
 #      cert="E1"; timeout=1w };
 #  };
 };

From 81f1d9aa99b928fea43612a9e2e58e4c17eee7d6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 20 Mar 2024 13:55:55 +0100
Subject: [PATCH 074/988] check-certificates: pass script name into local
 function

---
 check-certificates.rsc | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 9aa24fd3..ab78e226 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -31,7 +31,8 @@
   :global WaitFullyConnected;
 
   :local CheckCertificatesDownloadImport do={
-    :local Name [ :tostr $1 ];
+    :local ScriptName [ :tostr $1 ];
+    :local Name       [ :tostr $2 ];
 
     :global CertRenewUrl;
     :global CertRenewPass;
@@ -48,7 +49,7 @@
     :foreach Type in={ ".pem"; ".p12" } do={
       :local CertFileName ([ $UrlEncode $Name ] . $Type);
       :do {
-        /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgent $0 ] }) \
+        /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgent $ScriptName ] }) \
             ($CertRenewUrl . $CertFileName) dst-path=$CertFileName as-value;
         $WaitForFile $CertFileName;
 
@@ -62,7 +63,7 @@
         /file/remove [ find where name=$CertFileName ];
 
         :if ($DecryptionFailed = true) do={
-          $LogPrint warning $0 ("Decryption failed for certificate file '" . $CertFileName . "'.");
+          $LogPrint warning $ScriptName ("Decryption failed for certificate file '" . $CertFileName . "'.");
         }
 
         :foreach CertInChain in=[ /certificate/find where name~("^" . [ $EscapeForRegEx $CertFileName ] . "_[0-9]+\$") \
@@ -72,7 +73,7 @@
 
         :set Return true;
       } on-error={
-        $LogPrint debug $0 ("Could not download certificate file '" . $CertFileName . "'.");
+        $LogPrint debug $ScriptName ("Could not download certificate file '" . $CertFileName . "'.");
       }
     }
 
@@ -150,11 +151,11 @@
 
       :local ImportSuccess false;
       :set LastName ($CertVal->"common-name");
-      :set ImportSuccess [ $CheckCertificatesDownloadImport $LastName ];
+      :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName ];
       :foreach SAN in=($CertVal->"subject-alt-name") do={
         :if ($ImportSuccess = false) do={
           :set LastName [ :pick $SAN ([ :find $SAN ":" ] + 1) [ :len $SAN ] ];
-          :set ImportSuccess [ $CheckCertificatesDownloadImport $LastName ];
+          :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName ];
         }
       }
       :if ($ImportSuccess = false) do={ :error false; }

From 6628d9f9665cc224423c904ef65d84a25c8de817 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 20 Mar 2024 13:59:44 +0100
Subject: [PATCH 075/988] netwatch-notify: pass script name into local
 functions

---
 netwatch-notify.rsc | 30 ++++++++++++++++--------------
 1 file changed, 16 insertions(+), 14 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index adcfc372..bdabe2ec 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -27,10 +27,11 @@
   :global SymbolForNotification;
 
   :local NetwatchNotifyHook do={
-    :local Name  [ :tostr $1 ];
-    :local Type  [ :tostr $2 ];
-    :local State [ :tostr $3 ];
-    :local Hook  [ :tostr $4 ];
+    :local ScriptName [ :tostr $1 ];
+    :local Name       [ :tostr $2 ];
+    :local Type       [ :tostr $3 ];
+    :local State      [ :tostr $4 ];
+    :local Hook       [ :tostr $5 ];
 
     :global LogPrint;
     :global ValidateSyntax;
@@ -39,25 +40,26 @@
       :do {
         [ :parse $Hook ];
       } on-error={
-        $LogPrint warning $0 ("The " . $State . "-hook for " . $Type . " '" . $Name . "' failed to run.");
+        $LogPrint warning $ScriptName ("The " . $State . "-hook for " . $Type . " '" . $Name . "' failed to run.");
         :return ("The hook failed to run.");
       }
     } else={
-      $LogPrint warning $0 ("The " . $State . "-hook for " . $Type . " '" . $Name . "' failed syntax validation.");
+      $LogPrint warning $ScriptName ("The " . $State . "-hook for " . $Type . " '" . $Name . "' failed syntax validation.");
       :return ("The hook failed syntax validation.");
     }
 
-    $LogPrint info $0 ("Ran hook on " . $Type . " '" . $Name . "' " . $State . ": " . $Hook);
+    $LogPrint info $ScriptName ("Ran hook on " . $Type . " '" . $Name . "' " . $State . ": " . $Hook);
     :return ("Ran hook:\n" . $Hook);
   }
 
   :local ResolveExpected do={
-    :local Name     [ :tostr $1 ];
-    :local Expected [ :tostr $2 ];
+    :local ScriptName [ :tostr $1 ];
+    :local Name       [ :tostr $2 ];
+    :local Expected   [ :tostr $3 ];
 
     :global GetRandom20CharAlNum;
 
-    :local FwAddrList ($0 . "-" . [ $GetRandom20CharAlNum ]);
+    :local FwAddrList ($ScriptName . "-" . [ $GetRandom20CharAlNum ]);
     /ip/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=1s;
     :delay 20ms;
     :if ([ :len [ /ip/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
@@ -102,7 +104,7 @@
           :do {
             :local Resolve [ :resolve ($HostInfo->"resolve") ];
             :if ($Resolve != $HostVal->"host") do={
-              :if ([ $ResolveExpected ($HostInfo->"resolve") ($HostVal->"host") ] = false) do={
+              :if ([ $ResolveExpected $ScriptName ($HostInfo->"resolve") ($HostVal->"host") ] = false) do={
                 $LogPrint info $ScriptName ("Name '" . $HostInfo->"resolve" . [ $IfThenElse \
                     ($HostInfo->"resolve" != $HostInfo->"name") ("' for " . $Type . " '" . \
                     $HostInfo->"name") "" ] . "' resolves to different address " . $Resolve . \
@@ -139,7 +141,7 @@
             :set Message ($Message . "\n\nNote:\n" . ($HostInfo->"note"));
           }
           :if ([ :typeof ($HostInfo->"up-hook") ] = "str") do={
-            :set Message ($Message . "\n\n" . [ $NetwatchNotifyHook $Name $Type "up" \
+            :set Message ($Message . "\n\n" . [ $NetwatchNotifyHook $ScriptName $Name $Type "up" \
                 ($HostInfo->"up-hook") ]);
           }
           $SendNotification2 ({ origin=[ $EitherOr ($HostInfo->"origin") $ScriptName ]; silent=($HostInfo->"silent"); \
@@ -183,7 +185,7 @@
         }
         :if ((($CountDown * 2) - ($Metric->"count-down" * 3)) / 2 = 0 && \
              [ :typeof ($HostInfo->"pre-down-hook") ] = "str") do={
-          $NetwatchNotifyHook $Name $Type "pre-down" ($HostInfo->"pre-down-hook");
+          $NetwatchNotifyHook $ScriptName $Name $Type "pre-down" ($HostInfo->"pre-down-hook");
         }
         :if ($ParentNotified = false && $Metric->"count-down" >= $CountDown && \
              ($ParentUp = false || $ParentUp > 2) && $Metric->"notified" != true) do={
@@ -193,7 +195,7 @@
             :set Message ($Message . "\n\nNote:\n" . ($HostInfo->"note"));
           }
           :if ([ :typeof ($HostInfo->"down-hook") ] = "str") do={
-            :set Message ($Message . "\n\n" . [ $NetwatchNotifyHook $Name $Type "down" \
+            :set Message ($Message . "\n\n" . [ $NetwatchNotifyHook $ScriptName $Name $Type "down" \
                 ($HostInfo->"down-hook") ]);
           }
           :if ($HostInfo->"no-down-notification" != true) do={

From cc81e556491c40d9b2a0d164eda16e196ac72aa6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 21 Mar 2024 13:39:56 +0100
Subject: [PATCH 076/988] telegram-chat: improve readability with symbols

---
 global-functions.rsc |  1 +
 telegram-chat.rsc    | 15 +++++++++------
 2 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ca238ba0..1b1a8c87 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1361,6 +1361,7 @@
     "earth"="\F0\9F\8C\8D";
     "fire"="\F0\9F\94\A5";
     "floppy-disk"="\F0\9F\92\BE";
+    "gear"="\E2\9A\99";
     "heart"="\E2\99\A5";
     "high-voltage-sign"="\E2\9A\A1";
     "incoming-envelope"="\F0\9F\93\A8";
diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index c81b7141..4245cfde 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -136,23 +136,26 @@
             :execute script=(":do {\n" . $Message->"text" . "\n} on-error={ /file/add name=\"" . $File . ".failed\" };" . \
               "/file/add name=\"" . $File . ".done\"") file=($File . "\00");
             :if ([ $WaitForFile ($File . ".done") [ $EitherOr $TelegramChatRunTime 20s ] ] = false) do={
-              :set State "The command did not finish, still running in background.\n\n";
+              :set State ([ $SymbolForNotification "warning-sign" ] . "The command did not finish, still running in background.\n\n");
             }
             :if ([ :len [ /file/find where name=($File . ".failed") ] ] > 0) do={
-              :set State "The command failed with an error!\n\n";
+              :set State ([ $SymbolForNotification "cross-mark" ] . "The command failed with an error!\n\n");
             }
             :local Content [ /file/get $File contents ];
             $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; replyto=($Message->"message_id"); \
               subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
-              message=("Command:\n" . $Message->"text" . "\n\n" . $State . [ $IfThenElse ([ :len $Content ] > 0) \
-                ("Output:\n" . $Content) [ $IfThenElse ([ /file/get $File size ] > 0) \
-                ("Output exceeds file read size.") ("No output.") ] ]) });
+              message=([ $SymbolForNotification "gear" ] . "Command:\n" . $Message->"text" . "\n\n" . \
+                $State . [ $IfThenElse ([ :len $Content ] > 0) \
+                ([ $SymbolForNotification "memo" ] . "Output:\n" . $Content) [ $IfThenElse ([ /file/get $File size ] > 0) \
+                ([ $SymbolForNotification "warning-sign" ] . "Output exceeds file read size.") \
+                ([ $SymbolForNotification "memo" ] . "No output.") ] ]) });
             /file/remove "tmpfs/telegram-chat";
           } else={
             $LogPrint info $ScriptName ("The command from update " . $UpdateID . " failed syntax validation!");
             $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; replyto=($Message->"message_id"); \
               subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
-              message=("Command:\n" . $Message->"text" . "\n\nThe command failed syntax validation!") });
+              message=([ $SymbolForNotification "gear" ] . "Command:\n" . $Message->"text" . "\n\n" . \
+                [ $SymbolForNotification "cross-mark" ] . "The command failed syntax validation!") });
           }
         }
       } else={

From f72aadfc591ece4c79522256e5b6a4d71fb18467 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 21 Mar 2024 21:10:51 +0100
Subject: [PATCH 077/988] telegram-chat: note active state when answering
 broadcast

---
 telegram-chat.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 4245cfde..9ae59670 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -111,7 +111,7 @@
           $LogPrint info $ScriptName ("Sending notice for update " . $UpdateID . ".");
           $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; replyto=($Message->"message_id"); \
             subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
-            message=("Online, awaiting your commands!") });
+            message=("Online" . [ $IfThenElse $TelegramChatActive " (and active!)" ] . ", awaiting your commands!") });
           :set Done true;
         }
         :if ($Done = false && [ :pick ($Message->"text") 0 1 ] = "!") do={

From 9ec8b9c03fbd5529eee0d62417d5de8ffc72abd4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 26 Mar 2024 08:37:07 +0100
Subject: [PATCH 078/988] fw-addr-lists: one more interation on download
 failure...

... with even more delay. This script is called with long interval from
scheduler, so should not be an issue.
---
 fw-addr-lists.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 3a422e8f..887263eb 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -61,13 +61,13 @@
         }
       }
 
-      :for I from=1 to=4 do={
+      :for I from=1 to=5 do={
         :if ($Data = false) do={
           :do {
             :set Data ([ /tool/fetch check-certificate=$CheckCertificate output=user \
               http-header-field=({ [ $FetchUserAgent $ScriptName ] }) ($List->"url") as-value ]->"data");
           } on-error={
-            :if ($I < 4) do={
+            :if ($I < 5) do={
               $LogPrint debug $ScriptName ("Failed downloading, " . $I . ". try: " . $List->"url");
               :delay (($I * $I) . "s");
             }

From bd2301a28cf34bb0302487719a82a40cd64fa4ef Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 26 Mar 2024 13:51:44 +0100
Subject: [PATCH 079/988] global-functions: $LogPrintOnce: indicate action via
 return

---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 1b1a8c87..59ba0399 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -734,11 +734,12 @@
   }
 
   :if ($LogPrintOnceMessages->$Message = 1) do={
-    :return true;
+    :return false;
   }
 
   :set ($LogPrintOnceMessages->$Message) 1;
   $LogPrint $Severity $Name $Message;
+  :return true;
 }
 
 # get max value

From 43ecec854fccb27bdf4424d684f72519f75e0484 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Mar 2024 07:43:32 +0100
Subject: [PATCH 080/988] global-functions: $LogPrintOnce: detect and warn on
 possible crash

---
 global-functions.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 59ba0399..b3d8719e 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -737,6 +737,11 @@
     :return false;
   }
 
+  :if ([ :len [ /log/find where message=($Name . ": " . $Message) ] ] > 0) do={
+    $LogPrint warning $0 \
+      ("The message is already in log, scripting subsystem may have crashed before!");
+  }
+
   :set ($LogPrintOnceMessages->$Message) 1;
   $LogPrint $Severity $Name $Message;
   :return true;

From 7212d8bd23c555970e22fa43edb56dabfe14b820 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Mar 2024 22:17:06 +0100
Subject: [PATCH 081/988] packages-update: do not reboot when scheduled

---
 packages-update.rsc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/packages-update.rsc b/packages-update.rsc
index 2723b3b7..0208b1e6 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -130,10 +130,12 @@
     :put "Do you want to (s)chedule reboot or (r)eboot now? [s/R]";
     :if (([ /terminal/inkey timeout=60 ] % 32) = 19) do={
       $Schedule $ScriptName;
+      :error true;
     }
   } else={
     :if ($PackagesUpdateDeferReboot = true) do={
       $Schedule $ScriptName;
+      :error true;
     }
   }
 

From 1d816d94f60ed953e67760bf2f567442002c0a6f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Mar 2024 22:58:33 +0100
Subject: [PATCH 082/988] global-functions: $FetchUserAgent: set declared
 function only

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index b3d8719e..35eeca9a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -391,7 +391,7 @@
 }
 
 # generate user agent string for fetch
-:global FetchUserAgent do={
+:set FetchUserAgent do={
   :local Caller [ :tostr $1 ];
 
   :local Resource [ /system/resource/get ];

From acf8e88db2c3a96b1d196d29e19f3f65be9c21eb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Mar 2024 23:00:27 +0100
Subject: [PATCH 083/988] global-functions: $AlignRight: set declared function
 only

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 35eeca9a..919ffbed 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -79,7 +79,7 @@
 :global WaitTimeSync;
 
 # align string to the right
-:global AlignRight do={
+:set AlignRight do={
   :local Input [ :tostr $1 ];
   :local Len   [ :tonum $2 ];
 

From bbdc9c65f50d2d290e4cd15a8c49ec0cb36a347d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Mar 2024 23:01:07 +0100
Subject: [PATCH 084/988] global-functions: $HumanReadableNum: set declared
 function only

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 919ffbed..17ccda82 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -528,7 +528,7 @@
 }
 
 # return human readable number
-:global HumanReadableNum do={
+:set HumanReadableNum do={
   :local Input [ :tonum $1 ];
   :local Base  [ :tonum $2 ];
 

From 4df1468e2569dfc1603876e24a9be933dc8cf8f2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 29 Mar 2024 11:09:22 +0100
Subject: [PATCH 085/988] global-functions: rename $FetchUserAgent ->
 $FetchUserAgentStr

... to make sure the function does not clash with the variable we had before,
as this causes issue with news and changes notification.
---
 check-certificates.rsc    |  4 ++--
 check-routeros-update.rsc |  4 ++--
 fw-addr-lists.rsc         |  4 ++--
 global-functions.rsc      | 14 +++++++-------
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index ab78e226..20e2902f 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -39,7 +39,7 @@
 
     :global CertificateNameByCN;
     :global EscapeForRegEx;
-    :global FetchUserAgent;
+    :global FetchUserAgentStr;
     :global LogPrint;
     :global UrlEncode;
     :global WaitForFile;
@@ -49,7 +49,7 @@
     :foreach Type in={ ".pem"; ".p12" } do={
       :local CertFileName ([ $UrlEncode $Name ] . $Type);
       :do {
-        /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgent $ScriptName ] }) \
+        /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) \
             ($CertRenewUrl . $CertFileName) dst-path=$CertFileName as-value;
         $WaitForFile $CertFileName;
 
diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index fde7cb51..c9ab93b3 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -24,7 +24,7 @@
 
   :global DeviceInfo;
   :global EscapeForRegEx;
-  :global FetchUserAgent;
+  :global FetchUserAgentStr;
   :global LogPrint;
   :global ScriptFromTerminal;
   :global ScriptLock;
@@ -109,7 +109,7 @@
       :do {
         :set Result [ /tool/fetch check-certificate=yes-without-crl \
             ($SafeUpdateUrl . $Update->"channel" . "?installed=" . $Update->"installed-version" . \
-            "&latest=" . $Update->"latest-version") http-header-field=({ [ $FetchUserAgent $ScriptName ] }) \
+            "&latest=" . $Update->"latest-version") http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) \
             output=user as-value ];
       } on-error={
         $LogPrint warning $ScriptName ("Failed receiving safe version for " . $Update->"channel" . ".");
diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 887263eb..68775b41 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -19,7 +19,7 @@
 
   :global CertificateAvailable;
   :global EitherOr;
-  :global FetchUserAgent;
+  :global FetchUserAgentStr;
   :global LogPrint;
   :global LogPrintOnce;
   :global ScriptLock;
@@ -65,7 +65,7 @@
         :if ($Data = false) do={
           :do {
             :set Data ([ /tool/fetch check-certificate=$CheckCertificate output=user \
-              http-header-field=({ [ $FetchUserAgent $ScriptName ] }) ($List->"url") as-value ]->"data");
+              http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) ($List->"url") as-value ]->"data");
           } on-error={
             :if ($I < 5) do={
               $LogPrint debug $ScriptName ("Failed downloading, " . $I . ". try: " . $List->"url");
diff --git a/global-functions.rsc b/global-functions.rsc
index 17ccda82..1e98019c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -32,7 +32,7 @@
 :global DownloadPackage;
 :global EitherOr;
 :global EscapeForRegEx;
-:global FetchUserAgent;
+:global FetchUserAgentStr;
 :global FormatLine;
 :global FormatMultiLines;
 :global GetMacVendor;
@@ -137,7 +137,7 @@
 
   :global CertificateNameByCN;
   :global CleanName;
-  :global FetchUserAgent;
+  :global FetchUserAgentStr;
   :global LogPrint;
   :global WaitForFile;
 
@@ -145,7 +145,7 @@
       "CommonName \"" . $CommonName . "\".");
   :do {
     :local FileName ([ $CleanName $CommonName ] . ".pem");
-    /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgent $0 ] }) \
+    /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $0 ] }) \
       ($ScriptUpdatesBaseUrl . "certs/" . $FileName . $ScriptUpdatesUrlSuffix) \
       dst-path=$FileName as-value;
     $WaitForFile $FileName;
@@ -391,7 +391,7 @@
 }
 
 # generate user agent string for fetch
-:set FetchUserAgent do={
+:set FetchUserAgentStr do={
   :local Caller [ :tostr $1 ];
 
   :local Resource [ /system/resource/get ];
@@ -993,7 +993,7 @@
 
   :global CertificateAvailable;
   :global EitherOr;
-  :global FetchUserAgent;
+  :global FetchUserAgentStr;
   :global Grep;
   :global IfThenElse;
   :global LogPrint;
@@ -1039,7 +1039,7 @@
         :local Url ($BaseUrl . $ScriptVal->"name" . ".rsc" . $UrlSuffix);
         $LogPrint debug $0 ("Fetching script '" . $ScriptVal->"name" . "' from url: " . $Url);
         :local Result [ /tool/fetch check-certificate=yes-without-crl \
-          http-header-field=({ [ $FetchUserAgent $0 ] }) $Url output=user as-value ];
+          http-header-field=({ [ $FetchUserAgentStr $0 ] }) $Url output=user as-value ];
         :if ($Result->"status" = "finished") do={
           :set SourceNew ($Result->"data");
         }
@@ -1122,7 +1122,7 @@
       :local Url ($ScriptUpdatesBaseUrl . "news-and-changes.rsc" . $ScriptUpdatesUrlSuffix);
       $LogPrint debug $0 ("Fetching news, changes and migration: " . $Url);
       :local Result [ /tool/fetch check-certificate=yes-without-crl \
-        http-header-field=({ [ $FetchUserAgent $0 ] }) $Url output=user as-value ];
+        http-header-field=({ [ $FetchUserAgentStr $0 ] }) $Url output=user as-value ];
       :if ($Result->"status" = "finished") do={
         :set ChangeLogCode ($Result->"data");
       }

From bdcf5b327518e5c8806bdb9a1896f86523ec2925 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 14 Mar 2024 22:32:15 +0100
Subject: [PATCH 086/988] news on charge and fees

---
 global-functions.rsc | 2 +-
 news-and-changes.rsc | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 1e98019c..bd723139 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 124;
+:global ExpectedConfigVersion 125;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 1f1094df..e66ad2e5 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -49,6 +49,7 @@
   122="The global configuration was enhanced to support loading snippets. Configuration can be split off to scripts where name starts with 'global-config-overlay.d/'.";
   123="Introduced new function '\$LogPrint', and deprecated '\$LogPrintExit2'. Please update custom scripts if you use it.";
   124="Added support for links in 'netwatch-notify', these are added below the formatted notification text.";
+  125=("Donations do not pay off, thus I will start charging fees soon: 5\C2\A2 each notification, 20\C2\A2 each backup, 50\C2\A2 for script updates. Please add credit card information and mail address for invoice.");
 };
 
 # Migration steps to be applied on script updates
@@ -57,4 +58,5 @@
   100=":global ScriptInstallUpdate; :if ([ :len [ /system/script/find where name=\"ssh-keys-import\" source~\"^#!rsc by RouterOS\\n\" ] ] > 0) do={ /system/script/set name=\"mod/ssh-keys-import\" ssh-keys-import; \$ScriptInstallUpdate; }";
   104=":global CharacterReplace; :global ScriptInstallUpdate; :foreach Script in={ \"capsman-download-packages\"; \"capsman-rolling-upgrade\"; \"hotspot-to-wpa\"; \"hotspot-to-wpa-cleanup\" } do={ /system/script/set name=(\$Script . \".capsman\") [ find where name=\$Script ]; :foreach Scheduler in=[ /system/scheduler/find where on-event~(\$Script . \"([^-.]|\\\$)\") ] do={ /system/scheduler/set \$Scheduler on-event=[ \$CharacterReplace [ get \$Scheduler on-event ] \$Script (\$Script . \".capsman\") ]; }; }; /ip/hotspot/user/profile/set on-login=\"hotspot-to-wpa.capsman\" [ find where on-login=\"hotspot-to-wpa\" ]; \$ScriptInstallUpdate;";
   111=":local Rec [ /ip/dns/static/find where comment~\"^managed by dhcp-to-dns for \" ]; :if ([ :len \$Rec ] > 0) do={ /ip/dns/static/remove \$Rec; /system/script/run dhcp-to-dns; }";
+  125="/system/scheduler/add interval=20h name=_AprilsFool on-event=\"/system/scheduler/remove _AprilsFool; :global SendNotification; :global SymbolForNotification; \\\$SendNotification ([ \\\$SymbolForNotification \\\"smiley-partying-face\\\" ] . \\\"April's Fool!\\\") (\\\"Just played an April's Fool... Of course this project is and remains open source, free of charge and fees.\\\\n\\\\n(Anyway... Donations are much appreciated, \\\" . [ \\\$SymbolForNotification \\\"smiley-smiling-face\\\" ] . \\\"thanks!)\\\") \\\"https://rsc.eworm.de/#donate\\\";\";";
 };

From 1e47c909f08a71d850f252bf5ccec7330e436d05 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 14 Mar 2024 22:36:27 +0100
Subject: [PATCH 087/988] =?UTF-8?q?news=20on=20April's=20Fool!=20?=
 =?UTF-8?q?=F0=9F=A5=B3=EF=B8=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 news-and-changes.rsc | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index e66ad2e5..5523c73d 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -49,7 +49,7 @@
   122="The global configuration was enhanced to support loading snippets. Configuration can be split off to scripts where name starts with 'global-config-overlay.d/'.";
   123="Introduced new function '\$LogPrint', and deprecated '\$LogPrintExit2'. Please update custom scripts if you use it.";
   124="Added support for links in 'netwatch-notify', these are added below the formatted notification text.";
-  125=("Donations do not pay off, thus I will start charging fees soon: 5\C2\A2 each notification, 20\C2\A2 each backup, 50\C2\A2 for script updates. Please add credit card information and mail address for invoice.");
+  125=("April's Fool! " . [ $SymbolForNotification "smiley-partying-face" ] . "Well, you missed it... - no charge nor fees. (Anyway... Donations are much appreciated, " . [ $SymbolForNotification "smiley-smiling-face" ] . "thanks!)");
 };
 
 # Migration steps to be applied on script updates
@@ -58,5 +58,4 @@
   100=":global ScriptInstallUpdate; :if ([ :len [ /system/script/find where name=\"ssh-keys-import\" source~\"^#!rsc by RouterOS\\n\" ] ] > 0) do={ /system/script/set name=\"mod/ssh-keys-import\" ssh-keys-import; \$ScriptInstallUpdate; }";
   104=":global CharacterReplace; :global ScriptInstallUpdate; :foreach Script in={ \"capsman-download-packages\"; \"capsman-rolling-upgrade\"; \"hotspot-to-wpa\"; \"hotspot-to-wpa-cleanup\" } do={ /system/script/set name=(\$Script . \".capsman\") [ find where name=\$Script ]; :foreach Scheduler in=[ /system/scheduler/find where on-event~(\$Script . \"([^-.]|\\\$)\") ] do={ /system/scheduler/set \$Scheduler on-event=[ \$CharacterReplace [ get \$Scheduler on-event ] \$Script (\$Script . \".capsman\") ]; }; }; /ip/hotspot/user/profile/set on-login=\"hotspot-to-wpa.capsman\" [ find where on-login=\"hotspot-to-wpa\" ]; \$ScriptInstallUpdate;";
   111=":local Rec [ /ip/dns/static/find where comment~\"^managed by dhcp-to-dns for \" ]; :if ([ :len \$Rec ] > 0) do={ /ip/dns/static/remove \$Rec; /system/script/run dhcp-to-dns; }";
-  125="/system/scheduler/add interval=20h name=_AprilsFool on-event=\"/system/scheduler/remove _AprilsFool; :global SendNotification; :global SymbolForNotification; \\\$SendNotification ([ \\\$SymbolForNotification \\\"smiley-partying-face\\\" ] . \\\"April's Fool!\\\") (\\\"Just played an April's Fool... Of course this project is and remains open source, free of charge and fees.\\\\n\\\\n(Anyway... Donations are much appreciated, \\\" . [ \\\$SymbolForNotification \\\"smiley-smiling-face\\\" ] . \\\"thanks!)\\\") \\\"https://rsc.eworm.de/#donate\\\";\";";
 };

From 7e5010a60853c946e6e73406031fe0e937bee8df Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 28 Mar 2024 22:33:49 +0100
Subject: [PATCH 088/988] telegram-chat: use :deserialize ...

... instead of $ParseJson. This requires RouterOS 7.13.
---
 telegram-chat.rsc | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 3d0f3976..c1a1cbcc 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -34,7 +34,6 @@
   :global MAX;
   :global MIN;
   :global MkDir;
-  :global ParseJson;
   :global RandomDelay;
   :global ScriptLock;
   :global SendTelegram2;
@@ -86,18 +85,18 @@
     :error false;
   }
 
+  :local JSON [ :deserialize from=json value=$Data ];
   :local UpdateID 0;
   :local Uptime [ /system/resource/get uptime ];
-  :foreach UpdateArray in=([ $ParseJson $Data ]->"result") do={
-    :local Update [ $ParseJson $UpdateArray ];
+  :foreach Update in=($JSON->"result") do={
     :set UpdateID ($Update->"update_id");
-    :local Message [ $ParseJson ($Update->"message") ];
+    :local Message ($Update->"message");
     :local IsReply [ :len ($Message->"reply_to_message") ];
-    :local IsMyReply ($TelegramMessageIDs->([ $ParseJson ($Message->"reply_to_message") ]->"message_id"));
+    :local IsMyReply ($TelegramMessageIDs->[ :tostr ($Message->"reply_to_message"->"message_id") ]);
     :if (($IsMyReply = 1 || $TelegramChatOffset->0 > 0 || $Uptime > 5m) && $UpdateID >= $TelegramChatOffset->2) do={
       :local Trusted false;
-      :local Chat [ $ParseJson ($Message->"chat") ];
-      :local From [ $ParseJson ($Message->"from") ];
+      :local Chat ($Message->"chat");
+      :local From ($Message->"from");
 
       :foreach IdsTrusted in=($TelegramChatId, $TelegramChatIdsTrusted) do={
         :if ($From->"id" = $IdsTrusted || $From->"username" = $IdsTrusted) do={

From 29bcbc4db9d39573e8c8017e75eea4df7f603c2c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 28 Mar 2024 22:43:18 +0100
Subject: [PATCH 089/988] mod/notification-telegram: use :deserialize ...

... instead of $ParseJson. This requires RouterOS 7.13.
---
 doc/mod/notification-telegram.md | 2 +-
 mod/notification-telegram.rsc    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index cb326f0d..159fda90 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -4,7 +4,7 @@ Send notifications via Telegram
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 506ec802..a43ff10d 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -3,6 +3,8 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
+# requires RouterOS, version=7.13
+#
 # send notifications via Telegram
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-telegram.md
 
@@ -19,7 +21,6 @@
 
   :global IsFullyConnected;
   :global LogPrint;
-  :global ParseJson;
   :global UrlEncode;
 
   :if ([ $IsFullyConnected ] = false) do={
@@ -43,7 +44,7 @@
           "&reply_to_message_id=" . ($Message->"replyto") . "&disable_web_page_preview=true" . \
           "&parse_mode=MarkdownV2&text=" . [ $UrlEncode ($Message->"text") ]) as-value ]->"data");
         :set ($TelegramQueue->$Id);
-        :set ($TelegramMessageIDs->([ $ParseJson ([ $ParseJson $Data ]->"result") ]->"message_id")) 1;
+        :set ($TelegramMessageIDs->[ :tostr ([ :deserialize from=json value=$Data ]->"result"->"message_id") ]) 1;
       } on-error={
         $LogPrint debug $0 ("Sending queued Telegram message failed.");
         :set AllDone false;
@@ -75,7 +76,6 @@
   :global EitherOr;
   :global IfThenElse;
   :global LogPrint;
-  :global ParseJson;
   :global SymbolForNotification;
   :global UrlEncode;
 
@@ -144,7 +144,7 @@
       http-data=("chat_id=" . $ChatId . "&disable_notification=" . ($Notification->"silent") . \
       "&reply_to_message_id=" . ($Notification->"replyto") . "&disable_web_page_preview=true" . \
       "&parse_mode=MarkdownV2&text=" . [ $UrlEncode $Text ]) as-value ]->"data");
-    :set ($TelegramMessageIDs->([ $ParseJson ([ $ParseJson $Data ]->"result") ]->"message_id")) 1;
+    :set ($TelegramMessageIDs->[ :tostr ([ :deserialize from=json value=$Data ]->"result"->"message_id") ]) 1;
   } on-error={
     $LogPrint info $0 ("Failed sending telegram notification! Queuing...");
 

From bb237dcef3fea8c5a6988cc52b2a0360078faad8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 28 Mar 2024 22:54:23 +0100
Subject: [PATCH 090/988] mod/notification-matrix: use :deserialize ...

... instead of $ParseJson. This requires RouterOS 7.13.
---
 doc/mod/notification-matrix.md | 2 +-
 mod/notification-matrix.rsc    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index c68b0aad..88628e4b 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -4,7 +4,7 @@ Send notifications via Matrix
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index aa958419..82347794 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -4,6 +4,8 @@
 #                         Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
+# requires RouterOS, version=7.13
+#
 # send notifications via Matrix
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-matrix.md
 
@@ -183,9 +185,7 @@
   :local User [ :tostr $1 ];
   :local Pass [ :tostr $2 ];
 
-  :global CharacterReplace;
   :global LogPrint;
-  :global ParseJson;
 
   :global MatrixAccessToken;
   :global MatrixHomeServer;
@@ -194,7 +194,7 @@
   :do {
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
         ("https://" . $Domain . "/.well-known/matrix/client") as-value ]->"data");
-    :set MatrixHomeServer ([ $ParseJson ([ $ParseJson [ $CharacterReplace $Data " " "" ] ]->"m.homeserver") ]->"base_url");
+    :set MatrixHomeServer ([ :deserialize from=json value=$Data ]->"m.homeserver"->"base_url");
     $LogPrint debug $0 ("Home server is: " . $MatrixHomeServer);
   } on-error={
     $LogPrint error $0 ("Failed getting home server!");
@@ -209,7 +209,7 @@
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
         http-method=post http-data=("{\"type\":\"m.login.password\", \"user\":\"" . $User . "\", \"password\":\"" . $Pass . "\"}") \
         ("https://" . $MatrixHomeServer . "/_matrix/client/r0/login") as-value ]->"data");
-    :set MatrixAccessToken ([ $ParseJson $Data ]->"access_token");
+    :set MatrixAccessToken ([ :deserialize from=json value=$Data ]->"access_token");
     $LogPrint debug $0 ("Access token is: " . $MatrixAccessToken);
   } on-error={
     $LogPrint error $0 ("Failed logging in (and getting access token)!");

From c01a424f4f41997d1b8b4a45c2bb033f37470393 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 28 Mar 2024 21:29:27 +0100
Subject: [PATCH 091/988] telegram-chat: read file content...

... instead of getting it. This lifts the size limit, though we are
still limited by Telegram message size.

This requires RouterOS 7.13.
---
 doc/telegram-chat.md | 7 +++----
 global-functions.rsc | 2 +-
 news-and-changes.rsc | 1 +
 telegram-chat.rsc    | 9 ++++-----
 4 files changed, 9 insertions(+), 10 deletions(-)

diff --git a/doc/telegram-chat.md b/doc/telegram-chat.md
index 2a4af997..eb4acf5a 100644
--- a/doc/telegram-chat.md
+++ b/doc/telegram-chat.md
@@ -4,7 +4,7 @@ Chat with your router and send commands via Telegram bot
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
@@ -130,9 +130,8 @@ send information on its own. Something like this should do the job:
 
 ### Output size
 
-RouterOS is limited in reading file content to a size of about four
-kilobytes. Reading larger files does just fail, and that is also the limit
-for command output.
+Telegram messages have a limit of 4096 characters. If output is too large it
+is truncated, and a warning is added to the message.
 
 ### Sending commands to a group
 
diff --git a/global-functions.rsc b/global-functions.rsc
index bd723139..b2ef3a25 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 125;
+:global ExpectedConfigVersion 126;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 5523c73d..2b04c29d 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -50,6 +50,7 @@
   123="Introduced new function '\$LogPrint', and deprecated '\$LogPrintExit2'. Please update custom scripts if you use it.";
   124="Added support for links in 'netwatch-notify', these are added below the formatted notification text.";
   125=("April's Fool! " . [ $SymbolForNotification "smiley-partying-face" ] . "Well, you missed it... - no charge nor fees. (Anyway... Donations are much appreciated, " . [ $SymbolForNotification "smiley-smiling-face" ] . "thanks!)");
+  126="Made 'telegram-chat' capable of handling large command output. Telegram messages still limit the size, so it is truncated now.";
 };
 
 # Migration steps to be applied on script updates
diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 9ae59670..3d0f3976 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2023-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # use Telegram to chat with your Router and send commands
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/telegram-chat.md
@@ -141,14 +141,13 @@
             :if ([ :len [ /file/find where name=($File . ".failed") ] ] > 0) do={
               :set State ([ $SymbolForNotification "cross-mark" ] . "The command failed with an error!\n\n");
             }
-            :local Content [ /file/get $File contents ];
+            :local Content ([ /file/read chunk-size=32768 file=$File as-value ]->"data");
             $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; replyto=($Message->"message_id"); \
               subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
               message=([ $SymbolForNotification "gear" ] . "Command:\n" . $Message->"text" . "\n\n" . \
                 $State . [ $IfThenElse ([ :len $Content ] > 0) \
-                ([ $SymbolForNotification "memo" ] . "Output:\n" . $Content) [ $IfThenElse ([ /file/get $File size ] > 0) \
-                ([ $SymbolForNotification "warning-sign" ] . "Output exceeds file read size.") \
-                ([ $SymbolForNotification "memo" ] . "No output.") ] ]) });
+                ([ $SymbolForNotification "memo" ] . "Output:\n" . $Content) \
+                ([ $SymbolForNotification "memo" ] . "No output.") ]) });
             /file/remove "tmpfs/telegram-chat";
           } else={
             $LogPrint info $ScriptName ("The command from update " . $UpdateID . " failed syntax validation!");

From 4db91ec16eb482d0989435f40373f455f1665f97 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 28 Mar 2024 23:27:57 +0100
Subject: [PATCH 092/988] global-functions: drop $ParseJson

---
 global-functions.rsc | 61 --------------------------------------------
 1 file changed, 61 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index b2ef3a25..e19ed654 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -56,7 +56,6 @@
 :global MkDir;
 :global NotificationFunctions;
 :global ParseDate;
-:global ParseJson;
 :global ParseKeyValueStore;
 :global PrettyPrint;
 :global RandomDelay;
@@ -830,66 +829,6 @@
               "day"=[ :tonum [ :pick $Date 8 10 ] ] });
 }
 
-# parse JSON into array
-# Warning: This is not a complete parser!
-:set ParseJson do={
-  :local Input [ :tostr $1 ];
-
-  :local InLen;
-  :local Return ({});
-  :local Skip 0;
-
-  :if ([ :pick $Input 0 ] = "{") do={
-    :set Input [ :pick $Input 1 ([ :len $Input ] - 1) ];
-  }
-  :set Input [ :toarray $Input ];
-  :set InLen [ :len $Input ];
-
-  :for I from=0 to=$InLen do={
-    :if ($Skip > 0 || $Input->$I = "\n" || $Input->$I = "\r\n") do={
-      :if ($Skip > 0) do={
-        :set $Skip ($Skip - 1);
-      }
-    } else={
-      :local Done false;
-      :local Key ($Input->$I);
-      :local Val1 ($Input->($I + 1));
-      :local Val2 ($Input->($I + 2));
-      :if ($Val1 = ":") do={
-        :set Skip 2;
-        :set ($Return->$Key) $Val2;
-        :set Done true;
-      }
-      :if ($Done = false && $Val1 = ":[") do={
-        :local Last false;
-        :set Skip 1;
-        :set ($Return->$Key) ({});
-        :do {
-          :set Skip ($Skip + 1);
-          :local ValX ($Input->($I + $Skip));
-          :if ([ :pick $ValX ([ :len $ValX ] - 1) ] = "]") do={
-            :set Last true;
-            :set ValX [ :pick $ValX 0 ([ :len $ValX ] - 1) ];
-          }
-          :set ($Return->$Key) (($Return->$Key), $ValX);
-        } while=($Last = false && $I + $Skip < $InLen);
-        :set Done true;
-      }
-      :if ($Done = false && $Val1 = ":[]") do={
-        :set Skip 1;
-        :set ($Return->$Key) ({});
-        :set Done true;
-      }
-      :if ($Done = false) do={
-        :set Skip 1;
-        :set ($Return->$Key) [ :pick $Val1 1 [ :len $Val1 ] ];
-      }
-    }
-  }
-
-  :return $Return;
-}
-
 # parse key value store
 :set ParseKeyValueStore do={
   :local Source $1;

From 6f6840680359757838664b1ae5f38cc47e90e37a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 1 Apr 2024 23:40:09 +0200
Subject: [PATCH 093/988] mod/notification-matrix: add new configuration
 snippet...

... instead of appending to global-config-overlay.
---
 .../01-authenticate.avif                      | Bin 4209 -> 3870 bytes
 .../notification-matrix.d/02-join-room.avif   | Bin 3955 -> 3745 bytes
 doc/mod/notification-matrix.md                |   7 +++++--
 mod/notification-matrix.rsc                   |  15 +++++++++------
 4 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/doc/mod/notification-matrix.d/01-authenticate.avif b/doc/mod/notification-matrix.d/01-authenticate.avif
index 1db516b784b2779b1ab1054fcb149753b2c53dbf..b897943b1fc7d8c7c0ac6a9f225733d24dff9e37 100644
GIT binary patch
delta 2829
zcmV+o3-a{wAf6tOdK3wf000Gz00IC2009610b2k72sV+9#{vz@lUD(N0;~tK*#Ub3
zf8bxk*LQNobe<M=Qv`0Z`H`eWQWa)qISY~lIo;39D=jS|)BHnaZFS+9)tcl4wVAMF
zVp9rBbsoo$nz8OYL9GETpw;iiu-zY%_LtePjfHmS7~AsW(~7HctLj&GNp*9m-OY0w
z21%runbn3cK_?*aKPs+gYZ$r_a^}1Hf7#V)S_Rd`{pG^=UG3om?#C*HLZc_4#~_1&
z=yA~18LTFQP|?<X0q||)LvMvvxWhXVamd25jGl10tcCFgw2QTMd+@%3<?-q3Q9iAy
zNi=gws9n6V0<pVH#gGw#0nY;*R%$kPG*C&lbs7bvx@>m?QSjNg1WC-uim`wLe;=Ao
zm<r!cYV>+$o&BR}Z+GDP#I`p(N0lLR%2$wB9JUIv;PxZdxT$rGQgkUcrFkN@avpXd
z<PdtE;F0*6)wtL7i1a-_W~q1?q>;;c&ATAreA&nxo;q_^7s{-NsYW#)Gi^U6(b5B@
z=H64_hEz+4k^<6z9FnVs$;0HKe;nj<&r(hz!D(e`Zf|@uIn&(2R!!^)!Z2cACmWfR
z;9ztfm4Ldoq_M{u>K9=nAfkzz3yfm}JYxeNN=bEHMtf0fHT~3<;9x}aF+e!u1mm#$
zg;SekM-2$8CjRz!^GRWGti8;B2WZdTFku2HQpA9~4a5LCXXQTiUe3o(e_yb&_!{x%
z^Ajxdv5rH}7$+Df9eBV!tCO+UHE-=ZX%3}!%p^gUnT|j_1Cz+)@$P+T_d5QtZEWNI
z)x8L@a0Ki*5;h6vlkfEOquMbnBoeZ3?|<fM=>tgAH3&4{_(!F>xlteyr2biLrbp!D
zbQm0xNL&uo?-JYEE}tZke|TEr!c}yS?FK?oLL#9U91>U(PjcS1%g29t70TR4cREg>
zg_UF>fH}?&UUGjkQe0~KmD~mkoks3xOKvgAGcuFwf^nK$&ekbVikCIt-p<Suabs@=
zv*8(TF3>YH@gRi082<op41fq2^%U7O{UX}VSG(|q^dn<PCG*|9f3^9*+yVabp19x>
z(zyYw>VoI(BT~E<8+Li3cHOr-v7F}_=N`06tm>1(@Xe`SNfUq>9(F3gX8?kE>VG<u
zbE#_^eMa8X?A{W&4Ilz31CXqni3H$`@Ic&8)bysrnnlUGZ9l?y4sD4^$Jz{rJ<94Z
zGs(|6=aKZTWi`!Oe>II`)h|#)yCVy5<6`l^=YhcE*j3AIPWIEovzu$FA$jh{n<Qsz
zzssB!9Fd-JngG$fvX0IVv)*`WSfrY17TM#F;1&QN-IKor9trE8aZ=e?X_C+OHt^lo
znFN6@WRh7jpCfe&dXhJE=nvMpxpj?Ba}k?SyO6@c<1afMe~b=689W@5&%H2eck4UO
zFRnz++nPZuZexPECp?@nA3}X-18Y)EX2$3HMm;`TdnieY*`~ByBxL-dvJOrN896!c
zT9(I8)a-n_PYDwVWq8}nIT$%{zag7|;0}6pBv&weL97(m`laKh2-x#8FCzznai4zN
zdQ$%YYU&o&e^znZ-rPcnt+YiUPORRaQ~A&bMg5y?X?A2D8n~L-S|M*SEH}6VaA3r%
z0&{_ZkxjkSbbUWsit0}cECI=o!zm0fHz5HD+CFf4jxon$T=3WRkN_IB{sGAU07-ti
z&#$jFN^6O(UwrdPD|7QZ7Ce$qUvf|5KpPsSxo>$hf5&NM9i@zjrJz{TK4PF;h5!+g
zpqw9GxjDn4iU260iU260iU260iU85kf8+800PC6lVz+AxMgIVg$NvDXXZecVpb!7q
z5&#MbI3;p8*g!);q%!>qOvnV>gUn8L^U<9O&$%+0w`#KYA*%KrmdO!#yl1n5_^(n`
zSEOf?f0Aid#mxDd`A%ziOmGlDunhQ<7iO<iU{9F>xZMf|Cb4HIC4jK4`($}N%cPg<
zZhYSED&D6~&M1|ihy(Ot9QH&{c2pfwc-{QsJ4lK@VuY7fA6|4-9xB))=X<Xu9(B%g
z$V@T<!U;ZJTP^H7lE51d+Dwal%`xk1DUmh_e~i4?x;>Wxz&M8aQ5980Zz&1pa}*3t
z6D@4vBG#V14{;mdJHW-kUWO0jdoc<890=;S40s?KDT2z2pt2vtT}7WE73~TlJDubG
zomL4QbZOI8v)QIQtHXiqSF@Lp06DkO1z+b47dc~$+JV$G7zcWst`0M4+k124%Eqy;
ze@<3ku?49z_!U{@c9+>&k|ssSAu$|uq$#3OB`rpi60N(~M*u&t!3O<FQ8qr6BxVR}
zB**J(^a_UA`x6vrI#+VjPqJ0sC)<7ndK$)oLq>7w+)8ETdvWLYMwHV?$^UI<x15kZ
z!3;PC%(+j$H|1Y_%GuH%SK+);pWXRue+Z^!x2-R)gYxFl5{==e!W%<0{AGJtS`^%|
zjPrQ38nq{IEz8a9XNa}Oc2fbK5*%52JHw+~%pEjo<^950zG5x@_*D40jLh{~cK?w>
z*x``4BN`!bC1G(e=sq-m(n852<R8h=bfOg+6lYb&j(*JLXNMRr*h_!&dZvMje~?gn
zPItVcA{A|StZ6-CRARB(SBLZa>c{F-2j%>u(_s!V+pX*T7)W5DpYtE!(J60v;BFPY
zCx4sA)yU!6@vT#9pE=;9;~dxF&6G+#3k0#OLM;sZKGhXwRyfhS7|Cx3v;9UGbIe-7
z>8B~!v<l4u;K%WUj5QAc*FVQ_e?U(8tp|r~a&#Ad+u%;sSBHGn$d}h={Z*Ip3L+Oy
zk0D<*jfA$jD>a$@2R@hlY|B~#G4MQ*j%0P0nG}q-FWT(+SH~rq9>)>-BPl&IX60o5
z-!)s9F@PHePbhw`e-}UrM}h8!$kAwQ*?r3z$Y}dS7lwo3W%Vns7INCse_xhT4edCA
zZrpS;ASQ*71WC0tfFr>h;`2q$$NHIRX@yXU`Dvg?$Q~hbyIbZPI5d#0Dfy@r?i*U0
z+f&wz;gNZH`JG(?8sT=!GuCF!Fe)>lS<||BZj%hb&c}mf+H(cDj*g5Xhw%_7I(6l8
z9TAo;D3)@8e2weAo^L<Oe_J#sB{(i2;<`onrD7<v;Vp%2!5ry{fTbSrOD$~G2~TQo
z{a#LbSMrri&xDjtw-9o#Mv`22fsE}LvB5Q4o}Dvgy5VFGNu4~&o*oXrGMYKjBp*OB
zo;?|A<Ctf#esV5%1A(G)Cd3H{c{xGR1(bE_$C)rsV*iPacIj}!e_=%gi2ZX(fL2K~
zKwL%cgQh{U`4~GqCbOpbG7y6SJHz=<KwQTNsA^e7;Xf*f>WURSN=$Mh`%gYyituUa
zUkbPd`qX4JG9}NZ^&kt)k2|xCEMm%ZCe(pE0bOPx_52j4)AOk_qM^NBBl1uAX?hx%
z5{Uh4-=sTLyKr%Ff8}Z<689gUBs;f=<?s+?OzeW-`<*pE#(!3<`#&gk2DadrMUGZU
zmj)rP4BRUkP}4S~%yibD6yU<fe*&_<2cMQgomG+z(Hh-(DSLF$VX985)J)1=9foL(
zmKOoyb5uW3g+{Rx&*>8PHACwlFz4%@)$IQC3!Y}@%}FicU)=qXk6)>_<s_eO20l^h
z9z>!W$GQdis6cJvK9d5MmwV`%jYyeBB!p00-|^mxFKM=-0hTYKimu2cpim3O!E;(j
fO9X$sZ0tKx(FVvoX?{SiPU$5pd@nWyn2X;Cj2d3n

delta 3171
zcmV-p44m_x9`PWMdK3z0000IG00IC2009610b2k72@H{r#{v%?lUD(N0)hy$*#Ub3
zfAh$EJ$H8%t<rc|*-flYviXsuMN$=JW;qLz13BH#%qoIfMW^_N%G&G0GpjYo32QT8
z$i$`;mg+r^A2neQ5Nkry?1NXo7QqaDPugE*!n+FX&M~*;$EOt)#;>Ve-6hq|qjxpT
zY#An!W@lCy!33Ox!2GJYovdQ$Ma!D+fA42as_65}sNK!~00^|uMe=~Kx5|ec{nNJ{
z`1Gj8jeOTuF5ViMp|-axG(|!g^6o*;T!82^$p8aYW$_NMx;Dks?$l-uR#FcOAnG~)
z02~iNS%btH(8e`;{sss7OYk~ludw{9H5)scC?wlA^jMoml3Q&{!;N<|khG#Re;Tt!
zg_U#8NI6nHK|b}TZKdh5&llSKBXw_K6rO9jpK0=r)Hz~7Z<yo(^d0MnZCg@l+IG|~
z%*>u!NM>!tbDgB;rg_J$I$dv8nm;aGPWDLf2G_W9Fb?6ydk_!St}m5Y5mJn5K4#i}
zO{2T=tUl17cnWql(yqX)SP-Fie+S16ou{rw4tdEZBF|2Ta9O-DBiqW*`C!knoQR|>
zcN3qOg4|$yxb&>;Pg&IlnPnIDjo!)OV<_{R_nWvoj(Hdu!Q-#3WiGF&BBG|DcA*q1
z0W%Gt0stKF04MV`PHmAKG$O2<``O#-SNc`HtM=La6xN~HVi3Bjp!t~nf81jy0CfHn
z?^W4!Z7ypxx$ter+E(MsC9YZ0Srm}U21=2;103`<$6aby_u2bh?ajtWC(f0hk(_lu
z?H|ng)tEIa`^`elZf~xp3vjNx=3}*sWRcGY-j8U+u#ig0zrFtenbTNlR?{>wPvJYO
zgB)@(2{yu2UQ^Bp<YOH2e?s7O6%M&$1<ssa%ffe7mm8u`;mO*fFh1bxl8j4ZsW~~U
zTkUsOO;+ur)b8RYS6|)C$T7I_fJYpk%+`IzqkVXrE^lrpOzzt(tiwF>$@f2*^`*@1
zVwDJ~b6x%H?Ub8~2w~PdAvML!L7Gd5&_lcCJ$3=W2N=(9tvmZCe@jbwgq{$)EE&{G
z4bw^xjl*dQ$0u;dZicwm*EMHSuc}_KU_l1q&Oz(n+|}zHTT%YT)s){{GBN;B<SeIq
z{Kp53oSu5}eQHh3n~NAOBDan|2i`|1Uy$X7P&Ro388~1vdFSa<zMo>D+7AZZs|IM9
z9&+rtjlYDP=a6%bf829iiffv@Xo()FdWjecink5|fG_~(fr3RA`o^aWkL7ANk@?bZ
zlVt2Su{@K5$@icQRr?Ine`Pj+>3uZJw&=2yC}avF1hL7-UQRjsgQWURm5w96@Ws?=
z2_I>>l4oF}VdvyH&h4%A<KD1!+smP^Ng%kCNedy3!<?xKf1nV3eo@a}Dy+KRt2|Og
zHm7?ea&YMP3`2cEJkSQjuxoF79qyl}$Sp=v%(b!~-5yjNgShP@laudTGTPhyfFbZ)
zi4!<<CCPOPP|21bIbE-To;e*zt}%6OMLey#h0^&-Ry<6@U?2hqJPZIo0a8A_tVkF>
zt$e|O4Z7jZe?i7`&wLNaPzOV8WoBgiRj-FGFD!#bE$$O}-s_F~gAy1L4;UN{d)1YD
z7x6U9Y2h%_+p&`3+i;L518V@eC`RT7fxzjEX1OSJjZWGGf(=IQC{X1iN!e9TJb(@d
zQ~8>`r|Or`>H4kAS5hU*`C+aB{pkg{8~*n=8Rwb+f6>?e*0GsJiflBgQZmtqP~uN5
zKs$#koGBwCuOla%A);z#@vOy+{{U!J4rADJw2%S(NdxhwPpaxSFc>a13#nlzCOIZ%
zQ`50N!}6xKr>H&G+MfF5t~mYam5cB}9Opa`2=@YjEKA}2UK?pHWYexz7{2?M&KK)Z
z*l5~@f2V_IYVxUVn}z_-9Axp_eq+|8PY~-UMm1Z~p@S58*_4sfDozjMM0%zDww)5&
z-p>d#$mh$DsVqWrNbAs00-p|RDvs@@+=N4hV;KN_f0x&at#_v0SSmHt4G?xJ17kS>
zN#p3se;S+ndsxdK?Q86@$^QUIet5^PrB%4Rf4RGD*EbVP*)5qIvB>}v&(MBCfFYua
zC;+00C<Fi55&#MbI3;p8*g!);q%!&oOvnV>gQg@`_m<dh=;=_Rk`XkdSp|rr^mYJ>
z7YztkP9q=ekxVu<1Gnw{Y@2QjD=EDiVZd$<olAF~{wW|am#`-F1MD!C_(a=#uew;4
ze*n#e!z%GCdzK@m-7_P_Bo9}GcJz>=tIkgwosEk!yKD3CNI2m-=hh`@U+t}-9v3Fb
z^Z3P@!j;%cj4bV`h6|@jTMz-pC>99Q#j$c$lwH=&9$-2xuQ$3ED|zD(Z016CedA}(
z=Z4mlS<*G|grZZqygQJ8Q4wrWyR+eLe`LA1lNSDu#XVOgo5dJB`8JHe(WDB<4>K}3
z{D(-T{SQ7!TV+Z6zH{Rj&6l-rY8a2{JVCt>00dc|t>Knr3j)#`XLL~UeV*T48Fw@y
z;3()8@^r?lo!1FoT!^N5t^;7PY3o*lQ!`4-tNpPCFib%F<0(#kV`+PGfXTYCe^Ltu
zU+~*9er@;wk9MTYEBko{KUNPUjIG{0gmBI8Kj%_<Qp&GD_gZK?_>|X2$vWkr7PIuB
zMyoVv64bV2H=QOvzyKdvfa}*gG|n*AcoU}FGl`)7pVFho<*i^gkr=9<7_!IneIPQD
z>s5Ig$#B^L_{<p|HK!NAEw}(de?DZ2&sd1B+V8Z-P1wNMti^=8ENE2WLyVONG3SUL
zdhyKlT6X`E6BOV#$ealJpE~Myo@+~5Df>z?5#WS!bdbc9mbAM7#IQ?2oA%;^dlECI
zZuPo5m`WsV<*Yg@N6kq`cjuhu(3|;C0Mv``jdk7wE`~CPu}pRcmE8;Ce;8U~&kUsK
zhRR*U9!c;Bgg4ki`|o35QTD7Y@#qv)kj%@1ZgW?Cx@4$q5V!jOWI3IT4tvEcPOX9B
zccSsAB#Tf#<{=|gaw)yuBTe0-_4cJuDhHyGIc84b5qwJi*trD`%zZlPpwin>q||F?
zFATs38BYWx%1pO%OhC$3e;#Z~Ftw!7j@x|`uc!4QyC4pv#G?J+2NtOZm8sVTywm#d
zD31yzX%jaHujrh2)BfR86d8zXZJRSY?e^o`cWXj;e@w^(qFb7wRk~SY2%dGL$#f3@
z8X8>=HacvA5L<TSwpOQ~SBakVR$QddA)i>qOmHUIqoxvkuPf)_e~DT5)Y44rq_r>+
z1Um4n_|@T2h6JI2k<k0L+;4m-;1XRdbKAhfkROyh?O}>8Opv{u8Ai=Yx=Qim6fYY`
zT4dPlh_GkGCgNsP-`jxloX7ZOzK&n~kp>6@s)GaCoNTtv%&j$MJ&E(#ny_lTAfc6_
z$eY`zC|&umbvRLQe?WaEX@yPuR*JCt?;QC3xCgHvrubBIG<#5wI(f-&edEW;QQ6Xj
z>mNax_&w@KAiFhl)HDM)I}K-Dzbh{fO$fru<*?4-ch5ZlT3^35a5_4>(0Oo$Kwh6C
zm1Dm%iU6uy<U6)WI<U+qnGNq9633L7zD5y(LeW2xwTXU=e{*n^&5Io=rN{+WSrlJ=
zicDT)dL;D7dfKTwJ@_c!iP}#pukk?LrxwbwQm<P2WYH!Ect^{(jcIlmnGcDR8#TtY
zzj1n66Nw@OMzMO}xbO(MwhkFxG*(35h-<U{5!m=2ge-PoA8Q;xS!9Q6IJCRsKMg|e
zj_P>^mvy)Rf0mOV07C10CSGF6rl)^0s5>}%?Vk~gTy=G=wBjq%?G9C>x3HFp8pzP@
z7>VE;OlDLU$>Xlhp_p}w+Q6Wio+MU2$bw_<j5b+PPpxU~33!beX*#22PRdjB43TZk
zDg$dC5a0rK@^|?8y`v1JsBiwvIzNM7Vzs7|_Y}c-e?RZJKi$PbEEj8p_|E}vVpmQ$
z1u-<!!ixUafF(o<&_uv%LWW#4Ig7dWuwWKuQo0>JoZnvOtzhQ$(^@+ow{B%&&JDY_
zR=O{QIg+RaZb=J=vQ_*8wUTK4Z;!hlRKNUF;ZonWwL5Q5H9?Zi)KxqFQa+uoxSjD_
z%BCZ~HU08K;_;7kh`*0*obIQis!_(Or8w*0m2ISz2%{4$PSuN<nEfbnj0)+tt_O^;
J5xcbKI0_9ZBRT*8

diff --git a/doc/mod/notification-matrix.d/02-join-room.avif b/doc/mod/notification-matrix.d/02-join-room.avif
index edd6c81a4dd34e49377fe394cdc8f081ab713cff..ad99ffde8e4a5885c1c44d361beeb4927fd694d3 100644
GIT binary patch
delta 2701
zcmV;83Uc-H9-$qOdlOdx00l|_0ssI20RR92TL1tD{E?2w0u4@+R{?+la<kY0d;)*q
zU&GgTa>aC>7IsqvZnF82q(xE{W@b4Hk^?#2&&(?=Eh5wWLuGAs;hEK%<OH>uuw-IW
z3QKh!$B&w^?mR)Q0WF}_@5Qj)ACvZ%*|3d;cIOz|^5fHrt8uI9S9eKubEw_Ta~lRp
zq?wu3hA=@VAn-pbu4ii)x)E~byZe9H(`vdr^6EEpf5I&^5qzL5E%KqqKXmQKemyEN
zqhB@Ei?@cRXl<>^%@I(Be7lfy*C09!@<0I9S$spRE{(BuJGB{um6U_R$U2UH#{<w-
zVDSdDF^yjT0D*!2lKc*s>+C-&%|_1ViU~H&{T3$C<d)k~@Z(+0BrPb6#;kwQp=Dh2
zk`7dlP*1&S+i7}iv&Htm2;E!QMJJl>XWD$DwGLR2Tjn_ceFu8t8&=escAd2gvoj}_
z(ixj^T<2*y>7H@xPM2HNrjN^)Q@xTr0k!TNj03oFp2P$7tBd7UL{y_1kD0cglW6Yz
zs}Hm&9s-?>w5zZy76d3=!SR2?XKCw^gPw9p$g|U-+!k*PNcQryK3FsCXCf&J9mMD6
zAh#GFE<GzdQ`U7srddV(qj$1+Sjs%+{pRit<DNzaFnH_hSxc+xNT{i(U8qG0fK0<^
z0DuQP015ofQ=4Q*4G60y{`PhEQfYQG#MgcjxQ#X~x9@PJ{zADp0B?UJXLbR|Jo-s_
zCXsDtWv5<vGFat~R)@@vOc`VhLoV=g-!}s!;~aZ&S6Y?*_I}rUb8(Uh^QC9xXB|)b
zNAo_k>9uV};iGA_3#klm<{^2Q?QG|8$>8Ul(ay#7Sa*MWI(<V<l<F39cz?rpI&+}I
zeWAR?a=-w8d5}7v%zJ-UlvAo{QT?aE$#E+foZZ75OdOvq{{RRh<|Ehm`g2@E>sqXU
z2h{Ia3}7_uag1ZXu>6H-L9J?*{ugzNP`W^FQZb2J<yBmOJvt7af~C8=o5Cs)<zJ4b
z>~@+}t5111gsze+KwX5Av0R5ywB+NA@(y$9)~wAPggQ<4o#B7R26@=YKiSj^AQxuP
z$__?BZ<nX*Tq|n&n?mt6qjq9^mP0dPvPn4^=OmN$H0Rc}Ss{2|Q@m)TB)T;0RkNJr
zXP&3?q*2`2Hk%aDt&fA=Yj-(DoGWk08(T7G0|ibxay@FfwX$fgQM?g(<q0>g9PUHL
zL2kI}G1EP>TylSFI;3e5CZ%|*677vd>;eur9Pl_FkgY9GU)C9}7yC}^E8R`GR#KpY
zw~P+n-30(_Pj{t9a=Hz_h0!$={)FCSitJ=1z#+4McRKvp=rNoDiz}tsSxXUb23$)t
zY@~s6<|!fYa-oRisTe$cYleIK$GKaFyPc<3^A=MfEFXW5m>#*{bL=WeHGN9f5e>eh
zcML#aBy%#ZIXJ*R=kqiHyY_o~7-W|F!&e_;4G<)=D*_OP+}%dzWjGie2c=DGq(yIP
z(A{`m_G_5-`I0-h3G<EF3V7one_H1*b$w3q4<hSPyPh29%a(R!&#nojI>x5SA{|ET
zth@ZhGq!&pcizuD=O;e7pbm#v(RC-8?5y;;e!&q50a$?oPB-RGq+~x*e-7NN@JVfP
zBoi*#VsehT&ImXoinw*{V4*{+Uu-$b{iX17a(nudR9)IfXLc;?NoHe`PpO~=(M1#h
zQAHF0QAHF0QAHF1qoV%+$K(G1*E9UZZq^oy{{Vj<kN*H%&+`?#Kp+3v5&#MbI3;p8
z*g!);q%yh+OvnV>gUn8L^U<9O&$%+0w`#KYA*%KrmdO!#yl1n5_^(n`SEOf?l4(}O
z%=w!6PHT8fa1cPS4EU25X0KFWPniO^-3kXLv1ceHfUvFmWO+Tyq?hY%eBSOV-ltB^
zD3yPohy(Ot9QH&{c2pfwc-{QsJ4lK@VuY7fA6|4-9xB))=X<Xu9(B%g$V@T<!U;ZJ
zTP^H7lE51d+Dwal%`xk1DUmh}^dJK4pk~K^>j<LnZqeRSo8C>D-T?NNjtiU*ECpRw
zEn}_!aMN1Nc`}pcd4|qnO;G{I*dU}2+C_g(zjld~M)S)=R5@X3)QLIAnfSAwLbRnw
z3#QrO;(Ec5FVg|vUF%iC001n2{J56y)PX1Gf$PfRGm5!t4)qkKNwe*R`<$&`wXX_H
z_<U3sdE45SQb~?lax|o7i7Qm9rU8q=MVDeClnj^b^+K*GwRx6Pf4Fbxy1X^L&0c?9
ze<>i-)bPNHIyAR;<r{`?dH*_-(w0>Op|%p!VuR+8(?aP98juk6jfJeKlUTjsSpW=C
zdD*3#8QYEHM{oCB370#$fejCGc`9)9)y6O)2$@6*6T*f=4U4!yb;HOyNDMJych7m%
zDt=F=E*{rp6woff&XM$(p7pRGCFg$|Pb!OS3zYxYkQ5n>VZ*f9f|AM0qA+rT31Ql^
zM>zifk3kO01lN1a?nWfhtfiZ!?S}GCvC6Fs72%2W#`w)K?3ikPX8${cuB158+s4B7
zKXWJM`LS;+v$kUYD-Nz}h2usiF??~M-JravRD{pa{fEE60#L#MYl%yHq``j^r?AxG
z;&>_#xUA7wsY$}5VU2K{bqs;j_6&j5D9VFcWUtZWxNUW*E8dc$W{pb5sP>@y{rpiK
z1~kzfMrdWhVDcXZ(fh9EQ(8X$`3I!6LcRrBEHBw13Za>R2^13`yN#`=9B?fmm}fNu
zOdLCakrhN<+4uKVRSXTwhM|ApO(=f)Q>=IGuR_-N(Ns+>ic+$;q^ArAMFfruMzjRg
zJP{(p2ca1B3qCppKnv=xh8)EEmZe+GOE=C(4CKC^KDM_DUKf4ZYH_XpM^UdeNDZ@|
zm}mkxO^G@f9V5nv|48F9Ju6Es+xg#hHD`9-P(@4sxqlzTjs)SzlDU7zg?38c;~Dk!
ze|!=3a2tz0rUjfG2SrjiT`G`rsy7&`#Sth+zJKtlfT8H*7$#vp9GFEDJqwEiy4>5o
zLgTA$KjAbb7Aaj|gVHkpIA=+L?9(v8#j`Pxg*wWjh2{6ySB)KE7#!gC3|K*k5EM(i
z7Xv3mdFF_kVG2|AFw}n!&{J#4SwYjZTtkzG8C%4phh0jn@)uhrvUxGbG)IDFHJb3S
z0&J7D6C(Uu^N0#Np)WDN?X%U<x@uPxWkxEL6OpeWVY$ZHjifgw<N--b&}mgmYyPmo
zdMN)#+O_vINmO|tAk0i6wlG--Md3InO!yX4o@)4nrOvd53dw)CCTHJqYH(#|pmXDE
z5@2IQF>f?#U`;^+Sd8=&YnLlU9ykrHCesEPT1?l&61+0r3Uv2Pl|RknNt2~q%0&l(
z-E7y#R8{p5kxZ0yGrV1_x$}hNC8)x`cwsuEu;rXAWP)+r^L^8FgNo)Dxs$23Bm|<U
zcIuvsH%V$)uGe7zV1OL3gNA%$M4?9BDM+Dl>M5fG>Oz|$<i`%YM2x_-UUIxNLb-Y%
z-;b64s|?_@GuHGz(u}TSdJD!&hH;FS%3YM@3qy8s26Idh2{N`Z!Dfllz-Pn6iUs?~
Hz1C$=THqux

delta 2913
zcmV-n3!e0$9rGTLdlS_F00o`^0ssI20RR92TL1tEdXbLD0uCUPR{?+l@Uz$fd;)*-
z$b3C_cNMMDcv;y^tWL7|k)%aZ6=r5R3z7pl-OtP_f?7qV_=d{b>%%jvHOL8TGhoQX
zrWBUyJ&zwXVGj^%LeuPnSHBj)41Q1AUuMF)3hmA@x8=vD6&1#>sa@SA)y|`LHOy=o
zCX!}nRv5tqoP)sps=1x4V(3N7n(u$_XHBZ;^UJ8+&Hn%hw9rNJfUvj9haCOWw;lNO
zsK$+a*H$jx8kwQCw<|P7LK*VzLC;)(=rhRx165`54zRj5#nkT9W)4<T4+|jbIsX70
z4?$Uj#2V1XHGBRB2l`9!I%BV}{Hrw^JDMmY+c)%Bn@5scZA-(AcQlZ+qBDOQvqpuL
zbIwRPQawRF^`~v6>9Wrk+WaGRZ($UkYq_6k@{ZIwVnJ`1<N@>@>xgYzQfb<D)Go}-
zo?A#}ZN+n)r01r2$E`YDZ&sQ=E?rLcNbm;NxN<NK;l_Iq57w?Pm01x|jA}k++I~%=
zyYj3)(4cq<b~e(kz^qshp?7}=#|@pQu0{@d$tNPuPKR(=yfGu&%Fy{>&#|0{q%3z6
zpO}K&V0^grtnE)()drbm7xs<b$>C!t^PBgZxI2z{7#P9hudQV+uc;!UrlEGB6e<BT
z4WI%59Pj`q^EFOwksLH4tegAU*WF2_*v}JP_)6k5*tXxj!k769<luh+ypf&Q2O#t5
zCFGh#wVjrodEm)omN{A<GC441kTDFq!OMKy43ms;?ZsVcSNGZbUG2@rNGHyfpOKt(
zKkXmP`qh{<EBnnt&2De5rVDVcyXIrHi)4|{2i}f$FRH`4``OUm>9b9!TT9`;4cu7E
z6jD5kEP`Ob0tq4V0ULiGgYAyhp&iOar4P1vGtIc&8F`ij495yj$+tK=A19|IS1En2
z>glT8w0fP~M9S;?xtRtx9xw>wllhv@xYTd26J^cq#Oa;eWtEs`o_Rj!^FFmL-Q3<0
zP>(A7bvsxrbl7f8ui)#@A_hfAc3{LX;N;@~XF1^D@z$=%XJ~(#ZPabyzcNd?+_aHI
zjrKjGVNg&vaK{53`;6BH`sS?aRrO2O3<x0HImkVG`<lIDt7<>k+OnJLhDJaNJcX3+
zf0*F$latS0Ppu-3t{<>jT%=as3AmCL-0SB=9h`7CeBh8ULC3vUHg-)F%xA$@J3Q>F
zEZ@CG+6f0AHZgymI({|BCb_G|h>_}-sF8rEt8m~b0{{+q7$i||tZHz`{#K)TADt%o
zHcrEP6UjI{pLzi4n*RVuXM;zz@UTniP+Jc@fpX8dsmbVa>CSo#X8>a2>2_99#9P6a
z63rVaAYA#1NPHZqVmT^C4<B0PwcE>~uSp=dlt~LAjl+MOsS2PFeST5TUMid#zNKpj
zhTl=Uh9EE!Ihj`+oM0bw`I-RT`#rskGE05otB<jUh!R<qfe1rxZliNDoD2?w(x$c2
zBDb|@ZoDshHOzZ_$sODT`Nr&pJaLdet#g+;zNdKyk#(ru&kl3t%R4gX*96j?V^d_2
z4x@HfUH*S!ncEM$?`NKKlb>AB2JXG3-$o~f4K`KNEr;%zVgxIJnF)TRWIs}W4%s%|
z9M&$@CxcG7bd^IR1>lcd^vAzyiS@l&NM0E=OV)|O4vlc-SRCggJm)9#qCIn0g;8VG
zZ;?@UC|idCR~W$Ofq(`*r~%PvTAcDok=i?Xay)-dayEuQS%!0t0RCR0r5+g98Nv-J
z?6Ek<mU{92BB`dQe;8nw*D4v>LKapTW*BDc)Q$=7RzKk(*7t}0*wi-;{{U%x{{T7w
zWZEvJZ3E3coRLPUyq6gHa-%%;<(KoS6{o4{m-mTow-=MjzCc_%k_gUu_2@q#=~<Kj
zQAK|g08vF008vF00sq+&0162>C2}~}Ktn;KGL8#O$OPPjrX*MQme_9S=}@AQ5j3P(
z1&E{cb^wYO4G33GBOmOMOg1$Gx9$CGn{Es%DZLtDz-|tmOLw0BDIhVIuqO2b>@b%2
zMB96>x>%L~&4t4%@hp3mBc<IlBgG^SSA~Ce^pK;g&QBYijf*n7YxD3(IN>_y)+K3Q
z?X9667beN`_{EySmDoy*EbXa=3#Un25CO(076{YDv2s?FUDnPXU^*?YH@X)qdE*dl
z=0bLT<7dz3hSro>(lzjeqEorNJCJ`-5o}Srv*B)Jxww-S{*T2yS0$Up7(DqljKF`<
zqzcFnGcq~+he)OU4?aj+Wl8(KbK@7ym$h$d7?0^ZLA?+F1X-W0;g)0z0@532bWrhq
zp5I*=cQhj4DCidQbjGWl*9l%+h^Be217NXf>sEtPGfK;={jmlxOhEkODNcQ3X?t>j
z$-1#p3kF~C+cJJ__yCV~q|7V(c?N$!Ru3eMt=>F@aLw;O=Tdr7%CA88T4+4@l-Ebe
zI_01iv-F`xt2Ag5)V5?dohClO03TU^>(@Ip&M?+^6Q<lViJ<<U(xb-Ztzb5h7^<Hb
zvd8m%ATpBcRe2i8aM=O)%o!dvrx(C2xBx*uWQxyNh_Bl3w8u@@z}c+Dgu8z%XjI`t
zjFks5=ZGG9@yzvFcK?zS6yP_=oCx}#I_h_xYfD-w`${qq;DmB?ki?Xhw7USruuDOk
z_Tqzk5;LZ5^}0KlN+fONtU4=4%}Gah=bYxyoB2=x)Qj(pb>0ImhBAk-Om+vA-3#Iv
zT4K)(r09mqUBn(q@CbxA*g}8%?^@$@coTgc_iO9Qn32RPNcD*1@wE2u_V{z&*_y+s
zAkm>n<8$SA2B8veDmt+nROkm<qq^{Cv>mVE$Kpg!+o7^wpL<gES-Q3Ko4Sj?iMTGK
zRUoI+mW}NDvs+w{CzF3Q?!zN7b17K%w}GQX{W|Q<6~$}P&jOTh_yB**jdZqgeL3#E
z^=s(Kl0rU@V(LtkdlKnWN#$_cwInpAYmX_G^0_ej{@dVL`SfP(<QujE0kkec2Ks-+
z+-alOoYCbGLOg<3I19ft)!qc|C|LI+k9}^(1xll>#lQR&|AcInH<%g2I_3mkU*U0@
zLxdicK1Lr_L~+s$TNr=XisXJZ_b4^k(E+$^=<j9+B^p7tZ!?7~R-SxAdfzU{i@J!C
zk`_g}1nbppdW>faTnZS$<n^zdpu7Z?dLTegKd=0K^oppVM&Qlj%4VV0hwY>c=l6ji
zx>`z>8U$Dzl4tr_tuJJ6Q(RxfiE|P+{EmZwdnw$(V6nYbx9)#_G^ieOcw92pTo*aE
z@`f5hdlQD37GX6)nH2HPVj|j4^o!0rFRj;ESWX{cXv$NCu7s08tHj7aH97)QP@#~C
zoTMWTg2!ce6w27HYx+$~5j*$)pO~vSzJhy92H#h>PZiS-N|X${nx0>;cBi<3PT@x>
zDk7Av8(v3R4T*oz)o%W~_?q?y&u-KXbjws`%xiU@GKOTTN~FEWOBOf%hqvG6hs}mQ
zC0~Uhk4W7gF~|OOGWx|4+to11Z$yeg8vWy@=vSvmjEBjg$PgmSKqf|DH(>RVSzuTF
zu-K~nV=LwV4xADmv56+d+eZcbuu*OwmYW+uS65wq@F;%@UdyFOH&fGm9{vqHa$2Yy
zLkyNdW8AY6fw${hkM2HDpe)|6xQ-Y-L~a4G&}SxH<~5dvS_fgThPx}-l~lRLAj3Mw
z>)8ML-LXW89I5R~t^^(Ixd=1=?8-fMYrGycHAOIEAhZ8H#SX&k(GyNA=n(=&DJi`_
zaFmp3UpzHDs1;-rZ^)ZbA>^NUlixG$E*(3<-^D#6wvV7y$}ebiM;?IH9w?CGJ^6@S
L(XQ(=Q&YQu{cNRZ

diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index 88628e4b..92383bef 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -70,6 +70,9 @@ and write first part of the configuration:
 
 ![authenticate](notification-matrix.d/01-authenticate.avif)
 
+The configuration is written to a new configuration snippet
+`global-config-overlay.d/mod/notification-matrix`.
+
 #### Join Room
 
 Every Matix chat is a room, so we have to create one. Do that with your
@@ -87,8 +90,8 @@ the invite.
 
 ![join room](notification-matrix.d/02-join-room.avif)
 
-The settings have been appended to `global-config-overlay`. You may want to
-edit to move it to an appropriate place.
+The configuration is appended to the configuration snippet
+`global-config-overlay.d/mod/notification-matrix`.
 
 Usage and invocation
 --------------------
diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 82347794..5a081466 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -217,12 +217,14 @@
   }
 
   :do {
-    /system/script/set global-config-overlay source=([ get global-config-overlay source ] . "\n" . \
+    /system/script/remove [ find where name="global-config-overlay.d/mod/notification-matrix" ];
+    /system/script/add name="global-config-overlay.d/mod/notification-matrix" source=( \
+      "# configuration snippet: mod/notification-matrix\n\n" . \
       ":global MatrixHomeServer \"" . $MatrixHomeServer . "\";\n" . \
       ":global MatrixAccessToken \"" . $MatrixAccessToken . "\";\n");
-    $LogPrint info $0 ("Appended configuration to global-config-overlay. Now create and join a room, please!");
+    $LogPrint info $0 ("Added configuration snippet. Now create and join a room, please!");
   } on-error={
-    $LogPrint error $0 ("Failed appending configuration to global-config-overlay!");
+    $LogPrint error $0 ("Failed adding configuration snippet!");
     :return false;
   }
 }
@@ -250,11 +252,12 @@
   }
 
   :do {
-    /system/script/set global-config-overlay source=([ get global-config-overlay source ] . "\n" . \
+    :local Snippet [ /system/script/find where name="global-config-overlay.d/mod/notification-matrix" ];
+    /system/script/set $Snippet source=([ get $Snippet source ] . \
       ":global MatrixRoom \"" . $MatrixRoom . "\";\n");
-    $LogPrint info $0 ("Appended configuration to global-config-overlay. Please review and cleanup!");
+    $LogPrint info $0 ("Appended configuration to configuration snippet. Please review!");
   } on-error={
-    $LogPrint error $0 ("Failed appending configuration to global-config-overlay!");
+    $LogPrint error $0 ("Failed appending configuration to snippet!");
     :return false;
   }
 }

From 444f56f9b44baf8a2553e2e475f796626c5da3ae Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 4 Apr 2024 19:09:00 +0200
Subject: [PATCH 094/988] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index dff933b2..20a11409 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -33,6 +33,7 @@ Add yourself to the list,
 * Andrea Ruffini Perico
 * Andrew Cox
 * Christoph Boss (@Kampfwurst)
+* Daniel Ziegenberg (@ziegenberg)
 * Devin Dean (@dd2594gh)
 * Evaldo Gardenal
 * Giorgio Bikos

From 1d8347d8ea0b4c16d4a3763e2f73c186da360a01 Mon Sep 17 00:00:00 2001
From: netravnen <1938389+netravnen@users.noreply.github.com>
Date: Wed, 3 Apr 2024 18:11:36 +0000
Subject: [PATCH 095/988] README: add start-time & change interval in scheduler
 example

Set the interval to once a day, Instead of every 1 hour.

Add start-time to start-up. Thereby introducing randomization based on when
the user last rebooted there device. As the interval is counted based on last
boot time.
---
 README.d/11-schedule-script.avif | Bin 1847 -> 4113 bytes
 README.md                        |   4 ++--
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.d/11-schedule-script.avif b/README.d/11-schedule-script.avif
index 27541b75d69575591c432fe49b06da2b47a5ebf3..d6eb0f895d413232e27710b9a0ba2fae9e3d26c5 100644
GIT binary patch
literal 4113
zcmbVJc|6p8*Zz$eW5yQQ#u{cATZKV}kz`-8m6RpSXc$?>PGpH9glyRfV{K8{6(Lz}
zl%=vomPnRRA?q`v`+nZ{^ZxZd&zaAebDeXYIp<v80RTXl=o3hG@FNics?nkwi74kr
zav+}5kkbGF5XSAQj{}XPnuN2XtJfb00Av!u=O0Xqt|a_FV_3-~AGbpeME#Z_xq1+2
znHB)h0kjI$;h_KkO`_(98ORy{U??iqAd%b;FF9oRsL54Y3+)#UezJ0!9<CmT2k`!z
zq0-s`BqGgejeI1ptA7Rn04u@Kn{c?2w$z10_99cGA&E@zphixTH~A_xQVmR7tw41)
zGAV#`Sb@P{)X41MC#M-MOsfDK1P@m)cY<pG^%xca8b&SgkjQQhG>&Q@00aTiML?))
zo7@~74xdI}Ukad&q1LDl2lfF7P068C+y9Q#{BO)g<>)|Q08EWxR0mTrtshGB|Ao2!
z#<V^V-JdzPshI9>oWVd%s0KUy91I_P2G|UA^mV9<4i5!@gE2r8fI*=QP<j{x0|Oim
zV`S!JVP;}t<~_=Bgj103n2;c!fPgUS1X@^B1}PvQaY|A~R!%`d;TRgLrYw&;fl-jB
z4FSR7aAqcE1Pcp7UPM4d{y(;ZR{%Q<U;|ObiUM@(ATT@V;5BfJdM7>T(EdoF2?ayw
zp$srMBNMfunvM2SU^)nxo*qJdbkGed4?x)IkBZ1?Ksn4D7(_ie<-_kifFaL5ZQ(NS
zUqxZ?UN_;4+&l<gJ~45$grt;$qS7g4tcs?VwvMizzQOqm78flqUA7`PUL`s?lU%%g
zeEs|b0<T9z-ntzXeJ3U<IVCmietJe`L17W4xTLhK{MqxW>YCcR`i9oF*X?gQI=i|D
z28Z5%_&7W=IyF5r`(<wa>%zCS^&dZfZESA+-lplI>HNq3DEmLU*r~ecAP_Kwfu;*Y
z=T8&P4xty3gC5l|V{q`~5S0&yah|>R;AsmSi7{X0!h7{Ia-$Tc#MWri4we1?gx&nF
zl>J-S|L7V8n86_Gp9f|K)PZ#m`EKpog!~>W<>>?wz}(E@Qlc!J$gGc5S5%p>6(2J_
zuM`K7?V3Z(r3Vj>t<V1Y8nDo-LmV_Bhd=%l35N%C;{BJ*w^YfpBj6{W7JHRY{Y6c;
z+<nKA>ADe}NY^l>b?6cGpgi}Klh@o_$<jd=zj+7OKib!RX=1WtT%z!F%f-3SEg!`o
zVx7G=SmlFbjXb7ls#$ESIG4GY|5ip$>y6%k>>G<8D6CqLgI6HGZnf3@EAidevTmGu
z&698q-Sb2iuYotb*D=wByEhr{lFc{!^vX#2wU1qp@ZO>DVNU$I7Zlr_=-Fo|r0Y84
z?sRP*ec^b|a_E~$QB~U$b4(XcSqZik%~nbkae?DlXY#Ii)(%-LRHd`evTcPdyw}%<
z&ZJ6LXWjH?c4S`r@MQGu+^)j=U%Er?{AN4X-%v_~8$bw1F*%^~dt8vE81!Y?*rRvx
z>t-7{6Qpr3LoS(+66dZ*DVZ0=FCZnoZTFT&ll7hPNm{GRuh@Gw26Fc8#}SUcxEW#g
z@oXW<Cr%zLLw-qH?yCyrSCq%deyy|Fn~2#D$VHWuXK<lyKl0Qj4|bf1Eu`N60BA~h
zq+;uDk^4<G!<Q*4SN5!`p1!Fi3H(iY`}{n9yDF&p<pGe<wCyqSj$<k|zyJH$t%>aU
zX5mB=yOL@RZ;A<&f->DAe!)?sx?75V#}cqz=UZk3J8>UOc2Ruw5nU>&UC~Kn%u&2(
zbi$*v+cgiwW+v2T=e}&Lq|}d-HJS79`TKP7e#%obJk(v89s2b<s73|pTf#Rs?aVm|
zYJpc54uFqkg#J<4qoFL5n1^SYCyupkzKlA5+3B@Pi&SXU%Clzw&8T>defy9LvC}NJ
z;(_<g>yI{l>O*0bfg_!OI>^j&v!*FGGeqatWKFG7+H%RPotw(4WLlfXi`dG0@9LJ{
zz&bpCf7BGuDk)4*ZLusyMRUUC81ADXx4$&`A{Lj!!#hS7M=2>BZ5~1Lx)={KVsEMJ
z)34vU3Y%+6HA}p|tZR@E4#_1ib*uDtU3)7rp*N3O7uNPt?ar|MwvH?a6jDlem!aDo
z&ld1k!!AS@zQ<u1k|u{wZbY}j!A3oCZT#^AH?qK!qfbvL@;BBalcxPrXHXUDXw*FV
z<68OaG*og@pm=VrP?`$&&<jlZ&9COScqh)aaeFkzd58BO0CEe))k8R0-$ZvG5;Xf2
z9c0DU8i`h|N4yohv6xkm9^b&?-I~||J1yYvOgVa$(zlW=@JoP|RTmxaeQA`kpC{wl
zMj6h!v;mUyn{f1u*YU3Md?)lPRhz};B*EfjRX<}?<tK@_2f=GO>3wS6$+=a7z7+oK
zyVyv6*w|dn^2lQL&vv5O<signXpr0n`^x@?t8VFn=eV`{2J!23B1Y2Vg*===J*XL4
z^1j;k=thvHQ_+n~*k(ow8}qHO6*X2pL8#|Ir9`=@{$)N1ijdt_=!?P3ALjz>h<SHn
zO3iI<Apju|FOFkt$lTTnmwb;H^GuwFw>vwcLwWgvb5WVt<aZIXm~Z<VE^2crogF*a
zILe*Q#L_n=2%+KK3Y|%d)o$ye^Umfq1`3fzUY9LeTKdk2rQDkotm{zJR&LSt=&94t
zxGc!{E%%s*3RdB4Wky8%m(H=)xM0eix5CHVU6>YgAdB8=xp@+UVPgWsi(S~A5i}B6
zjqkS*^L6OPb+>=0dn(sMpN0tkaw>gNvI9Gxd)-1xf`V9&kuw`U7y*s~jBsT!FWm4M
zO^qV?n=D41knxCOl;vjHu>02q(}E;+g`&&!(S<+#fEXSYn58lD*wQ^CB}H)U@}6s!
zJF_%b42#^Vg?Wg>Z{?R6YlbElkm0*U%3`KFu>yiZF0pX!+zj0xCgQ!jru;rThVD{?
z1@|s8$8<!7O`NiIcJs)^Zc+8A`L^JxpMgapMm*@{^P`pACCAePq9t)<Hwpw5ubAe&
z=LvSRd-9_+v$1*uv8aFD+#qGrbbh}mi_=krqnq9>*w?rfswD6XM>dd;G)`27xX)Oy
z49a|5%4sr-SR~9aJ+wcN%I2zW#{}xDIR=8uKKJx$je_t_dSx+t46{m<2U^FDum9{U
z1D!Ru+$jw7nl1>;#yLsw_zVciB!#|<N+f$~H@q-ecw~R7t+^zSvv}sEz<#+4-(TA6
zbG_fIj&twH!euEj%H=h3@z1`FRy4h0jPM;7QW-qWQua31CF41<Y9OPn*E?&fs+d*%
z8W%RIXmlK()@J)71V}4w(s5`lM675(#w3QhPp_T$e70{OiuYWv*TC)j_jRS;DUS?@
z76du6X$Hi4G=C_$8el)wnXmUc$;J{EIy*~gU`TI%lFhul;KS3NMbcte*N4A^;nSQt
zoWRkhD*3mcIm7PgeDq#xk-ps!Az@n25di7d^Q<M&NxynxPdGVyf_0uKmJ<?%pGfbI
zt*T+1<8;>)7{#cNv@u5TEBoc%%Tl5?7->f`ntK?Nx<_F(vyOlZJr~<k7mXBt{yN(#
z*l%c{vSKjSk6#Pf^~1<GtZy_hdpVus4#&gAffG4eV&z<~5}KF_5y43q$r_B#JVho`
zKIi4?IsRHua{ER|X=DAm`kjSyU^^{WZ|iyNTg{1y)5Q{Yov4T~Df@?Etd?&X!=HK>
z_V-0V=}X1^T=Th8;+h`cY-q1DM`3Csbd-_LEa>!#-d8`CIJF=x_RW1d)DI2sZJsaX
zHMV{^XAOFzix4~FA5jIB;aV`&a=6Ya+$LnkhVAV!IKjW>mi6t+@yu+mA;AfgCOfg6
z*>HjgWdhaRE`Rq5c-LlKPj323s?w#EpM_TqDB)+M93$S}tIu;Eyl}B|<%a#^{D47c
zQEB^13&rGD>9v)S51kq~*eJH}+aYd2INqZK20qS2YkDxkhL<<VPQw5AH0Z6Cs|njc
zei!$Y$f-fs)+_n`_t&k9d5Z%rR@sxhm>a^Q*0khiv|=sPtaRNO_l*R7t_>D$Dcovz
z6F41(d6%M<@_S@Z`fD?H)Z&b!Bm$T3I%rz{xmMiBN9uegCt@SsGUn8K@=%sF#wXxK
z$G!<nQW!_6#62K|V>OIm;&~V$^^Mrtz~|ac9lIkMDrqjI_TKCcBh!yrRhICk>2)}#
zSY$;V(rWx!sMRHZf=!*g^hj-$pL{RlhCTCLgV&L`({+I#c%!4E3!RPK)^(FOqg2Zt
zC+Kp&`NA@X6)ms#ZiQKf*Gu&2%H|Bv_n}O;cR$(~>aOlN-TO;4^cuqz<`ZXz!CY)t
z6$hG`O?`N>Z^Z8;OLR>k8MWx>W<HOm9X$LH#W6B+Hdg$a=Pw~*oiG-WmJt0QKkEpZ
zOeU;4y!@)C1xze#-Qnud#Gg<ralU^;eT*wHI_mAup#n2{H1fL{M?-E7Mrv9~)9InZ
zvi}H|kXOP<H3_1ljUebC_zM8s`ARVtV5JY^UAzAyAtlvR?DSMYr?F*Y(H?7DGL!$2
zG9&%<cRjgL=gzT9o_S1s*PayQ@AAY&<+h#R?{6Q-pbKr}@Q#a<JYg=oXVcKNO*Rj|
zTP`twnooY)_**(T$l&sd2TC~>JOA+KcjXw7r|<Z4{N{`|nn0}W<znD`j~UzR)_r0u
zwlyJ*D~3qz#^Mf}ySaFsJTTV_LB50+_|hHO#th!L1f&itNu*-%`RZ5AiJ~I2{q2s3
zofgJZ=~_iXilL*+IFs5m|A~myzB_FpncD?0#G~*uZOmVKO~{e>*PYi-1|Ef;ZrEOt
zsF+X5eyX}}<gg;B^3l7P9^a(CMm91+)~xerE`J{5&rB{2-ttrr&oh&CmiQ@Ip|H-{
zcr41NO8-%mxv#1*DhoICx<WOQSVL#Fu4&-h|2<-Vw1%Z~p(4gcT4l-eyvhEg)*fM<
zckqaA@|=q;(vhh1>iOb9ZON!(Sw{7a3hbO=s=S!`-2yZ!IHmN$k(n695&St*EqKF%
V659%C*l99!+jD6bz1FIc{x6~x&wc;^

delta 1600
zcmV-G2EX}{Ah!;XA_4&Nkt9JW9%*cEV*mgE07L))0RRC200031009~R00tcZ001ay
zX>Mi!000000g;>?k?d&}1|@A|VRRAz3JEwRay-~TLqVi6jSQ2I2{3;oi|ja&nr%tA
z3fh;(7tV^<IFVp}ZK?PkVWaykOTIRKJq>=51B3Lxt>LFq(F|Z|W_gRgBzG%sX4$_T
zmXyO(Z5Q_XakN?V;!U#e$m_kW(F6nMDGL}MbJ*qz!U-`BV0Pk3alIj}&{O`$Vs^v^
z-=NRKLY4{W`msc2{3CyF2IY3I!+!^v!AUvI<9No1Rq$_*5u&SzoLUK$PUVKyMyfTj
z_?F%=W9Kvq56Nxz^?GWKUq<Xz!uhCr1<niom&RbFedYms%~@1UQ(C}YT{;|LaM6kZ
zuCK3q)De|F?71gI{<dNNFvJ|eFNxR_H#HmmO(mwcRE;&-h*^K2rfyO#EDmO#GFOZx
z7=$5f1IP-Gt*ZSsC$Yi0wuJ03Qi9tWi_^iok{IwRw1AQt4|$6drHX}2bHpzW!p&b}
zxX@lleqszj7_y`m;}g$wC43tktE22vP8+eK81Z5fxX=eZ%S%=f)}`*J2_uw2z8j_u
zRZ{<pN*i(<t*w7ilnE6b1M8^Q<ZI~1&k2oQeufzCXBP_)9N!%F{i9;O;lF>7KcG~X
z181@h-vNbL&X4+Z>JJMQIkctNgAv4C9F$zUxcs}LU}pM8VXuk<HMnYwN6$<|1R#)Y
zhCM8Ja3D}eb=;oB-K)-whL8>YJg`u|5{FC9vt!Zs>L`DTAvo_qypKkWw=aUWVjamt
z{PnM>TU9WHBK6QULfsO@#>Mm#${6BVY$>%Pr?V_aEt~mqZS}>rw<S+ydS_=$OO|*H
ziq*kh?9q)u1=2cj*1G(1SRoV%D!@z>fx@8Y(WMto?2n72M7<Ue;74Mkc{VBWnk(Q`
zJBEeu@@9Wbm(+krd1(mU!HM4$R9%_uBawhiiOf%QzrU3}I4Hmlh=D`NezPr8ES1?R
zTQR|iv@ceK6$qHua$eQuD^7}%se={}l4XHLbuX`5>yPt=8$tm7DC;eF3h=Wraz-;w
zUA>dEcrHX-4cifjWTE@;5j39g&U`a!S@U})&FO!?K*ZxtJ?Cax8Q7NxUG0WYzF5PS
zm_SFPMdR3$jUcfJnurYK8bXnS5v9k29@G{dD@65K5uPwzJ)`p;L#8J<P&K=Ovq@y$
z$u<)F%IWgdP3&0pm%F|Ch;dkJ^}kIvC%N(891{!7vJO(uFZQP?=SU<mP4zDE(mW<1
zkIR4lfW<4B%xR+R>mz1f?~-9*?wm7Y62tM=skFs3+r_o|;4BK03ed19tPwgxO#JH-
z_bA9L%wJ#4%ye&ySykYg#l}5GC`1ORTC<9zcBnMB+&+~}@jFX=rvCa;diPy*KewbO
z7%uGN9OU%<Y;PJfrY=)b$Jf!yN+rrSc~yU-(w;S3wH->jZniVPBs$^V<CHpG^!b32
zb`vIsS`F>6E~sd)>7cK0V2BFgsLvsEQ?pi17=tmn#N;Y!YW>!NqNPsIgf~*A#4zKE
ziZkQ7@X!v?-en!zZYbp7bf{EV&4GmD{Er4?iFh)|q0^jEC6%4-e3#-5-AMSp2cLhn
zK6zNRKX7?0RR;Dq`g#B-A&u%6`w0`4ny9m5-NL{IBIn3H(#HR^>e_*CTzcp=YM<U+
z^UI7$Y<os_k?si<)~hTGAlFfFMSK=^j&}=7v$*QyGDe{BHOZ!bvH1tsANK|te=Q}|
zqNI=guTlhI=8>lDapgMPV)jWPhGBnk-~$Xw#WbK}?jT|h;<VytDGYAsx_3I_Fn)P3
zw|=YVgqu4hBGH08qXh&W%G{`L>{o;f(iz#`CLVB14RR_P9^<uoO0d+?2gV3T3nt|Z
zm05NaAxH?oI#EHrJ8;ju0r3rCYLh)Zmsom`%~d<TiSH`k+kqsum=(2I+$(6P&x@^l
zdpyEGgD6*6o4ty&sqV8P_M+tggBC(z^{(ImsPlWGm#jHL(%JM(n2xf~q_I-%ELorW
yqJQbJL!bZeg&`?<bc&;Rz;X27DjQcV-ggy}XVBm(3|JtN`C1{JT0`%t!i+}e5(GQ|

diff --git a/README.md b/README.md
index 614095a8..5109173b 100644
--- a/README.md
+++ b/README.md
@@ -188,10 +188,10 @@ Scheduler and events
 
 Most scripts are designed to run regularly from
 [scheduler](https://wiki.mikrotik.com/wiki/Manual:System/Scheduler). We just
-added `check-routeros-update`, so let's run it every hour to make sure not to
+added `check-routeros-update`, so let's run it daily to make sure not to
 miss an update.
 
-    /system/scheduler/add name="check-routeros-update" interval=1h on-event="/system/script/run check-routeros-update;";
+    /system/scheduler/add name="check-routeros-update" interval=1d start-time=startup on-event="/system/script/run check-routeros-update;";
 
 ![screenshot: schedule script](README.d/11-schedule-script.avif)
 

From d86b7dcfcc85a9e31b624f0bceda0b920627a564 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 4 Apr 2024 19:10:55 +0200
Subject: [PATCH 096/988] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index 20a11409..f4056e58 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -21,6 +21,7 @@ for details!
 * [Ben Harris](mailto:mail@bharr.is) (@bharrisau)
 * [Daniel Ziegenberg](mailto:daniel@ziegenberg.at) (@ziegenberg)
 * [Michael Gisbers](mailto:michael@gisbers.de) (@mgisbers)
+* @netravnen
 * [netztrip](mailto:dave-tvg@netztrip.de) (@netztrip)
 * [Stefan Müller](mailto:stefan.mueller.83@gmail.com) (@PackElend)
 

From 86d0f71acb760793c8ccd5320351320f684ce052 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 4 Apr 2024 21:14:17 +0200
Subject: [PATCH 097/988] README: update screenshot on lease script setup

---
 README.d/12-setup-lease-script.avif | Bin 1686 -> 7642 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/README.d/12-setup-lease-script.avif b/README.d/12-setup-lease-script.avif
index 365e0e8d05470af99aef604d1ec24c292113d926..fb4024e2a730947774c6f165c7c5e3b191a4804c 100644
GIT binary patch
literal 7642
zcmbVubyOT*v+dyS4g*YZ3j}uy!6Cth;BJG%3=Y9bg1d#_?hsrOd~gVEL4#We!R<nR
z-}l|O-g<w$d#l&(+I6bBPVLjH*J=O&0J4I4Ih(petN@Sp<Q*VZ+zt>^D^+Q3X#fC$
z*TE8I`jmS#78?tD*MBGg;0!T`{hL2|dx+V;+u%AwU=DwC2#<FTh`p2fQ}hY|Km<Ik
zJc8g6*z=F^-v~h;0KhAJ<kAp`<KIdCW+)#6%cqj3CrsU6aLYK^JN+Gi;y;<kw5%t@
z>IqMUln__Te;NP)xaJm6^S@g@ZE6c~c6EOA$`EIBr$<i=fjV10`bR@zc)TS(0^b?p
z3HiH%j*kB5u}$5%WdcD@D*z&MCwo^%b9>LnVQ>Jb0gp>$5N8L|r`)3<01%K75QC8c
z0N{HE3)8<xqo~LRcxv-F$|EoU_W<N4C4cc){xAO+|BG`y<`5B(07#EM;1NiV{HY%G
z3I7Kt`4@kxLqPnePuL?z{1>Ofdkh{8{qOZK_pl1USCUhdd)(;npa8(bB0vU!j*5zg
zih_=YhK7NGj)_f-gN=oSO+iS6M@&sgOG8Zw1cDeinL%_M^gtksAS=fUZazLfT4rH!
zAs#VKUOt|uCI}c97}!|Y<TyCwJkNm7c>c%s&;cMo2XG-gilqY}5+EQEAUyN{XdmZ9
zLHKL`NO=;9gp7iUhK_-W^;l4k|8!DFh{#AND9De8j^Ov02Otxm5I*CUMkP`=MWb^e
z<_V0;L8pIN(@CQ7{TBnTnQIURCMg*?1tlXBGYcylAHRU0kg$l%D_J>t1w|!IEwJ`m
z9bG+h3rj0&8;C6w=H~9<>E#_95*qgY!^iOWgv6xel+?8J+`RmP!lL4m(%LU|^$m?p
z%`IKsJ-vPK{(-@X$*Jj?*}3_Jwe^jkn_JsEyL%_UPyd{qUtC^YKk0hX`EUD2+5e@B
z;87PMGBOe}+LJB>M2{!o1js1QxKRnE)zM5{i0F6%(TQKi<<xXy(DQ2iA~AFQj!DYE
zx5jw#B<-)V|36_t|0`wx5%%A@768~t2#+rhi2xu8I4$O*a5Czg>?U(fd!FO@gFu^(
zl*EcL5Gx@J+O&<$dz@A*Uo=Ny-tz12uz2|e)60C?65-uUk+;?kE_k<eGZD~@US)zJ
zk&(jQpA`NZKU~9o2;H-hiGF874XUCSAY8gzC(j!iJOY?L(xY9*fQ9!Hc26x<PqYgs
zYQ{MDEIF-KmWNtq!Y{lR70E&w8yW~gx%<HHe2KD>8Uh2aZsK%2TKq;T>gycxM#E;-
zb*)nMQ8iLu3tEI>g0C}h<|=1=B3vhuPO5Eg+f3?E(wtW~U1mMRMQC`uwc6}H){VUC
zTo<*w)W-N2nkR1)Mw?NFkUWIFy5YHcR-R~oWS;{u+U73;#i(UoUcOsb#<0M{#L}cI
zJ?f_rBbeMj)GkU<YM!Cg$HQK#j$S8Cr$-{9j7&k1aTp@#U;_XmJ<8HmX0dX+=uZmT
zQ-_UrMkA7h$hU<%cKq+$-l%v*=T+ieDju#byD&t@#d%8D2apFI?w&$>4UC@;l&Go}
zUfbAowY*|SX#7>NR37ET(R+B2h6`URjr1mjcEATFb4sC#Yj>;$hL>i06!SpV*kq~N
zzGYp|w`GLbb5QVjG{;UzWeM!r2?MLEc?_(I_?;0lp*50+C|P6>Kpd)L#Kba@q6+5f
zRCcylq}h^qD^~I&6jX`+XG}^J`h}|$-g+}XZoDuzFOAXgE9#GPO}xPneo{kf8tO*8
z9C?|^1~MU_OywTv)4xrF_YFedFnq#6CGfcyTAe`@rr9Ah>UD_Tl6lV@|Au0LC7F*4
zr%P@znxtP`GBR_X{76<~O22=auHBeSZ%DiwMZ(}&GKidHg8>^K*Y7=_j~sJI@ZSA7
z!+DG4S>5@$5z!RkmJs<X_u4~8MXMp|AD+NW?vc03pRwM2*BAo-+MHP8MI#a+HtQ5<
zWDKPD5L)%IPH$wWC>T1QYcmAa4zO`P3l|WkP?K762Q+V!cT#(6(J(bA9v1mj_&Hex
zIMzpSN0zWD_KR&QzyY6&BHfaY9A2jvmVdfxO}h|z{~k02yW)W5aBzP}-yh*R&0sYt
zHMm$3?%!Q315Npgqvn`0pUVt55eB<#aX+UI>_l?s&aj}|F3z`s=_MV9Ij$w@K^g_1
zb&-R69)M;cDrNJVyu~b2ZU1^-de#+*kIoh>*{LgLM*!?YWZa%Rud_;xaKMg}8y<FY
z{S9gaTe1BT#g=(9^t+T}(?zbIe0Mnh{4QRTO8(XGNC?Wudoe<}@BMJJO3&@$Y}_oZ
zsWyHNDBQG2%z>976QXjkqZHU=9^V~_n|fAhS*^2C=$W4zfXVXzhIq>B`zcD)&-~v)
z>dxX|=LGw_hD`LdmbBbUX$W%qz{n=#?ez6F*XR^i3^8t+uw}DNLRk|}@fX=Qv~Hl=
z`4Zd`jJo=If5N?wPUkjxcIte+=r)N8P4obwq>lcD+%j7-0m=_4hnaL!oPEF4i+F^`
zUVGqnGtbuR1>0T-Z+?ul92&gea{m(1UG{RLOQ816IkZL7In_wVZ81|G7~PDN!_3K5
zAF=N_7WUlL%(=nNg?#y|g)W+{hY;MJ`%pK1rrw_4Eqtg)q)VTH9QSuWy6~tlRWvjs
z%QQ=+*$t8x-lyzmbywt*LL|7rbQ2)kn1Ksz&1MdSD-9?e&G2isHQSGfn=$H-P+5n?
zFPn=V2c&kXyfaRrZ}d+!$AObPA6%*|LWt-VNao;lXhcn?!(&D-azgofK_Nu@qt{He
z>{HoYf~|+9o^JoU{^Mo~H66=ZR8RG#?E>AV)-Unr^nxF_j-=*JwiL<xE|<t@<~F?v
zF~*83h#f1fMfM0cA-8cgzO|KcsA7Un#MtLWUg`L!Uk8MRH9N0bPCLZ=iN%=3yKKmu
z^=;IQ(>M|PkLkkL1KigVPkuKF@2x1=w}gJ4o-!4aFJ>?$alfi;eaSV5HZ*oRR>GfF
zq-yQp#Ku|g?{u1xub+p_9l2^f6|GRze-mG$ZhKpGWGz#=djXwSJa<BqcVcT!`rW@s
z21Hp5>W-Dj17=KGDYt7Ya3*w~uPsB_uWIS|vcIu6VtU7B$9j7(B&0AEp!B@8<NC;N
z_2DRzz5jrbrl<ig=g&5YHnpsMth7Vf9%+B&jeyF2y(@PI0B0$~PdG=q(JoI33|3^x
zpDnGueVzH|P3c_H8!VmjiLk~SsZ6^54s(W3BzlUCSmHlbVoiaEm6k!Ot?RB)bw4eD
zK$^2se&q;d&w~nn_PTnm7KNV3rk}r2g~-J=s(>zUGR5iE*LAI@jwt2qkKC-DkGaZu
z`)5uk>G}v-R}~h_q}00G-lyNoQIiy&Un{gkX`h>87<}>a!z=W@4=WVVGvh-WZnAVr
z8<1Owi2mlmoTU_F-zwQOw#c>V59Kbd(Eq^qL59shnVlV9DKl?zv-1HUZfAZY*jWi5
zo^b>@aZu-yfdszC4O&<FUoR1<W%0B}J!2F)rH{{TQ63TP+7(aN+nbHYpd~V!Yv@pb
zs}&WAA<Y&62cSil+6(;b{vI65wq>&QVN(p7si|;)$;rT&W4#B<=1ygn&g3n(gPqGc
zj^cKcNfoY#LuV)bky~dU#s)Cs*NdQqtMd+03l^~@>u1elPDM(jySQw3N_E;9?h8IL
zz%h<+$r$t=q`*FxV>KD-Pn}Fx?gLxCpWkiGNTlvJuB4a7o!cI+Olm5s+b&eK70D8t
zWURvWH7tlVZ`0h-ey>1~gX>lURlyvcT7-%nNbLYd;%rh7Kv4|90t%8Qr!VFMBx)Sk
zZ$L(QBi;L;S87_7f{2fQm7;2h>aSlx$k|w}!~qmcpQNZqKixH!$dfm`SBh77#qD2i
zZ9*zutf&ogP6gq+z5!5X&cJ&_l0Hu_X}3sx2fYRREq(%-kTCj${=82biHN}^Ah1)e
z9s-(9d-EbAjB$<XyO6`l^S#;xZ#t4^JBWVA%Sk-|zP3vm+fEDXLxb{Jg&TGoZXN(C
zizg`e)%@CR)4drg#N7=-S*G@=#{;X;&`3YK&+Su3{@)KR!=IfiE}PbURemAm3e9+T
z0PFlYJ@WdZ`^yT-<Utjv1}ipt^Mk9L0!oaU$abaB2Fc5HKLLe`wkFHdo}*dZ)z3RG
z9cX<jUuAxl=N}?35SS2I&lx_Xl2~mS>6qel@-6n=4_lhk09-ZV1H^gI+Kv2)M?NgD
zE6~R&eR=U?fE@1c2+f$;4kMHPBzF=SuO}bq@CmO@j=^(uUPM4b^TPl2YhD9J$0COE
z51BMcicm$vPsYFEf1uNc=q(_S8%9+pBg2H5t0=NP(+`-wqf~D*9NK4Q_#I`yE+pzB
zWF;Y->(>Ren}YspY^^=P2gy3ILGsDY+>`Ax&~^5*M3(WzO1TMj1v4HzgY69SU0q`J
zL&hai!f+3DzR_mqQN!GT8ngKYpY#36#W_ur8Rj6}pZFbpW(AEULVYgLeh&a?-6@R{
zK@G8lX=>ht5><_qt`={~Q_t`{H5ZgRivU5n5FlP(h0Q(B6igZNEQkss)5;A=`uGze
zn%o6WtGRD*Mv}<dMT<#?A0_k~{tDK(%+vIBGOA?qfZpnJfi?ayQUE~hXJE8HBA|~=
zw2Iu=uoUCDy)t`QvW;>wh+y=$)TnnP4Vu_naamn?u*b&8%X1{+WD(E1fe?|r_eitu
zx7$TO#o06Kzb4PPr=rBo0epuuLuidn!NvLO>0gNB<G;+!I^qAoUukX}Fw8z+1}1bc
zQ|sI(_RczL^T`lnYdQ^U{Y(M{z4kuQg=xR*$}*=d)412now&6uhPX#KCZ9udo85Tx
zxHYs`;ltb=B%htiRUL?H@<}%>61)a!M4W|p``AUo8`0~n>i9FjvXDJUXQhEOWp1af
z6f%^|2s&<}xzZ!3N)R&`C~erR)^Rpwa2=@2rzJwX*dBRbrF6U0lAbJb_9L_>As5aN
z)0id*1ay8t630-_a#H${u#Pj1-`?=a8hdY-zF+WmxYZ@*lTg>{&y206J@!}e->Djw
z%lG`(M8A>N=vRbgkm6_Rd#UIuZP-~fs>!+f+}R4ZITb5g&8*K1^2p!`6I@iv@nD!C
zP&aKblaD~PGzliSA|3N42}d{%Yc^B!&08-bHobIKBV7hA;3{UH@uJ;?9M@78b^2p_
z%oJ#dHUnGf1LWBN>SLG^`KNqpXwpTVU5{Vmw8d0TW4+x+0it$&3h?557&Ieen>oG4
zZNn~NgzfjBp+FD+fblY$;2^+$mC%bJI7{s{#!uHjYG@Dh073vJh7jX#VF7&naR|=<
zg^C5@4?Y>Q<>jw23@MsS^|0cy_!3U8?Sn0bmoID5L{E*IIy85*E<I6q)+<Si-uav?
z7=n{UY+061UhLbqRl)rOy)xwcB4P!PD2l&bd7h4ndiec17IQ(A%3-DJdsBJDLgauC
z(VRa&)whbu9rigb@N{Z$0mCO+IX^m)mM4-M9I6|$c<FXiLEY@>K01$@+l;k$vbUwH
z_Hd^zr#eS`@5ZVhRjq}0x|j3+Krxw<;*uxU@S?CIs~G#kgkA}XFp7&&YC-(Wo#~@F
zvCue$STyY#F@lR%0hr>_$kJM0@)#|42UpM1T_Nvq@gBr#vTGj8R!M92y2hc<2PABm
zWqz8}4F#UpK#Ai!BIbP+hjcivx-JAU^`1}G(&kII<VmivF3lh_&>OjdovqZ_F+30J
z0T|g8!LpgO!ow<c@)QxEUM+DbS?p}x&qZ59mY1it!0f|k(xU!3SwxF2)UaPo)T;i1
z{4TVcB{p}%^3LfxfS_@oXPE66!ftE+g+!o}xzo#g_=BR5pNS&}Nx<A;^Zi5bjGG35
zE60#N?ZYoA69<m49w_+AtMa3kF9KH-Dc_o;r1k3ZJ|nQHU>_Xbtr}4nyYwo(oik7Z
zc0!JxL@X!^+r;kJW*>=Lr!qeYTi+^a<~9c6Wop0p(5Jja8%7S;m!Y>cqXAyv4>tuf
zOc|+^B4VNq%B}p`=xYu~0(QEmmKgsjGpAx?dR>BDk=K1rD&2Kj>Sz<07Cn5IKD<l8
z7(+mh2a{+M^dY@z^YDMgUi*#KM}NTvYOS2?&#_Kj9W^~4$@_&A^Z^_!=Rfq7+)$Y9
zNblNm(y%2RQOmqxl>3eag3nhUlNo!ad?vvqD@kbiaw}Q+Ft=L(?VX6;gJg>yFP7*6
zH=wXNn@u?U9SalH#2xT(uj0#rnBLpS>DOUfK{Cf!<+8!Q@n>LXmwF^rt0c^5d?`%n
z?Aw>LHW9a^U#T4zVjb$DfD~S_OS)4^nCjkTcInZi0=z@Idm3Mb1byNzkABFBq*OKn
z6A5_5b$$#C|C*kqOl%{SDc(yUgYX0;L7W8Z0^ef15O3^$Jrs-Q&c>QrVRtZ3IlJ|l
z+j8KTqQl%QI>%N%*mJU(4TY1Y+|sX`N~g_D4`HBH%bODIq5k!i6Hn@wpe{>tNFngR
zQ*$<rD?@x$Vq~!cK|;SE!O7zLyqc`lhijG@j}sXVfwnOe{p$I;YwJq`Im59jZ|3Lb
zU(s_cYXlT2&8nL&-{E|bgeM7W#B52(<L@Y{{W@=s4fd|aNhtWe?LVJ47b8%WyDwJT
z&(#vSj+M4FJ9tGhIp1CwHEpAYi8N`w$Sk5W=0kI#C8_N${mNIlZhyGdH<;{Ct;)-S
zM49W+3yjJc*Ho3ZG`2|J#ErCtI*CH?ZML(AnwjIx+xMciCN0PDTGi6@Ne`g9@pcTY
z03W0Qp|I`?eGk0r0jUsrUc<M(-1DzY8x!)2bD8fl>ponK()!YqrdUw1jb(HR96K=A
zUkH1PM?_-z8-`i*U;5@AAQtROd&);|_JrF1aCAy}2ID#WNhCAgw?+$)N4@~(yn8z~
z;^GXRv?r&YfbwZRc!{QQb|sH+ms24=$Cb#X9r{%_(2t**{6MU0z4N>jc5_tfPj&Va
zzaJJ#O9#*`&@bo;qrWp+g)}ptB-0Jmd)p|nyH`mM(Twuy<qjvRoP8S_HTcw8^23}}
zgYT|MbDh#1+v1K&_N4MMd?;-)!043Uk<H2k;~CQKAoH^Zn$K%*^f2?aB||*-ABM7y
zE3$A?5n?g?y}S9xXEtEYeq%f)7RxzG6jRv}XlGIq$#X6ET_g}eb<~~Uq4?7XRwD%R
zuYD-3H=2W~V++bN5`K(W_5sX`E(C9Lm9fodcZIz=fg=SmOC9PP(T*+SWIB>x4HjSO
zC%m%@#<A7pTg4LzE2Y1>bH@3QiRV*D_1^Ha_Qd4DzJ=b*w`~TzV$%_o6lT&;vV}3!
z^D|`Fy3Aon;X+b!kE+*3g;tzuLp(wCW};0+q-8{5<KfCF%MZ@tj|nHylc%;7CJG|s
z69UgaNms&ul<O{nGAj&f-R$ww@43>J?xjM|lwTziD}L|=HbQd0zR589nr*mk&c8RJ
z0b`k_zE3xP@IXGQb9C<Yb>h6h8J_*BVGn*anv4_TXr^bO@DYu5433ev*p;Qv9U;+C
zO-d|(V{NE24vUw2f6csoOh_qbqkv%|&}mO!xi`kz56u3N694`5y<XG}Jh@?z?m!f+
zgz?Y30!E78&A7MZWzh!7c$ImB5n)P*{6(18=w8X{Y;}cEidaOH(3zm@x$tWf{UiE?
z_&mkT2gjQV&n38}qU9-H;eabZJ;y|Hf|6fv>leCwU@o2ShcB`Fh>)J0q9p`QSzcdc
z|Bv^1j44q=B$Eg4^nByXd&#b<l|tj(Z&SA{*<7LEajO-<nk`I!yVD&?4&3aXQ5o(G
z`js)kX*C~^%W41hFcYy0N?N0ntG`#1WRdZ@BpuIe3({!;;F&T=f9^2rRdyR8&YB_f
zvG(yr`xzl37>CEQ7B3DZWKKb^Los;z!=IMZKUp;|+P$d4>kqEE$<6{<gQ-M)OJl&C
z1%*oOgralsoB>34qtV$}_&0l_pOw_Q@J$?d{5tL4yCBlUDF+i?2aDcL@nt^!)44Yr
zV#j}aY3_DZQr{A7@7JzjUb4mSmnW5A5pZQl34Rrf?;AQpMXixOhF5Hn7_O;s%WmDU
z-L~L6uGI_TeCjP7adk|GsM3!w{SLcQ!jCEUo69TuzHPW9+44qZXE?5=kzyytC>7iw
z^7*`EkgvmqR!Xv8yfwvX16B+EK2f_)w4t_jGi9k_N$aivHH6PW(ksLB(Z|<qcCJOc
zE1;6m&bM;Tw9j<$|ELnLPcT&#WZ!aeb~g*mdg-;1b?(^e=9H)7n5XOi_Ci_YzAj{?
zGS5pp6B+2VOD-!`9n5xuOo6UdM{vyeY`#^waV+;OP^gqJkBcel8RMtVvBJIFy<vAi
z8;Vd#k+syfcxV?_{zyjL-e_VjA@A71__f{8j&UTGoje020j+tjMz29;P2#<WW-GbX
z?x>0*twXaHS7qPG68RbrVZz=Nh=rx;dHL4L9*%==i;`<ha6oO-Kk8qfN6PLPlYw5-
zuTa^A)O(%}ntmxo@ujOv`eP6?evE%s5QI|?D&D#AWg$xsk{e{uLwVaxhX==ndYPNk
z%(P=J(u>JBCbp)o70%Q6V<F&;h)Sjw7WNUL6Wm4_w@2j7TjvAb{7w|rlj!;cE)rYL
z<T713P;;uR>AcrBJN4X~qaE%mE!i*{8tHlH=tx#~KsKWDy;o)J+W(+AKIZG*lxJY~
zuF^;KB09gaK@KF)BjQ_D@8U1^Qgx`qIoKUHaE0;uQ<z#^W4dI(gv7yk<g3Hn#$$Md
zraZVWqt~8?z?Ter<e1R#cm#C2Pz5y!4d~Qx(7#1k$-+yYj}i^UBe)PsAfrzuI<<6P
z8~g2hlsDb5SlfDUxN#l`??bz@iKb&k6Xzm2jghx)INckgcpGTQ<cGueXU20DYo+6L
zm4nir7^0`_4g^MG1$-GjfunOTRFjESY4~Xkjh)V<?l?_$lfENJZ!R8sx!_9KqmMJ*
zS;1>4zrk$|n?+`d@oR=<2#<kicz%BsZsPv}+-pE`_ON-b?0zvJG#rfYKp}9*5zK)I
zW*wHoRFSIorm9zceyXlupv(Enf%JtygfoF5sDe5Kt7HYv`-x7NYWlOBQhg|H>Nn=^
z_b;YNr{ekVm!v>Txieu20uqhgjOHO&qKCw#sz3YiE(}>%G3UL{Dw!5u{Hng*+S`>Q
zp2xbE8dF#w%8-pxhW&gFKPO4dVI2bm$%4yaW_B*mSV=;OjfH-Vn%+@36EQ`TX^Upo
zf}dOElnv;V-?34MJU<pMS!8kbOGO#UuNcm13CY+^{DS(PaUx%oceaN|yZ9<AIhX)b
z3=CDJ>qiVf^BA#f?BIHrd9T?m%-?6*7%vkmSxN~W=Sx<2d*gG<cpSLXv%;6qY4%+W
zRSy`xlb$r`0Ke8QQ$T^4OH)w^P+giBIG){T@hlpSSJLfTF({!q$RW#*I2RNF7pnuO
zjLLXquiMV_BoY=7#!!SQW4)ozM2-8uBk<eENt7_XuMg|;W*R?ZW?3O;`Q4x_y4U@D
zLtyTW+MASLnv_x0f`BE(o2<i7qZj*JODRf`#F%*QBNw|?Y#Lygxv88lI1ZTC3i3P^
zMbwMNXbYvL^rZkc=gv_TuA)j_j&p@%R&ab=3lH7icWX8ol?02JdBCYJJ9P<9KvwR;
J^DfpM{{?im#zg=C

delta 1488
zcmV;>1uy#AJC+TQA_4&Nkt9JW9%*cEV*mgE07L))0RRC200031009~R00n#i001ay
zX>Mi!000000g;>?k?bG=G?NVhNPh){ZDe6|5&#MbI3;pC*g!);q%!OZOvnV>gQg@`
z_m<dh=;=_Rk`XkdSp|rr^mYJ>7YztkP9q=ekxVu<1Gnw{Y@2QjB#Wb{x0cv%|CQJD
zfI?jxVb&8{G=dd~A~jn%q$=xKpO$;*?8GNb)oBhZKVLArpD)X%<(?rIx_`u2##|5d
zgN_rfP;O+Dp#J6_rug_ozF>ii&dBkRfeM#|&4b`KpKFdP8hqRb&`CyCvYPk+`_<n=
z6<UM&{0siEd(Op-j{?#QQqe2$4}%z=UciTLL+Rg&qg6p=)pa<G3@qd!k`&6vQWAnI
zkm$JXI7&~a`|Brn?zb&net$4gtCS((@9%nMxul)CbAQc2G*}~R%5-!w4dpa`0}B_o
z55J?wk>T-^^dGtZ_{>0Twwj7z+g>11dzW(Lu!|$PNgmGL<X9#BoV66r6^j<d+@V@$
zTkrYQMyO3s!5tmtYV59sP1?@&?;H8<%E3#a2r-SEpZ8YKEssuFyMLP9Tjz#1jLXGL
z2iPlZDI7jp9s(T_8&q3cFL0`T;@KZ6LD)96D5>p#v6}?39QLE4lIC_b?lR>;5{(W^
zT_}uJ{MCL>E@<a!5VObw1=%(ocl54c;@s<dvgk{`aF@p~oCt4T>C4HV!k1)DRpZnf
zqn-5GILy_pgz$?2Yk#2yKuTdw6}$Med7If_=%P_T<)=zpdh!@1^U*v^L8DWT%ymy3
zJ&SMTpwvUAF5K^R5}Z|B+OmuIE%Amis+L2Lni?nNQ;XbfY`nzl&+hNmAB?%CPF1r#
z*6n#&-Lq?uCk8t~O$^=JGY(W!$Bw6;BoN1QchomRg!?t}2!CJ;4^QS4L8dO&YXsY!
z8)F=;F#9gIEZgTxcW%jiANDLTtZ|um*rX8&Xg<$dSt@uR0?iP@C~J-#d@n(QoKYij
zwV-c$M(ttIB7<r1skM3r*lCdfogQFbB=LL-tMz`pEK&y-HZA}l-0)9t_m?hC&!MA8
zw2nnn{YxlW4S!a*nkZG4-fyR36K+#};<uG|Btq}i>2O6k(wyhBP%CW`CANTCfnS^e
zs8A^h1d5&)NWGFQWz)J{^uZRFWG$1Y<T_o~QP1pMs9;#VUdUJmwOPo1s?Ki6G#<p7
z{|2nIqw$KGfpOnOJid#ajcmUsms|dOozy`hy^rswC4aN-p=l(8`bEJoZqGgO5~Ajq
zwH!?kHpcN~T!9Q)tKR7#3h+(`z<KM@B;eGYUdP^7Y6SM}`#Dc0D-=LrQFr2t`0jp*
zqFv{V7qX(PmtVwuRLIoH;4!$~z}m~ugPJfWD3b)Cg@=F2Z6s+C!=8HO0<jkv+H~fS
zolzg*iGPKLnDrPg5DjhCAKG{nI)i@%K#8}N^s+(q|8l(PLO~;#)<*kjb!vs|u9x^P
zG_!>4bUk<J#4qWQgE7Xi(YI()Z$3P`*ZI#>jpr^sv+byDH7(C|XBBm@Zk14CoXT(q
zgue|MJ8e_gD+bOuIUkB&G_KltbOt$U4|=u@^ncuY`+K*70wg$W9_`$<sx2Te*mH%7
zILJin${Cs;b3M&k6yIYxLJGO~Fzar993G*frFzWzg=X}cQT`x<65JXzOaPGlfX$+9
z$G=|Rh+=S?1OPJelPsA0P^m*ehr6k23Y1iF)Yo1JV5=@g^bypeWqOS4OkLI%q*k<3
z=6?)#)DoN!Upafh^qMk}@hc46C=RS@Hj3>|hfi^aD}_P_i8@R+ZB55$_M{<H0XZ@y
zi#Pdts)ZZcMJYt5Lyx_zF2|I%PyFD`PSAJt=s}-JxrW>kLjC}svjEN$iI86=c;fEX
qpRpEGf%k!RYtL1(Tlxu`Kmw1H3yMicM-BQDcAJXi@h<l`Dl4!U7s|r`


From 5323052290177ff3cfbae5f80a846f5657ae9afd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Mar 2024 23:01:38 +0100
Subject: [PATCH 098/988] global-functions: introduce $FetchHuge

---
 README.md            |  2 +-
 global-functions.rsc | 39 ++++++++++++++++++++++++++++++++++++++-
 2 files changed, 39 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 5109173b..45167363 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@ RouterOS Scripts
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/global-functions.rsc b/global-functions.rsc
index e19ed654..bd35cdf5 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # global functions
 # https://git.eworm.de/cgit/routeros-scripts/about/
@@ -32,6 +32,7 @@
 :global DownloadPackage;
 :global EitherOr;
 :global EscapeForRegEx;
+:global FetchHuge;
 :global FetchUserAgentStr;
 :global FormatLine;
 :global FormatMultiLines;
@@ -389,6 +390,42 @@
   :return $Return;
 }
 
+# fetch huge data to file, read in chunks
+:set FetchHuge do={
+  :local ScriptName [ :tostr $1 ];
+  :local Url        [ :tostr $2 ];
+
+  :global GetRandom20CharAlNum;
+  :global LogPrint;
+  :global MkDir;
+  :global WaitForFile;
+
+  :if ([ $MkDir "tmpfs/" . $ScriptName ] = false) do={
+    $LogPrint error $0 ("Failed creating directory!");
+    :return false;
+  }
+
+  :local FileName ("tmpfs/" . $ScriptName . "/" . $0 . "-" . [ $GetRandom20CharAlNum ]);
+
+  :do {
+    /tool/fetch check-certificate=yes-without-crl $Url dst-path=$FileName as-value;
+  } on-error={
+    $LogPrint debug $0 ("Failed downloading from: " . $Url);
+    :return false;
+  }
+  $WaitForFile $FileName;
+
+  :local FileSize [ /file/get $FileName size ];
+  :local Return "";
+  :local VarSize 0;
+  :while ($VarSize < $FileSize) do={
+    :set Return ($Return . ([ /file/read offset=$VarSize chunk-size=32768 file=$FileName as-value ]->"data"));
+    :set VarSize [ :len $Return ];
+  }
+  /file/remove $FileName;
+  :return $Return;
+}
+
 # generate user agent string for fetch
 :set FetchUserAgentStr do={
   :local Caller [ :tostr $1 ];

From ab6fd8855881681d7c69af3e5ce18b3a6e2e69fb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Mar 2024 23:37:31 +0100
Subject: [PATCH 099/988] global-functions: $FetchHuge: use custom user agent
 string

---
 global-functions.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index bd35cdf5..0ea7120d 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -395,6 +395,7 @@
   :local ScriptName [ :tostr $1 ];
   :local Url        [ :tostr $2 ];
 
+  :global FetchUserAgentStr;
   :global GetRandom20CharAlNum;
   :global LogPrint;
   :global MkDir;
@@ -408,7 +409,8 @@
   :local FileName ("tmpfs/" . $ScriptName . "/" . $0 . "-" . [ $GetRandom20CharAlNum ]);
 
   :do {
-    /tool/fetch check-certificate=yes-without-crl $Url dst-path=$FileName as-value;
+    /tool/fetch check-certificate=yes-without-crl $Url dst-path=$FileName \
+      http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) as-value;
   } on-error={
     $LogPrint debug $0 ("Failed downloading from: " . $Url);
     :return false;

From 2edf983698a18d45de1c9e7823dad0959bff2504 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Mar 2024 23:35:01 +0100
Subject: [PATCH 100/988] global-functions: $FetchHuge: control
 check-certificate with parameter

---
 global-functions.rsc | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 0ea7120d..65dd06e5 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -392,15 +392,19 @@
 
 # fetch huge data to file, read in chunks
 :set FetchHuge do={
-  :local ScriptName [ :tostr $1 ];
-  :local Url        [ :tostr $2 ];
+  :local ScriptName [ :tostr  $1 ];
+  :local Url        [ :tostr  $2 ];
+  :local CheckCert  [ :tobool $3 ];
 
   :global FetchUserAgentStr;
   :global GetRandom20CharAlNum;
+  :global IfThenElse;
   :global LogPrint;
   :global MkDir;
   :global WaitForFile;
 
+  :set CheckCert [ $IfThenElse ($CheckCert = false) "no" "yes-without-crl" ];
+
   :if ([ $MkDir "tmpfs/" . $ScriptName ] = false) do={
     $LogPrint error $0 ("Failed creating directory!");
     :return false;
@@ -409,7 +413,7 @@
   :local FileName ("tmpfs/" . $ScriptName . "/" . $0 . "-" . [ $GetRandom20CharAlNum ]);
 
   :do {
-    /tool/fetch check-certificate=yes-without-crl $Url dst-path=$FileName \
+    /tool/fetch check-certificate=$CheckCert $Url dst-path=$FileName \
       http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) as-value;
   } on-error={
     $LogPrint debug $0 ("Failed downloading from: " . $Url);

From 61ee5cbd6cbce28385857f9cca184387234fe326 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 3 Apr 2024 17:03:27 +0200
Subject: [PATCH 101/988] global-functions: $FetchHuge: make sure to work with
 clean file names

---
 global-functions.rsc | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 65dd06e5..3c14f22d 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -396,6 +396,7 @@
   :local Url        [ :tostr  $2 ];
   :local CheckCert  [ :tobool $3 ];
 
+  :global CleanName;
   :global FetchUserAgentStr;
   :global GetRandom20CharAlNum;
   :global IfThenElse;
@@ -405,13 +406,13 @@
 
   :set CheckCert [ $IfThenElse ($CheckCert = false) "no" "yes-without-crl" ];
 
-  :if ([ $MkDir "tmpfs/" . $ScriptName ] = false) do={
+  :local FileName ("tmpfs/" . [ $CleanName $ScriptName ]);
+  :if ([ $MkDir $FileName ] = false) do={
     $LogPrint error $0 ("Failed creating directory!");
     :return false;
   }
 
-  :local FileName ("tmpfs/" . $ScriptName . "/" . $0 . "-" . [ $GetRandom20CharAlNum ]);
-
+  :set FileName ($FileName . "/" . [ $CleanName $0 ] . "-" . [ $GetRandom20CharAlNum ]);
   :do {
     /tool/fetch check-certificate=$CheckCert $Url dst-path=$FileName \
       http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) as-value;

From 402f847db2b7446a67634d3720d824a7e6b87e71 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 3 Apr 2024 17:36:47 +0200
Subject: [PATCH 102/988] global-functions: $FetchHuge: remove file on failed
 download

---
 global-functions.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 3c14f22d..ab8860fe 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -417,6 +417,9 @@
     /tool/fetch check-certificate=$CheckCert $Url dst-path=$FileName \
       http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) as-value;
   } on-error={
+    :if ([ $WaitForFile $FileName 500ms ] = true) do={
+      /file/remove $FileName;
+    }
     $LogPrint debug $0 ("Failed downloading from: " . $Url);
     :return false;
   }

From c3809f240d292e80c936e104e8aa9414b3dd3367 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Mar 2024 23:39:55 +0100
Subject: [PATCH 103/988] fw-addr-lists: use $FetchHuge

---
 doc/fw-addr-lists.md |  6 +++++-
 fw-addr-lists.rsc    | 18 ++++++------------
 2 files changed, 11 insertions(+), 13 deletions(-)

diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index 70ca6e98..ac34c885 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -4,7 +4,7 @@ Download, import and update firewall address-lists
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
@@ -29,6 +29,10 @@ see situation when the lists are not populated.
 To mitigate man-in-the-middle attacks with altered lists the server's
 certificate is checked.
 
+> ⚠️ **Warning**: The script does not limit the size of a list, but keep in
+> mind that huge lists can exhaust your device's resources (RAM and CPU),
+> and may take a long time to process.
+
 Requirements and installation
 -----------------------------
 
diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 68775b41..66f85817 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2023-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # download, import and update firewall address-lists
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/fw-addr-lists.md
@@ -19,7 +19,7 @@
 
   :global CertificateAvailable;
   :global EitherOr;
-  :global FetchUserAgentStr;
+  :global FetchHuge;
   :global LogPrint;
   :global LogPrintOnce;
   :global ScriptLock;
@@ -50,12 +50,12 @@
     :local Failure false;
 
     :foreach List in=$FwList do={
-      :local CheckCertificate "no";
+      :local CheckCertificate false;
       :local Data false;
       :local TimeOut [ $EitherOr [ :totime ($List->"timeout") ] $FwAddrListTimeOut ];
 
       :if ([ :len ($List->"cert") ] > 0) do={
-        :set CheckCertificate "yes-without-crl";
+        :set CheckCertificate true;
         :if ([ $CertificateAvailable ($List->"cert") ] = false) do={
           $LogPrint warning $ScriptName ("Downloading required certificate failed, trying anyway.");
         }
@@ -63,10 +63,8 @@
 
       :for I from=1 to=5 do={
         :if ($Data = false) do={
-          :do {
-            :set Data ([ /tool/fetch check-certificate=$CheckCertificate output=user \
-              http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) ($List->"url") as-value ]->"data");
-          } on-error={
+          :set Data [ $FetchHuge $ScriptName ($List->"url") $CheckCertificate ];
+          :if ($Data = false) do={
             :if ($I < 5) do={
               $LogPrint debug $ScriptName ("Failed downloading, " . $I . ". try: " . $List->"url");
               :delay (($I * $I) . "s");
@@ -81,10 +79,6 @@
         $LogPrint warning $ScriptName ("Failed downloading list from: " . $List->"url");
       }
 
-      :if ([ :len $Data ] > 63000) do={
-        $LogPrintOnce warning $ScriptName ("The list is huge and may be truncated: " . $List->"url");
-      }
-
       :while ([ :len $Data ] != 0) do={
         :local Line [ :pick $Data 0 [ :find $Data "\n" ] ];
         :local Address ([ :pick $Line 0 [ $FindDelim $Line ] ] . ($List->"cidr"));

From 4b6d0c02f134f4c6535d4df44016dc9ae2ae5db2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 5 Apr 2024 00:20:33 +0200
Subject: [PATCH 104/988] fw-addr-lists: try with less regexp matches

---
 fw-addr-lists.rsc | 23 +++++++++++++++--------
 1 file changed, 15 insertions(+), 8 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 66f85817..7e7ee389 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -82,14 +82,21 @@
       :while ([ :len $Data ] != 0) do={
         :local Line [ :pick $Data 0 [ :find $Data "\n" ] ];
         :local Address ([ :pick $Line 0 [ $FindDelim $Line ] ] . ($List->"cidr"));
-        :if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$" || \
-             $Address ~ "^[\\.a-zA-Z0-9-]+\\.[a-zA-Z]{2,}\$") do={
-          :set ($IPv4Addresses->$Address) $TimeOut;
-        }
-        :if ($Address ~ "^[0-9a-zA-Z]*:[0-9a-zA-Z:\\.]+(/[0-9]{1,3})?\$" || \
-             $Address ~ "^[\\.a-zA-Z0-9-]+\\.[a-zA-Z]{2,}\$") do={
-          :set ($IPv6Addresses->$Address) $TimeOut;
-        }
+        :do {
+          :if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$") do={
+            :set ($IPv4Addresses->$Address) $TimeOut;
+            :error true;
+          }
+          :if ($Address ~ "^[0-9a-zA-Z]*:[0-9a-zA-Z:\\.]+(/[0-9]{1,3})?\$") do={
+            :set ($IPv6Addresses->$Address) $TimeOut;
+            :error true;
+          }
+          :if ($Address ~ "^[\\.a-zA-Z0-9-]+\\.[a-zA-Z]{2,}\$") do={
+            :set ($IPv4Addresses->$Address) $TimeOut;
+            :set ($IPv6Addresses->$Address) $TimeOut;
+            :error true;
+          }
+        } on-error={ }
         :set Data [ :pick $Data ([ :len $Line ] + 1) [ :len $Data ] ];
       }
     }

From af6556bdba9d68174b45561215ea3be2e098e349 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 4 Apr 2024 19:37:38 +0200
Subject: [PATCH 105/988] fw-addr-lists: add debug message on successful
 download

---
 fw-addr-lists.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 7e7ee389..5cdd379b 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -20,6 +20,7 @@
   :global CertificateAvailable;
   :global EitherOr;
   :global FetchHuge;
+  :global HumanReadableNum;
   :global LogPrint;
   :global LogPrintOnce;
   :global ScriptLock;
@@ -77,6 +78,8 @@
         :set Data "";
         :set Failure true;
         $LogPrint warning $ScriptName ("Failed downloading list from: " . $List->"url");
+      } else={
+        $LogPrint debug $ScriptName ("Downloaded " . [ $HumanReadableNum [ :len $Data ] 1024 ] . "B from: " . $List->"url");
       }
 
       :while ([ :len $Data ] != 0) do={

From 70cc1ff53b7d113f8aff24034e5f5a25efb8b261 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 5 Apr 2024 23:41:17 +0200
Subject: [PATCH 106/988] fw-addr-lists: rework log messages, always include
 list name

---
 fw-addr-lists.rsc | 39 ++++++++++++++++++++++++++-------------
 1 file changed, 26 insertions(+), 13 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 5cdd379b..c9f894b4 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -58,7 +58,8 @@
       :if ([ :len ($List->"cert") ] > 0) do={
         :set CheckCertificate true;
         :if ([ $CertificateAvailable ($List->"cert") ] = false) do={
-          $LogPrint warning $ScriptName ("Downloading required certificate failed, trying anyway.");
+          $LogPrint warning $ScriptName ("Downloading required certificate (" . $FwListName . \
+              " / " . $List->"url" . ") failed, trying anyway.");
         }
       }
 
@@ -67,7 +68,8 @@
           :set Data [ $FetchHuge $ScriptName ($List->"url") $CheckCertificate ];
           :if ($Data = false) do={
             :if ($I < 5) do={
-              $LogPrint debug $ScriptName ("Failed downloading, " . $I . ". try: " . $List->"url");
+              $LogPrint debug $ScriptName ("Failed downloading for list '" . $FwListName . \
+                  "', " . $I . ". try from: " . $List->"url");
               :delay (($I * $I) . "s");
             }
           }
@@ -77,9 +79,11 @@
       :if ($Data = false) do={
         :set Data "";
         :set Failure true;
-        $LogPrint warning $ScriptName ("Failed downloading list from: " . $List->"url");
+        $LogPrint warning $ScriptName ("Failed downloading for list '" . $FwListName . \
+            "' from: " . $List->"url");
       } else={
-        $LogPrint debug $ScriptName ("Downloaded " . [ $HumanReadableNum [ :len $Data ] 1024 ] . "B from: " . $List->"url");
+        $LogPrint debug $ScriptName ("Downloaded " . [ $HumanReadableNum [ :len $Data ] 1024 ] . \
+            "B for list '" . $FwListName . "' from: " . $List->"url");
       }
 
       :while ([ :len $Data ] != 0) do={
@@ -107,13 +111,15 @@
     :foreach Entry in=[ /ip/firewall/address-list/find where list=$FwListName comment=$ListComment ] do={
       :local Address [ /ip/firewall/address-list/get $Entry address ];
       :if ([ :typeof ($IPv4Addresses->$Address) ] = "time") do={
-        $LogPrint debug $ScriptName ("Renewing IPv4 address for " . ($IPv4Addresses->$Address) . ": " . $Address);
+        $LogPrint debug $ScriptName ("Renewing IPv4 address in list '" . $FwListName . \
+            "' with " . ($IPv4Addresses->$Address) . ": " . $Address);
         /ip/firewall/address-list/set $Entry timeout=($IPv4Addresses->$Address);
         :set ($IPv4Addresses->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
-          $LogPrint debug $ScriptName ("Removing IPv4 address: " . $Address);
+          $LogPrint debug $ScriptName ("Removing IPv4 address from list '" . $FwListName . \
+              "': " . $Address);
           /ip/firewall/address-list/remove $Entry;
           :set CntRemove ($CntRemove + 1);
         }
@@ -123,13 +129,15 @@
     :foreach Entry in=[ /ipv6/firewall/address-list/find where list=$FwListName comment=$ListComment ] do={
       :local Address [ /ipv6/firewall/address-list/get $Entry address ];
       :if ([ :typeof ($IPv6Addresses->$Address) ] = "time") do={
-        $LogPrint debug $ScriptName ("Renewing IPv6 address for " . ($IPv6Addresses->$Address) . ": " . $Address);
+        $LogPrint debug $ScriptName ("Renewing IPv6 address in list '" . $FwListName . \
+            "' with " . ($IPv6Addresses->$Address) . ": " . $Address);
         /ipv6/firewall/address-list/set $Entry timeout=($IPv6Addresses->$Address);
         :set ($IPv6Addresses->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
-          $LogPrint debug $ScriptName ("Removing: " . $Address);
+          $LogPrint debug $ScriptName ("Removing IPv6 address from list '" . $FwListName . \
+              "': " . $Address);
           /ipv6/firewall/address-list/remove $Entry;
           :set CntRemove ($CntRemove + 1);
         }
@@ -137,27 +145,32 @@
     }
 
     :foreach Address,Timeout in=$IPv4Addresses do={
-      $LogPrint debug $ScriptName ("Adding IPv4 address for " . $Timeout . ": " . $Address);
+      $LogPrint debug $ScriptName ("Adding IPv4 address to list '" . $FwListName . \
+          "' with " . $Timeout . ": " . $Address);
       :do {
         /ip/firewall/address-list/add list=$FwListName comment=$ListComment address=$Address timeout=$Timeout;
         :set ($IPv4Addresses->$Address);
         :set CntAdd ($CntAdd + 1);
       } on-error={
-        $LogPrint warning $ScriptName ("Failed to add IPv4 address " . $Address . " to list '" . $FwListName . "'.");
+        $LogPrint warning $ScriptName ("Failed to add IPv4 address to list '" . $FwListName . \
+            "': " . $Address);
       }
     }
 
     :foreach Address,Timeout in=$IPv6Addresses do={
-      $LogPrint debug $ScriptName ("Adding IPv6 address for " . $Timeout . ": " . $Address);
+      $LogPrint debug $ScriptName ("Adding IPv6 address to list '" . $FwListName . \
+          "' with " . $Timeout . ": " . $Address);
       :do {
         /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment address=$Address timeout=$Timeout;
         :set ($IPv6Addresses->$Address);
         :set CntAdd ($CntAdd + 1);
       } on-error={
-        $LogPrint warning $ScriptName ("Failed to add IPv6 address " . $Address . " to list '" . $FwListName . "'.");
+        $LogPrint warning $ScriptName ("Failed to add IPv6 address to list '" . $FwListName . \
+            "': " . $Address);
       }
     }
 
-    $LogPrint info $ScriptName ("list: " . $FwListName . " -- added: " . $CntAdd . " - renewed: " . $CntRenew . " - removed: " . $CntRemove);
+    $LogPrint info $ScriptName ("list: " . $FwListName . " -- added: " . $CntAdd . \
+        " - renewed: " . $CntRenew . " - removed: " . $CntRemove);
   }
 } on-error={ }

From 491d85000d607db09b7abd67d6002c9ca1a870f2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 7 Apr 2024 20:54:41 +0200
Subject: [PATCH 107/988] fw-addr-lists: human readable numbers for counts

---
 fw-addr-lists.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index c9f894b4..15d292ed 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -170,7 +170,9 @@
       }
     }
 
-    $LogPrint info $ScriptName ("list: " . $FwListName . " -- added: " . $CntAdd . \
-        " - renewed: " . $CntRenew . " - removed: " . $CntRemove);
+    $LogPrint info $ScriptName ("list: " . $FwListName . \
+        " -- added: " . [ $HumanReadableNum $CntAdd 1000 ] . \
+        " - renewed: " . [ $HumanReadableNum $CntRenew 1000 ] . \
+        " - removed: " . [ $HumanReadableNum $CntRemove 1000 ]);
   }
 } on-error={ }

From 19c52ed2a7a59c7ecfb472a9f0bbf4843fc5d713 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 7 Apr 2024 22:50:04 +0200
Subject: [PATCH 108/988] fw-addr-lists: show count of active addresses

---
 fw-addr-lists.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 15d292ed..ab417cd3 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -171,6 +171,7 @@
     }
 
     $LogPrint info $ScriptName ("list: " . $FwListName . \
+        " (" . [ $HumanReadableNum ($CntAdd + $CntRenew) 1000 ] . ")" . \
         " -- added: " . [ $HumanReadableNum $CntAdd 1000 ] . \
         " - renewed: " . [ $HumanReadableNum $CntRenew 1000 ] . \
         " - removed: " . [ $HumanReadableNum $CntRemove 1000 ]);

From c4d2ea19dda3434c92f604605c1d3f06ec8148c2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 5 Apr 2024 23:53:05 +0200
Subject: [PATCH 109/988] fw-addr-lists: break long lines

---
 fw-addr-lists.rsc | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index ab417cd3..007282cb 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -108,7 +108,8 @@
       }
     }
 
-    :foreach Entry in=[ /ip/firewall/address-list/find where list=$FwListName comment=$ListComment ] do={
+    :foreach Entry in=[ /ip/firewall/address-list/find where \
+        list=$FwListName comment=$ListComment ] do={
       :local Address [ /ip/firewall/address-list/get $Entry address ];
       :if ([ :typeof ($IPv4Addresses->$Address) ] = "time") do={
         $LogPrint debug $ScriptName ("Renewing IPv4 address in list '" . $FwListName . \
@@ -126,7 +127,8 @@
       }
     }
 
-    :foreach Entry in=[ /ipv6/firewall/address-list/find where list=$FwListName comment=$ListComment ] do={
+    :foreach Entry in=[ /ipv6/firewall/address-list/find where \
+        list=$FwListName comment=$ListComment ] do={
       :local Address [ /ipv6/firewall/address-list/get $Entry address ];
       :if ([ :typeof ($IPv6Addresses->$Address) ] = "time") do={
         $LogPrint debug $ScriptName ("Renewing IPv6 address in list '" . $FwListName . \
@@ -148,7 +150,8 @@
       $LogPrint debug $ScriptName ("Adding IPv4 address to list '" . $FwListName . \
           "' with " . $Timeout . ": " . $Address);
       :do {
-        /ip/firewall/address-list/add list=$FwListName comment=$ListComment address=$Address timeout=$Timeout;
+        /ip/firewall/address-list/add list=$FwListName comment=$ListComment \
+            address=$Address timeout=$Timeout;
         :set ($IPv4Addresses->$Address);
         :set CntAdd ($CntAdd + 1);
       } on-error={
@@ -161,7 +164,8 @@
       $LogPrint debug $ScriptName ("Adding IPv6 address to list '" . $FwListName . \
           "' with " . $Timeout . ": " . $Address);
       :do {
-        /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment address=$Address timeout=$Timeout;
+        /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment \
+            address=$Address timeout=$Timeout;
         :set ($IPv6Addresses->$Address);
         :set CntAdd ($CntAdd + 1);
       } on-error={

From 009674b5bcf27589cd3469bc418dea72c9b4e979 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 4 Apr 2024 21:45:02 +0200
Subject: [PATCH 110/988] bump RouterOS requirement for all scripts and
 modules...

... now that global-functions requires RouterOS 7.13 anyway.
---
 BRANCHES.md                            | 2 +-
 CONTRIBUTIONS.md                       | 2 +-
 INITIAL-COMMANDS.md                    | 2 +-
 accesslist-duplicates.capsman.rsc      | 2 +-
 accesslist-duplicates.local.rsc        | 2 +-
 accesslist-duplicates.template.rsc     | 2 +-
 accesslist-duplicates.wifi.rsc         | 2 +-
 backup-cloud.rsc                       | 2 +-
 backup-email.rsc                       | 2 +-
 backup-partition.rsc                   | 2 +-
 backup-upload.rsc                      | 2 +-
 capsman-download-packages.capsman.rsc  | 2 +-
 capsman-download-packages.template.rsc | 2 +-
 capsman-download-packages.wifi.rsc     | 2 +-
 capsman-rolling-upgrade.capsman.rsc    | 2 +-
 capsman-rolling-upgrade.template.rsc   | 2 +-
 capsman-rolling-upgrade.wifi.rsc       | 2 +-
 certificate-renew-issued.rsc           | 2 +-
 check-certificates.rsc                 | 2 +-
 check-health.rsc                       | 2 +-
 check-lte-firmware-upgrade.rsc         | 2 +-
 check-routeros-update.rsc              | 2 +-
 collect-wireless-mac.capsman.rsc       | 2 +-
 collect-wireless-mac.local.rsc         | 2 +-
 collect-wireless-mac.template.rsc      | 2 +-
 collect-wireless-mac.wifi.rsc          | 2 +-
 daily-psk.capsman.rsc                  | 2 +-
 daily-psk.local.rsc                    | 2 +-
 daily-psk.template.rsc                 | 2 +-
 daily-psk.wifi.rsc                     | 2 +-
 dhcp-lease-comment.capsman.rsc         | 2 +-
 dhcp-lease-comment.local.rsc           | 2 +-
 dhcp-lease-comment.template.rsc        | 2 +-
 dhcp-lease-comment.wifi.rsc            | 2 +-
 dhcp-to-dns.rsc                        | 2 +-
 doc/accesslist-duplicates.md           | 2 +-
 doc/backup-cloud.md                    | 2 +-
 doc/backup-email.md                    | 2 +-
 doc/backup-partition.md                | 2 +-
 doc/backup-upload.md                   | 2 +-
 doc/capsman-download-packages.md       | 2 +-
 doc/capsman-rolling-upgrade.md         | 2 +-
 doc/certificate-renew-issued.md        | 2 +-
 doc/check-certificates.md              | 2 +-
 doc/check-health.md                    | 2 +-
 doc/check-lte-firmware-upgrade.md      | 2 +-
 doc/check-routeros-update.md           | 2 +-
 doc/collect-wireless-mac.md            | 2 +-
 doc/daily-psk.md                       | 2 +-
 doc/dhcp-lease-comment.md              | 2 +-
 doc/dhcp-to-dns.md                     | 2 +-
 doc/firmware-upgrade-reboot.md         | 2 +-
 doc/global-wait.md                     | 2 +-
 doc/gps-track.md                       | 2 +-
 doc/hotspot-to-wpa.md                  | 2 +-
 doc/ip-addr-bridge.md                  | 2 +-
 doc/ipsec-to-dns.md                    | 2 +-
 doc/ipv6-update.md                     | 2 +-
 doc/lease-script.md                    | 2 +-
 doc/leds-mode.md                       | 2 +-
 doc/log-forward.md                     | 2 +-
 doc/mod/bridge-port-to.md              | 2 +-
 doc/mod/bridge-port-vlan.md            | 2 +-
 doc/mod/inspectvar.md                  | 2 +-
 doc/mod/ipcalc.md                      | 2 +-
 doc/mod/notification-email.md          | 2 +-
 doc/mod/notification-ntfy.md           | 2 +-
 doc/mod/scriptrunonce.md               | 2 +-
 doc/mod/ssh-keys-import.md             | 2 +-
 doc/mode-button.md                     | 2 +-
 doc/netwatch-dns.md                    | 2 +-
 doc/netwatch-notify.md                 | 2 +-
 doc/ospf-to-leds.md                    | 2 +-
 doc/ppp-on-up.md                       | 2 +-
 doc/sms-action.md                      | 2 +-
 doc/sms-forward.md                     | 2 +-
 doc/super-mario-theme.md               | 2 +-
 doc/unattended-lte-firmware-upgrade.md | 2 +-
 doc/update-gre-address.md              | 2 +-
 doc/update-tunnelbroker.md             | 2 +-
 firmware-upgrade-reboot.rsc            | 2 +-
 global-wait.rsc                        | 2 +-
 gps-track.rsc                          | 2 +-
 hotspot-to-wpa-cleanup.capsman.rsc     | 2 +-
 hotspot-to-wpa-cleanup.template.rsc    | 2 +-
 hotspot-to-wpa-cleanup.wifi.rsc        | 2 +-
 hotspot-to-wpa.capsman.rsc             | 2 +-
 hotspot-to-wpa.template.rsc            | 2 +-
 hotspot-to-wpa.wifi.rsc                | 2 +-
 ipsec-to-dns.rsc                       | 2 +-
 ipv6-update.rsc                        | 2 +-
 lease-script.rsc                       | 2 +-
 log-forward.rsc                        | 2 +-
 mod/bridge-port-to.rsc                 | 2 ++
 mod/bridge-port-vlan.rsc               | 2 ++
 mod/inspectvar.rsc                     | 2 ++
 mod/ipcalc.rsc                         | 2 ++
 mod/notification-email.rsc             | 2 +-
 mod/notification-ntfy.rsc              | 2 ++
 mod/scriptrunonce.rsc                  | 2 ++
 mod/ssh-keys-import.rsc                | 2 +-
 mode-button.rsc                        | 2 +-
 netwatch-dns.rsc                       | 2 +-
 netwatch-notify.rsc                    | 2 +-
 ospf-to-leds.rsc                       | 2 +-
 ppp-on-up.rsc                          | 2 +-
 sms-action.rsc                         | 2 +-
 sms-forward.rsc                        | 2 +-
 update-gre-address.rsc                 | 2 +-
 update-tunnelbroker.rsc                | 2 +-
 110 files changed, 116 insertions(+), 104 deletions(-)

diff --git a/BRANCHES.md b/BRANCHES.md
index 0fdbdb4d..f1062bb3 100644
--- a/BRANCHES.md
+++ b/BRANCHES.md
@@ -4,7 +4,7 @@ Installing from branches
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index f4056e58..13d05088 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -4,7 +4,7 @@ Past Contributions
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 0de50ae5..0320fe80 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -4,7 +4,7 @@ Initial commands
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index 2ce83029..781ae78d 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # print duplicate antries in wireless access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index 51ef6f3e..b79a724b 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # print duplicate antries in wireless access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index 770fb305..b8067c87 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # print duplicate antries in wireless access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index 65f8aaa4..c05e02cc 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # print duplicate antries in wireless access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index cccb41b6..9a062f27 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=40
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # upload backup to MikroTik cloud
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-cloud.md
diff --git a/backup-email.rsc b/backup-email.rsc
index 64ca69ca..c32eb274 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=20
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # create and email backup and config file
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-email.md
diff --git a/backup-partition.rsc b/backup-partition.rsc
index 503d3824..fc186c06 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=70
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # save configuration to fallback partition
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-partition.md
diff --git a/backup-upload.rsc b/backup-upload.rsc
index ef5b7c72..18223bba 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=50
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # create and upload backup and config file
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-upload.md
diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index a3bd4a59..f5695f4b 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-download-packages.md
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index cad3bcb5..762dbb65 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-download-packages.md
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 909688f9..79aa9a7a 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-download-packages.md
diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index 11bfd698..2c9ae3de 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -5,7 +5,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: capsman-rolling-upgrade
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # upgrade CAPs one after another
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-rolling-upgrade.md
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index e0effd48..2098bc0f 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -5,7 +5,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: capsman-rolling-upgrade
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # upgrade CAPs one after another
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-rolling-upgrade.md
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 8ec6f26b..36b8c0f2 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -5,7 +5,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: capsman-rolling-upgrade
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # upgrade CAPs one after another
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-rolling-upgrade.md
diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index 45805c54..77ed3d05 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # renew locally issued certificates
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/certificate-renew-issued.md
diff --git a/check-certificates.rsc b/check-certificates.rsc
index 20e2902f..e9235f12 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # check for certificate validity
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/check-certificates.md
diff --git a/check-health.rsc b/check-health.rsc
index 2a97ad6e..1e8fcc08 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # check for RouterOS health state
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/check-health.md
diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index e7f06f35..3a25f83d 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # check for LTE firmware upgrade, send notification
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/check-lte-firmware-upgrade.md
diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index c9ab93b3..6dca99af 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # check for RouterOS update, send notification and/or install
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/check-routeros-update.md
diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index dcb303c0..74c07543 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # collect wireless mac adresses in access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index 7c1122ce..8a60fea3 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # collect wireless mac adresses in access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index b8c5ff87..c5cf74a5 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # collect wireless mac adresses in access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index b8ad9396..12c33611 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # collect wireless mac adresses in access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 43651d07..64e8ce72 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 2dbc61bf..48e2b8d8 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index e190ffb7..5097b00a 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index ee3e1b05..9d7f2850 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 4ac228b9..b7f3589f 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update dhcp-server lease comment with infos from access-list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index a49f74f4..e35bbe78 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update dhcp-server lease comment with infos from access-list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 0f0975bb..d4323ad0 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update dhcp-server lease comment with infos from access-list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index c9c091b1..f67ce6e3 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update dhcp-server lease comment with infos from access-list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index 5b6e64a7..a3d41c99 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=20
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # check DHCP leases and add/remove/update DNS entries
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-to-dns.md
diff --git a/doc/accesslist-duplicates.md b/doc/accesslist-duplicates.md
index 109bebfe..a1f91980 100644
--- a/doc/accesslist-duplicates.md
+++ b/doc/accesslist-duplicates.md
@@ -4,7 +4,7 @@ Find and remove access list duplicates
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-cloud.md b/doc/backup-cloud.md
index 03d59536..be6e06d9 100644
--- a/doc/backup-cloud.md
+++ b/doc/backup-cloud.md
@@ -4,7 +4,7 @@ Upload backup to Mikrotik cloud
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-email.md b/doc/backup-email.md
index 56b0540a..a506543d 100644
--- a/doc/backup-email.md
+++ b/doc/backup-email.md
@@ -4,7 +4,7 @@ Send backup via e-mail
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-partition.md b/doc/backup-partition.md
index e2ca8e0f..ba206570 100644
--- a/doc/backup-partition.md
+++ b/doc/backup-partition.md
@@ -4,7 +4,7 @@ Save configuration to fallback partition
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-upload.md b/doc/backup-upload.md
index 953ac933..f524adb3 100644
--- a/doc/backup-upload.md
+++ b/doc/backup-upload.md
@@ -4,7 +4,7 @@ Upload backup to server
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/capsman-download-packages.md b/doc/capsman-download-packages.md
index 20fb0072..c68900ea 100644
--- a/doc/capsman-download-packages.md
+++ b/doc/capsman-download-packages.md
@@ -4,7 +4,7 @@ Download packages for CAP upgrade from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/capsman-rolling-upgrade.md b/doc/capsman-rolling-upgrade.md
index 8362794b..27d855fe 100644
--- a/doc/capsman-rolling-upgrade.md
+++ b/doc/capsman-rolling-upgrade.md
@@ -4,7 +4,7 @@ Run rolling CAP upgrades from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/certificate-renew-issued.md b/doc/certificate-renew-issued.md
index 2df8be31..91a1914c 100644
--- a/doc/certificate-renew-issued.md
+++ b/doc/certificate-renew-issued.md
@@ -4,7 +4,7 @@ Renew locally issued certificates
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-certificates.md b/doc/check-certificates.md
index 62b9cebb..636f719c 100644
--- a/doc/check-certificates.md
+++ b/doc/check-certificates.md
@@ -4,7 +4,7 @@ Renew certificates and notify on expiration
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-health.md b/doc/check-health.md
index ee52b61f..f94a0bf5 100644
--- a/doc/check-health.md
+++ b/doc/check-health.md
@@ -4,7 +4,7 @@ Notify about health state
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-lte-firmware-upgrade.md b/doc/check-lte-firmware-upgrade.md
index bec31775..59a62c72 100644
--- a/doc/check-lte-firmware-upgrade.md
+++ b/doc/check-lte-firmware-upgrade.md
@@ -4,7 +4,7 @@ Notify on LTE firmware upgrade
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index dbb2b89b..f9d485c0 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -4,7 +4,7 @@ Notify on RouterOS update
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/collect-wireless-mac.md b/doc/collect-wireless-mac.md
index b0a22982..57032d83 100644
--- a/doc/collect-wireless-mac.md
+++ b/doc/collect-wireless-mac.md
@@ -4,7 +4,7 @@ Collect MAC addresses in wireless access list
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/daily-psk.md b/doc/daily-psk.md
index f7236178..3894d521 100644
--- a/doc/daily-psk.md
+++ b/doc/daily-psk.md
@@ -4,7 +4,7 @@ Use wireless network with daily psk
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/dhcp-lease-comment.md b/doc/dhcp-lease-comment.md
index 4831b8cb..f95b1245 100644
--- a/doc/dhcp-lease-comment.md
+++ b/doc/dhcp-lease-comment.md
@@ -4,7 +4,7 @@ Comment DHCP leases with info from access list
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/dhcp-to-dns.md b/doc/dhcp-to-dns.md
index e7f3b880..13d5ef3a 100644
--- a/doc/dhcp-to-dns.md
+++ b/doc/dhcp-to-dns.md
@@ -4,7 +4,7 @@ Create DNS records for DHCP leases
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/firmware-upgrade-reboot.md b/doc/firmware-upgrade-reboot.md
index 420dfe19..bac17a7a 100644
--- a/doc/firmware-upgrade-reboot.md
+++ b/doc/firmware-upgrade-reboot.md
@@ -4,7 +4,7 @@ Automatically upgrade firmware and reboot
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/global-wait.md b/doc/global-wait.md
index a3fe6d63..4b42717a 100644
--- a/doc/global-wait.md
+++ b/doc/global-wait.md
@@ -4,7 +4,7 @@ Wait for global functions and modules
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/gps-track.md b/doc/gps-track.md
index 03f79a73..7006fb39 100644
--- a/doc/gps-track.md
+++ b/doc/gps-track.md
@@ -4,7 +4,7 @@ Send GPS position to server
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/hotspot-to-wpa.md b/doc/hotspot-to-wpa.md
index 6ce44219..275fe4d0 100644
--- a/doc/hotspot-to-wpa.md
+++ b/doc/hotspot-to-wpa.md
@@ -4,7 +4,7 @@ Use WPA network with hotspot credentials
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ip-addr-bridge.md b/doc/ip-addr-bridge.md
index 8bb9811f..941a8ae7 100644
--- a/doc/ip-addr-bridge.md
+++ b/doc/ip-addr-bridge.md
@@ -4,7 +4,7 @@ Manage IP addresses with bridge status
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ipsec-to-dns.md b/doc/ipsec-to-dns.md
index ca5b86c5..0a919602 100644
--- a/doc/ipsec-to-dns.md
+++ b/doc/ipsec-to-dns.md
@@ -4,7 +4,7 @@ Create DNS records for IPSec peers
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ipv6-update.md b/doc/ipv6-update.md
index a5661fc6..20265fec 100644
--- a/doc/ipv6-update.md
+++ b/doc/ipv6-update.md
@@ -4,7 +4,7 @@ Update configuration on IPv6 prefix change
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/lease-script.md b/doc/lease-script.md
index f346621a..4d2f3bc9 100644
--- a/doc/lease-script.md
+++ b/doc/lease-script.md
@@ -4,7 +4,7 @@ Run other scripts on DHCP lease
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/leds-mode.md b/doc/leds-mode.md
index 5dd5f63b..90ea4180 100644
--- a/doc/leds-mode.md
+++ b/doc/leds-mode.md
@@ -4,7 +4,7 @@ Manage LEDs dark mode
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/log-forward.md b/doc/log-forward.md
index 4183d7be..44409dcf 100644
--- a/doc/log-forward.md
+++ b/doc/log-forward.md
@@ -4,7 +4,7 @@ Forward log messages via notification
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/bridge-port-to.md b/doc/mod/bridge-port-to.md
index 838d1e0e..5c8bebce 100644
--- a/doc/mod/bridge-port-to.md
+++ b/doc/mod/bridge-port-to.md
@@ -4,7 +4,7 @@ Manage ports in bridge
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/bridge-port-vlan.md b/doc/mod/bridge-port-vlan.md
index 5660b9d5..d23d5b59 100644
--- a/doc/mod/bridge-port-vlan.md
+++ b/doc/mod/bridge-port-vlan.md
@@ -4,7 +4,7 @@ Manage VLANs on bridge ports
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/inspectvar.md b/doc/mod/inspectvar.md
index 7ec74f2f..d4e59b3d 100644
--- a/doc/mod/inspectvar.md
+++ b/doc/mod/inspectvar.md
@@ -4,7 +4,7 @@ Inspect variables
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/ipcalc.md b/doc/mod/ipcalc.md
index 5b24952b..cb655bcd 100644
--- a/doc/mod/ipcalc.md
+++ b/doc/mod/ipcalc.md
@@ -4,7 +4,7 @@ IP address calculation
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-email.md b/doc/mod/notification-email.md
index 76816c1a..2138e319 100644
--- a/doc/mod/notification-email.md
+++ b/doc/mod/notification-email.md
@@ -4,7 +4,7 @@ Send notifications via e-mail
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-ntfy.md b/doc/mod/notification-ntfy.md
index a3fdf881..afa31090 100644
--- a/doc/mod/notification-ntfy.md
+++ b/doc/mod/notification-ntfy.md
@@ -4,7 +4,7 @@ Send notifications via Ntfy
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/scriptrunonce.md b/doc/mod/scriptrunonce.md
index 6619efba..c5fa8915 100644
--- a/doc/mod/scriptrunonce.md
+++ b/doc/mod/scriptrunonce.md
@@ -4,7 +4,7 @@ Download script and run it once
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/ssh-keys-import.md b/doc/mod/ssh-keys-import.md
index 3d815663..db8e3229 100644
--- a/doc/mod/ssh-keys-import.md
+++ b/doc/mod/ssh-keys-import.md
@@ -4,7 +4,7 @@ Import ssh keys for public key authentication
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mode-button.md b/doc/mode-button.md
index 22ec215d..87343521 100644
--- a/doc/mode-button.md
+++ b/doc/mode-button.md
@@ -4,7 +4,7 @@ Mode button with multiple presses
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index e00ccd09..443106ff 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -4,7 +4,7 @@ Manage DNS and DoH servers from netwatch
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index 806bb3af..90cd830a 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -4,7 +4,7 @@ Notify on host up and down
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ospf-to-leds.md b/doc/ospf-to-leds.md
index a7d4e9a1..121f77bd 100644
--- a/doc/ospf-to-leds.md
+++ b/doc/ospf-to-leds.md
@@ -4,7 +4,7 @@ Visualize OSPF state via LEDs
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ppp-on-up.md b/doc/ppp-on-up.md
index 418f05ef..21847c76 100644
--- a/doc/ppp-on-up.md
+++ b/doc/ppp-on-up.md
@@ -4,7 +4,7 @@ Run scripts on ppp connection
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/sms-action.md b/doc/sms-action.md
index 18ca574d..b4678af7 100644
--- a/doc/sms-action.md
+++ b/doc/sms-action.md
@@ -4,7 +4,7 @@ Act on received SMS
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/sms-forward.md b/doc/sms-forward.md
index 2fe94865..597410bf 100644
--- a/doc/sms-forward.md
+++ b/doc/sms-forward.md
@@ -4,7 +4,7 @@ Forward received SMS
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/super-mario-theme.md b/doc/super-mario-theme.md
index ec59b394..e4bae2e6 100644
--- a/doc/super-mario-theme.md
+++ b/doc/super-mario-theme.md
@@ -4,7 +4,7 @@ Play Super Mario theme
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/unattended-lte-firmware-upgrade.md b/doc/unattended-lte-firmware-upgrade.md
index a6bf994d..66804477 100644
--- a/doc/unattended-lte-firmware-upgrade.md
+++ b/doc/unattended-lte-firmware-upgrade.md
@@ -4,7 +4,7 @@ Install LTE firmware upgrade
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/update-gre-address.md b/doc/update-gre-address.md
index fba2a653..80902b96 100644
--- a/doc/update-gre-address.md
+++ b/doc/update-gre-address.md
@@ -4,7 +4,7 @@ Update GRE configuration with dynamic addresses
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/update-tunnelbroker.md b/doc/update-tunnelbroker.md
index 5aca5816..2539e2f5 100644
--- a/doc/update-tunnelbroker.md
+++ b/doc/update-tunnelbroker.md
@@ -4,7 +4,7 @@ Update tunnelbroker configuration
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.12-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index 038f74ea..169a2e09 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2022-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # install firmware upgrade, and reboot
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/firmware-upgrade-reboot.md
diff --git a/global-wait.rsc b/global-wait.rsc
index f8c767bc..239f5750 100644
--- a/global-wait.rsc
+++ b/global-wait.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # wait for global-functions to finish
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/global-wait.md
diff --git a/gps-track.rsc b/gps-track.rsc
index 1aeab843..dbca38a9 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # track gps data by sending json data to http server
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/gps-track.md
diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 0540ad5c..8f55d717 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # manage and clean up private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 6f3b3e1e..7ac996c0 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # manage and clean up private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 9c796287..39c9f25f 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # manage and clean up private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index 37c84644..113c95d1 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # add private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index cbce42a5..10f0c7e4 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # add private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index 86aeed78..dbf50e0c 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # add private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index dd40ca23..8894eeee 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # and add/remove/update DNS entries from IPSec mode-config
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/ipsec-to-dns.md
diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index 65bb9595..ec9a03a5 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update firewall and dns settings on IPv6 prefix change
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/ipv6-update.md
diff --git a/lease-script.rsc b/lease-script.rsc
index 8e1e8f64..a9d4b681 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # run scripts on DHCP lease
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/lease-script.md
diff --git a/log-forward.rsc b/log-forward.rsc
index a919d8f2..7abcb4dd 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # forward log messages via notification
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/log-forward.md
diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index 567a7623..000532a5 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -3,6 +3,8 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
+# requires RouterOS, version=7.13
+#
 # reset bridge ports to default bridge
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/bridge-port-to.md
 
diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index aee5ef9b..760e8a68 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -3,6 +3,8 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
+# requires RouterOS, version=7.13
+#
 # manage VLANs on bridge ports
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/bridge-port-vlan.md
 
diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index 577abf33..5adca0a0 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -3,6 +3,8 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
+# requires RouterOS, version=7.13
+#
 # inspect variables
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/inspectvar.md
 
diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index b098b445..128ca54c 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -3,6 +3,8 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
+# requires RouterOS, version=7.13
+#
 # ip address calculation
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/ipcalc.md
 
diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 0d83d698..dbd648b0 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # send notifications via e-mail
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-email.md
diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 6d48a59a..5da575a9 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -3,6 +3,8 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
+# requires RouterOS, version=7.13
+#
 # send notifications via Ntfy (ntfy.sh)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-ntfy.md
 
diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 85d465a7..c3972a0b 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -3,6 +3,8 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
+# requires RouterOS, version=7.13
+#
 # download script and run it once
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/scriptrunonce.md
 
diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 6716958a..f37c28bb 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # import ssh keys for public key authentication
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/ssh-keys-import.md
diff --git a/mode-button.rsc b/mode-button.rsc
index f453f11f..4994f6bd 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # act on multiple mode and reset button presses
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mode-button.md
diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 50c2b4c0..09365bac 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2022-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # monitor and manage dns/doh with netwatch
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/netwatch-dns.md
diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index bdabe2ec..0b6c366c 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # monitor netwatch and send notifications
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/netwatch-notify.md
diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index a22e5a5f..09328153 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # visualize ospf instance state via leds
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/ospf-to-leds.md
diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index 61766c08..4ed92c5f 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # run scripts on ppp up
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/ppp-on-up.md
diff --git a/sms-action.rsc b/sms-action.rsc
index 4c37565b..70bfb284 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # run action on received SMS
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/sms-action.md
diff --git a/sms-forward.rsc b/sms-forward.rsc
index b0966c3b..477d11e2 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -4,7 +4,7 @@
 #                         Anatoly Bubenkov <bubenkoff@gmail.com>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # forward SMS to e-mail
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/sms-forward.md
diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 74967cdf..76d0c819 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update gre interface remote address with dynamic address from
 # ipsec remote peer
diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index c76b7eca..364dc086 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -5,7 +5,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: ppp-on-up
-# requires RouterOS, version=7.12
+# requires RouterOS, version=7.13
 #
 # update local address of tunnelbroker interface
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/update-tunnelbroker.md

From 36cf4d028bcf9597143249aed238dc5e131fda50 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 18 Mar 2024 10:30:32 +0100
Subject: [PATCH 111/988] global-functions: drop $LogPrintExit2

---
 global-functions.rsc | 22 ----------------------
 1 file changed, 22 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ab8860fe..c8fec8dd 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -50,7 +50,6 @@
 :global IsMacLocallyAdministered;
 :global IsTimeSync;
 :global LogPrint;
-:global LogPrintExit2;
 :global LogPrintOnce;
 :global MAX;
 :global MIN;
@@ -744,27 +743,6 @@
   }
 }
 
-# log and print with same text, optionally exit
-# Deprectated! - TODO: remove later
-:set LogPrintExit2 do={
-  :local Severity [ :tostr $1 ];
-  :local Name     [ :tostr $2 ];
-  :local Message  [ :tostr $3 ];
-  :local Exit     [ :tostr $4 ];
-
-  :global LogPrint;
-  :global LogPrintOnce;
-
-  $LogPrintOnce warning $0 \
-    ("This function is deprecated and will be removed. Please make your adjustments!");
-
-  $LogPrint $1 $2 $3;
-
-  :if ($Exit = "true") do={
-    :error ("Hard error to exit.");
-  }
-}
-
 # log and print, once until reboot
 :set LogPrintOnce do={
   :local Severity [ :tostr $1 ];

From 3015743b19883d2e19605b819fd2bbcbc6597d8f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 7 Apr 2024 21:11:03 +0200
Subject: [PATCH 112/988] global-functions: $HumanReadableNum: indicate binary
 base...

... and update scripts to match the change.
---
 backup-cloud.rsc     | 2 +-
 backup-upload.rsc    | 2 +-
 check-health.rsc     | 6 +++---
 global-functions.rsc | 8 ++++++--
 4 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 9a062f27..8e29c677 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -71,7 +71,7 @@
       message=("Uploaded backup for " . $Identity . " to cloud.\n\n" . \
         [ $DeviceInfo ] . "\n\n" . \
         [ $FormatLine "Name" ($Cloud->"name") ] . "\n" . \
-        [ $FormatLine "Size" ([ $HumanReadableNum ($Cloud->"size") 1024 ] . "iB") ] . "\n" . \
+        [ $FormatLine "Size" ([ $HumanReadableNum ($Cloud->"size") 1024 ] . "B") ] . "\n" . \
         [ $FormatLine "Download key" ($Cloud->"secret-download-key") ]); silent=true });
   } else={
     $SendNotification2 ({ origin=$ScriptName; \
diff --git a/backup-upload.rsc b/backup-upload.rsc
index 18223bba..63e5b7f3 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -140,7 +140,7 @@
     :return \
       [ $IfThenElse ([ :typeof $File ] = "array") \
         ($Name . ":\n" . [ $FormatLine "    name" ($File->"name") ] . "\n" . \
-          [ $FormatLine "    size" ([ $HumanReadableNum ($File->"size") 1024 ] . "iB") ]) \
+          [ $FormatLine "    size" ([ $HumanReadableNum ($File->"size") 1024 ] . "B") ]) \
         [ $FormatLine $Name $File ] ];
   }
 
diff --git a/check-health.rsc b/check-health.rsc
index 1e8fcc08..a769fa89 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -64,9 +64,9 @@
     $SendNotification2 ({ origin=$ScriptName; \
       subject=([ $SymbolForNotification "card-file-box,chart-increasing" ] . "Health warning: RAM utilization"); \
       message=("The RAM utilization on " . $Identity . " is at " . $CheckHealthRAMUtilization . "%!\n\n" . \
-      [ $FormatLine "total" ([ $HumanReadableNum ($Resource->"total-memory") 1024 ] . "iB") 8 ] . "\n" . \
-      [ $FormatLine "used" ([ $HumanReadableNum ($Resource->"total-memory" - $Resource->"free-memory") 1024 ] . "iB") 8 ] . "\n" . \
-      [ $FormatLine "free" ([ $HumanReadableNum ($Resource->"free-memory") 1024 ] . "iB") 8 ]) });
+      [ $FormatLine "total" ([ $HumanReadableNum ($Resource->"total-memory") 1024 ] . "B") 8 ] . "\n" . \
+      [ $FormatLine "used" ([ $HumanReadableNum ($Resource->"total-memory" - $Resource->"free-memory") 1024 ] . "B") 8 ] . "\n" . \
+      [ $FormatLine "free" ([ $HumanReadableNum ($Resource->"free-memory") 1024 ] . "B") 8 ]) });
     :set CheckHealthRAMUtilizationNotified true;
   }
   :if ($CheckHealthRAMUtilization < 70 && $CheckHealthRAMUtilizationNotified = true) do={
diff --git a/global-functions.rsc b/global-functions.rsc
index c8fec8dd..aa39118f 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -578,11 +578,13 @@
   :local Base  [ :tonum $2 ];
 
   :global EitherOr;
+  :global IfThenElse;
 
   :local Prefix "kMGTPE";
   :local Pow 1;
 
   :set Base [ $EitherOr $Base 1024 ];
+  :local Bin [ $IfThenElse ($Base = 1024) "i" "" ];
 
   :if ($Input < $Base) do={
     :return $Input;
@@ -595,9 +597,11 @@
       :local Tmp1 ($Input * 100 / $Pow);
       :local Tmp2 ($Tmp1 / 100);
       :if ($Tmp2 >= 100) do={
-        :return ($Tmp2 . $Prefix);
+        :return ($Tmp2 . $Prefix . $Bin);
       }
-      :return ($Tmp2 . "." . [ :pick $Tmp1 [ :len $Tmp2 ] ([ :len $Tmp1 ] - [ :len $Tmp2 ] + 1) ] . $Prefix);
+      :return ($Tmp2 . "." . \
+          [ :pick $Tmp1 [ :len $Tmp2 ] ([ :len $Tmp1 ] - [ :len $Tmp2 ] + 1) ] . \
+          $Prefix . $Bin);
     }
   }
 }

From c5a5fb58363805efb824fb3336e95a1f6bf3dbb8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 10 Apr 2024 08:27:55 +0200
Subject: [PATCH 113/988] global-functions: $SendNotification: set origin

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index aa39118f..c98a0120 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1299,7 +1299,7 @@
 :set SendNotification do={
   :global SendNotification2;
 
-  $SendNotification2 ({ subject=$1; message=$2; link=$3; silent=$4 });
+  $SendNotification2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
 }
 
 # send notification via NotificationFunctions - expects one array argument

From 012d259ca1421e31390358cb6749fda80ef4e3ab Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 9 Apr 2024 23:59:00 +0200
Subject: [PATCH 114/988] mod/notification-email: $SendEMail: set origin

---
 mod/notification-email.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index dbd648b0..df2e81af 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -227,7 +227,7 @@
 :set SendEMail do={
   :global SendEMail2;
 
-  $SendEMail2 ({ subject=$1; message=$2; link=$3 });
+  $SendEMail2 ({ origin=$0; subject=$1; message=$2; link=$3 });
 }
 
 # send notification via e-mail - expects one array argument

From a9b9f853ffb6b6a9b331f055d47463654bd2a5e2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 9 Apr 2024 23:58:29 +0200
Subject: [PATCH 115/988] mod/notification-matrix: $SendMatrix: set origin

---
 mod/notification-matrix.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 5a081466..477bb099 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -168,7 +168,7 @@
 :set SendMatrix do={
   :global SendMatrix2;
 
-  $SendMatrix2 ({ subject=$1; message=$2; link=$3 });
+  $SendMatrix2 ({ origin=$0; subject=$1; message=$2; link=$3 });
 }
 
 # send notification via Matrix - expects one array argument

From 9e2b72ccdc59bc6abc936bf271d9bfaf2a986107 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 9 Apr 2024 23:56:36 +0200
Subject: [PATCH 116/988] mod/notification-ntfy: $SendNtfy: set origin

---
 mod/notification-ntfy.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 5da575a9..dc03903b 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -125,7 +125,7 @@
 :set SendNtfy do={
   :global SendNtfy2;
 
-  $SendNtfy2 ({ subject=$1; message=$2; link=$3; silent=$4 });
+  $SendNtfy2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
 }
 
 # send notification via ntfy - expects one array argument

From 9e4749a5b71e97c7732639019cff6ba7f6e84d57 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 9 Apr 2024 23:57:40 +0200
Subject: [PATCH 117/988] mod/notification-telegram: $SendTelegram: set origin

---
 mod/notification-telegram.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index a43ff10d..c78a8ad1 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -175,7 +175,7 @@
 :set SendTelegram do={
   :global SendTelegram2;
 
-  $SendTelegram2 ({ subject=$1; message=$2; link=$3; silent=$4 });
+  $SendTelegram2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
 }
 
 # send notification via telegram - expects one array argument

From e53c31e9e669738fa50e45387d88d97a934f7e4d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Apr 2024 13:39:40 +0200
Subject: [PATCH 118/988] global-functions: $ScriptLock: degrade message to
 debug

---
 global-functions.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index c98a0120..ded34c37 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1290,8 +1290,8 @@
   }
 
   $RemoveTicket $Script $MyTicket;
-  $LogPrint info $0 ("Script '" . $Script . "' started more than once" . [ $IfThenElse ($WaitCount > 0) \
-    " and timed out waiting for lock" "" ] . "...");
+  $LogPrint debug $0 ("Script '" . $Script . "' started more than once" . \
+    [ $IfThenElse ($WaitCount > 0) " and timed out waiting for lock" "" ] . "...");
   :return false;
 }
 

From 6db3355858157aceb92af47faa7937008d9cbf28 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Apr 2024 13:40:55 +0200
Subject: [PATCH 119/988] global-functions: $ScriptLock: break long lines

---
 global-functions.rsc | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ded34c37..25c248d2 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1278,12 +1278,15 @@
   $AddTicket $Script $MyTicket;
 
   :local WaitCount 0;
-  :while ($WaitMax > $WaitCount && ([ $IsFirstTicket $Script $MyTicket ] = false || [ $TicketCount $Script ] < [ $JobCount $Script ])) do={
+  :while ($WaitMax > $WaitCount && \
+      ([ $IsFirstTicket $Script $MyTicket ] = false || \
+      [ $TicketCount $Script ] < [ $JobCount $Script ])) do={
     :set WaitCount ($WaitCount + 1);
     :delay 100ms;
   }
 
-  :if ([ $IsFirstTicket $Script $MyTicket ] = true && [ $TicketCount $Script ] = [ $JobCount $Script ]) do={
+  :if ([ $IsFirstTicket $Script $MyTicket ] = true && \
+      [ $TicketCount $Script ] = [ $JobCount $Script ]) do={
     $RemoveTicket $Script $MyTicket;
     $CleanupTickets $Script;
     :return true;

From 5f76c245b016125f9e56d45bef381bae38731491 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Apr 2024 13:57:11 +0200
Subject: [PATCH 120/988] global-functions: $ScriptFromTerminal: check multiple
 invocations...

... and return false.

We can not tell which job is us... So better safe than sorry.
---
 global-functions.rsc | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 25c248d2..abb9e22b 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -931,6 +931,11 @@
   :local Script [ :tostr $1 ];
 
   :global LogPrint;
+  :global ScriptLock;
+
+  :if ([ $ScriptLock $Script ] = false) do={
+    :return false;
+  }
 
   :foreach Job in=[ /system/script/job/find where script=$Script ] do={
     :set Job [ /system/script/job/get $Job ];
@@ -942,8 +947,8 @@
       :return true;
     }
   }
-  $LogPrint debug $0 ("Script " . $Script . " NOT started from terminal.");
 
+  $LogPrint debug $0 ("Script " . $Script . " NOT started from terminal.");
   :return false;
 }
 

From ca2e5f2a017c20f272419c5539b7c234a02f45a4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 9 Apr 2024 23:46:32 +0200
Subject: [PATCH 121/988] mod/notification-ntfy: support basic auth

Closes #59
---
 doc/mod/notification-ntfy.md |  5 +++++
 global-config.rsc            |  2 ++
 global-functions.rsc         |  2 +-
 mod/notification-ntfy.rsc    | 14 +++++++++++---
 news-and-changes.rsc         |  1 +
 5 files changed, 20 insertions(+), 4 deletions(-)

diff --git a/doc/mod/notification-ntfy.md b/doc/mod/notification-ntfy.md
index afa31090..b2330a5b 100644
--- a/doc/mod/notification-ntfy.md
+++ b/doc/mod/notification-ntfy.md
@@ -47,6 +47,11 @@ Then reload the configuration.
 > [`global-config`](../../global-config.rsc) (the one without `-overlay`) to
 > your local `global-config-overlay` and modify it to your specific needs.
 
+Using a paid account or running a server on-premises allows to add additional
+basic authentication. Configure `NtfyServerUser` and `NtfyServerPass` for this.
+Even authentication via access token is possible, adding it as password with
+a blank username.
+
 Usage and invocation
 --------------------
 
diff --git a/global-config.rsc b/global-config.rsc
index f393abb4..6a37c0c0 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -56,6 +56,8 @@
 # install the module:
 # $ScriptInstallUpdate mod/notification-ntfy
 :global NtfyServer "ntfy.sh";
+:global NtfyServerUser [];
+:global NtfyServerPass [];
 :global NtfyTopic "";
 
 # It is possible to override e-mail, Telegram, Matrix and Ntfy setting
diff --git a/global-functions.rsc b/global-functions.rsc
index abb9e22b..8f2f179a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 126;
+:global ExpectedConfigVersion 127;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index dc03903b..ffe0c509 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -38,7 +38,8 @@
     :if ([ :typeof $Message ] = "array" ) do={
       :do {
         /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
-          ($Message->"url") http-header-field=($Message->"headers") http-data=($Message->"text") as-value;
+          http-header-field=($Message->"headers") http-data=($Message->"text") \
+          ($Message->"url") user=($Message->"user") password=($Message->"pass") as-value;
         :set ($NtfyQueue->$Id);
       } on-error={
         $LogPrint debug $0 ("Sending queued Ntfy message failed.");
@@ -62,6 +63,10 @@
   :global NtfyQueue;
   :global NtfyServer;
   :global NtfyServerOverride;
+  :global NtfyServerPass;
+  :global NtfyServerPassOverride;
+  :global NtfyServerUser;
+  :global NtfyServerUserOverride;
   :global NtfyTopic;
   :global NtfyTopicOverride;
 
@@ -73,6 +78,8 @@
   :global UrlEncode;
 
   :local Server [ $EitherOr ($NtfyServerOverride->($Notification->"origin")) $NtfyServer ];
+  :local User [ $EitherOr ($NtfyServerUserOverride->($Notification->"origin")) $NtfyServerUser ];
+  :local Pass [ $EitherOr ($NtfyServerPassOverride->($Notification->"origin")) $NtfyServerPass ];
   :local Topic [ $EitherOr ($NtfyTopicOverride->($Notification->"origin")) $NtfyTopic ];
 
   :if ([ :len $Topic ] = 0) do={
@@ -95,7 +102,7 @@
       }
     }
     /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
-      $Url http-header-field=$Headers http-data=$Text as-value;
+      http-header-field=$Headers http-data=$Text $Url user=$User password=$Pass as-value;
   } on-error={
     $LogPrint info $0 ("Failed sending ntfy notification! Queuing...");
 
@@ -105,7 +112,8 @@
     :set Text ($Text . "\n" . [ $SymbolForNotification "alarm-clock" ] . \
       "This message was queued since " . [ /system/clock/get date ] . " " . \
       [ /system/clock/get time ] . " and may be obsolete.");
-    :set ($NtfyQueue->[ :len $NtfyQueue ]) { url=$Url; headers=$Headers; text=$Text };
+    :set ($NtfyQueue->[ :len $NtfyQueue ]) \
+      { url=$Url; user=$User; pass=$Pass; headers=$Headers; text=$Text };
     :if ([ :len [ /system/scheduler/find where name="_FlushNtfyQueue" ] ] = 0) do={
       /system/scheduler/add name="_FlushNtfyQueue" interval=1m start-time=startup \
         on-event=(":global FlushNtfyQueue; \$FlushNtfyQueue;");
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 2b04c29d..8ddeb913 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -51,6 +51,7 @@
   124="Added support for links in 'netwatch-notify', these are added below the formatted notification text.";
   125=("April's Fool! " . [ $SymbolForNotification "smiley-partying-face" ] . "Well, you missed it... - no charge nor fees. (Anyway... Donations are much appreciated, " . [ $SymbolForNotification "smiley-smiling-face" ] . "thanks!)");
   126="Made 'telegram-chat' capable of handling large command output. Telegram messages still limit the size, so it is truncated now.";
+  127="Added support for authentication to Ntfy notification module.";
 };
 
 # Migration steps to be applied on script updates

From fb865ba114e610bcb272d8de7c1c882705e6e06e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 9 Apr 2024 23:50:00 +0200
Subject: [PATCH 122/988] mod/notification-ntfy: use custom user agent string

---
 mod/notification-ntfy.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index ffe0c509..4413f07d 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -72,6 +72,7 @@
 
   :global CertificateAvailable;
   :global EitherOr;
+  :global FetchUserAgentStr;
   :global IfThenElse;
   :global LogPrint;
   :global SymbolForNotification;
@@ -87,7 +88,8 @@
   }
 
   :local Url ("https://" . $NtfyServer . "/" . [ $UrlEncode $NtfyTopic ]);
-  :local Headers ({ ("Priority: " . [ $IfThenElse ($Notification->"silent") "low" "default" ]); \
+  :local Headers ({ [ $FetchUserAgentStr ($Notification->"origin") ]; \
+    ("Priority: " . [ $IfThenElse ($Notification->"silent") "low" "default" ]); \
     ("Title: " . "[" . $IdentityExtra . $Identity . "] " . ($Notification->"subject")) });
   :local Text (($Notification->"message") . "\n");
   :if ([ :len ($Notification->"link") ] > 0) do={

From 9dfa11eac534019d08a5cfa289d7cde0f22c2a92 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 10 Apr 2024 11:51:47 +0200
Subject: [PATCH 123/988] mod/notification-matrix: use custom user agent string

---
 mod/notification-matrix.rsc | 22 +++++++++++++++-------
 1 file changed, 15 insertions(+), 7 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 477bb099..12a0e335 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -39,7 +39,8 @@
   :foreach Id,Message in=$MatrixQueue do={
     :if ([ :typeof $Message ] = "array" ) do={
       :do {
-        /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
+        /tool/fetch check-certificate=yes-without-crl output=none \
+          http-header-field=($Message->"headers") http-method=post \
           ("https://" . $Message->"homeserver" . "/_matrix/client/r0/rooms/" . $Message->"room" . \
            "/send/m.room.message?access_token=" . $Message->"accesstoken") \
           http-data=("{ \"msgtype\": \"m.text\", \"body\": \"" . $Message->"plain" . "\"," . \
@@ -74,6 +75,7 @@
   :global MatrixRoomOverride;
 
   :global EitherOr;
+  :global FetchUserAgentStr;
   :global LogPrint;
   :global SymbolForNotification;
 
@@ -115,6 +117,7 @@
     :return false;
   }
 
+  :local Headers ({ [ $FetchUserAgentStr ($Notification->"origin") ] });
   :local Plain [ $PrepareText ("## [" . $IdentityExtra . $Identity . "] " . \
     ($Notification->"subject") . "\n```\n" . ($Notification->"message") . "\n```") "plain" ];
   :local Formatted ("<h2>" . [ $PrepareText ("[" . $IdentityExtra . $Identity . "] " . \
@@ -129,7 +132,8 @@
   }
 
   :do {
-    /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
+    /tool/fetch check-certificate=yes-without-crl output=none \
+      http-header-field=$Headers http-method=post \
       ("https://" . $HomeServer . "/_matrix/client/r0/rooms/" . $Room . \
        "/send/m.room.message?access_token=" . $AccessToken) \
       http-data=("{ \"msgtype\": \"m.text\", \"body\": \"" . $Plain . "\"," . \
@@ -146,9 +150,9 @@
       " " . [ /system/clock/get time ] . " and may be obsolete.");
     :set Plain ($Plain . "\\n" . $Text);
     :set Formatted ($Formatted . "<br/>" . $Text);
-    :set ($MatrixQueue->[ :len $MatrixQueue ]) { room=$Room; \
-      accesstoken=$AccessToken; homeserver=$HomeServer; \
-      plain=$Plain; formatted=$Formatted };
+    :set ($MatrixQueue->[ :len $MatrixQueue ]) { headers=$Headers; \
+        accesstoken=$AccessToken; homeserver=$HomeServer; room=$Room; \
+        plain=$Plain; formatted=$Formatted };
     :if ([ :len [ /system/scheduler/find where name="_FlushMatrixQueue" ] ] = 0) do={
       /system/scheduler/add name="_FlushMatrixQueue" interval=1m start-time=startup \
         on-event=(":global FlushMatrixQueue; \$FlushMatrixQueue;");
@@ -185,6 +189,7 @@
   :local User [ :tostr $1 ];
   :local Pass [ :tostr $2 ];
 
+  :global FetchUserAgentStr;
   :global LogPrint;
 
   :global MatrixAccessToken;
@@ -193,6 +198,7 @@
   :local Domain [ :pick $User ([ :find $User ":" ] + 1) [ :len $User] ];
   :do {
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
+        http-header-field=({ [ $FetchUserAgentStr $0 ] }) \
         ("https://" . $Domain . "/.well-known/matrix/client") as-value ]->"data");
     :set MatrixHomeServer ([ :deserialize from=json value=$Data ]->"m.homeserver"->"base_url");
     $LogPrint debug $0 ("Home server is: " . $MatrixHomeServer);
@@ -207,7 +213,8 @@
 
   :do {
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
-        http-method=post http-data=("{\"type\":\"m.login.password\", \"user\":\"" . $User . "\", \"password\":\"" . $Pass . "\"}") \
+        http-header-field=({ [ $FetchUserAgentStr $0 ] }) http-method=post \
+        http-data=("{\"type\":\"m.login.password\", \"user\":\"" . $User . "\", \"password\":\"" . $Pass . "\"}") \
         ("https://" . $MatrixHomeServer . "/_matrix/client/r0/login") as-value ]->"data");
     :set MatrixAccessToken ([ :deserialize from=json value=$Data ]->"access_token");
     $LogPrint debug $0 ("Access token is: " . $MatrixAccessToken);
@@ -233,6 +240,7 @@
 :set SetupMatrixJoinRoom do={
   :global MatrixRoom [ :tostr $1 ];
 
+  :global FetchUserAgentStr;
   :global LogPrint;
   :global UrlEncode;
 
@@ -242,7 +250,7 @@
 
   :do {
     /tool/fetch check-certificate=yes-without-crl output=none \
-        http-method=post http-data="" \
+        http-header-field=({ [ $FetchUserAgentStr $0 ] }) http-method=post http-data="" \
         ("https://" . $MatrixHomeServer . "/_matrix/client/r0/rooms/" . [ $UrlEncode $MatrixRoom ] . \
         "/join?access_token=" . [ $UrlEncode $MatrixAccessToken ]) as-value;
     $LogPrint debug $0 ("Joined the room.");

From 2a232ad2f5eef4b60c97306ef731bc5883bf5cfb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 12 Apr 2024 11:03:14 +0200
Subject: [PATCH 124/988] mod/notification-matrix: generate JSON with
 :serialize

---
 mod/notification-matrix.rsc | 24 +++++++++++-------------
 1 file changed, 11 insertions(+), 13 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 12a0e335..3e3a33ee 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -40,12 +40,11 @@
     :if ([ :typeof $Message ] = "array" ) do={
       :do {
         /tool/fetch check-certificate=yes-without-crl output=none \
-          http-header-field=($Message->"headers") http-method=post \
-          ("https://" . $Message->"homeserver" . "/_matrix/client/r0/rooms/" . $Message->"room" . \
-           "/send/m.room.message?access_token=" . $Message->"accesstoken") \
-          http-data=("{ \"msgtype\": \"m.text\", \"body\": \"" . $Message->"plain" . "\"," . \
-           "\"format\": \"org.matrix.custom.html\", \"formatted_body\": \"" . \
-           $Message->"formatted" . "\" }") as-value;
+            http-header-field=($Message->"headers") http-method=post \
+            http-data=[ :serialize to=json { "msgtype"="m.text"; "body"=($Message->"plain");
+            "format"="org.matrix.custom.html"; "formatted_body"=($Message->"formatted") } ] \
+            ("https://" . $Message->"homeserver" . "/_matrix/client/r0/rooms/" . $Message->"room" . \
+            "/send/m.room.message?access_token=" . $Message->"accesstoken") as-value;
         :set ($MatrixQueue->$Id);
       } on-error={
         $LogPrint debug $0 ("Sending queued Matrix message failed.");
@@ -133,12 +132,11 @@
 
   :do {
     /tool/fetch check-certificate=yes-without-crl output=none \
-      http-header-field=$Headers http-method=post \
-      ("https://" . $HomeServer . "/_matrix/client/r0/rooms/" . $Room . \
-       "/send/m.room.message?access_token=" . $AccessToken) \
-      http-data=("{ \"msgtype\": \"m.text\", \"body\": \"" . $Plain . "\"," . \
-       "\"format\": \"org.matrix.custom.html\", \"formatted_body\": \"" . \
-       $Formatted . "\" }") as-value;
+        http-header-field=$Headers http-method=post \
+        http-data=[ :serialize to=json { "msgtype"="m.text"; "body"=$Plain;
+        "format"="org.matrix.custom.html"; "formatted_body"=$Formatted } ] \
+        ("https://" . $HomeServer . "/_matrix/client/r0/rooms/" . $Room . \
+        "/send/m.room.message?access_token=" . $AccessToken) as-value;
   } on-error={
     $LogPrint info $0 ("Failed sending Matrix notification! Queuing...");
 
@@ -214,7 +212,7 @@
   :do {
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
         http-header-field=({ [ $FetchUserAgentStr $0 ] }) http-method=post \
-        http-data=("{\"type\":\"m.login.password\", \"user\":\"" . $User . "\", \"password\":\"" . $Pass . "\"}") \
+        http-data=[ :serialize to=json { "type"="m.login.password"; "user"=$User; "password"=$Pass } ] \
         ("https://" . $MatrixHomeServer . "/_matrix/client/r0/login") as-value ]->"data");
     :set MatrixAccessToken ([ :deserialize from=json value=$Data ]->"access_token");
     $LogPrint debug $0 ("Access token is: " . $MatrixAccessToken);

From d31afc9ec330634a2b66b346ee2d830ea5e5d436 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 12 Apr 2024 11:10:34 +0200
Subject: [PATCH 125/988] gps-track: generate JSON with :serialize

---
 gps-track.rsc | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/gps-track.rsc b/gps-track.rsc
index dbca38a9..f78dfe7d 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -33,11 +33,8 @@
     :do {
       /tool/fetch check-certificate=yes-without-crl $GpsTrackUrl output=none \
         http-method=post http-header-field=({ "Content-Type: application/json" }) \
-        http-data=("{" . \
-          "\"lat\":\"" . ($Gps->"latitude") . "\"," . \
-          "\"lon\":\"" . ($Gps->"longitude") . "\"," . \
-          "\"identity\":\"" . $Identity . "\"" . \
-        "}") as-value;
+        http-data=[ :serialize to=json { "identity"=$Identity; \
+        "lat"=($Gps->"latitude"); "lon"=($Gps->"longitude") } ] as-value;
       $LogPrint debug $ScriptName ("Sending GPS data in " . $CoordinateFormat . " format: " . \
         "lat: " . ($Gps->"latitude") . " " . \
         "lon: " . ($Gps->"longitude"));

From 5736ecebc53a8e97e986eb50e4a1611b410dcc14 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 12 Apr 2024 11:14:01 +0200
Subject: [PATCH 126/988] gps-track: use custom user agent string

---
 gps-track.rsc | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/gps-track.rsc b/gps-track.rsc
index f78dfe7d..e2a4e16e 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -17,6 +17,7 @@
   :global GpsTrackUrl;
   :global Identity;
 
+  :global FetchUserAgentStr;
   :global LogPrint;
   :global ScriptLock;
   :global WaitFullyConnected;
@@ -31,10 +32,10 @@
 
   :if ($Gps->"valid" = true) do={
     :do {
-      /tool/fetch check-certificate=yes-without-crl $GpsTrackUrl output=none \
-        http-method=post http-header-field=({ "Content-Type: application/json" }) \
+      /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
+        http-header-field=({ [ $FetchUserAgentStr $ScriptName ]; "Content-Type: application/json" }) \
         http-data=[ :serialize to=json { "identity"=$Identity; \
-        "lat"=($Gps->"latitude"); "lon"=($Gps->"longitude") } ] as-value;
+        "lat"=($Gps->"latitude"); "lon"=($Gps->"longitude") } ] $GpsTrackUrl as-value;
       $LogPrint debug $ScriptName ("Sending GPS data in " . $CoordinateFormat . " format: " . \
         "lat: " . ($Gps->"latitude") . " " . \
         "lon: " . ($Gps->"longitude"));

From 7aa5059f6d478fb8984caae7c906154a1d598488 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 12 Apr 2024 11:18:42 +0200
Subject: [PATCH 127/988] global-functions: $CertificateAvailable: use single
 quotes

---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 8f2f179a..17aa38fe 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -107,7 +107,7 @@
   }
 
   :if ([ :len [ /certificate/find where common-name=$CommonName ] ] = 0) do={
-    $LogPrint info $0 ("Certificate with CommonName \"" . $CommonName . "\" not available.");
+    $LogPrint info $0 ("Certificate with CommonName '" . $CommonName . "' not available.");
     :if ([ $CertificateDownload $CommonName ] = false) do={
       :return false;
     }
@@ -116,8 +116,8 @@
   :local CertVal [ /certificate/get [ find where common-name=$CommonName ] ];
   :while (($CertVal->"akid") != "" && ($CertVal->"akid") != ($CertVal->"skid")) do={
     :if ([ :len [ /certificate/find where skid=($CertVal->"akid") ] ] = 0) do={
-      $LogPrint info $0 ("Certificate chain for \"" . $CommonName . \
-        "\" is incomplete, missing \"" . ([ $ParseKeyValueStore ($CertVal->"issuer") ]->"CN") . "\".");
+      $LogPrint info $0 ("Certificate chain for '" . $CommonName . \
+        "' is incomplete, missing '" . ([ $ParseKeyValueStore ($CertVal->"issuer") ]->"CN") . "'.");
       :if ([ $CertificateDownload $CommonName ] = false) do={
         :return false;
       }

From e1781fb8053db5cdb3b26d04009c216f7d2204ac Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 12 Apr 2024 11:19:37 +0200
Subject: [PATCH 128/988] global-functions: $CertificateDownload: use single
 quotes

---
 global-functions.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 17aa38fe..918ea9a3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -141,7 +141,7 @@
   :global WaitForFile;
 
   $LogPrint info $0 ("Downloading and importing certificate with " . \
-      "CommonName \"" . $CommonName . "\".");
+      "CommonName '" . $CommonName . "'.");
   :do {
     :local FileName ([ $CleanName $CommonName ] . ".pem");
     /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $0 ] }) \
@@ -156,7 +156,7 @@
       $CertificateNameByCN [ /certificate/get $Cert common-name ];
     }
   } on-error={
-    $LogPrint warning $0 ("Failed importing certificate with CommonName \"" . $CommonName . "\"!");
+    $LogPrint warning $0 ("Failed importing certificate with CommonName '" . $CommonName . "'!");
     :return false;
   }
   :return true;

From 8c1543a402570278a8dfdcf8d052ab8bb6f282e5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 12 Apr 2024 11:21:54 +0200
Subject: [PATCH 129/988] certificate-renew-issued: use single quotes

---
 certificate-renew-issued.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index 77ed3d05..7815443b 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -36,13 +36,13 @@
         /certificate/export-certificate ($CertVal->"name") type=pkcs12 \
             file-name=("cert-issued/" . $CertVal->"common-name") \
             export-passphrase=($CertIssuedExportPass->($CertVal->"common-name"));
-        $LogPrint info $ScriptName ("Issued a new certificate for \"" . $CertVal->"common-name" . \
-          "\", exported to \"cert-issued/" . $CertVal->"common-name" . ".p12\".");
+        $LogPrint info $ScriptName ("Issued a new certificate for '" . $CertVal->"common-name" . \
+          "', exported to 'cert-issued/" . $CertVal->"common-name" . ".p12'.");
       } else={
         $LogPrint warning $ScriptName ("Failed creating directory, not exporting certificate.");
       }
     } else={
-      $LogPrint info $ScriptName ("Issued a new certificate for \"" . $CertVal->"common-name" . "\".");
+      $LogPrint info $ScriptName ("Issued a new certificate for '" . $CertVal->"common-name" . "'.");
     }
   }
 } on-error={ }

From 3a36db6de8a69cba493bdd0baf86c60401fe971c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 18 Apr 2024 08:43:41 +0200
Subject: [PATCH 130/988] mod/notification-matrix: fix double escaping

That was introduced with 2a232ad2f5eef4b60c97306ef731bc5883bf5cfb when
switching to :serialize...
---
 mod/notification-matrix.rsc | 28 +++++++++++-----------------
 1 file changed, 11 insertions(+), 17 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 3e3a33ee..86e6b5fb 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -86,21 +86,15 @@
     }
 
     :local Return "";
-    :local Chars {
-      "plain"={ "\\"; "\""; "\n" };
-      "format"={ "\\"; "\""; "\n"; "&"; "<"; ">" };
-    }
-    :local Subs {
-      "plain"={ "\\\\"; "\\\""; "\\n" };
-      "format"={ "\\\\"; "&quot;"; "<br/>"; "&amp;"; "&lt;"; "&gt;" };
-    }
+    :local Chars { "\""; "\n"; "&"; "<"; ">" };
+    :local Subs { "&quot;"; "<br/>"; "&amp;"; "&lt;"; "&gt;" };
 
     :for I from=0 to=([ :len $Input ] - 1) do={
       :local Char [ :pick $Input $I ];
-      :local Replace [ :find ($Chars->$2) $Char ];
+      :local Replace [ :find $Chars $Char ];
 
       :if ([ :typeof $Replace ] = "num") do={
-        :set Char ($Subs->$2->$Replace);
+        :set Char ($Subs->$Replace);
       }
       :set Return ($Return . $Char);
     }
@@ -117,17 +111,17 @@
   }
 
   :local Headers ({ [ $FetchUserAgentStr ($Notification->"origin") ] });
-  :local Plain [ $PrepareText ("## [" . $IdentityExtra . $Identity . "] " . \
-    ($Notification->"subject") . "\n```\n" . ($Notification->"message") . "\n```") "plain" ];
+  :local Plain ("## [" . $IdentityExtra . $Identity . "] " . \
+    ($Notification->"subject") . "\n```\n" . ($Notification->"message") . "\n```");
   :local Formatted ("<h2>" . [ $PrepareText ("[" . $IdentityExtra . $Identity . "] " . \
-    ($Notification->"subject")) "format" ] . "</h2>" . "<pre><code>" . \
-    [ $PrepareText ($Notification->"message") "format" ] . "</code></pre>");
+    ($Notification->"subject")) ] . "</h2>" . "<pre><code>" . \
+    [ $PrepareText ($Notification->"message") ] . "</code></pre>");
   :if ([ :len ($Notification->"link") ] > 0) do={
     :set Plain ($Plain . "\\n" . [ $SymbolForNotification "link" ] . \
-      [ $PrepareText ("[" . $Notification->"link" . "](" . $Notification->"link" . ")") "plain" ]);
+      "[" . $Notification->"link" . "](" . $Notification->"link" . ")");
     :set Formatted ($Formatted . "<br/>" . [ $SymbolForNotification "link" ] . \
-      "<a href=\\\"" . [ $PrepareText ($Notification->"link") "format" ] . "\\\">" . \
-      [ $PrepareText ($Notification->"link") "format" ] . "</a>");
+      "<a href=\"" . [ $PrepareText ($Notification->"link") ] . "\">" . \
+      [ $PrepareText ($Notification->"link") ] . "</a>");
   }
 
   :do {

From b50a5b294a50729e70d96c65ed1a12657bd1adf3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 18 Apr 2024 21:47:50 +0200
Subject: [PATCH 131/988] mod/notification-matrix: ... and more double escaping

---
 mod/notification-matrix.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 86e6b5fb..7eae1b0e 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -117,7 +117,7 @@
     ($Notification->"subject")) ] . "</h2>" . "<pre><code>" . \
     [ $PrepareText ($Notification->"message") ] . "</code></pre>");
   :if ([ :len ($Notification->"link") ] > 0) do={
-    :set Plain ($Plain . "\\n" . [ $SymbolForNotification "link" ] . \
+    :set Plain ($Plain . "\n" . [ $SymbolForNotification "link" ] . \
       "[" . $Notification->"link" . "](" . $Notification->"link" . ")");
     :set Formatted ($Formatted . "<br/>" . [ $SymbolForNotification "link" ] . \
       "<a href=\"" . [ $PrepareText ($Notification->"link") ] . "\">" . \
@@ -140,7 +140,7 @@
     :local Text ([ $SymbolForNotification "alarm-clock" ] . \
       "This message was queued since " . [ /system/clock/get date ] . \
       " " . [ /system/clock/get time ] . " and may be obsolete.");
-    :set Plain ($Plain . "\\n" . $Text);
+    :set Plain ($Plain . "\n" . $Text);
     :set Formatted ($Formatted . "<br/>" . $Text);
     :set ($MatrixQueue->[ :len $MatrixQueue ]) { headers=$Headers; \
         accesstoken=$AccessToken; homeserver=$HomeServer; room=$Room; \

From 6fd0becf64184184642e719e288bc537a0bee499 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 19 Apr 2024 08:59:51 +0200
Subject: [PATCH 132/988] global-functions: introduce $ProtocolStrip

---
 global-functions.rsc | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 918ea9a3..3b9f27c0 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -58,6 +58,7 @@
 :global ParseDate;
 :global ParseKeyValueStore;
 :global PrettyPrint;
+:global ProtocolStrip;
 :global RandomDelay;
 :global RequiredRouterOS;
 :global ScriptFromTerminal;
@@ -885,6 +886,17 @@
   :put [ $Unix2Dos $Input ];
 }
 
+# strip protocol from from url string
+:set ProtocolStrip do={
+  :local Input [ :tostr $1 ];
+
+  :local Pos [ :find $Input "://" ];
+  :if ([ :typeof $Pos ] = "nil") do={
+    :return $Input;
+  }
+  :return [ :pick $Input ($Pos + 3) [ :len $Input ] ];
+}
+
 # delay a random amount of seconds
 :set RandomDelay do={
   :local Time [ :tonum $1 ];

From 8cd03167ca0bd47efd9b7c9b12aabebbe228b36c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 19 Apr 2024 09:04:08 +0200
Subject: [PATCH 133/988] mod/notification-matrix: string protocol for display

---
 mod/notification-matrix.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 7eae1b0e..9442f548 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -76,6 +76,7 @@
   :global EitherOr;
   :global FetchUserAgentStr;
   :global LogPrint;
+  :global ProtocolStrip;
   :global SymbolForNotification;
 
   :local PrepareText do={
@@ -117,11 +118,12 @@
     ($Notification->"subject")) ] . "</h2>" . "<pre><code>" . \
     [ $PrepareText ($Notification->"message") ] . "</code></pre>");
   :if ([ :len ($Notification->"link") ] > 0) do={
+    :local Label [ $ProtocolStrip ($Notification->"link") ];
     :set Plain ($Plain . "\n" . [ $SymbolForNotification "link" ] . \
-      "[" . $Notification->"link" . "](" . $Notification->"link" . ")");
+      "[" . $Label . "](" . $Notification->"link" . ")");
     :set Formatted ($Formatted . "<br/>" . [ $SymbolForNotification "link" ] . \
       "<a href=\"" . [ $PrepareText ($Notification->"link") ] . "\">" . \
-      [ $PrepareText ($Notification->"link") ] . "</a>");
+      [ $PrepareText $Label ] . "</a>");
   }
 
   :do {

From ee54956a6909190eceb5eae696ad8590720bc3c3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 19 Apr 2024 09:09:13 +0200
Subject: [PATCH 134/988] mod/notification-telegram: string protocol for
 display

---
 mod/notification-telegram.rsc | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index c78a8ad1..745367a1 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -76,6 +76,7 @@
   :global EitherOr;
   :global IfThenElse;
   :global LogPrint;
+  :global ProtocolStrip;
   :global SymbolForNotification;
   :global UrlEncode;
 
@@ -117,7 +118,7 @@
     ($Notification->"subject")) "plain" ] . "__*\n\n");
   :local LenSubject [ :len $Text ];
   :local LenMessage [ :len ($Notification->"message") ];
-  :local LenLink [ :len ($Notification->"link") ];
+  :local LenLink ([ :len ($Notification->"link") ] * 2);
   :local LenSum ($LenSubject + $LenMessage + $LenLink);
   :if ($LenSum > 3968) do={
     :set Text ($Text . [ $EscapeMD ([ :pick ($Notification->"message") 0 (3840 - $LenSubject - $LenLink) ] . "...") "body" ]);
@@ -126,7 +127,9 @@
     :set Text ($Text . [ $EscapeMD ($Notification->"message") "body" ]);
   }
   :if ($LenLink > 0) do={
-    :set Text ($Text . "\n" . [ $SymbolForNotification "link" ] . [ $EscapeMD ($Notification->"link") "plain" ]);
+    :set Text ($Text . "\n" . [ $SymbolForNotification "link" ] . \
+      "[" . [ $EscapeMD [ $ProtocolStrip ($Notification->"link") ] "plain" ] . "]" . \
+      "(" . [ $EscapeMD ($Notification->"link") "plain" ] . ")");
   }
   :if ($Truncated = true) do={
     :set Text ($Text . "\n" . [ $SymbolForNotification "scissors" ] . \

From b0cd53f813be602edf59db2ec18e085d84fbebeb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 19 Apr 2024 10:05:52 +0200
Subject: [PATCH 135/988] netwatch-notify: allow to suppress resolve failure

---
 doc/netwatch-notify.md | 9 +++++++++
 netwatch-notify.rsc    | 2 +-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index 90cd830a..2db32bb1 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -104,6 +104,15 @@ powered off, but accessibility is of interest.
 
 Go and get your coffee ☕️ before sending the print job.
 
+### No log on failed resolve
+
+A message is writting to log after three failed attemts to resolve a host.
+However this can cause some noise for hosts that are expected to have
+failures, for example when the name is dynamically added by
+[`dhcp-to-dns`](dhcp-to-dns.md). This can be suppressed:
+
+    /tool/netwatch/add comment="notify, name=client, resolve=client.dhcp.example.com, no-resolve-fail" host=10.0.0.0;
+
 ### Add a note in notification
 
 For some extra information it is possible to add a text note. This is
diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 0b6c366c..9b0beb93 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -116,7 +116,7 @@
             }
           } on-error={
             :set ($Metric->"resolve-failcnt") ($Metric->"resolve-failcnt" + 1);
-            :if ($Metric->"resolve-failcnt" = 3) do={
+            :if ($Metric->"resolve-failcnt" = 3 && $HostInfo->"no-resolve-fail" != true) do={
               $LogPrint warning $ScriptName ("Resolving name '" . $HostInfo->"resolve" . [ $IfThenElse \
                   ($HostInfo->"resolve" != $HostInfo->"name") ("' for " . $Type . " '" . \
                   $HostInfo->"name") "" ] . "' failed.");

From 0f2a4aedab31a7f697158d3d34ac6ce08756ebce Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 19 Apr 2024 11:34:35 +0200
Subject: [PATCH 136/988] global-functions: $CertificateDownload: remove with
 find...

... to make sure this does not break when the file does no longer
exist. Starting with RouterOS 7.15rc1 the file is automatically
removed on import.
---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 3b9f27c0..66765bfa 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -151,7 +151,7 @@
     $WaitForFile $FileName;
     /certificate/import file-name=$FileName passphrase="" as-value;
     :delay 1s;
-    /file/remove $FileName;
+    /file/remove [ find where name=$FileName ];
 
     :foreach Cert in=[ /certificate/find where name~("^" . $FileName . "_[0-9]+\$") ] do={
       $CertificateNameByCN [ /certificate/get $Cert common-name ];

From e42f8843bd3e25657d7af1ced4a4ce0270817358 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 19 Apr 2024 11:53:32 +0200
Subject: [PATCH 137/988] INITIAL-COMMANDS: remove the certificate file with
 find

Required as RouterOS 7.15rc1 removes it automatically.
---
 INITIAL-COMMANDS.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 0320fe80..4a121973 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -23,7 +23,7 @@ Run the complete base installation:
       :if ([ :len [ /certificate/find where fingerprint="46494e30379059df18be52124305e606fc59070e5b21076ce113954b60517cda" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470" ] ] != 2) do={
         :error "Something is wrong with your certificates!";
       };
-      /file/remove "letsencrypt-E1.pem";
+      /file/remove [ find where name="letsencrypt-E1.pem" ];
       :delay 1s;
       /system/script/set name=("global-config-overlay-" . [ /system/clock/get date ] . "-" . [ /system/clock/get time ]) [ find where name="global-config-overlay" ];
       :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={

From de8da38a0cf60be3f79f5a64ad766343c18cb2a2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 19 Apr 2024 11:59:03 +0200
Subject: [PATCH 138/988] README: remove left over certificate file

But use find as RouterOS 7.15rc1 removes it automatically.
---
 README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 45167363..a92f71df 100644
--- a/README.md
+++ b/README.md
@@ -91,11 +91,12 @@ a sensitive property, the passphrase.
 
 For basic verification we rename the certificates and print them by
 fingerprint. Make sure exactly these two certificates ("*E1*" and
-"*ISRG-Root-X2*") are shown.
+"*ISRG-Root-X2*") are shown. Also remove the left over file.
 
     /certificate/set name="E1" [ find where common-name="E1" ];
     /certificate/set name="ISRG-Root-X2" [ find where common-name="ISRG Root X2" ];
     /certificate/print proplist=name where fingerprint="46494e30379059df18be52124305e606fc59070e5b21076ce113954b60517cda" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
+    /file/remove [ find where name="letsencrypt-E1.pem" ];
 
 ![screenshot: check certs](README.d/03-check-certs.avif)
 

From b0e4449e4f3f6318bbe9ad83fe1b8e30a77ea1ab Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 19 Apr 2024 12:00:13 +0200
Subject: [PATCH 139/988] README: show fingerprints in output

This is not scrictly necessary, as we filter by fingerprint already...
But it gives better overview and feeling.
---
 README.d/03-check-certs.avif | Bin 9339 -> 12089 bytes
 README.md                    |   2 +-
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.d/03-check-certs.avif b/README.d/03-check-certs.avif
index 33bdc408e4dcd3c35e95c87109926d801f8c9fe8..0477c398b41b439ec6eff03c8bcd2357f2637857 100644
GIT binary patch
delta 10851
zcmV-pDxB5(NV#5+dK4Ic000)c00IC2009610b2k77bKC6egVXj4FMSeA(JNoE&?s)
zlUD&a0X~zE0Y?Iv7L(ZlumL`^iUQUFf3PD}+000C+fFjaE%S4R8Kz4PpXJSs0_{*g
zPvTR@zHyJkCaeiTTWy;Bal|2ma+4b|K2m3}#@uY@C*=B4ODq2S{wiph_i*@3Fv#uo
z=Q-#)S42|f{{V(Odh(aHdj2x~6@$cZTQ7)6e+|uP7m~S#AUSVQu<gbxHdv5Ze`x?%
z1<mxMc|-<5`>)-QPI$>bH~0ABwROp2e-dxD@hPAE90744Rsd)2<Y0B@rDaOd3q2)%
z+N7=QrK3|22r(8P1A(4L%t-kwh7b3T{t4()Z`!?oKlpFBWHH2bJw<=AWC}N8-11>u
z`<#~OKNE~pzC<2%sJGB=Grc^+e=5Ek*8rRh`_yo{e`;zZ>cy3u?VN#`+b8BByJJ6?
zsqP9HEPVZNN~-bgSfgLvez+Lv-n%34{{X`r)tmOMU;h9~?d72Bc$00p8d9`nW6QFp
zU*vw7IOl`w$33bvg3}ipG+V6VO|0nHjdmWnY!W*E04j7cKpxn(rdCa{e~*=;3ZEnQ
z$8MPa0BgNTy9sl@T#12c4%JA<n#B(%o`mtwuWGG7s~9&V-oN@$TH-rEr_0gqBZq&?
zA3MRoz#QitN$tq0G9*HKKy0K~%$PCb=8$A$dgr&}T9+lBQck$DNTrC8LhS<z2_w{;
z5BLpdE333Ko8lx%3j$PRe`Anw+o$rXly6O?yY&A6hdsO`T(Fkv@BLl-#l?$H*xR&A
z)5zp*<J+&TO{6?=YSAdt&_yQbg}uhdGCL_$AU--VQ`fgziq`J#Rk~)?gb~E*0V=0{
zLu2$>Y;b`!wfWX}G;&7jTNy$~J;?x%rZ}%5UK46>Z&&{S0O6%mf7nh@sP)^c{MY1a
zYB~<Bsan~-ouwpp@>`<09zuDJ2IBlT83lbSENGgOM%U@2O4jixfq+0rkRTb_IU_vh
z80N3r>sQHTXsfSzX#{zW9kG&*RE{(GbL-cdv7<YkK3^}!5ZePeV-&G2OJROsSo(p}
z`?(y9S4<}!YsY^>f3BTwZ-=3o{gXNv<&#6XUo@DLdTsf@T;v{u47{E>K8B@j9BEo)
zGHRMjCgOLq%%HY1a0cwD#yG&~S3F51vH22@6~U@HPF#6Wpeex14te{l^7rDbUs+h|
z_lauWCQ^~zNpB373XaU905(?yhUcDh#c5glRcEKBpOEW6e{7PLo|=9~GbplX@fM!S
z^Qikd^GP|$1d*Ryenzz{AH%Vbx0)T*!SYc^jz%B60ES{i^ehSJFe=Rc7P7aV-rxQb
zXddP{mK2F0QqhuGj(&bHLC>Ky$TXcQ3GXde#PR;-Br7mQ2-yXSfLQN5<EX(s>S0P2
zwA=YIRT?c?e@<V2p!Ao*vdR`84PU;%!N8f0NCUp_uO8#^t7vp(f<brT%f^$=B^om(
zJiagp-S@utKBRpr8-ex>Rc!3Fq-$vx%zKZJubH>z=z3&eXCKt1%)3OF16|%!xK#)X
zkVqcA@INZ#nsJ{hZr-fmsTT?IrtQ;NU+^tnCXsspf0sn?#-aw|LzZ_?27bBinzI{D
zH0WWU!&fbL_E{tI2ADF^nF&|UGH^DoG1{o<nw#lYQ`<+Z5d=2QW0Dj=UB2)@%nku=
zd-Gj#HTB)XwWp3F^5Rn=EgWy;s4dG8f$DmH5bH_Qbp1T<{zG_)(n>3B_2&NoBY=*>
zQIc8Se|;|L%K(RMsrgRf*a3rpM{0&`8&i#)n@hZn2R}8tj12MAS6yoyi7nN{UNVg_
zBtltCE3}{9D&sBGDz^ZC5c<=t^#;~$qFes}7s&(?6!VdmG<F_iFBm^26+!RU(yQA^
zYPR|R0FiGOJL_w8(ckhpJ1-AvT8{6r!jhH7fAA(iQy`oik&YDpRO|l$4C@+YnY+8R
z^56}#f0~WYPJokF^gGzBHCXM&uJ-ZVN~YrEC?N>Xs9;YdZU-FaoL5P7bi4TOtna*8
zEY|HRu#e4*midS-Uv4@mAx9tpJu9j%=<SkM(Bm&WF|Jrn@Xw{(??IOG)64_$T#95K
ze;(CtH7kueJ2p3V`SW9DRoDT+IVTwRuKqjAc?p^PZ@q3I25bn?i{uh{T;tJkpL(uS
zLeuprH3+;(DUxtR?-Y=;NxQGhvj?1KILIWE!Kx9!UTL>FeBMpSjU@*KJjEn^aC&>x
z6G1J!tsKZvm5PvkLBaiNy1UVQEpUF=fBNf9b1bE%{q#$YdE;*+{ztBAE8Q2vCge1l
z^ISBSA$Lb4L*-@#nUA(xpKb;^&%JWAvBObawEh+F+pV~_@hmYjMp{;t(ZDzd0|Xr8
zk>96o`P#mbp;~DM;>!J|xh?{y+9Pf|lA{EEy+^(%ld4<IO5aYi5ovZah&+?Ef9@29
z0eCw~F4Kg_Y~!Xg-sRq-tuB#uB;FoK&>!Bf+Q58v$=mCJ!3Q`M&PO(%HmLE-s%o~Q
zG5IcrZ!x0?`5+zK1CGPKG0iTwai`hD>1X2IPU>a^<Lyq$M%Kn~xXB?#Gsb@!0O>5Q
zt|HV#Ho6X#xjf5Z6jxbI!H}@pf2c-&ah^IU>58c|I<J`v{{Up$vco!+B4AoK&hq7+
zGER3X$jKW>>_u^3+BX8$!|Xb};JBA?xrQkvFXl9j^8vs)U7Zd|u7kqjCcS6ZE_Ht@
zN#PMl!r@v-#`61oyybz~Mo&!lpbnTxtw(Qj6uKp-fRgPaUYx3?1_2AWe`Fpz<P%k{
z@3nvQIppy5l+%a``SDyVZU9U_-%wYKla8G7I*wmn`#Niv&!FnpZ;%WSE6yg|LJ2nq
zP)=}9UWzl&3W9sRUSI6>wx3#7`#JkVL}qs08HWI{7~pg`<ozfEt6RNL-CM;Lg>H=`
z$&j~ci8mv1eoTx6IVYc#e-3%dYMQO&Ru?z-8g+oOmuzx`xqOB=WyTXDh9KZ_7<Ltv
z;hmEQkHmvmX#Dgr$VJIJLb>RqfI|c$sT+<nTKc7*g}k|AfweiH61iw5itO$?2#E85
zF^JcYN%jLY0m{wds~C*2#o_B~b0kk2G;W#0jyVa84mihQp82`|e*g;`4y>9`U9vQv
z>%rvb{f^lu>x0^$@ujzht)fw-yr%femJX9C^0N5IkPqSVx_`CpTx})hH*4s2(fIlV
zwvq<WEtna^@xPh#slgd6K_$8S+;$xWK7WXD&S3uli7Fz)<?T^EbFhqOE6+~;r1h>E
ziefseZx`D_ECjkVe{=nZh>Vg3VlXkdl_!SD7{KHVa4RcY)#KG}%(m8RV+#+O2;VBr
zl6M{lIKccXDvAKTdw(6wv9uO&+p2T5R2-jvI(t_5@r|VS?LGd9Z*Y%wB+RZuZAK#q
z2HwC9c+NXlB}HWD!KAE3T5+oHJ^t^=>+U>NqP*&m_;S)ae{nLiNMb`HAkIcHfJr02
z7^qjpwrg{C%i;Sqx0*Fnw@{%_f%lKg^K;KVF<iA2zOPUEY{_A1cKlhfs%wjVH<@i^
z6`2aC3S)AG000;OdJg$M_~N$T$Lu3@hfGA==0TZ>+S^DN;BXG!I$?3#n&T*~BM8M=
z8>MKdt&!Z1e~5^F(6eaCJaUBrWtbhiNF(?;IURcR>57ba_T4WM>MaTg=Mn6ARzO|O
zRDwxE(`fDebH!0qGq;1s*4D`4EdmiE$Q|S}WuF<qVpk`xfBv;po5ohm?jX>upo(01
z$`~_AfZa<e$=t!Y2bJd_;<-8~1FTOP`34hjVdeR2e;RG`zETje=oAh~T>CCN)SvL2
zM39ApNJyPsqy=Z%rb02eg;BfsbCPlw+?wO)pbpFa6N^NKTWEYeYZaub;h|R;EKFrv
zJ9~M5`1W&=nyoL4nnq_9TV=$Eht0@TaEpQp{KP7CVtF~oL0q*I0ocEeAuvl4Xt0Hv
zQzW~ce@T4Eu0i=a5W7By+Jy1FvNHjo+q7*5l2x1>4l%TC+6G2Q+k#KwTy+!y+sEVU
zNIbu@czzpk8Zsz~RT#+x^Rqoi<CE=-y?4a+`rVR5bg1FDQ~v-T0l{K3oPE%6Ilu%C
zd+}W56ana-Bi6NV3|!dSO%9cC(!jTiB1I-ffAGtUmg~Xk>U~aZ_-9?#d|`EYr$cR`
z+kpw5LnIHifsquCz2A3E<0HLt+LP#ssHgl(FKq4J#{p!E=kp09NC9D$#xc)o6|5uF
zu2%C#xQI5MJeZc;<zxX_q$*f^yh+Y_et;eBwc!17&UDva?@pFoJf@(rK@_Z5sQ>~u
ze{{@!j(Yo61b-PkOA=e6+v&K4gK-m$_yl3F{W;DCIRd$@Ye=}4QJQ@}Mbu!jDi|b|
zth+EU-n?WU^_ZGv{Fdo(mNzW}=VXf$6>f3C#t%GD1?2Gq!K=rq+Syw{aH37XZ)9TO
zhel(717Hts{VR7#_?@lj_L18|ZKuf^f5On8HYO#*79^Z7=jJ^yE0ldQ{yAca?5<Wx
zK{26;fp9Vo206wL<xRS<ys;`TEho1x_e9Z@&(k7+J(Al~@iw7%E}3a_qg%`*jh<wM
z{#hl3h&;I&0ujL-aB*8xFN|WizjvQT3}j|^`!u_LS561d#!F;zlga99%`L6;e>11)
z`}`@ayzxi`%&`))a5|ji{orsh)DD#`%o+>Z-aB|dS%E@=vMfvj5uE2I<s9QY^cnOZ
z8oJNJoljlYKGP<#VI;E+guskde6UcCq>LEOee>vX#(0mykKwypSth=Qceo@4h!O@B
zSdiTa`PRBgm&3X8WAKKqE<B_1f3>0IvDX{&21xb&X|~Vd$rV)iKU9&{MgXO`JI6T4
z-PatDJvz__ozY%}0r0kb#_+bWAV=r-9Bs}HaKoI8eMuDtn7SX?_TPA8QkHgr?hsnG
z)nd*A48C!a26+3l0m4yT^e}jOB)37~oo&wiW=n0xR=~>r@25<4&$TiXf6&$eB%T)3
z<q@(OSX(lxVE}G-o}}jo)N?=_B^BuMCx)3e{{X@zttoWI^|c`643eO+#{_!u`O|IS
z@XRQtZwTwIv1CvFj&Yp-0KJjH9r)w%0Q0IVxbpM|xKvLK>fa#q0Q)&Cz)0K64cNd2
zFg-qD=xW#=ACe~WydSHdf4jC%vy;GVImYZ~AF0P2PzRn-UV>uq`!$c7;Vou6f}3ST
zw>V}ha#R-QoRObF=s}89@cb^yd^M^dcV@(vjg?Z3v=82Yx_<(D@BzWmUWsy^95dX<
z{{RS%wF)vZP%X%Kv5t9fP1(;(4_+!sr|7Z9%O8eyu`59*GFveLf3w2{-<%8(dG-7N
zIBF}<V_gO~<W}&Ot0M`S_ZwDSh**_hzIqSkPmbTisRN08C9dUUZIT;vlh=du0mr60
zel!8+bXTCT@Y5S;WAL`Iz92lnZL-p1?-TQSD;_c5(yLqA=#G}=Uk&RIEPh#XmaVox
zKp@~h89VXn0-sPoe>i$8U&MCSmYT1ZWo3V77nTWz`8GH_f<VdO<JYchB7h1gqJRo0
zqJTPEy*+gkX(h(HX2C7tLH?}@DL~tBr=6vW^Mk>m^zxSy%r)y4m16rkw&lYn!4^O7
zlZ@l1J!-f1)}4rpXpt9=IFmcn0#yQ&fV}P?vCeru)Q_xbe{JRgp+u_ZAbG!cr$e{X
z{A*RoZGTgSqr`K*TigEK{awzJRMz!aH4$kKi><Dc$iS5$iBu^(jE({C!OjQLs1Fe9
zHdZ=n#o`s0{U${S$rOzU8&2}fN$1RQ^AYz?IIPV_UDNNiAGAfG+uFgf0}M<CPI~8V
zI&ssv=BiDof7?j~oM~W@v=h9p<7qN0Y{H+HpxVcrkDT$2E1Epq&ij0hnDg_y?eaFi
zwzWC+rV{vx6kEt5j^-p)R|Z3akC!S7Gi2v)Znak6HoqcEd#l>3BtW5P<BNjMN|2;;
z#(uBwlegi0R?&118e-GQTf1@PMIS345^<7q+*bu#e<r%1oF?zfD}0gG$>JSlVula+
zNTOl4ZW1)wm>hF~*p7PV-Dy|EI?cRuBwFR7qm?YF3_u;AV1c)cZ5YR(u11QrI9pi$
zEa`;d7}`<0?sZf6vtE|wUpHBbLmVe-2qMFOv(p{VuYX#S*T!BTb%=j%Buozf0GbGf
z(hfN|fA`PfT#Xe8r6$_buqnd#<<ROU@eZ>!<VE$E9o(=kVvHysDd&#(1D{HkTf4w>
z{{RUEkXZK1l!`D*DKY_oIRTiQcRjjSB}HdZIZE+%MipZz%J6)vw*LT`*V=2Ew6oah
zpYV{|!D?c{%43WOKvF;_93DF7IW@62_JP}UfBrSn8d#LZsstp3B?-Xk_mxl4c=WG0
zqM^cXX?_TaQ>g7}{s`+VwJVK6Ni1d7qqp3y?JUtkBX5&#-1Qky7a8a}R@d9LJBErc
z_)KgDBvMO9Zh;7qWK*2-19EZbK-??NXsr^lyLV@#3$0BeU7k170wkVZ&9MLh?~dRP
ze?V|}9CKDyZE|Zkbqk*s*~M#eV#JbK!=IQhP<Y(E`QvHyuP&!Fj>;9ChyVZy=s(Fc
z#CO&@js4xVnVZGd5j0X5QZsKBU|pk}w%+&|85sbAdq<?rtp5OHi^lODpJF`W8b;y*
zPRQe2srFrff&Jd+gTd17J3{2(9DzU`e|L%XtwI~Ow|#C6P0HZU1aTPI2w+A)_dI*%
ztKWFHUr1gNs;rRAtc(&EhCx*<I3Mj}uWIHfsk6T0y0*sX@s7L@pufN+jzlqomOGC-
zayjSn^r=7LIPo9Noku&4PUvGko~!IXD(9%G5zv3aZQ>6(CHr!DhzM3T(PRPuS3kq(
z2jnS@<1KxWl<Eg-F46=@J7Xi|;N!nu2c=<AKo_-LV*dbJz58aPaA%)rUFAaY^Z*X#
zsL@3L6j4P06j4P0fB)G45&#MbIA!uYHV_cdX)>xUv#k;p0e?)x$<PHJIMqEnU`R*n
zlli3-<a+ygzhvP$(dSDw943&ZfJXXvlsQ4Bywiy^T;gL;VTGzpn@L|Qh8#z!C6HO~
z=O-f3{&W&b^G0c#FM+E~af#a-8h?uVr^U0IirZ&cIiww>@0JH+A$;IQ<xzUnYb;L~
zzYi~-<K=a$`hSZ_$IhXs$zeH>p4e*o+nt=ey%mv`gLCeK!X^P{J)W+%t*2KvNc;4F
zcc@$X*a4V#;23E2M1%|KFQ~sd4^h<C8HQF>1N?MpTz049J^B0ty%aIa7@G;M-SThk
zObM>mcxS9Whmeubhv51Aqm4NS_#wh0B$*Zf$NBqkO@D#MX4n~{dnt9go?N48@#Ku5
zW<fqoC+-S9$ve9H{Fu+XPi8a_WvM@xRo8q^zAF5T$*Aq7+<ZG`j*`w2ro@vkYS+(g
zh0ls353d{S&Sru!A6j&29MeBT)2|b^lLmzdzXJ9bn_Kk1g(K3vx+AmoGuen8H+$G{
z+qt3_gMX`Lru7>xZ^L*CmpDJa#EfAhuEZHE_^qkEJx(=HS|nhG*Paa!w4B=;FXKOU
z&7<sr*+v>K)9+|bBe<ovkTFbgU{XlQuSc8?3jiGQ0<szIdo0Z`4q2GIUK?;K(;!p2
z0zd~bZ%F1khVuR{)&1oM3_nz-+bZk3J)ZdA$A8mciuCBYd$|VSvC?q^0nsOvsKdUK
zTUNzs5f{Nj{$5LaaFcC2sXCa14;=Uf?^om2M}-9^L^y;yW`m3qjwA{D>nFdAWtxEK
zAwtQNi-gToo&2nR^6BhAM4u>ev(nwT<MVb8?u>mD5m<Iia3U(^%$kpr*=`>^eW)J{
zz<;3>3LKIp45n@M-ec3|?l4Zo{$|bWZ51#rERXNlAOwD9AkhQGjzw%Jz%+ERV}bGn
zSd7H@{6r7i50nllQi04{{F8iGF$5fk&eXmzyfo<k(Qcft8C(f)x6Sx9-4JMzO}Aaq
ze_Lu%Ic98-hg$)jBP5@NlvbT;E?clWX@9~#<GAU&xHH<*JoE|O36W)X!OQFQG_4dA
z9d3?VP&Ax491FFyj~JO)a}>a|qHVkbOMl4PGSrAm1;3vYy=e$&m^h9N)U4vOr<GqA
z3J%^4M<eHdero`HTZ*vkssW1bE%ink1&?&l!wXfj2H^RQ8*R3H><gyfs?DeYP=CQH
zs1<){jpkz+6T*UL@BZ+FIY7UdDtBt{35tcE003orGxdvq=NKHfYEW@k4&SIzjjv~e
z9mCMcoAz#!T0PwiMHQXk<ksU`^0|f=T*_lyz5}kyqwx0@jXw)Ed%0}w)N98(Y*$r8
zPm+s_4FRT+rIi{}nSBoePvc&=$$uWk?%GI{d>}i8gs~*0O#@SzP)oZWs|%}D#_{3=
z0svZb{A*6Bk@vm&J6{_0h4{f+{1up00hT<kHCm_+?y~pwRiH74OC2jkc};dJxZ{ua
z`sD{*RP&NvQudz{yq{l%1+*;}l;|kH7T{*kz$-=Lbx9Ghe;pbTV<m;iEq`!^iqF-Y
zgT$^Fwh3GFsg5PU(S{K<9S*^%evu_zjv%tQk)XbDh3Fh%nyY$`Iz5Sy6b%z$bCiy_
z)jeQ9!daiVpXJx%(^b);Z4i0$^X7Rs8aQ))p~PEx(?zh35vz`&v0hKelBHr0Q-CM7
zh`LNZ1p+QM#VNSErDBDCrhi(eYU6^ML9_k8Hg3HTEa|whNvo!WsAkC|b5j$+x#j`i
zUMgo6#tA*!<Esf5sXB`9l^iCw@!d9hg@@~^HuYlQK<Cy=OcsA}Mn|&OAAX6ZQ98)l
zm9Fm*8+F&#5cGIxOAB5N<Cd0oQD3xUW#4D7FDoG7^upOxMk_S=w13k1zJ1Ft${vo=
z<i%@DYMAmdn&TF?GfKtQ*;MRz7Ycs1Qg)MZACQopu6bo%J1r8+*&Xdw87v#P=tG@l
z=RrFlQAnAKhd)IAdLSJsxixYuXLs>a>Bd&=YqT0Kj<t%ED^(3;c6YBWINQ%r$CxXA
zX#JJ)%{au_oc~<7V1J>PDu0ifHPJW3*4bp#zunX$G)%Q}!N5bNu@bm&_bUOQopdiH
za7d~E5}FGiCL9C;V^d=WwRDN$2@jT*jMS)ypIu_?lex@MeY%qDoiy|qr*b$48S`Xp
zatY6+w5?y#v(=vF@0U-<h6>~Ad|OiebR&nCfD=zhGjc}pM}Lf+ZgAF-v1})sNey4t
zdOXQe!0V@-g20;MNsD+l^)JpdZB%TVx*%u=oVUZKlc;TdDO=fUr~r7T@V1dftI2cV
zeo6hq&=ZGAwvC7__C?Nf_QZH;hU8Xo7A%{xpxWD-G?4!0u{{`UsawTzv_mLanXCWo
z<L32)fa6_nmVfGKx(96*3c4}H($C0P$s~w;?oK(bmmS^Tcg-7_Z&}|!`sW`US5UTp
z4f9z|%Yv^7cwHV^NlEZn3XNG|IdrdzqEB>-*xzB}n6Zef!mpUqWi2`%Ar|J}_zcAC
zDtu!!heBI8U#ql+`8!RVA6NMTonNPUz!xh1bb_$b(|=;7B_W<4Y}D%oK$_eE5xZGQ
zy}(@7^T-E_eq<|%4tp(26<{rf?UA{$lOp?KLW9F6iZwHoFmbkM=r!2tx6}WVX&7LY
z1z$6==_Bea^h$h5yKVjYq(M6P_M3Ngn8L>QDla$KV!zM12Eb#!31{=7ikP~D5mTMh
zjfS#3{(t91pS~aMzio`;Uf|4D_|$r)KQ|a?6gr2f@3Lz2g}#|H5P!}JP8f&1dOVi<
zUzsbSH?t;Elw6f~KY_+((OLC$#cAxEFZ-(0JxTi%3Y6v=-j12!QkF^B|BvN_>sL&?
zZ~s@nYpAOol6>s4H*{QOpQ7`S+U$S^pykKVYkw_SvKQ1~xieh?e;NMNt3DDu$@jfg
zw>sOkYkj(jzj@z)ft!;9zzzGIXQ`{<tThXU={w=!nGMT6p*+_{QgZrQX^!iuRptA)
zB60oxj}O{+eR7skPx%f4#MJip(fpsW=zIDqE<RC1m<m(2|G+2dqYs_Ow?g%!a&w`E
z{eRo1{<2~a10KPuK3!(1LzQLB{q5JxKinWjYG*T0vQX~O+ZxP#$e>NcdFe97CwG<>
z){)ldV(Ign%3V8Ym@{rwTSgcqcSU~1Mc$MLJRStt9o8U`3Yf0nT82trw~2@|`7;fJ
z-Y2S<PQEk1y5+_*(pZ}vM~6r>IUc*{oqxU5H)-spGGlM(h4W!W*`d4)*x66U`;2Ym
z;UH83J9}wNbXNyP$QO-2&%ec|6o9A)BHu5R-}6;I1o=P2ox7l9nZD~Inig9n7|u9}
z)c*j{5Uv)<3gabNKNj*PGhfMjv{SlMvkKNs^lT=EBrD_O#c88cMTlYun@6RO^M6J<
zo?Zj^85o8`jHdxcyM#@XU)f8efoxcbWG-SA4XHr0+wXwK%~?}}>}@==7~m}-cpPv>
z<ywc$e2$uRA=-YJL^`j4!twtsM9;<Ee}@J`L@JA$*hqqgUjWU^^<(!8d^2cRRC?cP
zFa#~xk<<KUtJ`s|ya}gR?6~s3oPY7{pphEcKYsd9chmkkLH1ohr8?~l_$F&GI{NXz
z9f_8)`=q-Aru%GhaybZ+E0D8DjGIciGEWO3H<&}NqWY9*D4%L%Jbkn<f9c-H;uc%#
zy|J;*%$bP4y)f0nR|ZK62L%gPbOn_%>h@73hi6Lef8)Fz*h=s*rTdTf$$y|L(dUp-
z<2PHWGO`Rh^rOY=paE?$24E)Ecv!HPriFU{)ems&X0GU9?tJ&(D>Ts$r5ylL%^XM=
zZEO1K*D`32UE2xaxN{>gyr$8+P;N2S_qc(dIt^_u3^h%$Qw1Cw<)D7T|DMc7;P=D4
zw6fZ%OO147nI`YJ*F0};I)84{h97ONR}eAJV>{E?c<udD8=3ua#uq(&Al2|5M*`+9
zs+;rOIUd<ZURLJV*&-z0@X-roao*IfYzPXh6^A9h?#GF*6)0&4vR%XsD#~kYa#Nc@
z)PbOhTcn^B)ls{*s3a@lt!LrL(BmtRAwB5HXc_HZyx`P_({P%+Yk$ZN%wcI&do|g7
z-ZchiA_qiVoJ&RjK~Zv9c5`^{MTOV+ZmUlp`tbFlC=-`(f0hq2bpsweGmSalN=2JA
z^ZLQUhl<w~wOJ*C?4YmhR1d<}ot1wEe{N-z;;w0;il3y&YhPjY?*w|jM#IsSLogt6
zRYjINOWYP3xN>EcHh)22ZZ`t&Q=evUVCX&GR5|m3X!^jj66d`pHc}?@kDlUqi~maZ
zah@yyAEHk=@~1BTX-hz2<>%rkrV`_rDS$LAY2H@pwJ5ux?rs)G;>WJ-Wt4kafQujp
znoQrP&E6#ZnaTwGNJ(5lTe2`oY=(#a4;DO^5%Hv6Uc&_2UVmDk@rEP+ZC-HsJk(s<
zjb3=B*`~c|=EkHnGQb}^cAuw;7Qi=3HTv9akwY_f@Q`$uP5Do;j(tVZ<u`CT#b;RY
zQ{9UT)sF)#NsB-#^{^WJH6Z&iTnKY+ECV(ygRNIV4_KtP??07{QI^BB6O9i&HajCL
zA*)$!0aXIUzJF(8n=_V8PQy;BP3Q40eUiey1>N?{PTqvG5<n{%3okQ$m`L$h@^m>D
z<O6awLOUMkP2e&|Zi6cHZ4z$b%9<JM#e?#`>MAe1?O{jv#g{wA`g8yI;&GPs{6_zD
zAV%0IwvmfHmT9NC%Qeum-fz+#>Y<WY<o!tjn}b(dXn*GY36c#&cCt+-lW+P$-Wx?e
zXl~;)P2B8N$4zFpvEnW+5Z`X0bqIXTS#=M-wtA+o1=i2cL94*LnqckF9<uo1R2&J*
zq8}$5*rb6o@4GUw4i(6vBB41?C-)@FS3;dH=qtmD`+OHWr81olgaYULb5@_%1pCBY
z2lBgeqkq{Jk%xx8L*a87w?m)7Jxn&fd`hEgo{SkR0qDajRTKN<zKrC%Je-I^ipdNr
zkcx|jfW18%%V71(_U={`;2t&m>h!JZKQbHYYZA;xx5!;eIo*)s3p|LyW_1&L3|<*F
zzUzu5x=M*b#z@Zp5@UWe6o;ok3&=x`$mkhPz<*Th!BF?&I$Z8M>eFpKI@{`v$g{fX
zF4ofea}4<Dh)d`z>fEyOGE)+Lg!4(oD>MsR#Kyqh|J(}=Ok%KwNmU#R+f6m(z`Rn~
z9sH6tI}9oAR?^Ed<BZZS%bx}`ewg`~l3x|1G-2CAfreten_OoCvl2IEAU^#`u5Yu*
zL4Sx?o6#7dYi&ui)RJDiZsr%`=C<h?F__~0Ub^c8mXj(Px6Wy7c-*Ains3WrbZWJY
ze-%%9${4+EAYhe38Jk>t-Zd<+vhg;>@(#?e-<Qw5YIb-YHg)3nK`Yd7R&YRhp-xYJ
z`UdWH&u}uoRMrlNA=*&HL`pS=2d?yTb$_IiwjYA}&%T<E=01!=yo=_(i|GN32`*vf
zSZY{*CbV1(f4H%LMR-hh{K}^-exD|7P03Ue2CCh*B5vQ{=i+5Y9?ZuJdPgqu73u*3
zwzk4wx&MmLZd*V;nH=Z$%U056W1SX&)q^Rmbd!g3G+IrRVrL6m`BsE(-6)HH!hdn7
zg6a;dMI_Ll?6G^+&_n;&lv2#d;d{1mVeg;4=giJ6L>(oW%734T`)n4Fj*OIC$3N=9
zi<cFZ8!&A8-VbuBslrsK5Zk`Il3HH9FWm6*w}ZAfggDv2AgQTshOR)IFOT1s6rU2H
zhfHB3LLwH@vcR$3JP9}XLSg{qMSlZy>&Ss~FAlgPGbf>;)y*fiJQ_O&ue(nF^fhcf
zpgF=~Ij=t5ZE+8a+rOoxUxOGHn6)SfK-4C$X4Ofk{F64|a?JpWy{nMs=;%ED9?D!2
zDf)zBs}b79AiWO9v=TM`b2f0Jgphc02vW+dY*&kaB~sIP0Yd7%O&e$6o`2!fqGN%0
z!gKw8d<cSCv?uc;UD$y3H|JqGNJ1%$@|Iu1v?^oP`XJnuG6~%lgE32z1xTk;FHT8p
zT?GNWT4g&#rA=^JBZ#hs8TF8(kd^<^ep6MF8w8yp8%8iv$}cL9^U=+eDUj>)D6=TU
z)u}=iOQmzEO%FRraI!yF;D6X@8>Kr)NnU+b*zFP(L-SN=B%iG~3rL=KlDqcx6}|V(
zM`YOGz)_M(lF)Q`L)-V&#j<h$i$R3ma?Y2Z{RZ78{YWr+f}z(+b^RPBD*-gglJ~iR
zG-_DFx-qh!6Bqk?!|I5yA-l0<PJ66}KU~4oxFh%n>5OZ6G?wEDl7Ef&omM9kL}loE
zaMH4&7>0&I^~vcHMN{QXr0NGsv#7B?4wz5+ENbCF9dIC;i2e{j5tMuB%dTb#Ek56q
z%*hyQI1f4X!>X&+suokzo{(+^$0etwqiql*hm55tiLN*A3e5JsPk;JKob>IPmDmsU
zjGhw%=n@gLGEmBQ%zwG|=VmdD!~W!$wd=|8kobUwb6uS31F8G%58)6>sa>r2?zpYA
zI<?s{Hr?oT{Kh?4`5#BNg)+$WQR=IRo_4&{+5A>T$Y{K*&li0M#wen;|DyID19xg(
z!bL+IKn=Ygpa;YyPyr<JB{uPsUnH`O^OpxiYl)nin!Pz^3V(F46Yem*OB43mfdacb
zuunW6J4l?Zy6k%xf=$Os?T_>A;#Wl9FAoi069BpT903(A{3wtfew{fKtOr91Jmg}C
z;G|(#7&F1C)6(Aa3eP!l#KZ2n2yqkO`B(Tbm8(3|3HJ%ZwCR}6j~e5dw?<_EuH<rK
zrFDT+fHQBaR)4yZ&^~AXtIT!@yuLpz?u3U60U}82y5>Hzx!OQ|F2Bz32?NGSs;1p)
z*xJr&f7{2v!3e9p3_Vj?@?tx+yqsE%a)FkiV_vQSZ;?XQGZ&>RPbOTYCy*|8)Nj_x
z1-sAU>lfr4%ksL~&sm<d73p}TnjxlV-s3_Wrhr7M!GD;+fbaii4o_4U8M5JJ+a66=
z;yJtTJxAldJU!kB#zKSRZ}1E6Y|J}xT_t7H9b<6u;wRo|L$SOXqb}98z1SF_dl-<B
zg~nfU(izeeozsjT13C$Ujk(7c)Bal(H?JTvApPv59CCjmT!G;DF6?J?cZs<MSMH8A
zklpoL)qgsO=&%?N52Ts+#BnV+J<s(<6mSp0W8<soeRt`-aR}bhUUx5z(+*}RX>8fa
z3*n0ML7GDSw^cvuRq3f;!UHf(&eW5CUeNR5#bD@%Xs!r#Ha%cOVV3(DDXY6NiK8^Y
zO)m|VXq8u7zc#tt3Wj2Y!0yYXXw!K}R0U`vi$HGsZC6y)z(E=Jg}695>`iueP&hm1
t_scl#3gMHt{jdQvEef-5xOB1#+kDLcOCypKCW4HA?P+EuBU(&JnNS#?H^u+}

delta 8079
zcmb7IWlx-q7Tm=hiWHZ^;_kAzLvbiB#fnqh;lYZ#ySo*4C=LY*ZE<%NcZb4#|H4gX
zGMNu2b248}aypEk<r94HadSbSck3WH5C{bR4+j4^$;7w-aC0&ym>5izOb=#*qhUza
z0SkZylM}#laBVorOW=C2U{e&_JQ%p3`Ly&}iDh6jqPzF%=rkz8m^4`a=xQ$BrG-87
zkaBsRV}9|o8ct1n<;xE;XOz#YB_q1|jNFUnj(neYUvlnBvUEf}U$p*kpN;v^5m|UV
zUFS>u?W9g;f8pF&Na<->xJ*B&p`Zy~@{^Q$u(gx#PRuZahxW)0wh`6*G?M`u|BBb6
zXD`WKMWDyXJU61!$0T0^KpeAyQ5yXv-SbyG()b%E#GxP}aGnkg{C5#%x-SuWhac~T
z&Dt8%VwJ?HhIIX~ki025X?E*~#MZ?g=nIv9*v`Fy#2&u3+p7<`8~vA2f`)FkdSz;~
z4ih{OxD}}Miv~nz4G#Db&H?3D+g{QIP!7iPrP8;BX9IPy<(1T&?adu-K2>^8$MUPn
zGc;oR?tgBI)ev88hJ|~RIwT>_y0I6ri&0*Wf7Lo~pub(-)~ww&jjOQ?!j@(ejb$c#
zfM!e{_II+oG8x1?`lTYH_e0qqi%khlkJI{TzHbc+5r4pR_@T*6^$x&JEk?^{$-P`D
ze?jk&uaWj7y<Ln-rXQ;$y4Ee+z5bmic$_z<xG@(4+09;f11U1C%2^Y1_fYH$guL`$
zcavcjxaRn8`?@eimr(nv*_Y~0wsY?6Cs<hcz+UXM54y&NTV}IlAd&c(1>^<Ew@~NT
z!<sp#VS4_>Bti5_CV)FJ7=`kiR<Vx*>qhyD;HjzEUTB*RaCE-T#-b0TeY8#=+I8V~
zK3$kE{i`p~5;4cqqPx3B6ue_cOdg~~r4Sb*A^gfqUc0th1QTixW+?fjZK>G>tp`3R
zN8wnt{cx}*jFMmbXwIO3+(Gp&US&OXmwCWJ`Sj=wv`NNO1^A-=)Cw>%+5bVKqjB;2
zy`tadUw%o6I&Wtr=PunHC1(I>9Li12j}v8ugpIOzW`m)kwG=A)Nfa<t4q_3K<5|n#
zK5-Ma$R2?vhwInyE#?&R?l9ibUsZUvQ>r`5cW3xwWq-Fzibql9gnf#i(h%5y#K|(3
z<;r&$L%-A10jU8F<})2BJeAwJ``J>RMyGp~UgIx)Y%bUmVPyFx=GvsvuRrT!TO1&T
zj^xW*NGb{-%q3*X@tTL+Jqd*H;k2jX==}7FSP7*#laQG`VsdPxYFp`}fi?DS34{^e
zy-Y%?<T#Z617s742Vvz;kYZL5!biNQT4Gv~EFYr)KvpZ?)VhH@gjuCM@UcU1RaSm_
z=8Cu4Y@ITUgWU~U9d`8xaHnzF#Mw>ww^9yIG}>b+h1q0i6ZI5$rT;m`1JPO&fLx!c
z@^+LRz8Csdg--tU<Yat>)e_}OZ0f<#;`1ha{9O+-&mqI><;0#VbZgfC9@16)1~MYL
zNgrqe4DG`Qbtd1D2}Ne?4ctz>jtYB@z1ZpVg*CJ-zwrA^eld$BPR@8WDtK87xN|;Y
zy0T8tw}l(QelKZk&OC1ZO|ejmWhK&4$o%+I5(9l#7XPIXJVI2Y(^#P{SMIQ^Hzm_`
z;zktgtIqgZkELtugwEK13XH|wx*4o!C(8mCBgL_>`)_NhT3DIHuu|R7DHgLZ*r2Df
z3u|di`wWuOw@95S@S}u!j7Jr{rV!4R+duXF(4y2&TA0^NO@52^euHPv@J3#9tV4Gy
z>jH^I)@}0r=9pawn~WyOi8*Z*<leQPtNc^l_m>tZ9f(TNd3$R&VC65IeZ%GzEknSx
zbLpC(1(SG-FvTbl(cyAIw#@7fm*C%X4Gy1{u0SOJ<JK?{Ax4?Gwipc8n#(Xb#@wnP
zafBEPB-3^a*O_2D$vZpJYQ5T(5iTJ?^|n(^DiO{kJSrDiIn%sbkBYoB9+#SBmHEfj
z>lI3@BcBAIVIV1^j|<ENmxDJ3F$W4?Di_v?=Xs9b`Fh&yt>l=#%nBYZlHF70diWSp
zkT=HJoCqs8<EaE?(x%}|dXJorJO30sk6R5=`QguXub5!sRj0Rgm6^3>5z)o9xk(1+
z+TtV<=8LvuyqwkLCXoFd<JdzZV}FLtMJQut68_RKZg$KKQ^Q}@Ulb~JR{`L3H#Ak9
zs>kFc$L(C~cP*Z6XDhWQJaiAb)5uZjQ6NnaNPYxy_fJcW{8=DS5#Tu{t*&mlr2ggh
z*?KpNm`W8Y63ih;26Ax;$Sk7?@0qFNxxYG-wxcJON!5*s3F#L$r_7b$!R_0ll`P@Z
z%*#YZ&bwV*x9%nBo|A49{Q%JJds-#`ig?U*PAW!GHB6k|k%5K3a0=_G;uPlQ<a6#v
z+wNY;!?U;q<hT<Et@`M0R@CiNqCFVg7n$Hnub62|Hc_AZ;SM5@VFkK4&o}To&?~mI
zaOv8bdD9GZrb!Ydl%(#G|KKFYUK1Qvi+ckp=NoVgefU#*M)OEInFPSVk+cd31&7TR
zSe(Df=T!C`6nLOxY|RGDw;^a2-jQgM-`4pVR#A}=C_J4P=c#+sT`Pq(k9=}Fzpyg~
zWpq)8+XqT)^8FQ{Slpet&AfRQSYvrHsx%zmOnyz;({&J-A|!?|jCf7&h?9D9A0>TA
ze|>jQoU=66Yr9qw9}E0S75nfLLdLElFoII;$)8o*)1|VkoWxoZ4=GsXb|0$2!b7lM
z?bx-5+d-a&%{iX2^1OkV4SJKjafY2iS=#=?D+OYVh#pSZbgeI3X^n=$KDSfVcY-BR
z5Voce76JcFlzWSRt8mUSzY(o2we!CUwyR?6cXd}nTr%MamVqS!T6l}R(xyjemDbB6
z{RZos!lY787#oLC#%0s@Nm-x!W33l;o5Ep#7oP0x`3Bh{bWhysVoOgra%97X<K>1k
ztenfm8q*?Ch3Ah2Y@TN{#W+HU!W6I>{M4t|mBJaBorlz2ZfotUNOM#w8}7Vrj7qSR
zkNG9f-9ret6=)A~laa|&<!m)f@bxP=9U}t=#R=4Gpud3zSS-9=#EIl!v5oQEqQ;}s
zsQKIPp8oAD5cIfX4_ZtZ81V!u(2q?xC$*d9Y=T3YDLSS<bLqx}U#2$yV#t?OC`t(9
z{K@dSgo$Ap&D2Y03Mn9<7_QPzl)7#9WGigtW8Am}7_i9VCr*_-?MJKP?7Q0u(h>ed
z7;4_~28#08`ISAr1E>Dn{ljR}<Lb$C?bI+AWNdd3m&2MgMVlToDb6A%c=|No5+0Q_
z|I@*dXUs8?b%?1(+%U`oOUDuQG2FOIg7?=Sy-qdTUwGO~Rf_&tz1PF~A6g<=x_PaW
z9;La*q5zK$4I}|*AcVr_NsH^DYM7lmX<Di+jA2=02tg-NPqAXmB;C>1{r23jg@73w
z@ePDEsr^3d4HRyrQ1wu>{Dcs-Al=-gmAVU-tS1eQKMO`#7Mz}?;QVjF*t~Rtwnc>W
zcY_cU8=E)-X9zCmtcB;#WkI4k<EVDc7*RZHKt@tHaq+b9Ard0vX;V#w%YEuCLBt|Y
z=_$-OItw4AAna*zj)#q<AA(*il?lEIP8@j2v9hjXifW8orleRNb|x6K=A7VhKGE^+
zXTCb!+1-g(9i=O5zZ}A)6e34kX6}|p92C7X8XJe(^FmV*KOEgL^v4I!iN%=3LJY_O
zRtJ8?tBN@FZ>+@P95@#6A=5_1qAiS<-57BOvJy~fv+E?6?`;nf4qb5^9k3+s5oH&A
zHDoKwc<L}sA#0EA&30D43%vxzIQ*mzF(&)zUjHhj%M=9fkEPxoj|g(){TiH9F7OWH
z!2~+!fr26ry9WhWos^^{GG831kvj)~vy{~Sp<dIzr4a?1??330D2bO>2JI^g4Vn|i
zn+QF}JV0>rXk1<pyd-qIUoKi|$PR>Y%@4wZ*kQHBHV{2@mJmVY_|2#Ip}g+Dh7Wh^
zr;5Lds&`0<%QV!2ody|WHWPEKuKueFbZl{%+cL<|`Nu2|-+zL1tUOKtQb-R3#oXRk
zmRt@;*LKEZ_5HBQw2Z%x^4JX4g3EyqnjsevsN?!?_U4=noke)rbD8$46-pe81kE`c
zC^uQBoaxb=7yd-iP~OvYs3!Y-jla^yWB1?Lm8<g?pfV3K+`|VS<WbMx0vLu%`qN0M
z&<VJ8mPoSD*sXM8)={aMS>P$FVXM|t|I&YLKliI$k-=%`)V{n421Z1Q|Jie=Co%bP
z>a0pwRxr41LvN)g9i7_m)dms?V&Q5Z4VbO!^z%u%T(@phN3N$(`iSSKC$4RSmNvBx
zIiI0a1Fs*8VlC9t8#$c0b<oZ%@ghbcq((bXfn<Fwp=7srHAKB!fL9uA>!-FE@t_cA
z^muMi3?F6ruN({)L|6ThSf{7Z8JlIcQpCL9{j{x4I`EjsBNFF&(Pbt*orbir6B2YD
z^3-OvAt50#6kY{L8%Ej3hjm#D+guH1i7?xLTneK*pN?j1+I~XRds4@{3o>Sh`q~jf
zg5sPcUMkx>2-6T{fW4Btz1M>*uFNM3HAEkVqCm9&lR^evh_jd_=_GsE2(90c{F)g`
z;T^!L(2ou<<d8#&2J1Rw_k|japOgtT#PSwPdpoa>I|7H(`ui1CDtwE;fYwomk;=p$
z^4IFxqxq-6=8)m}1)JSX#e|_M{KUk>5#QS><loxB3q=1{YFZY}B}z(kBt8v9gGXT5
zGtEp@)I3i9xjaYbgUpxYo-^xW$k}>$$-x`QajsTaq2gEF<n=*9SZmsEYB~0&dD5_r
z3?zhjr5qi^ilcO&no3%mo#IZoDs6}gD*c1_nZi@@v4Jt^8z_M=LhN`Ips)K<QC}3r
z0Qx@(|F#6e1)-q|&|X3LaBzOxa81!P#S;;LfxfMT%Bs$%fA+Bloyt4k{vyl|{fd!C
z^i*o)Z~y$hh;%tLiNsf{AvBUfaM5ev2`!SFgNFqie{bbu93y4)Xi{5UBC}YNhW|&}
z&^oK^s~4F8oz8Oj$CN1hFgEW%4j%4aXe13O*vAV;mk%R5?eXuN#pxOG*2?vuUS;I#
zGN3}#BVy`%<bil(`<+*V!e<fL=x5b${e&phhW-(CPgLOIS3Po5>$Wfot5v%>56Nvp
zPm5O>*$zJT<)2dTNXy(KoUAS4#j}Q3T?v&0zTyvQ99!bbAA_pvC}$_f#O5<<d1zB%
zQ6P`LA3TBLX4{cwD{b?Op;90UR6-f3BhX3(VD_p{bGs<Gx+)j7|3<p8ag<{J_@yim
zmu7~<AfdE)>5b!)-0$@!lC0q%Tey6JDfk!77_n`{e-&Cu@M}w*k{>FtGc@`3C;#9@
zYeF0Jo^t+l1~T_g_uTv|8+~)tJi!pp+~KH0vu)d+5M+rrgLtiAREbID?Tf`Mp##Q?
z)$vB+pAdZ+O@s?{>T$vy`MVEColMy*uLekSijBSqh>u5Gy=*K`s+u?}h;XQ%!sr5>
zC(p5v)d`hXY#(N`tnU`dB1=VPc2J)838B>?N?!b%<h#)eCazukxR;}eZImD>&H28A
z2$N~)m%i~?ZA%_lfqLKZJsGrq5oo*`qP~~bA^XDnVNUT!lwdr8$*183Nxg*C6q!Ml
z)~zf(&tW97dMXa+v)E=xA32&-{U5RX$NBxb&54o23cvLGLlOU;S#HA#YF@o<Il^Kp
zARHYLzHe7`iPvp$M;DX-nh&zrD6IlT`xlX2BO?7-E=tpcQ%VPx**NiD40s72?f5fw
z4l?EsNB&Doh+^<wmnL$vjhjxF&(iT5_p^N;{hAhUo3Z`O`O4R_*e%<_iIb|PUoOfo
z$DL`5yAhLZ^F$Dp(|`)a@7v>%@7~IX`h@?sqfZlm{@9FHDGNXW*OG2Oac+%zREroS
zIIMeo-OjW6E_^};ky)&=9l-Tuh~{)vtWikG8v{@m)5@&`?UT&e7@%$49AKNsY6=b0
zh4X`N(WUFR_`1+>1W!)qH05Q0slWj`c-G`NJ)eBJ-`nTPoRQdnS$ZC3VYOUXJW}<F
zK{|J7=S#V9Zj)jkGPnttDC*yt5PtPGd$%uzvq`Cgs;SYV@?PIe2%z%N#R%b3e)|S<
zc8v-3X4aL(6b*LhZ&#-$(QTbRv<4;1o4a2)5@KmsXX4LfW%JlXzk3}zqDJN8wj@$c
zBJXUnYb5u@mJJuzrK`!RB?@$ae6&bN%&7o-PW0fakAU3X=}Gkjw5(RpkiT?<t~P!Y
zxxy>p@;|C6iVd250yOTR^5ssi%21&vvez|71%x*Oj>y%CP^FQ8BBE3~{>r>YrTnAV
z`;n;akvUhCG^`Cd6|)t>J$1#xWS(y9GPdR&<KT}upD^aSy4^HVpm&V~?8Um)NBo8l
zSpr+qSeUMZ)tKSqd)ADi&zA2_rD)`mFb$26PMhyr>V;Yv06I4G`y0&S{7M2Zsu|~Y
z8`0&@8hq&e`GR8B%e|ze#Hf*e3w~s+_f0ukT<AdspP-T8^h9dii#-05q+vq(5RnEm
zX@Ln4W}&=YRt_3-rqCFILn(1O<<H-O+WORumECo4+!rw2Kkp;D$4-gRXZnt>Zc;H*
zgB_!7ofRbp0LH=i(KCUY?q5OtTX=5QflA7Rw^u|$t^ot*NJeKgmvvr+sE+LS*ur)?
z<3*8A_=cQkrGQFrm5$($q)_1->@NEv&wj(bHmVsqgFqmqwpL=j-uerBR%<pyKWL^H
z$GBK|oj_CDyey!>JU%Q2^7wgMZAV4lt4x-i$<nVMxIs`Yy)VGmvH@Wm^WX3+846SE
zEM=C-#%Grb-i*$ax?>Ai<o5<&!0)KyZ)L&PrV>u25N;F7D}SZO(pE3?WW`mh=Db|`
zUBjI`A&oxB-pk2-%Gq3&#Vgrk;CoMkka%XY#e?6=q-?W_rL21}&#0Ibb~WfBjIbKo
zifkkfG){P~t}rzz^1sD8z6PJ91Z|A6FyWwmb6!S~KUmLhL^$WSwO0TkUmue%=OE#!
z*uzT@YN?d7O3SIVX_wVRSvUpt9$>!s4MA5mnGK~Ju+1K8x-J*>n^m4GB6&PVw3L*d
z2Y6TgoQ}8&eY$uT(bu?kt|HQctP6|fhNb^|EaHlUbV(?{>ubmTGuPs<F@W74zIr^9
zf8?ZHz)tShgv-GUHpL@jG5dPHAA#Q~za|urI7^@H181!I0)M!{61-)XrgIZD;Qr<7
z*)GxZz(W|GDxa;}eGW()yv@e-ab3?b5dE+!v1TEhw`x9F%u+mEup>_}7-r44x1^s2
zly#4OZ>s5Dp%0tXQc#lkO|AvoD@YP*;PQ#n=Xb2}X1?gk`>W^@r6=@n%`xl7aEmmP
zDr#?kF&BjKicc8Y2DY`2#p)KgS+p|h(Ti$^oD9P*F0AU1d5?@J(e?np!bp;o`(}+x
zoj>BEGnhRE?6;<-*e@IRexX=awWSF_Nr9i9lWFqUA<IkVYxO7>Ejtx0Iw`7>sb3Yv
z^zi55JY-9Gk8GMD_{7DBL5;~Tu^(KeotVZmS$X@pDM^m}$4J{57OS095Pg-+7M6+p
zL*si(_FRVhW1;G34pM4IQUAoXD?Iw&GYt=(x;d0upkiQnBlD67*V&6DG_BPDBpL5c
zb;U@WKIsgqw`AXMz15CmuB2oSIL2B+PfTSR@RMSjd=wOJMUrxlex99=evLS4d=OcC
zIHdijmEvA<-(ou_<L~m~Yq-nG$*j6HO*~HqBlud~h3Px##q-%biMB<p%%}lyz2zbH
z*vo!mr(|jt(M3=^RH(88=U~SGlYvd4VS-ZnK6whAsn2q*4_~9R23pn}M9J7+JwsN6
z%8f!6%M5-DohZVeI3-;jm}!tpRpKQB!cgKIays7*SJG)VGSfLRtR=$Xv(gK~QoauD
zoCz0Y%q$V&kUAyzbxGyYLlWp&nLA@Cy8*RWZO6^z%S@H1=Y0V0ro}X1vdIH$h7x?Y
zVvrl`2yP~KwzJ7ry%AYy4&s2;1wmmaPO4;S2q7I92K}LKD<O|x9#(YKqn+CR#-;yy
z-(tjjTyvIrDN5#3XfTUn%xn>69;J{G`T>1`e$OVPr!MxnEd!PbZAEY$VH*gRsF@P~
zj4ynfzwm(k#T$MEC(8o(DVM~~-zAOgQu9;HAEt6p&COS%c1={^OvEa~`_-Bzh;^ur
z`vgw_LM;q;C+UdgIlfPjaSmnK*L!O_)XK0&{nYgDT{l@pM6S@*R%xjeo^}f<v&4|*
z$o4hm=Qc<*ZusH9w9Ez)`r`eIBAM!qr2;VNwqz4DC0qOY0sa+8N*tsAT!fnEsU$o4
z+P~ISMA+)a)9$P_s)6r2s<*KdiEty5TiU;IwD@`$TUD>ok3E&Z3VxCC8n}KXkkOLl
zW8jw&{qXIyQf&D;cPJ^m1U~C9?oQ4RS1qB7Ao$mk6rXTP4cpIr-G{*^zJfA+!R`ax
zwjO`0gYVz5LWq6<_(IPGvn*4;GO&P~-yI^OgCwYF+67WY&oLUh=wn~zhQ?7=iG!JQ
z&5vrNc`F}iK9e9M_eOmDq44z^+Dx4LPmfpbIn&^l`80v9eiCEu#=`0+SJQiBwfSnM
z1T_;Xm>=V(T0UQ*q~G)K2c^mchAg8O-g*MQRLFS8Uk2r=04ZU<ZF_0~<@b=hKje0D
z!Z^2W&ar(oyL8Z#j?FFRa<(^WM;`7}l29~xl!TCS|2S&{qeNfP?ho8}7jL$|AI%bS
z$_R1xly=XRC9SZxBYx6+3Y_(nh>AM;8eN7{NI6ldZO~7fXz6tUuS``M{Kp9EhuChu
zZogg#t_LTs08k_w@G>6&+3aW43CONH<?PIyp|qQMK4nf=+~7eL;}CpAzq3C@Nc$5r
z0M8(ZELKDkC3&?dpQjt%>ISj=)3dKGK!c*MwDvAvYuT?mRxYfp&|d5Q$OVI|pR`Hz
zeg)0SjJRo{iz<g62_Qevpt0->N72x{_aJ;f{q?2@4Ol*LC^v`82o3wI+vj^$K$f1m
zd&LvHo#44GL^APLzdddKoN0LK)BK0cj8OO3LRI@&y<zwqj1Mr-J2qpP)&?0EMf5YA
zw$mN{DV+jRc{Sa^;|R_w2$uOc4eGSFo$AWvT#|!B=sO_u>wZ~Eo<L7@Td;)fBtCgN
zpO~4j0p;I2PgV77EtW#KH$iN$dX6@?LdN-H492C6TBf82Xtm&l0F7+yD8&O9x>Bn0
zLD+82AG-iwxCzMs1|#d_)`N;KiT8BmJWyFq&GWKFP&(YVCO=HFj1*Z%Crl+Av!jOw
zatc1`^%5j31n@FQq%fJ!2P4r^Kl&WBJ9cOSlEE2^)B0MSB&gVgr(Xr(28<x!lh#-%
z0`4zHs90V2hR5R`o%hJ2H}sWo3}XB5wEOMI<E?tkqW{(Zoso|p`1j`ns+I!L-csvr
zY)t#dEB_y8f@WI&`0hn%V^-X41xjbogbmw<SS=ji=ySp!`7<SM|KcPcRb!UvEd5QC
zfcR^R$+c!>tmwZ~^~VZQVK<m43743yzGSL_<2T%Wm@i>pusFtBdFdGg4&8FsJ`Mc9
z=@we66ZjS)(VAP0$C1aL`Mzu~WQB&5SLTlQ$z3*QOa?nK<r^4!*1XN{`gj<Pz&zWI
zyUjTLPWG7aQ;2Mzm(L*jhNT!vxna811mN|@;Tfb%7|qMn1iP!npfl+7M^SSQ47m%B
zh|^wujx;cSN>Frm9Kw)?YS67Ut9S2;82Jm_1&hfa%sb5P>$1)n(o3z?_y_OoY7aWE
z%?zwTiZ$|Z0*%o#-o0|sM}@khccChE=nUdcQgG&Df=!-+e`s2BAc&vab7eXd0U`ZO
z_@Z`;lS}A1Ke>vlI3&w|xo+c-9U2s4dT@u{S&yxrPSmthJ~JW}s3vX*Y6g@W9&mo=
ze^U+&HC)oNP!*l^y0%@1`nfZHFL^H036XqQ%M76UY`QPni<Gjp8_k%mn}Zkl85F(J
zM}4rN>InW|3b~eCv~b8o#8Z0323R8Yd8`SWBO?(_^eW$DEZz$j?RKPN{VqN1qNewG
z+gR0gEhJb*D@?ApfK`7#UKLGL!!ydilFonq`As;*xl<pxsMWAV>?Eq@<seK7J(~8G
zFG}nEhkvmy<y3AxDWd~lNoCT5v3AEv6C0T5%H<)t{d3oCxo?-Bcuj#yOyJZdfDVmK
zn~b5+>^y|E#l3k4lVw!w#8%kndld&N<kv-T<9hrbO|#J@{qkYn3TR`uWZTded^~S3
zzLedTjn+e$=e-xLK2gs?8Ew+E8@f*nyu&?nfKsn=<D*1~HYYc9a8uvKd~STke)`MI
zY%QxqRi%N4LMla!Rk>*^8-Q10R?50Ri^NReMkl6%x;2BjapJ6gEHL#1ci?_UtDc4=
zG9apUfuM`v)z@%}QsKruBUYAz8BrqD07ag2>cqBvZxfZpp~}}0fmFlW89zrg52X`~
z=ZKN#TV(fe)6{KXmaIBzf_tRIf@>ulUV7||(f4g+fwlzdr<5R$>YI85_JmQI>h?FK
zXVI8Gu_p?9o*ltj#KX;CZ7jVav6-U|zqd!41YA^A*n3OmiL6p-i%-gG%-LmC*t?OG
g9gomMY$x<<V;#NbJ%dwwBU3WJFu@U4AU!?(4<{v%IRF3v

diff --git a/README.md b/README.md
index a92f71df..b6e529d7 100644
--- a/README.md
+++ b/README.md
@@ -95,7 +95,7 @@ fingerprint. Make sure exactly these two certificates ("*E1*" and
 
     /certificate/set name="E1" [ find where common-name="E1" ];
     /certificate/set name="ISRG-Root-X2" [ find where common-name="ISRG Root X2" ];
-    /certificate/print proplist=name where fingerprint="46494e30379059df18be52124305e606fc59070e5b21076ce113954b60517cda" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
+    /certificate/print proplist=name,fingerprint where fingerprint="46494e30379059df18be52124305e606fc59070e5b21076ce113954b60517cda" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
     /file/remove [ find where name="letsencrypt-E1.pem" ];
 
 ![screenshot: check certs](README.d/03-check-certs.avif)

From 63786b78145919736de089d76c0fe8be5adbc254 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 10:43:19 +0200
Subject: [PATCH 140/988] netwatch-notify: log to debug...

... instead of discarding the message completely.
---
 netwatch-notify.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 9b0beb93..17682f04 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -116,8 +116,9 @@
             }
           } on-error={
             :set ($Metric->"resolve-failcnt") ($Metric->"resolve-failcnt" + 1);
-            :if ($Metric->"resolve-failcnt" = 3 && $HostInfo->"no-resolve-fail" != true) do={
-              $LogPrint warning $ScriptName ("Resolving name '" . $HostInfo->"resolve" . [ $IfThenElse \
+            :if ($Metric->"resolve-failcnt" = 3) do={
+              $LogPrint [ $IfThenElse ($HostInfo->"no-resolve-fail" != true) warning debug ] \
+                  $ScriptName ("Resolving name '" . $HostInfo->"resolve" . [ $IfThenElse \
                   ($HostInfo->"resolve" != $HostInfo->"name") ("' for " . $Type . " '" . \
                   $HostInfo->"name") "" ] . "' failed.");
             }

From db1faf1091ed300931793e2e198acf83e8eca4d2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 13:41:36 +0200
Subject: [PATCH 141/988] backup-upload: remove temporary directory

---
 backup-upload.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 63e5b7f3..1b9058d5 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -158,4 +158,5 @@
     :set PackagesUpdateBackupFailure true;
     :error false;
   }
+  /file/remove $DirName;
 } on-error={ }

From b3b7643661b13856437ff75cca0bb48f1e1aa0bc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 29 Apr 2024 18:03:08 +0200
Subject: [PATCH 142/988] backup-upload: no early exit...

---
 backup-upload.rsc | 1 -
 1 file changed, 1 deletion(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 1b9058d5..1dc98d52 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -156,7 +156,6 @@
 
   :if ($Failed = 1) do={
     :set PackagesUpdateBackupFailure true;
-    :error false;
   }
   /file/remove $DirName;
 } on-error={ }

From 505074e6d333f9696eb1b2e6afc90a59a5e1e1d6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 14:09:21 +0200
Subject: [PATCH 143/988] backup-cloud: no early exit...

... as we want to make sure the directory (and its content) is removed.
---
 backup-cloud.rsc | 1 -
 1 file changed, 1 deletion(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 8e29c677..1085f058 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -79,7 +79,6 @@
       message=("Failed uploading backup for " . $Identity . " to cloud!\n\n" . [ $DeviceInfo ]) });
     $LogPrint error $ScriptName ("Failed uploading backup for " . $Identity . " to cloud!");
     :set PackagesUpdateBackupFailure true;
-    :error false;
   }
   /file/remove "tmpfs/backup-cloud";
 } on-error={ }

From 5f1656b7ce439e6567803299eaddca215e8cb7cf Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 13:53:04 +0200
Subject: [PATCH 144/988] backup-cloud: clean up and simplify code

---
 backup-cloud.rsc | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 1085f058..bdc6c340 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -49,13 +49,11 @@
 
   :execute {
     :global BackupPassword;
-    # we are not interested in output, but print is
-    # required to fetch information from cloud
-    /system/backup/cloud/print as-value;
-    :delay 20ms;
-    :if ([ :len [ /system/backup/cloud/find ] ] > 0) do={
+
+    :local Backup ([ /system/backup/cloud/find ]->0);
+    :if ([ :typeof $Backup ] = "id") do={
       /system/backup/cloud/upload-file action=create-and-upload \
-          password=$BackupPassword replace=[ get ([ find ]->0) name ];
+          password=$BackupPassword replace=$Backup;
     } else={
       /system/backup/cloud/upload-file action=create-and-upload \
           password=$BackupPassword;

From 57ebcfb41cbd078ba62c7d4e7e921ffdae834521 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 29 Apr 2024 17:37:28 +0200
Subject: [PATCH 145/988] backup-cloud: retry on error...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Let's see if brute force helps. 🤪
---
 backup-cloud.rsc | 28 ++++++++++++++++------------
 1 file changed, 16 insertions(+), 12 deletions(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index bdc6c340..88dd3457 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -47,19 +47,23 @@
     :error false;
   }
 
-  :execute {
-    :global BackupPassword;
+  :local I 5;
+  :do {
+    :execute {
+      :global BackupPassword;
 
-    :local Backup ([ /system/backup/cloud/find ]->0);
-    :if ([ :typeof $Backup ] = "id") do={
-      /system/backup/cloud/upload-file action=create-and-upload \
-          password=$BackupPassword replace=$Backup;
-    } else={
-      /system/backup/cloud/upload-file action=create-and-upload \
-          password=$BackupPassword;
-    }
-    /file/add name="tmpfs/backup-cloud/done";
-  } as-string;
+      :local Backup ([ /system/backup/cloud/find ]->0);
+      :if ([ :typeof $Backup ] = "id") do={
+        /system/backup/cloud/upload-file action=create-and-upload \
+            password=$BackupPassword replace=$Backup;
+      } else={
+        /system/backup/cloud/upload-file action=create-and-upload \
+            password=$BackupPassword;
+      }
+      /file/add name="tmpfs/backup-cloud/done";
+    } as-string;
+    :set I ($I - 1);
+  } while=([ $WaitForFile "tmpfs/backup-cloud/done" 200ms ] = false && $I > 0);
 
   :if ([ $WaitForFile "tmpfs/backup-cloud/done" ] = true) do={
     :local Cloud [ /system/backup/cloud/get ([ find ]->0) ];

From 4006d07222511b94fd84aa4578a0b857a59639d5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 14:20:30 +0200
Subject: [PATCH 146/988] global-functions: $FetchHuge: remove temporary
 directory

---
 global-functions.rsc | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 66765bfa..b0bde7e3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -406,13 +406,13 @@
 
   :set CheckCert [ $IfThenElse ($CheckCert = false) "no" "yes-without-crl" ];
 
-  :local FileName ("tmpfs/" . [ $CleanName $ScriptName ]);
-  :if ([ $MkDir $FileName ] = false) do={
+  :local DirName ("tmpfs/" . [ $CleanName $ScriptName ]);
+  :if ([ $MkDir $DirName ] = false) do={
     $LogPrint error $0 ("Failed creating directory!");
     :return false;
   }
 
-  :set FileName ($FileName . "/" . [ $CleanName $0 ] . "-" . [ $GetRandom20CharAlNum ]);
+  :local FileName ($DirName . "/" . [ $CleanName $0 ] . "-" . [ $GetRandom20CharAlNum ]);
   :do {
     /tool/fetch check-certificate=$CheckCert $Url dst-path=$FileName \
       http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) as-value;
@@ -421,6 +421,7 @@
       /file/remove $FileName;
     }
     $LogPrint debug $0 ("Failed downloading from: " . $Url);
+    /file/remove $DirName;
     :return false;
   }
   $WaitForFile $FileName;
@@ -432,7 +433,7 @@
     :set Return ($Return . ([ /file/read offset=$VarSize chunk-size=32768 file=$FileName as-value ]->"data"));
     :set VarSize [ :len $Return ];
   }
-  /file/remove $FileName;
+  /file/remove $DirName;
   :return $Return;
 }
 

From f1ad80873498e314bbc04f3f2be5feff33d7e9ff Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 14:26:05 +0200
Subject: [PATCH 147/988] mod/ssh-keys-import: create directory later

---
 mod/ssh-keys-import.rsc | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index f37c28bb..e920762f 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -38,11 +38,6 @@
     :return false;
   }
 
-  :if ([ $MkDir "tmpfs/ssh-keys-import" ] = false) do={
-    $LogPrint warning $0 ("Creating directory 'tmpfs/ssh-keys-import' failed!");
-    :return false;
-  }
-
   :local FingerPrintMD5 [ :convert from=base64 transform=md5 to=hex ($KeyVal->1) ];
 
   :if ([ :len [ /user/ssh-keys/find where user=$User key-owner~("\\bmd5=" . $FingerPrintMD5 . "\\b") ] ] > 0) do={
@@ -51,6 +46,11 @@
     :return false;
   }
 
+  :if ([ $MkDir "tmpfs/ssh-keys-import" ] = false) do={
+    $LogPrint warning $0 ("Creating directory 'tmpfs/ssh-keys-import' failed!");
+    :return false;
+  }
+
   :local FileName ("tmpfs/ssh-keys-import/key-" . [ $GetRandom20CharAlNum 6 ] . ".pub");
   /file/add name=$FileName contents=($Key . ", md5=" . $FingerPrintMD5);
   $WaitForFile $FileName;

From b0f58696f334c9c378229f68f7e5e6d69a4b6af7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 14:30:42 +0200
Subject: [PATCH 148/988] mod/ssh-keys-import: remove temporary directory

---
 mod/ssh-keys-import.rsc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index e920762f..6272a939 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -59,8 +59,10 @@
     /user/ssh-keys/import public-key-file=$FileName user=$User;
     $LogPrint info $0 ("Imported ssh public key (" . $KeyVal->2 . ", " . $KeyVal->0 . ", " . \
       "MD5:" . $FingerPrintMD5 . ") for user '" . $User . "'.");
+    /file/remove "tmpfs/ssh-keys-import";
   } on-error={
     $LogPrint warning $0 ("Failed importing key.");
+    /file/remove "tmpfs/ssh-keys-import";
     :return false;
   }
 }

From 755db5d66db8e24872fb7bf959e09b047f7cd5f9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 14:50:57 +0200
Subject: [PATCH 149/988] global-functions: $CleanName: do not start with a
 dash

---
 global-functions.rsc | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index b0bde7e3..5135fc1a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -230,11 +230,19 @@
   :for I from=0 to=([ :len $Input ] - 1) do={
     :local Char [ :pick $Input $I ];
     :if ([ :typeof [ find "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-" $Char ] ] = "nil") do={
-      :set Char "-";
-    }
-    :if ($Char != "-" || [ :pick $Return ([ :len $Return ] - 1) ] != "-") do={
-      :set Return ($Return . $Char);
+      :do {
+        :if ([ :len $Return ] = 0) do={
+          :error true;
+        }
+        :if ([ :pick $Return ([ :len $Return ] - 1) ] = "-") do={
+          :error true;
+        }
+        :set Char "-";
+      } on-error={
+        :set Char "";
+      }
     }
+    :set Return ($Return . $Char);
   }
   :return $Return;
 }

From e7cdb2d7f454fa093b6b9be3e38a86a90d344d55 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 25 Apr 2024 23:59:11 +0200
Subject: [PATCH 150/988] mod/notification-matrix: format date & time italic

---
 mod/notification-matrix.rsc | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 9442f548..196633a4 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -139,11 +139,12 @@
     :if ([ :typeof $MatrixQueue ] = "nothing") do={
       :set MatrixQueue ({});
     }
-    :local Text ([ $SymbolForNotification "alarm-clock" ] . \
-      "This message was queued since " . [ /system/clock/get date ] . \
-      " " . [ /system/clock/get time ] . " and may be obsolete.");
-    :set Plain ($Plain . "\n" . $Text);
-    :set Formatted ($Formatted . "<br/>" . $Text);
+    :local Symbol [ $SymbolForNotification "alarm-clock" ];
+    :local DateTime ([ /system/clock/get date ] . " " . [ /system/clock/get time ]);
+    :set Plain ($Plain . "\n" . $Symbol . "This message was queued since *" . \
+        $DateTime . "* and may be obsolete.");
+    :set Formatted ($Formatted . "<br/>" . $Symbol . "This message was queued since <em>" . \
+        $DateTime . "</em> and may be obsolete.");
     :set ($MatrixQueue->[ :len $MatrixQueue ]) { headers=$Headers; \
         accesstoken=$AccessToken; homeserver=$HomeServer; room=$Room; \
         plain=$Plain; formatted=$Formatted };

From d6e315580bf354e7a5620955c707e604d3cdaf9e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 26 Apr 2024 00:18:07 +0200
Subject: [PATCH 151/988] mod/notification-telegram: capitalize Telegram in
 message

---
 mod/notification-telegram.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 745367a1..440e0dd8 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -149,7 +149,7 @@
       "&parse_mode=MarkdownV2&text=" . [ $UrlEncode $Text ]) as-value ]->"data");
     :set ($TelegramMessageIDs->[ :tostr ([ :deserialize from=json value=$Data ]->"result"->"message_id") ]) 1;
   } on-error={
-    $LogPrint info $0 ("Failed sending telegram notification! Queuing...");
+    $LogPrint info $0 ("Failed sending Telegram notification! Queuing...");
 
     :if ([ :typeof $TelegramQueue ] = "nothing") do={
       :set TelegramQueue ({});

From 4b6cd7ba2911b44f8d0890c19c5342ce28a6b3a8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 26 Apr 2024 08:15:56 +0200
Subject: [PATCH 152/988] mod/notification-telegram: use proper variable
 naming...

... in local escaping function.
---
 mod/notification-telegram.rsc | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 440e0dd8..efde85a1 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -81,24 +81,26 @@
   :global UrlEncode;
 
   :local EscapeMD do={
+    :local Text [ :tostr $1 ];
+    :local Mode [ :tostr $2 ];
+
     :global CharacterReplace;
     :global IfThenElse;
 
-    :local Return $1;
     :local Chars {
-      "body"={ "\\"; "`" };
+       "body"={ "\\"; "`" };
       "plain"={ "_"; "*"; "["; "]"; "("; ")"; "~"; "`"; ">";
                 "#"; "+"; "-"; "="; "|"; "{"; "}"; "."; "!" };
     }
-    :foreach Char in=($Chars->$2) do={
-      :set Return [ $CharacterReplace $Return $Char ("\\" . $Char) ];
+    :foreach Char in=($Chars->$Mode) do={
+      :set Text [ $CharacterReplace $Text $Char ("\\" . $Char) ];
     }
 
-    :if ($2 = "body") do={
-      :return ("```\n" . $Return . "\n```");
+    :if ($Mode = "body") do={
+      :return ("```\n" . $Text . "\n```");
     }
 
-    :return $Return;
+    :return $Text;
   }
 
   :local ChatId [ $EitherOr ($Notification->"chatid") \

From f8856ae7423d2b969b02094cc002e75388ee6374 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 26 Apr 2024 08:24:06 +0200
Subject: [PATCH 153/988] mod/notification-telegram: support excluding
 characters from escaping...

... to support formatting in plain text.

Handle with care, this can break the request if done wrong!
---
 mod/notification-telegram.rsc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index efde85a1..858ab1bc 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -83,6 +83,7 @@
   :local EscapeMD do={
     :local Text [ :tostr $1 ];
     :local Mode [ :tostr $2 ];
+    :local Excl [ :tostr $3 ];
 
     :global CharacterReplace;
     :global IfThenElse;
@@ -93,7 +94,9 @@
                 "#"; "+"; "-"; "="; "|"; "{"; "}"; "."; "!" };
     }
     :foreach Char in=($Chars->$Mode) do={
-      :set Text [ $CharacterReplace $Text $Char ("\\" . $Char) ];
+      :if ([ :typeof [ :find $Excl $Char ] ] = "nil") do={
+        :set Text [ $CharacterReplace $Text $Char ("\\" . $Char) ];
+      }
     }
 
     :if ($Mode = "body") do={

From 0fd1e506badcce5580fc6505c423e4fe65db4d1e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 25 Apr 2024 23:59:38 +0200
Subject: [PATCH 154/988] mod/notification-telegram: format date & time italic

---
 mod/notification-telegram.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 858ab1bc..4c2fd94f 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -160,8 +160,8 @@
       :set TelegramQueue ({});
     }
     :set Text ($Text . "\n" . [ $SymbolForNotification "alarm-clock" ] . \
-      [ $EscapeMD ("This message was queued since " . [ /system/clock/get date ] . \
-      " " . [ /system/clock/get time ] . " and may be obsolete.") "plain" ]);
+      [ $EscapeMD ("This message was queued since _" . [ /system/clock/get date ] . \
+      " " . [ /system/clock/get time ] . "_ and may be obsolete.") "plain" "_" ]);
     :set ($TelegramQueue->[ :len $TelegramQueue ]) { chatid=$ChatId; tokenid=$TokenId;
       text=$Text; silent=($Notification->"silent"); replyto=($Notification->"replyto") };
     :if ([ :len [ /system/scheduler/find where name="_FlushTelegramQueue" ] ] = 0) do={

From 40f13b6ca45a15def2e63bab22d87ddf398c3cc7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 29 Apr 2024 13:34:30 +0200
Subject: [PATCH 155/988] mod/notification-telegram: format percentage italic

---
 mod/notification-telegram.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 4c2fd94f..9a628ced 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -138,8 +138,8 @@
   }
   :if ($Truncated = true) do={
     :set Text ($Text . "\n" . [ $SymbolForNotification "scissors" ] . \
-      [ $EscapeMD ("The message was too long and has been truncated, cut off " . \
-      (($LenSum - [ :len $Text ]) * 100 / $LenSum) . "%!") "plain" ]);
+      [ $EscapeMD ("The message was too long and has been truncated, cut off _" . \
+      (($LenSum - [ :len $Text ]) * 100 / $LenSum) . "%_!") "plain" "_" ]);
   }
 
   :do {

From 6ba1faca4c156097448c766098688cc5c4ef6045 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 26 Apr 2024 20:50:08 +0200
Subject: [PATCH 156/988] telegram-chat: shorten the message

---
 telegram-chat.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index c1a1cbcc..f8dcd423 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -81,7 +81,7 @@
   }
 
   :if ($Data = false) do={
-    $LogPrint warning $ScriptName ("Failed getting updates from Telegram.");
+    $LogPrint warning $ScriptName ("Failed getting updates.");
     :error false;
   }
 

From 52ec6b7ea19256e47d9ffd1519ef9d7799ca48ba Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 29 Apr 2024 17:57:22 +0200
Subject: [PATCH 157/988] global-functions: $WaitForFile: use fewer steps

---
 global-functions.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 5135fc1a..1c36e2ab 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1520,10 +1520,10 @@
 
   :set FileName [ $CleanFilePath $FileName ];
   :local I 1;
-  :local Delay ([ :totime [ $EitherOr $WaitTime 2s ] ] / 20);
+  :local Delay ([ :totime [ $EitherOr $WaitTime 2s ] ] / 10);
 
   :while ([ :len [ /file/find where name=$FileName ] ] = 0) do={
-    :if ($I >= 20) do={
+    :if ($I >= 10) do={
       :return false;
     }
     :delay $Delay;

From 517ed7bf8cefe47e6c409915a4b27384f081715d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 29 Apr 2024 17:55:48 +0200
Subject: [PATCH 158/988] global-functions: $WaitForFile: respect minimum delay

---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 1c36e2ab..9c009ae4 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1517,10 +1517,11 @@
 
   :global CleanFilePath;
   :global EitherOr;
+  :global MAX;
 
   :set FileName [ $CleanFilePath $FileName ];
   :local I 1;
-  :local Delay ([ :totime [ $EitherOr $WaitTime 2s ] ] / 10);
+  :local Delay ([ :totime [ $MAX [ $EitherOr $WaitTime 2s ] 100ms ] ] / 10);
 
   :while ([ :len [ /file/find where name=$FileName ] ] = 0) do={
     :if ($I >= 10) do={

From eae8dbbb378dbfe43c83e77529895747da0e260e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 29 Apr 2024 17:59:41 +0200
Subject: [PATCH 159/988] global-functions: $WaitForFile: drop extra conversion

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 9c009ae4..e8163eda 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1521,7 +1521,7 @@
 
   :set FileName [ $CleanFilePath $FileName ];
   :local I 1;
-  :local Delay ([ :totime [ $MAX [ $EitherOr $WaitTime 2s ] 100ms ] ] / 10);
+  :local Delay ([ $MAX [ $EitherOr $WaitTime 2s ] 100ms ] / 10);
 
   :while ([ :len [ /file/find where name=$FileName ] ] = 0) do={
     :if ($I >= 10) do={

From fb7170f3121dd9e25cc320e5f0c98d1829e49d33 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 8 May 2024 12:30:13 +0200
Subject: [PATCH 160/988] global-functions: $IsTimeSync: log just once

---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index e8163eda..5cc665c7 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -673,7 +673,7 @@
   :global IsTimeSyncCached;
   :global IsTimeSyncResetNtp;
 
-  :global LogPrint;
+  :global LogPrintOnce;
 
   :if ($IsTimeSyncCached = true) do={
     :return true;
@@ -702,7 +702,7 @@
 
   :if ([ /system/license/get ]->"level" = "free" || \
        [ /system/resource/get ]->"board-name" = "x86") do={
-    $LogPrint debug $0 ("No ntp client configured, relying on RTC for CHR free license and x86.");
+    $LogPrintOnce debug $0 ("No ntp client configured, relying on RTC for CHR free license and x86.");
     :return true;
   }
 
@@ -714,7 +714,7 @@
     :return false;
   }
 
-  $LogPrint debug $0 ("No time source configured! Returning gracefully...");
+  $LogPrintOnce debug $0 ("No time source configured! Returning gracefully...");
   :return true;
 }
 

From 2745597b93901d34a4ade63d789c984adccd8b54 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 8 May 2024 14:25:02 +0200
Subject: [PATCH 161/988] global-functions: $IsTimeSync: add (one time) warning
 on failed ntp sync

---
 global-functions.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 5cc665c7..b1833b11 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -693,6 +693,7 @@
       :return false;
     }
 
+    $LogPrintOnce warning $0 ("The ntp client is configured, but did not sync.");
     :set IsTimeSyncResetNtp $Uptime;
     /system/ntp/client/set enabled=no;
     :delay 20ms;

From c87a7519fe03249b8dbc5da3233e593c0290095d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 10 May 2024 13:17:02 +0200
Subject: [PATCH 162/988] fw-addr-lists: add 'strongips' list from blocklist.de

---
 certs/Certum-Domain-Validation-CA-SHA2.pem | 176 +++++++++++++++++++++
 doc/fw-addr-lists.md                       |   4 +-
 global-config.rsc                          |   2 +
 global-functions.rsc                       |   2 +-
 news-and-changes.rsc                       |   1 +
 5 files changed, 182 insertions(+), 3 deletions(-)
 create mode 100644 certs/Certum-Domain-Validation-CA-SHA2.pem

diff --git a/certs/Certum-Domain-Validation-CA-SHA2.pem b/certs/Certum-Domain-Validation-CA-SHA2.pem
new file mode 100644
index 00000000..0cc17ac5
--- /dev/null
+++ b/certs/Certum-Domain-Validation-CA-SHA2.pem
@@ -0,0 +1,176 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 279744 (0x444c0)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
+        Validity
+            Not Before: Oct 22 12:07:37 2008 GMT
+            Not After : Dec 31 12:07:37 2029 GMT
+        Subject: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:e3:fb:7d:a3:72:ba:c2:f0:c9:14:87:f5:6b:01:
+                    4e:e1:6e:40:07:ba:6d:27:5d:7f:f7:5b:2d:b3:5a:
+                    c7:51:5f:ab:a4:32:a6:61:87:b6:6e:0f:86:d2:30:
+                    02:97:f8:d7:69:57:a1:18:39:5d:6a:64:79:c6:01:
+                    59:ac:3c:31:4a:38:7c:d2:04:d2:4b:28:e8:20:5f:
+                    3b:07:a2:cc:4d:73:db:f3:ae:4f:c7:56:d5:5a:a7:
+                    96:89:fa:f3:ab:68:d4:23:86:59:27:cf:09:27:bc:
+                    ac:6e:72:83:1c:30:72:df:e0:a2:e9:d2:e1:74:75:
+                    19:bd:2a:9e:7b:15:54:04:1b:d7:43:39:ad:55:28:
+                    c5:e2:1a:bb:f4:c0:e4:ae:38:49:33:cc:76:85:9f:
+                    39:45:d2:a4:9e:f2:12:8c:51:f8:7c:e4:2d:7f:f5:
+                    ac:5f:eb:16:9f:b1:2d:d1:ba:cc:91:42:77:4c:25:
+                    c9:90:38:6f:db:f0:cc:fb:8e:1e:97:59:3e:d5:60:
+                    4e:e6:05:28:ed:49:79:13:4b:ba:48:db:2f:f9:72:
+                    d3:39:ca:fe:1f:d8:34:72:f5:b4:40:cf:31:01:c3:
+                    ec:de:11:2d:17:5d:1f:b8:50:d1:5e:19:a7:69:de:
+                    07:33:28:ca:50:95:f9:a7:54:cb:54:86:50:45:a9:
+                    f9:49
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                08:76:CD:CB:07:FF:24:F6:C5:CD:ED:BB:90:BC:E2:84:37:46:75:F7
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+    Signature Algorithm: sha1WithRSAEncryption
+    Signature Value:
+        a6:a8:ad:22:ce:01:3d:a6:a3:ff:62:d0:48:9d:8b:5e:72:b0:
+        78:44:e3:dc:1c:af:09:fd:23:48:fa:bd:2a:c4:b9:55:04:b5:
+        10:a3:8d:27:de:0b:82:63:d0:ee:de:0c:37:79:41:5b:22:b2:
+        b0:9a:41:5c:a6:70:e0:d4:d0:77:cb:23:d3:00:e0:6c:56:2f:
+        e1:69:0d:0d:d9:aa:bf:21:81:50:d9:06:a5:a8:ff:95:37:d0:
+        aa:fe:e2:b3:f5:99:2d:45:84:8a:e5:42:09:d7:74:02:2f:f7:
+        89:d8:99:e9:bc:27:d4:47:8d:ba:0d:46:1c:77:cf:14:a4:1c:
+        b9:a4:31:c4:9c:28:74:03:34:ff:33:19:26:a5:e9:0d:74:b7:
+        3e:97:c6:76:e8:27:96:a3:66:dd:e1:ae:f2:41:5b:ca:98:56:
+        83:73:70:e4:86:1a:d2:31:41:ba:2f:be:2d:13:5a:76:6f:4e:
+        e8:4e:81:0e:3f:5b:03:22:a0:12:be:66:58:11:4a:cb:03:c4:
+        b4:2a:2a:2d:96:17:e0:39:54:bc:48:d3:76:27:9d:9a:2d:06:
+        a6:c9:ec:39:d2:ab:db:9f:9a:0b:27:02:35:29:b1:40:95:e7:
+        f9:e8:9c:55:88:19:46:d6:b7:34:f5:7e:ce:39:9a:d9:38:f1:
+        51:f7:4f:2c
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            26:dd:d2:2b:46:c9:c4:4d:5a:69:4d:39:80:7e:72:ad
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
+        Validity
+            Not Before: Sep 11 12:00:00 2014 GMT
+            Not After : Jun  9 10:46:39 2027 GMT
+        Subject: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Domain Validation CA SHA2
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a1:25:63:df:8d:e4:20:07:d9:54:d1:d1:04:f6:
+                    17:e2:3e:47:fb:c3:74:25:b8:c4:bf:12:12:bc:e0:
+                    70:d1:39:05:c2:17:b3:f7:82:70:a0:4e:07:fe:10:
+                    2a:ff:db:0d:46:5e:24:94:a3:8b:45:9f:18:9b:ce:
+                    42:c4:ae:db:83:33:bc:c2:bb:b4:30:b6:a7:37:87:
+                    78:7b:48:cb:25:2c:82:bb:0a:48:12:60:76:89:ec:
+                    8e:cc:8f:1e:52:48:e9:86:02:5a:c2:b0:8a:7c:85:
+                    3d:d9:ff:60:4f:33:6c:a6:a1:a0:85:e1:d7:53:f2:
+                    ea:27:3d:65:a9:72:c1:08:83:cc:b0:25:9c:11:46:
+                    24:e0:3e:f4:a7:ef:ed:51:b1:65:93:42:b4:f6:e6:
+                    86:0a:10:79:32:36:58:b2:6b:a8:dc:d5:7a:1e:9d:
+                    14:ee:40:e7:b2:46:4c:bd:9a:29:c2:ec:f8:30:c1:
+                    62:02:2a:e2:1c:83:62:d0:85:36:1a:83:de:12:84:
+                    29:65:ef:d2:32:be:31:60:42:a8:cf:f8:dd:ea:d0:
+                    56:47:1d:bd:76:96:24:13:e7:be:d9:99:2b:fa:30:
+                    64:f1:8a:38:7a:a6:e1:2a:96:02:b0:9d:ba:d8:8f:
+                    6d:4e:7a:94:69:7d:b0:93:aa:74:e5:93:90:13:fa:
+                    a2:99
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                E5:31:AD:BF:3A:11:96:F4:83:BC:50:3C:D4:B7:90:9B:90:EE:DE:25
+            X509v3 Authority Key Identifier: 
+                08:76:CD:CB:07:FF:24:F6:C5:CD:ED:BB:90:BC:E2:84:37:46:75:F7
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 CRL Distribution Points: 
+                Full Name:
+                  URI:http://crl.certum.pl/ctnca.crl
+            Authority Information Access: 
+                OCSP - URI:http://subca.ocsp-certum.com
+                CA Issuers - URI:http://repository.certum.pl/ctnca.cer
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+                  CPS: http://www.certum.pl/CPS
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        ba:bf:f0:e1:dd:4d:2b:42:43:64:58:df:64:f3:ff:80:1a:5f:
+        56:be:3b:a9:b2:76:f7:54:7a:4c:30:c1:99:24:4b:72:d2:ca:
+        d4:fa:08:c6:90:de:88:12:ed:f8:90:f9:fc:a9:84:fd:92:f2:
+        78:e5:db:c9:22:57:ab:41:30:42:6b:0b:9f:d7:73:33:fb:01:
+        67:1c:42:5c:8f:27:67:c7:6e:07:03:8d:0e:96:cb:0a:03:cc:
+        3e:f8:87:3c:35:30:cd:18:8c:d5:71:dd:cd:dd:61:b0:13:a3:
+        64:46:4e:fe:71:4e:6b:65:e9:14:04:f2:3f:a8:bd:0c:36:3d:
+        2a:5d:9e:07:f2:c2:4f:90:c5:5e:4d:18:37:d1:27:28:80:a4:
+        36:e5:ca:93:6a:65:0e:f8:93:b9:af:52:58:4b:7a:71:d8:ba:
+        f3:ef:d2:f3:f6:a2:97:e4:5d:14:02:9a:cb:e5:ae:b6:93:e1:
+        23:9f:9b:3f:46:f7:ee:8e:a1:00:5b:66:c3:1e:68:23:86:0f:
+        5d:77:ba:53:ad:f9:52:fb:70:15:c5:75:eb:cf:79:ad:49:7c:
+        f2:76:62:ae:44:2f:c5:5f:51:34:25:41:6a:12:0a:5f:8e:ae:
+        10:c4:43:89:35:fd:ec:ff:31:e6:ec:1e:87:e9:3a:7c:29:50:
+        45:41:a3:14
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index ac34c885..e9a8ff74 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -19,8 +19,8 @@ Description
 This script downloads, imports and updates firewall address-lists. Its main
 purpose is to block attacking ip addresses, spam hosts, command-and-control
 servers and similar malicious entities. The default configuration contains
-lists from [abuse.ch](https://abuse.ch/) and
-[dshield.org](https://dshield.org/), and
+lists from [abuse.ch](https://abuse.ch/), [dshield.org](https://dshield.org/)
+and [blocklist.de](https://www.blocklist.de/), and
 lists from [spamhaus.org](https://spamhaus.org/) are prepared.
 
 The address-lists are updated in place, so after initial import you will not
diff --git a/global-config.rsc b/global-config.rsc
index 6a37c0c0..646eddb5 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -101,6 +101,8 @@
       cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
     { url="https://www.dshield.org/block.txt"; cidr="/24";
       cert="R3" };
+    { url="https://lists.blocklist.de/lists/strongips.txt";
+      cert="Certum Domain Validation CA SHA2" };
 #    { url="https://www.spamhaus.org/drop/drop.txt";
 #      cert="Cloudflare Inc ECC CA-3" };
 #    { url="https://www.spamhaus.org/drop/edrop.txt";
diff --git a/global-functions.rsc b/global-functions.rsc
index b1833b11..f8903764 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 127;
+:global ExpectedConfigVersion 128;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 8ddeb913..13a358f2 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -52,6 +52,7 @@
   125=("April's Fool! " . [ $SymbolForNotification "smiley-partying-face" ] . "Well, you missed it... - no charge nor fees. (Anyway... Donations are much appreciated, " . [ $SymbolForNotification "smiley-smiling-face" ] . "thanks!)");
   126="Made 'telegram-chat' capable of handling large command output. Telegram messages still limit the size, so it is truncated now.";
   127="Added support for authentication to Ntfy notification module.";
+  128="Added another list from blocklist.de to default configuration for 'fw-addr-lists'.";
 };
 
 # Migration steps to be applied on script updates

From 545fb5583aee9e8971749a7eab71b4040cf7847f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 15 May 2024 14:27:11 +0200
Subject: [PATCH 163/988] global-functions: $IsTimeSync: initialize with
 uptime...

... to make sure the warning is not issued too early.
---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index f8903764..3800ad53 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -685,10 +685,10 @@
       :return true;
     }
 
-    :if ([ :typeof $IsTimeSyncResetNtp ] = "nothing") do={
-      :set IsTimeSyncResetNtp 0s;
-    }
     :local Uptime [ /system/resource/get uptime ];
+    :if ([ :typeof $IsTimeSyncResetNtp ] = "nothing") do={
+      :set IsTimeSyncResetNtp $Uptime;
+    }
     :if ($Uptime - $IsTimeSyncResetNtp < 3m) do={
       :return false;
     }

From ca7a592dfd9f19e07bbabc32d999b604bff0d0c9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 15 May 2024 14:15:54 +0200
Subject: [PATCH 164/988] daily-psk: adopt syntax changes
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

RouterOS 7.15beta8 came with this change:

*) wifi - show inherited properties with "print" command (replaces "actual-configuration") and added "print config" for showing only configured values;

While the old code is bad syntax with RouterOS 7.15, the new code is
valid for older RouterOS, but produces different (and more or less
unexpected) results. 🥴

Let's use the new code, and add a check on the RouterOS version.
With old RouterOS this now sends the notification even if the interface
is disabled.
---
 daily-psk.capsman.rsc  | 1 +
 daily-psk.local.rsc    | 1 +
 daily-psk.template.rsc | 3 ++-
 daily-psk.wifi.rsc     | 3 ++-
 4 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 64e8ce72..985bc471 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -23,6 +23,7 @@
 
   :global FormatLine;
   :global LogPrint;
+  :global RequiredRouterOS;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 48e2b8d8..185165ab 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -23,6 +23,7 @@
 
   :global FormatLine;
   :global LogPrint;
+  :global RequiredRouterOS;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 5097b00a..434410b1 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -24,6 +24,7 @@
 
   :global FormatLine;
   :global LogPrint;
+  :global RequiredRouterOS;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -85,7 +86,7 @@
       /interface/wireless/access-list/set $AccList private-pre-shared-key=$NewPsk;
 
       :if ([ :len [ /caps-man/actual-interface-configuration/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
-      :if ([ :len [ /interface/wifi/actual-configuration/find where configuration.ssid=$Ssid ] ] > 0) do={
+      :if ([ $RequiredRouterOS $ScriptName "7.15beta8" false ] = false || [ :len [ /interface/wifi/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
       :if ([ :len [ /interface/wireless/find where name=$IntName !disabled ] ] = 1) do={
         :if ($Seen->$Ssid = 1) do={
           $LogPrint debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.");
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 9d7f2850..9b938dc4 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -23,6 +23,7 @@
 
   :global FormatLine;
   :global LogPrint;
+  :global RequiredRouterOS;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -71,7 +72,7 @@
       $LogPrint info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")");
       /interface/wifi/access-list/set $AccList passphrase=$NewPsk;
 
-      :if ([ :len [ /interface/wifi/actual-configuration/find where configuration.ssid=$Ssid ] ] > 0) do={
+      :if ([ $RequiredRouterOS $ScriptName "7.15beta8" false ] = false || [ :len [ /interface/wifi/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
         :if ($Seen->$Ssid = 1) do={
           $LogPrint debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.");
         } else={

From 169c1ab6e1fce71c50cc4eaadeaae7cc685ee7bc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 15 May 2024 15:51:34 +0200
Subject: [PATCH 165/988] daily-psk: decrease indention in notification

---
 daily-psk.capsman.rsc  | 6 +++---
 daily-psk.local.rsc    | 6 +++---
 daily-psk.template.rsc | 6 +++---
 daily-psk.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 985bc471..51eea364 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -81,9 +81,9 @@
           $SendNotification2 ({ origin=$ScriptName; \
             subject=([ $SymbolForNotification "calendar" ] . "daily PSK " . $Ssid); \
             message=("This is the daily PSK on " . $Identity . ":\n\n" . \
-              [ $FormatLine "SSID" $Ssid ] . "\n" . \
-              [ $FormatLine "PSK" $NewPsk ] . "\n" . \
-              [ $FormatLine "Date" $Date ] . "\n\n" . \
+              [ $FormatLine "SSID" $Ssid 8 ] . "\n" . \
+              [ $FormatLine "PSK" $NewPsk 8 ] . "\n" . \
+              [ $FormatLine "Date" $Date 8 ] . "\n\n" . \
               "A client device specific rule must not exist!"); link=$Link });
           :set ($Seen->$Ssid) 1;
         }
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 185165ab..46d03a84 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -80,9 +80,9 @@
           $SendNotification2 ({ origin=$ScriptName; \
             subject=([ $SymbolForNotification "calendar" ] . "daily PSK " . $Ssid); \
             message=("This is the daily PSK on " . $Identity . ":\n\n" . \
-              [ $FormatLine "SSID" $Ssid ] . "\n" . \
-              [ $FormatLine "PSK" $NewPsk ] . "\n" . \
-              [ $FormatLine "Date" $Date ] . "\n\n" . \
+              [ $FormatLine "SSID" $Ssid 8 ] . "\n" . \
+              [ $FormatLine "PSK" $NewPsk 8 ] . "\n" . \
+              [ $FormatLine "Date" $Date 8 ] . "\n\n" . \
               "A client device specific rule must not exist!"); link=$Link });
           :set ($Seen->$Ssid) 1;
         }
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 434410b1..6c67a575 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -96,9 +96,9 @@
           $SendNotification2 ({ origin=$ScriptName; \
             subject=([ $SymbolForNotification "calendar" ] . "daily PSK " . $Ssid); \
             message=("This is the daily PSK on " . $Identity . ":\n\n" . \
-              [ $FormatLine "SSID" $Ssid ] . "\n" . \
-              [ $FormatLine "PSK" $NewPsk ] . "\n" . \
-              [ $FormatLine "Date" $Date ] . "\n\n" . \
+              [ $FormatLine "SSID" $Ssid 8 ] . "\n" . \
+              [ $FormatLine "PSK" $NewPsk 8 ] . "\n" . \
+              [ $FormatLine "Date" $Date 8 ] . "\n\n" . \
               "A client device specific rule must not exist!"); link=$Link });
           :set ($Seen->$Ssid) 1;
         }
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 9b938dc4..9c28e9cd 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -81,9 +81,9 @@
           $SendNotification2 ({ origin=$ScriptName; \
             subject=([ $SymbolForNotification "calendar" ] . "daily PSK " . $Ssid); \
             message=("This is the daily PSK on " . $Identity . ":\n\n" . \
-              [ $FormatLine "SSID" $Ssid ] . "\n" . \
-              [ $FormatLine "PSK" $NewPsk ] . "\n" . \
-              [ $FormatLine "Date" $Date ] . "\n\n" . \
+              [ $FormatLine "SSID" $Ssid 8 ] . "\n" . \
+              [ $FormatLine "PSK" $NewPsk 8 ] . "\n" . \
+              [ $FormatLine "Date" $Date 8 ] . "\n\n" . \
               "A client device specific rule must not exist!"); link=$Link });
           :set ($Seen->$Ssid) 1;
         }

From 787ae4440ccc795e82373e80ed5e0266e529374a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 15 May 2024 15:54:12 +0200
Subject: [PATCH 166/988] daily-psk: quote ssid and passphrase

---
 daily-psk.capsman.rsc  | 2 +-
 daily-psk.local.rsc    | 2 +-
 daily-psk.template.rsc | 2 +-
 daily-psk.wifi.rsc     | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 51eea364..cd5b6b05 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -69,7 +69,7 @@
     :local Skip 0;
 
     :if ($NewPsk != $OldPsk) do={
-      $LogPrint info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")");
+      $LogPrint info $ScriptName ("Updating daily PSK for '" . $Ssid . "' to '" . $NewPsk . "' (was '" . $OldPsk . "')");
       /caps-man/access-list/set $AccList private-passphrase=$NewPsk;
 
       :if ([ :len [ /caps-man/actual-interface-configuration/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 46d03a84..fbdb784e 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -68,7 +68,7 @@
     :local Skip 0;
 
     :if ($NewPsk != $OldPsk) do={
-      $LogPrint info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")");
+      $LogPrint info $ScriptName ("Updating daily PSK for '" . $Ssid . "' to '" . $NewPsk . "' (was '" . $OldPsk . "')");
       /interface/wireless/access-list/set $AccList private-pre-shared-key=$NewPsk;
 
       :if ([ :len [ /interface/wireless/find where name=$IntName !disabled ] ] = 1) do={
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 6c67a575..35fa82c7 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -80,7 +80,7 @@
     :local Skip 0;
 
     :if ($NewPsk != $OldPsk) do={
-      $LogPrint info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")");
+      $LogPrint info $ScriptName ("Updating daily PSK for '" . $Ssid . "' to '" . $NewPsk . "' (was '" . $OldPsk . "')");
       /caps-man/access-list/set $AccList private-passphrase=$NewPsk;
       /interface/wifi/access-list/set $AccList passphrase=$NewPsk;
       /interface/wireless/access-list/set $AccList private-pre-shared-key=$NewPsk;
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 9c28e9cd..c1f71336 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -69,7 +69,7 @@
     :local Skip 0;
 
     :if ($NewPsk != $OldPsk) do={
-      $LogPrint info $ScriptName ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")");
+      $LogPrint info $ScriptName ("Updating daily PSK for '" . $Ssid . "' to '" . $NewPsk . "' (was '" . $OldPsk . "')");
       /interface/wifi/access-list/set $AccList passphrase=$NewPsk;
 
       :if ([ $RequiredRouterOS $ScriptName "7.15beta8" false ] = false || [ :len [ /interface/wifi/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={

From 51331ea2acd5f5563ed3641090bbb7f2104d3e96 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 22 May 2024 09:26:13 +0200
Subject: [PATCH 167/988] backup-partition: support RouterOS copy-over...

... when run interactively from CLI.
---
 backup-partition.rsc    | 17 +++++++++++++++++
 doc/backup-partition.md | 11 ++++++++---
 2 files changed, 25 insertions(+), 3 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index fc186c06..9eeb1ae4 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -18,6 +18,7 @@
   :global PackagesUpdateBackupFailure;
 
   :global LogPrint;
+  :global ScriptFromTerminal;
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -41,6 +42,22 @@
 
   :local FallbackTo [ /partitions/get $ActiveRunning fallback-to ];
 
+  :if ([ /partitions/get $ActiveRunning version ] != [ /partitions/get $FallbackTo version]) do={
+    :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
+      :put ("The partitions have different RouterOS versions. Copy over to '" . $FallbackTo . "'? [y/N]");
+      :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
+        :do {
+          /partitions/copy-to $FallbackTo;
+          $LogPrint info $ScriptName ("Copied RouterOS to partition '" . $FallbackTo . "'.");
+        } on-error={
+          $LogPrint error $ScriptName ("Failed copying RouterOS to partition '" . $FallbackTo . "'!");
+          :set PackagesUpdateBackupFailure true;
+          :error false;
+        }
+      }
+    }
+  }
+
   :do {
     /system/scheduler/add start-time=startup name="running-from-backup-partition" \
         on-event=(":log warning (\"Running from partition '\" . " . \
diff --git a/doc/backup-partition.md b/doc/backup-partition.md
index ba206570..89962035 100644
--- a/doc/backup-partition.md
+++ b/doc/backup-partition.md
@@ -18,6 +18,7 @@ Description
 
 This script saves the current configuration to fallback
 [partition](https://wiki.mikrotik.com/wiki/Manual:Partitions).
+It can also copy-over the RouterOS installation when run interactively.
 
 For this to work you need a device with sufficient flash storage that is
 properly partitioned.
@@ -26,9 +27,10 @@ To make you aware of a possible issue a scheduler logging a warning is
 added in the backup partition's configuration. You may want to use
 [log-forward](log-forward.md) to be notified.
 
-> ⚠️ **Warning**: Only the configuration is saved to backup partition.
-> Every now and then you should copy your installation over for a recent
-> RouterOS version!
+> ⚠️ **Warning**: By default only the configuration is saved to backup
+> partition. Every now and then you should copy your installation over
+> for a recent RouterOS version! For that run the script from terminal
+> manually.
 
 Requirements and installation
 -----------------------------
@@ -44,6 +46,9 @@ Just run the script:
 
     /system/script/run backup-partition;
 
+When run interactively from terminal it supports to copy-over the RouterOS
+installation when versions differ.
+
 Creating a scheduler may be an option:
 
     /system/scheduler/add interval=1w name=backup-partition on-event="/system/script/run backup-partition;" start-time=09:30:00;

From c26e44ae4673f58a89833c15faf06828e7e2dd3f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 23 May 2024 12:09:02 +0200
Subject: [PATCH 168/988] doc/backup-cloud: fix link for backup-partition

---
 doc/backup-cloud.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/backup-cloud.md b/doc/backup-cloud.md
index be6e06d9..1f9e1238 100644
--- a/doc/backup-cloud.md
+++ b/doc/backup-cloud.md
@@ -68,7 +68,7 @@ See also
 --------
 
 * [Send backup via e-mail](backup-email.md)
-* [Save configuration to fallback partition](doc/backup-partition.md)
+* [Save configuration to fallback partition](backup-partition.md)
 * [Upload backup to server](backup-upload.md)
 
 ---

From 6cbe13a135fe39c097b6a7078506d99eedde2e06 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 22 May 2024 11:58:26 +0200
Subject: [PATCH 169/988] backup-partition: move code to a local function

---
 backup-partition.rsc | 22 +++++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 9eeb1ae4..a72dd0b0 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -21,6 +21,22 @@
   :global ScriptFromTerminal;
   :global ScriptLock;
 
+  :local CopyTo do={
+    :local ScriptName [ :tostr $1 ];
+    :local FallbackTo [ :tostr $2 ];
+
+    :global LogPrint;
+
+    :do {
+      /partitions/copy-to $FallbackTo;
+      $LogPrint info $ScriptName ("Copied RouterOS to partition '" . $FallbackTo . "'.");
+      :return true;
+    } on-error={
+      $LogPrint error $ScriptName ("Failed copying RouterOS to partition '" . $FallbackTo . "'!");
+      :return false;
+    }
+  }
+
   :if ([ $ScriptLock $ScriptName ] = false) do={
     :set PackagesUpdateBackupFailure true;
     :error false;
@@ -46,11 +62,7 @@
     :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
       :put ("The partitions have different RouterOS versions. Copy over to '" . $FallbackTo . "'? [y/N]");
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
-        :do {
-          /partitions/copy-to $FallbackTo;
-          $LogPrint info $ScriptName ("Copied RouterOS to partition '" . $FallbackTo . "'.");
-        } on-error={
-          $LogPrint error $ScriptName ("Failed copying RouterOS to partition '" . $FallbackTo . "'!");
+        :if ([ $CopyTo $ScriptName $FallbackTo ] = false) do={
           :set PackagesUpdateBackupFailure true;
           :error false;
         }

From 16831aa1e8aa0ecb7ba95918e42aae2659530385 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 23 May 2024 12:09:28 +0200
Subject: [PATCH 170/988] doc/backup-email: fix link for backup-partition

---
 doc/backup-email.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/backup-email.md b/doc/backup-email.md
index a506543d..3b1dbb26 100644
--- a/doc/backup-email.md
+++ b/doc/backup-email.md
@@ -59,7 +59,7 @@ See also
 --------
 
 * [Upload backup to Mikrotik cloud](backup-cloud.md)
-* [Save configuration to fallback partition](doc/backup-partition.md)
+* [Save configuration to fallback partition](backup-partition.md)
 * [Send notifications via e-mail](mod/notification-email.md)
 * [Upload backup to server](backup-upload.md)
 

From affa11816182fa2bff454b3e82df3166c6cdd744 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 22 May 2024 12:03:53 +0200
Subject: [PATCH 171/988] backup-partition: support copy before feature update

---
 backup-partition.rsc    | 13 +++++++++++++
 doc/backup-partition.md | 18 +++++++++++++++---
 global-config.rsc       |  2 ++
 3 files changed, 30 insertions(+), 3 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index a72dd0b0..3c883f7e 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -15,11 +15,13 @@
 :do {
   :local ScriptName [ :jobname ];
 
+  :global BackupPartitionCopyBeforeFeatureUpdate;
   :global PackagesUpdateBackupFailure;
 
   :global LogPrint;
   :global ScriptFromTerminal;
   :global ScriptLock;
+  :global VersionToNum;
 
   :local CopyTo do={
     :local ScriptName [ :tostr $1 ];
@@ -67,6 +69,17 @@
           :error false;
         }
       }
+    } else={
+      :local Update [ /system/package/update/get ];
+      :local NumInstalled [ $VersionToNum ($Update->"installed-version") ];
+      :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
+      :if ($BackupPartitionCopyBeforeFeatureUpdate = true && $NumLatest > 0 && \
+           ($NumInstalled & 0xffff0000) != ($NumLatest & 0xffff0000)) do={
+        :if ([ $CopyTo $ScriptName $FallbackTo ] = false) do={
+          :set PackagesUpdateBackupFailure true;
+          :error false;
+        }
+      }
     }
   }
 
diff --git a/doc/backup-partition.md b/doc/backup-partition.md
index 89962035..1cef2c9b 100644
--- a/doc/backup-partition.md
+++ b/doc/backup-partition.md
@@ -18,7 +18,8 @@ Description
 
 This script saves the current configuration to fallback
 [partition](https://wiki.mikrotik.com/wiki/Manual:Partitions).
-It can also copy-over the RouterOS installation when run interactively.
+It can also copy-over the RouterOS installation when run interactively
+or just before a feature update.
 
 For this to work you need a device with sufficient flash storage that is
 properly partitioned.
@@ -29,8 +30,7 @@ added in the backup partition's configuration. You may want to use
 
 > ⚠️ **Warning**: By default only the configuration is saved to backup
 > partition. Every now and then you should copy your installation over
-> for a recent RouterOS version! For that run the script from terminal
-> manually.
+> for a recent RouterOS version! See below for options.
 
 Requirements and installation
 -----------------------------
@@ -39,6 +39,18 @@ Just install the script:
 
     $ScriptInstallUpdate backup-partition;
 
+Configuration
+-------------
+
+The configuration goes to `global-config-overlay`, the only parameter is:
+
+* `BackupPartitionCopyBeforeFeatureUpdate`: copy-over the RouterOS
+  installation when a feature update is pending
+
+> ℹ️ **Info**: Copy relevant configuration from
+> [`global-config`](../global-config.rsc) (the one without `-overlay`) to
+> your local `global-config-overlay` and modify it to your specific needs.
+
 Usage and invocation
 --------------------
 
diff --git a/global-config.rsc b/global-config.rsc
index 646eddb5..8a42b817 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -85,6 +85,8 @@
 :global BackupUploadUrl "sftp://example.com/backup/";
 :global BackupUploadUser "mikrotik";
 :global BackupUploadPass "v3ry-s3cr3t";
+# Copy the RouterOS installation to backup partition before feature update.
+:global BackupPartitionCopyBeforeFeatureUpdate false;
 
 # This defines the settings for firewall address-lists (fw-addr-lists).
 :global FwAddrLists {

From 0a46fb536f929f3248085072979b7acfe119dbd5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 23 May 2024 12:09:46 +0200
Subject: [PATCH 172/988] doc/backup-upload: fix link for backup-partition

---
 doc/backup-upload.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/backup-upload.md b/doc/backup-upload.md
index f524adb3..c44217c5 100644
--- a/doc/backup-upload.md
+++ b/doc/backup-upload.md
@@ -85,7 +85,7 @@ See also
 
 * [Upload backup to Mikrotik cloud](backup-cloud.md)
 * [Send backup via e-mail](backup-email.md)
-* [Save configuration to fallback partition](doc/backup-partition.md)
+* [Save configuration to fallback partition](backup-partition.md)
 
 ---
 [⬅️ Go back to main README](../README.md)  

From 33a495beb76f438ba79e56ab8e4872d2df5c4da8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 23 May 2024 12:18:13 +0200
Subject: [PATCH 173/988] backup-partition: news on support for copy-over

---
 global-functions.rsc | 2 +-
 news-and-changes.rsc | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 3800ad53..96ed71d6 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 128;
+:global ExpectedConfigVersion 129;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 13a358f2..b20bbaf4 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -53,6 +53,7 @@
   126="Made 'telegram-chat' capable of handling large command output. Telegram messages still limit the size, so it is truncated now.";
   127="Added support for authentication to Ntfy notification module.";
   128="Added another list from blocklist.de to default configuration for 'fw-addr-lists'.";
+  129="Extended 'backup-partition' to support RouterOS copy-over - interactively or before feature update.";
 };
 
 # Migration steps to be applied on script updates

From d6648563267a3c807a3b99f14881767b6e9826f0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 May 2024 20:00:03 +0200
Subject: [PATCH 174/988] telegram-chat: convert the message (command) to
 string

RouterOS 7.15beta4 fixed a bug in JSON parser:

*) console - do not convert string to array in ":deserialize" command;

Before that change commands with a comma caused very crazy issues. Let's
convert the message to a string. This does not give exactly the expected
result, but mitigates telegram-chat to explode.

A command like...

    /ip/address/print proplist=address,network;

... is converted to...

    /ip/address/print proplist=address;network;

... and results in:

    Columns: ADDRESS
    # ADDRESS
    0 10.0.0.1/24
    1 127.0.0.1/8
    bad command name network (line 1 column 36)
---
 telegram-chat.rsc | 21 +++++++++++----------
 1 file changed, 11 insertions(+), 10 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index f8dcd423..f3efd08e 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -97,6 +97,7 @@
       :local Trusted false;
       :local Chat ($Message->"chat");
       :local From ($Message->"from");
+      :local Command [ :tostr ($Message->"text") ];
 
       :foreach IdsTrusted in=($TelegramChatId, $TelegramChatIdsTrusted) do={
         :if ($From->"id" = $IdsTrusted || $From->"username" = $IdsTrusted) do={
@@ -106,15 +107,15 @@
 
       :if ($Trusted = true) do={
         :local Done false;
-        :if ($Message->"text" = "?") do={
+        :if ($Command = "?") do={
           $LogPrint info $ScriptName ("Sending notice for update " . $UpdateID . ".");
           $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; replyto=($Message->"message_id"); \
             subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
             message=("Online" . [ $IfThenElse $TelegramChatActive " (and active!)" ] . ", awaiting your commands!") });
           :set Done true;
         }
-        :if ($Done = false && [ :pick ($Message->"text") 0 1 ] = "!") do={
-          :if ($Message->"text" ~ ("^! *(" . [ $EscapeForRegEx $Identity ] . "|@" . $TelegramChatGroups . ")\$")) do={
+        :if ($Done = false && [ :pick ($Command) 0 1 ] = "!") do={
+          :if ($Command ~ ("^! *(" . [ $EscapeForRegEx $Identity ] . "|@" . $TelegramChatGroups . ")\$")) do={
             :set TelegramChatActive true;
           } else={
             :set TelegramChatActive false;
@@ -123,16 +124,16 @@
             " from update " . $UpdateID . "!");
           :set Done true;
         }
-        :if ($Done = false && ($IsMyReply = 1 || ($IsReply = 0 && $TelegramChatActive = true)) && [ :len ($Message->"text") ] > 0) do={
-          :if ([ $ValidateSyntax ($Message->"text") ] = true) do={
+        :if ($Done = false && ($IsMyReply = 1 || ($IsReply = 0 && $TelegramChatActive = true)) && [ :len ($Command) ] > 0) do={
+          :if ([ $ValidateSyntax ($Command) ] = true) do={
             :local State "";
             :local File ("tmpfs/telegram-chat/" . [ $GetRandom20CharAlNum 6 ]);
             :if ([ $MkDir "tmpfs/telegram-chat" ] = false) do={
               $LogPrint error $ScriptName ("Failed creating directory!");
               :error false;
             }
-            $LogPrint info $ScriptName ("Running command from update " . $UpdateID . ": " . $Message->"text");
-            :execute script=(":do {\n" . $Message->"text" . "\n} on-error={ /file/add name=\"" . $File . ".failed\" };" . \
+            $LogPrint info $ScriptName ("Running command from update " . $UpdateID . ": " . $Command);
+            :execute script=(":do {\n" . $Command . "\n} on-error={ /file/add name=\"" . $File . ".failed\" };" . \
               "/file/add name=\"" . $File . ".done\"") file=($File . "\00");
             :if ([ $WaitForFile ($File . ".done") [ $EitherOr $TelegramChatRunTime 20s ] ] = false) do={
               :set State ([ $SymbolForNotification "warning-sign" ] . "The command did not finish, still running in background.\n\n");
@@ -143,7 +144,7 @@
             :local Content ([ /file/read chunk-size=32768 file=$File as-value ]->"data");
             $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; replyto=($Message->"message_id"); \
               subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
-              message=([ $SymbolForNotification "gear" ] . "Command:\n" . $Message->"text" . "\n\n" . \
+              message=([ $SymbolForNotification "gear" ] . "Command:\n" . $Command . "\n\n" . \
                 $State . [ $IfThenElse ([ :len $Content ] > 0) \
                 ([ $SymbolForNotification "memo" ] . "Output:\n" . $Content) \
                 ([ $SymbolForNotification "memo" ] . "No output.") ]) });
@@ -152,7 +153,7 @@
             $LogPrint info $ScriptName ("The command from update " . $UpdateID . " failed syntax validation!");
             $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; replyto=($Message->"message_id"); \
               subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
-              message=([ $SymbolForNotification "gear" ] . "Command:\n" . $Message->"text" . "\n\n" . \
+              message=([ $SymbolForNotification "gear" ] . "Command:\n" . $Command . "\n\n" . \
                 [ $SymbolForNotification "cross-mark" ] . "The command failed syntax validation!") });
           }
         }
@@ -160,7 +161,7 @@
         :local MessageText ("Received a message from untrusted contact " . \
           [ $IfThenElse ([ :len ($From->"username") ] = 0) "without username" ("'" . $From->"username" . "'") ] . \
           " (ID " . $From->"id" . ") in update " . $UpdateID . "!");
-        :if ($Message->"text" ~ ("^! *" . [ $EscapeForRegEx $Identity ] . "\$")) do={
+        :if ($Command ~ ("^! *" . [ $EscapeForRegEx $Identity ] . "\$")) do={
           $LogPrint warning $ScriptName $MessageText;
           $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; replyto=($Message->"message_id"); \
             subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \

From a97820d12a5833bce5160da674e5085b2882b53a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 25 May 2024 19:55:13 +0200
Subject: [PATCH 175/988] telegram-chat: drop extra parenthesis

---
 telegram-chat.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index f3efd08e..0fd8a066 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -114,7 +114,7 @@
             message=("Online" . [ $IfThenElse $TelegramChatActive " (and active!)" ] . ", awaiting your commands!") });
           :set Done true;
         }
-        :if ($Done = false && [ :pick ($Command) 0 1 ] = "!") do={
+        :if ($Done = false && [ :pick $Command 0 1 ] = "!") do={
           :if ($Command ~ ("^! *(" . [ $EscapeForRegEx $Identity ] . "|@" . $TelegramChatGroups . ")\$")) do={
             :set TelegramChatActive true;
           } else={
@@ -124,8 +124,8 @@
             " from update " . $UpdateID . "!");
           :set Done true;
         }
-        :if ($Done = false && ($IsMyReply = 1 || ($IsReply = 0 && $TelegramChatActive = true)) && [ :len ($Command) ] > 0) do={
-          :if ([ $ValidateSyntax ($Command) ] = true) do={
+        :if ($Done = false && ($IsMyReply = 1 || ($IsReply = 0 && $TelegramChatActive = true)) && [ :len $Command ] > 0) do={
+          :if ([ $ValidateSyntax $Command ] = true) do={
             :local State "";
             :local File ("tmpfs/telegram-chat/" . [ $GetRandom20CharAlNum 6 ]);
             :if ([ $MkDir "tmpfs/telegram-chat" ] = false) do={

From e35ba4b06ce300b698a8bf684503437961e1343a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 1 Jun 2024 23:06:24 +0200
Subject: [PATCH 176/988] global-functions: $CleanName: no exception for
 dash...

... as we still want to deduplicate it when it is inside the input
string. This also unbreak certificate import for "Go Daddy Secure
Certificate Authority - G2" (and more)...
---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 96ed71d6..447d6e9a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -229,7 +229,7 @@
 
   :for I from=0 to=([ :len $Input ] - 1) do={
     :local Char [ :pick $Input $I ];
-    :if ([ :typeof [ find "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-" $Char ] ] = "nil") do={
+    :if ([ :typeof [ find "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789" $Char ] ] = "nil") do={
       :do {
         :if ([ :len $Return ] = 0) do={
           :error true;

From cd4ac2c0881f92327ce173f2294b066ca4bc2ba2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Jun 2024 14:50:55 +0200
Subject: [PATCH 177/988] backup-cloud: log note on previous connection errors

---
 backup-cloud.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 88dd3457..8f5575ea 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -66,6 +66,10 @@
   } while=([ $WaitForFile "tmpfs/backup-cloud/done" 200ms ] = false && $I > 0);
 
   :if ([ $WaitForFile "tmpfs/backup-cloud/done" ] = true) do={
+    :if ($I < 4) do={
+      :log warning ($ScriptName . ": Retry successful, please discard previous connection errors.");
+    }
+                
     :local Cloud [ /system/backup/cloud/get ([ find ]->0) ];
 
     $SendNotification2 ({ origin=$ScriptName; \

From 0a085e6610aadf546b936076f6e3ae68538b1cfa Mon Sep 17 00:00:00 2001
From: netravnen <1938389+netravnen@users.noreply.github.com>
Date: Mon, 10 Jun 2024 10:53:17 +0200
Subject: [PATCH 178/988] check-lte-firmware-upgrade: omit once

Omit `once` from the `/interface/lte/firmware-upgrade` command to make
sure it does acutally return a valid result.
---
 check-lte-firmware-upgrade.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index 3a25f83d..5ea094ec 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -44,7 +44,7 @@
     :local Firmware;
     :local Info;
     :do {
-      :set Firmware [ /interface/lte/firmware-upgrade $Interface once as-value ];
+      :set Firmware [ /interface/lte/firmware-upgrade $Interface as-value ];
       :set Info [ /interface/lte/monitor $Interface once as-value ];
     } on-error={
       $LogPrint debug $ScriptName ("Could not get latest LTE firmware version for interface " . \

From c2dd9de9b1789c81f2a7db14f5dbba87d5881286 Mon Sep 17 00:00:00 2001
From: netravnen <1938389+netravnen@users.noreply.github.com>
Date: Sun, 9 Jun 2024 13:13:59 +0200
Subject: [PATCH 179/988] unattended-lte-firmware-upgrade: omit once

Omit `once` from the `/interface/lte/firmware-upgrade` command to make
sure it does acutally return a valid result.

Fixes #69
---
 unattended-lte-firmware-upgrade.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index 904f9528..ba22c6f8 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -10,7 +10,7 @@
   :local Firmware;
   :local IntName [ /interface/lte/get $Interface name ];
   :do {
-    :set Firmware [ /interface/lte/firmware-upgrade $Interface once as-value ];
+    :set Firmware [ /interface/lte/firmware-upgrade $Interface as-value ];
   } on-error={
     :log debug ("Could not get latest LTE firmware version for interface " . $IntName . ".");
   }

From 9c899f871d672d599564d94911abcabad0ea069b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Jun 2024 18:10:22 +0200
Subject: [PATCH 180/988] backup-cloud: remove trailing spaces
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

How did I produce these!? 😳
---
 backup-cloud.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 8f5575ea..697ee956 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -69,7 +69,7 @@
     :if ($I < 4) do={
       :log warning ($ScriptName . ": Retry successful, please discard previous connection errors.");
     }
-                
+
     :local Cloud [ /system/backup/cloud/get ([ find ]->0) ];
 
     $SendNotification2 ({ origin=$ScriptName; \

From 2166f262c8aed8b30560e37ea01c458567892a52 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Jun 2024 21:07:17 +0200
Subject: [PATCH 181/988] unattended-lte-firmware-upgrade: omit just another
 once

---
 unattended-lte-firmware-upgrade.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index ba22c6f8..af2b6e58 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -28,7 +28,7 @@
           /interface/lte/firmware-upgrade $1 upgrade=yes;
           :log info ("LTE firmware upgrade on '" . $1 . "' finished, waiting for reset.");
           :delay 240s;
-          :local Firmware [ /interface/lte/firmware-upgrade $1 once as-value ];
+          :local Firmware [ /interface/lte/firmware-upgrade $1 as-value ];
           :if (($Firmware->"installed") != ($Firmware->"latest")) do={
             :log warning ("LTE firmware versions still differ. Resetting again...");
             /interface/lte/at-chat $1 input="AT+RESET";

From 1e1c9be94522a6dfe24440321950c3dd0b2256a8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Jun 2024 21:09:06 +0200
Subject: [PATCH 182/988] unattended-lte-firmware-upgrade: drop the AT reset

The AT command to reset is specific to modem. So this worked for some
only... Let's just drop it, and update the log message.
---
 unattended-lte-firmware-upgrade.rsc | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index af2b6e58..a8182e56 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -30,8 +30,7 @@
           :delay 240s;
           :local Firmware [ /interface/lte/firmware-upgrade $1 as-value ];
           :if (($Firmware->"installed") != ($Firmware->"latest")) do={
-            :log warning ("LTE firmware versions still differ. Resetting again...");
-            /interface/lte/at-chat $1 input="AT+RESET";
+            :log warning ("LTE firmware versions still differ. Upgrade failed anyway?");
           }
         } on-error={
           :log error ("LTE firmware upgrade on '" . $1 . "' failed.");

From d01362dbaa352efccf4d64a5e0404b2d43060cd5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Jun 2024 21:12:46 +0200
Subject: [PATCH 183/988] unattended-lte-firmware-upgrade: check on valid
 version first

---
 unattended-lte-firmware-upgrade.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index a8182e56..7ce40280 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -29,7 +29,8 @@
           :log info ("LTE firmware upgrade on '" . $1 . "' finished, waiting for reset.");
           :delay 240s;
           :local Firmware [ /interface/lte/firmware-upgrade $1 as-value ];
-          :if (($Firmware->"installed") != ($Firmware->"latest")) do={
+          :if ([ :len ($Firmware->"latest") ] > 0 && \
+               ($Firmware->"installed") != ($Firmware->"latest")) do={
             :log warning ("LTE firmware versions still differ. Upgrade failed anyway?");
           }
         } on-error={

From 76dd069fa653ad9ed8f100f71124fc5027b159df Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 19 Jun 2024 08:56:07 +0200
Subject: [PATCH 184/988] Let's Encrypt changed their intermediate certificates

https://letsencrypt.org/2024/03/19/new-intermediate-certificates
https://letsencrypt.org/certificates/

But let's keep the old ones around for now, as some sites are still
using the old intermediate.
---
 INITIAL-COMMANDS.md             |  10 +-
 README.d/01-download-certs.avif | Bin 4420 -> 4578 bytes
 README.d/03-check-certs.avif    | Bin 12089 -> 12118 bytes
 README.md                       |  14 +-
 certs/E5.pem                    | 119 ++++++++++++++++
 certs/R10.pem                   | 231 ++++++++++++++++++++++++++++++++
 global-config.rsc               |   6 +-
 global-functions.rsc            |   2 +-
 8 files changed, 366 insertions(+), 16 deletions(-)
 create mode 100644 certs/E5.pem
 create mode 100644 certs/R10.pem

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 4a121973..889192da 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -17,13 +17,13 @@ Initial commands
 Run the complete base installation:
 
     {
-      /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/E1.pem" dst-path="letsencrypt-E1.pem" as-value;
+      /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/E5.pem" dst-path="letsencrypt-E5.pem" as-value;
       :delay 1s;
-      /certificate/import file-name=letsencrypt-E1.pem passphrase="";
-      :if ([ :len [ /certificate/find where fingerprint="46494e30379059df18be52124305e606fc59070e5b21076ce113954b60517cda" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470" ] ] != 2) do={
+      /certificate/import file-name=letsencrypt-E5.pem passphrase="";
+      :if ([ :len [ /certificate/find where fingerprint="e788d14b0436b5120bbee3f15c15badf08c1407fe72568a4f16f9151c380e1e3" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470" ] ] != 2) do={
         :error "Something is wrong with your certificates!";
       };
-      /file/remove [ find where name="letsencrypt-E1.pem" ];
+      /file/remove [ find where name="letsencrypt-E5.pem" ];
       :delay 1s;
       /system/script/set name=("global-config-overlay-" . [ /system/clock/get date ] . "-" . [ /system/clock/get time ]) [ find where name="global-config-overlay" ];
       :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={
@@ -34,7 +34,7 @@ Run the complete base installation:
       /system/scheduler/remove [ find where name="global-scripts" ];
       /system/scheduler/add name="global-scripts" start-time=startup on-event="/system/script { run global-config; run global-functions; }";
       :global CertificateNameByCN;
-      $CertificateNameByCN "E1";
+      $CertificateNameByCN "E5";
       $CertificateNameByCN "ISRG Root X2";
     };
 
diff --git a/README.d/01-download-certs.avif b/README.d/01-download-certs.avif
index b27b23b8ca7990d261be1e4b23349de6d493f767..b543aff2848235791b59fc0805e850a748f17a23 100644
GIT binary patch
delta 3558
zcmb7^XEfUlpvDuFnpLBAYOkV3YS-Sei4}XR(V$kTzfr9ff}+%_t;AM>ic;H)8Z~N^
z*u;2C?Yi&h`{AB*&v|~Ip7T4;x91!88V@?0o&^LV9Rd-7Kp^mcL4ZKyU1=$i;1?Ox
zU>zdb)C^0oESNU~4b}!jGv>ezVBV%gq7g9gaQ`&N*B!#1KiHgTyv;NsjINeYFeLY_
znS1_Wlb9pPmw=hv2Kodlb=d=+OT5o3D2aKAj}Z^utk3>t(}NiBYk$4Q+&`ldO6)i4
za<eQv4H2G&Z1QDTV-v{l+OiXDQ~U|h7jU5ts~)RRY@qbtKX$kng(cW{YR_4HuOMKY
zHb5!1$ub7Q=T}5;drj<En%aAb*TxFY@n&g;&O{8JwNfD}7M*^xUj}1*CI5~ab)@*O
zxw>moY!nZ6yF1k*$*6jHAvR655jh;s+4_oM@m*HE+Q07rT~br$KU4C(pRg(93iAHM
z=0SIwuhK{^jXv=0=5QrSHa!%nb^-h*4a3NuB3qz8Xb0F)H*W*om4fJ&+>Gf;!C81t
z^sCUS6Al}C$swTHh@pO%JF0fZ9F=Y`er6=c`N|3sZi~C3zR5eX3+;!cyGusw27e}%
z4<h-+zSV~R;vm(MCYEfA&Hwu+;Ec(lFQ4_B784f(btx67qa&l=sMagp7O;kzep)~u
z1XL)8)a?x77h3(A0h+LMLq#oqYPR<NdV*s&$0sAhwr#mTwWb(&W=rd0kXCi#hAzT4
zt)tvqKH|X;q@;Wx_;`?o&6C;Tog<#*myG>7d~^Dmk1x+a3?+fRF!>h1021-+X#bVv
zxHVhg{jRu4?<b4QtFc%kU<QiNO4co_Sy9@dD&aYZ19=D#OUgv#clw(x??yrpVKoHk
zFY|9Eeni(_hZ0(e29$g71^?`z!x9CF%VUj?-XVRmHQLivnTgbqS_l$46{R-W%V{Q=
zW!Bsuo@<i=t(o}|Ri@5;mXv5!Szh$Y`;!_9LE=x?AJ@<kwuNoLfc^U;;RjsrlBJir
z*Cj||(`k@GuG7~-G<gK?(uR&q4r#1A`7Fu$@mxgbQ5Z{Kz&m3yZLzx53z^4%_~Erw
z9j%OR7LPO8beM^ULBYK*XG&^96@^d{Pi0X#c1?1kJ>uOy>qMi>m-w9&y+qJ9e!5f4
z)I>T?(1lCl{lP=vb$7R%%UIyWbg<3aw+|Lyb!Y|`V&8a>C#Uo^<+%nOS}_=t8Msx4
zhKX>?<Vt>-mU=)5QESZ0qtoRjVtO-fc4*i-qbQlqv7mk@T|k#Iz4suUf_mkV-(9JK
zxa#cUDEXOLMKK7Aa=k+Ytl2f@?$EBh#MfO_fmFRZ{_52_KrFOqVu{XJ#{=EOLwbP>
zaiuPc-pXj5BFp{HwV3IYZWZC0&|7HcVpgm<#Env;Ly*#_PRD=4{mpvUs7WUmbVQqF
zkKC*uz~Zw!@WC4+!Tn=o$mN!y?<yR8n6o#G2LfNF1oF#rwRF-(BW(&hP^DD&^u}lE
zYCQZQneKqEs2=q(b{V#n&b*Fi#y_nVOEeH@oAR73xPl=gFp3}N>s_}Xw;+d?t}-^}
z$ewX$d;j!vmsUAhW`QZjY)y}S7jL_p{jJMRUvJ!(T+<cn*skSq*KSa)5pk4MD?0o~
zI5xz?$1TN>RHzx=Poco38PKO){CNAa#EWS!7|1%--$NCvc5}w29S-bzW2aWkW_?`S
z8;`~kE#Ty+Hs7-NLBdy(mnU_~-fS(NGZ+tQ?rKhnym}|Jb|p_5jH6|bwm}`K>sut;
zDloM-c)eT0KH^;v-}G!Yi%_YQRBQm*43v5(_0Q->9TE>tDVkSIb<S6RjvwspIH*nb
z12<_S!VoLhmwD(=#aoc#Y#z)z+;5Y`u`OZtle}cwN*U4eMY4)IQh)y6zZMrqNdLW9
z&7N&SCuh+13s_F`w#a6jUmmk-@V(CB*yhI#9Dg%Ekfqe^@B8^EjXapAc;kG)%xG?i
z9apj%pZ>wls#GC{@~>7W{y^zP1QSOR0S(>6EaS&COMCLsAB?>lE-szg>py!E#4Nlb
z+Gg}e+Wz~YWJi~Z-xx3+dOr*}O5M@kT<RF!`gnN$H)!~~3fsclgxt%8@X(Vzn9gPb
zw-bm*!Ajalu`s*pRH?k)vp9-E@c#h#U*!|B_#l<Um<_c!&0COp{(ZQmVqnxKWr~-f
zC04rM_QDdt|BV}B$)@H^G%cZ@u^AtAyF3^HHHB2#XW1bRUIlxj*%Xp4_Diz;QisO*
zHm9YZ(Zgk!_np=#!%0Kkez~n5iI1KzSG-6vP7HyWl>_xNV)uGQgXcfDwRKqY29x>w
zelOgybz^`tFqmk9{=WdX^K>8za#_AcB_B?%qDe_CwZ1FS5>(xJdATc<H`|QA<wa$6
zdX?DYt^G}2HMIsHN8z_aTlaLJK+zF}Ls8gS{sd&2VAbLnQQ^rS19ieUzat%ulz3-#
z$5Zi>A!Atpwnl38M1H=9p<{8Hfd$2cvDX_Vr6zvr?VQ6`%7y!_R|T}iJLsO|o)T4Q
zy8Ghi!n3sQ0=$1{FI(TvWbkQ&lGu9CLkRJI`QTDO_8*|}wm{S2mxV(9075)v))E3Y
z^s*{>?drG`10L)}U$+a&N!~eSjKdiP^WEiJr)NJ|I#`i;!{TrR-|j6-_^5ThA|7%L
zZw@C{P`zBjJzCah`0!{rzfo*r(2<Ak_dyd%HtA}}t!X6<UpZbVJyb9J+KtT0!B%i8
zT*4?m84p<L?qI4ux?ujs8PHQ43(?4<cJ9;Uw`kb)*+bpohYHvnP~oc{MTES&!BzTS
zyDUE3(2Kqfk%o=an+D_IU+Tp&ihEA^sO9gaI^XHNdZ2J#UNp_m!&4J$$0Qj&^P{sq
zX2SZcN?aQmf6#cBTc<2^w8U&GN$Rn(R(wMJdm!;hrBO}i;kupC#)T?-x69}U8P#PB
z9ryfkafKB`wWc!iB&Tt8_7@lOwt!!5_qBRfK>1UWJZFYER_)ryE*8obh1+5^aM9e5
zX8x+S<eAo?6U(^$R<cjBPBWl&%y&1TJuka;v4}A6PiBRs!Q27xEWfjl+SX-C0WA=3
z3RG2LJ6O_wTl1~bp3~J{-bR@y?*Dlfk82is|K7i(T`nMDV*igF9<NJZvG7jK%)Ha`
z#f33{tW6&;M<3VX0QF2xJJ9!JsPRtM3GH#+RO1JmY%_ZAzA_=m9ca!69c~xb6?IAO
z6VgI(R4pUJbg)}^_9I#if+w+z{XG&!8$fH(KPIv01dXow2cKdg6e!2WFOYAISa{I!
zvNuufnstRRf?<0$-(kiGTWh}hA*2?WdDl#nS}UfR5DNuJ#+<DB88wCzWXjH=A&0E4
zqXvpr_hTyNL++_El-@Z?@dC1gjEIZodJvXEZ~J%TZYOlE+Hr4DhPUyvq$>?L;H)xz
zl2RZ#X+9J=dQ#Y0;YkwJ5Z;8@2$__=DqX#oZE=eu%SO);i5jPP9MmK}*Dl?3l$s$a
z?AAXyp?zw)(Rf<3m3*EGxAOC0A9@{xOz)34eWGK3x2UjlM5S4;|CLmv$Jt$mN=d@x
zEz?WXKb4zl9vE2hymeXOQ4{nUz=W*Z2ic!S$U$!6)#)xKqH7v#?9K}iRhJsNH%0~7
z3bry=4rB$I<qT+E)>M_e6o*Hu3@ZUhGLg6%4Nk;c(CA?;6<NQ(R^~26#30R8A|ls_
zs?nvLHAkS6EnJ)@6L#eetLc0%k;w=bFxph*i!RbBM^6jweq_2$a%utgvIa;O?@1J%
zTAN%f=1e^6cHv!U((jv$BI40Vrfhd>*teG@-aqF-4Yo}9(B1n+#=>j!cz89^jjwuD
zr>xd5+Kl)q_0$e2V~bxp8;(S9@EIoIp76m}$lA}&#d5VDr-lK>gRZMye5{aoAA~u{
zxWd)d^VE2Y)5dX!H|oKFEX?pSL*?{4v_q7fIKM-r9~K!g?_xvKvlqwwih(~)#;IgZ
zCfK8qdytg~OukO(wuPErNLMu@9fNs`+?7*iOE4(4TLjNpEPW+Wj#c-2a<xd#(a={&
zfx7^3lQyFcJiT7!-i5yOlNYpIp9Bx1n*<>{w`&<)MoekXi!K0(Lqw;3(ATAdx)u3m
ziJ9(met6rB==6?;!i&Ae`%UooNr>G`y0t1|>J56$E+e&Qb}xE*9}mO<n~UHEba)yW
z9(ygLT>f0shx=n-QhSc7s4m}OJNw@>j0<O?5z$!D*i*sd7J=|xKjlkY;K@tyH~n@q
zdt<^1GH#qVhy)<S<e1#2GvK?v-N?YATnIH^)@@L0!mVz8MC=a-<e5ez8mc1=v+Sw-
zU6r*pd{kdAu>PE*O!igcQ&ulbGWqPfoaO}&F4k!?I8@B)^Uw(KZ*Qvh|7nm+BwBS~
zY(r+@8TzeI_2HO<eLcfY<C`$skBWC})U^DA{N}oEEE$1ytl*&{{{%`xsnB@wDA#!~
z`b{0!wzTCb$>1+@%P#3ja=DzJS-qj=hh5g~nqrZ2Jr6IcdkyYOr=1)Z$FiHILbIlR
ztn>*~wOmlqug$mCyG_XAD*YxKR@G-TZ5Tvlev23Ki1#^eur(!7rbkBH?r~J{6V7n?
zS4EUNkVk^2e!@8RHeYReEp@!-#4tQ^qI;~Hma|P?<Y+zllxN*FJ~+@6!4>~MVfx4;

delta 3399
zcmb8ehdUGw0|4N=!`;s~WMp&MBU#~a_B<*hIh^%#vLbsXheR&>%FdNsAxFrF$mZ-7
zWy{V!r>ywCKjHhH=Y4;QbPA_GV#fmjbX5Ql0002~7a9OyfM=ve1LN^fpb3cO0FMH~
zfztSNpfRul{~cHbl&-;n`hi%x>pSn8?6NzuZ?VBw|4vJ$xg<IK9j~p{dbmz#FYWMP
zLOEfMA6SG7XNP6|`w+|yBeXSW&zE=nOmS=D2UBw}e3ndJpP=~)$w8C@8_YrU*PElA
z(=|mku?=N0Us5AOyHHBC$pZfz208xS{#u6acw9~nV0r3C+9_0K<Os!XzYhnn$F}l&
z0K$}kV-+jBH?Me(iN5m^3YsZ7<O*DrcVFj2Cx}!MLsU=-n}6PIBG8!Yaa_o#&SWW?
zH6W*LRHst%Az3@Y<_*^m;~Ci~#|I*INzihWs$F0}tv|EcwnCcjp!-{oAVWr#T^C04
zs$WF3X@u6;#r@jG3_0v>d`baEl#relfFG-neMKrOAKTy>{RgK+Mz|SwFg<Bl&PZ39
z#Ssi!QvBTVwya|Be|qUl`eVpenu=t}`9THL1hfu2utB%_^GSEU|CkSNp?7VhoS&cQ
zNVWwn6ezy#6(M;RkBuaaB+t!YBl>CwUwEb?@2BIyOEC_Mnb@FR<hjDFvwI1FzUDA6
z&Hm=F0L!|gQn<NJ=Bdze*>+bI?8=LI4*!TDr5=dDB|uA<WRq!AeU{p5<B!9c_BSej
zO3~|{oZnrrsNqsDecKNJShn%+E~Y{-XbfsUrRz)gy7B!CL8ByBtNi+c7!$vxKilwb
zfA}vM5x)F5?4hn%Y3_A#Rx(An&|X;-{18c3w>#5AyI#OB`WV%5<%G*}({sFUX8nnm
zoB6!acODq?Ro&KZZsuG_W>JhPwf`$rm-a)+<`ha15&xlkmG;4RU=x14va;@WP3f`5
zj>VPNvwsU@B3g%Ll6t$fqA)zeOAaIs;OORbVuCLfTUoQ<6~=`U>&Vsj*<hi8wvx3S
zXtpI14%_dRKUa?bSgm(Y;5pl>4nwpaz!hxHO_osZ8`Tle{ym)d=dDV{7n#9~)v{eX
zeiwehvZt+74U;a}iqa+9%rRszGNseE<sKV5UxB~8?LmRyV}-#$ss+Sc>;00kLJn0e
zR?*!CtN3vlvK#ZAe`k4IWd2RzC7?s%ZW4*=mDNK~7POID;JdRO8B!6618fki_Nif6
zd%ndVpW5akW@|8>0Dwd3x@ackA$)CRnh?*y=t)g-;(VFYSDff?1g7_ifiE6R#X6*L
z04G(5O9pYmc|P4X#<)8`jZk%|^;Kr`tP?Cv9E-ykvh-MYDf7x(N9oLN6;#JHh1b7q
z*O|+8)Br*i5vGzfWsazJD-%(IZcfze2+O`!DW1IskK|AY3}5igc}Et6HlaO5+Km{!
zCyQCfUXvTzE_l;}NDirp#sL<-h4{+dMg8#1dYZ?Ecy8dBuTQToKV(L82>{Zh)?$lK
z6Jv{VIXtI=ieh*s-7OY$&>~|Eza&9B#97dRSWEn^XYhL#5C;laX}<VTidu1s)wr9U
zL)|w1)6-$tZ`ei1D?|6q53@to6U2d;ucfuW=Xj-%xUSrAA??8eR&&}vJzLh|O^L1~
zQbVFl61_$}zss_w#-F`=l0;rhN9@8t@aCE3U94)5xz0D(XstnWVVj&@U{w=<#*LrC
z@<u@8baG%`X0$ji*qp(xo8r$8?_&z(Q$L)*)CPu(ZmI}!5lj|Je^F)@c!1wOer70$
zgIm#W1QC3~)U$%^y|^aHkA&i7D@7WWwEld)RXK!|rFbMCY=3pAx5+c}#cFL5_q#|<
zh7UxYz1iM)0LsM@CVJ?`W9w&9WmNb`SEtMhWt>^P1K6sshhF$ROI&M}@W!lJ7CefH
zw4QFBPmv||KIv*Cjw|G1a7NkgV`h>XiPvzi5l1W3F2L<2xw?qPxam!cS)p1s*rS*?
zd`$8>4vNdE{-1lIY?{2our`8xUz&V*d1PbKZ*GMXFT8NO+-W?tv4m2@+GnURW%PzJ
zd^e<j#<tiWlO-iOu%Im#<Aije1SC^6WmGM{?Y+xfn>w@qy+$r}DMHT0KW~Di2NXuE
zFnfZ`UO7!ZR$rU-^6x>6pA;?Ku`_-TBlO1ZOlephSL)2wX)~a)jr977?$+)WL2)3L
zP$Bcc+W`|65K9SM@J`pxxi($Rs}s*v8jZJ7Pbk!N_z~cUjA-Vt02==9!Dq+XckQwe
z?YfexpjK!fcL<NB@vRBVaA%9Gt!?aLyHIqy**-JJQO_CXsN7z<lF!F=8I^b5H&58V
zJ!jk=nUG(i`Jx(4mX`iZDX3=x3e+q#EQ8C;ie@_m@J-@!qMpk@+jL#0w-2$;g2}%J
z-AC<+GQaw9nZEUJCN^7`GA{u}Q+_MWwglvLUa_?B^q8Q8-X3#(huV-rer%!VxkRN=
zW^c*Cd0)AX--{!GEqvK^$s!!!|9$y`4ZuJT7o)&cSXoEB6yGr3as$oX)OVfV@RKtD
zo9<}SY=nhON@ue#Dg>cxXWPbSZf{}BnmK9=Chcf*Uw;1}R2A5oSJ9WC8SJwvh3;mr
zzA2s<JaaNQz&bqp@QEe;$4T+$>neTy=kfkZsnEffuY3Z{Sb2<FQ^h_F_Dmq39Kc#f
z9!s>vqa-kJ$H3z#rKDnxF<l8knJR$h6I&+NfwdNyJ4^IylE8W7s}#j~S(q92_GY5&
zGVu~z(QEBO)5<)z#??jPQ?c4qjCfR}r5AWZ?bAzywnkdGkTj<~o{TwdLI0(dygePq
zEN#BY`?c=K?F@R|$*U!X|7V{vt;9LIw|{d3uB5HgQ?umT-c%t6j!rh#YG6^+3c==$
zj(c7Tzv}_B9^?+z5IhPGE9u2v<lt8}>zAWMuMk)HgVSwuk~ry-(>z!sui}%}LN(dX
z*XsOunlHazIRF5rRDV)g!OJ>n4=yj`&2#lkZdeB!TLq5D+QkdglszsrVMY2I`wYl?
z6Yr#}sFA0pQZ9_=j3}NK>zsPO6AUjJ*Vk4~2Ca+IG)u~^Zyl6Ijc;K;oF`jhDwXx~
z?{Alr6V;>1=nr(z?5FB?TxXa<vN5_Xr+tcNjP(Nnpbf!lkUjW-F}Uil>I;JJWLNZw
zu(Ra{?rYWTf1l&+t-uX@sZ(xm$EpN&rcSLgh4||A-E7B-V|n*&8%d;E9K<oPC%^rr
zbhFx*4wj{>bk7tzellR6Nj+ZO)mj}<#)+$cJ4*f3VH`J`rDyXLG^w#uyxdmL)TjHc
z({XTh<WrkrYgfu}YNI~reL2agMD%BZJo1Z%XyJ&un1<0faA9o<gY;2$77*$yaC%3$
zsaNNY?H8o}crfnvJWJW_p<s@z6!{XTtIpB@Ue#U$#Smf}sUz4BNsPf-hUKks)3Eu(
zT8>gz$SNVi?(wkcm0Pinrz#T&HqgdSBSh&1Y=BcP$`GY{MKjoU7V+=61d8Sk`<ZJ=
zVWw{?B1gmU-S_us5y^Y%4`BZ0B*%Nj>(Tnx#A)dl_V=q+l~-Y5bk1#)=lB2o-M#8j
z3Wd01C0SCdd^E6;&#7!ij_X6;S(Q1tUkSVBe{7l)44&3daHagLrZ;r~8g4Idu(0{R
zgvbwMM}vlR--(=&-W8=@3&x{<Gm|Wwq!(^=t97fQUD50pzLK3&MDj|4N}Cpa!QH=k
za~*&q+K{-<Vw6K~zm~ZfIk#D;IlN<LzRSG(NW6W>ArNa4HGH{R(We4KlWSO^wN3^^
z0hAD@GRRl?#&nlNOlOaeTIvd2#>(#W7iH)E(uYDLCV~`kVS3@JrvutfjIBF&2C2{k
z-9>5VdpPj1)1-Yfr|4;3Or78b)@5USNL5lE%5E9lC-b9MQw`EG^toO~#UOH6$-rL2
zDP>jo0K00?KBI{fW%&I;k1j3xs{h$jeUIg8EE!mBe-#SOV^`4D>J>uR9?IomRHyH5
zdzC$)BB{PI&|Iu~iJ$1%f&6Rj7&XmB=uFGS#G;F{1lz3Q&&me($QvZa^*WQtvD+vX
z+9%=iO8!UbQB{v2j@4Th<8@!U_Y&g-9@u_U!itS_@@~mzdCggYURbbCa?=*RE`yXw
zZTx!0?B<qlu9$viUAY&-7Ru<rNNLy{09(#y{MMsOKs<s^XnXtJ*bNN%U?=79ZY2=I
zALS);T)g$wkruQ>qf}=3Vyh-vvO0u##=0Lk{YM`kc~bB?qIZ^iOrW#3)fFNX01eA_
z#_sgsFJ(+iZdPXe!*-K%c(`!hw3n0E%3Zz9bXZbW8p50HY&-<3s+IJupfB^7(UUr5
z?MDJ$*5?mPD8Z?xXM5B|MBHWLE25ie+BF+4IV0lmE{J|fUp(jRobw-Dxt^`PtG2T$
nb&RY?1~z?HTCUKYv`g!M>Dli^*klbt=|>f6+jrmZQ%(K@0ZD3K

diff --git a/README.d/03-check-certs.avif b/README.d/03-check-certs.avif
index 0477c398b41b439ec6eff03c8bcd2357f2637857..f24c6b567a0696bfd30899f66157ec7c23248212 100644
GIT binary patch
delta 10014
zcmV+(C*jz+Ue;cadlPj402bi@0ssI20RR92TL1tT8j+620xkoSR{?+lkh9nU4h4Ve
zIv%g7*;%!QlN@n8AV|m{j7UZZYzD~V8Oi**R#4G3CXKJtNR_SPQ3C*gksv@bv~osy
z&N0njx7M$c%F$O|^3n+N96Mtr9H|^<^5@sDHDgA1I()ugj3KrLa>glQT$aN8z_IlM
zr}uI>7_OL9i<RTQq18^eH^b1({>gux406e#+^?EUNxe4w;4X3xL55yW9G^o{wvIHd
zG8r{ZC6jSG+2&AN88`!WRO1|AbgP~ul34tSM~dLp9Vae4sL&MPWrsZd)%knzRxhlq
zb^FA%Zxbm<?xeSdONB>fQGgpOf<tr9IpVae{i?Im(@)5%&)X!Wr>38g%*uZ(nmk3P
zvb^d(&V15NazP|#*B_CsO9$}mWG&{0b#Q!?QX`Rv?*Ji~ko^k+dJGD)KZUHV=eM{2
z0EC(cxsGLpB1lxUWR_!}pNtT5=uI*WCrW~Q%T@6_f4PYY%n?F1L1Lg5JI^@kFi(1z
zQiZKH{!Eodi&m4D-{?Ih@T`Bbg@?me@31g%CS#HS@4M^Axcq9`9T{MdUHEeGr1ObJ
zjLDBLi~=`(@4e5dA4-PceS=k7J1uD%+C}po<K!#mZTY$$nHU+z^(k{M(Ivpwca<&`
zLIUIx2d{h&%DE<-XUdzmt2in}!hET_bk<k=3s;GxUce>MJTa(&xR8J4ozwxJu6t&!
zMJ2-N_V7*Nn})d-@*}_YTJCuZu~rR^z^Lec@4ZmdH8;|(r?!t+A_#4q$0R6#yM5q+
zm>dG!_vX6fYwNp(Yfl_U<;12!S~%ayP+OKG1Jv~XA=Z<q>Fu|j{{YBu5jsglZN9wU
z<Zuz#YBEbZ&!yctU=V-pwLdA`I{+|n2<=eKqiS)pvuSscpy%edae<yXitDXoktMpg
zi^fr=B#28Xg?5ws#av~&g;wAX;vZUdzM$I8v`c^D`5=Nqo^mqAj>F7l;|Juzs6G1n
zReNbIR^LDJE#l{WZEm_d{zoTe;q6ON-S#+AQn=m($O>c=gOYzS!k@~Wf8m{DOtUw4
zcAi`Twr}%Mx#`dnYW|0EEp;Jl2C^+p!7nY-s+EnESb#yuVsb`9W9IK&Gq#he=;j;m
z6-?$y1IrW7A0&lr<e)qPIP6nzVO>#oM{JV5hZT9@jdH?whJ7yQdJMOgo?st}<WnH<
z_N#HJTxrqSvAch_&zl=EuD}in$vDTodJEm!tm?9O+_9O;+)AESB;z2A1GkZ!o}XH+
z4X%l2sIBUFye-w%@o>rIeBkaoPX$3ZT$7MaeQJbx{pOo<r_JQth|*ASQ_NCF*9WJ)
zK{OKE%F)b)8Ca<Y)EpnyyNlfi!<SNhwY)@)Gt3%QGR1$E9PZ-)1Hk#Y89a=0NZJ>M
z?j?7+*8?%!ccsKbE?v(&WP$+a-_obvxmsA^D6ZP;!hRexs@nLb1&x7i@|0|RqmBsV
zo!{3TPIjZA=(ai}v%{@NcY3V55;jl>ILO<{<0R)lg;6I-6uP7~>mjnWnM8K#5-XI5
z?O2(6pdf!X8MBZ%7$&D<so3dv(yxajw}GTDBnxt=P!KrCLB>EF9mMg;CphuVr_HK7
za_X9`sLXy#p_|NT!ahg`cL3wC?~HRxt=wt$aXMM}w^O>AfjIk9vXQm1oGvm*QH=4Q
z#(+1Ie7c;X+r#=t+e^z9`0fLdC(0Y7eSUGDqjZ1dn-X2>=G)1eLbJF-bmmXr;01D9
zYXXBR7C<=9-RY1;dGGd(z_qaZ4zGAFCEPAyib+fPjU#-(a1K{zLy~Kt@VJSuS@p}E
zU&@krL{c!gR+2HizTYo7V0Mv{(>>?|de#kE!#L2a76_o342?JhF8$vw)EjfVrre#q
zyVZZVms?GuZ5Gn<(q=N49(4c!C1MWs1OdHIpz?)aYu{&0a{2TfTJ7=yf(3cR+lWCX
z;OYs^3G2~DdI3;RcdN_&p0?BLO5bNcXlRVi+ru#676Tj(ha8`!0Cd*Z8ruDm%lj%K
z43VM)yZ|z?F+7zl237gUBZVC~exZHjX*YjYcX}?G_Hs_F;M}uqW>JBIA0I9;=m`4O
zUxs!}9zPNdVWacV!yy+W?F#3jk^u}5j-+ll&1>qGeiriOjt11`fJ)_{nk%!o>>?x1
z0LCL;K_}P@&<8qvc+pF4vgr1~A&r%xjethVARoeb0Z$n}dmXAD_)bXq7fu2#t@3}F
zK`hKLS&3Y?Q`f#dDgHFJ@YS?RG`E!B8FInWWj<D484>~fK37lny{nC+yvFT)4!&<1
z+uSs!Z5&9lXDago0N$(s8!>^m@y|J{w!abMv_wSFBV|bZunfb2jCMdc?de<{6vTC}
z;~NPjF5Vop*vzi+hET4-TxEvNd3=BV0<v}Ob@i*Ikz#9j!UZvjHv)1_PXpH<fUJrr
z0`=|ucQVG%S;KCr&ec$Iefa6^TjRzyli#%W`X#->J=Bvjxec`#j366(06F70?Oc@=
zlcNTbu@z~?tGxI7zay`>@m7lSszc$+NbSVR%^`^ljDtBC#sMUb{9>VB7TJHT&D$@B
z?AG3B)l%I;g+d43KQGPCJoLqK)KdDrKk2h2g{9l^X2z+mE%e@HwUkz5DxfKi$`k+q
zU;*em<on}_+kYRhjn*A86LXmcW+!WHAY*~RJ9z1Z$8u|oqO^=76=ZIeqN27(ay}v<
z`$Em5B=O1=1(slT?I4ff<m7*K>(izxG2`2Gyi2IGC?lLlvE^9-cR5lCB@a!bxAo5z
zMNrP(4<B1wBZ#yJM2{eMkj<8SX90;^p1uD7`qffz8Cx^BgF?1~DRJj0V9h22bu6bR
za|YxdSDb^2<mjLdu{>+!7)`y0m*uQ!x6b)ULdT#`IVE%KxbISb!f}5RLKY1nB6W6<
z6`yLE2*%<SM(^RyNyuMvYmcIUJ1_W7EfN`Rq44#rR+6iRg<N2<F_moX?dAUf<Jrze
zYP7yGX&IbZZI==vA2%UU!Y&9a^AM@kiR9-U1#;9-2V(v>guyIHqQVwwOp@+(CG#S=
z2ju8N?D`*S6UO$)%m#mhZqc+JNmg)hIL6VpXc-wJZV5kyanw);Zy%4XAoBjr;rMOD
zXvm@|RAVF)&dl{6j!(8S_1_cQ>vl;I(xZmqPyBob1&GdZ_d&qt01!Fv#dDNU2cme7
zTGhNUb7N^VI#t6<0^Tf%6qy^tE;3uM2dAm^IkVxNcUkd;)#iVl4YrGJ1SWY5kUrK1
zL{dKYecd~Zj`hoGPogHGpYbfcv$uO31(GkH%p{Q@1%_7`$33W4u#Zx?Tg@8cAli8H
zVq0^SkOgLtsbTW*Cpqc*0C&3AgZ0Zf(_MSLI$3n`nu5gyQn6yB00`aFG4?s@?N|}~
zWbrIXZi{cG;ub0m#7;Nh5r)I`=QtST3g<P=CTVpEC)0FIO5V?CZL-@i+mF4|JY*jA
zl#>Jzy?@NCpwc6Fw|HAsn%wLR#@(5jww>7dvB@#x>UwcjZs5>7tC>^6ddw;VeC=r4
zV;e{W{P-9oepCUcto%9D_1$yrGHVtROEB0>2*p>+1qkX$!HnnMK8GA<i2Nx28@08P
zYv^Ztf<Rb-AYoOB4bYFBYoZZ&Y)Yu!5Y~j>Wq;Y_2pc>90KLm|)N_H?p`s7?My2ux
z{32SpA=i4vY+E2>E0X-@2hiexJno9_Onx77S|1N;!ZiRAZA)Y4U-tXqhdJbrdb&@A
zCtw%CTEHS4ke2LuAgFJ@(|77Ur~}SuuI?*84#g#*9vau2@7Ur<N%Jr{0B+>u_Qzw#
zLVuAiiqKrVz8BP$7hn$+s~vzwyRu8*9oauZC<BF}y#fn=4?@fv!ur$3%*>gzCAQ%R
z<iD}cvv%zZSm;sPNg{Y>TxsK159V7qj5aaP&yj<U{Aanrpbi#_^dSBilHK4w6xBt`
z7Jrfh!Un;|&zua8$Gt<R+vsuJ87A<yv43#^fs}2wZ<T|w-S^ITDi5aLdH~?)uIb^@
zn&}{u!aABl&bxNN;#Xa=5(mwWzF7AP$J&J&Bv5%*UKrG)lMC~Gl<vmRNy%V3=Nx^}
zp8NoCv{#{B+jwc(XushX*Wuu@;@=LK2mP*tBd&T3)G$G$rSSVtgY`7F3R_}ZNPk>_
z5N9R(6_jV(cg+BBbXR(bqemo&d?l(pN&(*X>>M$6Cpc_lX<T&sq<honwa{Ejf8iF^
zqgESGi!uVZKkxe-jQZmg0q68rqFSE}A%ZD<DXYsOArb*>a>oapZ|#HmAHt{EGzmPw
zo*LGQmPbvnHgLhP3E$A<W7iq!#eV>B)K=Gu652gjEv}n$r=W>*4a7z^EzVBTP6y-K
zv1kCIiYNf0iYNo6yVKWEHj-RxwrmpK6d&r)qLdA{3VGUCuQ)s!A5ST9EW=*0X;v?@
zt8QE}Y!PGr`8duxbJnYWZE4tuwuupV<B2o9KqXKqI1A3=3moT@?MV8@mVe%08Wc*d
zatE9DdUQK|KgP9Ome=(-YCK0f<-Nb{-__jdHBE0-gHaZc_`2HZJd6oa7?nbk$jIOx
z{2btYDuD40vt?tZtX?5mf6`=7jFCvtfwb=|#GZV|A2A<v^NP&Wb=^MuQTs$%9lfj@
z05HVBWaqAS<EI@vo@%7pjeoR|S;m$L8$mnD?lzMmw#+H{dJU|3$obD0;<=;E%<s3z
z>5o4<zTYEj`)gC5T467Ukwv_MDDGlKRd8fDIQep*vo=n4_Ulz{18edmx4ONmvP23N
zjySk1<f#frJZI|u`8$3W)om9*@un?2mAkhdR8jJ=@h2H4J;iWUvVUu;3BqptvbV_{
zY@Q+3Rw!Wq0ECJr8+PF%O{sy$I30-Ru6@>(d_%0;$1+8(S}HkG%8<kX+6D+4c*fC;
zdJ5!dt5b!wkK)dlP7#fz8@}gNKZ`Z#Ze{azn4~encCdmhH~T#?-1_(RsV#hE;s;oV
z_Togq@A;sJZ6M>5kAHmr70A(0no@18I|7_9eq9cte-P_4UPND6f!)gj<|x8}@}79_
zfI0N3WxKowKk$%Q1&?gGNTUR@lOPxakQs@`bK9kIR91Bpl&=?LVOBDnuLsJzZ~2{l
zrn#$2J&u|G00|Ae7N#sLrZ~Wa1tbD-!Q-xTlUoyiXdSmt<9}TtrHM>xph8GeP@E2*
zc~t!uk4p23DjX*Em*9w%I*!(#;EuA(Qn=J4lEz(XJAKOT(#;eiHu*N~&ry{Dah`*v
zZGF2_xM-sP0EEWCVnrmhcIXg^7DYMFAU7u-gbl*H=8DlP8@G0PK)Te@CE4SBFd|9i
z?As6k9{BD6^nV8jfyXsvX4fXOhfulkZJbuOCM-!MtU39D^#_g1-<~#~O7iM+NbI3m
z*nj{4o`d|8Oh<pG>KFHx_J)5LY49{o(4sZGU$_B51eODg;ACWQ2qzpfO_NtmIj+Cq
zCDZK@XY!*~SWe)P#-W$!p#dFmJDv{%OStU|lYnvs0DpDfC)TwHZr<JXxHUH`gFF$$
zV`L$L83Ww$@0zcD;@y2Act)zSLo%{3NMacURIuQGwT`{3n4+f6`;O|{8>7ZL@Ir$B
z005Rb5XKHz?mX?t=by{cr2hbf<HUb9bsX+FJE4sFdatnjtDd5$M?wDp3Aczm<d^Nq
z<{%+h+gL@A2mt>851=2ArZ<eW_C`~v9jv=Z5g_f1kC%gv{dgXgg+%~f)pd*gZujk)
zjlrIMp?8%F$It*fnxjP&08vF008vF00sq+&0162>W%4{W5D?I5GSRb+7#IP65!j2=
zic?J==z0bU0>;GQ=9alBokOwe=avkBdv54V!CP^@d$(x0)(S^!&@oFct3dshjp64>
z#QvHz4o|#qw(bH+lbFLChG{QjVETj8xI;Q-5r-gAu>Oz<hHE!|E+7_A7pc%?_f}Mz
zjpNF4`nhH~+|fJ9`vVNsEnt{`9%|F1hpNhmnW+I7n<j0(xLeOr4?_O`fw&KxCSn|+
zFVNw+lbBNB0CS}TPx>Wu;?NjW)4lyO3M*O%_~_EO?N7$l)pGi!C>uNxzZxw$5Ra_^
z7QebGQCFk^`X2eluW<r?6+xKhfy<y-F}2q!(E*nAm1~Dcn8uUM4rLF26Mv46&K$Rd
zSTX|QU<rd(+N7UB#RYwUjF|R}j!a%MXRGoyhr-DbbO$~!X1P!}8u5D$R0^uG@XbRF
ztPTdy*n}(1wa6r-UNa%0YeRvl9Mbs#ibRf+WSb<)sHn6Y=@tGlHW(meod?%+{nIf6
zsiME7O%>r8&?gF#Ve1)xK@))<$S~7b?lMrNa1`CQ6QT>13kpUDxsG2M-($8-o+-T4
z+m9_2s)E4XD*xAuAGUp<b0IsvZdkpD6}e6pyvD-JOl>wmzF_sx|5R?pXQ`A9BF9UD
z8wLpG^;gd&F#+-gAcNFUY2<a>jOqMpu<MIGK=?y$>*K?KaAB!`G&)cLIY^_^?e7=r
zbc2#aAO_!b5IuPrEGY@dp>VpJzWtL_rQ-Bm#l3%ki8}mA9&GSn2KVX#fhO^8!Q|!3
z^B10-(-ka?+h91P{8GkXfMTLy?(K^%*JcNc9*}DmgjGYS;30WPb9_vVjYZ5QA@k$0
z9&E}X%)ipcwyafu)zgTG)k+|zmq}9r89=$aBNuS~yXG`CO<fyYE~G3&Z1>;v@7AVK
zNBToT=eG+~`!XAnZr$-j{6j_}1oOD{*2irPFuI#y#SyzO6B_eWpp@ctg=@yU@zTJ&
z=*E^0otggqkx$2+CnrSF{4}=JvK<>=&J{=m4Cas5SzDlgaT$N)+s@l};T(s1YA}Mj
z2Sy!<40UNX=DXS?9f*_EdzO{meyaq1SQ;7ghn2Klt&03ON~Q9M9Nx<@Ue}J<eXLhN
zl}+9OY&-%h%o%#Xx516T<s*OMs&mxZf_^vRoD;67A6m%iX)`o<587CuRsE*Zuinga
zp}N7>rZ5SAKS879(AS>p%(f}gZzNZ)3ndPbOALy=!R3p``;9WQpE#g#S{DEutOmI#
zhL1UTCAU5YRpaQWFhA>l3k~&?FBXOHjb)};TouCROxCsTlzTQE(T-7f{gKx$Zmm)Q
zBClm_cC7)wXvq+ZO(g;9ME+VeXUK!Op$-+9QZYt<ecGM|cBdL{?9^5*{-1-vJ6G$1
zqfA_V=O(DD#IVJrocTFgT0*?UNt#3403c<x&g4Mn$+<xw!HOukF73dQxxXf^0XI{N
zhybD=M}k_T0|-Ez>rR|5NyEs2R{mFHU7KSpE0@t59X?i$Sh6Xn7Ku&V8)LD)iWL^V
zx1unAosyWO;C}n-feni~9SB#b(j%vb<kjinHo>I4jvi@txF3}cPQVUL{!v-sDHz^W
zFM{X7;DkwzskX{Rg+DNkmIH?|Hl2!==3!%)x#Jl>98i|A=G*3&NzT~z<|ZmigPX;s
zLg;T0H1Tu-L>&X_hEp_iUZio~w;{Ctzdta4#nZF5QKjfW<q<h9CZ(%f?pxLFQ-XPu
z)bv)#(j1wktCs6K>IVg~y?tv2KTSkv%geQC#BDKfjE`l_vQ6_!<3h22Og-<0OhvDF
zy47e|j^K<NZGTRY9k+YaW7N^6Q#s1PO>xPf_QjtqXZ`5b0R8bUljgDUG9-IZD_A9e
z=&)Zzz|1WYFMj*($AXP;Pz9Kh0jC(pp(ah#I;NTwX>!x&<l2~rS@h7<PqF{+B8_GN
zFXP!E$RVMgPqDq_6fj&~j~&1eSUXt~DBoyE3h~tOe0C|3(QLSOlz#WA^zca49msc@
ziQez6lbFd*&HuXY2d->og-jxjy#(ohOyVijDNG*8ZJV+$y7W*alj*TVq!D2jA!ZWs
zfNbCw;6&LQErMVDXhh^>i?HYoQz^*Nq(K@#5Rtg#iME;Ohk(rXUGZ8?PP)9rxvLFQ
zVVwG|3h=x9jcAsFwZF@H0fd<x6}K;2^*VWb&oJ**9>{gv&nN#-ee0=c6KL9hQEP@K
zK1S<U(m;r=$_M5|y1rx8f07fh$UW8<f5aAPp~*6QK8FtD_uEM~1paz|HBha9eMw0%
zi@(9W7r@Ln$)yjm=SD`eKGt+v$JCBN_DVpHFdw$;VIkZS0MJg2eUYEfP5<8>1mK|&
zHG)(v08-Ng$qC*&G4ai*q=V^yOR*X*vzxZX6L07sJmA26FKr{eDi`m(Mlr*<0Vz)b
z>oy!$I&g~JYn6S1XxJzm>Z2@k_I^9f7%xdZn#W((cLZW4ILrDOcVi2jlN!xvCsete
z%w(-El{UsY@-Px!H0Rx+N%Ulh#nmPZ{3@^(sX}lrc^rEf^im^rA}1<;Zy|H$tS`%y
z_X-$0dKI?&K3XDlCA`aBmp7?Z^>p4LkH}`pBPsTA%Xxrsgip1m4try*xI)&)ROW}j
z|EuBada;cMpreQHo~`59$!?j=q_-jd2I#0=7+I)N0mHu}nmpcFp~cb)j<*$I?qBLt
zRW=@ysC!R#15JOX?m;|%@7Dr1#1AP7-yGsEXkvYMa6t}-wh$Ui{o$w$yW{TKJNaZO
z!AelOFQUcxh<G97w_yk!pQukRwEv6Yu)I<~dpmSCLAzhX(!kb8LPtF{Nk~Tfn|P?h
z7XjP<>i6x9O@#ubtH1P#2|n&NQ~40})HHnvBx*QY&?;@uL@)V&)%>aJV0c7^L{P01
zr3)(f2OlzTL={bpEE6khBo2#(A_VR`Ci(c6TAOszxFgrOr^c517c9^N!n6fsk(KRm
z+f028CCY69hr4bvyYRDW1T!nbN8cE$HklcXxkcDlu8@#Ll6#^Yv5q5WYhq^9;p^`&
z!36h6+aQ{??`|!Bstu64;MfmhZ}xX1?F);v-t+;gyqgT|He()f<sK1KR5_edJ+2kI
zrMGqp1BnKp#5;z1tLOYp!|B3jId7qz)-|V9ROg6TOx`Q740;jNY=QPOSMhd}z0cwU
zz9j})1L<mNnUG1dSY+jysR}n>Xy%u!qSX~dth)TE+5hZ+7EwVnL<w*hEMA7}yw3EV
znyH<+X)*pZD}D((_tXqM@bWxAlj{I(?;zVRTCeqbY}W|M`4e;Fb=@KbpV#^TO{mOM
z2bW|-REk?nCieS3p}Ld8L5-jE1Yti5`)su?5W=8QCrC66sl5;KR77k`?*L}CkcD7^
zG5nbwgfiHFW33sPtR2&k!N0=6m|1+<?j$jgaK~Ld3M$@<qUn*XaEK_QroO@KF;2*K
z*Q1bnoRufpi?I9*<qS}!EaW7E3%CDB@Xr5^k9VuiE~li#2IEOLHgxBn1Y4~aYd6<n
zS}a@TrhReC!XZ&syj0iBEe<|}NBU*uYtl?A%Q4)4%?KLeS*ZNi#;zvhH6`*_ZB+4N
zVbnm+Y^E4p9YgA~2SI*N<3cNC#PwqT_|eQUlvA#Z?2NLqInbzz(UjgEG}Ko8h<-?@
zzJZ)`t_zo>r0<IepKZ2a)*fd-0j{sGs9ww5>IwNoT{O@jOXb#?@Fpk$$a8+&r>Lh&
zZdRIqcXj5&)O_uf9ta3`Lnzo+Nx)#^xQ<dPQUZ+s>n@<IH%@V_0UXi6CeC5-la9gF
zlFQgVvxJ{M=o!lVgwI2|3A${B9gyk%!o*fm^L*YFzLYNHp6Ab|x9l5H_(v=Mk9;Gx
zB~wfvgc1S_^?s#hC0ri1j&S%9Gsfun{-Zp98+xB=e4ynenmJPq7|Aw6B){`lq!M9&
z(u|z2ub-K^g7|>R6NAFTl};3fxFgG|H-;P0q>qoEP1T3f9@2Q*mO!lw8N}nfS#pfU
zjo(Hkz>{(9SIl%8PH@6{0vo&uE-qyFBz<F2KCUjYp8|)+NGe%xQ0A+}c&1YNij5C{
zl8N&mpSP)LL&U65x*q)t8!Q&Hv@B#C_OyTXqB-PZmvA@66<vvitAWYWruQbWo8BG)
z>3i;vb#v?N*IR#*4QV6u4!~HM^JS`kH~wa!t0XH}V+>up!J2IMvD1&H+44y-i}u10
zEVxQBsj`TLP{Q^-T|Nc-x;KRx4a(Vn`!#Dk)Nzw$Vj6@PUPo5)v-(NCyt0t&plE2w
znkte^27(0}_16&NU}+P8sj3ot72`@6-jKxX#GT#18M(!c$*|?=pn`OJtb&ZMZ#`~;
zcJ}e3QkoQ459O=BFWnmr?Pu*Gz=d_J6cL(pgh(eMxmYoU%*Ciqm3r*n#(x5TJ2xoq
zO}l0Zr(5Y<5B_m06RzRe9R*EtH#Z$-soPetsNnU@2zD-=6I6{NYxS;Z=CaV)B8oeC
zOLko3DgG*=C;;LaM1W=O&kRIhOy4buyk=Kp9R|-AzgTAT^sZ5pD98q<#XG(KvRhxc
z#VoaRjU?clkvL$;^-~i=6&`+nkZ{1}bC=M}>Xv`HdF*+Y@c{2Ub?w8^;cZ<JzIGwP
z3|yYPP&yvqy^_Q){Cs!kaGLqTV!Qb_=<Rn#%hQSfG(Nbk*|kqZ26-T|b32gH+YJI5
zk2Is*4=$Ax_&f|$eq~EI)b+@u(-xFM(m8ITSdvc}ySY*Fgk~>0w%k5{2__fb1mSQO
zv=8)U(u~`FzzQ69F_)h(c1|K=f`f~NJd>j=5Pk?GX~o2kz%@m8SZky~N*#XID0qg@
zHMuvR1;qMX=6Un=WV&OV5ULURm$kPV$U4kZwuR=U0meDhL$s=Kt<3*ByyC`Eh())C
zI`Rk6^Ror3Sdp5!sQie3_iJCQcal_n<*L}6(mL>_=sc1&58JOYP?$7Do8iD3vaeeZ
zix@QE=OTtYTh0>!sx*BnZ2VLj()y4BI<9dfp6X}wZaW>)1&xRe(aOsd`s?J>+XSU-
z%Ricy6v|5W*`{zk)}xbhxFu8ynS)$8Fg2T^jXB#ApfmfG+AIivN3L#N+Yj6t)Wo=b
z!?RC?tI@v`Q$=Z-K_uPMpetp$U*uqbV6ujD^m{RfEKg6mDZQsu-s9<-S>@<vDlr}Y
zO8ykT9ch{k{{dU~c;B7GL(WH)^^sNt<YRnU;ycEN@Ul_dfL|@|T(EQ(ZSQ3v+8(*0
z?1c}gW^C@4=7D~HfLc3m8}y^<U$i_nQ<RsYRNu3JbP%~~%Z4vO8STd^8Vva8;@58Y
zVQDzY$@mlFp)1*Egwao8X(MwIGcY=UkiNUj)30i3PU4tjNp_?iCtahDbQeU$a?L5*
z>3kyg1G}YieO`$a141KUktR0Xx+_qf0d0DlHZ+@WR=(+fB7lt>6a87N3Ew?%wsPTz
zvpTxP`q%QnpxUE%GP2oGg*{RD-k?p(`A_R|kIr;QwUuh;W*bQ_0tyO7m{pO=(Qd*9
z!nf@&8WuU1A@6*@Mq?&>$`J+R>hRfV+fgwr@7guIgH=mem&jr|Vt0HmNr1NqCbc*E
zH*=md%UG0u!mjc!!;LDn<(K}g*EcCKPQ1rbv!CguT%wKYyIk@wG5~U}Pyi3H)^J+p
z|Du-7awO^cKJ_|jUkXloR0Asqzfre%(__Np&5{m|{n!(Vz}P3qqx6`<TpxQsVqv`o
zP2QdcdskH2I9%6YaANT7dkHDFvJVcoFwBo$?s5}<f)2#~llZP?V}15(@@8HUol_he
z2GmjX6)UMtoq~hznVIMm!0O6^uAU?O57G36Mk($5+wl?DO?|fyUdZG7eH;DCeD5yO
zwIu3v03NqIply}`8TEsuiXSi$c94U67aRynOR=Uot4qSKbN(C$y|kW$>wiZaqontX
zWeGoj*W8GaL&((^z&?8LM}>u2_eDZ=qhIOCiXPH*zD`XR2)1rT7_-YXc$G7y*h1iK
zW*i=!4vdm^*bgu6)xj*aPOYazMw%km#-H`#V%^|vTU!t?>yHRx&XRyhX8X$^xQkBS
z$rL70r*A=&e3X_JJ@Y%T;WQg%yDI(VmM6b|vMSl^cRa9??($S7&`7N!Jl8mRNQ9e+
z9Ft5=yY^-RwfnKlsfwqn35VE*r~w@~x@WTy^1$6hxmwzYY+6=u#DeqFE!4S>nf2W2
zax0JAtO1JAU4&XKfB5c<wUMgdU)F|%5t32#gp-#kR%61wg>dBa`i>S`ncOjz#Z|a}
z>QnA@={h?bM|K-@U$CXod_%Y=X)JjC2>Qc{`yOkVh})o?_%4I$@_LS^i4U+3@j@WI
z`-25J;U6g#T|1?ZBR^Gkda623`fH$M97;1;U~Q}tHp+c7nMMTKn%Ou8X0h`0!rF&*
z!s?udmY|E8)-;PJlQMt~9AX~6GX2zlNS774gQp8QzO~uH=jY9>lYbF_9Q!}FlH`J5
zWW4mmwxPXIahCTMMz{{wZ2Ut)c@Dd|@H2;d<V^AGd(O45?_tCVlvLU#VL|-7fC3J<
zoQ>%+jF8_ShK}n4`J;B!M2~G_uvA2%78kv)8d>3Xl9(5Pwb5mD1a0Ne5-~}CQj#!e
zvS9V@gT<CV2%xdu5NZK>(qlq>K7{*4=Xehz?jhLoBwCY@pX!2sX$Kt`!Am{cN+cpa
zx2p`Fv90u&+ZrwPPIs?>Jhz%8=&s+G(Q70*zmDE~;}F6FS#luN@_oU8WC=;dZ#xnZ
zuhVoJ;GqMNwO$j>Bahd&Tw1b!UZ-5o7K<<Mz({x*<mLBB+AJloV%h}s+OkK)mnh=j
z!P1A~?pkc~q;xYTShSc_JJ_OI)Y3QBZLqhMvQ{<v#rYrJ3Y(r#8Zc`WNZhK_g=a28
zz`F3-I|cjF7T!tynSfrO;iqjaG4v9yVACvBB7V#?OAX!=^@u0?B+O%fe(h#pDu`4U
zakvgzDe-G%G*z@w6u;#w{v>J=2t<~=_!<9qEkr7{PQ$xNjKx#{?9_+K|A;D7CKedD
z+-{gHN<S`6t-;iWxadJP3L%ql>?LfOQw(TP3Gyq%C+?mKN5BApDp`>>;UL=U?`W;(
z$k`@<*=$rU7j7$}4rvvC2^BE_%j&~>GRx8``p^K)5RQzzaMY4@O9sr-NF4?D`{^5b
zvq0H|TT|{pdPOaSs|t%1(Mi{wQ?KVCfiH_tfUfbi41TwY?nH%Y2I;i0)U&3oE#{KC
zyP5#TVk(N&p5o!El*q81KnVFCynyCY9U900`x-<p2)FI0gDQq)n;_1D2Num2F}e)l
zr62O29SnutC=SfcpaDlgf_)3E{ka8R?`|Z(-vfP|tJ!Dju`%a3)gR6x9v+B>m?l0G
ob3~xr<Vo?PxtScfIdL%LI}W|<_Nkh?2`lAUrz5zoi^c!_vg3)J4FCWD

delta 9985
zcmV+cC;r&hUb$Y7dlP>E02aCc0ssI20RR92TL1tTB$1BC0xjl~R{?+lnX}jd4h4T|
zIu5O=TG_sxr6hLpTcWuhLV1n`;`}!m1$`?lXquBo*Xg86*6}ETfIvu)AQ{>@BRuCA
z=C9l9SIK2)tFL)!1bL1fv67Bdjx+gl>(`pGqdT2GUoXZG+XFdc6tON#VSZp(`hnB?
zxg3mFOeY>|$A3evoo;W3p_%=YIv9WDlS8>*G?<fmZTY}l<Q{_zyq-BehNW#BX<B45
zYMM(X;&-#mptdq_2JETEIKb&wJV_+6`4W#6!Kyk=TzOHTDZtAPdHbvK_u{NySy=1$
ziE7>^Qjy(BZw!|Tj?AL~Hdh3O=bm%LX<7SKXQ!s0kn2Bel9ryDen&GXvS@$t7M{xU
zsQWqdNjb>`k)K?CMzt&-!?BRJnjO`_@=-{RMjyNYhGIkXED7i^D$M>CvbUbz-~JM4
z9_Bfg6p0~H(UMt?ets}P&!IHPG@U95?=4rv@&4u{D=<X}*#(M#SnoXJsKGtzVM-RX
z+xaq88ZBB*Uw@$Vm%_5j79W2NU%tS>z?qIn1HSLC9^>(=Xmn+QL3iQH#*@w^8Z#z5
zzAy;g_rCW&q<tzIf%XkmZ0xn9YiSqEdykN>nYZTXdSqZ{AJnDHyF`}*UEWl<RR{}^
zNFKfLKPu#!ai1z~-mKuM7YXvF?bBIb@GV{@k$V7_MDWI<2I51OcTj%@e!1<Mvl~t{
z=wYA3S1ot;StIiXm@?9t30KZCa5k<n+NkN8o9S0m+efSs1UAlNk`zE)zVJZI4gqd^
z^IdW^_1(g?r;a1?;!`0l9B<^PEz1#s>Uw_=>q*pf{XFmfLwJeON-J&k=KlaAfR4ja
zl3Ct;F6qkvhi$3(PT_yp0fT@?YKCnaQ;nUQOT3K-KQ+6I4Dr-gU27bPE!D(cGL11L
zLRm~Jw4dH8<1N%Gw*Y?-`qQoT2G(t&TmJwT$pjJ<^O2S`b{=Cd7(XTzLGRbntJ_Ix
zw)y`6k#83}>uYt<-|{&-FAr*3j_<L;l9k5rCO}gloE(vk6#joy>;C`@>l$U5ySudV
z;0?2XnvKs+fRk7BJJ_r>SnbBH_VL_GrsCu%AqdZ?U{54&2OQ^|S4nhqyZG*`@4Q(o
z*6k{=kIjsh`G_uGZaOF-M<4(_E2=K&?UGl}<1aihu2@d+&!yb&L6-8<%meXUiew%h
z)owK_jXFCvH+Fyd^J8XJ*a5*gCm8px{yWQg37PzFy>1}}YzWbd<Pv#Y<I!=SdahGK
z)AcDe2)s!tl5j-t6p*t?yRXZ$2b^a($Rv}&su93mX}3Cj-c87jB?kpO#Uy=jdVACp
zK`p$k9LQ0XijaLl!ToExyU~0taDLeO>rHbkrKbJ#OOAhe<8LJXN3Los-50|q<TRS|
zTr`&<cSj^c<z@w$kG5N%ZU#Efy>hg%!%<zd{uS`st+==GEHN`iT2__Oz&Hm31RUg%
z-=}W*+P;yYT4@I2%KfIfE&`|8BW^pAqXd4vN4_YNs$0!U-%hg;X?8P+Jd?HV6ovtK
zJ4!Cogvftv<EAs-<=&&ME|GO4-X2KMAKtIpz<hSe+v|bB2RIeZM>d}}sPW6HYPO>>
z`7VZUF{23iARXKTj>En&%`Ufbr`g2mXX4#X>ShGv?M})@*2ZwS$stBF#(x?B=`60U
zBGg1Sx(=1OJj-DeS6NNLkg(dQMt*UgIw|RjsWg8&ubB(~0A$;;!#b5BU|KiM^5vc~
zPIoED$s0)QMR8x+Hv-nf>^i;RxR-FbhAAa4<}{7-0l+z3oeoK^gTmq_y=T`hb$=>J
z;Sor};aW(>^80+e<$>BpPfYiq4wy-;M{jc!x+SQ9lI<g2oT{b<0SmZf9y{a{Rj%)~
zfAoJj<nZ;B(})WB@mwr!08BsMP*;qTj-2v3j$dB;I%}8Dpz7CekPHwj&L-SK2{#8&
zPH<0NiZjp(f_uGQU+nd^pITP?Ir~FIW_I2ghXAk`;B+|T{U`&gTfI=-Tg4WIZjB_#
zkhf`xHzRU>OpF9MC!drKdCF><t>ji0H}`)Ub%3&$Y;uITe1<q>#uFokAmDNsb`_Q3
zos$QT#DiF9{PZx$Maertx#*;TLj)tK8;&zt`lX+Ryt!k6wK<>?xo9Se?Cv`Vi1UCk
zh}V!w_5(Bl%FW`d7>u#S;p=O2Bu^VOZkfZ5ISGsoILBe0`MLi93mXosnowP`G@pO#
z!Q|)tj@c*cgW90+rMHHyqEV&1rufU24wEVJviQi558?8<f3@vgZ6)S6Yv^{-`1%C4
zk_ON%m>I<JznSx?!5J(;CAs_Db{z#ie~59;VE+J#Dk8(>?NL5+u#9Ib&rbfN^{yI<
zVmhmD7u!NC1iCbH{fCH*k_KWhF}Qz~Cx*!wz~l^YD=S;o<JE4=w$^K73lEwI-zv?L
zcOC~g!2ByJiU7TPe;v%Rv=(sNs&lne9G`wVdsg`IjimSOJ^qPraF2B)%&tRiMk5FY
z-oOrc&O28nMP%r~q^w0+ajNe<{_n`^?mShZyy}qna?(3-GP6ixLn9#0MlpYYNh7})
zs8_|dYjbwX;rlhWnl)6nP@zzP_m9i-bI(07T(uOwuTT1H$zf@B{8_Q8Ym0q1nQdhi
znF^>1V{(N602lyz4*5R#;<n$%>?3uDOhnw~L79o#+ejGTa1P!&VR77=<0!2o2*p_&
zrD&+Fk=&1nh<?zsXvsWsg#mwMm>s)FBltNv9eVWXii~*n-7gaAEeZ(d5$t(ZKwZvM
zf=NTuXzl%T#Zgo<w}Z#l*2v;50udv~9pp1*pBcbnS0}H3{<Tz_##YSkAkeL#id=ch
z7&A$L-AgIS+`+jAmFFPhxjHBVtWO&G1`}^#<@swGZS%fT5V7bK4oQDp`z|}wpYWVS
zkcERtNS$4z1!vl(LNU07QM>qal5!W^n&ar84$J-%i$sQ7XnZ|u6{M=+p;s6zOl4a;
zdwGBO_H&V%tuKt4MrRgVWyFYw&B#=6i-HRL#42@Sc{#^HT(uMd*uRb;FiR3>u!Wja
zB)gqSe8{dr`8p80K8JtWgz>$yGXbF6v~35HRh%3SF|=*k21ZERf=}UGbrb>H$K&fr
zJioJeej9NbGAN2w7|8_lvpq-SlkJSXcf|Jk-I7FfsNuL%{{SBW!D2I<eb8_@zyuC^
z@m%E;0qCA1*0pa8T-e%84wZ1yz_*JcMJ7h@%Z!%m!RhLKPHcbpXI<8OVRd<@Lv5nl
zfeD^NBoDQLkra=;-*-;qBfWCkljw=4r~FGVZ0+910c4Bk^9dwK0b!NKG0$ohtRvK}
zR`W)<h&G-)n3mk-WC2;EDp-8HNzQtHfF16&;QeyWbk|<*PL^Ffrl7Gw6s%aO00K93
z%zch}`&I;h89Xve5?i9%>9~c1aTAUB1YxlKInD+-0=cbgNVu0#nteY-)L^nI7$lag
zyD%``yks8rn3Mbvy?@Out@Jae>HGXCti16^1kAA#vv4|`<o)1qG1Lx~EzBAV+ul2P
zKUsl7g0d`30uh|&C*>UDJoFj#AR4;Q!<|oE*FMuGv0)^$4TQjqReZ2ej--qj&VBRf
zamIL$!jIv*TUjQ)hIhCm1&9&`6<Cnn2>I5!NteU9@?-FZu755(qw=+(<+0Zr@&-ut
z{b{z(;mH+L_&-#U)<yuOxjV-=$lcc*kUcuk2c6Mgg#qxke8%v$u^>n1_Z)4`4sgSq
zjD1NJ2AH}Z+4kRfV^WrOfbI}lw$)<J0}Q@#k_LGDv;o3VUGy+`dL*|&;hk;H{ANpS
z##X?}{qLttb$`#bG8E9(0VJLl)a4Pf8CY8~s$l?bcb=r@2h?*w93>U#@+XFwHva&^
zC9NrR#`U!z<P4IavBv~@@%htj;PA{Srf&%AuCZiK{*G~+{{X#_!5#SH@c{FxE4cFX
z2e?#E4eH+@^8oufEWk+H%MIAT1~5H7Vd!eu9v_k>@_)P^tDn2JPqUN2Y&pj4XCJA@
z98d?IQC@;#@cT87o8c{HJA#{KM7KC*Dsog7=bVwBLFhq>RPg*R%6v7dAa`cOmW`EC
zjkFKmf4YAHd+-6l(O!vio*XmW$NvBbj<pIhF;FeYc(IOoZ%x_HOb=cvNvG(s#>*du
zb+Ic!Cx0?qF#)r~1>c+u5P9|d061zZ&|_T&IOJCFma8KPnfDu3U5HqfU%q+|<xh^^
z!>I#_d?l{sWNnfgbCcJD^8v@EJAO0)=X6(~u<+9xXk+lUvA!TYz-_Y9WA795dMh3=
z-_omF+USm!=3fo#4=jFJa+a;OKtLeiKN&mm>VE>CP(V0(D__KR)|Q&Dmt|#tXBU<U
zhWR!)Jc2;U;N#b>Ya)OOD58K0D58KmTfIGX6KN&JyJo>H;X(eb3MoL_aHpN6it~fP
zq4e^X63jL07L{WAI=1D*Cczdz?~{z<r#))7_ST(<i)fJ-jyRJ$)B;rklYqSLAhFJQ
zK7Z7YtZ8lL0ii^y=OB5%cc(+Q)BI~y$!&jAhNHxDzFXV=-Tht8lT_CASTzx84~wm?
zlgPl8A&FEeJdBP3@4?Oo(x?v*>o!(8YQ^Fem;EM12+0(U2pdlF%t`0Waq|)PPdKd2
zM_tqJwI8%aq1)QQumcQC22OhCZaQ((xqs%WO{m*R1)OPMk+c)MuH$JkD{R7_m!R6m
zoR6IGjw_lx+|K)aj+pcFyY2EezqYkG^`;W|i4<GNB97)HRaXW>gO8Ug3o~TrZ*H|#
z;5NS^OM9!@t0X|7Xyc25&PtG^bH;wJ?~}LTeOA$Q4;o_A$y>W|<wYMW9};nrbAQ}d
z1zRS%pqwV}%PV}5*2&@>WnzX8_(-B*w{8+N+L#=3f!L0E=iO;n#5&Eqb0k{jqN9~8
zsSH3JpkRTwjBOalpsq%WwK!W?{w(Q);TYOcyY6*U__JP?=3h5iibEVHYX~C4f3wpa
z&#!-4lGnywAa#g;ZX`?&{{Wf@hJVryIXL&v;arUs38g05)37PR_vO&)C-DxmHRMJ0
zm>t}(E@F%*A1UXK_yeCxmRq~PbN>Jd1&~<w%an>RODQq|fH?t}oOeCCS0zPfQ8`NS
zc19IrDa!DCtG53Dnb+EDnzXan>7VeB+resL!pdWe2tZOmCmbF+=Q%a8H-Gkl+jRal
z(i&Kl#;OD)g(V5V>GzdS(RlQ)IHIA#Z)tuAiBqWUY5oZ7EVV0*LP;!T)}y!FuI((*
zLL+aJZrt@5P!}2KI#$=)wL6B2FZfJs1|(8TM{a=#kz`Yx@&j^l=s?^n&S<R?vAcI?
zqzkQ0B3+(0(*h)(Ud^!p0e|m~;157>cpP(9R&8=?ICTr37TLvXa$>}iTEm~1FHm^g
zz4_y5^sg?bG>*y@ornMc3Ftq`G{kq-I*t9^wV9j6))6#P7*aED7GPbYoVMQh85tP>
zf_q1#&8+_bWQ)e}9-m@7;TlHb0#3-|T&eb5fPwwq=Yzr0?mI%{;C~!}Kpl69^{ql1
zx3_(64Nc16&jfK8*$7}pK=(X*=BwX$w_iwJ5vr_^%&d$O7=}SrEI1$SW3OuFD5<l)
z<GQxS=<$xc5TL)nC5}WfgO)pwJ90Va^7N@c;W+Uh&7DU(j!x)fKAx-WKPu;_su9qC
z!foOYIVJmYd58#BHd@hS0sue5=m+E}jpHqSk(BBOYcA3RNIPRA<>2GLUI(RNQ9u{9
zU1I+LTfO^cqi|=RXkFz(@$>)==BUv{02EP002EP00Du4401^NS2{>i)JT?#z&}lNN
zvxFEJ0e{KR1s*unJv(4XN9&XMr4;0P`+2`);X2XhOEnxOkfne|`gfE$L8iRZi8Nf|
zV^Cp*s!W?nUn_<jN2w){S?}j3BGLYI5=!$%X`3&Bt4(o<+Z!5xiu$L;vzv<BXIMF;
z9i{J<2V)_8;6~+9demzyPZ+-sFP`J&b*uV|Nq@)Ap{U7WIgy^&YWmxqoV>jik(PsV
z?t{W60cSm)uC}eGS2sxe^niD$Tl&}mn0Me9X!S&d3+gYZzd8?5)Ych>R#gN1bZK06
zr{g{O`~$rdG0Pa639jApZ|zJ8uGV;GtUia3k<f?W`TV1eIS2S5!XqS^768Zj`*2Nx
z$A4zn8KZkCb-JEhqiONvjG<;hK1?U>3O>m@y8HZ?&$~}%G!SK}KbKY4d{4eA{EW${
z?WWv(J7$iO&Jw1?lP_x5&uxXziX#uN8|=<zf-xUjbZH#ZKSR^66StEFg$Ta__7|I5
z^uL88(!IJPv-LCCh#fb3*l^pqq8Ed!W`Cyj8!m6dcng;}KflC`VI!`@87%m%sl7c;
zHBee4V20P84G^@P+Z!+AKX%Qd?19-v8ZXoDXig)zrMHkVOmSdRNXf59oDK^B9P$FP
z8SZ;5%`gsGn7m#aa4ORvQ@R2`2QhC*<~oM*{w~%1<p&HuRHxf2>$^Rk_}|CVV1J7A
z=(&5j2H>&MaRUL-CzPnezLQ&4#c2^2!9)IDOM7sWZ9Aztn1l};_yzA*<JL!o1t&x}
zgga(~j1!I|3H$3Ozl>#?faoDY$&`zP%~YNItbX$8>_9}HC~>pW-MHiPb`S21eH0N`
zc1&<0D(1|ZkCWMMA3S}i9}K{u6n_dFk|hkLZS~$`)8_6lPQ?CZ&FpOzFfA;P@7N#&
zer6!i1I3O-Y$(7qbg^TB@&s6n#Q6L~58Drv4k%KA%v=1Ed{{9A9EZ--zA(Hr=>E}e
zoUa*N32?W~_%+=SXpv2~UD1DAYEe06Y><ar0iGiypM{iGooX&yusdnOK7Zr5>AScy
z+S5Gr3Ec^iWp=^K>-99P6cin9j#^MOoH!f{wX}~InOJiaz_g-myaP*r$l5a0h)V^(
zpA)@l2xyo%jt$hT;<KlfUl<Aw-VH}1=YM`{0DN1Du<WV<ita7-Mj8c=bkM^KRkH@*
z`HmZHwtVahrr)Z~r~y#HDu1XIe`$^8V;K{|f@kmk@Ps))znCg_YVQe(g`WTbWqLF9
zi+|@B9JgvvaaRuCs8NltXM-KX(8-(jZjxF(-3&z)o#5ow<6H8%h8JAQV_d!iuFIqF
z_ZE#m3pRVXZ0*!*$2)9SRYXsci;N8crjezU8dI5l4+2l)Ubx8~#((bGNR)gaJB5U?
zB&AIQQ<+dpyB@0xt5wGF;sgQ!T66qsPN|Xiz4|*}8uf+v!CU+lm{kFmJg+rcs1EM3
z_w`kvF^5YXD@A!tb}P8!kN5iJ2VGS2l3r5wpA)>FUxfv<Ef<vND8LrrX3)SZMdNiz
z5wL$98WCe9g~%;%hJT9B)trOGt{AonTl1-oCBV^!5j7nS!Kr?cC0&jnvbd3;zHx=<
z9ATQPdXG9iiI5Zx6Jc|dj=0r5U_ioIpSYjp*W=Sw(V}e-dGqt;c{dt3bAF-3TY1w(
zu#OR{j-jz$Psoy`Vh~e+C$@;XOg;qyE;hv}xVxodg?^@5r+;eWf|^0I{l7MDy$~$v
zxUosAri7?w$s}`A6T!LW0pDIKXBNf@J=^1}2^Xn4itm*iCb#k3HhP7J>#8>OV&FjM
z)=Nwle{n`fvezGeiKbCH$l8^z?-3hy*VYj9cxX!tUJc`xmUdBJv}0x8XRj|SAmQ}F
z*;Ga=H2JjB`G3BB%P-0vj?(1CYfNgG@-dp@7Pm7>#n#zW>~|LmezsC}lW`xAke#l1
zWnMci63f{g?Nu2p8@T90on_}iJ0MX=nTv-%ME-gp9Vxjrax7<e@l)x>R_$xF8ZVBu
zij*r=4P|zBuPr#+&r!#iD}HGGmGaFv#MzwxT)1GNmwzgMkD4{nH^kQ2WYoXi)FU)Z
zwQ|A0L#DA3xN!F?0id09FC}nDssIw23m+yN1Oj7IV+OT!iQx$kmX?gvsE40jV(gQ-
z%u#*1lI)!{^cbgdI0qT?WNdN?&!x1jU(&PHp62hDPsfG|<LZ1{QvGxzhnIj8Pe?Oz
zM)60Coquj{){(JnC!0wPU)Fj&$x^`Ur=5bpn&L@|csKPg&NFRPY@50uXa}6P!={s{
zZG9<Q*=nc&c&6~SkwvS?bKrhS{lm}`he@`Lh%NR-&U5y}cxi^@R&W+9o3fzV+nO|x
z{^qeg7;LFq#d5SmC|Q}S|Lo)D^@D)pU2m4^Xn(o~Z59f;F~!o)$XLlFh<xr&Ij)x-
z-QRc38<}re-$4539~@Uuwto%tSxw7=uL*cv9$HCB@K_3sSz$SJuZp5ibc@*EVdI#w
zh^xY{nA2q~Iv*hx=HK`X#Ox}3V>E|CTR2~<w1)XRO`IQB`2w9^r+L5^D*kkWu+r0F
zrhg?No*!(~>jglX+yN20SxLRXT-Ni*2aA4WD~JwzElU+(Er#upxv`TX`(i?a!zYS0
zGn6oKwrJ=z*y^{_|C4DLV3h@5GqUL;>MZn1d`Y`){raRqI{5aRcXgP;#`h{OH`rpo
z&$$M`W4;Mz^P-BFx`Yu^ozsnmvONChMSq{ZAML+wjN@M5%vSi+dZs@&7-$qahp6we
zYV?J^nKKZ7&I(Q#hrN0{miu3sE21~ECQ_7Km3Tja#%9r3^>oE)?3^$As?<G6`xFY4
z<{I9Pnc-5FN!b67<%H{3OuTRZSHEkhs~wVj?6Nm>TxFl4^N`x?fCixD$IxpnS%0z@
z)L^+YT>^g@{?w~J5<JQGy;Zk5+qG+bx{1Ge-++OelLNpF`<-X0tKqCQ3x?@C;o+GL
z%RZqz*G5uu`dVp@>#0@c`?n%-{r-;++IM|&mQqjo4g$o~_V>~JpRwqB`YJ9yQA3yt
zQ?~!WC+VXPoyWIA^`mlgp@#k2r+@ykVh{r!!Kyx8W~oD!Wz7BU*UUfMAVz9uGf=Wn
z?$FyB%zVh8O~iTWGR7x&mKN5L*5_jB^P9?DJ876RZdF@G7$tW_e#J%Jlm|Q>1lS$c
zAdw1~uHRaQN?*5$h%@;!4TIh%s+dl`Gr+p##xv4bn;l1oNHjSfyXc+0)PFZ=?4>ee
zZ|H^dVMW=YybRdcPsaO<ZRFt~R02DDX-sri2S&&jjX%%7#ita2s0Sk7FO=W&RXzmy
zKg6B8pk$f8>m!;LTO}CIIEmE%0MQVx7Rd_ZC0Rcf@+LE1$$PX@x>K_X)=czlCWa&{
z<K)F@qf<qQVhEc@rH}JQI)9#C1Na#jhC_^}0Y<xoO_N{QOQV5oSczmVVigUkK(pKL
zfXB^QQ-kbnJhK?!Eg^Uua7N`?hs}JBnsp)Cewai$uYkhw|13n$#om91217(Di<{U;
zf`(rJ&CB&;_Y8b9XjoKw-)b-fE!mON{AR1$ajv`xr&#Q`^1qz%?SG(=8reU7`cQY%
z{y9PRT|lKe?F{%PYcM+c@xUF4ma+S!y91{CY;kfq2$Cz1vq+4aO1Uym3n4d{L$0Fw
zlxQfQYGgcpv@n0^-pJw>Tk5^BvChnyh`+rs)xuW>NeTxA3s-anl``t~Q6-0GO74H-
zydBs|@G+(PkN3%-D}T}FkW%9}Td6X#3_A3q#p|E}Z7~L5Cf0aZu$QKVdjHiAaO`HT
z=wR-A_unft(GR5^08-5yNEmHv`s&v*Xpddn3E{YNBQU(C(YsJ?G1m9EfuA}JZ7vKo
zO|er292@1Je!~Br%tqk%!@RVz+Nn#8bYz((@3_}IZ*Mwo(|?8^ZLU`kG0$T=)7g0K
z{Zkv6{c*+@J$xY5@E%73<}Rw6^W8Zf*+*Vh=GfUHB;WAS3uJNL)UIp@3ak}}CBE**
ziLVtXX$Z1i#0)CRYix2;n?clppov?gpcU0oySJz$E8(qY;mFYAE07^Q=*egq?Owd#
z)Q8h>n!Ibs4u8yHX;phQ*?itL24^A%L|mLpMgKuja#?nBc<x1o*Z6L$Papd5^`a;f
zmvDcU4>ENF9y~LRIp0b}n>6$K!NP}%*A=x{C4%grukBP1!q=UZe+GYUWt8HsX`+gs
zq{wSuVfF6>dcH=((Un6mAaYejmOD$_78<y6WtBETV1I5m0`F6wW^Z8VJ>FC~^MPpk
zz_SwPy(TtNCi9P;;&_YyO80S|EC3&(PdW0ZF8*mtKw{<R;wYvP<CrOcG%RV}R_V1U
zyP@uG7DwX8uI*)%ds%>sAP1UE->1#qB>b7m1pG)zTtQp1FiC8NhyD*1JeLviq+VXb
z1lwL(pnvg(BmZq)aQQscT-%Lac&6E=y=msgq%<<XA3S!Sr-~N9H%c}7+-#9UGj{Nh
zbeB!}PqB`DMbYIqa5}|jSn*Tciwo6{11w34Kq~dH8vHdN`!HMxb8ajHHY|g!S3wV0
zq_^)sm5foA!?Y8P4?Q+JBP$`RS#1GT0>!>(Vt<=6mQ7B>PO44k@h*Lm!oCIF_RLP+
zgtHPrD;WzfGkusy@mTV7ITz#uay3Fb9_LNqGDmKMD)em<ZsE$B8SKS_^1kXSFTCwx
zNB6~-JI4BR|M=o@mi7Eb|8yWm*eJG<i#?WUr@6~D(6ioe(jMxel33*ZNdcRKS6gW2
z{eKCP4McXbO(v6X`a<3tMLuY5<1|g&>{Z82X1B58E-nz?ZlQGue9c*P55Bf~rmqFo
z&(A@tz`UAZ?a&^w_~BF>3Cp4%Cmh(Mfiv&BGO-R7$f6>lIZr3|B+FMqoiFGs!;1TS
z7dxdgoezWp=lgS3pVtKY#9asSyK<x17Jre4hP^}Ka~ZcopTRv$HokmHqiUXv87u+l
z!zxu1`{cfi<hwkah(e0V3@VU{i-v%`JsZnl^~?6|RuteKHT&xHt?EBA8|rHk%tp7!
zT}nCKkmCzHh{0xc6MGC^88*J_iY2;Ai9yCl&i@i)el!$^r$7tHLypMk8BV}d>wm#e
z_u@KS?mOz!Z9O{M>W#>=y6G;~()x1@`00pC=qu{nvhp%h5`Bd8NyRHP3tPm-z~2Ad
z3k^(Su!Tug91Gh`HRQm&QrR8+k~KRFDehL%%QEAP(k{!N1~h({`IwSl6{Iv_+e3kd
zV!fMOX9BYlH)bF{{YkEGv&cb+Sbv+*7@=!zNwn0GUb}AQ7vtu(=^8PZ;{9H_>jRdP
zDjK)WX>54hq}-Zs%U^VAwT*ujPkPE2y=@?1l|mVtTzlR%EU>ciHpTJ|%&*^<&%J7P
zcpf%&;`c!-)NodCKzX4~Pk#Ca?sm^`GQU*T4u~PzP{c$^HHHVS^m28il7F@zg8I+C
znvdo_j6=MO=Dv&R0gMSQVdYqASbrw8TnvA>v4BN*Om_Urr!9V;CT&g0R1yZN-L@ib
z-{9xsWk(*&#|wH#F7g%X0RpzR!e6=niqLLbKt7oq=l9E2(q?0w7J$`*DXnyqhjTPq
zO_XA13tRbCgl^p^i+{p#sDFa$4y#2Z(4XwFd)ClH|JamL%*f$;wsB$apS|bI&Mib8
zC7H^9pNRWx7LbmNlw8L@>cNYb6_pz>Z2I00a;mAqRHzW!zPyrJUcE2e@bb5Vwl{=0
z*}x#FscnX?K%6g+-<K4h5}=1nVIx8!7Sgi7vE4igH~B(h0OUmjbbsr}fpaeoxFa(s
zp`q2yC$>BqI|i@2PXF{ZY(1bk!eTkEKHY6`4~yHsrKDej7#5hdC<s8*Ca-4INvQmj
zHsEs20E)e<kml&<JpLZaToNhzgkq}^+QuNg4#%_-HU4upaHE8fcyb6*%B*Zxi+?3j
z(|7?w>b*@HXW*XU(|@94fq24m{eFB1f?BjE^CMl@fc7`%VLC`cDU9-#U&6F1W7hg0
z+?6s3-4=r}OOgdhr&BLZNo-vO0lZpeJ4B^Ta9SgXu7(-)kfV^5|I&U_RgxP7ogo`W
zFjC4dDv$Hg&6FvS>+>kHD8$vNLKRD;bE!=aJ4kS{KUd(`X@47~J4i`heO1`)5*0)9
zRB0ritvCxvo_CVF_VpFL_svIS*x<lXl1Y-#ba+GC_tnL+asZ1#gx+$_m!JIx-6s7=
zFnWTa*GhH$940FPG|7_pxq&olSi-t7vY!(d`+LLch_4~Lv1LwstcO2b!PK}T_y_5X
zYk4%5;|Y?D_kW#MClf?v=zDO|vY{A;hC=np=@La#<xQmO2THT3u|5u%Px>rs;Xxg6
zAexB&5I_->d+E!rW(h4m-;>PA7;88WIrYP;tJbO(Q`4T1ZU)CCr=_E95G03;r6`H6
zH}49}_PtMk`bwPi?U|L>5A}?m69ecH5wkK-%6H7U_J8MQF^$9i<e0VV$?=f*fQ55i
zoazIq`|S_m5K5_CtoZJ@t+YC|*)lfW=ym+YJy`i4N4AAB$n;U_tB9U<ywutJRz=8Y
zysXa`eFw%UqPG8{_8tRwYF@%cLmWU2y&s?l#3fJxB=RLT@snR9vW)YW2SjU$oSK@w
zIcExVuzwToFuh9?_S%60yF0K?JRdtqoUOX-dl-UE$4Tvv^X=kSMBgtD4PO%gx%wOd
z6)pTIkRE=WITWl1Lkc|PVu;|RVOSV5!Ku^I-t!92IdR0p?zsqY6X5w*_%M~LJk$yI
z3B$DMn9h$H<C(WcWdN?^a$}`+fmDDqZ>v_il7G-XXaB3rb_u+`KP~QrhYJBBNb9=h
zKC-#mKz%O1&hQBX#!0HC-D=p{&T4<#$H2h|tGx_8Q(E$3JGH!=T8(mnmZ4)_t^se6
zLe?`Er7KS+T%{+FE_c*#*2)FD&*JMB<Q&WLy4ufKp0pL|c%_;lrf1&cLK~)lM5@7<
z!GD17|7H$PR2Lbt;bq$%O<3YNyYD?m<GwsS-U!A*gX3@T3-4^qJ8@klWz!vFaPi_N
z-f2Uzyc(k})wR9Y7@&I?kdcMPUvknJ(iEN3j2{C!34)Ee#~0K7TNO92ATl8R?4%rW
ze<ECg;P@`=XLNUoxdvD6jx~_o^;^|Ch=1s?7!VJnnfSzUEjT^T^+ptM55Z&OtLc4r
z>Ai6X-qK!oFOAa<W+-WF*~tsxit|C5LjAW@KkHTLsb9haFip<XlYd^&^Wnu{=!a;o
z2z53+U_@b-`xz;#yD^EQG{8+S4V7q>S6sg~x!ekdVuZl%%cW@3c}P?RXd;Vl`#x<~
zRMo&i8TW;_I63T1c6U%XJLmVyIPD7Ilehh_0W>WNvv0U`vI^UL%>YXyk`pF^jDPKE
LW+fw9Oi7tgtG9@|

diff --git a/README.md b/README.md
index b6e529d7..1ad5aca0 100644
--- a/README.md
+++ b/README.md
@@ -69,7 +69,7 @@ download the certificates. If you intend to download the scripts from a
 different location (for example from github.com) install the corresponding
 certificate chain.
 
-    /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/E1.pem" dst-path="letsencrypt-E1.pem";
+    /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/E5.pem" dst-path="letsencrypt-E5.pem";
 
 ![screenshot: download certs](README.d/01-download-certs.avif)
 
@@ -78,11 +78,11 @@ want to be safe download with your workstations's browser and transfer the
 files to your MikroTik device.
 
 * [ISRG Root X2](https://letsencrypt.org/certs/isrg-root-x2.pem)
-* Let's Encrypt [E1](https://letsencrypt.org/certs/lets-encrypt-e1.pem)
+* Let's Encrypt [E5](https://letsencrypt.org/certs/2024/e5.pem)
 
 Then we import the certificates.
 
-    /certificate/import file-name=letsencrypt-E1.pem passphrase="";
+    /certificate/import file-name=letsencrypt-E5.pem passphrase="";
 
 Do not worry that the command is not shown - that happens because it contains
 a sensitive property, the passphrase.
@@ -90,13 +90,13 @@ a sensitive property, the passphrase.
 ![screenshot: import certs](README.d/02-import-certs.avif)
 
 For basic verification we rename the certificates and print them by
-fingerprint. Make sure exactly these two certificates ("*E1*" and
+fingerprint. Make sure exactly these two certificates ("*E5*" and
 "*ISRG-Root-X2*") are shown. Also remove the left over file.
 
-    /certificate/set name="E1" [ find where common-name="E1" ];
+    /certificate/set name="E5" [ find where common-name="E5" ];
     /certificate/set name="ISRG-Root-X2" [ find where common-name="ISRG Root X2" ];
-    /certificate/print proplist=name,fingerprint where fingerprint="46494e30379059df18be52124305e606fc59070e5b21076ce113954b60517cda" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
-    /file/remove [ find where name="letsencrypt-E1.pem" ];
+    /certificate/print proplist=name,fingerprint where fingerprint="e788d14b0436b5120bbee3f15c15badf08c1407fe72568a4f16f9151c380e1e3" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
+    /file/remove [ find where name="letsencrypt-E5.pem" ];
 
 ![screenshot: check certs](README.d/03-check-certs.avif)
 
diff --git a/certs/E5.pem b/certs/E5.pem
new file mode 100644
index 00000000..3f9e9157
--- /dev/null
+++ b/certs/E5.pem
@@ -0,0 +1,119 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            18:6e:75:d4:ee:b0:a0:5d:fd:2d:a8:20:86:5d:1e:31
+        Signature Algorithm: ecdsa-with-SHA384
+        Issuer: C=US, O=Internet Security Research Group, CN=ISRG Root X2
+        Validity
+            Not Before: Mar 13 00:00:00 2024 GMT
+            Not After : Mar 12 23:59:59 2027 GMT
+        Subject: C=US, O=Let's Encrypt, CN=E5
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:0d:0b:3a:8a:6b:61:8e:b6:ef:dc:5f:58:e7:c6:
+                    42:45:54:ab:63:f6:66:61:48:0a:2e:59:75:b4:81:
+                    02:37:50:b7:3f:16:79:dc:98:ec:a1:28:97:72:20:
+                    1c:2c:cf:d5:7c:52:20:4e:54:78:5b:84:14:6b:c0:
+                    90:ae:85:ec:c0:51:41:3c:5a:87:7f:06:4d:d4:fe:
+                    60:d1:fa:6c:2d:e1:7d:95:10:88:a2:08:54:0f:99:
+                    1a:4c:e6:ea:0a:ac:d8
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Key Usage: critical
+                Digital Signature, Certificate Sign, CRL Sign
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication, TLS Web Server Authentication
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Subject Key Identifier: 
+                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
+            X509v3 Authority Key Identifier: 
+                7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
+            Authority Information Access: 
+                CA Issuers - URI:http://x2.i.lencr.org/
+            X509v3 Certificate Policies: 
+                Policy: 2.23.140.1.2.1
+            X509v3 CRL Distribution Points: 
+                Full Name:
+                  URI:http://x2.c.lencr.org/
+    Signature Algorithm: ecdsa-with-SHA384
+    Signature Value:
+        30:64:02:30:1b:6d:2e:45:41:1c:45:3e:d9:5f:34:18:74:67:
+        13:79:ba:ab:29:b5:b6:10:4e:83:27:4a:8b:45:4e:c7:7b:cf:
+        f4:40:30:1d:61:a5:e6:1c:6d:a4:90:09:92:6e:46:4b:02:30:
+        46:29:18:84:34:7a:bc:fb:de:d8:1b:d8:19:a7:04:f5:cb:7e:
+        e7:6d:84:d9:da:8e:ea:ce:36:30:b9:a2:80:4c:2c:e6:60:12:
+        4b:a9:76:aa:e8:6d:95:47:da:72:09:0c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            41:d2:9d:d1:72:ea:ee:a7:80:c1:2c:6c:e9:2f:87:52
+        Signature Algorithm: ecdsa-with-SHA384
+        Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X2
+        Validity
+            Not Before: Sep  4 00:00:00 2020 GMT
+            Not After : Sep 17 16:00:00 2040 GMT
+        Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X2
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:cd:9b:d5:9f:80:83:0a:ec:09:4a:f3:16:4a:3e:
+                    5c:cf:77:ac:de:67:05:0d:1d:07:b6:dc:16:fb:5a:
+                    8b:14:db:e2:71:60:c4:ba:45:95:11:89:8e:ea:06:
+                    df:f7:2a:16:1c:a4:b9:c5:c5:32:e0:03:e0:1e:82:
+                    18:38:8b:d7:45:d8:0a:6a:6e:e6:00:77:fb:02:51:
+                    7d:22:d8:0a:6e:9a:5b:77:df:f0:fa:41:ec:39:dc:
+                    75:ca:68:07:0c:1f:ea
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
+    Signature Algorithm: ecdsa-with-SHA384
+         30:65:02:30:7b:79:4e:46:50:84:c2:44:87:46:1b:45:70:ff:
+         58:99:de:f4:fd:a4:d2:55:a6:20:2d:74:d6:34:bc:41:a3:50:
+         5f:01:27:56:b4:be:27:75:06:af:12:2e:75:98:8d:fc:02:31:
+         00:8b:f5:77:6c:d4:c8:65:aa:e0:0b:2c:ee:14:9d:27:37:a4:
+         f9:53:a5:51:e4:29:83:d7:f8:90:31:5b:42:9f:0a:f5:fe:ae:
+         00:68:e7:8c:49:0f:b6:6f:5b:5b:15:f2:e7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/certs/R10.pem b/certs/R10.pem
new file mode 100644
index 00000000..e8c1c4a3
--- /dev/null
+++ b/certs/R10.pem
@@ -0,0 +1,231 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            4b:a8:52:93:f7:9a:2f:a2:73:06:4b:a8:04:8d:75:d0
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, O=Internet Security Research Group, CN=ISRG Root X1
+        Validity
+            Not Before: Mar 13 00:00:00 2024 GMT
+            Not After : Mar 12 23:59:59 2027 GMT
+        Subject: C=US, O=Let's Encrypt, CN=R10
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cf:57:e5:e6:c4:54:12:ed:b4:47:fe:c9:27:58:
+                    76:46:50:28:8c:1d:3e:88:df:05:9d:d5:b5:18:29:
+                    bd:dd:b5:5a:bf:fa:f6:ce:a3:be:af:00:21:4b:62:
+                    5a:5a:3c:01:2f:c5:58:03:f6:89:ff:8e:11:43:eb:
+                    c1:b5:e0:14:07:96:8f:6f:1f:d7:e7:ba:81:39:09:
+                    75:65:b7:c2:af:18:5b:37:26:28:e7:a3:f4:07:2b:
+                    6d:1a:ff:ab:58:bc:95:ae:40:ff:e9:cb:57:c4:b5:
+                    5b:7f:78:0d:18:61:bc:17:e7:54:c6:bb:49:91:cd:
+                    6e:18:d1:80:85:ee:a6:65:36:bc:74:ea:bc:50:4c:
+                    ea:fc:21:f3:38:16:93:94:ba:b0:d3:6b:38:06:cd:
+                    16:12:7a:ca:52:75:c8:ad:76:b2:c2:9c:5d:98:45:
+                    5c:6f:61:7b:c6:2d:ee:3c:13:52:86:01:d9:57:e6:
+                    38:1c:df:8d:b5:1f:92:91:9a:e7:4a:1c:cc:45:a8:
+                    72:55:f0:b0:e6:a3:07:ec:fd:a7:1b:66:9e:3f:48:
+                    8b:71:84:71:58:c9:3a:fa:ef:5e:f2:5b:44:2b:3c:
+                    74:e7:8f:b2:47:c1:07:6a:cd:9a:b7:0d:96:f7:12:
+                    81:26:51:54:0a:ec:61:f6:f7:f5:e2:f2:8a:c8:95:
+                    0d:8d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Key Usage: critical
+                Digital Signature, Certificate Sign, CRL Sign
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication, TLS Web Server Authentication
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Subject Key Identifier: 
+                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
+            X509v3 Authority Key Identifier: 
+                79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
+            Authority Information Access: 
+                CA Issuers - URI:http://x1.i.lencr.org/
+            X509v3 Certificate Policies: 
+                Policy: 2.23.140.1.2.1
+            X509v3 CRL Distribution Points: 
+                Full Name:
+                  URI:http://x1.c.lencr.org/
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        92:b1:e7:41:37:eb:79:9d:81:e6:cd:e2:25:e1:3a:20:e9:90:
+        44:95:a3:81:5c:cf:c3:5d:fd:bd:a0:70:d5:b1:96:28:22:0b:
+        d2:f2:28:cf:0c:e7:d4:e6:43:8c:24:22:1d:c1:42:92:d1:09:
+        af:9f:4b:f4:c8:70:4f:20:16:b1:5a:dd:01:f6:1f:f8:1f:61:
+        6b:14:27:b0:72:8d:63:ae:ee:e2:ce:4b:cf:37:dd:bb:a3:d4:
+        cd:e7:ad:50:ad:bd:bf:e3:ec:3e:62:36:70:99:31:a7:e8:8d:
+        dd:ea:62:e2:12:ae:f5:9c:d4:3d:2c:0c:aa:d0:9c:79:be:ea:
+        3d:5c:44:6e:96:31:63:5a:7d:d6:7e:4f:24:a0:4b:05:7f:5e:
+        6f:d2:d4:ea:5f:33:4b:13:d6:57:b6:ca:de:51:b8:5d:a3:09:
+        82:74:fd:c7:78:9e:b3:b9:ac:16:da:4a:2b:96:c3:b6:8b:62:
+        8f:f9:74:19:a2:9e:03:de:e9:6f:9b:b0:0f:d2:a0:5a:f6:85:
+        5c:c2:04:b7:c8:d5:4e:32:c4:bf:04:5d:bc:29:f6:f7:81:8f:
+        0c:5d:3c:53:c9:40:90:8b:fb:b6:08:65:b9:a4:21:d5:09:e5:
+        13:84:84:37:82:ce:10:28:fc:76:c2:06:25:7a:46:52:4d:da:
+        53:72:a4:27:3f:62:70:ac:be:69:48:00:fb:67:0f:db:5b:a1:
+        e8:d7:03:21:2d:d7:c9:f6:99:42:39:83:43:df:77:0a:12:08:
+        f1:25:d6:ba:94:19:54:18:88:a5:c5:8e:e1:1a:99:93:79:6b:
+        ec:1c:f9:31:40:b0:cc:32:00:df:9f:5e:e7:b4:92:ab:90:82:
+        91:8d:0d:e0:1e:95:ba:59:3b:2e:4b:5f:c2:b7:46:35:52:39:
+        06:c0:bd:aa:ac:52:c1:22:a0:44:97:99:f7:0c:a0:21:a7:a1:
+        6c:71:47:16:17:01:68:c0:ca:a6:26:65:04:7c:b3:ae:c9:e7:
+        94:55:c2:6f:9b:3c:1c:a9:f9:2e:c5:20:1a:f0:76:e0:be:ec:
+        18:d6:4f:d8:25:fb:76:11:e8:bf:e6:21:0f:e8:e8:cc:b5:b6:
+        a7:d5:b8:f7:9f:41:cf:61:22:46:6a:83:b6:68:97:2e:7c:ea:
+        4e:95:db:23:eb:2e:c8:2b:28:84:a4:60:e9:49:f4:44:2e:3b:
+        f9:ca:62:57:01:e2:5d:90:16:f9:c9:fc:7a:23:48:8e:a6:d5:
+        81:72:f1:28:fa:5d:ce:fb:ed:4e:73:8f:94:2e:d2:41:94:98:
+        99:db:a7:af:70:5f:f5:be:fb:02:20:bf:66:27:6c:b4:ad:fa:
+        75:12:0b:2b:3e:ce:03:9e
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            82:10:cf:b0:d2:40:e3:59:44:63:e0:bb:63:82:8b:00
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X1
+        Validity
+            Not Before: Jun  4 11:04:38 2015 GMT
+            Not After : Jun  4 11:04:38 2035 GMT
+        Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (4096 bit)
+                Modulus:
+                    00:ad:e8:24:73:f4:14:37:f3:9b:9e:2b:57:28:1c:
+                    87:be:dc:b7:df:38:90:8c:6e:3c:e6:57:a0:78:f7:
+                    75:c2:a2:fe:f5:6a:6e:f6:00:4f:28:db:de:68:86:
+                    6c:44:93:b6:b1:63:fd:14:12:6b:bf:1f:d2:ea:31:
+                    9b:21:7e:d1:33:3c:ba:48:f5:dd:79:df:b3:b8:ff:
+                    12:f1:21:9a:4b:c1:8a:86:71:69:4a:66:66:6c:8f:
+                    7e:3c:70:bf:ad:29:22:06:f3:e4:c0:e6:80:ae:e2:
+                    4b:8f:b7:99:7e:94:03:9f:d3:47:97:7c:99:48:23:
+                    53:e8:38:ae:4f:0a:6f:83:2e:d1:49:57:8c:80:74:
+                    b6:da:2f:d0:38:8d:7b:03:70:21:1b:75:f2:30:3c:
+                    fa:8f:ae:dd:da:63:ab:eb:16:4f:c2:8e:11:4b:7e:
+                    cf:0b:e8:ff:b5:77:2e:f4:b2:7b:4a:e0:4c:12:25:
+                    0c:70:8d:03:29:a0:e1:53:24:ec:13:d9:ee:19:bf:
+                    10:b3:4a:8c:3f:89:a3:61:51:de:ac:87:07:94:f4:
+                    63:71:ec:2e:e2:6f:5b:98:81:e1:89:5c:34:79:6c:
+                    76:ef:3b:90:62:79:e6:db:a4:9a:2f:26:c5:d0:10:
+                    e1:0e:de:d9:10:8e:16:fb:b7:f7:a8:f7:c7:e5:02:
+                    07:98:8f:36:08:95:e7:e2:37:96:0d:36:75:9e:fb:
+                    0e:72:b1:1d:9b:bc:03:f9:49:05:d8:81:dd:05:b4:
+                    2a:d6:41:e9:ac:01:76:95:0a:0f:d8:df:d5:bd:12:
+                    1f:35:2f:28:17:6c:d2:98:c1:a8:09:64:77:6e:47:
+                    37:ba:ce:ac:59:5e:68:9d:7f:72:d6:89:c5:06:41:
+                    29:3e:59:3e:dd:26:f5:24:c9:11:a7:5a:a3:4c:40:
+                    1f:46:a1:99:b5:a7:3a:51:6e:86:3b:9e:7d:72:a7:
+                    12:05:78:59:ed:3e:51:78:15:0b:03:8f:8d:d0:2f:
+                    05:b2:3e:7b:4a:1c:4b:73:05:12:fc:c6:ea:e0:50:
+                    13:7c:43:93:74:b3:ca:74:e7:8e:1f:01:08:d0:30:
+                    d4:5b:71:36:b4:07:ba:c1:30:30:5c:48:b7:82:3b:
+                    98:a6:7d:60:8a:a2:a3:29:82:cc:ba:bd:83:04:1b:
+                    a2:83:03:41:a1:d6:05:f1:1b:c2:b6:f0:a8:7c:86:
+                    3b:46:a8:48:2a:88:dc:76:9a:76:bf:1f:6a:a5:3d:
+                    19:8f:eb:38:f3:64:de:c8:2b:0d:0a:28:ff:f7:db:
+                    e2:15:42:d4:22:d0:27:5d:e1:79:fe:18:e7:70:88:
+                    ad:4e:e6:d9:8b:3a:c6:dd:27:51:6e:ff:bc:64:f5:
+                    33:43:4f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
+    Signature Algorithm: sha256WithRSAEncryption
+         55:1f:58:a9:bc:b2:a8:50:d0:0c:b1:d8:1a:69:20:27:29:08:
+         ac:61:75:5c:8a:6e:f8:82:e5:69:2f:d5:f6:56:4b:b9:b8:73:
+         10:59:d3:21:97:7e:e7:4c:71:fb:b2:d2:60:ad:39:a8:0b:ea:
+         17:21:56:85:f1:50:0e:59:eb:ce:e0:59:e9:ba:c9:15:ef:86:
+         9d:8f:84:80:f6:e4:e9:91:90:dc:17:9b:62:1b:45:f0:66:95:
+         d2:7c:6f:c2:ea:3b:ef:1f:cf:cb:d6:ae:27:f1:a9:b0:c8:ae:
+         fd:7d:7e:9a:fa:22:04:eb:ff:d9:7f:ea:91:2b:22:b1:17:0e:
+         8f:f2:8a:34:5b:58:d8:fc:01:c9:54:b9:b8:26:cc:8a:88:33:
+         89:4c:2d:84:3c:82:df:ee:96:57:05:ba:2c:bb:f7:c4:b7:c7:
+         4e:3b:82:be:31:c8:22:73:73:92:d1:c2:80:a4:39:39:10:33:
+         23:82:4c:3c:9f:86:b2:55:98:1d:be:29:86:8c:22:9b:9e:e2:
+         6b:3b:57:3a:82:70:4d:dc:09:c7:89:cb:0a:07:4d:6c:e8:5d:
+         8e:c9:ef:ce:ab:c7:bb:b5:2b:4e:45:d6:4a:d0:26:cc:e5:72:
+         ca:08:6a:a5:95:e3:15:a1:f7:a4:ed:c9:2c:5f:a5:fb:ff:ac:
+         28:02:2e:be:d7:7b:bb:e3:71:7b:90:16:d3:07:5e:46:53:7c:
+         37:07:42:8c:d3:c4:96:9c:d5:99:b5:2a:e0:95:1a:80:48:ae:
+         4c:39:07:ce:cc:47:a4:52:95:2b:ba:b8:fb:ad:d2:33:53:7d:
+         e5:1d:4d:6d:d5:a1:b1:c7:42:6f:e6:40:27:35:5c:a3:28:b7:
+         07:8d:e7:8d:33:90:e7:23:9f:fb:50:9c:79:6c:46:d5:b4:15:
+         b3:96:6e:7e:9b:0c:96:3a:b8:52:2d:3f:d6:5b:e1:fb:08:c2:
+         84:fe:24:a8:a3:89:da:ac:6a:e1:18:2a:b1:a8:43:61:5b:d3:
+         1f:dc:3b:8d:76:f2:2d:e8:8d:75:df:17:33:6c:3d:53:fb:7b:
+         cb:41:5f:ff:dc:a2:d0:61:38:e1:96:b8:ac:5d:8b:37:d7:75:
+         d5:33:c0:99:11:ae:9d:41:c1:72:75:84:be:02:41:42:5f:67:
+         24:48:94:d1:9b:27:be:07:3f:b9:b8:4f:81:74:51:e1:7a:b7:
+         ed:9d:23:e2:be:e0:d5:28:04:13:3c:31:03:9e:dd:7a:6c:8f:
+         c6:07:18:c6:7f:de:47:8e:3f:28:9e:04:06:cf:a5:54:34:77:
+         bd:ec:89:9b:e9:17:43:df:5b:db:5f:fe:8e:1e:57:a2:cd:40:
+         9d:7e:62:22:da:de:18:27
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/global-config.rsc b/global-config.rsc
index 8a42b817..a0835f86 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -92,11 +92,11 @@
 :global FwAddrLists {
 #  "allow"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/allow";
-#      cert="E1"; timeout=1w };
+#      cert="E5"; timeout=1w };
 #  };
   "block"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/block";
-#      cert="E1" };
+#      cert="E5" };
     { url="https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt";
       cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
     { url="https://sslbl.abuse.ch/blacklist/sslipblacklist.txt";
@@ -112,7 +112,7 @@
   };
 #  "mikrotik"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";
-#      cert="E1"; timeout=1w };
+#      cert="E5"; timeout=1w };
 #  };
 };
 :global FwAddrListTimeOut 1d;
diff --git a/global-functions.rsc b/global-functions.rsc
index 447d6e9a..eb700efb 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -999,7 +999,7 @@
   :global SymbolForNotification;
   :global ValidateSyntax;
 
-  :if ([ $CertificateAvailable "E1" ] = false) do={
+  :if ([ $CertificateAvailable "E5" ] = false) do={
     $LogPrint warning $0 ("Downloading certificate failed, trying without.");
   }
 

From 35f4ec0b1d1d8c26ec9293efe2d9091993d7bf89 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 10:42:36 +0200
Subject: [PATCH 185/988] doc/mod/notification-matrix: drop certificate hint...

... as matrix.org switched to Let's Encrypt with ISRG Root X2.
---
 doc/mod/notification-matrix.md | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index 92383bef..18b66078 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -46,9 +46,6 @@ The Matrix server is connected via encrypted https, and certificate
 verification is applied. So make sure you have the certificate chain for
 your server in device's certificate store.
 
-> ℹ️ **Info**: The *matrix.org* server uses a Cloudflare certificate. You can
-> install that with: `$CertificateAvailable "Cloudflare Inc ECC CA-3"`
-
 ### From other device
 
 If you have setup your Matrix *notification account* before just reuse that.

From d1693a241b0ec444d7ad469681e4ba81c1b398df Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 09:50:39 +0200
Subject: [PATCH 186/988] certs: E1 / E5 -> ISRG Root X2
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

In the beginning of Let's Encrypt their root certificate ISRG Root X1
was not widely trusted, at least some older and/or mobile platforms were
missing that certificate in their root certificate store.
At that time Let's Encrypt was using an alternative chain of trust,
where a certificate was cross-signed with DST Root CA X3.

To make sure a valid chain of trust is available under all circumstances
a set of all certificates had to be supplied: both root vertificates
ISRG Root X1 & DST Root CA X3, and an intermediate certificate.
This was still true after DST Root CA X3 expired, as it could still be
used as a root anchor and was shipped by Let's Encrypt when requested. 🤪

This time is finally over, and we have a clean chain for trust ending in
ISRG Root X1 (or ISRG Root X2).
Well, actually it is the other way round... Let's Encrypt signs with
different tantamount intermediate certificates. There is not only E5, but
also E6 - and we can not know beforehand which one is used on renew.

So let's jetzt drop the intermediate certificates now, and rely on root
certificates only. We are perfectly fine with this these days.

Follow-up commits will do the same for *all* certificates.

The certificate is downloaded with:

    curl -d '["ISRG Root X2"]' https://mkcert.org/generate/ | grep -v '^$' > certs/ISRG-Root-X2.pem
---
 INITIAL-COMMANDS.md             |   9 ++-
 README.d/01-download-certs.avif | Bin 4578 -> 4596 bytes
 README.d/02-import-certs.avif   | Bin 3606 -> 3605 bytes
 README.d/03-check-certs.avif    | Bin 12118 -> 8932 bytes
 README.md                       |  20 +++---
 certs/E1.pem                    | 124 --------------------------------
 certs/E5.pem                    | 119 ------------------------------
 certs/ISRG-Root-X2.pem          |  21 ++++++
 global-config.rsc               |   6 +-
 global-functions.rsc            |   2 +-
 10 files changed, 38 insertions(+), 263 deletions(-)
 delete mode 100644 certs/E1.pem
 delete mode 100644 certs/E5.pem
 create mode 100644 certs/ISRG-Root-X2.pem

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 889192da..b3eff35d 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -17,13 +17,13 @@ Initial commands
 Run the complete base installation:
 
     {
-      /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/E5.pem" dst-path="letsencrypt-E5.pem" as-value;
+      /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/ISRG-Root-X2.pem" dst-path="ISRG-Root-X2.pem" as-value;
       :delay 1s;
-      /certificate/import file-name=letsencrypt-E5.pem passphrase="";
-      :if ([ :len [ /certificate/find where fingerprint="e788d14b0436b5120bbee3f15c15badf08c1407fe72568a4f16f9151c380e1e3" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470" ] ] != 2) do={
+      /certificate/import file-name=ISRG-Root-X2.pem passphrase="";
+      :if ([ :len [ /certificate/find where fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470" ] ] != 1) do={
         :error "Something is wrong with your certificates!";
       };
-      /file/remove [ find where name="letsencrypt-E5.pem" ];
+      /file/remove [ find where name="ISRG-Root-X2.pem" ];
       :delay 1s;
       /system/script/set name=("global-config-overlay-" . [ /system/clock/get date ] . "-" . [ /system/clock/get time ]) [ find where name="global-config-overlay" ];
       :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={
@@ -34,7 +34,6 @@ Run the complete base installation:
       /system/scheduler/remove [ find where name="global-scripts" ];
       /system/scheduler/add name="global-scripts" start-time=startup on-event="/system/script { run global-config; run global-functions; }";
       :global CertificateNameByCN;
-      $CertificateNameByCN "E5";
       $CertificateNameByCN "ISRG Root X2";
     };
 
diff --git a/README.d/01-download-certs.avif b/README.d/01-download-certs.avif
index b543aff2848235791b59fc0805e850a748f17a23..4a074eb59dce96fbf79c0b50dfdf028f7eff9d4f 100644
GIT binary patch
delta 2976
zcma);cQ+f30zhL&jas!z?UCAADynu6u{S|g?Y-KXNeQKXs8O?a)m{;snzepy%or_E
zvq;StrAFTS0`Hu6&b@!#FL2j{PJ~h;Sit}Qbr*mf005Bv7dQYwyPTFXN>-9#P4=41
z0<%CCNsc52`INB}72_38V^o+*EG|4K(y7UWYuZ!_29NkZz!FzE&tGn?LRGM_EPCrP
z5lIyN>v;n=xSqwfJ(;$dV?NwX$R+GD&ck<TMuSX%>%IFexbWq=Xo*p^Rg+S|trUCg
zZvwW!#1>ZFTvyW4d^>JHahATU#s$^Ps8$DWLQd8<^kP0?rk(Sam%9G7(nChZEvCT5
z_8Z4GUhe7nhExsc2Cikx#TYDFtP-K?75?@_&q=*J-&{B!$Hg;s$XiyLXW(Z=CJwzq
zSVJY~<FOleL#2leQr8X%Qr(ZL7Jo)%83MbrBa%EnbD1ilhj*_kN;Xi$OPsl9iT0Wd
zl5u%pv?-m4YEjn_%UT!WI$cjhWK<5m2<G`)h<<fvs5=J8%Vi-9;S1c3x)XRaAC4>h
zwQM6|b(EhzD(p-rdgl$7k&bezvFi2XIf9`C>wV_;9rZV7&&Ns~v0n3h3%}U}ghL1Q
z(|T}#AUbMcvW%NUr438S%vNXftG3Alq=PFM%EHe7Vi>qLVeGY(_OL60y(NC=ok(_?
z^jA}M;FvH-ECo(^G|?(S8QK8XGvjR7NK_d4%J(lV4OsPR_R=;iYQ(~;eI!$4(Rs6A
zv%bhHjnHXtZ3Yq50JzB!lk2I$tL=UyfPQX^8ZFeF7534<4`C6=69=H<mfm-67s&yi
zZsq-Q?Z|V_-3U5(aFCX;`9XL~?QLZZXN`w;!KpHXn#Ghax14AeCi1dOKIvU28(Drn
z{V1OJ@@U97qUt=%_ZOylCfb}C(oT0wBPzN?$3p_pr9?a`*Z3t~E`&*@jvzxq*;`8C
z_BZRg<~~d-1~n4d@}M!XM$5i?waYEoDRtgA=(Q;7v#B-A;c2(DDH|(Gz1}bsgjzTm
zaf||GD{sZs&)ON^me+6RdV9uDoKm7kdAhaqVnijAjcmrw`-dcV?H?A8)Mge9w7HY-
zyAdU4YYNH}%4^y(L)}5MWqU9lzmwkCUA4J59NAdOhDt7@zg{{zA@8Ubr*OB%h2&bY
z>dX|5*)YqdU16`~VuExLg)PYtwpxyiFF;$0odx?0e%fb9f{K`E4W+eA#Sgf_zy^7W
z4ezo&D*1CGyeBxxA|RA-Gd}!la2M^HTInXe8f~flJO6ky>DusF|3^a5_B?mDEV!{P
zAj5zMP#XXk4!+WA3m-3b!*TB-5IKIeQhASInR!p870l)LDXRd_IXQQ(eyfLKDIK3)
z3H>#_X!Ao7JGLWk)Cz){O{mXG*4%np3zwfLPfvqO^>WmK<8urd6Jnc$DC4SHZt-IB
z#Q$FgjWu2q!Qu{+5>w=?n6{<m1kcL-cLRlm;&Uv4%FE8`ul$G^^%}^NGd5F8tW>?r
zwwZtK(9_A3^)K9?@bf?1JC8*Ml5*zTjO3Coabi}VJ*CRztGwN0*q@s>XQT(Fgq@Zq
zVs$`xL7ZU0G;XI>0fsvK>d@+2FD*R><&9o~hq(W>=7QXTP_db+|4%{xBl3~HvjA?<
zDv30y`tS=BPs`V2h|}>SMIY*q;gzTv<TxgCn;9I4BWYoo{pChX?_uX(gn8*`$_HrH
zPF9?DyffsK&<yt-Hu!`ihR8jhckfjtciKv^zojm3s)1l9Q-9>6pM4*n{+P}V?!g#l
z)xBK!<KIZYL64>lDPvmrsyMwy+rQ<L2h6WY!bLUs;(HrV-y|O){b-+m!?PC(ViqnP
zC<TW=-*(u`$1{)}OD{0MJ-f-Tk>h=yamFE^B4a6V&@}h2V*LDX*{?uS?0ZHQ``)cy
zFarUB{JjG;J&fnJM|qDyIU{WLAz2b-SKn@e`XPTfbt@X8{*PZ&@FA*+)KTMHr4Xd}
zQa~GLN?MYqnt&kBe{%4>A#~kUm5Mq#cZA6r95y=1jB>k`|G*_LYxKWQw@TJ|o#`j6
zK`7Y;1S%>IaTh#MNSxDfs$(HoAdaFS;S?K83tnA+(0b-5xq8p20TsA1E$P=5Vg?lj
z6DmH1Y7MGdU86i3EsvPyLzSNfPne`Rr-^>2svz^j2_qXquoiC+G!0J7J@cO8U5Hx%
zN!|0QeWS2XDoSUn9ziMk4}ut7Dvdw*x&HjCAfEZ1mHtb8&Fr1M!WiFCIi}nvMqM;U
zF5<TW*JHVz=uddvHpC?FH^C%{Jb&VwyxS(oRa!fE%<jCAZM{wU=qj2|-14^oJqJcJ
zk5!Y5$VZS;SBBiW5T+g^^61LX%on@>@C4j*;4%8)4>z~w#E38^f;b-#`lzWll=s$v
z`ZTbtuySUem;*ZHeA4K!JLOtmyLRUF@7%lGseokgLa@cURO_mjuxYIRgzhoIGF<2A
zLaB7LOKDnuhbkmnhV;dB%AN8u*5xjlSu9~O7YPLO7C`js#&EfKuk(EHU3AmF&HE3i
zm9I&EP+^_tQ{Iky3AL_NI-xBa{rUzh)k2lpr^ZaVQ-WjM;{o01FPnWs`(85>GOi7C
z3{{A28$Tx@;y>8J(2P>ES`L<*%U336RmARp>tc&)OLqye9<zrnPfg!AbL^|mcQJ;o
zBLk}LR!KbkRIxvIX^AqBJx>|TG~^F_T`l1q=hz_)6#BS62N0;8?bc1z%380XS6BJn
zSEMH0U*afulppr<p3;>M{M)x-Z8bl!^vZ-wuyW%12p+5YK<)Z4%+c9`QQcrOoQ|8;
zmGC1g?tC=}dLJSV_wr>Zc}-8!{cfykhqNJQ>V<jElETy^clsHVV}Q2H=Ob!GagO)8
z#Ug)`n;s!tSw7#gs>AeJLqR?#Wr@UXv&y+jdVb?{)ZzR`x_e~^)^Gz6t_i>!iXu`%
zVR^Q!rY<ajdgj73(@Y8=-z^=h(UplGkkAefY-*ya(<G5r7&%MB|ItLBCx72SzW1+a
zpD<&<J1LgZoyo;Dj~>@EieGQ+%B|QI2I=opIi42cZVm}Uy9DRV_|V$QR{dE^=|L)x
z3r)K(8l&rvU*OHWCS+`eL>_N5HwSu#DSB30t%>tEF+{nozE`l@eiTrlOCuMNeL!%p
zFEqg>DE)a-qAO~jLb=J^%i4=vay1CqG3bA}SO*=nD}H<5ez{LBasLb47AD_&6eeJg
zE6ic6^NZwTd&G}tF`3B83K%-}!Au7ltBqzb`l+}$W?(MR+1gqn$;lX~se(6}ynwgE
ztTPEHYtmci`#Rb<WFgysYL1n0tf}4nw0exnY$*go)Jp2Doxh;#i$~J-Gd|w?Ky;##
zAN=q683$LTgc^0aYir4>xH;k78yEJ(fzhr)1hgixLf`oDxtK+CEcxww9IusHJ|a%j
zK81cpN$t(-#{^EE`u4{F1$I5&smij_OuO!neIhLl4&y<q7|A0x)4yppl|G>81;=^z
zSK^V+p!uBFoeb0zv`Bh+n<f?uMa#h=*m>u{JFjtPW>7Lnq;1R~RabC3xWt>mrb&^C
zJ(aD{{#J0#9>G7S4TT1FaYn2`KIDI;yB!?g^a8@Ks>ylraLJt`w1jnxW>VsYM7n=<
zMIs5#-;k?Zs*b9%*dlT;+oTJVQ{rjZjHh=&c=ocR*rCe>QsZ@vkyA1BuCC6zCnhmP
z-Vm$77a<E#z=MW0i7KsxIguC2R|%xSyqgwGp#JBX!?c&04`ct>fyXDcw&h)9@B%jK
zsgDsFcC9%sjsx^8U>Siybrw#Et~2=+FCPcIKP5YMqHn2xl4Rb=@s_r9`nK_f8?Pqw
n=71oUH30O4OYpnF6X1DQU%b`Uy*oc2OFWQRiSG(+DAoKAsA{Q}

delta 2958
zcma))_dnDR1HkVPSrI4uQk+r9xU%<%E{-_k&dkop$clW7lyzniI%i9q%#4#0&dL`V
z*_5+6<3U#PeE)&x^?F{f_xq>!ukQolMd8#iPF@g*z7IqL0)fE)f&qaT+tQMI!6_M*
z;7BmMZW0_$1MFYlI?VQVg$m$$>k~}YxWC;>t&mkQX7sL{e44vLE12j_C5)^AWU&v1
z0{%~B-@VT(ihfRsmI+y@&gw#UV0wI7UM})<k86g|`V2Uo&)*t@-kN}}z%s0x;~6j8
z2vBX3{isnVC<&rfhgC>(z`eh}ZAsB8bBLjoj-%>MK-?s)hgo`scMwFul|`+246j>0
zvh$FsiV>d_$<zxO5AQu{WWkipI_?Xc1`)jF{th9D$$pE@u6j(%g}v>rj@7;lES(}y
zbX`?=w%}8Kav>tF&8qYM{w1JIe)M=I8RvPIUnNIeWTyE&e7*iGjqVhg3){%Pksw!h
zU9tjj@)<D>Wl-~Nfd63c5x}0m4scZu<d}0Y;V1@YQiM`pgp?l$qB-UIfC?m}y8mWm
z)wnq}-Dv0tsU-Bm3L0iZI%7S5ziS)PjYxNu3*QL(Os^bB_fufCiSor>z9CII$)*|i
z_qYEMw*?u;*QL*W1HxL&0wNMKx{*~L>41$j{L#nh)NTJVjo?q~y_D%jpL*a*Xu7eg
zz9=hyOLsNZp<VDJ(zt0&>37v50_tr;<7}XQMZ&Tn#ygEz>Zu%ltq)pM+7q<b%ggW1
zWB<m1!uwOfZV9zA_6G)gZzPSCZ9XyW@`r#V-H9zfGaXhZ@;u)Z);*ZvRd_KNqlO%Z
zWAu{@ODY%C*I9~$w_`zWVzhD!;kZ^mv-yn(C?>R$3jb-|W$Huo=WAblBTbJ+2PN;H
z_0-S=aoW0C`Y<qH*15<^KQe6~Rj;_~Vtow}m+3|cTK*Q)J;>lY-_ZA6QxHZtdd0OZ
z_GMHISCXS|kTwv3#uKr{ENl;k#y?fM`9a^hdP_ZE-D{pltfuoUQFth7719YtVojs&
z6M1I{-*AFz!Bn;LD)a(m|J+#tZSLDK^w`cX{n)8dNl}eQY?LcY&uz=e)AoF8^|aO7
zlk_F$(SmhM+x(DoJE#gt8!6wI8ulZsIoQq1CE1u>q8`=Fq{6S~PrhH6v3%K@cB4`t
zLyOT7ptcGHu02C!*RM&g#QMDFaSmc@EsUwZQzQ8IZ7xIdr>!j?FZFNNrkGwm-sa&l
zH*OwMw;CGzA;70zCXMy0(4oy`_Mkz?_|nw0)AA1OU76cdj><LhtT{P#Y^nb2PL;Os
z2yYsH_^s*Rxsn{5%JvCh3jAs)u$!`ee`Ssc^sg4|9RCgM|E|eD{W?D9bUG~LU=v}m
z5`WVXB&=d}52=dJDnC>&t#&VrWD@`Xy~_|6sF@JGtR1U&0W!y3MOmr_M1Is@dLB|_
zW!SYD8V{Z$_8T_?45O2#dY16d%^3xTZEjqEwn_^7ldNESkG#!+EG9W8yE(;f`5hA+
z`mp$OYJUmgU8^<Lc*NMSTWR%2!tJ{}WzP~#5`qzCrPbroY@Jd;Q=glfh}I%O41V6<
z@#{7&5EKMrst5XC-uhnwxR~MqF)=E_YSq1jZsd>1HD?$w3jr$o_D$_$0b=>PO!oPq
zN4R0=7}cu5A-v38G#c(mc>IQbAVT(y)g^b;kH%aj{>_#0zYdhAIv~W^F$gb~n_%}~
zfS#3B&GT_KtoR0L|3Nv>6lZUEkaI{=uIK7anGDO+zYK`{W<PCwJ)Qx(4@%_kNbSSO
z{0D}T2eN+G0vCCD_CGCDa6K5A<OxeC%GkrI=%us6Tr{}1Gxbl4xRTtZL#|j7G6;4V
zw!|rLFt@#+@QT-d7q!+|5?`QyydV?&2UQ=&sG@Z`N4h=#5R!YlA6F|q-0L9BvA<o1
zRZKkVbE#WMqkI^`-|MTs_0omG%HBqNG)xv5mqf7w4A%+e1x|#&u|}LsdlFZavFlf_
z;2Lyo$#!s8)Q(DXHVFTsLlvX!YIK(V*ESPI>U%~eO4ckNp4XW4|I{f|P~CLIVduXW
z8+_;V=zya{L{hKJ>>Qd}J0vPRFyB2Q^H7&2G-I0>L<5J~Tv`?314U+|iSl<e^yA{I
z-z5OMnzh;n*OzRO%O_d_?M?%^3R?37j+;|^g=JPyt;!D(2idj1CVt-Vy~q<)+IXpx
z>0hcw_x>?tlJ9=i9VZJ73;ddNB}ytMxL&lpDQUd1@4zy4tC8WOqT@JdiSXS;V$;KR
zNjf|fJj0_h*PGJ=o)CTPrM-HZoW~BtJt_yvn~A(>`_`~u?8h8crx%f?s$0LG#F6SH
z-o5iHYEkl!AKv<HOQ9HYmQBCWHZyOve0E|Y8iOW_2$FBi_OOm;w*ch3eYKa`4%qiT
zjn?L(v&=X>$t4odOYrPmgPTsy3p#Q)59smW$SN+#SddFt)@^oOsynTM9UC1NS|6D8
zi%!TtNKLK$hmvd|5un5`Du%PhOkX2D?@ZAC!?!^FM&N%kMKt3=EY_d>kkF2Jd)Z8n
zRX@6(8UqLD1|6-sxpe#E6-tib!8?4;14gP=SEI|Og4whn#g}%IJ%Fr0ByIj=2gXw3
zb@#f`#jwFy3+Xl1_#$qCexZhR1bj#zVHS%@oC@(BIKVfSxzk0~gw+w2gGcV275`$(
zvbZ2IWTj5hNSP$NZC55dy<fcIAU{rrZ-01jz^?Xax%RMfHR(77W#!`~(DyRXH@!Rj
z@UDT~<$QeWH_iG7-7n-L+>S0oKFCo=F1Vj#|M{?z=0-piPFa`WckAGP2te?XU7+1z
zxDxa{PKV=UII6M+ZF`)DDL>UUJV)kbsn{r-*)!znl|oWQ_);|AC)?lFf-Ly^GDyZ&
z>Iz|Ag9di0SQxtf^xtkUh4)@LOTgqHS!$hH__D=X`NL#{-y+Uj5tXg)WZ!b3#E>gm
zu&8{4($q1DjRNkAM8}3rAhU;lmQ5CaXl;5jn?3xb-AQD+?jd<3l15lJiMhq4X3I{I
zcI#Le+uJbg#lhCaz$=2j)Bh{N1y=FPprpzt%8XWxb#$GctHCFopF}6#`-BkBc5C}9
zbaAG2wp9Dap|QV7uk$Yt7#}pw3u8_<q;hulG$qdBuy)A)l}?Z%fG|GI&^-JOCrUBW
z;)s&nh=}khC-jw$%~+ln5Ybo#$D&DvAh+6^y?iua#wBK#RqWVwx|SLJAi`7fvXTaW
zyiu|3EO^pl?kk-}jE>LUvsp&L8Zw@VbOMk@&;$0uogSs0cyG>;6ZW=`;yY1w;?VVr
z#f&y2ciPkZ6Ioyf)A}&*>)iII1?76#@%Cd;RMWZC*t)LDv(4J8b*OiVn2l48#d2EK
zWlp^|q;`~m2PdbO8)lo|NqiaJKjs@2^G89W^r@cL&4Pf$mTWC4L)cD>z~3~2lTZSZ
zW-xzHO?<CGENsI^<CGL|@EqLru*J;Igu37xJ0ucFM+Ks@O|Nno!Tww<XEbA-sFh!q
z(AdRWjV?Yk0@r(#xd*~)Dk6+C?O6PrHSX(rX}z50o0()z@>Yjw=-?AgKReH-d7y#{
z4VsL0R5QtLy1{-ebrpUyMoBbM<=ZA`1`GF)F1*(DL3_Ju$a?LoP@4kPOK5F<zd)bK
z_H#?FC7@Y+M^$tfE31w-ncdBK+#B`k6WFG>L5;5Wr@3X@y%9#G?3v8Y5c8cj>lQuf
zh{=xYCl#GWSMQ}A>=nicJW7FQj{aC6i<LK=uy8I;HCDR}E0R9=jMV(n8P`KYq!jjL
z@WL`=hh_e{MCSB}@QY2sa#89L33ryyybis6DCTpEB+%r2pHp9l;y&DuiWqJmY-bm0
VdMLTOlyoS(<Qx|i@Cb7w?!T7{q@e%+

diff --git a/README.d/02-import-certs.avif b/README.d/02-import-certs.avif
index d42994b961cd6c9e7d5949853f9bd5b155bd5b4c..bf7d5771a7cd38463b8c97f0630609ac093bb63f 100644
GIT binary patch
delta 1459
zcma*c`9ISQ0KoAtbIrr!Xi-LClQj=Avn=wc93#p(SI)U@i9JMULsBEP5Kp8YxmGk`
zW{zYrd+@mBDsqHJt~o*}&+`xTdi8pJ-amaFC}%6*i#t#O03yMFFaQ8T|K|Y!5)SkX
zz7RLlMTjcIuO1OH6`>5e)Ve4ojE}vyApEJv0gE37G74H<&d-QVsE04}S(pz-Woa5!
zyQ)mX)#Pt0vD0NcEu@@Qna`eP-aLX$Hzv}QXJRJ~NCGW|Gz9R|YS1w?qfA;Tg)I|K
zwEHfAyp$fNN{3SjG3WX9kD_+nU<vf+YWVBohGQ4>3nG?ROi{#m-SW`rqr~bORQrgQ
zbZex3`X(Rtsm&^UiWF5`8}l0;pPiU0qfFb&SN2abaU4#j^;I<vXrt3Dr#)>wIx`i*
zUa3OoU@I$L7bfNz$5=<*`-v1*m`8<CoBMr*tTz2d64o{TEt0IB?u&y1?+Q}$sg}{(
zlffyMYg`|?foy!kvW<qAFfKhq%%Wu^nLYr?!Cb8h8*|sZ@uVi|(XS%Z<3@=<6;;tV
zVQK4-${nrF3f=A+y&a}=7P`3!j$I$VRvQ_SE|*UoMgA&k6+wQYLb2$W_Lf~_cjf3Q
zkYSA57bmZ@k+a910>Uw>p8=@7#H@!Kl&cV=CTnD!qB+UML4DyLUH5_4H_3Dw{$(h1
z!eZ^t^D$c;(ueo*qKNWxFidy5y2rXyj8WVk9`;LE{R8KU!7NUWzqM4}EvV)D))=12
zJ^)H~DDJ-HYZXWlTrSx-n^DR0&n0Q-y&>+N@!{}dR2GEqrUl-2opD1OZVt#f2_3T>
zGx1XdK$D#19s|X@(tiu|^BNH4v+IuA_EwDq6>?(Fl-*8J99FJ>*t2QS$-2S3C0-V?
zHv(H*isi{TD$?dF>xPwVF<<6BzvDga<^%?5DyOpzpHQT%5rtIApL9|@#Xvz0wQKI5
zfdvIng?bGav9EpegC1J0m6RU7hic1GB~UI2+GpDQ?49yS&rW1%VZBiJ&3zy#JoLK!
zAiBbG3Drr0j~jQHeXQ%&?>#~(9T=`OI7?EWme4MVwq+kcBLHI3UtoUwH?#`sn!pKB
z-k-e{$gtiHKgZ~gSJZhLHho;93FqJEheD~xCOLreLG-(v)#1{Eoi5H(R&#0R1WN5%
zg-tJ%wPX*GuD@b+3_&3F=D-hV{b&G`{ZV;95^SikZitbU?F~VVRM&x1gelrAyjUKY
zn_F8i(`<8Ul<U=wu@A`NgcKbqjNbd^d@9kmFNHyS!A0hW&d8Iy*m$s1yzY=A2(xhi
zNLOT4Y3BT#=vtK$N%y3tYvw5=ob@^~NLIS2Oy^Uo<c(F($oLsbHM@Ah4C!zn>U`Ix
zCa~VK8~U70|EGhk9s!M@h{J?Cg2nm;3=3vgnzn0f9b?QJ4&LNcKGyRnJ3(lEmJpy_
zUTmiPV#jYTnhi^)?6Hxp44pJu$GJM4;v(y$B2}9<JE}nuK_Y*CQ2_C2L@bnLm6+UA
zgWvv|Q%_u~ya-3C&ZKHW5L=6X#Kckm{bENP%=J67uUR`JL!bofo@QZsk^E+}mzIx9
z55?iGwP?R3nIlH=KHmdY-{RNuDyLTZPS7uQjBjj|6Lwi4=4)HCuOg)SaZInk2JHBq
zwbMCUkU0Uu9;}C$T^LST6gI;ePccW9cIVtrN|(3HVy{ABK2~pvIm@vFiuQ$YTG`Qk
zroJdT`mk_=3#f}VGhKz7v-9X(y|OA&W()~g<+tQodiR*>e&yBFFYodEaJsnPBLWGY
v6AxLT2LpoCn6B^KE^+4-CCMJ+U$KG$VAX*k6%!x5arK#GJ@R8$|JKfbcmJgf

delta 1460
zcma*c|3A|S0LSr<?~EymRveRt43}@qmwYMTnPv0cR1V`1nQ*b(d@Z^8)_gY;a=x^2
zM97q~u{e?tmNxRGL%x42;`#&bagQF4_w)VBD_1^GK8tXy1^@&@0e%1g_`VMd0HUbu
z3^rdE*_|(*uj}y`pSd9MZ4}sO#o_6m{>)YHb_>7oup<^(wsn7WgBg}wPIho;=Wl3P
z2i*F_t9Y)+-un#}dM(zgKJ^TuD3M!n`Y{R-F?qn_k3aWoc^aVhqv&7-O+?6a5xt8;
z<Qz9+SZP>9^8~Qmu@BPgT2)tmceCaC2eVyE69y1u(maJg$dV{l6kj}5a+jm=S)ySZ
z)P<KPeKgS#{kn$1?qaV5g;K?3aw~m)>FPQCTvg;GG&5(5H{Eo-Ua!wlS!y@m*=>D>
zRkV^S{3Ug-J)hjtwqQrM8Eq=o^cp2DqSo9Vrc`PpSL9G`iu!33b_E0@2Ao$dn}<qG
zcI-?jVd=6edFF2+UbCpJ5ccXrzl7|+qM<X9ELeZZQqgway(u-#p8_ospdb{_T;qYz
zYej;IwTPen`l7=IUE+862oC)7ik;-`<_~lV#ZNF0im*>gz<7Iq5<xe%67!ix^bOeG
zRuuMvuk+4(ZSUFW>P~<vY7#Fze92ID)Ot0gkZmbBRA#rcdS7_V&d|+lRf#g=n@jV$
zvy;tG4&Ej^6yG{;nP3lx^V{})TiO_^c~KjL=S;kuSgy<siGpe2#-)=~riI_^;1#qp
zpLg<xYi^c9FrEx-4P%g4LDMc&k+VaFb4;B)wD44sSfFBh{9&HKsH3Eb9@7=D%ihi`
zNa+N2mI*ietv+@|+(ynV_reV?<a`^(+<^3W^KS0Cm_n%omXXcxZbZpQ*S!h9CMaZv
z5ZyOcz$Xo}rrVaZ^t;K9&)Pa#w5vDjJPTj-C~FR=2}q}@Js|RbzaIg9G398LjC_Xn
zRL(FT_W>d$jWWU^fhXs(_s`aJ`%5(7L?PUF7x24l9yzY6a=|1RXuzG6+hN8lo+wRj
z2E);N5{(=?#A{tC!!TXarbx}^))Lr>SZv#xC>~To4rTU(06A#&r3mdqz)=KAWw?Ui
zdX;gWwU`dh;6h}nP+#@LZkpW<%t<{D5-FAHlM_D=%=j%6w*Fy7jEvmE#FP*2TQ~H6
zst>sfVhYP$tEWdaTL~RUoBtox|B8x-<A5{(5;K6U8z7Dz9SqW$e9RC_;U~Hg11e->
zFBl3ldjq$g1rFJEv(0>^(&Q+H@O1FeWSg@t>iG#2fPN8PXPnFvk~^eV&gy)OO9HwZ
zQUXvV_qe5W%kp&9&)k56J{qQ4HUkR(KoLBI#nm}c8n|cdo0TN13bhNcJ0eV)`6E;S
z71t6oz*4<Us@R$#9uX#nni^exq=9^5&jeX+-oI>>zAR9}I+%TThxN*uV}rv=-V;J`
z`qUAS+WW?09`ywUiI7Ph^x>B<*G%1le(Q-TNVg1Nu;ALTOz3_Pv6x+$XzlQNKDq3e
z?Xb&Nq=1X21wxVLKFQ}u6-#l-Lg?TORhm2+5LjH%uB*?I0g)-W33}e2__8P;Hdua2
zUo2LkReU+9XaB^Uaml*TlY`9nheKbgeM^%*VfM?`ou$Z}fZDk8SmvKuHma#UC8kkr
zp(~Y3v{|cSq~)0wMyQ9BeDj>AQ#~ML+o<bY09Wzq?QPGAsk^>11+<e3&UN8#!R)z8
z>Yq`gRSWH7-jm5;5|^Xs?wv)JXHotpBwBnbbTxnJ2uOizp0VhE$6M#{MC()R2qC@F
z4UnLb3*y*bC#rx&ciq9aJux295$MsHZ+b5hVo4-Cwo$$5kqfam@9M$qOW1bYzxvXq
AY5)KL

diff --git a/README.d/03-check-certs.avif b/README.d/03-check-certs.avif
index f24c6b567a0696bfd30899f66157ec7c23248212..46b7220f1df02c8379e95113aeb13bf91859de0f 100644
GIT binary patch
delta 7712
zcmV+*9^c{CUgSlPdK41z000m300IC2009610b2k75tfmTegTw|4FMSeAd@EnE&?Hu
zlUD&a0WXt~0Y?H15tG>gumLZ#iUQC9f97bDJibM~1Zul~)gjAmILjQr&CVESrAI7U
zf0s5i8?`|v-N($QzkK5#hHF;UEre?XzAB7K<;D?}VhDgKPzfh2K#d1ujCbOZuB;vb
zGi!5}BpFxEhd=7P%&*In^I>s;&1$C<t@<O+sfVp9j!EhMCRFh(7R%xiAH!2wf5qgC
z!w?zW>+&7A$KzQuMyq3{0c0a4@=?8!0e&L+2qc~|PtC{A>0MRiI&}AseRJZ&HNi!W
zCK5zSsp=aZhmt_)>r_)n(q@BCihmPZMT0DX3de+$;0?iY0Ky?8lb(YW%^1l^x3Sk4
zNlmx6t1yx{zqWM+I%BGW*tW+pe=gzbdgG2eo-xHvkU{pVVFrV6#7Q3i05w|;$<GAf
zXO5(fwY_hl=_xe#Q~0*tONk^U*<_7N^dRJxz|M2;jyTOe>rT=oxwd%xP8uk-HpZF|
zRE7CSJqFT9zzv=&qB2QpV^)nxO}M>1U+7`m#GX_HX#tb>L7kN{-+zuze^bZ59QLML
z!DqHyXqQbPSvHnKwO3)sR^*OPY~W)RrYyAi?x0Ig5v{sLR5MN?!j(e905HfNV=o!x
z9ODBvXSUOAgB9^AJ*ipDu|#2Jb_m2A@%Qkf7(H-LO0IaBJT+}>*1l}#u41*@H<P1W
zMG#@T%*l1*<;G5by`RFVe>`zCk!`V*MzWIWgSnUG$o2mK_19+&rjd3gd(RRTVGv-=
zaSltcLU5oSm_L^uwM8_231%$5Bt?zlk(qa?DImZ+<K_g8005DKJJWN6k1PC<>0$X{
zL)p~b?`?k<sf`%Y$uS)w>E%WOK#Wcgrv{SQj5>|G!=y@<!esN3e?;HrF7BT&z~dvY
zdg&n3d_M=7CAWyf%OvVqjFH8)cIQ7ZIV7>^$79gti>KH@B+$d+Xnx49n|^3_wiNVj
z+=0M39P!(l;FT#UHyu}-XD=m6bCaa>^K7vmxuF>X4+@88U4V;Nh*N^O`tBLYJ-T<S
z`wNXa;?3ii!dDYTe=Xa($pj2op;5I%1CVkv!2=z+rGm>#icORFjYz_rM$wJU=a5@J
zFaQD@2a}$_VwrWS4H;~q(KV^vCXCA4o;DCM##D@BqK+~#iqSc(WosK#Q*EhR$g8Za
zj21uW-Ws~JRg{wVaY#Cj6t>_-20px=D@(*t%`8XzE5pXsf0j?)1ht8oM!<3MWRJWU
z<bM*5G0!!B;*D!mhsnLZX`<X;V<O<6Tw<MT;;m}UoWXp{=05lN7v?`NxBCnERkeK?
zY1>pq{f(-55l8)xdSnjFPuZL12WSJPdV~4Z!KY0we9ac<5Ltloie-0gz#MKlDljuk
zKaF*(i@SN6e{>Psx;%F3pSxX*7z}mBR35&yNcf9ZH-hZmH=ZLAhuXX-VBi6aaKIY4
zO~Yd0RmW?6#ffc2gwi$klR7=jW$j~S+kiJI%Kb;zjQi8%x3o#)14O&ow{wiKBo)ZU
z53UVRxz{xt%b0F%E=$b_AsnKD0VI*rk&=HiNcz^Je<Cuq(-mM;j1Gij)6%)B!g8N7
z>*m+waaN~NbsXaN^K0-%u8D1@&pcL_S~bk~Pb89T3|BF21OQ7Y7{d}s=Ofddi7os(
z=;q(TTB8C(E5{>9pb)GERfx{hpTvDDj5>wcm`rA4AdRBV2i#>UN8$+|jcMurE!Fhp
zDHQ1Oe-%~o<Umwy3Ka2<Kvn#zCrYE$KgF5UqgCpk;>~eqr+;clTf!Qr*i2t41((cM
z$mco6F`vZLlUiu4V7^a;^)Iy*WF#|zymcja5~Gof{<Vm{FV`0KOVfPMa`5>AMo>zw
z@cay8IUQ=8dfufCqguyw!WJ${;Br`DxyE@Ef4!AQyZl%xHEx~u^Jc!88^@~2YjLI_
z!w6!xm1870l?wn{8@N^-d*h+5qgJy^%PY7od@B{al3S^YOk1H`V=a)}51D#;_2gHc
zHmiL1%X-%gXGuK8Yzzj@atBVn)o}Q$TQUhg-ur`ZA1dQ_JmVPe`VT>lh$fYp+}-ti
zf1RK9HM6djZ+YPhgD2U%vd}Uhk<|uSnOqN3^I)9&bDeKsr^H6^cxA<eP^2$yC`I|g
zfLknZbF`d}z50@Q_&i&#TO?@>_m;7%Dg}uK(0YN#em@~d{wmg_m(7y*e1VmNJV;0*
zI3pvrPv=%6Q(DsXJx|WOvC)mLpBjS8f8<9C0tZr{=bqT>kU2ebZ?s)S;#-u`u47a3
z5#()SwG(q~9OEZB#yRU!H;sHm`}b;Z^ZoDLr#$D=*P5#@i8XoTk><QInF9v%BUT4?
z%<x7(<(hs~JgWCAncBpU;azDJ$+H<obt)!8*-@4OLu8OK!1Wazz8lq{f#sIhf6G*e
z%F6Phuu+VXr02Nf9mOf}HnaAhv<v4F{{VSaNAWB6AKpbjg-3g@>UxB49o5$Kei#H*
z&nkJq{{UfsAyi4(#cim*qVnA6cK4R^%9sr{V~nCcP~}hey)X$K$fxTXbk`6_EW8*X
zjSB{lv?{@{RHzs^!6O{x;CDH!e_s;nVmsRyd_Ajb(n0oAX%*&|D>uv=0OO2frxml|
zeMdyP&?bKnYx>&XiEybLv$E~V^YY|ma(@Bzpbl-UbwszZ@cj0wvc357_sj?^;XqOW
z;B%b+0JLkn@P~u^RpIS!9Yu7z2~zD*MX9{<lzhR4at?mu3=E!6YUg}ye=drG#%~Vl
znw7-MAZGhZ&*meH;gqt0&@WC#1#<($I{XG0#<8hJV8@iA=0WA)5H^hQ!96`q0D2O5
z=;|7`_B1*aUuu%+SzT`#7kZ9|5r!j<hpFlfTAb>>EV0&p$E4eZxwDJRX>SY13dYhQ
zWlt;+#Kh<70p#&sT>6f$e|0=_J=Ns1KuB3Pv1BBYdFzwU<?UJ?8r9~q)nkh9Qq-;N
z(iv38Z8VD62<(Ugk=91(!1<1Gl4t{3FNMA#mQ9Ln0UdWpzz>i<Gq?M!KVL(L{{Z1x
zc!b<M3bxHEGO1A^9ZLXt9X?Wh#t6=9sj|NCwe5wV)b;&zOC_tUf6<vPT@<hbVc_Hu
z#s)zHuS#r}-V(O6xht*fb4~V!cwvT1l`<e9f%$+Nw=<mQsn4+h^F32cmr1-9(@PAF
zV@Wd+Bml}7bpxCbe;TD;r!A+$JG-0NTT#E7H6dV-tnS4|z%!KK1<2>ndkWyS=rsQT
z?OB^dj#krxua@L7f6vM{ADCyZN8vyjG*h-d(A!%Ka1J`t&Aj1D7-R}MlBWWIBBG=)
zOsTxY;cyO0oM88$K`GgYpXd9(DfzyX0UZ@D+2_W5nKAz9`qNBODuywzQ_zvYpaxM+
zXrw?(BQ6dOMmhASi+S5PhC_}H6wm}zRDubanM6)XoG=P_e?IipjoJ1pF@NrX%>Xuv
zdc`A>7B*ryI2px1?6)8D?=Pp^Gyx41@eHh?mNy{uAx|{FXP74c047bi-JPcx^`Hpo
zrvzphRVR=*9nV2eTWQ!5u*h-2!kPezic$z95J4S5q@V(dD4+t0D4-7RPxwe@)+{w)
z9f*=USk*QMe^l7%ykvDJ5_66-^fcWqd_kdD-C0L(VJvMX=ktp(Vn7{;1ZN$4^H@UT
z!-Pay((E$F7<FEZ!2om1^OoF3F~%t#Zw>zNCAIJb{G^ePKku(k*V?s8HrMn20Dy2*
zsa;K|-rwQ<d5*ip8jpz+Shu#ik4Af#3fwP~8#p0Pe;hV($vli7LyDt$;$3ZQ?AlvR
zG#TZ1BXovAAYc=ozx2^@fO%2IR8|(Jb>XSC9ol_`)xDn2y6w5QXV9_Z8RtDuPB3WA
zE|_4oSYVN5S)He52Mrksv;n)Z59!o%T+wpoY3y}H%blmUr|NW;y2h~vv8h_D8fbYZ
zK{3OGf8XYCHzCVqj(%cJ0UQj2Pfh;RlU{vp*ji0HZ<lL_D8cuk;PctI&!^I~{4lx<
z+Bb}3lF~d2Y}kFGF(bxy$<eX$pS${Uahl;PWY<&^jYoc2TjY0*;(dA<ZCA_F71RVs
zlW^J;F#zGZVS($>SKJwY;V<zTTcmAgrZ`6|e;BJ1lY&p)_RfB_=hRiHQ?{}Ef8ZT7
z<xNJ@SAMqr8QV$YJ!LK~ZJx(VUo~DwK^twrT#<m^><nkncEwExj<uV_j3thc%e9b1
z(76W$9!BhUADwV?R3{#5wV)|On)cJw?4<D)v|0f0SrIgWB0;<bB$J*Sxo&gU0G>u_
zf6&#uLbFQg7M`J4`H8vq?soGIa^LQbxWEI~JRKFCMBBU_m*4(IHI$_*({^8f`5uE0
zi2Ol$t6N1Ko{}ZFhkBi_wWCBWgY#zq07v_vdWzK+zBDjI;?GJzUwk8Tf1{9!zbMWC
z8wX7CPhxAzXsB_i(qD)C6FEY!NiVzpe+k{$Ynr{q@>s_9Lg!%yHWL+)BrLgR-IMa}
z_9qAF(p=m4zFqGk=vyI)*hCDVVTy7GY-||m!!YlG<P=tkHM=)%=d0LB;;V~TE^X}m
zJt|%^NU)5sBoc&@r)kdKq@LcG5L{~hDT3n8+Dm;QB$h=eOp-1R{i8W?xShQQe_IET
zGm7&1DTwt8yZ-<cS?ddnT{zDx`K-{Tz*P|tc^MxmBe40o{`V@^9w+eam)mabbcKo-
zV~$B!JdQydK_E9I=aM_I_pdOHM~RC@#aO9QN1+4}_<}_?h6wB8@oukic5We#(5g(o
zCL{{SY=9hY?g`J)eJPWCLe-^#f8rMQQSWmhbVd!hsa)rGC!F)#S11WnkVrVk6qJ&8
z8?}zO{6y8f&FN{Uq0dE$vCxci+;#r|IW*z%A6DHH$!Dj^@vhy{M(1$!KQ=Mfk8|r>
zeH6rXY2)oeI2skO)Akt_PEpUyq>z6909=xD*F5#+ofpJCUKR#BdleaSL{vm@LmaRp
zcTDr^o~M(ZN{RrQ^5ySuXS<Xrl6e|N3NSLqCm)?dMHB#0MHB#0MHB)5*%AN>2{<M4
zIW`aw&}lN`ACrX`@P8{(uG--*#Drd8pLP^Ix20npNczjvqv=)yrmh_<(~e6FH@Neo
zS;^$BkJ@?Sd&k##5~#2M0=TS&opNhHgXiUtC4SPd*T<K-PxK7cShh@n^#`Ua#ZY^g
zR*;hryDvp7%>R=FFiS#nf)c>#@9|TWEC9GNUbD?AN>~1*I)5R79VNm|QlXu5a<XJ4
z4XStG(QzWU7Y4FHh3K;So1agA^;v~mO-)!{Lf&c%+n}CP<&CL@gh9Q@_3nhBP+~{-
zx4E8govO}pCz&Ysez=#>Y@gmjYE&@GT7-`P5|TVuyNXwk-fmEOnm7ZmH_A?R9<)_!
z>?G;}sC&aulYiMbJu8*Opcat&2wD~m*508by&6nj11HF6LYht|LED;rG*tBmTitb|
z48{Yq{VxUpm9OSRsMv(O5oJ$fhAB^$m30=3PoeF6({-Q;IJ5CSiFfh1uy(9E=W1}3
zJQpm+S!OJmeZSmkp3gI48>Z^iaWW)(Il01n@BH*nmw&^rAL-4LcQl`Bo+EuJ>~`5W
zF+7bqIAb6~ql9oXlVPl7FTwx(h}~Z5lS)~qo_0|%;XlhM1^;;b+VOJLxB6zYv)1J9
z^*kS(R4U(@y4&vpuX3csa7mtu=bBx$Ym|yRMsvjtx8>NKU_GzHW#7EL8S?oWa@+=k
z!{^FcD1RD_^q7YL!7IvUqHcgMC@5&XRG6{-j9Tv26*l_08xVpAZ6CwcY6DuZB?Xa^
z5fe`Y1;FG_*)}o9Sz5blkuTb=^f2Ku#$Ffw9m-)<kyq7JJoU3`zvlj;3pAZ5`$o<C
zL{)JInZy61G9+IcCPgKJpXn1!0*3oB5jx};ihpct@z^jOYxcGabMu5Jvc&V9Ns#9A
zWNY~Qx+Gm0U8{BenFY2RDM!TCcI7p6)8W{n4x+J;bk$s<@($9{NDV}I5*Zc=`yIW<
z6LR%om5d&vPDN~u8)X(h2dt^AuA~1H1kFeUw?3>+ajRz;=hVq<+=|`Mij!&nd9P#u
z9e+s5iODlExEV|9C&slRTu5`=;Aj&tuJiP%d@k@7m<6fdblL#^=StvRN_IM%qezL^
z4@yVa{Scl8fk@VZv+JOqbAtq-&A;<H7zHWAU!@uLos{e5a4N+JydQVjzQ$u%*JA)H
z0!@YKOa-;VI73^@J;rdC1G7WC2-I|~l7DwHk6VD6kKCSt?YMF02F#L2A{s_!|AFW|
zBBZ6)g+KPp=5Af1(>p7)QUqHf16(uktcJFi?d+r^%eR8$g_IgEurcRBk>k7GVclzk
zS{lw=ow?S{hQ*yh>`ML{w=DF{5@E_Mysu7!UR-*6Rp>S|p2hX%r=8Jr1g}h*w|`--
z3~ZccI4O;GobFcVQ^yH}PyY~JTu>HAI|fD^zqT%n$BgWTJo&Qj;!uTfpVQSYl+C`+
zo+>rpRwO&=*Ex()w@x5V5WNnCa!S9aGw8}A=Ejd`1q1G(YNB~ujnyA&z@Sr~KBkHX
zY^FDZ&w(#!hoS%$GMpFh3Bh7eB!A4M&dZa~#{MglUS;#O1CE^@C<yb!4ONLHFzhhB
zqC+64*4rQIk|1svdOm#SL7s;$81@2Y^a+XKkx2hHa^xi3#i}RgjH^xk<nFd(xla3k
z)#h=KL7<XKzdo#_cmT6Fa~J$;yNuLx&YV2aEn#soNoGEd-P$l{>L1Fb+kbE_qqz)&
zEaiUZ17n)TdDW3?xh&L+tuL&aAnX|0>mqB-#TS<V0@uA-gXu`C9n$XFR)40X_jo%6
zYDlHIq@1mdoACRf+WeuOq?N>7*zirJpF45}D8}r8t)>^$ynKb4YQ%_&S7LkE;n5kE
zUD&{kEb0Hu9?=iJ*H}<>Tz}TPMD$yaJU$+W_|!i(OO8xTjUP`VCnC53Sa>_GCuEna
zc0W#Q^2UJ7F6SoyI?g^QiDn57aJSs;kAdh6T>FM(@qe!)zEcmZnZYe$OM|PRa+yAE
zpA&soVGOStCo`={ig5a=pH`Gig>Qz&W0)L9Z=qn|WNa}(XTeqykAF>0Pe(iPRu&Mp
zI0!A@tP1rwVw&fEN5{n@w=5`8yo@>Z9NyykbM89R*?!p+8^|=096L3heGTjfZiaq(
z3C*-{Ya$u0-zus*uQ=U|YU%#KDqRB6Y+z&NlJ9QMP*|$Mgza%|cuu&)^b^yhL0a|M
zI+sV7Vx@+=r<w-!!GCM!bWxh$#kUcOV{Rs;Af_;T*9ew~D9kFw-fDGWfLBmNgM%*m
z$I&gYjbj9v^=i@Dk7QvVU5|mCmX)gB`>hSB*^${F%YTNCRpA%}wnT-WCAKkQ_|f|r
zN)w~p65k@p&QUzLJ(b4MFOv?JGcz&)kr%LP?p!e?Y{j94gMT+fHg@mb>x4yH?IhIa
zlW_=wN`;nB>PA0Y_95UGzt<44(ojjnY!4=yx{zsq>BJuv=|pzz2R#pFR16X{;}9D9
z`1qUw8YX$kEPSK8ddCLDE7HAm+z#>HBrg}NfmC770_(6Kl1TDgcqgP}h)uJq7oJ_3
zsua|#WK?mVzkf(h+sgImh_Vm;Qvi{=X(|yur)_J0#=o*f`P0+RtvqQ=twnEhBJi_{
z{XnZuAgSg!4e?S#K<gk@N5dDeQp%!TY5-v{Pc8$Os>#&Fu0|x~ec<)52CvZL0UGU^
zb?&ZwH_Cg1k%T~p)!Z@9aq)t7<5@qDU>q#)dU=LdD1VM&sSgC}Z-U?|@KFJRiqq+A
zn{P-YtsoPTDE20EZ|<mVH#)q0azZ|r(I2Yw9-v0qLq<8I5U-7-n{5}NN8;rSa}65?
zkv^bH?yVAye3L}E`fEh`6-vdZvu759$XaZNP`GYQv@#LC{PJF#<$TJg0ql3Mogqei
z`y&(j_J1hZTIoxTLHOTh(AYl?p=Jg$bK>6={iDI)K6df%DD4jD!~I(d)*4>be(v|B
z@xS<cUVOr}N1mms9JlCcpCHV5FRuD}`a@=~|3eCmQ{Lb(|5y3{<!sTLhKLJQ07{Jo
zJ@&w9lpRbaZEZRaWZ~QvsUxYo?ielo-~EYoGJm1E<FG<yLaI4@z`PYC+o|Spi3M_)
zYRF<j_KfjqE}v;iz97W7*&kX2@%aOU`hNfR2m<*$^W*0}Ru<Gi8NQ3wGdFc0N5l%l
zR;QIaSj4NiUF`WygHku+hl(ZDLOiZpydCxo2hM*W;6N<k3$F|cn;>IcPwXs)Af0k<
z_<wBIX164rt{x7nk{CVU7vG`;0nZ3`_ia*%SVvQl{Lt!53Ou}H`Uj@fYB(I;8waoZ
z>b&$s@vmlsJ~Q8^;DU8aswg9O7KyG4`P)n=$?6vL9(Qc3n9cBRE&()gCp?TMTE%~W
zd}a(&r6M*1$qp;;8-rO#7Zry3V+&0&=zlqI^CFpIw4c<Ta3yQQP@-krgyU5kpjn<M
zK&w2D*Hf9ZFB`Gj1H1rYF5E~HMS?%UJIKr_PjJ&0cVlupal8Rv_&ntIAE5}5HzZY^
zQ#^AY9r&XH%5gho=T>#Gjlz&yYg`a{x}P4aD0aqaR9#*eo&TU?M|bjum2uGLBY)7`
z7J{gYmaj-#7LayT1xL;1vv|^Rf>O(gbq21CAn7M3(|<QSwR&m0`V6^GGS!?l3|&h_
zjjwc}pNs1HK9%zrs{OTBeKoi#04gKkMwna!e1|W?DaS8LCE5!T|8*?fENowdg(*aC
z2b6y)LQ4nb*}Q)e8i_JQ4(WZDmw&#eEbCMD_8o7E)AfXPHx56`N*Rl=m4rsId4hf@
zy{bSP;tRp?IEkX>mOx^><`q8f`s4@FqwJv6ZShgv_4M2S6VDIdk4=$V+Pfn{8}=+t
zvJSEq_|9WZ!4<+KbS7Zt&KS@S&YB3ubxjUiI@=Tsm81T4r~ps1G=EFw-G495sFTWp
zxzukmSlEJ<uLuo=J@lw^1alzl+K(HL{y6He_3L~v)Zs1GoN#aZWxz|EQ)xrdDQ)06
z6W{HEwcLPI8!}VM`@baPqv_;E2TWB*Tz5kD^g8z62kRyymW_2zK^C?1`r?2t)QrnQ
z3Z9N><J20~*S?*uK{XgCOn<mrz__*4dtUn~+$>~!i$K4ZqXYQLL|6LeyVx>0nt9_|
zT<K}W5=O-%q_14VUDDy2vc?1OI=C&=ZSw$OEJb|WE?QCS@uQOt#~|%F4)dXG=Gfb@
zjZxR?J!RI%{arAfoI-0Z@MVK9e^put=YHoj)W)Bl!@&!j+zsG66n_O6DMzZ4ZG&hq
z2%~Hc+ruNX42dq!|Ht_q3g4>tRnE6x9SOhUs}4zlD``ZTc%g{OLun*VcXeK1MGGa=
zYarvUwmSKy#)k>Nd>f{7kg^kpe$o&<XQ6O=4#@DA(r@ryT5z5u{Vr}2uBlii7>BTG
zo<ELo@4M|PG1v-p`hV7GRO`y$PY~)#Z@l#QN9+HK1xw5xwU3+hXT&Z~Y=Y!^Iww`4
zC|K9u)QW2iUm{skMX$IX=&tm(R`c5LiuTi0O_W7~jxWxiS#J_SVlsRzXN_Iodj+C+
zC}nEMKzajp8hJnibOAps_^h%*bU)=~-oW~C9w3H0Nw7X3B7fB3+9lS3aAz=1n058p
zjo#M_+DV%T5_xT|f->0Zg*BPeaR5DqlZ(UxSgY)m1Nevh4r#YxW3l`~0nL*pD1Zuo
zm&ZPFh0NQT;?>Zv1k-$J5)fma=QY;a{{aUe3JlrPxWfZLW_GL;iAvy|Sw`BY@u55G
zO)z{pC>R>$8h^hxBRZs<0^(!?AyrVF6dzH$din+Oo<?s4@$V8ALwi=hzAny0-ciJ}
z%A3tH`K8~C@cMJJ%nhNe^h~bR$YQsId#|hRn2jOSB((R-EDyY4S2_t|G^N=xQqlLl
zrtOSIjB}tAflv=Zy+mF!&DGol`&h~(h`t-MVdyZO!hgrVtZhpR8W|~6k#EeN_~3ac
zja){&+@9{<u}zW|vD~Q=QPre-;;yVB0@kE@MMtSYJUs}C1h5(e1m1$D>&_aaf~ZIS
zPi>skqZ`ZU=k}K$L4@I1M;|*S7Ckg$A)R&!;JbHhQ{WbCS{>+w?X8>I5D$BVTz5@x
a&VeHE+7Y9`eJGj|@?~PMWFSj}fDV{(%j#DE

delta 10923
zcmV;cDpb|vMb=)BdK4IS000)@00IC2009610b2k77aEa{egVXj4FMSeA(JNoE&?tC
zlUD&a0X~zE0Y?Im7L(ZlumL`^iUQC9f4@VS<?=1CBURbVNOIdwGRH0RbA}nFOAepq
z&5Z)>P(M%NQ^&q>kHaRc2|-(Jn*4FZA%k+08!<joXRyZHZ09HB`cg|P{`>waXqoqL
z_)IX!?e*t5=sH(KQsw^uhCF)mm$rKTGW`{U#Bf_Lh)918&1n~sxrQJ)Z&9%Af5s~|
zSddw109Xah^rLx120{C;-H=Xr$v-#u_~Ny7$zp#JZ?^F%pZy#GaUfOzXYS-+b?2pJ
zO3@2FC4SnZt?Z?vQxFI-79RtFo=40``74GG_mBPw=u>any?;OWZ@6SJ#C1JIf3jo>
zH)7oKVO;y1mgqkdj8wiv9(Aa<f6#6-y*$Gzz8lv7oDBQaaJqkLY9#8#m7MLIftlMU
z<{`UdKbWcR3K=YX{cuXE@$FcnU)_GV80p@-Bk=zK!yMI{_N`z407~uUpzC;(ZMhm!
zv}I$<vZi0;ewjGugX_mVsx*Sr7aKHNtl~|q=-7>R9=U81I{yGFbTU95f7rIBR!y;w
zm7@xuBlpK{nEwE4y-B+XbH7}PfoTraNXMGR4=0|4@z1Yntv{<6HzeM_`cYcqJ3yz)
z(e5LMf6N~{!N9;A=N(Dy$f`0VLVG}Lq*%<DG2`ZtWMq2hx8quuC7x1FxU)#5h>=3=
z0}2Tv)SM6a4QDH>v@@IHe<Vo@0#syUka63m@~V_?O{Kf^{{V+Qyd+$(mg?{QUHiqw
zi%;0wv`f>-<Zk2JudPj_JaKB#DALeHCg_E|#>X-{DO4anIx$n%w_1wU?(S8(X4Qld
z#OeVmr+!0Y^jd6ifi<=H)^{{=M(SG`LP$Ny0FS0PuOVI&YHx2>fBygg;iXg9PEn}!
z+pGN7<Z9|V9<Qm{S+$0f9C17#NXQ_JNJa>32FT+X$^5!jP|-Cejjz*4m964Y0|0=L
zAV4#;az=U1G0k7M)~}Mv(N|vb(g^b$J7XmrsT^nW=hv?_V@7v6e7;|dA+`o`#wlW4
zmcsnNvGoI|_i{NHf3BERi<RTQq18^eH^b1({>hyTa>=3GubNCry*B*dE^-e+hF(t`
zpF>i%jx?<@88uBMlW{xQ=1^N1I0JT6;~ZdgtDYp1Sp11cis029CoVjw&=lZhhdlk&
z`FrtJFRZL}`^2?x6DdgUq_>7kg-2#lfEz1<LvznL;<T*&f2y<7(@)5%&)X!Wr>38g
z%*rg9JVmFnyy`yAe9}&GK_q9_ACav~2k`7<E#`-HaD0?fBaw&i03n!={R;wm3<|S9
zg{-aTx3~WQgqjDrj%9@+NK~|BmSdlvj1Y6^O)?E9N`iaKRq;H3xrqwQ5kfXWVxSf~
z&p7HZPkNYAe}%0!{!Eodi&m4D-{?Ih@T{_hhr?IzurP2YW0C;xyX(ie{A$`A8DNlI
z_;T^2^NB``$&W9L0yll{z0av1N`~NlgH>BQEomCsMe`ox<SXWF`MMsN7#YX)DRVB-
zCBWBrl`a)R0^|}0uY3>6xh9-v%A2>VI4VWLe5t#1f7Vz03s;GxUce>MJTa(&xRB+Y
z)B&HaduFXgCBo_U@J->HhPf8<Bfs`q?s*HbRt=88sOWz0y-?FNH`1=BwvSjM2yL9l
zBq)Hpec*wZ90J_;=DOr->$`<(PaH?(#HK=8IN!-oTb3gO)b#!#)|05|?YEu(0LX6<
zI!Q%sf4;om<Zuz#YBEbZ&!yctU=Z!KKPlWh05EU}?NH65YH_o(X?KyJ=jOL@fu1^w
z>#bvvCAzqa#!;puh)XGjc9Z+XTxGh2R^SifA6j+3pxVu}OMl||Ac8`kax%t_!^~yl
z2js%2J^K1pduc6J-#_v#;^%#BZn``EM<-?Bf9*?A-S#+AQn=m($O>c=gOV}ApURzo
z;hkelvp08ko?HR8Z}U;P>Ch5t{)cicbs=j8vMo))FD=umm5r5HfI-M&az;aA=I>oI
zwv(#p<{R%7Oy)@g%M;HZB!z6`pgaON>{D-HT~T*OY?8i*6?x%}a>93peJ<yE47Zk^
ze_$Vq<WnH<_N#HJTxrqSvAeg=n;SB&zzzw?ILEzu3*FkR>auv;v6;%;N}g6E;~<O!
zw~?HlpIWUAu8C);t?GEZE!EcXaLMI-;O;w51wlAmlaNk*YJ_?H=9_b;&E(vO(ok?y
z%u+|!2dBM3G!om&(aePzSg8lp93R%Ze~aA*!<SNhwY)@)Gt3%QGR2l0?&AOh!1=iu
zJdATl+82iIC3m{l12NoprNl!nUC%sZf&k~=(x=|JT3F#IuG;IuejGEZ+W4jgje%|Q
zlx%#XjtJzP-`5>ZcB7%_wmKxU!>vbmdaSz=Hc$vS$lJ-|B<DYcQ71_hx}-Mie<8B9
znM8K#5-XI5?O2(6pddCGvyeF$CZ}Vm*y(rDuZJVIfut`a3v#GX5ID#|#y}h$#PP`|
zIPuM=&8j?d>YA;n%zjIuo6Km!K1c_50OPRljB`t^+-df4I$8L)Q@WXfIQvtwk+rd$
zE;2|_jPakwfH#wTx}2ih!}>?te@n|2`0fLdC(0Y7eSUGDqjcn(5?$)%+sT_kv$#Wa
z=1<??1#(+!0)r|RKse9c>5xTv@Ai$rwXpjRuXrvc+%92?NlW>SBYePc4p(PGl53#w
zxQVY>^~;@K%940QQZTqyk}<r#-!C~}c9E0QJ?H~^)(u+2IMA#X2%wn^e~mZ<F8$vw
z)EjfVrre#qyVbatTTP;E7Si(4W-^!_bpQY*Vh;5L0liP4@`Ye)-)Bv7`ScxH?eYPF
z1$o5Vh(RXc>Iu#X>(NGf0Z>nOtIPeKw$tlM-)BE)XpGL=!!Y0$0~`*A9G|5Cbk^4z
z+WnHt`zj&~k)i~=05Y;Me>{~e237gUBZVC~exZHjX*XAQdM=vwa!#z^+_P<FQGtUW
zA1*QI2>RAvhIULIKN1aLqw~<iAr~a=3g@Dd0Spk1q;5FPYwDJM7V_ne2Gr(&O68!M
zE3>%lA|uWK#v@)qC)f<o2ReLs(MxW!==Q-Ojg_H|fJVw7AHsM6e@_`ddmXAD_)bXq
z7fu2#t@4>cEX*)jiCni+*S<X|{xr7m)wD`9x0K%*a>3GNK2~2D5&`@^S5Nl6tBs_*
z#_fF$zHb`a+%%?b97wWfD)RyW-mCx{F@d-7&pE5MzY*iKL`2aeWk~$648wtpc0f4o
z>0BKY#C5OZ8wn*Yf8HFl*vzi+hET4-TxEvNd3^o?vUTls^{b_kVrzK91u=;?0&-4I
z1J@sbtcoZC_3iw3GRDwZ!)~e0)lhPM`04Fi<Hk0V-?aDoCB4Eu)RQu~4Ye4IARBuC
zIpa9(T$L4*qXv?(6=}w+y!ZRRBd@seR*LhgL*dIv?ZnE>e<6tsjDtBC#sMUb{9>VB
z7TK-M+b@Ug*4}8<Qr$v@LI>VIFU`+9^u==2Qu@6=>9Zw;rQ7jl#;L9?^xkE)lvZRa
zpec>Y6aWBV0q8sA`{Rn+e;=@o)*UeubD0KaCu?mWV}Zasc<F`5a%+sDw2UJaWNwwB
zqP9nJJ|ZFee?rZpB=O1=1(slT?I4ff<m7eh)21ph<J)w+OQ^IcBb-OE<yirDIZ_EF
z4^5-D_0JVWP|n^DA6r`^h_nbqk05uD&6a#;0f}6mz5f9E)lzR6TQj(WLbie_apx#t
z%_akNET<=P2IL-BoP&zw=%5a<JZt0_O}&Sg<*aG9f6n<xLdT#`IVE%KxbISb!f_Hp
z77ZaHb#{;ypK6&1#^M!5@8Ql#$X{}6kD`D(FZfO^5*clw@b#=#lB<S=Twt*=m2B<p
z<^KTV+0I64w7xQF8Jt;dml7f$Hz85NE(k005UJIP<mVj)a@0@<V*WUU!7NFl!WL;v
zlJ0dSfAb=_2ju8N?D`*S6UO$)%m#yQ(X<{(R&a1Q#?iNE85tvP2|tB#)KCX+ACIjd
z^8U@?_-({!$f7A!V<Z#K%=I6RPqs4k-xJ&Gc1aP^qlV#6{Co!mh|Y2MLBQt#5IOI~
zbCggAqIi#5)x0rtV`(%xRl`dH-Ykg}nH$3{e==LI2dAm^IkVxNcUkd;)#jZIwu^2A
zCV32yKGp_AQa<;6-8+nq^~-8cq9&rB@hrWww|g7~k}sdkB#|HmhF2KJJ*ZZ&k5ai?
z%^Kn$+IaF}TXU6=1!j<`Ve;`OIqCWUce>Yu^~*WaU3<McS#<K6g2e<<v0|hE2;I{$
zfA%@+?N|}~WbrIXZi{cG;ua0WPB-8YhQsvdI2hy#=QYhHX>|!F({xQr-p^=lvfD7*
zkG<18WFGaDnq~Z!>2Q`eEd%FdixU-Yalyt9JWvJX@dLrD$En)cTS0K5O~7wtV&R8I
zV}Ju-4{rS{cS-o2t?2fV+e2-q$r{4Yf1frcCBqgZoG|C+JuoYjeKP(zVu|doR!KoI
zp^1TTG7bhg#t-F9y0E;lDlaW3w=efZ(Ui~AB7i-T+f(s2p?5BsX>+4n%p{GTWQG1&
zC54DQxfucx!5wgMTT?HLVz|F|pGFL1W_SBEyM9+r2hYY!WO0+p>TArbpwc6Ff46vB
zRhr!F494A=nYNwS`LW3{<LY{GR&L<XJgb>g!g|aq1AOgh+hZF@1pN3IBz{x@r>y)r
z)b-tS?J{c?5=$`HObEqS%LNGPNWqNf-#&*NXNdeL{u{Nml56N^dxAh%fgoX3i4D+?
zook{Icx+0j-VoM=-(}h52pc>9e*nG9bJTNz*P)^h_(rAj2mB&hxgpnj#cW$3V=I#U
z=LgW@fIRMs?o56ka#|k`YQi-D5^YOk=U?{w;fFcok9xXKg(qMa!dk#09FUgmc_657
zzteZ>J*WfDXs+%nKMutup&lC7obTA;NJ;ZBIRI|t<o3s7$3l@ViqKrVf4&#gl^0+S
z6{{V9M!T|0;2qgNLMQ`;qP+qOe-A>;8^Ze2#>~u_v?aFT2;{%9&$D*z3s~q;+espL
zXIyFHR}bb}IE*$i&(D#Aj{Il2!JrNniu54<7?R!KJ`~kO%NBo<1HuNu$IqM$kH@`3
zr`zap+!-eDwy|*mfs}2we{Yq8vEBF1cq$L3-+BPx=&tGE(wgZYlfpWhLe9H(z~Wb3
zvJwZ)j=os;3dh=o8YED8S6&#@qmv8seU$FT&`HT)I_DgH(VqMOaI{yUUE6qR+GxMw
z7uVt7vf|$km<Ro?gCnkb4Ad||q^0otPlNR|whCKfTS#1h5N9R(e-)Hx+;`0YaCBFC
ziK9m(h<qigJW2uH_Us%nb|*M&V`*G;`=oo*=e5vWN`K)N)}vM%P>V7GxIgdv9E|$o
z6anY-SE5><3?YIkd?~BTA|Vn1Y;wm3oNw)e`5(fk*)$0}z@8e`ik3%Bur_ePunFJL
z<YU(v>BRtW)K=Gue-hd~SS_xbbElw*a}C5sHZ9Ih(oP5C+OcQ=qKYU0qKYU3rMuJD
zQ8toXYqo3>-V`6|(4v$Lw+eaMSg$xd8Xr$7aV*1Lv1wK>v#V}gGHelJ{`ol0I&;>m
ze{E^lh_;Clc;ksPy+9>UDL4zx;tL$-lkG_Q#+Ke-8Wc*de{u(#_j+_YeLu#vT$b1M
zIBGmcJLSE<?cdeh=`~GnRfAC$kodaV={$@HQW%v&lgP;69{e2OeJX(Q4zp!rrmS8e
zS%1=GP>hjC(1En?EX1CC#~(2tbn}YL)OFoH`%(KuS{=Qt8vroGz+~sHcH^fVJDzH!
z+Ksf3S;m$Le;YwN%I-FkBDTya`FahkdC2+C7~;93&CKt&$mx$iJHFo|Yx`?cpITur
zh>=CSf++4{MOAQQI5_!optCkkcJ}L4ZUbxbB)7V~s<K217LGW$Eaa&QM?7ch{`ot8
z7u9VSK=Gz6Je9k*9#m2CvGFGvCq2b*RkCZU3Bqptf3mm99c-Q<)>bHB{{V!FCL4C)
zBTcD+$2c8`=dOL$m3%|2+s86Ru39QNQp%9T0on!#8+gXijCu;>Xsc6&wU6S?m`)Lm
zr5nEIRX>Y0>2787b(o|v!gjENEI0c-G2Ht1^{Fj<W#R`|hxXz`!0-8>h;1O_laGA<
z70A(0f0|NltvdpoFMeGPqJI$UGhRerS%KZl0_G^ff%2Ys?|?b<sb#yo2S4zTSp|=5
zxk#e~vXdYf1CSYs$8+1Ia#U7z6O^wPWMNh^oUaGUyKniOeWtmqOFfR6{{RUMycVV`
zET%ZXgasr5alzxRbCX*We`p=IPvc!7rHM>xf1pB0Qc#=@pLtaM7mrHwiYgo?_Lty@
zl{${rpWu$N%Tl=1B$CEmYCC<(?$XT^A~yLp?axt_0dby#rEPt?Q@CiN{{V!>z+y!t
zw07tai55jU&mcD^9)u0TyylA0D;u|VdO*6=(k0pBeJ~<P<?P!K03P`60Q3h3fyXsv
ze`ePvvxiW*@ok(|w<at}C9FC5g7pWD%io?hpGxxTb4cu=S=fL80G@;VlT1f{r|K8?
zmiC5!7-{e{PSBz?ykEEhK?IfqjNoKsa0n+HGfk6MO*yW=;U&}U5ohwFR#;Bpk;b8y
z=%E1}a66t4153E=3zL9y1psy4C)TwHe{SC0^|&=RD}y`{#A9S3ff)nb@$Z_ied67H
zA$UfrvO_YmFi2t<1yr!$f3=RitC*su&ijt)+Z&_CI`Be*{{R4%IS|GUSnfRS$mgHS
z(xm?YgyY12Hgz2CIXj_@`g*Uh{Hva#s7FEn013B<Jmi<{$>ty-SldOA2mt>8QxBjY
zkft|`wf06+s2!}kND(0IjE|Rtj{SHZm4!tBUe$Gr{ciW|nvKDpeW7=i3&+p^JDQ_K
z6aZ006aZ006aoL)5&#MbIA!uYHV_cdX)@6*lK~U(e^<1rl&7B0Dgn&L+djg3gCJV}
zd+7W-sA%q^Qqm@T5Q1iFbf!$h5!j2=ic?J==z0bU0>;GQ=9alBokOwe=avkBdv54V
z!CP^@d$(x0)(S^!&@oFct3dshjp64>#QvHz4o|#qw(bH+lbFLChG{QjVETj8xI;Q-
z5r-gAf3W_L35IJoel8#uP#3AtW%pK8nvLVia{9SuIo#1Z$@>Eg)h%F{9%|F1hpNhm
znW+I7n<j0(xLeOr4?_O`fw&KxCSn|+FVNw+lbBNB0CS}TPx>Wu;?NjW)4lyO3M*O%
z_~_EO?N7$l)pGi!C>uNxzZxw$5Ra_^7QebGe^FPY0s0>K#;<V#eicEO=7GzgSuwTO
zD$xO!^_6RfNSMZx%?@P`6Mv46&K$RdSTX|QU<rd(+N7UB#RYwUjF|R}j!a%MXRGoy
zhr-DbbO$~!X1P!}8u5D$R0^uG@XbRFtPTdy*n}(1wa6r-UNa%0YeRvl9Mbs#ibRf+
ze`K2^%BZNc9O)JQF*X<=WSs}sbp6vY1F53FrA-y#8PF#Rl40u^K@))<$S~7b?lMrN
za1`CQ6QT>13kpUDxsG2M-($8-o+-T4+m9_2s)E4XD*xAuAGUp<b0IsvZdkpD6}e6p
zyvD-JOl>wmzF_sx|5R?pXQ`A9BF9UDe;Wn}=Ji+4B{2c=1t5deP-*0K+>Gh`YOw2z
zJwW(FZtLU2fN)`{G&)cLIY^_^?e7=rbc2#aAO_!b5IuPrEGY@dp>VpJzWtL_rQ-Bm
z#l3%ki8}mA9&GSn2KVX#fhO^8!Q|!3^B10-(-ka?+h91P{8GkXfMTLy?(K^%f7fOQ
ziyn|`7KBwpso)`bNOOEljg3XjB_Z?Uu^w#7A<Vzh#<r|g)zgTG)k+|zmq}9r89=$a
zBNuS~yXG`CO<fyYE~G3&Z1>;v@7AVKNBToT=eG+~`!XAnZr$-j{6j_}1oOD{*2irP
zFuI#y#SyzO6B_eWpp@ctg=@yUfAP}5yy(W351pC*{gF?{ohK(m(fl;F)v_HMU(OXs
z1Ptbn*I8SjaT$N)+s@l};T(s1YA}Mj2Sy!<40UNX=DXS?9f*_EdzO{meyaq1SQ;7g
zhn2Klt&03ON~Q9M9Nx<@Ue}J<eXLhNl}+9OY&-%h%o%#Xx516T<s*OMf2woT+Jb&J
z;+zw%s2^I$>1i`Gcn{iGpjG{*)34slbD_Gy*QPKDKS879(AS>p%(f}gZzNZ)3ndPb
zOALy=!R3p``;9WQpE#g#S{DEutOmI#hL1UTCAU5YRpaQWFhA>l3k~&?FBXOHjb)};
zTouCROxCsTlzTQE(T-7ffBliyE^e(-0V1zuZFa2zzi7!2i%lf~>O}rpHD}0!xuFgf
znNl%EecGM|cBdL{?9^5*{-1-vJ6G$1qfA_V=O(DD#IVJrocTFgT0*?UNt#3403c<x
z&g4Mn$+<xw!HOukF73dQxxXf^0XI{NhybD=M}k_T0|-Ez>rR|5e@Vm0fmZ%kWL=wM
zEGw7M8y!AYj##oOrxuA#+#6%DzKRtVzPF+<osyWO;C}n-feni~9SB#b(j%vb<kjin
zHo>I4jvi@txF3}cPQVUL{!v-sDHz^WFM{X7;DkwzskX{Rg+DNkmIH?|Hl2!==3!%)
zx#Jl>98i|A=G*3&e@V{R_U0xkN`srlrb6g%5H#_00z@4H>V{J^b6%uz-?t&O{=Yvk
z#nZF5QKjfW<q<h9CZ(%f?pxLFQ-XPu)bv)#(j1wktCs6K>IVg~y?tv2KTSkv%geQC
z#BDKfjE`l_vQ6_!<3h22Og-<0OhvDFy47e|j^K<NZGTRYe;v1b(__@prc*h}!A)_=
zp!UU|Eoc4c)&TwSE|cc5@iHWPQ7c#_=&)Zzz|1WYFMj*($AXP;Pz9Kh0jC(pp(ah#
zI;NTwX>!x&<l2~rS@h7<PqF{+B8_GNFXP!E$RVMgPqDq_6fj&~j~&1eSUXt~DBoyE
z3h~tOe0C|3f6;8Xc9eeisr2wj)g8!pnu*@;t&^C^PtE_j?gy@HWra*4j=cowOyVij
zDNG*8ZJV+$y7W*alj*TVq!D2jA!ZWsfNbCw;6&LQErMVDXhh^>i?HYoQz^*Nq(K@#
z5Rtg#iME;Ohk(rXUGZ8?PP)9rxvLFQVVwG|3h=x9e~oCCg0;WPdI5x)92K`OTlG45
zd(SZMRUXK7+|MWfP<`vEXcK7KQEP@KK1S<U(m;r=$_M5|y1rx8f07fh$UW8<f5aAP
zp~*6QK8FtD_uEM~1paz|HBha9eMw0%i@(9W7r@Ln$)yjm=SD`eKGt+v$JCBN_DVpH
zFdw$;e_<iq5&+OnjeU`y&rSc|9t7Z_5jBETEdWx}1jz~BJ2COisicGHOR*X*vzxZX
z6L07sJmA26FKr{eDi`m(Mlr*<0Vz)b>oy!$I&g~JYn6S1XxJzm>Z2@k_I^9f7%xdZ
zn#W((cLZW4ILrDOcVi2jlN!xvCsete%w(-Ef0Z`II`S|QUNq<3p-J>)h{e?=4E!pv
z7O6sTE_ob#81zyjbs{G!Zy|H$tS`%y_X-$0dKI?&K3XDlCA`aBmp7?Z^>p4LkH}`p
zBPsTA%Xxrsgip1m4try*xI)&)ROW}j|EuBada;cMpreQHo~`59$!?j=q_-jd2I#0=
ze;8S)QUSxiB$_<lS)s+!3XZoGVeVh*Q&lz|lBj!6b^}d+rtU#J@7Dr1#1AP7-yGsE
zXkvYMa6t}-wh$Ui{o$w$yW{TKJNaZO!AelOFQUcxh<G97w_yk!pQukRwEv6Yu)I<~
zdpmSCLAzhX(!kb8LPtF{Nk~Tfn|P?he-{DU|LXVcjZK9DrK`X6i3vXLHdFZ!_0%+d
z2qbDaThJ<P&qOcz)%>aJV0c7^L{P01r3)(f2OlzTL={bpEE6khBo2#(A_VR`Ci(c6
zTAOszxFgrOr^c517c9^N!n6fsk(KRm+f028CCY69hr4bvyYRDW1T!nbN8cE$e>RyJ
zjk!hGSFVtdMUs1>9I=igXKP|+)Zy#zFTn)&NZTNqweM~%stu64;MfmhZ}xX1?F);v
z-t+;gyqgT|He()f<sK1KR5_edJ+2kIrMGqp1BnKp#5;z1tLOYp!|B3jId7qz)-|V9
zROg6TOx`Q740;jNY=QPOSMhd}f4$G*1HL5&S_A27YMGEpvsh&1nW+jlU})x-tfJKw
zM69~}soDSR7EwVnL<w*hEMA7}yw3EVnyH<+X)*pZD}D((_tXqM@bWxAlj{I(?;zVR
zTCeqbY}W|M`4e;Fb=@KbpV#^TO{mOM2bW|-REk?nCieS3p}Ld8L5-jEe*|Ga3;S%f
zE)c??Q71?=4XM2k@>E1@OYZ<?wUC8if-(G=9fUI2W33sPtR2&k!N0=6m|1+<?j$jg
zaK~Ld3M$@<qUn*XaEK_QroO@KF;2*K*Q1bnoRufpi?I9*<qS}!EaW7E3%CDB@Xr5^
zk9VuiE~li#2IEOLHgxBne*{~t7i%}yVOlI(<)(dc%fca1R=iZ#%q<Q+gh%>i<!jPR
zD$6n4%?KLeS*ZNi#;zvhH6`*_ZB+4NVbnm+Y^E4p9YgA~2SI*N<3cNC#PwqT_|eQU
zlvA#Z?2NLqInbzz(UjgEG}Ko8h<-?@zJZ)`t_zo>r0<IepKZ2af7TvnKmo3=u&7?k
z-0BJWL|rt{AWP-eneZkk0myTH+^49gN^Vw~cXj5&)O_uf9ta3`Lnzo+Nx)#^xQ<dP
zQUZ+s>n@<IH%@V_0UXi6CeC5-la9gFlFQgVvxJ{M=o!lVgwI2|3A${B9gyk%!o*fm
z^L*YFzLYNHp6Ab|f4A%#QTRtI|Brklwk1<cAA}MD4E27cW+hx6wvKT45i`c<`2M3j
z8+xB=e4ynenmJPq7|Aw6B){`lq!M9&(u|z2ub-K^g7|>R6NAFTl};3fxFgG|H-;P0
zq>qoEP1T3f9@2Q*mO!lw8N}nfS#pfUjo(Hkz>{(9SIl%8e@<}1dIB4~2`(;V_#}N}
zQa-LOv7Z8m$4Dw!Z&2o|#dxMt`ihMYl8N&mpSP)LL&U65x*q)t8!Q&Hv@B#C_OyTX
zqB-PZmvA@66<vvitAWYWruQbWo8BG)>3i;vb#v?N*IR#*4QV6u4!~HM^JS`kH~wa!
zt0XH}V+>upf5Dn;_p#HDrrGjIF^l%X5G=S#F{!eMg;2uwJzYKp`?@!U84b$W`!#Dk
z)Nzw$Vj6@PUPo5)v-(NCyt0t&plE2wnkte^27(0}_16&NU}+P8sj3ot72`@6-jKxX
z#GT#18M(!c$*|?=pn`OJtb&ZMZ#`~;cJ}e3QkoQ4e-GuWzc1Yz4ee*`BEW@ptP~NN
zbA(7IBDq*Gh0MjMPL+D>-o}3dJ2xoqO}l0Zr(5Y<5B_m06RzRe9R*EtH#Z$-soPet
zsNnU@2zD-=6I6{NYxS;Z=CaV)B8oeCOLko3DgG*=C;;LaM1W=O&kRIhOy4buyk=Kp
z9R|-Af4^8}^YpG!lPJgrr^P$H|FT<OxWz2BbB!e6oRK(S$n{ebLlqu=kZ{1}bC=M}
z>Xv`HdF*+Y@c{2Ub?w8^;cZ<JzIGwP3|yYPP&yvqy^_Q){Cs!kaGLqTV!Qb_=<Rn#
z%hQSfG(Nbk*|kqZ26-T|b32gH+YJI5k2Is*e-AE|6Zkv~RDNYkIMnsXq|+9ZLee>I
zqF9no8N0br@`PqDJGR_D2__fb1mSQOv=8)U(u~`FzzQ69F_)h(c1|K=f`f~NJd>j=
z5Pk?GX~o2kz%@m8SZky~N*#XID0qg@HMuvR1;qMX=6Un=WV&OV5ULURm$kPV$U4kZ
zf3}6@r2)n{)I+qYajne%JG|n?Qiw&jhC1>G(etwft5}hmxv2bz_iJCQcal_n<*L}6
z(mL>_=sc1&58JOYP?$7Do8iD3vaeeZix@QE=OTtYTh0>!sx*BnZ2VLj()y4BI<9df
zp6X}wZaW>)1&xRe(aOsd`s?J>+XSU-f6G6bmK4fL_SvRzJ=UX>a=0Z_3YmjkIWRSw
zqK!G*5}-5tmD(%_N3L#N+Yj6t)Wo=b!?RC?tI@v`Q$=Z-K_uPMpetp$U*uqbV6ujD
z^m{RfEKg6mDZQsu-s9<-S>@<vDlr}YO8ykT9ch{k{{dU~c;B7GL(WH)^^sNtf8=9)
zS>ij!hw!pd+<;##?_98S7j5rlA=)0fqU?nasAg>Lm*#<ffLc3m8}y^<U$i_nQ<RsY
zRNu3JbP%~~%Z4vO8STd^8Vva8;@58YVQDzY$@mlFp)1*Egwao8X(MwIGcY=UkiNUj
z)30i3PU4tjNp_?iCtahDbQeU$e{#(!+v$8F_5-`6a(!Nj6azvdV38&^-MTAKodIon
zn>I9?Z&tqPB7lt>6a87N3Ew?%wsPTzvpTxP`q%QnpxUE%GP2oGg*{RD-k?p(`A_R|
zkIr;QwUuh;W*bQ_0tyO7m{pO=(Qd*9!nf@&8WuU1A@6*@Mq?&>$`J+Rf9mkrY1>gT
zEbrPiyn|IsS(nISI%0QxFG+y62qv{R`Zsf)Gs{?%!mjc!!;LDn<(K}g*EcCKPQ1rb
zv!CguT%wKYyIk@wG5~U}Pyi3H)^J+p|Du-7awO^cKJ_|jUkXloR0Asqzfre%(__Np
z&5{m|{n!(Vz}P3qqx6`<e_S7XKVo6M22I|c276aj+BjU-U~ppa?RyC+wz3Znw=m3)
zUhZ-ef)2#~llZP?V}15(@@8HUol_he2GmjX6)UMtoq~hznVIMm!0O6^uAU?O57G36
zMk($5+wl?DO?|fyUdZG7eH;DCeD5yOwIu3v03NqIply}`8TEsue~KS45q6M+dlwuC
zOG~k)Ijc*;uXFw!2fehOgzJAt9HXT7i)9Hv*W8GaL&((^z&?8LM}>u2_eDZ=qhIOC
ziXPH*zD`XR2)1rT7_-YXc$G7y*h1iKW*i=!4vdm^*bgu6)xj*aPOYazMw%km#-H`#
zV%^|vTU!t?>yHRxf6kJCNoM=YAh?T8-pLduQKxS~lzfzy7CrMju;DZtWxFc<<(4PE
zvMSl^cRa9??($S7&`7N!Jl8mRNQ9e+9Ft5=yY^-RwfnKlsfwqn35VE*r~w@~x@WTy
z^1$6hxmwzYY+6=u#DeqFE!4S>nf2W2ax0JAtO1JAU4&XKe}DMyjJ1)f-(S{-gb|Wa
z^n{a_DOO{`y@hb(^ZJe!TbbN3mBm%K>QnA@={h?bM|K-@U$CXod_%Y=X)JjC2>Qc{
z`yOkVh})o?_%4I$@_LS^i4U+3@j@WI`-25J;U6g#T|1?ZBR^Gkda623`fH$M97;1;
zU~Q}tHp+c7f0;%E+M3xo24=DH^upSQb;9bLhnAp=n$|RnCzCRO4jf`0zB2vPNS774
zgQp8QzO~uH=jY9>lYbF_9Q!}FlH`J5WW4mmwxPXIahCTMMz{{wZ2Ut)c@Dd|@H2;d
z<V^AGd(O45?_tCVlvLU#VL|-7fC3J<oQ>%+jF8_Se}<0h1NozN)I^VMW3W_2q81mu
zt{Pe4c9NJEfwj?Pbp&nY&=N68Qj#!evS9V@gT<CV2%xdu5NZK>(qlq>K7{*4=Xehz
z?jhLoBwCY@pX!2sX$Kt`!Am{cN+cpax2p`Fv90u&+ZrwPPIs?>Jhz%8=&s+G(Q70*
zzmDE~f8!9s16gt))$)D8fMf|t#cw+j5wFv98{nY>k+ohE&LfZ4w_IAXUZ-5o7K<<M
zz({x*<mLBB+AJloV%h}s+OkK)mnh=j!P1A~?pkc~q;xYTShSc_JJ_OI)Y3QBZLqhM
zvQ{<v#rYrJ3Y(r#8Zc`WNZhK_g=a28z`F3-e>(;H(iYxH{h5GXpW&x%Eiv>Gu3*zF
zRU&@OG)oQM6ZMEE`y|X`e(h#pDu`4UakvgzDe-G%G*z@w6u;#w{v>J=2t<~=_!<9q
zEkr7{PQ$xNjKx#{?9_+K|A;D7CKedD+-{gHN<S`6t-;iWxadJP3L%ql>?LfOQw(TP
ze+lv{#3$~a3P->IfGSy$HsK)J>+fi-=g8S6fZ1$RE*EYqq7G>l2^BE_%j&~>GRx8`
z`p^K)5RQzzaMY4@O9sr-NF4?D`{^5bvq0H|TT|{pdPOaSs|t%1(Mi{wQ?KVCfiH_t
zfUfbi41TwY?nH%Y2I;i0)U&3oE#{KCf4iCh#$qap)t=(vs+7pEoj?frAH0C(Qym(}
z0Q(w5E(o{nr-Lenn;_1D2Num2F}e)lr62O29SnutC=SfcpaDlgf_)3E{ka8R?`|Z(
z-vfP|tJ!Dju`%a3)gR6x9v+B>m?l0Gb3~xr<Vo?PxtScfIdL%LI}W|<_Nkh?4GAmd
NS*Ihou8YP0{jwasWW@jg

diff --git a/README.md b/README.md
index 1ad5aca0..6b3cd058 100644
--- a/README.md
+++ b/README.md
@@ -69,34 +69,32 @@ download the certificates. If you intend to download the scripts from a
 different location (for example from github.com) install the corresponding
 certificate chain.
 
-    /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/E5.pem" dst-path="letsencrypt-E5.pem";
+    /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/ISRG-Root-X2.pem" dst-path="ISRG-Root-X2.pem";
 
 ![screenshot: download certs](README.d/01-download-certs.avif)
 
 Note that the commands above do *not* verify server certificate, so if you
 want to be safe download with your workstations's browser and transfer the
-files to your MikroTik device.
+file to your MikroTik device.
 
 * [ISRG Root X2](https://letsencrypt.org/certs/isrg-root-x2.pem)
-* Let's Encrypt [E5](https://letsencrypt.org/certs/2024/e5.pem)
 
-Then we import the certificates.
+Then we import the certificate.
 
-    /certificate/import file-name=letsencrypt-E5.pem passphrase="";
+    /certificate/import file-name=ISRG-Root-X2.pem passphrase="";
 
 Do not worry that the command is not shown - that happens because it contains
 a sensitive property, the passphrase.
 
 ![screenshot: import certs](README.d/02-import-certs.avif)
 
-For basic verification we rename the certificates and print them by
-fingerprint. Make sure exactly these two certificates ("*E5*" and
-"*ISRG-Root-X2*") are shown. Also remove the left over file.
+For basic verification we rename the certificate and print it by
+fingerprint. Make sure exactly this one certificate ("*ISRG-Root-X2*")
+is shown. Also remove the left over file.
 
-    /certificate/set name="E5" [ find where common-name="E5" ];
     /certificate/set name="ISRG-Root-X2" [ find where common-name="ISRG Root X2" ];
-    /certificate/print proplist=name,fingerprint where fingerprint="e788d14b0436b5120bbee3f15c15badf08c1407fe72568a4f16f9151c380e1e3" or fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
-    /file/remove [ find where name="letsencrypt-E5.pem" ];
+    /certificate/print proplist=name,fingerprint where fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
+    /file/remove [ find where name="ISRG-Root-X2.pem" ];
 
 ![screenshot: check certs](README.d/03-check-certs.avif)
 
diff --git a/certs/E1.pem b/certs/E1.pem
deleted file mode 100644
index a62fc03d..00000000
--- a/certs/E1.pem
+++ /dev/null
@@ -1,124 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            b3:bd:df:f8:a7:84:5b:bc:e9:03:a0:41:35:b3:4a:45
-        Signature Algorithm: ecdsa-with-SHA384
-        Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X2
-        Validity
-            Not Before: Sep  4 00:00:00 2020 GMT
-            Not After : Sep 15 16:00:00 2025 GMT
-        Subject: C = US, O = Let's Encrypt, CN = E1
-        Subject Public Key Info:
-            Public Key Algorithm: id-ecPublicKey
-                Public-Key: (384 bit)
-                pub:
-                    04:24:5c:2d:a2:2a:fd:1c:4b:a6:5d:97:73:27:31:
-                    ac:b2:a0:69:62:ef:65:e8:a6:b0:f0:ac:4b:9f:ff:
-                    1c:0b:70:0f:d3:98:2f:4d:fc:0f:00:9b:37:f0:74:
-                    05:57:32:97:2e:05:ef:2a:43:25:a3:fb:6e:34:27:
-                    13:f6:4f:7e:69:d3:02:99:5e:eb:24:47:92:c1:24:
-                    9b:e6:b1:21:8f:c1:24:81:fc:68:cc:1f:69:ba:58:
-                    f5:19:22:f7:74:c6:16
-                ASN1 OID: secp384r1
-                NIST CURVE: P-384
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Client Authentication, TLS Web Server Authentication
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Subject Key Identifier: 
-                5A:F3:ED:2B:FC:36:C2:37:79:B9:52:30:EA:54:6F:CF:55:CB:2E:AC
-            X509v3 Authority Key Identifier: 
-                keyid:7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
-
-            Authority Information Access: 
-                CA Issuers - URI:http://x2.i.lencr.org/
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://x2.c.lencr.org/
-
-            X509v3 Certificate Policies: 
-                Policy: 2.23.140.1.2.1
-                Policy: 1.3.6.1.4.1.44947.1.1.1
-
-    Signature Algorithm: ecdsa-with-SHA384
-         30:64:02:30:7b:74:d5:52:13:8d:61:fe:0d:ba:3f:03:00:9d:
-         f3:d7:98:84:d9:57:2e:bd:e9:0f:9c:5c:48:04:21:f2:cb:b3:
-         60:72:8e:97:d6:12:4f:ca:44:f6:42:c9:d3:7b:86:a9:02:30:
-         5a:b1:b1:b4:ed:ea:60:99:20:b1:38:03:ca:3d:a0:26:b8:ee:
-         6e:2d:4a:f6:c6:66:1f:33:9a:db:92:4a:d5:f5:29:13:c6:70:
-         62:28:ba:23:8c:cf:3d:2f:cb:82:e9:7f
------BEGIN CERTIFICATE-----
-MIICxjCCAk2gAwIBAgIRALO93/inhFu86QOgQTWzSkUwCgYIKoZIzj0EAwMwTzEL
-MAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNo
-IEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDIwHhcNMjAwOTA0MDAwMDAwWhcN
-MjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3MgRW5j
-cnlwdDELMAkGA1UEAxMCRTEwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQkXC2iKv0c
-S6Zdl3MnMayyoGli72XoprDwrEuf/xwLcA/TmC9N/A8AmzfwdAVXMpcuBe8qQyWj
-+240JxP2T35p0wKZXuskR5LBJJvmsSGPwSSB/GjMH2m6WPUZIvd0xhajggEIMIIB
-BDAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB
-MBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFFrz7Sv8NsI3eblSMOpUb89V
-yy6sMB8GA1UdIwQYMBaAFHxClq7eS0g7+pL4nozPbYupcjeVMDIGCCsGAQUFBwEB
-BCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3gyLmkubGVuY3Iub3JnLzAnBgNVHR8E
-IDAeMBygGqAYhhZodHRwOi8veDIuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYG
-Z4EMAQIBMA0GCysGAQQBgt8TAQEBMAoGCCqGSM49BAMDA2cAMGQCMHt01VITjWH+
-Dbo/AwCd89eYhNlXLr3pD5xcSAQh8suzYHKOl9YST8pE9kLJ03uGqQIwWrGxtO3q
-YJkgsTgDyj2gJrjubi1K9sZmHzOa25JK1fUpE8ZwYii6I4zPPS/Lgul/
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            41:d2:9d:d1:72:ea:ee:a7:80:c1:2c:6c:e9:2f:87:52
-        Signature Algorithm: ecdsa-with-SHA384
-        Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X2
-        Validity
-            Not Before: Sep  4 00:00:00 2020 GMT
-            Not After : Sep 17 16:00:00 2040 GMT
-        Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X2
-        Subject Public Key Info:
-            Public Key Algorithm: id-ecPublicKey
-                Public-Key: (384 bit)
-                pub:
-                    04:cd:9b:d5:9f:80:83:0a:ec:09:4a:f3:16:4a:3e:
-                    5c:cf:77:ac:de:67:05:0d:1d:07:b6:dc:16:fb:5a:
-                    8b:14:db:e2:71:60:c4:ba:45:95:11:89:8e:ea:06:
-                    df:f7:2a:16:1c:a4:b9:c5:c5:32:e0:03:e0:1e:82:
-                    18:38:8b:d7:45:d8:0a:6a:6e:e6:00:77:fb:02:51:
-                    7d:22:d8:0a:6e:9a:5b:77:df:f0:fa:41:ec:39:dc:
-                    75:ca:68:07:0c:1f:ea
-                ASN1 OID: secp384r1
-                NIST CURVE: P-384
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
-    Signature Algorithm: ecdsa-with-SHA384
-         30:65:02:30:7b:79:4e:46:50:84:c2:44:87:46:1b:45:70:ff:
-         58:99:de:f4:fd:a4:d2:55:a6:20:2d:74:d6:34:bc:41:a3:50:
-         5f:01:27:56:b4:be:27:75:06:af:12:2e:75:98:8d:fc:02:31:
-         00:8b:f5:77:6c:d4:c8:65:aa:e0:0b:2c:ee:14:9d:27:37:a4:
-         f9:53:a5:51:e4:29:83:d7:f8:90:31:5b:42:9f:0a:f5:fe:ae:
-         00:68:e7:8c:49:0f:b6:6f:5b:5b:15:f2:e7
------BEGIN CERTIFICATE-----
-MIICGzCCAaGgAwIBAgIQQdKd0XLq7qeAwSxs6S+HUjAKBggqhkjOPQQDAzBPMQsw
-CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg
-R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yMDA5MDQwMDAwMDBaFw00
-MDA5MTcxNjAwMDBaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5ldCBT
-ZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgyMHYw
-EAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0HttwW
-+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7AlF9
-ItgKbppbd9/w+kHsOdx1ymgHDB/qo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T
-AQH/BAUwAwEB/zAdBgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwCgYIKoZI
-zj0EAwMDaAAwZQIwe3lORlCEwkSHRhtFcP9Ymd70/aTSVaYgLXTWNLxBo1BfASdW
-tL4ndQavEi51mI38AjEAi/V3bNTIZargCyzuFJ0nN6T5U6VR5CmD1/iQMVtCnwr1
-/q4AaOeMSQ+2b1tbFfLn
------END CERTIFICATE-----
diff --git a/certs/E5.pem b/certs/E5.pem
deleted file mode 100644
index 3f9e9157..00000000
--- a/certs/E5.pem
+++ /dev/null
@@ -1,119 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            18:6e:75:d4:ee:b0:a0:5d:fd:2d:a8:20:86:5d:1e:31
-        Signature Algorithm: ecdsa-with-SHA384
-        Issuer: C=US, O=Internet Security Research Group, CN=ISRG Root X2
-        Validity
-            Not Before: Mar 13 00:00:00 2024 GMT
-            Not After : Mar 12 23:59:59 2027 GMT
-        Subject: C=US, O=Let's Encrypt, CN=E5
-        Subject Public Key Info:
-            Public Key Algorithm: id-ecPublicKey
-                Public-Key: (384 bit)
-                pub:
-                    04:0d:0b:3a:8a:6b:61:8e:b6:ef:dc:5f:58:e7:c6:
-                    42:45:54:ab:63:f6:66:61:48:0a:2e:59:75:b4:81:
-                    02:37:50:b7:3f:16:79:dc:98:ec:a1:28:97:72:20:
-                    1c:2c:cf:d5:7c:52:20:4e:54:78:5b:84:14:6b:c0:
-                    90:ae:85:ec:c0:51:41:3c:5a:87:7f:06:4d:d4:fe:
-                    60:d1:fa:6c:2d:e1:7d:95:10:88:a2:08:54:0f:99:
-                    1a:4c:e6:ea:0a:ac:d8
-                ASN1 OID: secp384r1
-                NIST CURVE: P-384
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Client Authentication, TLS Web Server Authentication
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Subject Key Identifier: 
-                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
-            X509v3 Authority Key Identifier: 
-                7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
-            Authority Information Access: 
-                CA Issuers - URI:http://x2.i.lencr.org/
-            X509v3 Certificate Policies: 
-                Policy: 2.23.140.1.2.1
-            X509v3 CRL Distribution Points: 
-                Full Name:
-                  URI:http://x2.c.lencr.org/
-    Signature Algorithm: ecdsa-with-SHA384
-    Signature Value:
-        30:64:02:30:1b:6d:2e:45:41:1c:45:3e:d9:5f:34:18:74:67:
-        13:79:ba:ab:29:b5:b6:10:4e:83:27:4a:8b:45:4e:c7:7b:cf:
-        f4:40:30:1d:61:a5:e6:1c:6d:a4:90:09:92:6e:46:4b:02:30:
-        46:29:18:84:34:7a:bc:fb:de:d8:1b:d8:19:a7:04:f5:cb:7e:
-        e7:6d:84:d9:da:8e:ea:ce:36:30:b9:a2:80:4c:2c:e6:60:12:
-        4b:a9:76:aa:e8:6d:95:47:da:72:09:0c
------BEGIN CERTIFICATE-----
-MIICtDCCAjugAwIBAgIQGG511O6woF39Lagghl0eMTAKBggqhkjOPQQDAzBPMQsw
-CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg
-R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yNDAzMTMwMDAwMDBaFw0y
-NzAzMTIyMzU5NTlaMDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNy
-eXB0MQswCQYDVQQDEwJFNTB2MBAGByqGSM49AgEGBSuBBAAiA2IABA0LOoprYY62
-79xfWOfGQkVUq2P2ZmFICi5ZdbSBAjdQtz8WedyY7KEol3IgHCzP1XxSIE5UeFuE
-FGvAkK6F7MBRQTxah38GTdT+YNH6bC3hfZUQiKIIVA+ZGkzm6gqs2KOB+DCB9TAO
-BgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIG
-A1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFJ8rX888IU+dBLftKyzExnCL0tcN
-MB8GA1UdIwQYMBaAFHxClq7eS0g7+pL4nozPbYupcjeVMDIGCCsGAQUFBwEBBCYw
-JDAiBggrBgEFBQcwAoYWaHR0cDovL3gyLmkubGVuY3Iub3JnLzATBgNVHSAEDDAK
-MAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veDIuYy5sZW5jci5v
-cmcvMAoGCCqGSM49BAMDA2cAMGQCMBttLkVBHEU+2V80GHRnE3m6qym1thBOgydK
-i0VOx3vP9EAwHWGl5hxtpJAJkm5GSwIwRikYhDR6vPve2BvYGacE9ct+522E2dqO
-6s42MLmigEws5mASS6l2quhtlUfacgkM
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            41:d2:9d:d1:72:ea:ee:a7:80:c1:2c:6c:e9:2f:87:52
-        Signature Algorithm: ecdsa-with-SHA384
-        Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X2
-        Validity
-            Not Before: Sep  4 00:00:00 2020 GMT
-            Not After : Sep 17 16:00:00 2040 GMT
-        Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X2
-        Subject Public Key Info:
-            Public Key Algorithm: id-ecPublicKey
-                Public-Key: (384 bit)
-                pub:
-                    04:cd:9b:d5:9f:80:83:0a:ec:09:4a:f3:16:4a:3e:
-                    5c:cf:77:ac:de:67:05:0d:1d:07:b6:dc:16:fb:5a:
-                    8b:14:db:e2:71:60:c4:ba:45:95:11:89:8e:ea:06:
-                    df:f7:2a:16:1c:a4:b9:c5:c5:32:e0:03:e0:1e:82:
-                    18:38:8b:d7:45:d8:0a:6a:6e:e6:00:77:fb:02:51:
-                    7d:22:d8:0a:6e:9a:5b:77:df:f0:fa:41:ec:39:dc:
-                    75:ca:68:07:0c:1f:ea
-                ASN1 OID: secp384r1
-                NIST CURVE: P-384
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
-    Signature Algorithm: ecdsa-with-SHA384
-         30:65:02:30:7b:79:4e:46:50:84:c2:44:87:46:1b:45:70:ff:
-         58:99:de:f4:fd:a4:d2:55:a6:20:2d:74:d6:34:bc:41:a3:50:
-         5f:01:27:56:b4:be:27:75:06:af:12:2e:75:98:8d:fc:02:31:
-         00:8b:f5:77:6c:d4:c8:65:aa:e0:0b:2c:ee:14:9d:27:37:a4:
-         f9:53:a5:51:e4:29:83:d7:f8:90:31:5b:42:9f:0a:f5:fe:ae:
-         00:68:e7:8c:49:0f:b6:6f:5b:5b:15:f2:e7
------BEGIN CERTIFICATE-----
-MIICGzCCAaGgAwIBAgIQQdKd0XLq7qeAwSxs6S+HUjAKBggqhkjOPQQDAzBPMQsw
-CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg
-R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yMDA5MDQwMDAwMDBaFw00
-MDA5MTcxNjAwMDBaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5ldCBT
-ZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgyMHYw
-EAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0HttwW
-+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7AlF9
-ItgKbppbd9/w+kHsOdx1ymgHDB/qo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T
-AQH/BAUwAwEB/zAdBgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwCgYIKoZI
-zj0EAwMDaAAwZQIwe3lORlCEwkSHRhtFcP9Ymd70/aTSVaYgLXTWNLxBo1BfASdW
-tL4ndQavEi51mI38AjEAi/V3bNTIZargCyzuFJ0nN6T5U6VR5CmD1/iQMVtCnwr1
-/q4AaOeMSQ+2b1tbFfLn
------END CERTIFICATE-----
diff --git a/certs/ISRG-Root-X2.pem b/certs/ISRG-Root-X2.pem
new file mode 100644
index 00000000..9cca880a
--- /dev/null
+++ b/certs/ISRG-Root-X2.pem
@@ -0,0 +1,21 @@
+# Issuer: CN=ISRG Root X2 O=Internet Security Research Group
+# Subject: CN=ISRG Root X2 O=Internet Security Research Group
+# Label: "ISRG Root X2"
+# Serial: 87493402998870891108772069816698636114
+# MD5 Fingerprint: d3:9e:c4:1e:23:3c:a6:df:cf:a3:7e:6d:e0:14:e6:e5
+# SHA1 Fingerprint: bd:b1:b9:3c:d5:97:8d:45:c6:26:14:55:f8:db:95:c7:5a:d1:53:af
+# SHA256 Fingerprint: 69:72:9b:8e:15:a8:6e:fc:17:7a:57:af:b7:17:1d:fc:64:ad:d2:8c:2f:ca:8c:f1:50:7e:34:45:3c:cb:14:70
+-----BEGIN CERTIFICATE-----
+MIICGzCCAaGgAwIBAgIQQdKd0XLq7qeAwSxs6S+HUjAKBggqhkjOPQQDAzBPMQsw
+CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg
+R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yMDA5MDQwMDAwMDBaFw00
+MDA5MTcxNjAwMDBaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5ldCBT
+ZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgyMHYw
+EAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0HttwW
++1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7AlF9
+ItgKbppbd9/w+kHsOdx1ymgHDB/qo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T
+AQH/BAUwAwEB/zAdBgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwCgYIKoZI
+zj0EAwMDaAAwZQIwe3lORlCEwkSHRhtFcP9Ymd70/aTSVaYgLXTWNLxBo1BfASdW
+tL4ndQavEi51mI38AjEAi/V3bNTIZargCyzuFJ0nN6T5U6VR5CmD1/iQMVtCnwr1
+/q4AaOeMSQ+2b1tbFfLn
+-----END CERTIFICATE-----
diff --git a/global-config.rsc b/global-config.rsc
index a0835f86..734b51e0 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -92,11 +92,11 @@
 :global FwAddrLists {
 #  "allow"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/allow";
-#      cert="E5"; timeout=1w };
+#      cert="ISRG Root X2"; timeout=1w };
 #  };
   "block"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/block";
-#      cert="E5" };
+#      cert="ISRG Root X2" };
     { url="https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt";
       cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
     { url="https://sslbl.abuse.ch/blacklist/sslipblacklist.txt";
@@ -112,7 +112,7 @@
   };
 #  "mikrotik"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";
-#      cert="E5"; timeout=1w };
+#      cert="ISRG Root X2"; timeout=1w };
 #  };
 };
 :global FwAddrListTimeOut 1d;
diff --git a/global-functions.rsc b/global-functions.rsc
index eb700efb..6c5ce02f 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -999,7 +999,7 @@
   :global SymbolForNotification;
   :global ValidateSyntax;
 
-  :if ([ $CertificateAvailable "E5" ] = false) do={
+  :if ([ $CertificateAvailable "ISRG Root X2" ] = false) do={
     $LogPrint warning $0 ("Downloading certificate failed, trying without.");
   }
 

From 3f51ebc125384e0fbdcb148962f81e382e07ca90 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 09:52:17 +0200
Subject: [PATCH 187/988] certs: R3 / R10 -> ISRG Root X1

---
 certs/ISRG-Root-X1.pem    |  38 ++++++
 certs/R10.pem             | 231 -------------------------------------
 certs/R3.pem              | 237 --------------------------------------
 global-config.rsc         |   2 +-
 global-functions.rsc      |   2 +-
 mod/notification-ntfy.rsc |   2 +-
 6 files changed, 41 insertions(+), 471 deletions(-)
 create mode 100644 certs/ISRG-Root-X1.pem
 delete mode 100644 certs/R10.pem
 delete mode 100644 certs/R3.pem

diff --git a/certs/ISRG-Root-X1.pem b/certs/ISRG-Root-X1.pem
new file mode 100644
index 00000000..995c95d5
--- /dev/null
+++ b/certs/ISRG-Root-X1.pem
@@ -0,0 +1,38 @@
+# Issuer: CN=ISRG Root X1 O=Internet Security Research Group
+# Subject: CN=ISRG Root X1 O=Internet Security Research Group
+# Label: "ISRG Root X1"
+# Serial: 172886928669790476064670243504169061120
+# MD5 Fingerprint: 0c:d2:f9:e0:da:17:73:e9:ed:86:4d:a5:e3:70:e7:4e
+# SHA1 Fingerprint: ca:bd:2a:79:a1:07:6a:31:f2:1d:25:36:35:cb:03:9d:43:29:a5:e8
+# SHA256 Fingerprint: 96:bc:ec:06:26:49:76:f3:74:60:77:9a:cf:28:c5:a7:cf:e8:a3:c0:aa:e1:1a:8f:fc:ee:05:c0:bd:df:08:c6
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/certs/R10.pem b/certs/R10.pem
deleted file mode 100644
index e8c1c4a3..00000000
--- a/certs/R10.pem
+++ /dev/null
@@ -1,231 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            4b:a8:52:93:f7:9a:2f:a2:73:06:4b:a8:04:8d:75:d0
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=US, O=Internet Security Research Group, CN=ISRG Root X1
-        Validity
-            Not Before: Mar 13 00:00:00 2024 GMT
-            Not After : Mar 12 23:59:59 2027 GMT
-        Subject: C=US, O=Let's Encrypt, CN=R10
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:cf:57:e5:e6:c4:54:12:ed:b4:47:fe:c9:27:58:
-                    76:46:50:28:8c:1d:3e:88:df:05:9d:d5:b5:18:29:
-                    bd:dd:b5:5a:bf:fa:f6:ce:a3:be:af:00:21:4b:62:
-                    5a:5a:3c:01:2f:c5:58:03:f6:89:ff:8e:11:43:eb:
-                    c1:b5:e0:14:07:96:8f:6f:1f:d7:e7:ba:81:39:09:
-                    75:65:b7:c2:af:18:5b:37:26:28:e7:a3:f4:07:2b:
-                    6d:1a:ff:ab:58:bc:95:ae:40:ff:e9:cb:57:c4:b5:
-                    5b:7f:78:0d:18:61:bc:17:e7:54:c6:bb:49:91:cd:
-                    6e:18:d1:80:85:ee:a6:65:36:bc:74:ea:bc:50:4c:
-                    ea:fc:21:f3:38:16:93:94:ba:b0:d3:6b:38:06:cd:
-                    16:12:7a:ca:52:75:c8:ad:76:b2:c2:9c:5d:98:45:
-                    5c:6f:61:7b:c6:2d:ee:3c:13:52:86:01:d9:57:e6:
-                    38:1c:df:8d:b5:1f:92:91:9a:e7:4a:1c:cc:45:a8:
-                    72:55:f0:b0:e6:a3:07:ec:fd:a7:1b:66:9e:3f:48:
-                    8b:71:84:71:58:c9:3a:fa:ef:5e:f2:5b:44:2b:3c:
-                    74:e7:8f:b2:47:c1:07:6a:cd:9a:b7:0d:96:f7:12:
-                    81:26:51:54:0a:ec:61:f6:f7:f5:e2:f2:8a:c8:95:
-                    0d:8d
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Client Authentication, TLS Web Server Authentication
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Subject Key Identifier: 
-                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
-            X509v3 Authority Key Identifier: 
-                79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
-            Authority Information Access: 
-                CA Issuers - URI:http://x1.i.lencr.org/
-            X509v3 Certificate Policies: 
-                Policy: 2.23.140.1.2.1
-            X509v3 CRL Distribution Points: 
-                Full Name:
-                  URI:http://x1.c.lencr.org/
-    Signature Algorithm: sha256WithRSAEncryption
-    Signature Value:
-        92:b1:e7:41:37:eb:79:9d:81:e6:cd:e2:25:e1:3a:20:e9:90:
-        44:95:a3:81:5c:cf:c3:5d:fd:bd:a0:70:d5:b1:96:28:22:0b:
-        d2:f2:28:cf:0c:e7:d4:e6:43:8c:24:22:1d:c1:42:92:d1:09:
-        af:9f:4b:f4:c8:70:4f:20:16:b1:5a:dd:01:f6:1f:f8:1f:61:
-        6b:14:27:b0:72:8d:63:ae:ee:e2:ce:4b:cf:37:dd:bb:a3:d4:
-        cd:e7:ad:50:ad:bd:bf:e3:ec:3e:62:36:70:99:31:a7:e8:8d:
-        dd:ea:62:e2:12:ae:f5:9c:d4:3d:2c:0c:aa:d0:9c:79:be:ea:
-        3d:5c:44:6e:96:31:63:5a:7d:d6:7e:4f:24:a0:4b:05:7f:5e:
-        6f:d2:d4:ea:5f:33:4b:13:d6:57:b6:ca:de:51:b8:5d:a3:09:
-        82:74:fd:c7:78:9e:b3:b9:ac:16:da:4a:2b:96:c3:b6:8b:62:
-        8f:f9:74:19:a2:9e:03:de:e9:6f:9b:b0:0f:d2:a0:5a:f6:85:
-        5c:c2:04:b7:c8:d5:4e:32:c4:bf:04:5d:bc:29:f6:f7:81:8f:
-        0c:5d:3c:53:c9:40:90:8b:fb:b6:08:65:b9:a4:21:d5:09:e5:
-        13:84:84:37:82:ce:10:28:fc:76:c2:06:25:7a:46:52:4d:da:
-        53:72:a4:27:3f:62:70:ac:be:69:48:00:fb:67:0f:db:5b:a1:
-        e8:d7:03:21:2d:d7:c9:f6:99:42:39:83:43:df:77:0a:12:08:
-        f1:25:d6:ba:94:19:54:18:88:a5:c5:8e:e1:1a:99:93:79:6b:
-        ec:1c:f9:31:40:b0:cc:32:00:df:9f:5e:e7:b4:92:ab:90:82:
-        91:8d:0d:e0:1e:95:ba:59:3b:2e:4b:5f:c2:b7:46:35:52:39:
-        06:c0:bd:aa:ac:52:c1:22:a0:44:97:99:f7:0c:a0:21:a7:a1:
-        6c:71:47:16:17:01:68:c0:ca:a6:26:65:04:7c:b3:ae:c9:e7:
-        94:55:c2:6f:9b:3c:1c:a9:f9:2e:c5:20:1a:f0:76:e0:be:ec:
-        18:d6:4f:d8:25:fb:76:11:e8:bf:e6:21:0f:e8:e8:cc:b5:b6:
-        a7:d5:b8:f7:9f:41:cf:61:22:46:6a:83:b6:68:97:2e:7c:ea:
-        4e:95:db:23:eb:2e:c8:2b:28:84:a4:60:e9:49:f4:44:2e:3b:
-        f9:ca:62:57:01:e2:5d:90:16:f9:c9:fc:7a:23:48:8e:a6:d5:
-        81:72:f1:28:fa:5d:ce:fb:ed:4e:73:8f:94:2e:d2:41:94:98:
-        99:db:a7:af:70:5f:f5:be:fb:02:20:bf:66:27:6c:b4:ad:fa:
-        75:12:0b:2b:3e:ce:03:9e
------BEGIN CERTIFICATE-----
-MIIFBTCCAu2gAwIBAgIQS6hSk/eaL6JzBkuoBI110DANBgkqhkiG9w0BAQsFADBP
-MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy
-Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNDAzMTMwMDAwMDBa
-Fw0yNzAzMTIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBF
-bmNyeXB0MQwwCgYDVQQDEwNSMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQDPV+XmxFQS7bRH/sknWHZGUCiMHT6I3wWd1bUYKb3dtVq/+vbOo76vACFL
-YlpaPAEvxVgD9on/jhFD68G14BQHlo9vH9fnuoE5CXVlt8KvGFs3Jijno/QHK20a
-/6tYvJWuQP/py1fEtVt/eA0YYbwX51TGu0mRzW4Y0YCF7qZlNrx06rxQTOr8IfM4
-FpOUurDTazgGzRYSespSdcitdrLCnF2YRVxvYXvGLe48E1KGAdlX5jgc3421H5KR
-mudKHMxFqHJV8LDmowfs/acbZp4/SItxhHFYyTr6717yW0QrPHTnj7JHwQdqzZq3
-DZb3EoEmUVQK7GH29/Xi8orIlQ2NAgMBAAGjgfgwgfUwDgYDVR0PAQH/BAQDAgGG
-MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/
-AgEAMB0GA1UdDgQWBBS7vMNHpeS8qcbDpHIMEI2iNeHI6DAfBgNVHSMEGDAWgBR5
-tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcBAQQmMCQwIgYIKwYBBQUHMAKG
-Fmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAIBgZngQwBAgEwJwYD
-VR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVuY3Iub3JnLzANBgkqhkiG9w0B
-AQsFAAOCAgEAkrHnQTfreZ2B5s3iJeE6IOmQRJWjgVzPw139vaBw1bGWKCIL0vIo
-zwzn1OZDjCQiHcFCktEJr59L9MhwTyAWsVrdAfYf+B9haxQnsHKNY67u4s5Lzzfd
-u6PUzeetUK29v+PsPmI2cJkxp+iN3epi4hKu9ZzUPSwMqtCceb7qPVxEbpYxY1p9
-1n5PJKBLBX9eb9LU6l8zSxPWV7bK3lG4XaMJgnT9x3ies7msFtpKK5bDtotij/l0
-GaKeA97pb5uwD9KgWvaFXMIEt8jVTjLEvwRdvCn294GPDF08U8lAkIv7tghluaQh
-1QnlE4SEN4LOECj8dsIGJXpGUk3aU3KkJz9icKy+aUgA+2cP21uh6NcDIS3XyfaZ
-QjmDQ993ChII8SXWupQZVBiIpcWO4RqZk3lr7Bz5MUCwzDIA359e57SSq5CCkY0N
-4B6Vulk7LktfwrdGNVI5BsC9qqxSwSKgRJeZ9wygIaehbHFHFhcBaMDKpiZlBHyz
-rsnnlFXCb5s8HKn5LsUgGvB24L7sGNZP2CX7dhHov+YhD+jozLW2p9W4959Bz2Ei
-RmqDtmiXLnzqTpXbI+suyCsohKRg6Un0RC47+cpiVwHiXZAW+cn8eiNIjqbVgXLx
-KPpdzvvtTnOPlC7SQZSYmdunr3Bf9b77AiC/ZidstK36dRILKz7OA54=
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            82:10:cf:b0:d2:40:e3:59:44:63:e0:bb:63:82:8b:00
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X1
-        Validity
-            Not Before: Jun  4 11:04:38 2015 GMT
-            Not After : Jun  4 11:04:38 2035 GMT
-        Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X1
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (4096 bit)
-                Modulus:
-                    00:ad:e8:24:73:f4:14:37:f3:9b:9e:2b:57:28:1c:
-                    87:be:dc:b7:df:38:90:8c:6e:3c:e6:57:a0:78:f7:
-                    75:c2:a2:fe:f5:6a:6e:f6:00:4f:28:db:de:68:86:
-                    6c:44:93:b6:b1:63:fd:14:12:6b:bf:1f:d2:ea:31:
-                    9b:21:7e:d1:33:3c:ba:48:f5:dd:79:df:b3:b8:ff:
-                    12:f1:21:9a:4b:c1:8a:86:71:69:4a:66:66:6c:8f:
-                    7e:3c:70:bf:ad:29:22:06:f3:e4:c0:e6:80:ae:e2:
-                    4b:8f:b7:99:7e:94:03:9f:d3:47:97:7c:99:48:23:
-                    53:e8:38:ae:4f:0a:6f:83:2e:d1:49:57:8c:80:74:
-                    b6:da:2f:d0:38:8d:7b:03:70:21:1b:75:f2:30:3c:
-                    fa:8f:ae:dd:da:63:ab:eb:16:4f:c2:8e:11:4b:7e:
-                    cf:0b:e8:ff:b5:77:2e:f4:b2:7b:4a:e0:4c:12:25:
-                    0c:70:8d:03:29:a0:e1:53:24:ec:13:d9:ee:19:bf:
-                    10:b3:4a:8c:3f:89:a3:61:51:de:ac:87:07:94:f4:
-                    63:71:ec:2e:e2:6f:5b:98:81:e1:89:5c:34:79:6c:
-                    76:ef:3b:90:62:79:e6:db:a4:9a:2f:26:c5:d0:10:
-                    e1:0e:de:d9:10:8e:16:fb:b7:f7:a8:f7:c7:e5:02:
-                    07:98:8f:36:08:95:e7:e2:37:96:0d:36:75:9e:fb:
-                    0e:72:b1:1d:9b:bc:03:f9:49:05:d8:81:dd:05:b4:
-                    2a:d6:41:e9:ac:01:76:95:0a:0f:d8:df:d5:bd:12:
-                    1f:35:2f:28:17:6c:d2:98:c1:a8:09:64:77:6e:47:
-                    37:ba:ce:ac:59:5e:68:9d:7f:72:d6:89:c5:06:41:
-                    29:3e:59:3e:dd:26:f5:24:c9:11:a7:5a:a3:4c:40:
-                    1f:46:a1:99:b5:a7:3a:51:6e:86:3b:9e:7d:72:a7:
-                    12:05:78:59:ed:3e:51:78:15:0b:03:8f:8d:d0:2f:
-                    05:b2:3e:7b:4a:1c:4b:73:05:12:fc:c6:ea:e0:50:
-                    13:7c:43:93:74:b3:ca:74:e7:8e:1f:01:08:d0:30:
-                    d4:5b:71:36:b4:07:ba:c1:30:30:5c:48:b7:82:3b:
-                    98:a6:7d:60:8a:a2:a3:29:82:cc:ba:bd:83:04:1b:
-                    a2:83:03:41:a1:d6:05:f1:1b:c2:b6:f0:a8:7c:86:
-                    3b:46:a8:48:2a:88:dc:76:9a:76:bf:1f:6a:a5:3d:
-                    19:8f:eb:38:f3:64:de:c8:2b:0d:0a:28:ff:f7:db:
-                    e2:15:42:d4:22:d0:27:5d:e1:79:fe:18:e7:70:88:
-                    ad:4e:e6:d9:8b:3a:c6:dd:27:51:6e:ff:bc:64:f5:
-                    33:43:4f
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
-    Signature Algorithm: sha256WithRSAEncryption
-         55:1f:58:a9:bc:b2:a8:50:d0:0c:b1:d8:1a:69:20:27:29:08:
-         ac:61:75:5c:8a:6e:f8:82:e5:69:2f:d5:f6:56:4b:b9:b8:73:
-         10:59:d3:21:97:7e:e7:4c:71:fb:b2:d2:60:ad:39:a8:0b:ea:
-         17:21:56:85:f1:50:0e:59:eb:ce:e0:59:e9:ba:c9:15:ef:86:
-         9d:8f:84:80:f6:e4:e9:91:90:dc:17:9b:62:1b:45:f0:66:95:
-         d2:7c:6f:c2:ea:3b:ef:1f:cf:cb:d6:ae:27:f1:a9:b0:c8:ae:
-         fd:7d:7e:9a:fa:22:04:eb:ff:d9:7f:ea:91:2b:22:b1:17:0e:
-         8f:f2:8a:34:5b:58:d8:fc:01:c9:54:b9:b8:26:cc:8a:88:33:
-         89:4c:2d:84:3c:82:df:ee:96:57:05:ba:2c:bb:f7:c4:b7:c7:
-         4e:3b:82:be:31:c8:22:73:73:92:d1:c2:80:a4:39:39:10:33:
-         23:82:4c:3c:9f:86:b2:55:98:1d:be:29:86:8c:22:9b:9e:e2:
-         6b:3b:57:3a:82:70:4d:dc:09:c7:89:cb:0a:07:4d:6c:e8:5d:
-         8e:c9:ef:ce:ab:c7:bb:b5:2b:4e:45:d6:4a:d0:26:cc:e5:72:
-         ca:08:6a:a5:95:e3:15:a1:f7:a4:ed:c9:2c:5f:a5:fb:ff:ac:
-         28:02:2e:be:d7:7b:bb:e3:71:7b:90:16:d3:07:5e:46:53:7c:
-         37:07:42:8c:d3:c4:96:9c:d5:99:b5:2a:e0:95:1a:80:48:ae:
-         4c:39:07:ce:cc:47:a4:52:95:2b:ba:b8:fb:ad:d2:33:53:7d:
-         e5:1d:4d:6d:d5:a1:b1:c7:42:6f:e6:40:27:35:5c:a3:28:b7:
-         07:8d:e7:8d:33:90:e7:23:9f:fb:50:9c:79:6c:46:d5:b4:15:
-         b3:96:6e:7e:9b:0c:96:3a:b8:52:2d:3f:d6:5b:e1:fb:08:c2:
-         84:fe:24:a8:a3:89:da:ac:6a:e1:18:2a:b1:a8:43:61:5b:d3:
-         1f:dc:3b:8d:76:f2:2d:e8:8d:75:df:17:33:6c:3d:53:fb:7b:
-         cb:41:5f:ff:dc:a2:d0:61:38:e1:96:b8:ac:5d:8b:37:d7:75:
-         d5:33:c0:99:11:ae:9d:41:c1:72:75:84:be:02:41:42:5f:67:
-         24:48:94:d1:9b:27:be:07:3f:b9:b8:4f:81:74:51:e1:7a:b7:
-         ed:9d:23:e2:be:e0:d5:28:04:13:3c:31:03:9e:dd:7a:6c:8f:
-         c6:07:18:c6:7f:de:47:8e:3f:28:9e:04:06:cf:a5:54:34:77:
-         bd:ec:89:9b:e9:17:43:df:5b:db:5f:fe:8e:1e:57:a2:cd:40:
-         9d:7e:62:22:da:de:18:27
------BEGIN CERTIFICATE-----
-MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
-TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
-cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
-WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu
-ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY
-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc
-h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+
-0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U
-A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW
-T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH
-B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC
-B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv
-KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn
-OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn
-jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw
-qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI
-rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq
-hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL
-ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ
-3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK
-NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5
-ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur
-TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC
-jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc
-oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq
-4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA
-mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d
-emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc=
------END CERTIFICATE-----
diff --git a/certs/R3.pem b/certs/R3.pem
deleted file mode 100644
index 837b709c..00000000
--- a/certs/R3.pem
+++ /dev/null
@@ -1,237 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            91:2b:08:4a:cf:0c:18:a7:53:f6:d6:2e:25:a7:5f:5a
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X1
-        Validity
-            Not Before: Sep  4 00:00:00 2020 GMT
-            Not After : Sep 15 16:00:00 2025 GMT
-        Subject: C = US, O = Let's Encrypt, CN = R3
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
-                Modulus:
-                    00:bb:02:15:28:cc:f6:a0:94:d3:0f:12:ec:8d:55:
-                    92:c3:f8:82:f1:99:a6:7a:42:88:a7:5d:26:aa:b5:
-                    2b:b9:c5:4c:b1:af:8e:6b:f9:75:c8:a3:d7:0f:47:
-                    94:14:55:35:57:8c:9e:a8:a2:39:19:f5:82:3c:42:
-                    a9:4e:6e:f5:3b:c3:2e:db:8d:c0:b0:5c:f3:59:38:
-                    e7:ed:cf:69:f0:5a:0b:1b:be:c0:94:24:25:87:fa:
-                    37:71:b3:13:e7:1c:ac:e1:9b:ef:db:e4:3b:45:52:
-                    45:96:a9:c1:53:ce:34:c8:52:ee:b5:ae:ed:8f:de:
-                    60:70:e2:a5:54:ab:b6:6d:0e:97:a5:40:34:6b:2b:
-                    d3:bc:66:eb:66:34:7c:fa:6b:8b:8f:57:29:99:f8:
-                    30:17:5d:ba:72:6f:fb:81:c5:ad:d2:86:58:3d:17:
-                    c7:e7:09:bb:f1:2b:f7:86:dc:c1:da:71:5d:d4:46:
-                    e3:cc:ad:25:c1:88:bc:60:67:75:66:b3:f1:18:f7:
-                    a2:5c:e6:53:ff:3a:88:b6:47:a5:ff:13:18:ea:98:
-                    09:77:3f:9d:53:f9:cf:01:e5:f5:a6:70:17:14:af:
-                    63:a4:ff:99:b3:93:9d:dc:53:a7:06:fe:48:85:1d:
-                    a1:69:ae:25:75:bb:13:cc:52:03:f5:ed:51:a1:8b:
-                    db:15
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Client Authentication, TLS Web Server Authentication
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Subject Key Identifier: 
-                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
-            X509v3 Authority Key Identifier: 
-                keyid:79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
-
-            Authority Information Access: 
-                CA Issuers - URI:http://x1.i.lencr.org/
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://x1.c.lencr.org/
-
-            X509v3 Certificate Policies: 
-                Policy: 2.23.140.1.2.1
-                Policy: 1.3.6.1.4.1.44947.1.1.1
-
-    Signature Algorithm: sha256WithRSAEncryption
-         85:ca:4e:47:3e:a3:f7:85:44:85:bc:d5:67:78:b2:98:63:ad:
-         75:4d:1e:96:3d:33:65:72:54:2d:81:a0:ea:c3:ed:f8:20:bf:
-         5f:cc:b7:70:00:b7:6e:3b:f6:5e:94:de:e4:20:9f:a6:ef:8b:
-         b2:03:e7:a2:b5:16:3c:91:ce:b4:ed:39:02:e7:7c:25:8a:47:
-         e6:65:6e:3f:46:f4:d9:f0:ce:94:2b:ee:54:ce:12:bc:8c:27:
-         4b:b8:c1:98:2f:a2:af:cd:71:91:4a:08:b7:c8:b8:23:7b:04:
-         2d:08:f9:08:57:3e:83:d9:04:33:0a:47:21:78:09:82:27:c3:
-         2a:c8:9b:b9:ce:5c:f2:64:c8:c0:be:79:c0:4f:8e:6d:44:0c:
-         5e:92:bb:2e:f7:8b:10:e1:e8:1d:44:29:db:59:20:ed:63:b9:
-         21:f8:12:26:94:93:57:a0:1d:65:04:c1:0a:22:ae:10:0d:43:
-         97:a1:18:1f:7e:e0:e0:86:37:b5:5a:b1:bd:30:bf:87:6e:2b:
-         2a:ff:21:4e:1b:05:c3:f5:18:97:f0:5e:ac:c3:a5:b8:6a:f0:
-         2e:bc:3b:33:b9:ee:4b:de:cc:fc:e4:af:84:0b:86:3f:c0:55:
-         43:36:f6:68:e1:36:17:6a:8e:99:d1:ff:a5:40:a7:34:b7:c0:
-         d0:63:39:35:39:75:6e:f2:ba:76:c8:93:02:e9:a9:4b:6c:17:
-         ce:0c:02:d9:bd:81:fb:9f:b7:68:d4:06:65:b3:82:3d:77:53:
-         f8:8e:79:03:ad:0a:31:07:75:2a:43:d8:55:97:72:c4:29:0e:
-         f7:c4:5d:4e:c8:ae:46:84:30:d7:f2:85:5f:18:a1:79:bb:e7:
-         5e:70:8b:07:e1:86:93:c3:b9:8f:dc:61:71:25:2a:af:df:ed:
-         25:50:52:68:8b:92:dc:e5:d6:b5:e3:da:7d:d0:87:6c:84:21:
-         31:ae:82:f5:fb:b9:ab:c8:89:17:3d:e1:4c:e5:38:0e:f6:bd:
-         2b:bd:96:81:14:eb:d5:db:3d:20:a7:7e:59:d3:e2:f8:58:f9:
-         5b:b8:48:cd:fe:5c:4f:16:29:fe:1e:55:23:af:c8:11:b0:8d:
-         ea:7c:93:90:17:2f:fd:ac:a2:09:47:46:3f:f0:e9:b0:b7:ff:
-         28:4d:68:32:d6:67:5e:1e:69:a3:93:b8:f5:9d:8b:2f:0b:d2:
-         52:43:a6:6f:32:57:65:4d:32:81:df:38:53:85:5d:7e:5d:66:
-         29:ea:b8:dd:e4:95:b5:cd:b5:56:12:42:cd:c4:4e:c6:25:38:
-         44:50:6d:ec:ce:00:55:18:fe:e9:49:64:d4:4e:ca:97:9c:b4:
-         5b:c0:73:a8:ab:b8:47:c2
------BEGIN CERTIFICATE-----
-MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw
-TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
-cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw
-WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
-RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP
-R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx
-sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm
-NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg
-Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG
-/kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC
-AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB
-Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA
-FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
-AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw
-Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB
-gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W
-PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl
-ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz
-CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm
-lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4
-avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2
-yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O
-yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids
-hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+
-HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv
-MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX
-nLRbwHOoq7hHwg==
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            82:10:cf:b0:d2:40:e3:59:44:63:e0:bb:63:82:8b:00
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X1
-        Validity
-            Not Before: Jun  4 11:04:38 2015 GMT
-            Not After : Jun  4 11:04:38 2035 GMT
-        Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X1
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (4096 bit)
-                Modulus:
-                    00:ad:e8:24:73:f4:14:37:f3:9b:9e:2b:57:28:1c:
-                    87:be:dc:b7:df:38:90:8c:6e:3c:e6:57:a0:78:f7:
-                    75:c2:a2:fe:f5:6a:6e:f6:00:4f:28:db:de:68:86:
-                    6c:44:93:b6:b1:63:fd:14:12:6b:bf:1f:d2:ea:31:
-                    9b:21:7e:d1:33:3c:ba:48:f5:dd:79:df:b3:b8:ff:
-                    12:f1:21:9a:4b:c1:8a:86:71:69:4a:66:66:6c:8f:
-                    7e:3c:70:bf:ad:29:22:06:f3:e4:c0:e6:80:ae:e2:
-                    4b:8f:b7:99:7e:94:03:9f:d3:47:97:7c:99:48:23:
-                    53:e8:38:ae:4f:0a:6f:83:2e:d1:49:57:8c:80:74:
-                    b6:da:2f:d0:38:8d:7b:03:70:21:1b:75:f2:30:3c:
-                    fa:8f:ae:dd:da:63:ab:eb:16:4f:c2:8e:11:4b:7e:
-                    cf:0b:e8:ff:b5:77:2e:f4:b2:7b:4a:e0:4c:12:25:
-                    0c:70:8d:03:29:a0:e1:53:24:ec:13:d9:ee:19:bf:
-                    10:b3:4a:8c:3f:89:a3:61:51:de:ac:87:07:94:f4:
-                    63:71:ec:2e:e2:6f:5b:98:81:e1:89:5c:34:79:6c:
-                    76:ef:3b:90:62:79:e6:db:a4:9a:2f:26:c5:d0:10:
-                    e1:0e:de:d9:10:8e:16:fb:b7:f7:a8:f7:c7:e5:02:
-                    07:98:8f:36:08:95:e7:e2:37:96:0d:36:75:9e:fb:
-                    0e:72:b1:1d:9b:bc:03:f9:49:05:d8:81:dd:05:b4:
-                    2a:d6:41:e9:ac:01:76:95:0a:0f:d8:df:d5:bd:12:
-                    1f:35:2f:28:17:6c:d2:98:c1:a8:09:64:77:6e:47:
-                    37:ba:ce:ac:59:5e:68:9d:7f:72:d6:89:c5:06:41:
-                    29:3e:59:3e:dd:26:f5:24:c9:11:a7:5a:a3:4c:40:
-                    1f:46:a1:99:b5:a7:3a:51:6e:86:3b:9e:7d:72:a7:
-                    12:05:78:59:ed:3e:51:78:15:0b:03:8f:8d:d0:2f:
-                    05:b2:3e:7b:4a:1c:4b:73:05:12:fc:c6:ea:e0:50:
-                    13:7c:43:93:74:b3:ca:74:e7:8e:1f:01:08:d0:30:
-                    d4:5b:71:36:b4:07:ba:c1:30:30:5c:48:b7:82:3b:
-                    98:a6:7d:60:8a:a2:a3:29:82:cc:ba:bd:83:04:1b:
-                    a2:83:03:41:a1:d6:05:f1:1b:c2:b6:f0:a8:7c:86:
-                    3b:46:a8:48:2a:88:dc:76:9a:76:bf:1f:6a:a5:3d:
-                    19:8f:eb:38:f3:64:de:c8:2b:0d:0a:28:ff:f7:db:
-                    e2:15:42:d4:22:d0:27:5d:e1:79:fe:18:e7:70:88:
-                    ad:4e:e6:d9:8b:3a:c6:dd:27:51:6e:ff:bc:64:f5:
-                    33:43:4f
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
-    Signature Algorithm: sha256WithRSAEncryption
-         55:1f:58:a9:bc:b2:a8:50:d0:0c:b1:d8:1a:69:20:27:29:08:
-         ac:61:75:5c:8a:6e:f8:82:e5:69:2f:d5:f6:56:4b:b9:b8:73:
-         10:59:d3:21:97:7e:e7:4c:71:fb:b2:d2:60:ad:39:a8:0b:ea:
-         17:21:56:85:f1:50:0e:59:eb:ce:e0:59:e9:ba:c9:15:ef:86:
-         9d:8f:84:80:f6:e4:e9:91:90:dc:17:9b:62:1b:45:f0:66:95:
-         d2:7c:6f:c2:ea:3b:ef:1f:cf:cb:d6:ae:27:f1:a9:b0:c8:ae:
-         fd:7d:7e:9a:fa:22:04:eb:ff:d9:7f:ea:91:2b:22:b1:17:0e:
-         8f:f2:8a:34:5b:58:d8:fc:01:c9:54:b9:b8:26:cc:8a:88:33:
-         89:4c:2d:84:3c:82:df:ee:96:57:05:ba:2c:bb:f7:c4:b7:c7:
-         4e:3b:82:be:31:c8:22:73:73:92:d1:c2:80:a4:39:39:10:33:
-         23:82:4c:3c:9f:86:b2:55:98:1d:be:29:86:8c:22:9b:9e:e2:
-         6b:3b:57:3a:82:70:4d:dc:09:c7:89:cb:0a:07:4d:6c:e8:5d:
-         8e:c9:ef:ce:ab:c7:bb:b5:2b:4e:45:d6:4a:d0:26:cc:e5:72:
-         ca:08:6a:a5:95:e3:15:a1:f7:a4:ed:c9:2c:5f:a5:fb:ff:ac:
-         28:02:2e:be:d7:7b:bb:e3:71:7b:90:16:d3:07:5e:46:53:7c:
-         37:07:42:8c:d3:c4:96:9c:d5:99:b5:2a:e0:95:1a:80:48:ae:
-         4c:39:07:ce:cc:47:a4:52:95:2b:ba:b8:fb:ad:d2:33:53:7d:
-         e5:1d:4d:6d:d5:a1:b1:c7:42:6f:e6:40:27:35:5c:a3:28:b7:
-         07:8d:e7:8d:33:90:e7:23:9f:fb:50:9c:79:6c:46:d5:b4:15:
-         b3:96:6e:7e:9b:0c:96:3a:b8:52:2d:3f:d6:5b:e1:fb:08:c2:
-         84:fe:24:a8:a3:89:da:ac:6a:e1:18:2a:b1:a8:43:61:5b:d3:
-         1f:dc:3b:8d:76:f2:2d:e8:8d:75:df:17:33:6c:3d:53:fb:7b:
-         cb:41:5f:ff:dc:a2:d0:61:38:e1:96:b8:ac:5d:8b:37:d7:75:
-         d5:33:c0:99:11:ae:9d:41:c1:72:75:84:be:02:41:42:5f:67:
-         24:48:94:d1:9b:27:be:07:3f:b9:b8:4f:81:74:51:e1:7a:b7:
-         ed:9d:23:e2:be:e0:d5:28:04:13:3c:31:03:9e:dd:7a:6c:8f:
-         c6:07:18:c6:7f:de:47:8e:3f:28:9e:04:06:cf:a5:54:34:77:
-         bd:ec:89:9b:e9:17:43:df:5b:db:5f:fe:8e:1e:57:a2:cd:40:
-         9d:7e:62:22:da:de:18:27
------BEGIN CERTIFICATE-----
-MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
-TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
-cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
-WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu
-ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY
-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc
-h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+
-0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U
-A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW
-T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH
-B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC
-B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv
-KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn
-OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn
-jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw
-qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI
-rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq
-hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL
-ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ
-3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK
-NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5
-ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur
-TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC
-jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc
-oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq
-4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA
-mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d
-emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc=
------END CERTIFICATE-----
diff --git a/global-config.rsc b/global-config.rsc
index 734b51e0..f99fdf13 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -102,7 +102,7 @@
     { url="https://sslbl.abuse.ch/blacklist/sslipblacklist.txt";
       cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
     { url="https://www.dshield.org/block.txt"; cidr="/24";
-      cert="R3" };
+      cert="ISRG Root X1" };
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="Certum Domain Validation CA SHA2" };
 #    { url="https://www.spamhaus.org/drop/drop.txt";
diff --git a/global-functions.rsc b/global-functions.rsc
index 6c5ce02f..567444ee 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -334,7 +334,7 @@
     :return true;
   }
 
-  :if ([ $CertificateAvailable "R3" ] = false) do={
+  :if ([ $CertificateAvailable "ISRG Root X1" ] = false) do={
     $LogPrint error $0 ("Downloading required certificate failed.");
     :return false;
   }
diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 4413f07d..cdc10e7c 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -98,7 +98,7 @@
 
   :do {
     :if ($NtfyServer = "ntfy.sh") do={
-      :if ([ $CertificateAvailable "R3" ] = false) do={
+      :if ([ $CertificateAvailable "ISRG Root X1" ] = false) do={
         $LogPrint warning $0 ("Downloading required certificate failed.");
         :error false;
       }

From b875d64724a8ac3218b2e0779effe19c1729e11a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 10:25:53 +0200
Subject: [PATCH 188/988] certs: GlobalSign Atlas R3 DV TLS CA 2022 Q3 ->
 GlobalSign

---
 .../GlobalSign-Atlas-R3-DV-TLS-CA-2022-Q3.pem | 177 ------------------
 certs/GlobalSign.pem                          |  28 +++
 global-config.rsc                             |   4 +-
 3 files changed, 30 insertions(+), 179 deletions(-)
 delete mode 100644 certs/GlobalSign-Atlas-R3-DV-TLS-CA-2022-Q3.pem
 create mode 100644 certs/GlobalSign.pem

diff --git a/certs/GlobalSign-Atlas-R3-DV-TLS-CA-2022-Q3.pem b/certs/GlobalSign-Atlas-R3-DV-TLS-CA-2022-Q3.pem
deleted file mode 100644
index b514c117..00000000
--- a/certs/GlobalSign-Atlas-R3-DV-TLS-CA-2022-Q3.pem
+++ /dev/null
@@ -1,177 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            7c:2a:0c:21:3f:c6:55:53:45:c9:1f:19:1f:b8:4e:fa
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
-        Validity
-            Not Before: Apr 20 12:00:00 2022 GMT
-            Not After : Apr 20 00:00:00 2025 GMT
-        Subject: C = BE, O = GlobalSign nv-sa, CN = GlobalSign Atlas R3 DV TLS CA 2022 Q3
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:b8:a8:7a:66:3c:4e:66:9c:ce:37:a5:54:35:4d:
-                    36:c7:99:d3:a8:27:36:f2:2f:c6:d5:18:3e:e9:09:
-                    dd:05:d6:d7:2c:34:32:7c:08:63:49:d1:10:37:e5:
-                    78:5d:11:62:ce:6d:fb:2f:3f:37:94:db:8f:7b:30:
-                    e9:5e:2c:d9:55:3f:b2:db:b9:a0:b5:60:37:8b:a4:
-                    06:32:35:50:a4:09:af:0a:45:ff:a8:1f:9b:65:8e:
-                    dd:4a:e0:40:a1:e3:63:37:58:90:dd:75:3b:fc:0e:
-                    1c:82:40:98:bd:70:b1:c1:48:14:14:3c:04:4b:69:
-                    dd:d4:9c:01:a6:e9:21:e3:82:0a:fe:e4:aa:bf:34:
-                    a0:8c:cb:c9:79:6e:3e:5c:6a:52:9e:c4:ed:2b:c5:
-                    69:fe:50:3c:93:9d:b5:ff:2d:28:a8:6c:06:6c:9d:
-                    c5:af:b2:59:fb:59:77:0d:74:7a:88:84:a4:d4:1d:
-                    d4:ba:20:06:cc:b5:1e:48:4e:74:21:15:86:75:c0:
-                    cc:5a:d1:05:cf:57:16:7a:13:17:ec:c2:4a:ae:d5:
-                    1e:72:aa:22:5a:8c:9c:82:32:c4:10:e6:42:6e:21:
-                    86:68:7c:80:23:30:35:d3:bd:b0:5e:0a:29:2b:f0:
-                    14:b1:18:37:d9:59:25:c3:e7:38:d9:e9:d4:2d:36:
-                    35:65
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Subject Key Identifier: 
-                FA:91:39:63:9A:FB:AD:10:24:E5:BE:B5:B9:DA:AB:D9:C4:46:69:AB
-            X509v3 Authority Key Identifier: 
-                8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
-            Authority Information Access: 
-                OCSP - URI:http://ocsp2.globalsign.com/rootr3
-                CA Issuers - URI:http://secure.globalsign.com/cacert/root-r3.crt
-            X509v3 CRL Distribution Points: 
-                Full Name:
-                  URI:http://crl.globalsign.com/root-r3.crl
-            X509v3 Certificate Policies: 
-                Policy: 2.23.140.1.2.1
-                Policy: 1.3.6.1.4.1.4146.10.1.3
-    Signature Algorithm: sha256WithRSAEncryption
-    Signature Value:
-        14:33:2c:79:e5:3f:82:c6:70:3f:da:59:38:a7:bb:a2:76:ac:
-        61:18:05:68:57:d9:0d:fb:8a:46:bc:f1:a8:e8:0c:70:02:1d:
-        c6:2f:97:ed:36:3e:9e:52:86:2f:5c:62:d8:d5:47:43:9a:73:
-        d1:2b:25:87:9f:44:b4:14:eb:26:bc:21:47:74:20:bd:9f:a4:
-        bf:b3:80:1d:4d:35:7d:cd:b9:b5:da:55:f2:90:50:c8:b2:17:
-        4e:0e:b4:61:88:29:5f:44:5d:03:7f:57:91:81:d0:eb:30:ae:
-        d5:2a:ec:82:20:ce:4e:d2:b0:8b:95:02:61:73:d8:69:34:f4:
-        ad:63:0e:5c:e4:20:1f:a9:7d:ed:8e:e5:1c:04:bb:22:9f:c7:
-        a9:22:ca:99:3d:02:a7:67:e8:06:2d:fa:04:6b:bb:49:d2:6c:
-        99:57:63:6c:2d:c2:61:78:e1:20:b1:fb:f6:bf:e1:82:39:39:
-        3c:7b:ef:7d:1a:95:4a:b2:72:da:55:90:ae:ed:dd:e2:70:90:
-        7c:1a:ee:b5:32:5a:5d:cf:d6:fa:45:f2:9e:01:0c:31:2f:89:
-        84:fe:31:60:0f:fd:ee:a6:5b:84:d5:c7:18:e6:a4:f9:40:30:
-        29:18:1e:fe:fc:41:b5:b9:29:05:75:8b:62:1a:5b:22:2e:bf:
-        e4:59:6c:b0
------BEGIN CERTIFICATE-----
-MIIEjzCCA3egAwIBAgIQfCoMIT/GVVNFyR8ZH7hO+jANBgkqhkiG9w0BAQsFADBM
-MSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xv
-YmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0yMjA0MjAxMjAwMDBaFw0y
-NTA0MjAwMDAwMDBaMFgxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWdu
-IG52LXNhMS4wLAYDVQQDEyVHbG9iYWxTaWduIEF0bGFzIFIzIERWIFRMUyBDQSAy
-MDIyIFEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKh6ZjxOZpzO
-N6VUNU02x5nTqCc28i/G1Rg+6QndBdbXLDQyfAhjSdEQN+V4XRFizm37Lz83lNuP
-ezDpXizZVT+y27mgtWA3i6QGMjVQpAmvCkX/qB+bZY7dSuBAoeNjN1iQ3XU7/A4c
-gkCYvXCxwUgUFDwES2nd1JwBpukh44IK/uSqvzSgjMvJeW4+XGpSnsTtK8Vp/lA8
-k521/y0oqGwGbJ3Fr7JZ+1l3DXR6iISk1B3UuiAGzLUeSE50IRWGdcDMWtEFz1cW
-ehMX7MJKrtUecqoiWoycgjLEEOZCbiGGaHyAIzA1072wXgopK/AUsRg32Vklw+c4
-2enULTY1ZQIDAQABo4IBXzCCAVswDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQG
-CCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQW
-BBT6kTljmvutECTlvrW52qvZxEZpqzAfBgNVHSMEGDAWgBSP8Et/qC5FJK5NUPpj
-move4t0bvDB7BggrBgEFBQcBAQRvMG0wLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
-Mi5nbG9iYWxzaWduLmNvbS9yb290cjMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9zZWN1
-cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L3Jvb3QtcjMuY3J0MDYGA1UdHwQvMC0w
-K6ApoCeGJWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vcm9vdC1yMy5jcmwwIQYD
-VR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAGgMgoBAzANBgkqhkiG9w0BAQsFAAOC
-AQEAFDMseeU/gsZwP9pZOKe7onasYRgFaFfZDfuKRrzxqOgMcAIdxi+X7TY+nlKG
-L1xi2NVHQ5pz0Sslh59EtBTrJrwhR3QgvZ+kv7OAHU01fc25tdpV8pBQyLIXTg60
-YYgpX0RdA39XkYHQ6zCu1SrsgiDOTtKwi5UCYXPYaTT0rWMOXOQgH6l97Y7lHAS7
-Ip/HqSLKmT0Cp2foBi36BGu7SdJsmVdjbC3CYXjhILH79r/hgjk5PHvvfRqVSrJy
-2lWQru3d4nCQfBrutTJaXc/W+kXyngEMMS+JhP4xYA/97qZbhNXHGOak+UAwKRge
-/vxBtbkpBXWLYhpbIi6/5FlssA==
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            04:00:00:00:00:01:21:58:53:08:a2
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
-        Validity
-            Not Before: Mar 18 10:00:00 2009 GMT
-            Not After : Mar 18 10:00:00 2029 GMT
-        Subject: OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:cc:25:76:90:79:06:78:22:16:f5:c0:83:b6:84:
-                    ca:28:9e:fd:05:76:11:c5:ad:88:72:fc:46:02:43:
-                    c7:b2:8a:9d:04:5f:24:cb:2e:4b:e1:60:82:46:e1:
-                    52:ab:0c:81:47:70:6c:dd:64:d1:eb:f5:2c:a3:0f:
-                    82:3d:0c:2b:ae:97:d7:b6:14:86:10:79:bb:3b:13:
-                    80:77:8c:08:e1:49:d2:6a:62:2f:1f:5e:fa:96:68:
-                    df:89:27:95:38:9f:06:d7:3e:c9:cb:26:59:0d:73:
-                    de:b0:c8:e9:26:0e:83:15:c6:ef:5b:8b:d2:04:60:
-                    ca:49:a6:28:f6:69:3b:f6:cb:c8:28:91:e5:9d:8a:
-                    61:57:37:ac:74:14:dc:74:e0:3a:ee:72:2f:2e:9c:
-                    fb:d0:bb:bf:f5:3d:00:e1:06:33:e8:82:2b:ae:53:
-                    a6:3a:16:73:8c:dd:41:0e:20:3a:c0:b4:a7:a1:e9:
-                    b2:4f:90:2e:32:60:e9:57:cb:b9:04:92:68:68:e5:
-                    38:26:60:75:b2:9f:77:ff:91:14:ef:ae:20:49:fc:
-                    ad:40:15:48:d1:02:31:61:19:5e:b8:97:ef:ad:77:
-                    b7:64:9a:7a:bf:5f:c1:13:ef:9b:62:fb:0d:6c:e0:
-                    54:69:16:a9:03:da:6e:e9:83:93:71:76:c6:69:85:
-                    82:17
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
-    Signature Algorithm: sha256WithRSAEncryption
-    Signature Value:
-        4b:40:db:c0:50:aa:fe:c8:0c:ef:f7:96:54:45:49:bb:96:00:
-        09:41:ac:b3:13:86:86:28:07:33:ca:6b:e6:74:b9:ba:00:2d:
-        ae:a4:0a:d3:f5:f1:f1:0f:8a:bf:73:67:4a:83:c7:44:7b:78:
-        e0:af:6e:6c:6f:03:29:8e:33:39:45:c3:8e:e4:b9:57:6c:aa:
-        fc:12:96:ec:53:c6:2d:e4:24:6c:b9:94:63:fb:dc:53:68:67:
-        56:3e:83:b8:cf:35:21:c3:c9:68:fe:ce:da:c2:53:aa:cc:90:
-        8a:e9:f0:5d:46:8c:95:dd:7a:58:28:1a:2f:1d:de:cd:00:37:
-        41:8f:ed:44:6d:d7:53:28:97:7e:f3:67:04:1e:15:d7:8a:96:
-        b4:d3:de:4c:27:a4:4c:1b:73:73:76:f4:17:99:c2:1f:7a:0e:
-        e3:2d:08:ad:0a:1c:2c:ff:3c:ab:55:0e:0f:91:7e:36:eb:c3:
-        57:49:be:e1:2e:2d:7c:60:8b:c3:41:51:13:23:9d:ce:f7:32:
-        6b:94:01:a8:99:e7:2c:33:1f:3a:3b:25:d2:86:40:ce:3b:2c:
-        86:78:c9:61:2f:14:ba:ee:db:55:6f:df:84:ee:05:09:4d:bd:
-        28:d8:72:ce:d3:62:50:65:1e:eb:92:97:83:31:d9:b3:b5:ca:
-        47:58:3f:5f
------BEGIN CERTIFICATE-----
-MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G
-A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp
-Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4
-MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEG
-A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI
-hvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWtiHL8
-RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsT
-gHeMCOFJ0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmm
-KPZpO/bLyCiR5Z2KYVc3rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zd
-QQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjlOCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZ
-XriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2xmmFghcCAwEAAaNCMEAw
-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI/wS3+o
-LkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZU
-RUm7lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMp
-jjM5RcOO5LlXbKr8EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK
-6fBdRoyV3XpYKBovHd7NADdBj+1EbddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQX
-mcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18YIvDQVETI53O9zJrlAGomecs
-Mx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7rkpeDMdmztcpH
-WD9f
------END CERTIFICATE-----
diff --git a/certs/GlobalSign.pem b/certs/GlobalSign.pem
new file mode 100644
index 00000000..47035e48
--- /dev/null
+++ b/certs/GlobalSign.pem
@@ -0,0 +1,28 @@
+# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3
+# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3
+# Label: "GlobalSign Root CA - R3"
+# Serial: 4835703278459759426209954
+# MD5 Fingerprint: c5:df:b8:49:ca:05:13:55:ee:2d:ba:1a:c3:3e:b0:28
+# SHA1 Fingerprint: d6:9b:56:11:48:f0:1c:77:c5:45:78:c1:09:26:df:5b:85:69:76:ad
+# SHA256 Fingerprint: cb:b5:22:d7:b7:f1:27:ad:6a:01:13:86:5b:df:1c:d4:10:2e:7d:07:59:af:63:5a:7c:f4:72:0d:c9:63:c5:3b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/global-config.rsc b/global-config.rsc
index f99fdf13..16de7213 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -98,9 +98,9 @@
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/block";
 #      cert="ISRG Root X2" };
     { url="https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt";
-      cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
+      cert="GlobalSign" };
     { url="https://sslbl.abuse.ch/blacklist/sslipblacklist.txt";
-      cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
+      cert="GlobalSign" };
     { url="https://www.dshield.org/block.txt"; cidr="/24";
       cert="ISRG Root X1" };
     { url="https://lists.blocklist.de/lists/strongips.txt";

From 944e125ef9186d933609c131dfdd85178a57453b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 10:29:40 +0200
Subject: [PATCH 189/988] certs: Certum Domain Validation CA SHA2 -> Certum
 Trusted Network CA

---
 certs/Certum-Domain-Validation-CA-SHA2.pem | 176 ---------------------
 certs/Certum-Trusted-Network-CA.pem        |  29 ++++
 global-config.rsc                          |   2 +-
 3 files changed, 30 insertions(+), 177 deletions(-)
 delete mode 100644 certs/Certum-Domain-Validation-CA-SHA2.pem
 create mode 100644 certs/Certum-Trusted-Network-CA.pem

diff --git a/certs/Certum-Domain-Validation-CA-SHA2.pem b/certs/Certum-Domain-Validation-CA-SHA2.pem
deleted file mode 100644
index 0cc17ac5..00000000
--- a/certs/Certum-Domain-Validation-CA-SHA2.pem
+++ /dev/null
@@ -1,176 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 279744 (0x444c0)
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
-        Validity
-            Not Before: Oct 22 12:07:37 2008 GMT
-            Not After : Dec 31 12:07:37 2029 GMT
-        Subject: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:e3:fb:7d:a3:72:ba:c2:f0:c9:14:87:f5:6b:01:
-                    4e:e1:6e:40:07:ba:6d:27:5d:7f:f7:5b:2d:b3:5a:
-                    c7:51:5f:ab:a4:32:a6:61:87:b6:6e:0f:86:d2:30:
-                    02:97:f8:d7:69:57:a1:18:39:5d:6a:64:79:c6:01:
-                    59:ac:3c:31:4a:38:7c:d2:04:d2:4b:28:e8:20:5f:
-                    3b:07:a2:cc:4d:73:db:f3:ae:4f:c7:56:d5:5a:a7:
-                    96:89:fa:f3:ab:68:d4:23:86:59:27:cf:09:27:bc:
-                    ac:6e:72:83:1c:30:72:df:e0:a2:e9:d2:e1:74:75:
-                    19:bd:2a:9e:7b:15:54:04:1b:d7:43:39:ad:55:28:
-                    c5:e2:1a:bb:f4:c0:e4:ae:38:49:33:cc:76:85:9f:
-                    39:45:d2:a4:9e:f2:12:8c:51:f8:7c:e4:2d:7f:f5:
-                    ac:5f:eb:16:9f:b1:2d:d1:ba:cc:91:42:77:4c:25:
-                    c9:90:38:6f:db:f0:cc:fb:8e:1e:97:59:3e:d5:60:
-                    4e:e6:05:28:ed:49:79:13:4b:ba:48:db:2f:f9:72:
-                    d3:39:ca:fe:1f:d8:34:72:f5:b4:40:cf:31:01:c3:
-                    ec:de:11:2d:17:5d:1f:b8:50:d1:5e:19:a7:69:de:
-                    07:33:28:ca:50:95:f9:a7:54:cb:54:86:50:45:a9:
-                    f9:49
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                08:76:CD:CB:07:FF:24:F6:C5:CD:ED:BB:90:BC:E2:84:37:46:75:F7
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-    Signature Algorithm: sha1WithRSAEncryption
-    Signature Value:
-        a6:a8:ad:22:ce:01:3d:a6:a3:ff:62:d0:48:9d:8b:5e:72:b0:
-        78:44:e3:dc:1c:af:09:fd:23:48:fa:bd:2a:c4:b9:55:04:b5:
-        10:a3:8d:27:de:0b:82:63:d0:ee:de:0c:37:79:41:5b:22:b2:
-        b0:9a:41:5c:a6:70:e0:d4:d0:77:cb:23:d3:00:e0:6c:56:2f:
-        e1:69:0d:0d:d9:aa:bf:21:81:50:d9:06:a5:a8:ff:95:37:d0:
-        aa:fe:e2:b3:f5:99:2d:45:84:8a:e5:42:09:d7:74:02:2f:f7:
-        89:d8:99:e9:bc:27:d4:47:8d:ba:0d:46:1c:77:cf:14:a4:1c:
-        b9:a4:31:c4:9c:28:74:03:34:ff:33:19:26:a5:e9:0d:74:b7:
-        3e:97:c6:76:e8:27:96:a3:66:dd:e1:ae:f2:41:5b:ca:98:56:
-        83:73:70:e4:86:1a:d2:31:41:ba:2f:be:2d:13:5a:76:6f:4e:
-        e8:4e:81:0e:3f:5b:03:22:a0:12:be:66:58:11:4a:cb:03:c4:
-        b4:2a:2a:2d:96:17:e0:39:54:bc:48:d3:76:27:9d:9a:2d:06:
-        a6:c9:ec:39:d2:ab:db:9f:9a:0b:27:02:35:29:b1:40:95:e7:
-        f9:e8:9c:55:88:19:46:d6:b7:34:f5:7e:ce:39:9a:d9:38:f1:
-        51:f7:4f:2c
------BEGIN CERTIFICATE-----
-MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBM
-MSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5D
-ZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBU
-cnVzdGVkIE5ldHdvcmsgQ0EwHhcNMDgxMDIyMTIwNzM3WhcNMjkxMjMxMTIwNzM3
-WjB+MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMg
-Uy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSIw
-IAYDVQQDExlDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBMIIBIjANBgkqhkiG9w0B
-AQEFAAOCAQ8AMIIBCgKCAQEA4/t9o3K6wvDJFIf1awFO4W5AB7ptJ11/91sts1rH
-UV+rpDKmYYe2bg+G0jACl/jXaVehGDldamR5xgFZrDwxSjh80gTSSyjoIF87B6LM
-TXPb865Px1bVWqeWifrzq2jUI4ZZJ88JJ7ysbnKDHDBy3+Ci6dLhdHUZvSqeexVU
-BBvXQzmtVSjF4hq79MDkrjhJM8x2hZ85RdKknvISjFH4fOQtf/WsX+sWn7Et0brM
-kUJ3TCXJkDhv2/DM+44el1k+1WBO5gUo7Ul5E0u6SNsv+XLTOcr+H9g0cvW0QM8x
-AcPs3hEtF10fuFDRXhmnad4HMyjKUJX5p1TLVIZQRan5SQIDAQABo0IwQDAPBgNV
-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIds3LB/8k9sXN7buQvOKEN0Z19zAOBgNV
-HQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAKaorSLOAT2mo/9i0Eidi15y
-sHhE49wcrwn9I0j6vSrEuVUEtRCjjSfeC4Jj0O7eDDd5QVsisrCaQVymcODU0HfL
-I9MA4GxWL+FpDQ3Zqr8hgVDZBqWo/5U30Kr+4rP1mS1FhIrlQgnXdAIv94nYmem8
-J9RHjboNRhx3zxSkHLmkMcScKHQDNP8zGSal6Q10tz6XxnboJ5ajZt3hrvJBW8qY
-VoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI
-03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw=
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            26:dd:d2:2b:46:c9:c4:4d:5a:69:4d:39:80:7e:72:ad
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
-        Validity
-            Not Before: Sep 11 12:00:00 2014 GMT
-            Not After : Jun  9 10:46:39 2027 GMT
-        Subject: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Domain Validation CA SHA2
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:a1:25:63:df:8d:e4:20:07:d9:54:d1:d1:04:f6:
-                    17:e2:3e:47:fb:c3:74:25:b8:c4:bf:12:12:bc:e0:
-                    70:d1:39:05:c2:17:b3:f7:82:70:a0:4e:07:fe:10:
-                    2a:ff:db:0d:46:5e:24:94:a3:8b:45:9f:18:9b:ce:
-                    42:c4:ae:db:83:33:bc:c2:bb:b4:30:b6:a7:37:87:
-                    78:7b:48:cb:25:2c:82:bb:0a:48:12:60:76:89:ec:
-                    8e:cc:8f:1e:52:48:e9:86:02:5a:c2:b0:8a:7c:85:
-                    3d:d9:ff:60:4f:33:6c:a6:a1:a0:85:e1:d7:53:f2:
-                    ea:27:3d:65:a9:72:c1:08:83:cc:b0:25:9c:11:46:
-                    24:e0:3e:f4:a7:ef:ed:51:b1:65:93:42:b4:f6:e6:
-                    86:0a:10:79:32:36:58:b2:6b:a8:dc:d5:7a:1e:9d:
-                    14:ee:40:e7:b2:46:4c:bd:9a:29:c2:ec:f8:30:c1:
-                    62:02:2a:e2:1c:83:62:d0:85:36:1a:83:de:12:84:
-                    29:65:ef:d2:32:be:31:60:42:a8:cf:f8:dd:ea:d0:
-                    56:47:1d:bd:76:96:24:13:e7:be:d9:99:2b:fa:30:
-                    64:f1:8a:38:7a:a6:e1:2a:96:02:b0:9d:ba:d8:8f:
-                    6d:4e:7a:94:69:7d:b0:93:aa:74:e5:93:90:13:fa:
-                    a2:99
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                E5:31:AD:BF:3A:11:96:F4:83:BC:50:3C:D4:B7:90:9B:90:EE:DE:25
-            X509v3 Authority Key Identifier: 
-                08:76:CD:CB:07:FF:24:F6:C5:CD:ED:BB:90:BC:E2:84:37:46:75:F7
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 CRL Distribution Points: 
-                Full Name:
-                  URI:http://crl.certum.pl/ctnca.crl
-            Authority Information Access: 
-                OCSP - URI:http://subca.ocsp-certum.com
-                CA Issuers - URI:http://repository.certum.pl/ctnca.cer
-            X509v3 Certificate Policies: 
-                Policy: X509v3 Any Policy
-                  CPS: http://www.certum.pl/CPS
-    Signature Algorithm: sha256WithRSAEncryption
-    Signature Value:
-        ba:bf:f0:e1:dd:4d:2b:42:43:64:58:df:64:f3:ff:80:1a:5f:
-        56:be:3b:a9:b2:76:f7:54:7a:4c:30:c1:99:24:4b:72:d2:ca:
-        d4:fa:08:c6:90:de:88:12:ed:f8:90:f9:fc:a9:84:fd:92:f2:
-        78:e5:db:c9:22:57:ab:41:30:42:6b:0b:9f:d7:73:33:fb:01:
-        67:1c:42:5c:8f:27:67:c7:6e:07:03:8d:0e:96:cb:0a:03:cc:
-        3e:f8:87:3c:35:30:cd:18:8c:d5:71:dd:cd:dd:61:b0:13:a3:
-        64:46:4e:fe:71:4e:6b:65:e9:14:04:f2:3f:a8:bd:0c:36:3d:
-        2a:5d:9e:07:f2:c2:4f:90:c5:5e:4d:18:37:d1:27:28:80:a4:
-        36:e5:ca:93:6a:65:0e:f8:93:b9:af:52:58:4b:7a:71:d8:ba:
-        f3:ef:d2:f3:f6:a2:97:e4:5d:14:02:9a:cb:e5:ae:b6:93:e1:
-        23:9f:9b:3f:46:f7:ee:8e:a1:00:5b:66:c3:1e:68:23:86:0f:
-        5d:77:ba:53:ad:f9:52:fb:70:15:c5:75:eb:cf:79:ad:49:7c:
-        f2:76:62:ae:44:2f:c5:5f:51:34:25:41:6a:12:0a:5f:8e:ae:
-        10:c4:43:89:35:fd:ec:ff:31:e6:ec:1e:87:e9:3a:7c:29:50:
-        45:41:a3:14
------BEGIN CERTIFICATE-----
-MIIEzjCCA7agAwIBAgIQJt3SK0bJxE1aaU05gH5yrTANBgkqhkiG9w0BAQsFADB+
-MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMgUy5B
-LjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSIwIAYD
-VQQDExlDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBMB4XDTE0MDkxMTEyMDAwMFoX
-DTI3MDYwOTEwNDYzOVowgYUxCzAJBgNVBAYTAlBMMSIwIAYDVQQKExlVbml6ZXRv
-IFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlv
-biBBdXRob3JpdHkxKTAnBgNVBAMTIENlcnR1bSBEb21haW4gVmFsaWRhdGlvbiBD
-QSBTSEEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSVj343kIAfZ
-VNHRBPYX4j5H+8N0JbjEvxISvOBw0TkFwhez94JwoE4H/hAq/9sNRl4klKOLRZ8Y
-m85CxK7bgzO8wru0MLanN4d4e0jLJSyCuwpIEmB2ieyOzI8eUkjphgJawrCKfIU9
-2f9gTzNspqGgheHXU/LqJz1lqXLBCIPMsCWcEUYk4D70p+/tUbFlk0K09uaGChB5
-MjZYsmuo3NV6Hp0U7kDnskZMvZopwuz4MMFiAiriHINi0IU2GoPeEoQpZe/SMr4x
-YEKoz/jd6tBWRx29dpYkE+e+2Zkr+jBk8Yo4eqbhKpYCsJ262I9tTnqUaX2wk6p0
-5ZOQE/qimQIDAQABo4IBPjCCATowDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
-5TGtvzoRlvSDvFA81LeQm5Du3iUwHwYDVR0jBBgwFoAUCHbNywf/JPbFze27kLzi
-hDdGdfcwDgYDVR0PAQH/BAQDAgEGMC8GA1UdHwQoMCYwJKAioCCGHmh0dHA6Ly9j
-cmwuY2VydHVtLnBsL2N0bmNhLmNybDBrBggrBgEFBQcBAQRfMF0wKAYIKwYBBQUH
-MAGGHGh0dHA6Ly9zdWJjYS5vY3NwLWNlcnR1bS5jb20wMQYIKwYBBQUHMAKGJWh0
-dHA6Ly9yZXBvc2l0b3J5LmNlcnR1bS5wbC9jdG5jYS5jZXIwOQYDVR0gBDIwMDAu
-BgRVHSAAMCYwJAYIKwYBBQUHAgEWGGh0dHA6Ly93d3cuY2VydHVtLnBsL0NQUzAN
-BgkqhkiG9w0BAQsFAAOCAQEAur/w4d1NK0JDZFjfZPP/gBpfVr47qbJ291R6TDDB
-mSRLctLK1PoIxpDeiBLt+JD5/KmE/ZLyeOXbySJXq0EwQmsLn9dzM/sBZxxCXI8n
-Z8duBwONDpbLCgPMPviHPDUwzRiM1XHdzd1hsBOjZEZO/nFOa2XpFATyP6i9DDY9
-Kl2eB/LCT5DFXk0YN9EnKICkNuXKk2plDviTua9SWEt6cdi68+/S8/ail+RdFAKa
-y+WutpPhI5+bP0b37o6hAFtmwx5oI4YPXXe6U635UvtwFcV16895rUl88nZirkQv
-xV9RNCVBahIKX46uEMRDiTX97P8x5uweh+k6fClQRUGjFA==
------END CERTIFICATE-----
diff --git a/certs/Certum-Trusted-Network-CA.pem b/certs/Certum-Trusted-Network-CA.pem
new file mode 100644
index 00000000..a48e7063
--- /dev/null
+++ b/certs/Certum-Trusted-Network-CA.pem
@@ -0,0 +1,29 @@
+# Issuer: CN=Certum Trusted Network CA O=Unizeto Technologies S.A. OU=Certum Certification Authority
+# Subject: CN=Certum Trusted Network CA O=Unizeto Technologies S.A. OU=Certum Certification Authority
+# Label: "Certum Trusted Network CA"
+# Serial: 279744
+# MD5 Fingerprint: d5:e9:81:40:c5:18:69:fc:46:2c:89:75:62:0f:aa:78
+# SHA1 Fingerprint: 07:e0:32:e0:20:b7:2c:3f:19:2f:06:28:a2:59:3a:19:a7:0f:06:9e
+# SHA256 Fingerprint: 5c:58:46:8d:55:f5:8e:49:7e:74:39:82:d2:b5:00:10:b6:d1:65:37:4a:cf:83:a7:d4:a3:2d:b7:68:c4:40:8e
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/global-config.rsc b/global-config.rsc
index 16de7213..73a9ca02 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -104,7 +104,7 @@
     { url="https://www.dshield.org/block.txt"; cidr="/24";
       cert="ISRG Root X1" };
     { url="https://lists.blocklist.de/lists/strongips.txt";
-      cert="Certum Domain Validation CA SHA2" };
+      cert="Certum Trusted Network CA" };
 #    { url="https://www.spamhaus.org/drop/drop.txt";
 #      cert="Cloudflare Inc ECC CA-3" };
 #    { url="https://www.spamhaus.org/drop/edrop.txt";

From 7553870f2aac7182f5181273fb4a73e219fc68c7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 10:32:01 +0200
Subject: [PATCH 190/988] certs: Cloudflare Inc ECC CA-3 -> Baltimore
 CyberTrust Root

---
 certs/Baltimore-CyberTrust-Root.pem |  28 +++++
 certs/Cloudflare-Inc-ECC-CA-3.pem   | 163 ----------------------------
 global-config.rsc                   |   4 +-
 3 files changed, 30 insertions(+), 165 deletions(-)
 create mode 100644 certs/Baltimore-CyberTrust-Root.pem
 delete mode 100644 certs/Cloudflare-Inc-ECC-CA-3.pem

diff --git a/certs/Baltimore-CyberTrust-Root.pem b/certs/Baltimore-CyberTrust-Root.pem
new file mode 100644
index 00000000..de8121a2
--- /dev/null
+++ b/certs/Baltimore-CyberTrust-Root.pem
@@ -0,0 +1,28 @@
+# Issuer: CN=Baltimore CyberTrust Root O=Baltimore OU=CyberTrust
+# Subject: CN=Baltimore CyberTrust Root O=Baltimore OU=CyberTrust
+# Label: "Baltimore CyberTrust Root"
+# Serial: 33554617
+# MD5 Fingerprint: ac:b6:94:a5:9c:17:e0:d7:91:52:9b:b1:97:06:a6:e4
+# SHA1 Fingerprint: d4:de:20:d0:5e:66:fc:53:fe:1a:50:88:2c:78:db:28:52:ca:e4:74
+# SHA256 Fingerprint: 16:af:57:a9:f6:76:b0:ab:12:60:95:aa:5e:ba:de:f2:2a:b3:11:19:d6:44:ac:95:cd:4b:93:db:f3:f2:6a:eb
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/certs/Cloudflare-Inc-ECC-CA-3.pem b/certs/Cloudflare-Inc-ECC-CA-3.pem
deleted file mode 100644
index fa916034..00000000
--- a/certs/Cloudflare-Inc-ECC-CA-3.pem
+++ /dev/null
@@ -1,163 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            0a:37:87:64:5e:5f:b4:8c:22:4e:fd:1b:ed:14:0c:3c
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root
-        Validity
-            Not Before: Jan 27 12:48:08 2020 GMT
-            Not After : Dec 31 23:59:59 2024 GMT
-        Subject: C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3
-        Subject Public Key Info:
-            Public Key Algorithm: id-ecPublicKey
-                Public-Key: (256 bit)
-                pub:
-                    04:b9:ad:4d:66:99:14:0b:46:ec:1f:81:d1:2a:50:
-                    1e:9d:03:15:2f:34:12:7d:2d:96:b8:88:38:9b:85:
-                    5f:8f:bf:bb:4d:ef:61:46:c4:c9:73:d4:24:4f:e0:
-                    ee:1c:ce:6c:b3:51:71:2f:6a:ee:4c:05:09:77:d3:
-                    72:62:a4:9b:d7
-                ASN1 OID: prime256v1
-                NIST CURVE: P-256
-        X509v3 extensions:
-            X509v3 Subject Key Identifier: 
-                A5:CE:37:EA:EB:B0:75:0E:94:67:88:B4:45:FA:D9:24:10:87:96:1F
-            X509v3 Authority Key Identifier: 
-                E5:9D:59:30:82:47:58:CC:AC:FA:08:54:36:86:7B:3A:B5:04:4D:F0
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.digicert.com
-            X509v3 CRL Distribution Points: 
-                Full Name:
-                  URI:http://crl3.digicert.com/Omniroot2025.crl
-            X509v3 Certificate Policies: 
-                Policy: 2.16.840.1.114412.1.1
-                  CPS: https://www.digicert.com/CPS
-                Policy: 2.16.840.1.114412.1.2
-                Policy: 2.23.140.1.2.1
-                Policy: 2.23.140.1.2.2
-                Policy: 2.23.140.1.2.3
-    Signature Algorithm: sha256WithRSAEncryption
-    Signature Value:
-        05:24:1d:dd:1b:b0:2a:eb:98:d6:85:e3:39:4d:5e:6b:57:9d:
-        82:57:fc:eb:e8:31:a2:57:90:65:05:be:16:44:38:5a:77:02:
-        b9:cf:10:42:c6:e1:92:a4:e3:45:27:f8:00:47:2c:68:a8:56:
-        99:53:54:8f:ad:9e:40:c1:d0:0f:b6:d7:0d:0b:38:48:6c:50:
-        2c:49:90:06:5b:64:1d:8b:cc:48:30:2e:de:08:e2:9b:49:22:
-        c0:92:0c:11:5e:96:92:94:d5:fc:20:dc:56:6c:e5:92:93:bf:
-        7a:1c:c0:37:e3:85:49:15:fa:2b:e1:74:39:18:0f:b7:da:f3:
-        a2:57:58:60:4f:cc:8e:94:00:fc:46:7b:34:31:3e:4d:47:82:
-        81:3a:cb:f4:89:5d:0e:ef:4d:0d:6e:9c:1b:82:24:dd:32:25:
-        5d:11:78:51:10:3d:a0:35:23:04:2f:65:6f:9c:c1:d1:43:d7:
-        d0:1e:f3:31:67:59:27:dd:6b:d2:75:09:93:11:24:24:14:cf:
-        29:be:e6:23:c3:b8:8f:72:3f:e9:07:c8:24:44:53:7a:b3:b9:
-        61:65:a1:4c:0e:c6:48:00:c9:75:63:05:87:70:45:52:83:d3:
-        95:9d:45:ea:f0:e8:31:1d:7e:09:1f:0a:fe:3e:dd:aa:3c:5e:
-        74:d2:ac:b1
------BEGIN CERTIFICATE-----
-MIIDzTCCArWgAwIBAgIQCjeHZF5ftIwiTv0b7RQMPDANBgkqhkiG9w0BAQsFADBa
-MQswCQYDVQQGEwJJRTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJl
-clRydXN0MSIwIAYDVQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTIw
-MDEyNzEyNDgwOFoXDTI0MTIzMTIzNTk1OVowSjELMAkGA1UEBhMCVVMxGTAXBgNV
-BAoTEENsb3VkZmxhcmUsIEluYy4xIDAeBgNVBAMTF0Nsb3VkZmxhcmUgSW5jIEVD
-QyBDQS0zMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEua1NZpkUC0bsH4HRKlAe
-nQMVLzQSfS2WuIg4m4Vfj7+7Te9hRsTJc9QkT+DuHM5ss1FxL2ruTAUJd9NyYqSb
-16OCAWgwggFkMB0GA1UdDgQWBBSlzjfq67B1DpRniLRF+tkkEIeWHzAfBgNVHSME
-GDAWgBTlnVkwgkdYzKz6CFQ2hns6tQRN8DAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0l
-BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBIGA1UdEwEB/wQIMAYBAf8CAQAwNAYI
-KwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j
-b20wOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL09t
-bmlyb290MjAyNS5jcmwwbQYDVR0gBGYwZDA3BglghkgBhv1sAQEwKjAoBggrBgEF
-BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzALBglghkgBhv1sAQIw
-CAYGZ4EMAQIBMAgGBmeBDAECAjAIBgZngQwBAgMwDQYJKoZIhvcNAQELBQADggEB
-AAUkHd0bsCrrmNaF4zlNXmtXnYJX/OvoMaJXkGUFvhZEOFp3ArnPEELG4ZKk40Un
-+ABHLGioVplTVI+tnkDB0A+21w0LOEhsUCxJkAZbZB2LzEgwLt4I4ptJIsCSDBFe
-lpKU1fwg3FZs5ZKTv3ocwDfjhUkV+ivhdDkYD7fa86JXWGBPzI6UAPxGezQxPk1H
-goE6y/SJXQ7vTQ1unBuCJN0yJV0ReFEQPaA1IwQvZW+cwdFD19Ae8zFnWSfda9J1
-CZMRJCQUzym+5iPDuI9yP+kHyCREU3qzuWFloUwOxkgAyXVjBYdwRVKD05WdRerw
-6DEdfgkfCv4+3ao8XnTSrLE=
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 33554617 (0x20000b9)
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root
-        Validity
-            Not Before: May 12 18:46:00 2000 GMT
-            Not After : May 12 23:59:00 2025 GMT
-        Subject: C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:a3:04:bb:22:ab:98:3d:57:e8:26:72:9a:b5:79:
-                    d4:29:e2:e1:e8:95:80:b1:b0:e3:5b:8e:2b:29:9a:
-                    64:df:a1:5d:ed:b0:09:05:6d:db:28:2e:ce:62:a2:
-                    62:fe:b4:88:da:12:eb:38:eb:21:9d:c0:41:2b:01:
-                    52:7b:88:77:d3:1c:8f:c7:ba:b9:88:b5:6a:09:e7:
-                    73:e8:11:40:a7:d1:cc:ca:62:8d:2d:e5:8f:0b:a6:
-                    50:d2:a8:50:c3:28:ea:f5:ab:25:87:8a:9a:96:1c:
-                    a9:67:b8:3f:0c:d5:f7:f9:52:13:2f:c2:1b:d5:70:
-                    70:f0:8f:c0:12:ca:06:cb:9a:e1:d9:ca:33:7a:77:
-                    d6:f8:ec:b9:f1:68:44:42:48:13:d2:c0:c2:a4:ae:
-                    5e:60:fe:b6:a6:05:fc:b4:dd:07:59:02:d4:59:18:
-                    98:63:f5:a5:63:e0:90:0c:7d:5d:b2:06:7a:f3:85:
-                    ea:eb:d4:03:ae:5e:84:3e:5f:ff:15:ed:69:bc:f9:
-                    39:36:72:75:cf:77:52:4d:f3:c9:90:2c:b9:3d:e5:
-                    c9:23:53:3f:1f:24:98:21:5c:07:99:29:bd:c6:3a:
-                    ec:e7:6e:86:3a:6b:97:74:63:33:bd:68:18:31:f0:
-                    78:8d:76:bf:fc:9e:8e:5d:2a:86:a7:4d:90:dc:27:
-                    1a:39
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Subject Key Identifier: 
-                E5:9D:59:30:82:47:58:CC:AC:FA:08:54:36:86:7B:3A:B5:04:4D:F0
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:3
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-    Signature Algorithm: sha1WithRSAEncryption
-    Signature Value:
-        85:0c:5d:8e:e4:6f:51:68:42:05:a0:dd:bb:4f:27:25:84:03:
-        bd:f7:64:fd:2d:d7:30:e3:a4:10:17:eb:da:29:29:b6:79:3f:
-        76:f6:19:13:23:b8:10:0a:f9:58:a4:d4:61:70:bd:04:61:6a:
-        12:8a:17:d5:0a:bd:c5:bc:30:7c:d6:e9:0c:25:8d:86:40:4f:
-        ec:cc:a3:7e:38:c6:37:11:4f:ed:dd:68:31:8e:4c:d2:b3:01:
-        74:ee:be:75:5e:07:48:1a:7f:70:ff:16:5c:84:c0:79:85:b8:
-        05:fd:7f:be:65:11:a3:0f:c0:02:b4:f8:52:37:39:04:d5:a9:
-        31:7a:18:bf:a0:2a:f4:12:99:f7:a3:45:82:e3:3c:5e:f5:9d:
-        9e:b5:c8:9e:7c:2e:c8:a4:9e:4e:08:14:4b:6d:fd:70:6d:6b:
-        1a:63:bd:64:e6:1f:b7:ce:f0:f2:9f:2e:bb:1b:b7:f2:50:88:
-        73:92:c2:e2:e3:16:8d:9a:32:02:ab:8e:18:dd:e9:10:11:ee:
-        7e:35:ab:90:af:3e:30:94:7a:d0:33:3d:a7:65:0f:f5:fc:8e:
-        9e:62:cf:47:44:2c:01:5d:bb:1d:b5:32:d2:47:d2:38:2e:d0:
-        fe:81:dc:32:6a:1e:b5:ee:3c:d5:fc:e7:81:1d:19:c3:24:42:
-        ea:63:39:a9
------BEGIN CERTIFICATE-----
-MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
-RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
-VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoX
-DTI1MDUxMjIzNTkwMFowWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9y
-ZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVy
-VHJ1c3QgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKMEuyKr
-mD1X6CZymrV51Cni4eiVgLGw41uOKymaZN+hXe2wCQVt2yguzmKiYv60iNoS6zjr
-IZ3AQSsBUnuId9Mcj8e6uYi1agnnc+gRQKfRzMpijS3ljwumUNKoUMMo6vWrJYeK
-mpYcqWe4PwzV9/lSEy/CG9VwcPCPwBLKBsua4dnKM3p31vjsufFoREJIE9LAwqSu
-XmD+tqYF/LTdB1kC1FkYmGP1pWPgkAx9XbIGevOF6uvUA65ehD5f/xXtabz5OTZy
-dc93Uk3zyZAsuT3lySNTPx8kmCFcB5kpvcY67Oduhjprl3RjM71oGDHweI12v/ye
-jl0qhqdNkNwnGjkCAwEAAaNFMEMwHQYDVR0OBBYEFOWdWTCCR1jMrPoIVDaGezq1
-BE3wMBIGA1UdEwEB/wQIMAYBAf8CAQMwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3
-DQEBBQUAA4IBAQCFDF2O5G9RaEIFoN27TyclhAO992T9Ldcw46QQF+vaKSm2eT92
-9hkTI7gQCvlYpNRhcL0EYWoSihfVCr3FvDB81ukMJY2GQE/szKN+OMY3EU/t3Wgx
-jkzSswF07r51XgdIGn9w/xZchMB5hbgF/X++ZRGjD8ACtPhSNzkE1akxehi/oCr0
-Epn3o0WC4zxe9Z2etciefC7IpJ5OCBRLbf1wbWsaY71k5h+3zvDyny67G7fyUIhz
-ksLi4xaNmjICq44Y3ekQEe5+NauQrz4wlHrQMz2nZQ/1/I6eYs9HRCwBXbsdtTLS
-R9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp
------END CERTIFICATE-----
diff --git a/global-config.rsc b/global-config.rsc
index 73a9ca02..cdc1d5ca 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -106,9 +106,9 @@
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="Certum Trusted Network CA" };
 #    { url="https://www.spamhaus.org/drop/drop.txt";
-#      cert="Cloudflare Inc ECC CA-3" };
+#      cert="Baltimore CyberTrust Root" };
 #    { url="https://www.spamhaus.org/drop/edrop.txt";
-#      cert="Cloudflare Inc ECC CA-3" };
+#      cert="Baltimore CyberTrust Root" };
   };
 #  "mikrotik"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";

From a744508d4f59bb95106b454c930fbb3f9eb28066 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 10:34:49 +0200
Subject: [PATCH 191/988] certs: Starfield Secure Certificate Authority - G2 ->
 Starfield Root Certificate Authority - G2

---
 ...tarfield-Root-Certificate-Authority-G2.pem |  30 +++
 ...rfield-Secure-Certificate-Authority-G2.pem | 179 ------------------
 update-tunnelbroker.rsc                       |   2 +-
 3 files changed, 31 insertions(+), 180 deletions(-)
 create mode 100644 certs/Starfield-Root-Certificate-Authority-G2.pem
 delete mode 100644 certs/Starfield-Secure-Certificate-Authority-G2.pem

diff --git a/certs/Starfield-Root-Certificate-Authority-G2.pem b/certs/Starfield-Root-Certificate-Authority-G2.pem
new file mode 100644
index 00000000..4e6774d2
--- /dev/null
+++ b/certs/Starfield-Root-Certificate-Authority-G2.pem
@@ -0,0 +1,30 @@
+# Issuer: CN=Starfield Root Certificate Authority - G2 O=Starfield Technologies, Inc.
+# Subject: CN=Starfield Root Certificate Authority - G2 O=Starfield Technologies, Inc.
+# Label: "Starfield Root Certificate Authority - G2"
+# Serial: 0
+# MD5 Fingerprint: d6:39:81:c6:52:7e:96:69:fc:fc:ca:66:ed:05:f2:96
+# SHA1 Fingerprint: b5:1c:06:7c:ee:2b:0c:3d:f8:55:ab:2d:92:f4:fe:39:d4:e7:0f:0e
+# SHA256 Fingerprint: 2c:e1:cb:0b:f9:d2:f9:e1:02:99:3f:be:21:51:52:c3:b2:dd:0c:ab:de:1c:68:e5:31:9b:83:91:54:db:b7:f5
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/certs/Starfield-Secure-Certificate-Authority-G2.pem b/certs/Starfield-Secure-Certificate-Authority-G2.pem
deleted file mode 100644
index 7772e6ba..00000000
--- a/certs/Starfield-Secure-Certificate-Authority-G2.pem
+++ /dev/null
@@ -1,179 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 7 (0x7)
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Root Certificate Authority - G2
-        Validity
-            Not Before: May  3 07:00:00 2011 GMT
-            Not After : May  3 07:00:00 2031 GMT
-        Subject: C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", OU = http://certs.starfieldtech.com/repository/, CN = Starfield Secure Certificate Authority - G2
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
-                Modulus:
-                    00:e5:90:66:4b:ec:f9:46:71:a9:20:83:be:e9:6c:
-                    bf:4a:c9:48:69:81:75:4e:6d:24:f6:cb:17:13:f8:
-                    b0:71:59:84:7a:6b:2b:85:a4:34:b5:16:e5:cb:cc:
-                    e9:41:70:2c:a4:2e:d6:fa:32:7d:e1:a8:de:94:10:
-                    ac:31:c1:c0:d8:6a:ff:59:27:ab:76:d6:fc:0b:74:
-                    6b:b8:a7:ae:3f:c4:54:f4:b4:31:44:dd:93:56:8c:
-                    a4:4c:5e:9b:89:cb:24:83:9b:e2:57:7d:b7:d8:12:
-                    1f:c9:85:6d:f4:d1:80:f1:50:9b:87:ae:d4:0b:10:
-                    05:fb:27:ba:28:6d:17:e9:0e:d6:4d:b9:39:55:06:
-                    ff:0a:24:05:7e:2f:c6:1d:72:6c:d4:8b:29:8c:57:
-                    7d:da:d9:eb:66:1a:d3:4f:a7:df:7f:52:c4:30:c5:
-                    a5:c9:0e:02:c5:53:bf:77:38:68:06:24:c3:66:c8:
-                    37:7e:30:1e:45:71:23:35:ff:90:d8:2a:9d:8d:e7:
-                    b0:92:4d:3c:7f:2a:0a:93:dc:cd:16:46:65:f7:60:
-                    84:8b:76:4b:91:27:73:14:92:e0:ea:ee:8f:16:ea:
-                    8d:0e:3e:76:17:bf:7d:89:80:80:44:43:e7:2d:e0:
-                    43:09:75:da:36:e8:ad:db:89:3a:f5:5d:12:8e:23:
-                    04:83
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Subject Key Identifier: 
-                25:45:81:68:50:26:38:3D:3B:2D:2C:BE:CD:6A:D9:B6:3D:B3:66:63
-            X509v3 Authority Key Identifier: 
-                keyid:7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
-
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.starfieldtech.com/
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl.starfieldtech.com/sfroot-g2.crl
-
-            X509v3 Certificate Policies: 
-                Policy: X509v3 Any Policy
-                  CPS: https://certs.starfieldtech.com/repository/
-
-    Signature Algorithm: sha256WithRSAEncryption
-         56:65:ca:fe:f3:3f:0a:a8:93:8b:18:c7:de:43:69:13:34:20:
-         be:4e:5f:78:a8:6b:9c:db:6a:4d:41:db:c1:13:ec:dc:31:00:
-         22:5e:f7:00:9e:0c:e0:34:65:34:f9:b1:3a:4e:48:c8:12:81:
-         88:5c:5b:3e:08:53:7a:f7:1a:64:df:b8:50:61:cc:53:51:40:
-         29:4b:c2:f4:ae:3a:5f:e4:ca:ad:26:cc:4e:61:43:e5:fd:57:
-         a6:37:70:ce:43:2b:b0:94:c3:92:e9:e1:5f:aa:10:49:b7:69:
-         e4:e0:d0:1f:64:a4:2b:cd:1f:6f:a0:f8:84:24:18:ce:79:3d:
-         a9:91:bf:54:18:13:89:99:54:11:0d:55:c5:26:0b:79:4f:5a:
-         1c:6e:f9:63:db:14:80:a4:07:ab:fa:b2:a5:b9:88:dd:91:fe:
-         65:3b:a4:a3:79:be:89:4d:e1:d0:b0:f4:c8:17:0c:0a:96:14:
-         7c:09:b7:6c:e1:c2:d8:55:d4:18:a0:aa:41:69:70:24:a3:b9:
-         ef:e9:5a:dc:3e:eb:94:4a:f0:b7:de:5f:0e:76:fa:fb:fb:69:
-         03:45:40:50:ee:72:0c:a4:12:86:81:cd:13:d1:4e:c4:3c:ca:
-         4e:0d:d2:26:f1:00:b7:b4:a6:a2:e1:6e:7a:81:fd:30:ac:7a:
-         1f:c7:59:7b
------BEGIN CERTIFICATE-----
-MIIFADCCA+igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMx
-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT
-HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVs
-ZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAw
-MFoXDTMxMDUwMzA3MDAwMFowgcYxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6
-b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQgVGVj
-aG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypodHRwOi8vY2VydHMuc3RhcmZpZWxk
-dGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNVBAMTK1N0YXJmaWVsZCBTZWN1cmUg
-Q2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
-DwAwggEKAoIBAQDlkGZL7PlGcakgg77pbL9KyUhpgXVObST2yxcT+LBxWYR6ayuF
-pDS1FuXLzOlBcCykLtb6Mn3hqN6UEKwxwcDYav9ZJ6t21vwLdGu4p64/xFT0tDFE
-3ZNWjKRMXpuJyySDm+JXfbfYEh/JhW300YDxUJuHrtQLEAX7J7oobRfpDtZNuTlV
-Bv8KJAV+L8YdcmzUiymMV33a2etmGtNPp99/UsQwxaXJDgLFU793OGgGJMNmyDd+
-MB5FcSM1/5DYKp2N57CSTTx/KgqT3M0WRmX3YISLdkuRJ3MUkuDq7o8W6o0OPnYX
-v32JgIBEQ+ct4EMJddo26K3biTr1XRKOIwSDAgMBAAGjggEsMIIBKDAPBgNVHRMB
-Af8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUJUWBaFAmOD07LSy+
-zWrZtj2zZmMwHwYDVR0jBBgwFoAUfAwyH6fZMH/EfWijYqihzqsHWycwOgYIKwYB
-BQUHAQEELjAsMCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5zdGFyZmllbGR0ZWNo
-LmNvbS8wOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zdGFyZmllbGR0ZWNo
-LmNvbS9zZnJvb3QtZzIuY3JsMEwGA1UdIARFMEMwQQYEVR0gADA5MDcGCCsGAQUF
-BwIBFitodHRwczovL2NlcnRzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkv
-MA0GCSqGSIb3DQEBCwUAA4IBAQBWZcr+8z8KqJOLGMfeQ2kTNCC+Tl94qGuc22pN
-QdvBE+zcMQAiXvcAngzgNGU0+bE6TkjIEoGIXFs+CFN69xpk37hQYcxTUUApS8L0
-rjpf5MqtJsxOYUPl/VemN3DOQyuwlMOS6eFfqhBJt2nk4NAfZKQrzR9voPiEJBjO
-eT2pkb9UGBOJmVQRDVXFJgt5T1ocbvlj2xSApAer+rKluYjdkf5lO6Sjeb6JTeHQ
-sPTIFwwKlhR8Cbds4cLYVdQYoKpBaXAko7nv6VrcPuuUSvC33l8Odvr7+2kDRUBQ
-7nIMpBKGgc0T0U7EPMpODdIm8QC3tKai4W56gf0wrHofx1l7
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 0 (0x0)
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Root Certificate Authority - G2
-        Validity
-            Not Before: Sep  1 00:00:00 2009 GMT
-            Not After : Dec 31 23:59:59 2037 GMT
-        Subject: C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Root Certificate Authority - G2
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
-                Modulus:
-                    00:bd:ed:c1:03:fc:f6:8f:fc:02:b1:6f:5b:9f:48:
-                    d9:9d:79:e2:a2:b7:03:61:56:18:c3:47:b6:d7:ca:
-                    3d:35:2e:89:43:f7:a1:69:9b:de:8a:1a:fd:13:20:
-                    9c:b4:49:77:32:29:56:fd:b9:ec:8c:dd:22:fa:72:
-                    dc:27:61:97:ee:f6:5a:84:ec:6e:19:b9:89:2c:dc:
-                    84:5b:d5:74:fb:6b:5f:c5:89:a5:10:52:89:46:55:
-                    f4:b8:75:1c:e6:7f:e4:54:ae:4b:f8:55:72:57:02:
-                    19:f8:17:71:59:eb:1e:28:07:74:c5:9d:48:be:6c:
-                    b4:f4:a4:b0:f3:64:37:79:92:c0:ec:46:5e:7f:e1:
-                    6d:53:4c:62:af:cd:1f:0b:63:bb:3a:9d:fb:fc:79:
-                    00:98:61:74:cf:26:82:40:63:f3:b2:72:6a:19:0d:
-                    99:ca:d4:0e:75:cc:37:fb:8b:89:c1:59:f1:62:7f:
-                    5f:b3:5f:65:30:f8:a7:b7:4d:76:5a:1e:76:5e:34:
-                    c0:e8:96:56:99:8a:b3:f0:7f:a4:cd:bd:dc:32:31:
-                    7c:91:cf:e0:5f:11:f8:6b:aa:49:5c:d1:99:94:d1:
-                    a2:e3:63:5b:09:76:b5:56:62:e1:4b:74:1d:96:d4:
-                    26:d4:08:04:59:d0:98:0e:0e:e6:de:fc:c3:ec:1f:
-                    90:f1
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Subject Key Identifier: 
-                7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
-    Signature Algorithm: sha256WithRSAEncryption
-         11:59:fa:25:4f:03:6f:94:99:3b:9a:1f:82:85:39:d4:76:05:
-         94:5e:e1:28:93:6d:62:5d:09:c2:a0:a8:d4:b0:75:38:f1:34:
-         6a:9d:e4:9f:8a:86:26:51:e6:2c:d1:c6:2d:6e:95:20:4a:92:
-         01:ec:b8:8a:67:7b:31:e2:67:2e:8c:95:03:26:2e:43:9d:4a:
-         31:f6:0e:b5:0c:bb:b7:e2:37:7f:22:ba:00:a3:0e:7b:52:fb:
-         6b:bb:3b:c4:d3:79:51:4e:cd:90:f4:67:07:19:c8:3c:46:7a:
-         0d:01:7d:c5:58:e7:6d:e6:85:30:17:9a:24:c4:10:e0:04:f7:
-         e0:f2:7f:d4:aa:0a:ff:42:1d:37:ed:94:e5:64:59:12:20:77:
-         38:d3:32:3e:38:81:75:96:73:fa:68:8f:b1:cb:ce:1f:c5:ec:
-         fa:9c:7e:cf:7e:b1:f1:07:2d:b6:fc:bf:ca:a4:bf:d0:97:05:
-         4a:bc:ea:18:28:02:90:bd:54:78:09:21:71:d3:d1:7d:1d:d9:
-         16:b0:a9:61:3d:d0:0a:00:22:fc:c7:7b:cb:09:64:45:0b:3b:
-         40:81:f7:7d:7c:32:f5:98:ca:58:8e:7d:2a:ee:90:59:73:64:
-         f9:36:74:5e:25:a1:f5:66:05:2e:7f:39:15:a9:2a:fb:50:8b:
-         8e:85:69:f4
------BEGIN CERTIFICATE-----
-MIID3TCCAsWgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMx
-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT
-HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVs
-ZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAw
-MFoXDTM3MTIzMTIzNTk1OVowgY8xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6
-b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQgVGVj
-aG5vbG9naWVzLCBJbmMuMTIwMAYDVQQDEylTdGFyZmllbGQgUm9vdCBDZXJ0aWZp
-Y2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBAL3twQP89o/8ArFvW59I2Z154qK3A2FWGMNHttfKPTUuiUP3oWmb3ooa/RMg
-nLRJdzIpVv257IzdIvpy3Cdhl+72WoTsbhm5iSzchFvVdPtrX8WJpRBSiUZV9Lh1
-HOZ/5FSuS/hVclcCGfgXcVnrHigHdMWdSL5stPSksPNkN3mSwOxGXn/hbVNMYq/N
-Hwtjuzqd+/x5AJhhdM8mgkBj87JyahkNmcrUDnXMN/uLicFZ8WJ/X7NfZTD4p7dN
-dloedl40wOiWVpmKs/B/pM293DIxfJHP4F8R+GuqSVzRmZTRouNjWwl2tVZi4Ut0
-HZbUJtQIBFnQmA4O5t78w+wfkPECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAO
-BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFHwMMh+n2TB/xH1oo2Kooc6rB1snMA0G
-CSqGSIb3DQEBCwUAA4IBAQARWfolTwNvlJk7mh+ChTnUdgWUXuEok21iXQnCoKjU
-sHU48TRqneSfioYmUeYs0cYtbpUgSpIB7LiKZ3sx4mcujJUDJi5DnUox9g61DLu3
-4jd/IroAow57UvtruzvE03lRTs2Q9GcHGcg8RnoNAX3FWOdt5oUwF5okxBDgBPfg
-8n/Uqgr/Qh037ZTlZFkSIHc40zI+OIF1lnP6aI+xy84fxez6nH7PfrHxBy22/L/K
-pL/QlwVKvOoYKAKQvVR4CSFx09F9HdkWsKlhPdAKACL8x3vLCWRFCztAgfd9fDL1
-mMpYjn0q7pBZc2T5NnReJaH1ZgUufzkVqSr7UIuOhWn0
------END CERTIFICATE-----
diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 364dc086..f9ba202e 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -25,7 +25,7 @@
     :error false;
   }
 
-  :if ([ $CertificateAvailable "Starfield Secure Certificate Authority - G2" ] = false) do={
+  :if ([ $CertificateAvailable "Starfield Root Certificate Authority - G2" ] = false) do={
     $LogPrint error $ScriptName ("Downloading required certificate failed.");
     :error false;
   }

From 0ae3d31c58d57578092e76368ebd82bdc859123d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 10:38:35 +0200
Subject: [PATCH 192/988] certs: GTS CA 1C3 / GTS CA 1P5  -> GTS Root R1

---
 certs/GTS-CA-1C3.pem  | 242 ------------------------------------------
 certs/GTS-CA-1P5.pem  | 238 -----------------------------------------
 certs/GTS-Root-R1.pem |  38 +++++++
 doc/netwatch-dns.md   |   2 +-
 global-functions.rsc  |   2 +-
 5 files changed, 40 insertions(+), 482 deletions(-)
 delete mode 100644 certs/GTS-CA-1C3.pem
 delete mode 100644 certs/GTS-CA-1P5.pem
 create mode 100644 certs/GTS-Root-R1.pem

diff --git a/certs/GTS-CA-1C3.pem b/certs/GTS-CA-1C3.pem
deleted file mode 100644
index a8432d23..00000000
--- a/certs/GTS-CA-1C3.pem
+++ /dev/null
@@ -1,242 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            02:03:bc:53:59:6b:34:c7:18:f5:01:50:66
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R1
-        Validity
-            Not Before: Aug 13 00:00:42 2020 GMT
-            Not After : Sep 30 00:00:42 2027 GMT
-        Subject: C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
-                Modulus:
-                    00:f5:88:df:e7:62:8c:1e:37:f8:37:42:90:7f:6c:
-                    87:d0:fb:65:82:25:fd:e8:cb:6b:a4:ff:6d:e9:5a:
-                    23:e2:99:f6:1c:e9:92:03:99:13:7c:09:0a:8a:fa:
-                    42:d6:5e:56:24:aa:7a:33:84:1f:d1:e9:69:bb:b9:
-                    74:ec:57:4c:66:68:93:77:37:55:53:fe:39:10:4d:
-                    b7:34:bb:5f:25:77:37:3b:17:94:ea:3c:e5:9d:d5:
-                    bc:c3:b4:43:eb:2e:a7:47:ef:b0:44:11:63:d8:b4:
-                    41:85:dd:41:30:48:93:1b:bf:b7:f6:e0:45:02:21:
-                    e0:96:42:17:cf:d9:2b:65:56:34:07:26:04:0d:a8:
-                    fd:7d:ca:2e:ef:ea:48:7c:37:4d:3f:00:9f:83:df:
-                    ef:75:84:2e:79:57:5c:fc:57:6e:1a:96:ff:fc:8c:
-                    9a:a6:99:be:25:d9:7f:96:2c:06:f7:11:2a:02:80:
-                    80:eb:63:18:3c:50:49:87:e5:8a:ca:5f:19:2b:59:
-                    96:81:00:a0:fb:51:db:ca:77:0b:0b:c9:96:4f:ef:
-                    70:49:c7:5c:6d:20:fd:99:b4:b4:e2:ca:2e:77:fd:
-                    2d:dc:0b:b6:6b:13:0c:8c:19:2b:17:96:98:b9:f0:
-                    8b:f6:a0:27:bb:b6:e3:8d:51:8f:bd:ae:c7:9b:b1:
-                    89:9d
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Subject Key Identifier: 
-                8A:74:7F:AF:85:CD:EE:95:CD:3D:9C:D0:E2:46:14:F3:71:35:1D:27
-            X509v3 Authority Key Identifier: 
-                keyid:E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
-
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.pki.goog/gtsr1
-                CA Issuers - URI:http://pki.goog/repo/certs/gtsr1.der
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl.pki.goog/gtsr1/gtsr1.crl
-
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.11129.2.5.3
-                  CPS: https://pki.goog/repository/
-                Policy: 2.23.140.1.2.1
-                Policy: 2.23.140.1.2.2
-
-    Signature Algorithm: sha256WithRSAEncryption
-         89:7d:ac:20:5c:0c:3c:be:9a:a8:57:95:1b:b4:ae:fa:ab:a5:
-         72:71:b4:36:95:fd:df:40:11:03:4c:c2:46:14:bb:14:24:ab:
-         f0:50:71:22:db:ad:c4:6e:7f:cf:f1:6a:6f:c8:83:1b:d8:ce:
-         89:5f:87:6c:87:b8:a9:0c:a3:9b:a1:62:94:93:95:df:5b:ae:
-         66:19:0b:02:96:9e:fc:b5:e7:10:69:3e:7a:cb:46:49:5f:46:
-         e1:41:b1:d7:98:4d:65:34:00:80:1a:3f:4f:9f:6c:7f:49:00:
-         81:53:41:a4:92:21:82:82:1a:f1:a3:44:5b:2a:50:12:13:4d:
-         c1:53:36:f3:42:08:af:54:fa:8e:77:53:1b:64:38:27:17:09:
-         bd:58:c9:1b:7c:39:2d:5b:f3:ce:d4:ed:97:db:14:03:bf:09:
-         53:24:1f:c2:0c:04:79:98:26:f2:61:f1:53:52:fd:42:8c:1b:
-         66:2b:3f:15:a1:bb:ff:f6:9b:e3:81:9a:01:06:71:89:35:28:
-         24:dd:e1:bd:eb:19:2d:e1:48:cb:3d:59:83:51:b4:74:c6:9d:
-         7c:c6:b1:86:5b:af:cc:34:c4:d3:cc:d4:81:11:95:00:a1:f4:
-         12:22:01:fa:b4:83:71:af:8c:b7:8c:73:24:ac:37:53:c2:00:
-         90:3f:11:fe:5c:ed:36:94:10:3b:bd:29:ae:e2:c7:3a:62:3b:
-         6c:63:d9:80:bf:59:71:ac:63:27:b9:4c:17:a0:da:f6:73:15:
-         bf:2a:de:8f:f3:a5:6c:32:81:33:03:d0:86:51:71:99:34:ba:
-         93:8d:5d:b5:51:58:f7:b2:93:e8:01:f6:59:be:71:9b:fd:4d:
-         28:ce:cf:6d:c7:16:dc:f7:d1:d6:46:9b:a7:ca:6b:e9:77:0f:
-         fd:a0:b6:1b:23:83:1d:10:1a:d9:09:00:84:e0:44:d3:a2:75:
-         23:b3:34:86:f6:20:b0:a4:5e:10:1d:e0:52:46:00:9d:b1:0f:
-         1f:21:70:51:f5:9a:dd:06:fc:55:f4:2b:0e:33:77:c3:4b:42:
-         c2:f1:77:13:fc:73:80:94:eb:1f:bb:37:3f:ce:02:2a:66:b0:
-         73:1d:32:a5:32:6c:32:b0:8e:e0:c4:23:ff:5b:7d:4d:65:70:
-         ac:2b:9b:3d:ce:db:e0:6d:8e:32:80:be:96:9f:92:63:bc:97:
-         bb:5d:b9:f4:e1:71:5e:2a:e4:ef:03:22:b1:8a:65:3a:8f:c0:
-         93:65:d4:85:cd:0f:0f:5b:83:59:16:47:16:2d:9c:24:3a:c8:
-         80:a6:26:14:85:9b:f6:37:9b:ac:6f:f9:c5:c3:06:51:f3:e2:
-         7f:c5:b1:10:ba:51:f4:dd
------BEGIN CERTIFICATE-----
-MIIFljCCA36gAwIBAgINAgO8U1lrNMcY9QFQZjANBgkqhkiG9w0BAQsFADBHMQsw
-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU
-MBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjAwODEzMDAwMDQyWhcNMjcwOTMwMDAw
-MDQyWjBGMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp
-Y2VzIExMQzETMBEGA1UEAxMKR1RTIENBIDFDMzCCASIwDQYJKoZIhvcNAQEBBQAD
-ggEPADCCAQoCggEBAPWI3+dijB43+DdCkH9sh9D7ZYIl/ejLa6T/belaI+KZ9hzp
-kgOZE3wJCor6QtZeViSqejOEH9Hpabu5dOxXTGZok3c3VVP+ORBNtzS7XyV3NzsX
-lOo85Z3VvMO0Q+sup0fvsEQRY9i0QYXdQTBIkxu/t/bgRQIh4JZCF8/ZK2VWNAcm
-BA2o/X3KLu/qSHw3TT8An4Pf73WELnlXXPxXbhqW//yMmqaZviXZf5YsBvcRKgKA
-gOtjGDxQSYflispfGStZloEAoPtR28p3CwvJlk/vcEnHXG0g/Zm0tOLKLnf9LdwL
-tmsTDIwZKxeWmLnwi/agJ7u2441Rj72ux5uxiZ0CAwEAAaOCAYAwggF8MA4GA1Ud
-DwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0T
-AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUinR/r4XN7pXNPZzQ4kYU83E1HScwHwYD
-VR0jBBgwFoAU5K8rJnEaK0gnhS9SZizv8IkTcT4waAYIKwYBBQUHAQEEXDBaMCYG
-CCsGAQUFBzABhhpodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHNyMTAwBggrBgEFBQcw
-AoYkaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzcjEuZGVyMDQGA1UdHwQt
-MCswKaAnoCWGI2h0dHA6Ly9jcmwucGtpLmdvb2cvZ3RzcjEvZ3RzcjEuY3JsMFcG
-A1UdIARQME4wOAYKKwYBBAHWeQIFAzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3Br
-aS5nb29nL3JlcG9zaXRvcnkvMAgGBmeBDAECATAIBgZngQwBAgIwDQYJKoZIhvcN
-AQELBQADggIBAIl9rCBcDDy+mqhXlRu0rvqrpXJxtDaV/d9AEQNMwkYUuxQkq/BQ
-cSLbrcRuf8/xam/IgxvYzolfh2yHuKkMo5uhYpSTld9brmYZCwKWnvy15xBpPnrL
-RklfRuFBsdeYTWU0AIAaP0+fbH9JAIFTQaSSIYKCGvGjRFsqUBITTcFTNvNCCK9U
-+o53UxtkOCcXCb1YyRt8OS1b887U7ZfbFAO/CVMkH8IMBHmYJvJh8VNS/UKMG2Yr
-PxWhu//2m+OBmgEGcYk1KCTd4b3rGS3hSMs9WYNRtHTGnXzGsYZbr8w0xNPM1IER
-lQCh9BIiAfq0g3GvjLeMcySsN1PCAJA/Ef5c7TaUEDu9Ka7ixzpiO2xj2YC/WXGs
-Yye5TBeg2vZzFb8q3o/zpWwygTMD0IZRcZk0upONXbVRWPeyk+gB9lm+cZv9TSjO
-z23HFtz30dZGm6fKa+l3D/2gthsjgx0QGtkJAITgRNOidSOzNIb2ILCkXhAd4FJG
-AJ2xDx8hcFH1mt0G/FX0Kw4zd8NLQsLxdxP8c4CU6x+7Nz/OAipmsHMdMqUybDKw
-juDEI/9bfU1lcKwrmz3O2+BtjjKAvpafkmO8l7tdufThcV4q5O8DIrGKZTqPwJNl
-1IXNDw9bg1kWRxYtnCQ6yICmJhSFm/Y3m6xv+cXDBlHz4n/FsRC6UfTd
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            6e:47:a9:c5:4b:47:0c:0d:ec:33:d0:89:b9:1c:f4:e1
-        Signature Algorithm: sha384WithRSAEncryption
-        Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R1
-        Validity
-            Not Before: Jun 22 00:00:00 2016 GMT
-            Not After : Jun 22 00:00:00 2036 GMT
-        Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R1
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (4096 bit)
-                Modulus:
-                    00:b6:11:02:8b:1e:e3:a1:77:9b:3b:dc:bf:94:3e:
-                    b7:95:a7:40:3c:a1:fd:82:f9:7d:32:06:82:71:f6:
-                    f6:8c:7f:fb:e8:db:bc:6a:2e:97:97:a3:8c:4b:f9:
-                    2b:f6:b1:f9:ce:84:1d:b1:f9:c5:97:de:ef:b9:f2:
-                    a3:e9:bc:12:89:5e:a7:aa:52:ab:f8:23:27:cb:a4:
-                    b1:9c:63:db:d7:99:7e:f0:0a:5e:eb:68:a6:f4:c6:
-                    5a:47:0d:4d:10:33:e3:4e:b1:13:a3:c8:18:6c:4b:
-                    ec:fc:09:90:df:9d:64:29:25:23:07:a1:b4:d2:3d:
-                    2e:60:e0:cf:d2:09:87:bb:cd:48:f0:4d:c2:c2:7a:
-                    88:8a:bb:ba:cf:59:19:d6:af:8f:b0:07:b0:9e:31:
-                    f1:82:c1:c0:df:2e:a6:6d:6c:19:0e:b5:d8:7e:26:
-                    1a:45:03:3d:b0:79:a4:94:28:ad:0f:7f:26:e5:a8:
-                    08:fe:96:e8:3c:68:94:53:ee:83:3a:88:2b:15:96:
-                    09:b2:e0:7a:8c:2e:75:d6:9c:eb:a7:56:64:8f:96:
-                    4f:68:ae:3d:97:c2:84:8f:c0:bc:40:c0:0b:5c:bd:
-                    f6:87:b3:35:6c:ac:18:50:7f:84:e0:4c:cd:92:d3:
-                    20:e9:33:bc:52:99:af:32:b5:29:b3:25:2a:b4:48:
-                    f9:72:e1:ca:64:f7:e6:82:10:8d:e8:9d:c2:8a:88:
-                    fa:38:66:8a:fc:63:f9:01:f9:78:fd:7b:5c:77:fa:
-                    76:87:fa:ec:df:b1:0e:79:95:57:b4:bd:26:ef:d6:
-                    01:d1:eb:16:0a:bb:8e:0b:b5:c5:c5:8a:55:ab:d3:
-                    ac:ea:91:4b:29:cc:19:a4:32:25:4e:2a:f1:65:44:
-                    d0:02:ce:aa:ce:49:b4:ea:9f:7c:83:b0:40:7b:e7:
-                    43:ab:a7:6c:a3:8f:7d:89:81:fa:4c:a5:ff:d5:8e:
-                    c3:ce:4b:e0:b5:d8:b3:8e:45:cf:76:c0:ed:40:2b:
-                    fd:53:0f:b0:a7:d5:3b:0d:b1:8a:a2:03:de:31:ad:
-                    cc:77:ea:6f:7b:3e:d6:df:91:22:12:e6:be:fa:d8:
-                    32:fc:10:63:14:51:72:de:5d:d6:16:93:bd:29:68:
-                    33:ef:3a:66:ec:07:8a:26:df:13:d7:57:65:78:27:
-                    de:5e:49:14:00:a2:00:7f:9a:a8:21:b6:a9:b1:95:
-                    b0:a5:b9:0d:16:11:da:c7:6c:48:3c:40:e0:7e:0d:
-                    5a:cd:56:3c:d1:97:05:b9:cb:4b:ed:39:4b:9c:c4:
-                    3f:d2:55:13:6e:24:b0:d6:71:fa:f4:c1:ba:cc:ed:
-                    1b:f5:fe:81:41:d8:00:98:3d:3a:c8:ae:7a:98:37:
-                    18:05:95
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
-    Signature Algorithm: sha384WithRSAEncryption
-         38:96:0a:ee:3d:b4:96:1e:5f:ef:9d:9c:0b:33:9f:2b:e0:ca:
-         fd:d2:8e:0a:1f:41:74:a5:7c:aa:84:d4:e5:f2:1e:e6:37:52:
-         32:9c:0b:d1:61:1d:bf:28:c1:b6:44:29:35:75:77:98:b2:7c:
-         d9:bd:74:ac:8a:68:e3:a9:31:09:29:01:60:73:e3:47:7c:53:
-         a8:90:4a:27:ef:4b:d7:9f:93:e7:82:36:ce:9a:68:0c:82:e7:
-         cf:d4:10:16:6f:5f:0e:99:5c:f6:1f:71:7d:ef:ef:7b:2f:7e:
-         ea:36:d6:97:70:0b:15:ee:d7:5c:56:6a:33:a5:e3:49:38:0c:
-         b8:7d:fb:8d:85:a4:b1:59:5e:f4:6a:e1:dd:a1:f6:64:44:ae:
-         e6:51:83:21:66:c6:11:3e:f3:ce:47:ee:9c:28:1f:25:da:ff:
-         ac:66:95:dd:35:0f:5c:ef:20:2c:62:fd:91:ba:a9:cc:fc:5a:
-         9c:93:81:83:29:97:4a:7c:5a:72:b4:39:d0:b7:77:cb:79:fd:
-         69:3a:92:37:ed:6e:38:65:46:7e:e9:60:bd:79:88:97:5f:38:
-         12:f4:ee:af:5b:82:c8:86:d5:e1:99:6d:8c:04:f2:76:ba:49:
-         f6:6e:e9:6d:1e:5f:a0:ef:27:82:76:40:f8:a6:d3:58:5c:0f:
-         2c:42:da:42:c6:7b:88:34:c7:c1:d8:45:9b:c1:3e:c5:61:1d:
-         d9:63:50:49:f6:34:85:6a:e0:18:c5:6e:47:ab:41:42:29:9b:
-         f6:60:0d:d2:31:d3:63:98:23:93:5a:00:81:48:b4:ef:cd:8a:
-         cd:c9:cf:99:ee:d9:9e:aa:36:e1:68:4b:71:49:14:36:28:3a:
-         3d:1d:ce:9a:8f:25:e6:80:71:61:2b:b5:7b:cc:f9:25:16:81:
-         e1:31:5f:a1:a3:7e:16:a4:9c:16:6a:97:18:bd:76:72:a5:0b:
-         9e:1d:36:e6:2f:a1:2f:be:70:91:0f:a8:e6:da:f8:c4:92:40:
-         6c:25:7e:7b:b3:09:dc:b2:17:ad:80:44:f0:68:a5:8f:94:75:
-         ff:74:5a:e8:a8:02:7c:0c:09:e2:a9:4b:0b:a0:85:0b:62:b9:
-         ef:a1:31:92:fb:ef:f6:51:04:89:6c:e8:a9:74:a1:bb:17:b3:
-         b5:fd:49:0f:7c:3c:ec:83:18:20:43:4e:d5:93:ba:b4:34:b1:
-         1f:16:36:1f:0c:e6:64:39:16:4c:dc:e0:fe:1d:c8:a9:62:3d:
-         40:ea:ca:c5:34:02:b4:ae:89:88:33:35:dc:2c:13:73:d8:27:
-         f1:d0:72:ee:75:3b:22:de:98:68:66:5b:f1:c6:63:47:55:1c:
-         ba:a5:08:51:75:a6:48:25
------BEGIN CERTIFICATE-----
-MIIFWjCCA0KgAwIBAgIQbkepxUtHDA3sM9CJuRz04TANBgkqhkiG9w0BAQwFADBH
-MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
-QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIy
-MDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNl
-cnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwggIiMA0GCSqGSIb3DQEB
-AQUAA4ICDwAwggIKAoICAQC2EQKLHuOhd5s73L+UPreVp0A8of2C+X0yBoJx9vaM
-f/vo27xqLpeXo4xL+Sv2sfnOhB2x+cWX3u+58qPpvBKJXqeqUqv4IyfLpLGcY9vX
-mX7wCl7raKb0xlpHDU0QM+NOsROjyBhsS+z8CZDfnWQpJSMHobTSPS5g4M/SCYe7
-zUjwTcLCeoiKu7rPWRnWr4+wB7CeMfGCwcDfLqZtbBkOtdh+JhpFAz2weaSUKK0P
-fyblqAj+lug8aJRT7oM6iCsVlgmy4HqMLnXWnOunVmSPlk9orj2XwoSPwLxAwAtc
-vfaHszVsrBhQf4TgTM2S0yDpM7xSma8ytSmzJSq0SPly4cpk9+aCEI3oncKKiPo4
-Zor8Y/kB+Xj9e1x3+naH+uzfsQ55lVe0vSbv1gHR6xYKu44LtcXFilWr06zqkUsp
-zBmkMiVOKvFlRNACzqrOSbTqn3yDsEB750Orp2yjj32JgfpMpf/VjsPOS+C12LOO
-Rc92wO1AK/1TD7Cn1TsNsYqiA94xrcx36m97PtbfkSIS5r762DL8EGMUUXLeXdYW
-k70paDPvOmbsB4om3xPXV2V4J95eSRQAogB/mqghtqmxlbCluQ0WEdrHbEg8QOB+
-DVrNVjzRlwW5y0vtOUucxD/SVRNuJLDWcfr0wbrM7Rv1/oFB2ACYPTrIrnqYNxgF
-lQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV
-HQ4EFgQU5K8rJnEaK0gnhS9SZizv8IkTcT4wDQYJKoZIhvcNAQEMBQADggIBADiW
-Cu49tJYeX++dnAsznyvgyv3SjgofQXSlfKqE1OXyHuY3UjKcC9FhHb8owbZEKTV1
-d5iyfNm9dKyKaOOpMQkpAWBz40d8U6iQSifvS9efk+eCNs6aaAyC58/UEBZvXw6Z
-XPYfcX3v73svfuo21pdwCxXu11xWajOl40k4DLh9+42FpLFZXvRq4d2h9mREruZR
-gyFmxhE+885H7pwoHyXa/6xmld01D1zvICxi/ZG6qcz8WpyTgYMpl0p8WnK0OdC3
-d8t5/Wk6kjftbjhlRn7pYL15iJdfOBL07q9bgsiG1eGZbYwE8na6SfZu6W0eX6Dv
-J4J2QPim01hcDyxC2kLGe4g0x8HYRZvBPsVhHdljUEn2NIVq4BjFbkerQUIpm/Zg
-DdIx02OYI5NaAIFItO/Nis3Jz5nu2Z6qNuFoS3FJFDYoOj0dzpqPJeaAcWErtXvM
-+SUWgeExX6GjfhaknBZqlxi9dnKlC54dNuYvoS++cJEPqOba+MSSQGwlfnuzCdyy
-F62ARPBopY+Udf90WuioAnwMCeKpSwughQtiue+hMZL77/ZRBIls6Kl0obsXs7X9
-SQ98POyDGCBDTtWTurQ0sR8WNh8M5mQ5Fkzc4P4dyKliPUDqysU0ArSuiYgzNdws
-E3PYJ/HQcu51OyLemGhmW/HGY0dVHLqlCFF1pkgl
------END CERTIFICATE-----
diff --git a/certs/GTS-CA-1P5.pem b/certs/GTS-CA-1P5.pem
deleted file mode 100644
index 5be738d2..00000000
--- a/certs/GTS-CA-1P5.pem
+++ /dev/null
@@ -1,238 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            02:03:bc:50:a3:27:53:f0:91:80:22:ed:f1
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R1
-        Validity
-            Not Before: Aug 13 00:00:42 2020 GMT
-            Not After : Sep 30 00:00:42 2027 GMT
-        Subject: C=US, O=Google Trust Services LLC, CN=GTS CA 1P5
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:b3:82:f0:24:8c:bf:2d:87:af:b2:d9:a7:ae:fa:
-                    ca:ba:44:d6:5b:3e:fe:b2:f7:b2:65:16:dc:de:10:
-                    e8:4f:2d:10:58:5a:28:86:87:a1:ee:6a:b3:a0:d9:
-                    75:4f:7f:a1:52:01:8b:55:a8:4a:5b:06:48:c8:36:
-                    12:25:ab:89:f9:f2:23:5f:9d:60:65:f9:5c:da:be:
-                    3a:e8:5c:6d:7d:9c:d0:84:18:85:30:cd:4e:9b:ec:
-                    3c:d8:b3:e1:96:d4:f3:c5:0b:65:db:8f:b0:74:cb:
-                    f6:1e:f3:78:f1:ac:95:c5:dd:73:c3:31:88:81:af:
-                    74:aa:6f:fd:0c:e3:05:95:f0:c5:10:4f:65:63:fa:
-                    a0:af:c6:18:3d:c5:a1:df:97:79:d7:05:89:b3:30:
-                    b0:74:ae:3d:92:10:6b:8c:15:77:dd:0b:04:57:fb:
-                    81:03:dd:ea:22:34:d5:e5:56:b2:f0:c4:8d:41:b1:
-                    c3:02:db:62:ec:80:d0:ff:76:d4:86:e4:04:1a:b6:
-                    b6:0c:2b:62:71:7d:d9:af:d9:f1:5e:fa:c0:1e:ca:
-                    a0:19:5c:55:f0:80:d1:2a:0c:07:86:90:9f:35:e3:
-                    28:2b:5b:ef:23:c8:a3:1d:a4:a3:3a:ee:fe:83:dc:
-                    82:4c:25:b0:4d:c5:51:ad:9e:9b:d3:5b:84:c2:1a:
-                    5a:e9
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Subject Key Identifier: 
-                D5:FC:9E:0D:DF:1E:CA:DD:08:97:97:6E:2B:C5:5F:C5:2B:F5:EC:B8
-            X509v3 Authority Key Identifier: 
-                E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.pki.goog/gtsr1
-                CA Issuers - URI:http://pki.goog/repo/certs/gtsr1.der
-            X509v3 CRL Distribution Points: 
-                Full Name:
-                  URI:http://crl.pki.goog/gtsr1/gtsr1.crl
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.11129.2.5.3
-                  CPS: https://pki.goog/repository/
-                Policy: 2.23.140.1.2.1
-    Signature Algorithm: sha256WithRSAEncryption
-    Signature Value:
-        6c:63:27:ee:23:df:e5:52:68:4d:81:66:91:85:df:7d:65:e5:
-        5b:37:31:08:26:b2:07:5d:9a:be:b1:ca:01:b9:ad:bf:9d:77:
-        f6:51:1d:d7:98:c5:0b:49:a1:7b:a1:d7:d3:68:e5:44:0f:8b:
-        ba:36:dd:42:82:77:d2:8d:dd:f5:3f:fb:eb:c8:07:98:93:ee:
-        5a:d0:b5:3d:de:4b:1c:2d:8c:4d:ec:7e:8c:7b:fe:4e:40:fd:
-        f0:b4:b3:59:02:10:51:5c:e3:c0:2b:fd:b7:06:48:51:7e:09:
-        5e:3f:0f:dc:a7:fe:97:e7:79:c5:0e:44:89:78:c5:69:59:29:
-        a0:9a:3a:48:36:29:a6:94:93:55:2d:b8:47:b5:e9:96:b5:9f:
-        07:cd:a6:ab:3e:32:8a:c0:86:83:c5:c1:41:c8:9f:2f:35:8e:
-        0d:c0:07:7a:e1:ac:c9:65:b5:cb:8a:a7:dd:71:d8:61:65:39:
-        84:ac:32:3e:f7:7a:36:f1:56:9f:57:a9:41:6d:5a:90:a7:db:
-        3a:ea:75:80:0c:63:0b:69:74:6f:07:4c:15:f3:37:28:a5:19:
-        a4:6e:f5:f6:20:cd:63:b2:7e:c4:2b:09:75:89:da:d1:3c:2e:
-        72:4f:36:1a:a1:9e:44:d0:cd:9b:a6:23:08:3f:97:a1:a7:9e:
-        5a:a5:f7:09:94:ad:5d:76:5d:28:56:d1:1a:66:51:51:07:7b:
-        de:3d:b0:c8:ef:30:7a:24:2d:be:b8:b3:86:f6:4b:f7:f0:b5:
-        4f:ff:ce:c6:f9:f6:3f:2a:27:08:0f:09:3e:23:5a:c7:e3:42:
-        2d:7a:36:e4:3d:98:96:60:39:98:ea:d1:db:63:2a:eb:78:09:
-        b1:4e:21:b3:8e:b7:ce:3e:92:f1:95:5c:a4:39:d0:c0:2b:c8:
-        53:15:f5:d2:2f:82:cd:06:74:67:99:90:77:37:0a:97:2d:c5:
-        1c:1e:f4:d0:5b:e9:15:e3:ea:02:09:c8:13:d7:13:70:65:bf:
-        fb:88:9b:5a:25:be:77:09:e1:a7:6a:4e:11:75:b9:1e:4d:f1:
-        00:1b:6a:66:79:8e:c3:6e:d8:6d:a2:22:a2:6d:05:fb:2c:f2:
-        f1:50:e5:a0:d1:d8:9f:35:7d:fc:70:ab:59:2a:02:f1:be:b0:
-        d3:f1:f8:cd:12:b9:6a:25:90:5b:e3:85:20:e6:f5:da:cb:40:
-        1c:19:34:20:03:61:77:ba:7f:48:0f:49:0b:29:eb:e7:61:64:
-        c7:63:d1:47:eb:1c:e1:ee:94:46:ef:39:73:cc:ee:4f:2b:8d:
-        dc:fb:58:a7:b3:65:20:99:95:b9:fb:55:6f:d7:96:6e:94:3d:
-        f4:7a:92:8e:63:1d:df:6d
------BEGIN CERTIFICATE-----
-MIIFjDCCA3SgAwIBAgINAgO8UKMnU/CRgCLt8TANBgkqhkiG9w0BAQsFADBHMQsw
-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU
-MBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjAwODEzMDAwMDQyWhcNMjcwOTMwMDAw
-MDQyWjBGMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp
-Y2VzIExMQzETMBEGA1UEAxMKR1RTIENBIDFQNTCCASIwDQYJKoZIhvcNAQEBBQAD
-ggEPADCCAQoCggEBALOC8CSMvy2Hr7LZp676yrpE1ls+/rL3smUW3N4Q6E8tEFha
-KIaHoe5qs6DZdU9/oVIBi1WoSlsGSMg2EiWrifnyI1+dYGX5XNq+OuhcbX2c0IQY
-hTDNTpvsPNiz4ZbU88ULZduPsHTL9h7zePGslcXdc8MxiIGvdKpv/QzjBZXwxRBP
-ZWP6oK/GGD3Fod+XedcFibMwsHSuPZIQa4wVd90LBFf7gQPd6iI01eVWsvDEjUGx
-wwLbYuyA0P921IbkBBq2tgwrYnF92a/Z8V76wB7KoBlcVfCA0SoMB4aQnzXjKCtb
-7yPIox2kozru/oPcgkwlsE3FUa2em9NbhMIaWukCAwEAAaOCAXYwggFyMA4GA1Ud
-DwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0T
-AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU1fyeDd8eyt0Il5duK8VfxSv17LgwHwYD
-VR0jBBgwFoAU5K8rJnEaK0gnhS9SZizv8IkTcT4waAYIKwYBBQUHAQEEXDBaMCYG
-CCsGAQUFBzABhhpodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHNyMTAwBggrBgEFBQcw
-AoYkaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzcjEuZGVyMDQGA1UdHwQt
-MCswKaAnoCWGI2h0dHA6Ly9jcmwucGtpLmdvb2cvZ3RzcjEvZ3RzcjEuY3JsME0G
-A1UdIARGMEQwOAYKKwYBBAHWeQIFAzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3Br
-aS5nb29nL3JlcG9zaXRvcnkvMAgGBmeBDAECATANBgkqhkiG9w0BAQsFAAOCAgEA
-bGMn7iPf5VJoTYFmkYXffWXlWzcxCCayB12avrHKAbmtv5139lEd15jFC0mhe6HX
-02jlRA+LujbdQoJ30o3d9T/768gHmJPuWtC1Pd5LHC2MTex+jHv+TkD98LSzWQIQ
-UVzjwCv9twZIUX4JXj8P3Kf+l+d5xQ5EiXjFaVkpoJo6SDYpppSTVS24R7XplrWf
-B82mqz4yisCGg8XBQcifLzWODcAHeuGsyWW1y4qn3XHYYWU5hKwyPvd6NvFWn1ep
-QW1akKfbOup1gAxjC2l0bwdMFfM3KKUZpG719iDNY7J+xCsJdYna0Twuck82GqGe
-RNDNm6YjCD+XoaeeWqX3CZStXXZdKFbRGmZRUQd73j2wyO8weiQtvrizhvZL9/C1
-T//Oxvn2PyonCA8JPiNax+NCLXo25D2YlmA5mOrR22Mq63gJsU4hs463zj6S8ZVc
-pDnQwCvIUxX10i+CzQZ0Z5mQdzcKly3FHB700FvpFePqAgnIE9cTcGW/+4ibWiW+
-dwnhp2pOEXW5Hk3xABtqZnmOw27YbaIiom0F+yzy8VDloNHYnzV9/HCrWSoC8b6w
-0/H4zRK5aiWQW+OFIOb12stAHBk0IANhd7p/SA9JCynr52Fkx2PRR+sc4e6URu85
-c8zuTyuN3PtYp7NlIJmVuftVb9eWbpQ99HqSjmMd320=
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            02:03:e5:93:6f:31:b0:13:49:88:6b:a2:17
-        Signature Algorithm: sha384WithRSAEncryption
-        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R1
-        Validity
-            Not Before: Jun 22 00:00:00 2016 GMT
-            Not After : Jun 22 00:00:00 2036 GMT
-        Subject: C=US, O=Google Trust Services LLC, CN=GTS Root R1
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (4096 bit)
-                Modulus:
-                    00:b6:11:02:8b:1e:e3:a1:77:9b:3b:dc:bf:94:3e:
-                    b7:95:a7:40:3c:a1:fd:82:f9:7d:32:06:82:71:f6:
-                    f6:8c:7f:fb:e8:db:bc:6a:2e:97:97:a3:8c:4b:f9:
-                    2b:f6:b1:f9:ce:84:1d:b1:f9:c5:97:de:ef:b9:f2:
-                    a3:e9:bc:12:89:5e:a7:aa:52:ab:f8:23:27:cb:a4:
-                    b1:9c:63:db:d7:99:7e:f0:0a:5e:eb:68:a6:f4:c6:
-                    5a:47:0d:4d:10:33:e3:4e:b1:13:a3:c8:18:6c:4b:
-                    ec:fc:09:90:df:9d:64:29:25:23:07:a1:b4:d2:3d:
-                    2e:60:e0:cf:d2:09:87:bb:cd:48:f0:4d:c2:c2:7a:
-                    88:8a:bb:ba:cf:59:19:d6:af:8f:b0:07:b0:9e:31:
-                    f1:82:c1:c0:df:2e:a6:6d:6c:19:0e:b5:d8:7e:26:
-                    1a:45:03:3d:b0:79:a4:94:28:ad:0f:7f:26:e5:a8:
-                    08:fe:96:e8:3c:68:94:53:ee:83:3a:88:2b:15:96:
-                    09:b2:e0:7a:8c:2e:75:d6:9c:eb:a7:56:64:8f:96:
-                    4f:68:ae:3d:97:c2:84:8f:c0:bc:40:c0:0b:5c:bd:
-                    f6:87:b3:35:6c:ac:18:50:7f:84:e0:4c:cd:92:d3:
-                    20:e9:33:bc:52:99:af:32:b5:29:b3:25:2a:b4:48:
-                    f9:72:e1:ca:64:f7:e6:82:10:8d:e8:9d:c2:8a:88:
-                    fa:38:66:8a:fc:63:f9:01:f9:78:fd:7b:5c:77:fa:
-                    76:87:fa:ec:df:b1:0e:79:95:57:b4:bd:26:ef:d6:
-                    01:d1:eb:16:0a:bb:8e:0b:b5:c5:c5:8a:55:ab:d3:
-                    ac:ea:91:4b:29:cc:19:a4:32:25:4e:2a:f1:65:44:
-                    d0:02:ce:aa:ce:49:b4:ea:9f:7c:83:b0:40:7b:e7:
-                    43:ab:a7:6c:a3:8f:7d:89:81:fa:4c:a5:ff:d5:8e:
-                    c3:ce:4b:e0:b5:d8:b3:8e:45:cf:76:c0:ed:40:2b:
-                    fd:53:0f:b0:a7:d5:3b:0d:b1:8a:a2:03:de:31:ad:
-                    cc:77:ea:6f:7b:3e:d6:df:91:22:12:e6:be:fa:d8:
-                    32:fc:10:63:14:51:72:de:5d:d6:16:93:bd:29:68:
-                    33:ef:3a:66:ec:07:8a:26:df:13:d7:57:65:78:27:
-                    de:5e:49:14:00:a2:00:7f:9a:a8:21:b6:a9:b1:95:
-                    b0:a5:b9:0d:16:11:da:c7:6c:48:3c:40:e0:7e:0d:
-                    5a:cd:56:3c:d1:97:05:b9:cb:4b:ed:39:4b:9c:c4:
-                    3f:d2:55:13:6e:24:b0:d6:71:fa:f4:c1:ba:cc:ed:
-                    1b:f5:fe:81:41:d8:00:98:3d:3a:c8:ae:7a:98:37:
-                    18:05:95
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
-    Signature Algorithm: sha384WithRSAEncryption
-    Signature Value:
-        9f:aa:42:26:db:0b:9b:be:ff:1e:96:92:2e:3e:a2:65:4a:6a:
-        98:ba:22:cb:7d:c1:3a:d8:82:0a:06:c6:f6:a5:de:c0:4e:87:
-        66:79:a1:f9:a6:58:9c:aa:f9:b5:e6:60:e7:e0:e8:b1:1e:42:
-        41:33:0b:37:3d:ce:89:70:15:ca:b5:24:a8:cf:6b:b5:d2:40:
-        21:98:cf:22:34:cf:3b:c5:22:84:e0:c5:0e:8a:7c:5d:88:e4:
-        35:24:ce:9b:3e:1a:54:1e:6e:db:b2:87:a7:fc:f3:fa:81:55:
-        14:62:0a:59:a9:22:05:31:3e:82:d6:ee:db:57:34:bc:33:95:
-        d3:17:1b:e8:27:a2:8b:7b:4e:26:1a:7a:5a:64:b6:d1:ac:37:
-        f1:fd:a0:f3:38:ec:72:f0:11:75:9d:cb:34:52:8d:e6:76:6b:
-        17:c6:df:86:ab:27:8e:49:2b:75:66:81:10:21:a6:ea:3e:f4:
-        ae:25:ff:7c:15:de:ce:8c:25:3f:ca:62:70:0a:f7:2f:09:66:
-        07:c8:3f:1c:fc:f0:db:45:30:df:62:88:c1:b5:0f:9d:c3:9f:
-        4a:de:59:59:47:c5:87:22:36:e6:82:a7:ed:0a:b9:e2:07:a0:
-        8d:7b:7a:4a:3c:71:d2:e2:03:a1:1f:32:07:dd:1b:e4:42:ce:
-        0c:00:45:61:80:b5:0b:20:59:29:78:bd:f9:55:cb:63:c5:3c:
-        4c:f4:b6:ff:db:6a:5f:31:6b:99:9e:2c:c1:6b:50:a4:d7:e6:
-        18:14:bd:85:3f:67:ab:46:9f:a0:ff:42:a7:3a:7f:5c:cb:5d:
-        b0:70:1d:2b:34:f5:d4:76:09:0c:eb:78:4c:59:05:f3:33:42:
-        c3:61:15:10:1b:77:4d:ce:22:8c:d4:85:f2:45:7d:b7:53:ea:
-        ef:40:5a:94:0a:5c:20:5f:4e:40:5d:62:22:76:df:ff:ce:61:
-        bd:8c:23:78:d2:37:02:e0:8e:de:d1:11:37:89:f6:bf:ed:49:
-        07:62:ae:92:ec:40:1a:af:14:09:d9:d0:4e:b2:a2:f7:be:ee:
-        ee:d8:ff:dc:1a:2d:de:b8:36:71:e2:fc:79:b7:94:25:d1:48:
-        73:5b:a1:35:e7:b3:99:67:75:c1:19:3a:2b:47:4e:d3:42:8e:
-        fd:31:c8:16:66:da:d2:0c:3c:db:b3:8e:c9:a1:0d:80:0f:7b:
-        16:77:14:bf:ff:db:09:94:b2:93:bc:20:58:15:e9:db:71:43:
-        f3:de:10:c3:00:dc:a8:2a:95:b6:c2:d6:3f:90:6b:76:db:6c:
-        fe:8c:bc:f2:70:35:0c:dc:99:19:35:dc:d7:c8:46:63:d5:36:
-        71:ae:57:fb:b7:82:6d:dc
------BEGIN CERTIFICATE-----
-MIIFVzCCAz+gAwIBAgINAgPlk28xsBNJiGuiFzANBgkqhkiG9w0BAQwFADBHMQsw
-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU
-MBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw
-MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp
-Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwggIiMA0GCSqGSIb3DQEBAQUA
-A4ICDwAwggIKAoICAQC2EQKLHuOhd5s73L+UPreVp0A8of2C+X0yBoJx9vaMf/vo
-27xqLpeXo4xL+Sv2sfnOhB2x+cWX3u+58qPpvBKJXqeqUqv4IyfLpLGcY9vXmX7w
-Cl7raKb0xlpHDU0QM+NOsROjyBhsS+z8CZDfnWQpJSMHobTSPS5g4M/SCYe7zUjw
-TcLCeoiKu7rPWRnWr4+wB7CeMfGCwcDfLqZtbBkOtdh+JhpFAz2weaSUKK0Pfybl
-qAj+lug8aJRT7oM6iCsVlgmy4HqMLnXWnOunVmSPlk9orj2XwoSPwLxAwAtcvfaH
-szVsrBhQf4TgTM2S0yDpM7xSma8ytSmzJSq0SPly4cpk9+aCEI3oncKKiPo4Zor8
-Y/kB+Xj9e1x3+naH+uzfsQ55lVe0vSbv1gHR6xYKu44LtcXFilWr06zqkUspzBmk
-MiVOKvFlRNACzqrOSbTqn3yDsEB750Orp2yjj32JgfpMpf/VjsPOS+C12LOORc92
-wO1AK/1TD7Cn1TsNsYqiA94xrcx36m97PtbfkSIS5r762DL8EGMUUXLeXdYWk70p
-aDPvOmbsB4om3xPXV2V4J95eSRQAogB/mqghtqmxlbCluQ0WEdrHbEg8QOB+DVrN
-VjzRlwW5y0vtOUucxD/SVRNuJLDWcfr0wbrM7Rv1/oFB2ACYPTrIrnqYNxgFlQID
-AQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E
-FgQU5K8rJnEaK0gnhS9SZizv8IkTcT4wDQYJKoZIhvcNAQEMBQADggIBAJ+qQibb
-C5u+/x6Wki4+omVKapi6Ist9wTrYggoGxval3sBOh2Z5ofmmWJyq+bXmYOfg6LEe
-QkEzCzc9zolwFcq1JKjPa7XSQCGYzyI0zzvFIoTgxQ6KfF2I5DUkzps+GlQebtuy
-h6f88/qBVRRiClmpIgUxPoLW7ttXNLwzldMXG+gnoot7TiYaelpkttGsN/H9oPM4
-7HLwEXWdyzRSjeZ2axfG34arJ45JK3VmgRAhpuo+9K4l/3wV3s6MJT/KYnAK9y8J
-ZgfIPxz88NtFMN9iiMG1D53Dn0reWVlHxYciNuaCp+0KueIHoI17eko8cdLiA6Ef
-MgfdG+RCzgwARWGAtQsgWSl4vflVy2PFPEz0tv/bal8xa5meLMFrUKTX5hgUvYU/
-Z6tGn6D/Qqc6f1zLXbBwHSs09dR2CQzreExZBfMzQsNhFRAbd03OIozUhfJFfbdT
-6u9AWpQKXCBfTkBdYiJ23//OYb2MI3jSNwLgjt7RETeJ9r/tSQdirpLsQBqvFAnZ
-0E6yove+7u7Y/9waLd64NnHi/Hm3lCXRSHNboTXns5lndcEZOitHTtNCjv0xyBZm
-2tIMPNuzjsmhDYAPexZ3FL//2wmUspO8IFgV6dtxQ/PeEMMA3KgqlbbC1j+Qa3bb
-bP6MvPJwNQzcmRk13NfIRmPVNnGuV/u3gm3c
------END CERTIFICATE-----
diff --git a/certs/GTS-Root-R1.pem b/certs/GTS-Root-R1.pem
new file mode 100644
index 00000000..a6095d2b
--- /dev/null
+++ b/certs/GTS-Root-R1.pem
@@ -0,0 +1,38 @@
+# Issuer: CN=GTS Root R1 O=Google Trust Services LLC
+# Subject: CN=GTS Root R1 O=Google Trust Services LLC
+# Label: "GTS Root R1"
+# Serial: 159662320309726417404178440727
+# MD5 Fingerprint: 05:fe:d0:bf:71:a8:a3:76:63:da:01:e0:d8:52:dc:40
+# SHA1 Fingerprint: e5:8c:1c:c4:91:3b:38:63:4b:e9:10:6e:e3:ad:8e:6b:9d:d9:81:4a
+# SHA256 Fingerprint: d9:47:43:2a:bd:e7:b7:fa:90:fc:2e:6b:59:10:1b:12:80:e0:e1:c7:e4:e4:0f:a3:c6:88:7f:ff:57:a7:f4:cf
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 443106ff..3214368d 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -64,7 +64,7 @@ the repository (see `certs` sub directory).
 
     /tool/netwatch/add comment="doh, doh-cert=DigiCert Global G2 TLS RSA SHA256 2020 CA1" host=1.1.1.1;
     /tool/netwatch/add comment="doh, doh-cert=DigiCert TLS Hybrid ECC SHA384 2020 CA1" host=9.9.9.9;
-    /tool/netwatch/add comment="doh, doh-cert=GTS CA 1C3" host=8.8.8.8;
+    /tool/netwatch/add comment="doh, doh-cert=GTS Root R1" host=8.8.8.8;
 
 Sometimes using just one specific (possibly internal) DNS server may be
 desired, with fallback in case it fails. This is possible as well:
diff --git a/global-functions.rsc b/global-functions.rsc
index 567444ee..ca8ecb11 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -509,7 +509,7 @@
   }
 
   :do {
-    :if ([ $CertificateAvailable "GTS CA 1P5" ] = false) do={
+    :if ([ $CertificateAvailable "GTS Root R1" ] = false) do={
       $LogPrint warning $0 ("Downloading required certificate failed.");
       :error false;
     }

From 588dacb5af93819021b71a88f200464359dee701 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 10:47:42 +0200
Subject: [PATCH 193/988] certs: Go Daddy Secure Certificate Authority - G2 ->
 Go Daddy Root Certificate Authority - G2

---
 ...Go-Daddy-Root-Certificate-Authority-G2.pem |  30 +++
 ...-Daddy-Secure-Certificate-Authority-G2.pem | 178 ------------------
 mod/notification-telegram.rsc                 |   2 +-
 telegram-chat.rsc                             |   2 +-
 4 files changed, 32 insertions(+), 180 deletions(-)
 create mode 100644 certs/Go-Daddy-Root-Certificate-Authority-G2.pem
 delete mode 100644 certs/Go-Daddy-Secure-Certificate-Authority-G2.pem

diff --git a/certs/Go-Daddy-Root-Certificate-Authority-G2.pem b/certs/Go-Daddy-Root-Certificate-Authority-G2.pem
new file mode 100644
index 00000000..c61f300e
--- /dev/null
+++ b/certs/Go-Daddy-Root-Certificate-Authority-G2.pem
@@ -0,0 +1,30 @@
+# Issuer: CN=Go Daddy Root Certificate Authority - G2 O=GoDaddy.com, Inc.
+# Subject: CN=Go Daddy Root Certificate Authority - G2 O=GoDaddy.com, Inc.
+# Label: "Go Daddy Root Certificate Authority - G2"
+# Serial: 0
+# MD5 Fingerprint: 80:3a:bc:22:c1:e6:fb:8d:9b:3b:27:4a:32:1b:9a:01
+# SHA1 Fingerprint: 47:be:ab:c9:22:ea:e8:0e:78:78:34:62:a7:9f:45:c2:54:fd:e6:8b
+# SHA256 Fingerprint: 45:14:0b:32:47:eb:9c:c8:c5:b4:f0:d7:b5:30:91:f7:32:92:08:9e:6e:5a:63:e2:74:9d:d3:ac:a9:19:8e:da
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/certs/Go-Daddy-Secure-Certificate-Authority-G2.pem b/certs/Go-Daddy-Secure-Certificate-Authority-G2.pem
deleted file mode 100644
index 4faba90c..00000000
--- a/certs/Go-Daddy-Secure-Certificate-Authority-G2.pem
+++ /dev/null
@@ -1,178 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 7 (0x7)
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", CN = Go Daddy Root Certificate Authority - G2
-        Validity
-            Not Before: May  3 07:00:00 2011 GMT
-            Not After : May  3 07:00:00 2031 GMT
-        Subject: C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
-                Modulus:
-                    00:b9:e0:cb:10:d4:af:76:bd:d4:93:62:eb:30:64:
-                    b8:81:08:6c:c3:04:d9:62:17:8e:2f:ff:3e:65:cf:
-                    8f:ce:62:e6:3c:52:1c:da:16:45:4b:55:ab:78:6b:
-                    63:83:62:90:ce:0f:69:6c:99:c8:1a:14:8b:4c:cc:
-                    45:33:ea:88:dc:9e:a3:af:2b:fe:80:61:9d:79:57:
-                    c4:cf:2e:f4:3f:30:3c:5d:47:fc:9a:16:bc:c3:37:
-                    96:41:51:8e:11:4b:54:f8:28:be:d0:8c:be:f0:30:
-                    38:1e:f3:b0:26:f8:66:47:63:6d:de:71:26:47:8f:
-                    38:47:53:d1:46:1d:b4:e3:dc:00:ea:45:ac:bd:bc:
-                    71:d9:aa:6f:00:db:db:cd:30:3a:79:4f:5f:4c:47:
-                    f8:1d:ef:5b:c2:c4:9d:60:3b:b1:b2:43:91:d8:a4:
-                    33:4e:ea:b3:d6:27:4f:ad:25:8a:a5:c6:f4:d5:d0:
-                    a6:ae:74:05:64:57:88:b5:44:55:d4:2d:2a:3a:3e:
-                    f8:b8:bd:e9:32:0a:02:94:64:c4:16:3a:50:f1:4a:
-                    ae:e7:79:33:af:0c:20:07:7f:e8:df:04:39:c2:69:
-                    02:6c:63:52:fa:77:c1:1b:c8:74:87:c8:b9:93:18:
-                    50:54:35:4b:69:4e:bc:3b:d3:49:2e:1f:dc:c1:d2:
-                    52:fb
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Subject Key Identifier: 
-                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
-            X509v3 Authority Key Identifier: 
-                keyid:3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE
-
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.godaddy.com/
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl.godaddy.com/gdroot-g2.crl
-
-            X509v3 Certificate Policies: 
-                Policy: X509v3 Any Policy
-                  CPS: https://certs.godaddy.com/repository/
-
-    Signature Algorithm: sha256WithRSAEncryption
-         08:7e:6c:93:10:c8:38:b8:96:a9:90:4b:ff:a1:5f:4f:04:ef:
-         6c:3e:9c:88:06:c9:50:8f:a6:73:f7:57:31:1b:be:bc:e4:2f:
-         db:f8:ba:d3:5b:e0:b4:e7:e6:79:62:0e:0c:a2:d7:6a:63:73:
-         31:b5:f5:a8:48:a4:3b:08:2d:a2:5d:90:d7:b4:7c:25:4f:11:
-         56:30:c4:b6:44:9d:7b:2c:9d:e5:5e:e6:ef:0c:61:aa:bf:e4:
-         2a:1b:ee:84:9e:b8:83:7d:c1:43:ce:44:a7:13:70:0d:91:1f:
-         f4:c8:13:ad:83:60:d9:d8:72:a8:73:24:1e:b5:ac:22:0e:ca:
-         17:89:62:58:44:1b:ab:89:25:01:00:0f:cd:c4:1b:62:db:51:
-         b4:d3:0f:51:2a:9b:f4:bc:73:fc:76:ce:36:a4:cd:d9:d8:2c:
-         ea:ae:9b:f5:2a:b2:90:d1:4d:75:18:8a:3f:8a:41:90:23:7d:
-         5b:4b:fe:a4:03:58:9b:46:b2:c3:60:60:83:f8:7d:50:41:ce:
-         c2:a1:90:c3:bb:ef:02:2f:d2:15:54:ee:44:15:d9:0a:ae:a7:
-         8a:33:ed:b1:2d:76:36:26:dc:04:eb:9f:f7:61:1f:15:dc:87:
-         6f:ee:46:96:28:ad:a1:26:7d:0a:09:a7:2e:04:a3:8d:bc:f8:
-         bc:04:30:01
------BEGIN CERTIFICATE-----
-MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
-EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
-ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
-MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
-EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
-CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
-EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
-BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
-K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
-cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
-pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
-eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
-AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
-HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
-9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
-b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
-b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
-CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
-MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
-91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
-RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
-DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
-GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
-LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 0 (0x0)
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", CN = Go Daddy Root Certificate Authority - G2
-        Validity
-            Not Before: Sep  1 00:00:00 2009 GMT
-            Not After : Dec 31 23:59:59 2037 GMT
-        Subject: C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", CN = Go Daddy Root Certificate Authority - G2
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
-                Modulus:
-                    00:bf:71:62:08:f1:fa:59:34:f7:1b:c9:18:a3:f7:
-                    80:49:58:e9:22:83:13:a6:c5:20:43:01:3b:84:f1:
-                    e6:85:49:9f:27:ea:f6:84:1b:4e:a0:b4:db:70:98:
-                    c7:32:01:b1:05:3e:07:4e:ee:f4:fa:4f:2f:59:30:
-                    22:e7:ab:19:56:6b:e2:80:07:fc:f3:16:75:80:39:
-                    51:7b:e5:f9:35:b6:74:4e:a9:8d:82:13:e4:b6:3f:
-                    a9:03:83:fa:a2:be:8a:15:6a:7f:de:0b:c3:b6:19:
-                    14:05:ca:ea:c3:a8:04:94:3b:46:7c:32:0d:f3:00:
-                    66:22:c8:8d:69:6d:36:8c:11:18:b7:d3:b2:1c:60:
-                    b4:38:fa:02:8c:ce:d3:dd:46:07:de:0a:3e:eb:5d:
-                    7c:c8:7c:fb:b0:2b:53:a4:92:62:69:51:25:05:61:
-                    1a:44:81:8c:2c:a9:43:96:23:df:ac:3a:81:9a:0e:
-                    29:c5:1c:a9:e9:5d:1e:b6:9e:9e:30:0a:39:ce:f1:
-                    88:80:fb:4b:5d:cc:32:ec:85:62:43:25:34:02:56:
-                    27:01:91:b4:3b:70:2a:3f:6e:b1:e8:9c:88:01:7d:
-                    9f:d4:f9:db:53:6d:60:9d:bf:2c:e7:58:ab:b8:5f:
-                    46:fc:ce:c4:1b:03:3c:09:eb:49:31:5c:69:46:b3:
-                    e0:47
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Subject Key Identifier: 
-                3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE
-    Signature Algorithm: sha256WithRSAEncryption
-         99:db:5d:79:d5:f9:97:59:67:03:61:f1:7e:3b:06:31:75:2d:
-         a1:20:8e:4f:65:87:b4:f7:a6:9c:bc:d8:e9:2f:d0:db:5a:ee:
-         cf:74:8c:73:b4:38:42:da:05:7b:f8:02:75:b8:fd:a5:b1:d7:
-         ae:f6:d7:de:13:cb:53:10:7e:8a:46:d1:97:fa:b7:2e:2b:11:
-         ab:90:b0:27:80:f9:e8:9f:5a:e9:37:9f:ab:e4:df:6c:b3:85:
-         17:9d:3d:d9:24:4f:79:91:35:d6:5f:04:eb:80:83:ab:9a:02:
-         2d:b5:10:f4:d8:90:c7:04:73:40:ed:72:25:a0:a9:9f:ec:9e:
-         ab:68:12:99:57:c6:8f:12:3a:09:a4:bd:44:fd:06:15:37:c1:
-         9b:e4:32:a3:ed:38:e8:d8:64:f3:2c:7e:14:fc:02:ea:9f:cd:
-         ff:07:68:17:db:22:90:38:2d:7a:8d:d1:54:f1:69:e3:5f:33:
-         ca:7a:3d:7b:0a:e3:ca:7f:5f:39:e5:e2:75:ba:c5:76:18:33:
-         ce:2c:f0:2f:4c:ad:f7:b1:e7:ce:4f:a8:c4:9b:4a:54:06:c5:
-         7f:7d:d5:08:0f:e2:1c:fe:7e:17:b8:ac:5e:f6:d4:16:b2:43:
-         09:0c:4d:f6:a7:6b:b4:99:84:65:ca:7a:88:e2:e2:44:be:5c:
-         f7:ea:1c:f5
------BEGIN CERTIFICATE-----
-MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
-EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
-ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIz
-NTk1OVowgYMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
-EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8GA1UE
-AxMoR28gRGFkZHkgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIw
-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9xYgjx+lk09xvJGKP3gElY6SKD
-E6bFIEMBO4Tx5oVJnyfq9oQbTqC023CYxzIBsQU+B07u9PpPL1kwIuerGVZr4oAH
-/PMWdYA5UXvl+TW2dE6pjYIT5LY/qQOD+qK+ihVqf94Lw7YZFAXK6sOoBJQ7Rnwy
-DfMAZiLIjWltNowRGLfTshxgtDj6AozO091GB94KPutdfMh8+7ArU6SSYmlRJQVh
-GkSBjCypQ5Yj36w6gZoOKcUcqeldHraenjAKOc7xiID7S13MMuyFYkMlNAJWJwGR
-tDtwKj9useiciAF9n9T521NtYJ2/LOdYq7hfRvzOxBsDPAnrSTFcaUaz4EcCAwEA
-AaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE
-FDqahQcQZyi27/a9BUFuIMGU2g/eMA0GCSqGSIb3DQEBCwUAA4IBAQCZ21151fmX
-WWcDYfF+OwYxdS2hII5PZYe096acvNjpL9DbWu7PdIxztDhC2gV7+AJ1uP2lsdeu
-9tfeE8tTEH6KRtGX+rcuKxGrkLAngPnon1rpN5+r5N9ss4UXnT3ZJE95kTXWXwTr
-gIOrmgIttRD02JDHBHNA7XIloKmf7J6raBKZV8aPEjoJpL1E/QYVN8Gb5DKj7Tjo
-2GTzLH4U/ALqn83/B2gX2yKQOC16jdFU8WnjXzPKej17CuPKf1855eJ1usV2GDPO
-LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI
-4uJEvlz36hz1
------END CERTIFICATE-----
diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 9a628ced..18904833 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -143,7 +143,7 @@
   }
 
   :do {
-    :if ([ $CertificateAvailable "Go Daddy Secure Certificate Authority - G2" ] = false) do={
+    :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
       $LogPrint warning $0 ("Downloading required certificate failed.");
       :error false;
     }
diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 0fd8a066..1c274ece 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -55,7 +55,7 @@
     :set TelegramRandomDelay 0;
   }
 
-  :if ([ $CertificateAvailable "Go Daddy Secure Certificate Authority - G2" ] = false) do={
+  :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
     $LogPrint warning $ScriptName ("Downloading required certificate failed.");
     :error false;
   }

From a05efdc07fa912d0d17f4994ee9e892b51030be1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 10:55:13 +0200
Subject: [PATCH 194/988] certs: DigiCert Global G2 TLS RSA SHA256 2020 CA1 ->
 DigiCert Global Root G2

This is used by Cloudflare DNS (1.1.1.1).

$CertificateAvailable "DigiCert Global Root G2";
/ip/dns/set use-doh-server=https://1.1.1.1/dns-query verify-doh-cert=yes;
---
 ...Cert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem | 182 ------------------
 certs/DigiCert-Global-Root-G2.pem             |  29 +++
 doc/netwatch-dns.md                           |   2 +-
 3 files changed, 30 insertions(+), 183 deletions(-)
 delete mode 100644 certs/DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem
 create mode 100644 certs/DigiCert-Global-Root-G2.pem

diff --git a/certs/DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem b/certs/DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem
deleted file mode 100644
index 12084ee4..00000000
--- a/certs/DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem
+++ /dev/null
@@ -1,182 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            0c:f5:bd:06:2b:56:02:f4:7a:b8:50:2c:23:cc:f0:66
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
-        Validity
-            Not Before: Mar 30 00:00:00 2021 GMT
-            Not After : Mar 29 23:59:59 2031 GMT
-        Subject: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:cc:f7:10:62:4f:a6:bb:63:6f:ed:90:52:56:c5:
-                    6d:27:7b:7a:12:56:8a:f1:f4:f9:d6:e7:e1:8f:bd:
-                    95:ab:f2:60:41:15:70:db:12:00:fa:27:0a:b5:57:
-                    38:5b:7d:b2:51:93:71:95:0e:6a:41:94:5b:35:1b:
-                    fa:7b:fa:bb:c5:be:24:30:fe:56:ef:c4:f3:7d:97:
-                    e3:14:f5:14:4d:cb:a7:10:f2:16:ea:ab:22:f0:31:
-                    22:11:61:69:90:26:ba:78:d9:97:1f:e3:7d:66:ab:
-                    75:44:95:73:c8:ac:ff:ef:5d:0a:8a:59:43:e1:ac:
-                    b2:3a:0f:f3:48:fc:d7:6b:37:c1:63:dc:de:46:d6:
-                    db:45:fe:7d:23:fd:90:e8:51:07:1e:51:a3:5f:ed:
-                    49:46:54:7f:2c:88:c5:f4:13:9c:97:15:3c:03:e8:
-                    a1:39:dc:69:0c:32:c1:af:16:57:4c:94:47:42:7c:
-                    a2:c8:9c:7d:e6:d4:4d:54:af:42:99:a8:c1:04:c2:
-                    77:9c:d6:48:e4:ce:11:e0:2a:80:99:f0:43:70:cf:
-                    3f:76:6b:d1:4c:49:ab:24:5e:c2:0d:82:fd:46:a8:
-                    ab:6c:93:cc:62:52:42:75:92:f8:9a:fa:5e:5e:b2:
-                    b0:61:e5:1f:1f:b9:7f:09:98:e8:3d:fa:83:7f:47:
-                    69:a1
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Subject Key Identifier: 
-                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
-            X509v3 Authority Key Identifier: 
-                4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.digicert.com
-                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
-            X509v3 CRL Distribution Points: 
-                Full Name:
-                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
-            X509v3 Certificate Policies: 
-                Policy: 2.16.840.1.114412.2.1
-                Policy: 2.23.140.1.1
-                Policy: 2.23.140.1.2.1
-                Policy: 2.23.140.1.2.2
-                Policy: 2.23.140.1.2.3
-    Signature Algorithm: sha256WithRSAEncryption
-    Signature Value:
-        90:f1:70:cb:28:97:69:97:7c:74:fd:c0:fa:26:7b:53:ab:ad:
-        cd:65:fd:ba:9c:06:9c:8a:d7:5a:43:87:ed:4d:4c:56:5f:ad:
-        c1:c5:b5:05:20:2e:59:d1:ff:4a:f5:a0:2a:d8:b0:95:ad:c9:
-        2e:4a:3b:d7:a7:f6:6f:88:29:fc:30:3f:24:84:bb:c3:b7:7b:
-        93:07:2c:af:87:6b:76:33:ed:00:55:52:b2:59:9e:e4:b9:d0:
-        f3:df:e7:0f:fe:dd:f8:c4:b9:10:72:81:09:04:5f:cf:97:9e:
-        2e:32:75:8e:cf:9a:58:d2:57:31:7e:37:01:81:b2:66:6d:29:
-        1a:b1:66:09:6d:d1:6e:90:f4:b9:fa:2f:01:14:c5:5c:56:64:
-        01:d9:7d:87:a8:38:53:9f:8b:5d:46:6d:5c:c6:27:84:81:d4:
-        7e:8c:8c:a3:9b:52:e7:c6:88:ec:37:7c:2a:fb:f0:55:5a:38:
-        72:10:d8:00:13:cf:4c:73:db:aa:37:35:a8:29:81:69:9c:76:
-        bc:de:18:7b:90:d4:ca:cf:ef:67:03:fd:04:5a:21:16:b1:ff:
-        ea:3f:df:dc:82:f5:eb:f4:59:92:23:0d:24:2a:95:25:4c:ca:
-        a1:91:e6:d4:b7:ac:87:74:b3:f1:6d:a3:99:db:f9:d5:bd:84:
-        40:9f:07:98
------BEGIN CERTIFICATE-----
-MIIEyDCCA7CgAwIBAgIQDPW9BitWAvR6uFAsI8zwZjANBgkqhkiG9w0BAQsFADBh
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
-MjAeFw0yMTAzMzAwMDAwMDBaFw0zMTAzMjkyMzU5NTlaMFkxCzAJBgNVBAYTAlVT
-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMzAxBgNVBAMTKkRpZ2lDZXJ0IEdsb2Jh
-bCBHMiBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTCCASIwDQYJKoZIhvcNAQEBBQAD
-ggEPADCCAQoCggEBAMz3EGJPprtjb+2QUlbFbSd7ehJWivH0+dbn4Y+9lavyYEEV
-cNsSAPonCrVXOFt9slGTcZUOakGUWzUb+nv6u8W+JDD+Vu/E832X4xT1FE3LpxDy
-FuqrIvAxIhFhaZAmunjZlx/jfWardUSVc8is/+9dCopZQ+GssjoP80j812s3wWPc
-3kbW20X+fSP9kOhRBx5Ro1/tSUZUfyyIxfQTnJcVPAPooTncaQwywa8WV0yUR0J8
-osicfebUTVSvQpmowQTCd5zWSOTOEeAqgJnwQ3DPP3Zr0UxJqyRewg2C/Uaoq2yT
-zGJSQnWS+Jr6Xl6ysGHlHx+5fwmY6D36g39HaaECAwEAAaOCAYIwggF+MBIGA1Ud
-EwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFHSFgMBmx9833s+9KTeqAx2+7c0XMB8G
-A1UdIwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAd
-BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdgYIKwYBBQUHAQEEajBoMCQG
-CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQAYIKwYBBQUHMAKG
-NGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RH
-Mi5jcnQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
-L0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA9BgNVHSAENjA0MAsGCWCGSAGG/WwC
-ATAHBgVngQwBATAIBgZngQwBAgEwCAYGZ4EMAQICMAgGBmeBDAECAzANBgkqhkiG
-9w0BAQsFAAOCAQEAkPFwyyiXaZd8dP3A+iZ7U6utzWX9upwGnIrXWkOH7U1MVl+t
-wcW1BSAuWdH/SvWgKtiwla3JLko716f2b4gp/DA/JIS7w7d7kwcsr4drdjPtAFVS
-slme5LnQ89/nD/7d+MS5EHKBCQRfz5eeLjJ1js+aWNJXMX43AYGyZm0pGrFmCW3R
-bpD0ufovARTFXFZkAdl9h6g4U5+LXUZtXMYnhIHUfoyMo5tS58aI7Dd8KvvwVVo4
-chDYABPPTHPbqjc1qCmBaZx2vN4Ye5DUys/vZwP9BFohFrH/6j/f3IL16/RZkiMN
-JCqVJUzKoZHm1Lesh3Sz8W2jmdv51b2EQJ8HmA==
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            03:3a:f1:e6:a7:11:a9:a0:bb:28:64:b1:1d:09:fa:e5
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
-        Validity
-            Not Before: Aug  1 12:00:00 2013 GMT
-            Not After : Jan 15 12:00:00 2038 GMT
-        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:bb:37:cd:34:dc:7b:6b:c9:b2:68:90:ad:4a:75:
-                    ff:46:ba:21:0a:08:8d:f5:19:54:c9:fb:88:db:f3:
-                    ae:f2:3a:89:91:3c:7a:e6:ab:06:1a:6b:cf:ac:2d:
-                    e8:5e:09:24:44:ba:62:9a:7e:d6:a3:a8:7e:e0:54:
-                    75:20:05:ac:50:b7:9c:63:1a:6c:30:dc:da:1f:19:
-                    b1:d7:1e:de:fd:d7:e0:cb:94:83:37:ae:ec:1f:43:
-                    4e:dd:7b:2c:d2:bd:2e:a5:2f:e4:a9:b8:ad:3a:d4:
-                    99:a4:b6:25:e9:9b:6b:00:60:92:60:ff:4f:21:49:
-                    18:f7:67:90:ab:61:06:9c:8f:f2:ba:e9:b4:e9:92:
-                    32:6b:b5:f3:57:e8:5d:1b:cd:8c:1d:ab:95:04:95:
-                    49:f3:35:2d:96:e3:49:6d:dd:77:e3:fb:49:4b:b4:
-                    ac:55:07:a9:8f:95:b3:b4:23:bb:4c:6d:45:f0:f6:
-                    a9:b2:95:30:b4:fd:4c:55:8c:27:4a:57:14:7c:82:
-                    9d:cd:73:92:d3:16:4a:06:0c:8c:50:d1:8f:1e:09:
-                    be:17:a1:e6:21:ca:fd:83:e5:10:bc:83:a5:0a:c4:
-                    67:28:f6:73:14:14:3d:46:76:c3:87:14:89:21:34:
-                    4d:af:0f:45:0c:a6:49:a1:ba:bb:9c:c5:b1:33:83:
-                    29:85
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Subject Key Identifier: 
-                4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
-    Signature Algorithm: sha256WithRSAEncryption
-    Signature Value:
-        60:67:28:94:6f:0e:48:63:eb:31:dd:ea:67:18:d5:89:7d:3c:
-        c5:8b:4a:7f:e9:be:db:2b:17:df:b0:5f:73:77:2a:32:13:39:
-        81:67:42:84:23:f2:45:67:35:ec:88:bf:f8:8f:b0:61:0c:34:
-        a4:ae:20:4c:84:c6:db:f8:35:e1:76:d9:df:a6:42:bb:c7:44:
-        08:86:7f:36:74:24:5a:da:6c:0d:14:59:35:bd:f2:49:dd:b6:
-        1f:c9:b3:0d:47:2a:3d:99:2f:bb:5c:bb:b5:d4:20:e1:99:5f:
-        53:46:15:db:68:9b:f0:f3:30:d5:3e:31:e2:8d:84:9e:e3:8a:
-        da:da:96:3e:35:13:a5:5f:f0:f9:70:50:70:47:41:11:57:19:
-        4e:c0:8f:ae:06:c4:95:13:17:2f:1b:25:9f:75:f2:b1:8e:99:
-        a1:6f:13:b1:41:71:fe:88:2a:c8:4f:10:20:55:d7:f3:14:45:
-        e5:e0:44:f4:ea:87:95:32:93:0e:fe:53:46:fa:2c:9d:ff:8b:
-        22:b9:4b:d9:09:45:a4:de:a4:b8:9a:58:dd:1b:7d:52:9f:8e:
-        59:43:88:81:a4:9e:26:d5:6f:ad:dd:0d:c6:37:7d:ed:03:92:
-        1b:e5:77:5f:76:ee:3c:8d:c4:5d:56:5b:a2:d9:66:6e:b3:35:
-        37:e5:32:b6
------BEGIN CERTIFICATE-----
-MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
-MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT
-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG
-9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI
-2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx
-1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ
-q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz
-tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ
-vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP
-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV
-5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY
-1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4
-NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG
-Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91
-8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe
-pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl
-MrY=
------END CERTIFICATE-----
diff --git a/certs/DigiCert-Global-Root-G2.pem b/certs/DigiCert-Global-Root-G2.pem
new file mode 100644
index 00000000..8af6c7aa
--- /dev/null
+++ b/certs/DigiCert-Global-Root-G2.pem
@@ -0,0 +1,29 @@
+# Issuer: CN=DigiCert Global Root G2 O=DigiCert Inc OU=www.digicert.com
+# Subject: CN=DigiCert Global Root G2 O=DigiCert Inc OU=www.digicert.com
+# Label: "DigiCert Global Root G2"
+# Serial: 4293743540046975378534879503202253541
+# MD5 Fingerprint: e4:a6:8a:c8:54:ac:52:42:46:0a:fd:72:48:1b:2a:44
+# SHA1 Fingerprint: df:3c:24:f9:bf:d6:66:76:1b:26:80:73:fe:06:d1:cc:8d:4f:82:a4
+# SHA256 Fingerprint: cb:3c:cb:b7:60:31:e5:e0:13:8f:8d:d3:9a:23:f9:de:47:ff:c3:5e:43:c1:14:4c:ea:27:d4:6a:5a:b1:cb:5f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 3214368d..3d2c6be1 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -62,7 +62,7 @@ manually!
 Importing a certificate automatically is possible, at least if available in
 the repository (see `certs` sub directory).
 
-    /tool/netwatch/add comment="doh, doh-cert=DigiCert Global G2 TLS RSA SHA256 2020 CA1" host=1.1.1.1;
+    /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G2" host=1.1.1.1;
     /tool/netwatch/add comment="doh, doh-cert=DigiCert TLS Hybrid ECC SHA384 2020 CA1" host=9.9.9.9;
     /tool/netwatch/add comment="doh, doh-cert=GTS Root R1" host=8.8.8.8;
 

From c4e8d01de19f9c5e1d19c74c010079233c4d4df5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 10:57:16 +0200
Subject: [PATCH 195/988] certs: DigiCert TLS Hybrid ECC SHA384 2020 CA1 ->
 DigiCert Global Root CA

This is used by Cloudflare DNS Quard9 (9.9.9.9).

$CertificateAvailable "DigiCert Global Root CA";
/ip/dns/set use-doh-server=https://9.9.9.9/dns-query verify-doh-cert=yes;
---
 certs/DigiCert-Global-Root-CA.pem             |  29 +++
 ...igiCert-TLS-Hybrid-ECC-SHA384-2020-CA1.pem | 174 ------------------
 doc/netwatch-dns.md                           |   2 +-
 3 files changed, 30 insertions(+), 175 deletions(-)
 create mode 100644 certs/DigiCert-Global-Root-CA.pem
 delete mode 100644 certs/DigiCert-TLS-Hybrid-ECC-SHA384-2020-CA1.pem

diff --git a/certs/DigiCert-Global-Root-CA.pem b/certs/DigiCert-Global-Root-CA.pem
new file mode 100644
index 00000000..b0f00130
--- /dev/null
+++ b/certs/DigiCert-Global-Root-CA.pem
@@ -0,0 +1,29 @@
+# Issuer: CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
+# Subject: CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
+# Label: "DigiCert Global Root CA"
+# Serial: 10944719598952040374951832963794454346
+# MD5 Fingerprint: 79:e4:a9:84:0d:7d:3a:96:d7:c0:4f:e2:43:4c:89:2e
+# SHA1 Fingerprint: a8:98:5d:3a:65:e5:e5:c4:b2:d7:d6:6d:40:c6:dd:2f:b1:9c:54:36
+# SHA256 Fingerprint: 43:48:a0:e9:44:4c:78:cb:26:5e:05:8d:5e:89:44:b4:d8:4f:96:62:bd:26:db:25:7f:89:34:a4:43:c7:01:61
+-----BEGIN CERTIFICATE-----
+MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
+MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
+b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
+9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
+CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
+nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
+43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
+T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
+gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
+BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
+TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
+DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
+hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
+06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
+PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
+YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
+CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
+-----END CERTIFICATE-----
diff --git a/certs/DigiCert-TLS-Hybrid-ECC-SHA384-2020-CA1.pem b/certs/DigiCert-TLS-Hybrid-ECC-SHA384-2020-CA1.pem
deleted file mode 100644
index 446f56f4..00000000
--- a/certs/DigiCert-TLS-Hybrid-ECC-SHA384-2020-CA1.pem
+++ /dev/null
@@ -1,174 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            07:f2:f3:5c:87:a8:77:af:7a:ef:e9:47:99:35:25:bd
-        Signature Algorithm: sha384WithRSAEncryption
-        Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
-        Validity
-            Not Before: Apr 14 00:00:00 2021 GMT
-            Not After : Apr 13 23:59:59 2031 GMT
-        Subject: C = US, O = DigiCert Inc, CN = DigiCert TLS Hybrid ECC SHA384 2020 CA1
-        Subject Public Key Info:
-            Public Key Algorithm: id-ecPublicKey
-                Public-Key: (384 bit)
-                pub:
-                    04:c1:1b:c6:9a:5b:98:d9:a4:29:a0:e9:d4:04:b5:
-                    db:eb:a6:b2:6c:55:c0:ff:ed:98:c6:49:2f:06:27:
-                    51:cb:bf:70:c1:05:7a:c3:b1:9d:87:89:ba:ad:b4:
-                    13:17:c9:a8:b4:83:c8:b8:90:d1:cc:74:35:36:3c:
-                    83:72:b0:b5:d0:f7:22:69:c8:f1:80:c4:7b:40:8f:
-                    cf:68:87:26:5c:39:89:f1:4d:91:4d:da:89:8b:e4:
-                    03:c3:43:e5:bf:2f:73
-                ASN1 OID: secp384r1
-                NIST CURVE: P-384
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Subject Key Identifier: 
-                0A:BC:08:29:17:8C:A5:39:6D:7A:0E:CE:33:C7:2E:B3:ED:FB:C3:7A
-            X509v3 Authority Key Identifier: 
-                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
-
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.digicert.com
-                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootCA.crt
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl
-
-            X509v3 Certificate Policies: 
-                Policy: 2.16.840.1.114412.2.1
-                Policy: 2.23.140.1.1
-                Policy: 2.23.140.1.2.1
-                Policy: 2.23.140.1.2.2
-                Policy: 2.23.140.1.2.3
-
-    Signature Algorithm: sha384WithRSAEncryption
-         47:59:81:7f:d4:1b:1f:b0:71:f6:98:5d:18:ba:98:47:98:b0:
-         7e:76:2b:ea:ff:1a:8b:ac:26:b3:42:8d:31:e6:4a:e8:19:d0:
-         ef:da:14:e7:d7:14:92:a1:92:f2:a7:2e:2d:af:fb:1d:f6:fb:
-         53:b0:8a:3f:fc:d8:16:0a:e9:b0:2e:b6:a5:0b:18:90:35:26:
-         a2:da:f6:a8:b7:32:fc:95:23:4b:c6:45:b9:c4:cf:e4:7c:ee:
-         e6:c9:f8:90:bd:72:e3:99:c3:1d:0b:05:7c:6a:97:6d:b2:ab:
-         02:36:d8:c2:bc:2c:01:92:3f:04:a3:8b:75:11:c7:b9:29:bc:
-         11:d0:86:ba:92:bc:26:f9:65:c8:37:cd:26:f6:86:13:0c:04:
-         aa:89:e5:78:b1:c1:4e:79:bc:76:a3:0b:51:e4:c5:d0:9e:6a:
-         fe:1a:2c:56:ae:06:36:27:a3:73:1c:08:7d:93:32:d0:c2:44:
-         19:da:8d:f4:0e:7b:1d:28:03:2b:09:8a:76:ca:77:dc:87:7a:
-         ac:7b:52:26:55:a7:72:0f:9d:d2:88:4f:fe:b1:21:c5:1a:a1:
-         aa:39:f5:56:db:c2:84:c4:35:1f:70:da:bb:46:f0:86:bf:64:
-         00:c4:3e:f7:9f:46:1b:9d:23:05:b9:7d:b3:4f:0f:a9:45:3a:
-         e3:74:30:98
------BEGIN CERTIFICATE-----
-MIIEFzCCAv+gAwIBAgIQB/LzXIeod6967+lHmTUlvTANBgkqhkiG9w0BAQwFADBh
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
-QTAeFw0yMTA0MTQwMDAwMDBaFw0zMTA0MTMyMzU5NTlaMFYxCzAJBgNVBAYTAlVT
-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMDAuBgNVBAMTJ0RpZ2lDZXJ0IFRMUyBI
-eWJyaWQgRUNDIFNIQTM4NCAyMDIwIENBMTB2MBAGByqGSM49AgEGBSuBBAAiA2IA
-BMEbxppbmNmkKaDp1AS12+umsmxVwP/tmMZJLwYnUcu/cMEFesOxnYeJuq20ExfJ
-qLSDyLiQ0cx0NTY8g3KwtdD3ImnI8YDEe0CPz2iHJlw5ifFNkU3aiYvkA8ND5b8v
-c6OCAYIwggF+MBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFAq8CCkXjKU5
-bXoOzjPHLrPt+8N6MB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA4G
-A1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdgYI
-KwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j
-b20wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp
-Q2VydEdsb2JhbFJvb3RDQS5jcnQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2Ny
-bDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAE
-NjA0MAsGCWCGSAGG/WwCATAHBgVngQwBATAIBgZngQwBAgEwCAYGZ4EMAQICMAgG
-BmeBDAECAzANBgkqhkiG9w0BAQwFAAOCAQEAR1mBf9QbH7Bx9phdGLqYR5iwfnYr
-6v8ai6wms0KNMeZK6BnQ79oU59cUkqGS8qcuLa/7Hfb7U7CKP/zYFgrpsC62pQsY
-kDUmotr2qLcy/JUjS8ZFucTP5Hzu5sn4kL1y45nDHQsFfGqXbbKrAjbYwrwsAZI/
-BKOLdRHHuSm8EdCGupK8JvllyDfNJvaGEwwEqonleLHBTnm8dqMLUeTF0J5q/hos
-Vq4GNiejcxwIfZMy0MJEGdqN9A57HSgDKwmKdsp33Id6rHtSJlWncg+d0ohP/rEh
-xRqhqjn1VtvChMQ1H3Dau0bwhr9kAMQ+959GG50jBbl9s08PqUU643QwmA==
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            08:3b:e0:56:90:42:46:b1:a1:75:6a:c9:59:91:c7:4a
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
-        Validity
-            Not Before: Nov 10 00:00:00 2006 GMT
-            Not After : Nov 10 00:00:00 2031 GMT
-        Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
-                Modulus:
-                    00:e2:3b:e1:11:72:de:a8:a4:d3:a3:57:aa:50:a2:
-                    8f:0b:77:90:c9:a2:a5:ee:12:ce:96:5b:01:09:20:
-                    cc:01:93:a7:4e:30:b7:53:f7:43:c4:69:00:57:9d:
-                    e2:8d:22:dd:87:06:40:00:81:09:ce:ce:1b:83:bf:
-                    df:cd:3b:71:46:e2:d6:66:c7:05:b3:76:27:16:8f:
-                    7b:9e:1e:95:7d:ee:b7:48:a3:08:da:d6:af:7a:0c:
-                    39:06:65:7f:4a:5d:1f:bc:17:f8:ab:be:ee:28:d7:
-                    74:7f:7a:78:99:59:85:68:6e:5c:23:32:4b:bf:4e:
-                    c0:e8:5a:6d:e3:70:bf:77:10:bf:fc:01:f6:85:d9:
-                    a8:44:10:58:32:a9:75:18:d5:d1:a2:be:47:e2:27:
-                    6a:f4:9a:33:f8:49:08:60:8b:d4:5f:b4:3a:84:bf:
-                    a1:aa:4a:4c:7d:3e:cf:4f:5f:6c:76:5e:a0:4b:37:
-                    91:9e:dc:22:e6:6d:ce:14:1a:8e:6a:cb:fe:cd:b3:
-                    14:64:17:c7:5b:29:9e:32:bf:f2:ee:fa:d3:0b:42:
-                    d4:ab:b7:41:32:da:0c:d4:ef:f8:81:d5:bb:8d:58:
-                    3f:b5:1b:e8:49:28:a2:70:da:31:04:dd:f7:b2:16:
-                    f2:4c:0a:4e:07:a8:ed:4a:3d:5e:b5:7f:a3:90:c3:
-                    af:27
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Key Usage: critical
-                Digital Signature, Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Subject Key Identifier: 
-                03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
-            X509v3 Authority Key Identifier: 
-                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
-
-    Signature Algorithm: sha1WithRSAEncryption
-         cb:9c:37:aa:48:13:12:0a:fa:dd:44:9c:4f:52:b0:f4:df:ae:
-         04:f5:79:79:08:a3:24:18:fc:4b:2b:84:c0:2d:b9:d5:c7:fe:
-         f4:c1:1f:58:cb:b8:6d:9c:7a:74:e7:98:29:ab:11:b5:e3:70:
-         a0:a1:cd:4c:88:99:93:8c:91:70:e2:ab:0f:1c:be:93:a9:ff:
-         63:d5:e4:07:60:d3:a3:bf:9d:5b:09:f1:d5:8e:e3:53:f4:8e:
-         63:fa:3f:a7:db:b4:66:df:62:66:d6:d1:6e:41:8d:f2:2d:b5:
-         ea:77:4a:9f:9d:58:e2:2b:59:c0:40:23:ed:2d:28:82:45:3e:
-         79:54:92:26:98:e0:80:48:a8:37:ef:f0:d6:79:60:16:de:ac:
-         e8:0e:cd:6e:ac:44:17:38:2f:49:da:e1:45:3e:2a:b9:36:53:
-         cf:3a:50:06:f7:2e:e8:c4:57:49:6c:61:21:18:d5:04:ad:78:
-         3c:2c:3a:80:6b:a7:eb:af:15:14:e9:d8:89:c1:b9:38:6c:e2:
-         91:6c:8a:ff:64:b9:77:25:57:30:c0:1b:24:a3:e1:dc:e9:df:
-         47:7c:b5:b4:24:08:05:30:ec:2d:bd:0b:bf:45:bf:50:b9:a9:
-         f3:eb:98:01:12:ad:c8:88:c6:98:34:5f:8d:0a:3c:c6:e9:d5:
-         95:95:6d:de
------BEGIN CERTIFICATE-----
-MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
-QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
-9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
-CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
-nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
-43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
-T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
-gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
-BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
-TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
-DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
-hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
-06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
-PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
-YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
-CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
------END CERTIFICATE-----
diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 3d2c6be1..9fe486e6 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -63,7 +63,7 @@ Importing a certificate automatically is possible, at least if available in
 the repository (see `certs` sub directory).
 
     /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G2" host=1.1.1.1;
-    /tool/netwatch/add comment="doh, doh-cert=DigiCert TLS Hybrid ECC SHA384 2020 CA1" host=9.9.9.9;
+    /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root CA" host=9.9.9.9;
     /tool/netwatch/add comment="doh, doh-cert=GTS Root R1" host=8.8.8.8;
 
 Sometimes using just one specific (possibly internal) DNS server may be

From 1a6812ef797a1683cec9678062cfaca367500ad0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 20:51:46 +0200
Subject: [PATCH 196/988] notify on changes regarding certificates

---
 global-functions.rsc | 2 +-
 news-and-changes.rsc | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ca8ecb11..eb9f6382 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 129;
+:global ExpectedConfigVersion 130;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index b20bbaf4..cf17e7a3 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -54,6 +54,7 @@
   127="Added support for authentication to Ntfy notification module.";
   128="Added another list from blocklist.de to default configuration for 'fw-addr-lists'.";
   129="Extended 'backup-partition' to support RouterOS copy-over - interactively or before feature update.";
+  130="Dropped intermediate certificates, depending on just root certificates now.";
 };
 
 # Migration steps to be applied on script updates

From cdb553d39b21e82e70f427b0a7c4e95dc4f2055f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Jun 2024 12:25:26 +0200
Subject: [PATCH 197/988] global-functions: $CertificateDownload: try fallback
 to mkcert.org

There's a nice API that allows to download certificate by exact common
name. Let's use that, as a fallback at least.

https://mkcert.org/
---
 global-functions.rsc | 41 ++++++++++++++++++++++++++++++-----------
 news-and-changes.rsc |  1 +
 2 files changed, 31 insertions(+), 11 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index eb9f6382..26472b87 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,7 +12,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 130;
+:global ExpectedConfigVersion 131;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
@@ -135,6 +135,7 @@
   :global ScriptUpdatesBaseUrl;
   :global ScriptUpdatesUrlSuffix;
 
+  :global CertificateAvailable;
   :global CertificateNameByCN;
   :global CleanName;
   :global FetchUserAgentStr;
@@ -143,22 +144,40 @@
 
   $LogPrint info $0 ("Downloading and importing certificate with " . \
       "CommonName '" . $CommonName . "'.");
+  :local FileName ([ $CleanName $CommonName ] . ".pem");
   :do {
-    :local FileName ([ $CleanName $CommonName ] . ".pem");
     /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $0 ] }) \
       ($ScriptUpdatesBaseUrl . "certs/" . $FileName . $ScriptUpdatesUrlSuffix) \
       dst-path=$FileName as-value;
     $WaitForFile $FileName;
-    /certificate/import file-name=$FileName passphrase="" as-value;
-    :delay 1s;
-    /file/remove [ find where name=$FileName ];
-
-    :foreach Cert in=[ /certificate/find where name~("^" . $FileName . "_[0-9]+\$") ] do={
-      $CertificateNameByCN [ /certificate/get $Cert common-name ];
-    }
   } on-error={
-    $LogPrint warning $0 ("Failed importing certificate with CommonName '" . $CommonName . "'!");
-    :return false;
+    $LogPrint warning $0 ("Failed downloading certificate with CommonName '" . $CommonName . \
+      "' from repository! Trying fallback to mkcert.org...");
+    :do {
+      :if ([ $CertificateAvailable "ISRG Root X1" ] = false) do={
+        $LogPrint error $0 ("Downloading required certificate failed.");
+        :return false;
+      }
+      /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $0 ] }) \
+        "https://mkcert.org/generate/" http-data=[ :serialize to=json ({ $CommonName }) ] \
+        dst-path=$FileName as-value;
+      $WaitForFile $FileName;
+      :if ([ /file/get $FileName size ] = 0) do={
+        /file/remove $FileName;
+        :error false;
+      }
+    } on-error={
+      $LogPrint warning $0 ("Failed downloading certificate with CommonName '" . $CommonName . "'!");
+      :return false;
+    }
+  }
+
+  /certificate/import file-name=$FileName passphrase="" as-value;
+  :delay 1s;
+  /file/remove [ find where name=$FileName ];
+
+  :foreach Cert in=[ /certificate/find where name~("^" . $FileName . "_[0-9]+\$") ] do={
+    $CertificateNameByCN [ /certificate/get $Cert common-name ];
   }
   :return true;
 }
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index cf17e7a3..8ddc3d60 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -55,6 +55,7 @@
   128="Added another list from blocklist.de to default configuration for 'fw-addr-lists'.";
   129="Extended 'backup-partition' to support RouterOS copy-over - interactively or before feature update.";
   130="Dropped intermediate certificates, depending on just root certificates now.";
+  131="Enhanced certificate download to fallback to mkcert.org, so all (commonly trusted) root certificates are available now.";
 };
 
 # Migration steps to be applied on script updates

From f3f7d3edc0f6bd895e27019ed5d48e4afafe95fa Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Jun 2024 07:55:58 +0200
Subject: [PATCH 198/988] check-certificates: limit scope for $CertNew...

... into block where certificate is replaced.

This should unbreak renewing with a certificate updated in place.
---
 check-certificates.rsc | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index e9235f12..c9622b74 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -139,7 +139,6 @@
 
   :foreach Cert in=[ /certificate/find where !revoked !ca !scep-url expires-after<$CertRenewTime ] do={
     :local CertVal [ /certificate/get $Cert ];
-    :local CertNew;
     :local LastName;
 
     :do {
@@ -166,7 +165,7 @@
       } else={
         $LogPrint debug $ScriptName ("Certificate '" . $CertVal->"name" . "' was not updated, but replaced.");
 
-        :set CertNew [ /certificate/find where name~("^" . [ $EscapeForRegEx [ $UrlEncode $LastName ] ] . "\\.(p12|pem)_[0-9]+\$") \
+        :local CertNew [ /certificate/find where name~("^" . [ $EscapeForRegEx [ $UrlEncode $LastName ] ] . "\\.(p12|pem)_[0-9]+\$") \
           (common-name=($CertVal->"common-name") or subject-alt-name~("(^|\\W)(DNS|IP):" . [ $EscapeForRegEx $LastName ] . "(\\W|\$)")) \
           fingerprint!=[ :tostr ($CertVal->"fingerprint") ] expires-after>$CertRenewTime ];
         :local CertNewVal [ /certificate/get $CertNew ];
@@ -190,13 +189,13 @@
 
         /certificate/remove $Cert;
         /certificate/set $CertNew name=($CertVal->"name");
-        :set CertNewVal;
+        :set Cert $CertNew;
         :set CertVal [ /certificate/get $CertNew ];
       }
 
       $SendNotification2 ({ origin=$ScriptName; silent=true; \
         subject=([ $SymbolForNotification "lock-with-ink-pen" ] . "Certificate renewed: " . ($CertVal->"name")); \
-        message=("A certificate on " . $Identity . " has been renewed.\n\n" . [ $FormatInfo $CertNew ]) });
+        message=("A certificate on " . $Identity . " has been renewed.\n\n" . [ $FormatInfo $Cert ]) });
       $LogPrint info $ScriptName ("The certificate '" . ($CertVal->"name") . "' has been renewed.");
     } on-error={
       $LogPrint debug $ScriptName ("Could not renew certificate '" . ($CertVal->"name") . "'.");

From ce1b635eb2d96706ef0a8b603737062338f92238 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 2 Jul 2024 21:29:14 +0200
Subject: [PATCH 199/988] global-functions: $GetMacVendor: cert 'GTS Root R4'

---
 certs/GTS-Root-R4.pem | 20 ++++++++++++++++++++
 global-functions.rsc  |  2 +-
 2 files changed, 21 insertions(+), 1 deletion(-)
 create mode 100644 certs/GTS-Root-R4.pem

diff --git a/certs/GTS-Root-R4.pem b/certs/GTS-Root-R4.pem
new file mode 100644
index 00000000..16a1c368
--- /dev/null
+++ b/certs/GTS-Root-R4.pem
@@ -0,0 +1,20 @@
+# Issuer: CN=GTS Root R4 O=Google Trust Services LLC
+# Subject: CN=GTS Root R4 O=Google Trust Services LLC
+# Label: "GTS Root R4"
+# Serial: 159662532700760215368942768210
+# MD5 Fingerprint: 43:96:83:77:19:4d:76:b3:9d:65:52:e4:1d:22:a5:e8
+# SHA1 Fingerprint: 77:d3:03:67:b5:e0:0c:15:f6:0c:38:61:df:7c:e1:3b:92:46:4d:47
+# SHA256 Fingerprint: 34:9d:fa:40:58:c5:e2:63:12:3b:39:8a:e7:95:57:3c:4e:13:13:c8:3f:e6:8f:93:55:6c:d5:e8:03:1b:3c:7d
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/global-functions.rsc b/global-functions.rsc
index 26472b87..121c5ec6 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -528,7 +528,7 @@
   }
 
   :do {
-    :if ([ $CertificateAvailable "GTS Root R1" ] = false) do={
+    :if ([ $CertificateAvailable "GTS Root R4" ] = false) do={
       $LogPrint warning $0 ("Downloading required certificate failed.");
       :error false;
     }

From eab9b28cd28b1d12d3f0d178db22acdac5ad1758 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 4 Jul 2024 11:56:56 +0200
Subject: [PATCH 200/988] global-functions: $MkDir: enable tmpfs if disabled

---
 global-functions.rsc | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 121c5ec6..44b3abeb 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -829,7 +829,12 @@
     :global LogPrint;
     :global WaitForFile;
 
-    :if ([ :len [ /disk/find where slot=tmpfs type=tmpfs ] ] = 1) do={
+    :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];
+    :if ([ :len $TmpFs ] = 1) do={
+      :if ([ /disk/get $TmpFs disabled ] = true) do={
+        $LogPrint info $0 ("The tmpfs is disabled, enabling.");
+        /disk/enable $TmpFs;
+      }
       :return true;
     }
 

From 64bc9f73f7ed24cfb7dec9f24fb101594ae4cb79 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 3 Jul 2024 16:35:39 +0200
Subject: [PATCH 201/988] packages-update: run backups before package download

This reduces memory pressure, especially on device with very limited RAM
like mAP with its 64 MB.
---
 packages-update.rsc | 52 ++++++++++++++++++++++-----------------------
 1 file changed, 26 insertions(+), 26 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index 0208b1e6..97039ecb 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -60,32 +60,6 @@
     :error true;
   }
 
-  :local NumInstalled [ $VersionToNum ($Update->"installed-version") ];
-  :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
-
-  :local DoDowngrade false;
-  :if ($NumInstalled > $NumLatest) do={
-    :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
-      :put "Latest version is older than installed one. Want to downgrade? [y/N]";
-      :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
-        :set DoDowngrade true;
-      } else={
-        :put "Canceled...";
-      }
-    } else={
-      $LogPrint warning $ScriptName ("Not installing downgrade automatically.");
-      :error false;
-    }
-  }
-
-  :foreach Package in=[ /system/package/find where !bundle ] do={
-    :local PkgName [ /system/package/get $Package name ];
-    :if ([ $DownloadPackage $PkgName ($Update->"latest-version") ] = false) do={
-      $LogPrint error $ScriptName ("Download for package " . $PkgName . " failed, update aborted.");
-      :error false;
-    }
-  }
-
   :local RunOrder ({});
   :foreach Script in=[ /system/script/find where source~("\n# provides: backup-script\\b") ] do={
     :local ScriptVal [ /system/script/get $Script ];
@@ -120,6 +94,32 @@
     }
   }
 
+  :local NumInstalled [ $VersionToNum ($Update->"installed-version") ];
+  :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
+
+  :local DoDowngrade false;
+  :if ($NumInstalled > $NumLatest) do={
+    :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
+      :put "Latest version is older than installed one. Want to downgrade? [y/N]";
+      :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
+        :set DoDowngrade true;
+      } else={
+        :put "Canceled...";
+      }
+    } else={
+      $LogPrint warning $ScriptName ("Not installing downgrade automatically.");
+      :error false;
+    }
+  }
+
+  :foreach Package in=[ /system/package/find where !bundle ] do={
+    :local PkgName [ /system/package/get $Package name ];
+    :if ([ $DownloadPackage $PkgName ($Update->"latest-version") ] = false) do={
+      $LogPrint error $ScriptName ("Download for package " . $PkgName . " failed, update aborted.");
+      :error false;
+    }
+  }
+
   :if ($DoDowngrade = true) do={
     $LogPrint info $ScriptName ("Rebooting for downgrade.");
     :delay 1s;

From 1bc6f9c45c7487c6b1fa1c26a9ceeaeadd86c90c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 5 Jul 2024 15:19:11 +0200
Subject: [PATCH 202/988] backup-partition: rename variable

---
 backup-partition.rsc | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 3c883f7e..572c7400 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -58,13 +58,13 @@
     :error false;
   }
 
-  :local FallbackTo [ /partitions/get $ActiveRunning fallback-to ];
+  :local FallbackToName [ /partitions/get $ActiveRunning fallback-to ];
 
-  :if ([ /partitions/get $ActiveRunning version ] != [ /partitions/get $FallbackTo version]) do={
+  :if ([ /partitions/get $ActiveRunning version ] != [ /partitions/get $FallbackToName version]) do={
     :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
-      :put ("The partitions have different RouterOS versions. Copy over to '" . $FallbackTo . "'? [y/N]");
+      :put ("The partitions have different RouterOS versions. Copy over to '" . $FallbackToName . "'? [y/N]");
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
-        :if ([ $CopyTo $ScriptName $FallbackTo ] = false) do={
+        :if ([ $CopyTo $ScriptName $FallbackToName ] = false) do={
           :set PackagesUpdateBackupFailure true;
           :error false;
         }
@@ -75,7 +75,7 @@
       :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
       :if ($BackupPartitionCopyBeforeFeatureUpdate = true && $NumLatest > 0 && \
            ($NumInstalled & 0xffff0000) != ($NumLatest & 0xffff0000)) do={
-        :if ([ $CopyTo $ScriptName $FallbackTo ] = false) do={
+        :if ([ $CopyTo $ScriptName $FallbackToName ] = false) do={
           :set PackagesUpdateBackupFailure true;
           :error false;
         }
@@ -87,12 +87,12 @@
     /system/scheduler/add start-time=startup name="running-from-backup-partition" \
         on-event=(":log warning (\"Running from partition '\" . " . \
         "[ /partitions/get [ find where running ] name ] . \"'!\")");
-    /partitions/save-config-to $FallbackTo;
+    /partitions/save-config-to $FallbackToName;
     /system/scheduler/remove "running-from-backup-partition";
-    $LogPrint info $ScriptName ("Saved configuration to partition '" . $FallbackTo . "'.");
+    $LogPrint info $ScriptName ("Saved configuration to partition '" . $FallbackToName . "'.");
   } on-error={
     /system/scheduler/remove [ find where name="running-from-backup-partition" ];
-    $LogPrint error $ScriptName ("Failed saving configuration to partition '" . $FallbackTo . "'!");
+    $LogPrint error $ScriptName ("Failed saving configuration to partition '" . $FallbackToName . "'!");
     :set PackagesUpdateBackupFailure true;
     :error false;
   }

From 235737c2327cf377a1208dc96af53d9c8642b305 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 5 Jul 2024 15:21:52 +0200
Subject: [PATCH 203/988] backup-partition: check the fallback partition
 actually exists...

... and use its id for actions.
---
 backup-partition.rsc | 24 ++++++++++++++++--------
 1 file changed, 16 insertions(+), 8 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 572c7400..211db0f9 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -24,17 +24,18 @@
   :global VersionToNum;
 
   :local CopyTo do={
-    :local ScriptName [ :tostr $1 ];
-    :local FallbackTo [ :tostr $2 ];
+    :local ScriptName     [ :tostr $1 ];
+    :local FallbackTo     [ :toid  $2 ];
+    :local FallbackToName [ :tostr $3 ];
 
     :global LogPrint;
 
     :do {
       /partitions/copy-to $FallbackTo;
-      $LogPrint info $ScriptName ("Copied RouterOS to partition '" . $FallbackTo . "'.");
+      $LogPrint info $ScriptName ("Copied RouterOS to partition '" . $FallbackToName . "'.");
       :return true;
     } on-error={
-      $LogPrint error $ScriptName ("Failed copying RouterOS to partition '" . $FallbackTo . "'!");
+      $LogPrint error $ScriptName ("Failed copying RouterOS to partition '" . $FallbackToName . "'!");
       :return false;
     }
   }
@@ -59,12 +60,19 @@
   }
 
   :local FallbackToName [ /partitions/get $ActiveRunning fallback-to ];
+  :local FallbackTo [ /partition/find where name=$FallbackToName ];
 
-  :if ([ /partitions/get $ActiveRunning version ] != [ /partitions/get $FallbackToName version]) do={
+  :if ([ :len $FallbackTo ] < 1) do={
+    $LogPrint error $ScriptName ("There is no partition with name '" . $FallbackToName . "'.");
+    :set PackagesUpdateBackupFailure true;
+    :error false;
+  }
+
+  :if ([ /partitions/get $ActiveRunning version ] != [ /partitions/get $FallbackTo version]) do={
     :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
       :put ("The partitions have different RouterOS versions. Copy over to '" . $FallbackToName . "'? [y/N]");
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
-        :if ([ $CopyTo $ScriptName $FallbackToName ] = false) do={
+        :if ([ $CopyTo $ScriptName $FallbackTo $FallbackToName ] = false) do={
           :set PackagesUpdateBackupFailure true;
           :error false;
         }
@@ -75,7 +83,7 @@
       :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
       :if ($BackupPartitionCopyBeforeFeatureUpdate = true && $NumLatest > 0 && \
            ($NumInstalled & 0xffff0000) != ($NumLatest & 0xffff0000)) do={
-        :if ([ $CopyTo $ScriptName $FallbackToName ] = false) do={
+        :if ([ $CopyTo $ScriptName $FallbackTo $FallbackToName ] = false) do={
           :set PackagesUpdateBackupFailure true;
           :error false;
         }
@@ -87,7 +95,7 @@
     /system/scheduler/add start-time=startup name="running-from-backup-partition" \
         on-event=(":log warning (\"Running from partition '\" . " . \
         "[ /partitions/get [ find where running ] name ] . \"'!\")");
-    /partitions/save-config-to $FallbackToName;
+    /partitions/save-config-to $FallbackTo;
     /system/scheduler/remove "running-from-backup-partition";
     $LogPrint info $ScriptName ("Saved configuration to partition '" . $FallbackToName . "'.");
   } on-error={

From 25135b64e549e129914b9b5dfb74ca2011ee3d5d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 5 Jul 2024 15:32:49 +0200
Subject: [PATCH 204/988] backup-partition: check that target is inactive

---
 backup-partition.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 211db0f9..34cdc8f8 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -60,10 +60,10 @@
   }
 
   :local FallbackToName [ /partitions/get $ActiveRunning fallback-to ];
-  :local FallbackTo [ /partition/find where name=$FallbackToName ];
+  :local FallbackTo [ /partition/find where name=$FallbackToName !active ];
 
   :if ([ :len $FallbackTo ] < 1) do={
-    $LogPrint error $ScriptName ("There is no partition with name '" . $FallbackToName . "'.");
+    $LogPrint error $ScriptName ("There is no inactive partition named '" . $FallbackToName . "'.");
     :set PackagesUpdateBackupFailure true;
     :error false;
   }

From 35d3c058b83388b8e187bb53ff8c1e0d85c299b5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 10 Jul 2024 11:02:53 +0200
Subject: [PATCH 205/988] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index 13d05088..e9bf7d18 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -47,6 +47,7 @@ Add yourself to the list,
 * Marek Čábák
 * Oleksandr Yukhymchuk
 * Peter Holtkamp
+* Peter Ponzel
 * Reiner Vehrenkamp
 * Richard Österreicher
 * Simon Hitzemann

From 78dfc568c10332ea63cc26e39ccf165f3d384c9e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Jul 2024 08:45:53 +0200
Subject: [PATCH 206/988] capsman-{download-packages,rolling-upgrade}: run
 matching script

It is possible to run old and new CAPsMAN on one system simultaneously
(... since RouterOS 7.13?). Thus it may make sense to have both variants
of these scripts installed, and we have to make sure to run the correct
one.
---
 capsman-download-packages.capsman.rsc  | 2 +-
 capsman-download-packages.template.rsc | 2 +-
 capsman-download-packages.wifi.rsc     | 2 +-
 capsman-rolling-upgrade.capsman.rsc    | 2 +-
 capsman-rolling-upgrade.template.rsc   | 2 +-
 capsman-rolling-upgrade.wifi.rsc       | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index f5695f4b..84d36f7b 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -73,7 +73,7 @@
   }
 
   :if ($Updated = true) do={
-    :local Script ([ /system/script/find where source~"\n# provides: capsman-rolling-upgrade\n" ]->0);
+    :local Script ([ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.capsman\n" ]->0);
     :if ([ :len $Script ] > 0) do={
       /system/script/run $Script;
     } else={
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 762dbb65..deb15a7e 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -83,7 +83,7 @@
   }
 
   :if ($Updated = true) do={
-    :local Script ([ /system/script/find where source~"\n# provides: capsman-rolling-upgrade\n" ]->0);
+    :local Script ([ /system/script/find where source~"\n# provides: capsman-rolling-upgrade%TEMPL%\n" ]->0);
     :if ([ :len $Script ] > 0) do={
       /system/script/run $Script;
     } else={
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 79aa9a7a..6147d21d 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -75,7 +75,7 @@
   }
 
   :if ($Updated = true) do={
-    :local Script ([ /system/script/find where source~"\n# provides: capsman-rolling-upgrade\n" ]->0);
+    :local Script ([ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.wifi\n" ]->0);
     :if ([ :len $Script ] > 0) do={
       /system/script/run $Script;
     } else={
diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index 2c9ae3de..e9ca5ccd 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# provides: capsman-rolling-upgrade
+# provides: capsman-rolling-upgrade.capsman
 # requires RouterOS, version=7.13
 #
 # upgrade CAPs one after another
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index 2098bc0f..a28d7f77 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# provides: capsman-rolling-upgrade
+# provides: capsman-rolling-upgrade%TEMPL%
 # requires RouterOS, version=7.13
 #
 # upgrade CAPs one after another
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 36b8c0f2..22f88181 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# provides: capsman-rolling-upgrade
+# provides: capsman-rolling-upgrade.wifi
 # requires RouterOS, version=7.13
 #
 # upgrade CAPs one after another

From 3fd1896ad622f8097cc14af8f37114f9fc47f5b7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Jul 2024 08:55:26 +0200
Subject: [PATCH 207/988] capsman-download-packages: support running several
 scripts...

... as it is possible to have more than just one providing
the functionality.
---
 capsman-download-packages.capsman.rsc  | 8 +++++---
 capsman-download-packages.template.rsc | 8 +++++---
 capsman-download-packages.wifi.rsc     | 8 +++++---
 3 files changed, 15 insertions(+), 9 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 84d36f7b..4f9ab9d5 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -73,9 +73,11 @@
   }
 
   :if ($Updated = true) do={
-    :local Script ([ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.capsman\n" ]->0);
-    :if ([ :len $Script ] > 0) do={
-      /system/script/run $Script;
+    :local Scripts [ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.capsman\n" ];
+    :if ([ :len $Scripts ] > 0) do={
+      :foreach Script in=$Scripts do={
+        /system/script/run $Script;
+      }
     } else={
       /caps-man/remote-cap/upgrade [ find where version!=$InstalledVersion ];
     }
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index deb15a7e..c0e815bb 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -83,9 +83,11 @@
   }
 
   :if ($Updated = true) do={
-    :local Script ([ /system/script/find where source~"\n# provides: capsman-rolling-upgrade%TEMPL%\n" ]->0);
-    :if ([ :len $Script ] > 0) do={
-      /system/script/run $Script;
+    :local Scripts [ /system/script/find where source~"\n# provides: capsman-rolling-upgrade%TEMPL%\n" ];
+    :if ([ :len $Scripts ] > 0) do={
+      :foreach Script in=$Scripts do={
+        /system/script/run $Script;
+      }
     } else={
       /caps-man/remote-cap/upgrade [ find where version!=$InstalledVersion ];
       /interface/wifi/capsman/remote-cap/upgrade [ find where version!=$InstalledVersion ];
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 6147d21d..64ac7cdc 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -75,9 +75,11 @@
   }
 
   :if ($Updated = true) do={
-    :local Script ([ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.wifi\n" ]->0);
-    :if ([ :len $Script ] > 0) do={
-      /system/script/run $Script;
+    :local Scripts [ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.wifi\n" ];
+    :if ([ :len $Scripts ] > 0) do={
+      :foreach Script in=$Scripts do={
+        /system/script/run $Script;
+      }
     } else={
       /interface/wifi/capsman/remote-cap/upgrade [ find where version!=$InstalledVersion ];
     }

From f09fa83105ea40876e7103a118b3d6d57098cf0c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 16 Jul 2024 13:49:02 +0200
Subject: [PATCH 208/988] doc/mod/ssh-keys-import: drop hint on older RouterOS

---
 doc/mod/ssh-keys-import.md | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/doc/mod/ssh-keys-import.md b/doc/mod/ssh-keys-import.md
index db8e3229..88524aba 100644
--- a/doc/mod/ssh-keys-import.md
+++ b/doc/mod/ssh-keys-import.md
@@ -34,12 +34,8 @@ Usage and invocation
 Call the function `$SSHKeysImport` with key and user as parameter to
 import that key:
 
-    $SSHKeysImport "ssh-rsa AAAAB3Nza...QYZk8= user" admin;
-
-Starting with RouterOS *7.12beta1* support for keys of type `ed25519` has
-been added:
-
     $SSHKeysImport "ssh-ed25519 AAAAC3Nza...ZVugJT user" admin;
+    $SSHKeysImport "ssh-rsa AAAAB3Nza...QYZk8= user" admin;
 
 The third part of the key (`user` in this example) is inherited as
 `key-owner` in RouterOS. Also the `MD5` fingerprint is recorded, this helps

From 0101b56bff0cfad4043c4e86aa7e68325530eca3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Jul 2024 23:10:42 +0200
Subject: [PATCH 209/988] README: use :tocrlf to convert global-config-overlay

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 6b3cd058..4fd0e3e7 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@ RouterOS Scripts
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
@@ -155,7 +155,7 @@ This last step is required when ever you make changes to your configuration.
 > ℹ️ **Info**: It is recommended to edit the configuration using the command
 > line interface. If using Winbox on Windows OS, the line endings may be
 > missing. To fix this run:
-> `/system/script/set source=[ $Unix2Dos [ get global-config-overlay source ] ] global-config-overlay;`
+> `/system/script/set source=[ :tocrlf [ get global-config-overlay source ] ] global-config-overlay;`
 
 Updating scripts
 ----------------

From 2d42fed621f5bb79a187774afe46c04e06b9c71b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 16 Jul 2024 12:23:02 +0200
Subject: [PATCH 210/988] global-functions: $ScriptInstallUpdate: forcibly
 convert to LF...

... to make sure we do not have unintended CRLF line breaks.
---
 global-functions.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 44b3abeb..2c7c87ca 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # global functions
 # https://git.eworm.de/cgit/routeros-scripts/about/
@@ -1060,7 +1060,7 @@
         :local Result [ /tool/fetch check-certificate=yes-without-crl \
           http-header-field=({ [ $FetchUserAgentStr $0 ] }) $Url output=user as-value ];
         :if ($Result->"status" = "finished") do={
-          :set SourceNew ($Result->"data");
+          :set SourceNew [ :tolf ($Result->"data") ];
         }
       } on-error={
         :if ($ScriptVal->"source" = "#!rsc by RouterOS\n") do={

From 68f61ae6221afeb279ea3823e42cb8da4656a2a6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 16 Jul 2024 12:27:08 +0200
Subject: [PATCH 211/988] global-functions: $ScriptInstallUpdate: allow CRLF on
 device

---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 2c7c87ca..327443ab 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1074,7 +1074,8 @@
     }
 
     :if ([ :len $SourceNew ] > 0) do={
-      :if ($SourceNew != $ScriptVal->"source") do={
+      :local SourceCRLF [ :tocrlf $SourceNew ];
+      :if ($SourceNew != $ScriptVal->"source" && $SourceCRLF != $ScriptVal->"source") do={
         :if ([ :pick $SourceNew 0 18 ] = "#!rsc by RouterOS\n") do={
           :local Required ([ $ParseKeyValueStore [ $Grep $SourceNew ("\23 requires RouterOS, ") ] ]->"version");
           :if ([ $RequiredRouterOS $0 [ $EitherOr $Required "0.0" ] false ] = true) do={

From 7cf0c5b2056bb7522f6174bd76d4b0ea19d4c647 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 16 Jul 2024 12:38:18 +0200
Subject: [PATCH 212/988] capsman-download-packages: support scripts with CRLF
 line breaks

---
 capsman-download-packages.capsman.rsc  | 2 +-
 capsman-download-packages.template.rsc | 2 +-
 capsman-download-packages.wifi.rsc     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 4f9ab9d5..1247d9ae 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -73,7 +73,7 @@
   }
 
   :if ($Updated = true) do={
-    :local Scripts [ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.capsman\n" ];
+    :local Scripts [ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.capsman\r?\n" ];
     :if ([ :len $Scripts ] > 0) do={
       :foreach Script in=$Scripts do={
         /system/script/run $Script;
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index c0e815bb..8418841c 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -83,7 +83,7 @@
   }
 
   :if ($Updated = true) do={
-    :local Scripts [ /system/script/find where source~"\n# provides: capsman-rolling-upgrade%TEMPL%\n" ];
+    :local Scripts [ /system/script/find where source~"\n# provides: capsman-rolling-upgrade%TEMPL%\r?\n" ];
     :if ([ :len $Scripts ] > 0) do={
       :foreach Script in=$Scripts do={
         /system/script/run $Script;
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 64ac7cdc..c5a69992 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -75,7 +75,7 @@
   }
 
   :if ($Updated = true) do={
-    :local Scripts [ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.wifi\n" ];
+    :local Scripts [ /system/script/find where source~"\n# provides: capsman-rolling-upgrade.wifi\r?\n" ];
     :if ([ :len $Scripts ] > 0) do={
       :foreach Script in=$Scripts do={
         /system/script/run $Script;

From ee928605df642ab9f917dd1e65f85f7cb09e8192 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 16 Jul 2024 12:41:17 +0200
Subject: [PATCH 213/988] news-and-changes: support scripts with CRLF line
 breaks

---
 news-and-changes.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 8ddc3d60..9ab811d6 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -61,7 +61,7 @@
 # Migration steps to be applied on script updates
 :global GlobalConfigMigration {
   97=":local Rec [ /ip/dns/static/find where comment~\"^managed by dhcp-to-dns for \" ]; :if ([ :len \$Rec ] > 0) do={ /ip/dns/static/remove \$Rec; /system/script/run dhcp-to-dns; }";
-  100=":global ScriptInstallUpdate; :if ([ :len [ /system/script/find where name=\"ssh-keys-import\" source~\"^#!rsc by RouterOS\\n\" ] ] > 0) do={ /system/script/set name=\"mod/ssh-keys-import\" ssh-keys-import; \$ScriptInstallUpdate; }";
+  100=":global ScriptInstallUpdate; :if ([ :len [ /system/script/find where name=\"ssh-keys-import\" source~\"^#!rsc by RouterOS\\r?\\n\" ] ] > 0) do={ /system/script/set name=\"mod/ssh-keys-import\" ssh-keys-import; \$ScriptInstallUpdate; }";
   104=":global CharacterReplace; :global ScriptInstallUpdate; :foreach Script in={ \"capsman-download-packages\"; \"capsman-rolling-upgrade\"; \"hotspot-to-wpa\"; \"hotspot-to-wpa-cleanup\" } do={ /system/script/set name=(\$Script . \".capsman\") [ find where name=\$Script ]; :foreach Scheduler in=[ /system/scheduler/find where on-event~(\$Script . \"([^-.]|\\\$)\") ] do={ /system/scheduler/set \$Scheduler on-event=[ \$CharacterReplace [ get \$Scheduler on-event ] \$Script (\$Script . \".capsman\") ]; }; }; /ip/hotspot/user/profile/set on-login=\"hotspot-to-wpa.capsman\" [ find where on-login=\"hotspot-to-wpa\" ]; \$ScriptInstallUpdate;";
   111=":local Rec [ /ip/dns/static/find where comment~\"^managed by dhcp-to-dns for \" ]; :if ([ :len \$Rec ] > 0) do={ /ip/dns/static/remove \$Rec; /system/script/run dhcp-to-dns; }";
 };

From a26f78329a1e941fcab969611ffbb83af4f2ea01 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 16 Jul 2024 12:42:24 +0200
Subject: [PATCH 214/988] ppp-on-up: support scripts with CRLF line breaks

---
 ppp-on-up.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index 4ed92c5f..6484ecb0 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -28,7 +28,7 @@
 
   /ipv6/dhcp-client/release [ find where interface=$IntName !disabled ];
 
-  :foreach Script in=[ /system/script/find where source~("\n# provides: ppp-on-up\n") ] do={
+  :foreach Script in=[ /system/script/find where source~("\n# provides: ppp-on-up\r?\n") ] do={
     :local ScriptName [ /system/script/get $Script name ];
     :do {
       $LogPrint debug $ScriptName ("Running script: " . $ScriptName);

From f2ca62aed0ff062b6e2dec13f8bb20e828bfdeb2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 16 Jul 2024 12:33:47 +0200
Subject: [PATCH 215/988] global-functions: $ScriptInstallUpdate: support
 storing with CRLF

Adding this in `global-config-overlay` make the scripts being stored
with CRLF line breaks:

    :global ScriptUpdatesCRLF true;

Handle with care, I do not recommend it. Thus it's just a hidden
setting.
---
 global-functions.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 327443ab..b824d62f 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1008,6 +1008,7 @@
   :global IDonate;
   :global NoNewsAndChangesNotification;
   :global ScriptUpdatesBaseUrl;
+  :global ScriptUpdatesCRLF;
   :global ScriptUpdatesUrlSuffix;
 
   :global CertificateAvailable;
@@ -1081,7 +1082,8 @@
           :if ([ $RequiredRouterOS $0 [ $EitherOr $Required "0.0" ] false ] = true) do={
             :if ([ $ValidateSyntax $SourceNew ] = true) do={
               $LogPrint info $0 ("Updating script: " . $ScriptVal->"name");
-              /system/script/set owner=($ScriptVal->"name") source=$SourceNew $Script;
+              /system/script/set owner=($ScriptVal->"name") \
+                  source=[ $IfThenElse ($ScriptUpdatesCRLF = true) $SourceCRLF $SourceNew ] $Script;
               :if ($ScriptVal->"name" = "global-config") do={
                 :set ReloadGlobalConfig true;
               }

From 8074305b9250d98e182f5cb968de2c8bd438f7f3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Jul 2024 23:09:32 +0200
Subject: [PATCH 216/988] global-functions: $Dos2Unix: use :tolf

---
 global-functions.rsc | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index b824d62f..312936b9 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -313,11 +313,7 @@
 
 # convert line endings, DOS -> UNIX
 :set Dos2Unix do={
-  :local Input [ :tostr $1 ];
-
-  :global CharacterReplace;
-
-  :return [ $CharacterReplace $Input ("\r\n") ("\n") ];
+  :return [ :tolf [ :tostr $1 ] ];
 }
 
 # download package from upgrade server

From 8f75d542f3aa7cb3c5726412daa0ab41c6880489 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Jul 2024 23:06:57 +0200
Subject: [PATCH 217/988] global-functions: $PrettyPrint: use :tocrlf

---
 global-functions.rsc | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 312936b9..950ccd63 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -909,11 +909,7 @@
 
 # print lines with trailing carriage return
 :set PrettyPrint do={
-  :local Input [ :tostr $1 ];
-
-  :global Unix2Dos;
-
-  :put [ $Unix2Dos $Input ];
+  :put [ :tocrlf [ :tostr $1 ] ];
 }
 
 # strip protocol from from url string

From 2fd0d27447b8ce6620ec3f6d68c9d5ca62bb9f02 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Jul 2024 23:08:42 +0200
Subject: [PATCH 218/988] global-functions: $Unix2Dos: use :tocrlf

---
 global-functions.rsc | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 950ccd63..54dcb68f 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1433,12 +1433,7 @@
 
 # convert line endings, UNIX -> DOS
 :set Unix2Dos do={
-  :local Input [ :tostr $1 ];
-
-  :global CharacterReplace;
-
-  :return [ $CharacterReplace [ $CharacterReplace $Input \
-    ("\n") ("\r\n") ] ("\r\r\n") ("\r\n") ];
+  :return [ :tocrlf [ :tostr $1 ] ];
 }
 
 # url encoding

From 2b758b83fd47ca765dd8c5ed15ff3d001d60a6fc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Jul 2024 23:12:50 +0200
Subject: [PATCH 219/988] mod/inspectvar: use :tocrlf

---
 doc/mod/inspectvar.md | 2 +-
 mod/inspectvar.rsc    | 5 ++---
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/doc/mod/inspectvar.md b/doc/mod/inspectvar.md
index d4e59b3d..4e2f4c1d 100644
--- a/doc/mod/inspectvar.md
+++ b/doc/mod/inspectvar.md
@@ -4,7 +4,7 @@ Inspect variables
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index 5adca0a0..73205b25 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # inspect variables
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/inspectvar.md
@@ -14,9 +14,8 @@
 # inspect variable and print on terminal
 :set InspectVar do={
   :global InspectVarReturn;
-  :global PrettyPrint;
 
-  $PrettyPrint [ $InspectVarReturn $1 ];
+  :put [ :tocrlf [ $InspectVarReturn $1 ] ];
 }
 
 # inspect variable and return formatted string

From 075a9bd6c43e08efee73eb6e1ec5b0ea0391fef2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 11 Jul 2024 23:13:50 +0200
Subject: [PATCH 220/988] mod/ipcalc: use :tocrlf

---
 doc/mod/ipcalc.md | 2 +-
 mod/ipcalc.rsc    | 7 +++----
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/doc/mod/ipcalc.md b/doc/mod/ipcalc.md
index cb655bcd..9f394293 100644
--- a/doc/mod/ipcalc.md
+++ b/doc/mod/ipcalc.md
@@ -4,7 +4,7 @@ IP address calculation
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index 128ca54c..003bdc36 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # ip address calculation
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/ipcalc.md
@@ -17,17 +17,16 @@
 
   :global FormatLine;
   :global IPCalcReturn;
-  :global PrettyPrint;
 
   :local Values [ $IPCalcReturn $1 ];
 
-  $PrettyPrint ( \
+  :put [ :tocrlf ( \
     [ $FormatLine "Address" ($Values->"address") ] . "\n" . \
     [ $FormatLine "Netmask" ($Values->"netmask") ] . "\n" . \
     [ $FormatLine "Network" ($Values->"network") ] . "\n" . \
     [ $FormatLine "HostMin" ($Values->"hostmin") ] . "\n" . \
     [ $FormatLine "HostMax" ($Values->"hostmax") ] . "\n" . \
-    [ $FormatLine "Broadcast" ($Values->"broadcast") ]);
+    [ $FormatLine "Broadcast" ($Values->"broadcast") ]) ];
 }
 
 # calculate and return netmask, network, min host, max host and broadcast

From 6fbafe76ba27e35d1f3067430ba78cedfa85eb19 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 16 Jul 2024 13:45:16 +0200
Subject: [PATCH 221/988] bump RouterOS requirement for all scripts and
 modules...

... now that global-functions requires RouterOS 7.14 anyway.
---
 BRANCHES.md                            | 2 +-
 CONTRIBUTIONS.md                       | 2 +-
 INITIAL-COMMANDS.md                    | 2 +-
 accesslist-duplicates.capsman.rsc      | 2 +-
 accesslist-duplicates.local.rsc        | 2 +-
 accesslist-duplicates.template.rsc     | 2 +-
 accesslist-duplicates.wifi.rsc         | 2 +-
 backup-cloud.rsc                       | 2 +-
 backup-email.rsc                       | 2 +-
 backup-partition.rsc                   | 2 +-
 backup-upload.rsc                      | 2 +-
 capsman-download-packages.capsman.rsc  | 2 +-
 capsman-download-packages.template.rsc | 2 +-
 capsman-download-packages.wifi.rsc     | 2 +-
 capsman-rolling-upgrade.capsman.rsc    | 2 +-
 capsman-rolling-upgrade.template.rsc   | 2 +-
 capsman-rolling-upgrade.wifi.rsc       | 2 +-
 certificate-renew-issued.rsc           | 2 +-
 check-certificates.rsc                 | 2 +-
 check-health.rsc                       | 2 +-
 check-lte-firmware-upgrade.rsc         | 2 +-
 check-routeros-update.rsc              | 2 +-
 collect-wireless-mac.capsman.rsc       | 2 +-
 collect-wireless-mac.local.rsc         | 2 +-
 collect-wireless-mac.template.rsc      | 2 +-
 collect-wireless-mac.wifi.rsc          | 2 +-
 daily-psk.capsman.rsc                  | 2 +-
 daily-psk.local.rsc                    | 2 +-
 daily-psk.template.rsc                 | 2 +-
 daily-psk.wifi.rsc                     | 2 +-
 dhcp-lease-comment.capsman.rsc         | 2 +-
 dhcp-lease-comment.local.rsc           | 2 +-
 dhcp-lease-comment.template.rsc        | 2 +-
 dhcp-lease-comment.wifi.rsc            | 2 +-
 dhcp-to-dns.rsc                        | 2 +-
 doc/accesslist-duplicates.md           | 2 +-
 doc/backup-cloud.md                    | 2 +-
 doc/backup-email.md                    | 2 +-
 doc/backup-partition.md                | 2 +-
 doc/backup-upload.md                   | 2 +-
 doc/capsman-download-packages.md       | 2 +-
 doc/capsman-rolling-upgrade.md         | 2 +-
 doc/certificate-renew-issued.md        | 2 +-
 doc/check-certificates.md              | 2 +-
 doc/check-health.md                    | 2 +-
 doc/check-lte-firmware-upgrade.md      | 2 +-
 doc/check-routeros-update.md           | 2 +-
 doc/collect-wireless-mac.md            | 2 +-
 doc/daily-psk.md                       | 2 +-
 doc/dhcp-lease-comment.md              | 2 +-
 doc/dhcp-to-dns.md                     | 2 +-
 doc/firmware-upgrade-reboot.md         | 2 +-
 doc/fw-addr-lists.md                   | 2 +-
 doc/global-wait.md                     | 2 +-
 doc/gps-track.md                       | 2 +-
 doc/hotspot-to-wpa.md                  | 2 +-
 doc/ip-addr-bridge.md                  | 2 +-
 doc/ipsec-to-dns.md                    | 2 +-
 doc/ipv6-update.md                     | 2 +-
 doc/lease-script.md                    | 2 +-
 doc/leds-mode.md                       | 2 +-
 doc/log-forward.md                     | 2 +-
 doc/mod/bridge-port-to.md              | 2 +-
 doc/mod/bridge-port-vlan.md            | 2 +-
 doc/mod/notification-email.md          | 2 +-
 doc/mod/notification-matrix.md         | 2 +-
 doc/mod/notification-ntfy.md           | 2 +-
 doc/mod/notification-telegram.md       | 2 +-
 doc/mod/scriptrunonce.md               | 2 +-
 doc/mod/ssh-keys-import.md             | 2 +-
 doc/mode-button.md                     | 2 +-
 doc/netwatch-dns.md                    | 2 +-
 doc/netwatch-notify.md                 | 2 +-
 doc/ospf-to-leds.md                    | 2 +-
 doc/packages-update.md                 | 2 +-
 doc/ppp-on-up.md                       | 2 +-
 doc/sms-action.md                      | 2 +-
 doc/sms-forward.md                     | 2 +-
 doc/super-mario-theme.md               | 2 +-
 doc/telegram-chat.md                   | 2 +-
 doc/unattended-lte-firmware-upgrade.md | 2 +-
 doc/update-gre-address.md              | 2 +-
 doc/update-tunnelbroker.md             | 2 +-
 firmware-upgrade-reboot.rsc            | 2 +-
 fw-addr-lists.rsc                      | 2 +-
 global-wait.rsc                        | 2 +-
 gps-track.rsc                          | 2 +-
 hotspot-to-wpa-cleanup.capsman.rsc     | 2 +-
 hotspot-to-wpa-cleanup.template.rsc    | 2 +-
 hotspot-to-wpa-cleanup.wifi.rsc        | 2 +-
 hotspot-to-wpa.capsman.rsc             | 2 +-
 hotspot-to-wpa.template.rsc            | 2 +-
 hotspot-to-wpa.wifi.rsc                | 2 +-
 ipsec-to-dns.rsc                       | 2 +-
 ipv6-update.rsc                        | 2 +-
 lease-script.rsc                       | 2 +-
 log-forward.rsc                        | 2 +-
 mod/bridge-port-to.rsc                 | 2 +-
 mod/bridge-port-vlan.rsc               | 2 +-
 mod/notification-email.rsc             | 2 +-
 mod/notification-matrix.rsc            | 2 +-
 mod/notification-ntfy.rsc              | 2 +-
 mod/notification-telegram.rsc          | 2 +-
 mod/scriptrunonce.rsc                  | 2 +-
 mod/ssh-keys-import.rsc                | 2 +-
 mode-button.rsc                        | 2 +-
 netwatch-dns.rsc                       | 2 +-
 netwatch-notify.rsc                    | 2 +-
 ospf-to-leds.rsc                       | 2 +-
 packages-update.rsc                    | 2 +-
 ppp-on-up.rsc                          | 2 +-
 sms-action.rsc                         | 2 +-
 sms-forward.rsc                        | 2 +-
 telegram-chat.rsc                      | 2 +-
 update-gre-address.rsc                 | 2 +-
 update-tunnelbroker.rsc                | 2 +-
 116 files changed, 116 insertions(+), 116 deletions(-)

diff --git a/BRANCHES.md b/BRANCHES.md
index f1062bb3..2bacf8e8 100644
--- a/BRANCHES.md
+++ b/BRANCHES.md
@@ -4,7 +4,7 @@ Installing from branches
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index e9bf7d18..0b192fc2 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -4,7 +4,7 @@ Past Contributions
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index b3eff35d..2be51c54 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -4,7 +4,7 @@ Initial commands
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index 781ae78d..d6e2928c 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # print duplicate antries in wireless access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index b79a724b..e90842db 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # print duplicate antries in wireless access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index b8067c87..d2753404 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # print duplicate antries in wireless access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index c05e02cc..f4dae4b5 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # print duplicate antries in wireless access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 697ee956..f70752e4 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=40
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # upload backup to MikroTik cloud
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-cloud.md
diff --git a/backup-email.rsc b/backup-email.rsc
index c32eb274..e507c6e1 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=20
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # create and email backup and config file
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-email.md
diff --git a/backup-partition.rsc b/backup-partition.rsc
index 34cdc8f8..23dd7ef8 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=70
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # save configuration to fallback partition
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-partition.md
diff --git a/backup-upload.rsc b/backup-upload.rsc
index 1dc98d52..8d96eba5 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=50
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # create and upload backup and config file
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-upload.md
diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 1247d9ae..f2ff0249 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-download-packages.md
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 8418841c..ad9b926a 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-download-packages.md
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index c5a69992..056136f2 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-download-packages.md
diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index e9ca5ccd..f287ea3c 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -5,7 +5,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: capsman-rolling-upgrade.capsman
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # upgrade CAPs one after another
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-rolling-upgrade.md
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index a28d7f77..3d987475 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -5,7 +5,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: capsman-rolling-upgrade%TEMPL%
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # upgrade CAPs one after another
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-rolling-upgrade.md
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 22f88181..369dccc0 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -5,7 +5,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: capsman-rolling-upgrade.wifi
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # upgrade CAPs one after another
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-rolling-upgrade.md
diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index 7815443b..f2c1dfec 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # renew locally issued certificates
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/certificate-renew-issued.md
diff --git a/check-certificates.rsc b/check-certificates.rsc
index c9622b74..7aaac84f 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # check for certificate validity
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/check-certificates.md
diff --git a/check-health.rsc b/check-health.rsc
index a769fa89..540336dc 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # check for RouterOS health state
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/check-health.md
diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index 5ea094ec..2e52c2a7 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # check for LTE firmware upgrade, send notification
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/check-lte-firmware-upgrade.md
diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 6dca99af..d45432a5 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # check for RouterOS update, send notification and/or install
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/check-routeros-update.md
diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index 74c07543..9efa9ef5 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # collect wireless mac adresses in access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index 8a60fea3..27c9d1cb 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # collect wireless mac adresses in access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index c5cf74a5..d41c17d7 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # collect wireless mac adresses in access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index 12c33611..00753203 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # collect wireless mac adresses in access list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index cd5b6b05..6dafc08f 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index fbdb784e..4709f3a0 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 35fa82c7..6b7f5fd1 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index c1f71336..90c6ac5f 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index b7f3589f..c435ec32 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update dhcp-server lease comment with infos from access-list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index e35bbe78..27e6605d 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update dhcp-server lease comment with infos from access-list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index d4323ad0..c562ca29 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update dhcp-server lease comment with infos from access-list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index f67ce6e3..ba617d71 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update dhcp-server lease comment with infos from access-list
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index a3d41c99..0ab5e2a3 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=20
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # check DHCP leases and add/remove/update DNS entries
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-to-dns.md
diff --git a/doc/accesslist-duplicates.md b/doc/accesslist-duplicates.md
index a1f91980..a6302f5a 100644
--- a/doc/accesslist-duplicates.md
+++ b/doc/accesslist-duplicates.md
@@ -4,7 +4,7 @@ Find and remove access list duplicates
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-cloud.md b/doc/backup-cloud.md
index 1f9e1238..d6587609 100644
--- a/doc/backup-cloud.md
+++ b/doc/backup-cloud.md
@@ -4,7 +4,7 @@ Upload backup to Mikrotik cloud
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-email.md b/doc/backup-email.md
index 3b1dbb26..aedae4d8 100644
--- a/doc/backup-email.md
+++ b/doc/backup-email.md
@@ -4,7 +4,7 @@ Send backup via e-mail
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-partition.md b/doc/backup-partition.md
index 1cef2c9b..9f62967b 100644
--- a/doc/backup-partition.md
+++ b/doc/backup-partition.md
@@ -4,7 +4,7 @@ Save configuration to fallback partition
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-upload.md b/doc/backup-upload.md
index c44217c5..f2858b29 100644
--- a/doc/backup-upload.md
+++ b/doc/backup-upload.md
@@ -4,7 +4,7 @@ Upload backup to server
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/capsman-download-packages.md b/doc/capsman-download-packages.md
index c68900ea..d7199347 100644
--- a/doc/capsman-download-packages.md
+++ b/doc/capsman-download-packages.md
@@ -4,7 +4,7 @@ Download packages for CAP upgrade from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/capsman-rolling-upgrade.md b/doc/capsman-rolling-upgrade.md
index 27d855fe..f366d403 100644
--- a/doc/capsman-rolling-upgrade.md
+++ b/doc/capsman-rolling-upgrade.md
@@ -4,7 +4,7 @@ Run rolling CAP upgrades from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/certificate-renew-issued.md b/doc/certificate-renew-issued.md
index 91a1914c..096e07b9 100644
--- a/doc/certificate-renew-issued.md
+++ b/doc/certificate-renew-issued.md
@@ -4,7 +4,7 @@ Renew locally issued certificates
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-certificates.md b/doc/check-certificates.md
index 636f719c..4188815b 100644
--- a/doc/check-certificates.md
+++ b/doc/check-certificates.md
@@ -4,7 +4,7 @@ Renew certificates and notify on expiration
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-health.md b/doc/check-health.md
index f94a0bf5..578ea437 100644
--- a/doc/check-health.md
+++ b/doc/check-health.md
@@ -4,7 +4,7 @@ Notify about health state
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-lte-firmware-upgrade.md b/doc/check-lte-firmware-upgrade.md
index 59a62c72..66b2cf57 100644
--- a/doc/check-lte-firmware-upgrade.md
+++ b/doc/check-lte-firmware-upgrade.md
@@ -4,7 +4,7 @@ Notify on LTE firmware upgrade
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index f9d485c0..2e9b8aa2 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -4,7 +4,7 @@ Notify on RouterOS update
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/collect-wireless-mac.md b/doc/collect-wireless-mac.md
index 57032d83..84c111d6 100644
--- a/doc/collect-wireless-mac.md
+++ b/doc/collect-wireless-mac.md
@@ -4,7 +4,7 @@ Collect MAC addresses in wireless access list
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/daily-psk.md b/doc/daily-psk.md
index 3894d521..2a15af58 100644
--- a/doc/daily-psk.md
+++ b/doc/daily-psk.md
@@ -4,7 +4,7 @@ Use wireless network with daily psk
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/dhcp-lease-comment.md b/doc/dhcp-lease-comment.md
index f95b1245..6a4c930a 100644
--- a/doc/dhcp-lease-comment.md
+++ b/doc/dhcp-lease-comment.md
@@ -4,7 +4,7 @@ Comment DHCP leases with info from access list
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/dhcp-to-dns.md b/doc/dhcp-to-dns.md
index 13d5ef3a..572011fb 100644
--- a/doc/dhcp-to-dns.md
+++ b/doc/dhcp-to-dns.md
@@ -4,7 +4,7 @@ Create DNS records for DHCP leases
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/firmware-upgrade-reboot.md b/doc/firmware-upgrade-reboot.md
index bac17a7a..7ab6ac57 100644
--- a/doc/firmware-upgrade-reboot.md
+++ b/doc/firmware-upgrade-reboot.md
@@ -4,7 +4,7 @@ Automatically upgrade firmware and reboot
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index e9a8ff74..2008c7ea 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -4,7 +4,7 @@ Download, import and update firewall address-lists
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/global-wait.md b/doc/global-wait.md
index 4b42717a..6787d209 100644
--- a/doc/global-wait.md
+++ b/doc/global-wait.md
@@ -4,7 +4,7 @@ Wait for global functions and modules
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/gps-track.md b/doc/gps-track.md
index 7006fb39..9685899f 100644
--- a/doc/gps-track.md
+++ b/doc/gps-track.md
@@ -4,7 +4,7 @@ Send GPS position to server
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/hotspot-to-wpa.md b/doc/hotspot-to-wpa.md
index 275fe4d0..07d07dc8 100644
--- a/doc/hotspot-to-wpa.md
+++ b/doc/hotspot-to-wpa.md
@@ -4,7 +4,7 @@ Use WPA network with hotspot credentials
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ip-addr-bridge.md b/doc/ip-addr-bridge.md
index 941a8ae7..ddbcc0a7 100644
--- a/doc/ip-addr-bridge.md
+++ b/doc/ip-addr-bridge.md
@@ -4,7 +4,7 @@ Manage IP addresses with bridge status
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ipsec-to-dns.md b/doc/ipsec-to-dns.md
index 0a919602..a688e809 100644
--- a/doc/ipsec-to-dns.md
+++ b/doc/ipsec-to-dns.md
@@ -4,7 +4,7 @@ Create DNS records for IPSec peers
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ipv6-update.md b/doc/ipv6-update.md
index 20265fec..88600c55 100644
--- a/doc/ipv6-update.md
+++ b/doc/ipv6-update.md
@@ -4,7 +4,7 @@ Update configuration on IPv6 prefix change
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/lease-script.md b/doc/lease-script.md
index 4d2f3bc9..1b59ff7a 100644
--- a/doc/lease-script.md
+++ b/doc/lease-script.md
@@ -4,7 +4,7 @@ Run other scripts on DHCP lease
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/leds-mode.md b/doc/leds-mode.md
index 90ea4180..c01472e2 100644
--- a/doc/leds-mode.md
+++ b/doc/leds-mode.md
@@ -4,7 +4,7 @@ Manage LEDs dark mode
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/log-forward.md b/doc/log-forward.md
index 44409dcf..55b15405 100644
--- a/doc/log-forward.md
+++ b/doc/log-forward.md
@@ -4,7 +4,7 @@ Forward log messages via notification
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/bridge-port-to.md b/doc/mod/bridge-port-to.md
index 5c8bebce..2ed9dc7d 100644
--- a/doc/mod/bridge-port-to.md
+++ b/doc/mod/bridge-port-to.md
@@ -4,7 +4,7 @@ Manage ports in bridge
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/bridge-port-vlan.md b/doc/mod/bridge-port-vlan.md
index d23d5b59..ded26039 100644
--- a/doc/mod/bridge-port-vlan.md
+++ b/doc/mod/bridge-port-vlan.md
@@ -4,7 +4,7 @@ Manage VLANs on bridge ports
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-email.md b/doc/mod/notification-email.md
index 2138e319..0bef4553 100644
--- a/doc/mod/notification-email.md
+++ b/doc/mod/notification-email.md
@@ -4,7 +4,7 @@ Send notifications via e-mail
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index 18b66078..c96a7191 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -4,7 +4,7 @@ Send notifications via Matrix
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-ntfy.md b/doc/mod/notification-ntfy.md
index b2330a5b..2a43e3c8 100644
--- a/doc/mod/notification-ntfy.md
+++ b/doc/mod/notification-ntfy.md
@@ -4,7 +4,7 @@ Send notifications via Ntfy
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index 159fda90..f55f936d 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -4,7 +4,7 @@ Send notifications via Telegram
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/scriptrunonce.md b/doc/mod/scriptrunonce.md
index c5fa8915..0127c6d3 100644
--- a/doc/mod/scriptrunonce.md
+++ b/doc/mod/scriptrunonce.md
@@ -4,7 +4,7 @@ Download script and run it once
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/ssh-keys-import.md b/doc/mod/ssh-keys-import.md
index 88524aba..dcfd95b1 100644
--- a/doc/mod/ssh-keys-import.md
+++ b/doc/mod/ssh-keys-import.md
@@ -4,7 +4,7 @@ Import ssh keys for public key authentication
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mode-button.md b/doc/mode-button.md
index 87343521..7feb19fa 100644
--- a/doc/mode-button.md
+++ b/doc/mode-button.md
@@ -4,7 +4,7 @@ Mode button with multiple presses
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 9fe486e6..ff6c29c8 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -4,7 +4,7 @@ Manage DNS and DoH servers from netwatch
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index 2db32bb1..f504ed7c 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -4,7 +4,7 @@ Notify on host up and down
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ospf-to-leds.md b/doc/ospf-to-leds.md
index 121f77bd..23248b5b 100644
--- a/doc/ospf-to-leds.md
+++ b/doc/ospf-to-leds.md
@@ -4,7 +4,7 @@ Visualize OSPF state via LEDs
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/packages-update.md b/doc/packages-update.md
index fae38962..8b0d4a31 100644
--- a/doc/packages-update.md
+++ b/doc/packages-update.md
@@ -4,7 +4,7 @@ Manage system update
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ppp-on-up.md b/doc/ppp-on-up.md
index 21847c76..7902f3bb 100644
--- a/doc/ppp-on-up.md
+++ b/doc/ppp-on-up.md
@@ -4,7 +4,7 @@ Run scripts on ppp connection
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/sms-action.md b/doc/sms-action.md
index b4678af7..5de7f0d7 100644
--- a/doc/sms-action.md
+++ b/doc/sms-action.md
@@ -4,7 +4,7 @@ Act on received SMS
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/sms-forward.md b/doc/sms-forward.md
index 597410bf..8e7417b8 100644
--- a/doc/sms-forward.md
+++ b/doc/sms-forward.md
@@ -4,7 +4,7 @@ Forward received SMS
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/super-mario-theme.md b/doc/super-mario-theme.md
index e4bae2e6..2ffb25b3 100644
--- a/doc/super-mario-theme.md
+++ b/doc/super-mario-theme.md
@@ -4,7 +4,7 @@ Play Super Mario theme
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/telegram-chat.md b/doc/telegram-chat.md
index eb4acf5a..95f8cf97 100644
--- a/doc/telegram-chat.md
+++ b/doc/telegram-chat.md
@@ -4,7 +4,7 @@ Chat with your router and send commands via Telegram bot
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/unattended-lte-firmware-upgrade.md b/doc/unattended-lte-firmware-upgrade.md
index 66804477..e9a888c3 100644
--- a/doc/unattended-lte-firmware-upgrade.md
+++ b/doc/unattended-lte-firmware-upgrade.md
@@ -4,7 +4,7 @@ Install LTE firmware upgrade
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/update-gre-address.md b/doc/update-gre-address.md
index 80902b96..7e101c4a 100644
--- a/doc/update-gre-address.md
+++ b/doc/update-gre-address.md
@@ -4,7 +4,7 @@ Update GRE configuration with dynamic addresses
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/update-tunnelbroker.md b/doc/update-tunnelbroker.md
index 2539e2f5..126d470b 100644
--- a/doc/update-tunnelbroker.md
+++ b/doc/update-tunnelbroker.md
@@ -4,7 +4,7 @@ Update tunnelbroker configuration
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.13-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index 169a2e09..74847acb 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2022-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # install firmware upgrade, and reboot
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/firmware-upgrade-reboot.md
diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 007282cb..4930e865 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2023-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # download, import and update firewall address-lists
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/fw-addr-lists.md
diff --git a/global-wait.rsc b/global-wait.rsc
index 239f5750..f0631e27 100644
--- a/global-wait.rsc
+++ b/global-wait.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # wait for global-functions to finish
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/global-wait.md
diff --git a/gps-track.rsc b/gps-track.rsc
index e2a4e16e..a2ea9fff 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # track gps data by sending json data to http server
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/gps-track.md
diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 8f55d717..29bd48d4 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # manage and clean up private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 7ac996c0..06dd9f07 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # manage and clean up private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 39c9f25f..7c74d109 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # manage and clean up private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index 113c95d1..b85c5911 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # add private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index 10f0c7e4..44607cc1 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # add private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index dbf50e0c..25933c63 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # add private WPA passphrase after hotspot login
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index 8894eeee..bd74a8f8 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # and add/remove/update DNS entries from IPSec mode-config
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/ipsec-to-dns.md
diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index ec9a03a5..0577bdcb 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update firewall and dns settings on IPv6 prefix change
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/ipv6-update.md
diff --git a/lease-script.rsc b/lease-script.rsc
index a9d4b681..f484414f 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # run scripts on DHCP lease
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/lease-script.md
diff --git a/log-forward.rsc b/log-forward.rsc
index 7abcb4dd..5133e736 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # forward log messages via notification
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/log-forward.md
diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index 000532a5..7dae6797 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # reset bridge ports to default bridge
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/bridge-port-to.md
diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 760e8a68..c9f55ae2 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # manage VLANs on bridge ports
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/bridge-port-vlan.md
diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index df2e81af..3d62ddfb 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # send notifications via e-mail
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-email.md
diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 196633a4..3adc1dfa 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -4,7 +4,7 @@
 #                         Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # send notifications via Matrix
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-matrix.md
diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index cdc10e7c..661f69f0 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # send notifications via Ntfy (ntfy.sh)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-ntfy.md
diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 18904833..671bd1c4 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # send notifications via Telegram
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-telegram.md
diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index c3972a0b..3d5dce9d 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # download script and run it once
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/scriptrunonce.md
diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 6272a939..8cafa954 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # import ssh keys for public key authentication
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/ssh-keys-import.md
diff --git a/mode-button.rsc b/mode-button.rsc
index 4994f6bd..7908a7f1 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # act on multiple mode and reset button presses
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mode-button.md
diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 09365bac..9635be63 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2022-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # monitor and manage dns/doh with netwatch
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/netwatch-dns.md
diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 17682f04..b658eaef 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # monitor netwatch and send notifications
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/netwatch-notify.md
diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index 09328153..b78faa4a 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # visualize ospf instance state via leds
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/ospf-to-leds.md
diff --git a/packages-update.rsc b/packages-update.rsc
index 97039ecb..b08a48d2 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # download packages and reboot for installation
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/packages-update.md
diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index 6484ecb0..337b32da 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # run scripts on ppp up
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/ppp-on-up.md
diff --git a/sms-action.rsc b/sms-action.rsc
index 70bfb284..c8966595 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # run action on received SMS
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/sms-action.md
diff --git a/sms-forward.rsc b/sms-forward.rsc
index 477d11e2..0d493b65 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -4,7 +4,7 @@
 #                         Anatoly Bubenkov <bubenkoff@gmail.com>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # forward SMS to e-mail
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/sms-forward.md
diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 1c274ece..2bdc04de 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2023-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # use Telegram to chat with your Router and send commands
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/telegram-chat.md
diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 76d0c819..6dd829d8 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update gre interface remote address with dynamic address from
 # ipsec remote peer
diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index f9ba202e..67a5d30f 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -5,7 +5,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: ppp-on-up
-# requires RouterOS, version=7.13
+# requires RouterOS, version=7.14
 #
 # update local address of tunnelbroker interface
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/update-tunnelbroker.md

From 8ea780554164ef14e5fddc1ab8692eec455a0d0c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 22 Jul 2024 17:57:22 +0200
Subject: [PATCH 222/988] global-functions: $EitherOr: pass boolean value

Note that literal "true" or "false" (even without quotes) is converted
to string. So you may have to enclose it in parentheses for a boolean
value:

    > :put [ :typeof [ $EitherOr true false ] ];
    str
    > :put [ :typeof [ $EitherOr (true) (false) ] ];
    bool
---
 global-functions.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 54dcb68f..4f37fa59 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -382,6 +382,9 @@
 :set EitherOr do={
   :global IfThenElse;
 
+  :if ([ :typeof $1 ] = "bool") do={
+    :return $1;
+  }
   :if ([ :typeof $1 ] = "num") do={
     :return [ $IfThenElse ($1 != 0) $1 $2 ];
   }

From 511184a4a7bbabd6b7789defb9cc65c22bb50664 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 22 Jul 2024 21:13:02 +0200
Subject: [PATCH 223/988] global-functions: $EitherOr: revert...

... but leave a comment.
---
 global-functions.rsc | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 4f37fa59..41120fd3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -382,15 +382,13 @@
 :set EitherOr do={
   :global IfThenElse;
 
-  :if ([ :typeof $1 ] = "bool") do={
-    :return $1;
-  }
   :if ([ :typeof $1 ] = "num") do={
     :return [ $IfThenElse ($1 != 0) $1 $2 ];
   }
   :if ([ :typeof $1 ] = "time") do={
     :return [ $IfThenElse ($1 > 0s) $1 $2 ];
   }
+  # this works for boolean values, literal ones with parentheses
   :return [ $IfThenElse ([ :len [ :tostr $1 ] ] > 0) $1 $2 ];
 }
 

From 22d93d07081cd23954abcae66aa448794f3dda51 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 10:13:33 +0200
Subject: [PATCH 224/988] README: drop command to remove certificate file...

... as this is done automatically with RouterOS 7.15rc1 and later.

Not bumping the required RouterOS version (badge) here... Worst thing
that can happen is a stale certificate file left on storage.
---
 README.d/03-check-certs.avif | Bin 8932 -> 8047 bytes
 README.md                    |   3 +--
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/README.d/03-check-certs.avif b/README.d/03-check-certs.avif
index 46b7220f1df02c8379e95113aeb13bf91859de0f..4717b3ea9cc9436ab94be0e471263f601fcf47c8 100644
GIT binary patch
delta 3868
zcma)%_dnE+<G^2MgtEyzBQ9if_R5~&jk3pi6OQgUWaouY3E6vP?|l+k#Sxj=Wbfm$
zCDP~pczpkX@8j`&{{DP!X#G@42x6pr2msXL01*HHkpHj&0Gf@&_)th>G8IIZh!dJ@
z0g;0UCMQ62h^%Om=OFbE!KN6Z6$p4g-eGH-5<XFsCGv16L-eIzIqa(SGJU2K^X`ju
zm3!KP`I5t3ZP;<)>|P>?Ds4GQavHbx%Ld%iwW;)QWWt+#+l<^V!ww42Bj)VXOYhKU
zqT=#3kJnPWG)604)d<Gx?cVS`Ig(-;T4SPFt*Bl-)^>bNNjSTtUUWLDw#fjer2af)
zDr7kSsFQV6FiICvOmED}za@8hgPmT|C>ss9m{Adi8#!67Il^FJI`<lO0%6p79p$2N
z#iO_KDR20&uS3sOV;ffQ%Mp9oma}NV(&Tp}Y{z3$vV%D=u_+6|EQ&lg^IZ=6TUykr
zE!-~BOOo;rgSiCy{noM8F?T?)dH%H&do)Hk___~O4Ik){V_mP{twHy^NAg&qYeTF&
z?|*Ad^V8!oy^c0ZGLnbhKoKs*ZQq+KTs{PRGK!Y7f@+_rlXHg@({<15u|V1}c63Pw
zW^B#w`i6bGdw&6qTjc2juj9BS36bzdKHZ@W%Dl48>-b<Zk(EY)E6~@bC86j*_>~(w
zO_g_0-j9a(-(|+%w^~0KIMC~mctnfHCPxag)InZd%u+hL%J<)O*;+7e(c<kr8ge%^
zlQLnknvGOeaP?z^yj<olQ3=RYl14qdIB}I%@>}3L_C>BmiZ42U#q<xw9zT5hQ0>Y6
z7#WF6Kl*Cq1JTy|F{_}rGWh5DjP=}ZdPJbuwI=PVK6C3^SfjShZTJA<%OT4~@;_?D
zJHc}^z2%9Y&?C{Bi;bA}Bo)WRZonB4(;0+Tsyo&xi{6alay9c`aOm4}RBuE7ynp((
zg8vbPxePy9r~K}&9x;ojqnlKw>GH6Hw6o#rjIxSj_;QDDivs8u&Y(0FkZO;FsgGFQ
z<3^F>h%0U6mwFkgm5<~<y)}!vHbJ98c5oBp%ul{j`lDI9N972L&NKOfrlx4NI++n8
z{giEf15cTuJJmbY-!=1?&6CU;B}MM>z)!?(q84*7?}A3_^Nlk_d9y!TFsMlp1`k#J
zN#$k>&d8Mg5<m%@{90c}bSC4HZJt1EgI#wKu5xsn(<g!v&_Epf^b=J%*!L9bmE{uK
zWH~9pl7`s>A?E~BiT)qNP$!gI&U7O-4q4GMd9e9!UKK}fM|LwOdt1x9An~L<dGXMj
z$1Q|gtP0P0cjGvaF2PndMq^6Rl2r-9Yp!wn4}b%CkoD`o<m=w?;_y+2fHLdJgT9W<
zD?@VB6)Q8zRjkinV45>!$dew=gpvBkzLEFY0C`t8qZqn}`MApcH(c|el5v+Ue~$O<
z73amU73*AFlXtNIvD_#L*GMg2vJVE19;@vh(q$f$*pvi_OO3q5;abaaXG06AX$Gm5
zlkaK4N=FrQbI!j&pc)?kg!f3LiE2aEWGN+!T$Ao@9H2?nD!|gcRZH(R&Zb>mgza2&
zZHfQ9`gBq%JBpdzdhYhY$i$Oyhw|MUsa@0o(~~=eKMp=OdH1eV?7qamn{FbU)u`XN
z@qKJPx&M+#R-mAqjN6$ybDQ&223y|NhW+jc;@HFBIAvv_tZM!TC!(FGP#vlupIjZe
zj_diWBxxy|U<$D{Z2LIDH4O>vr(G;b_8f#P6(Az?<Ofb`K0dov;)yJae6GD5Z4slL
zXr)U+Sw)xQe8ba<okULr@LA335k<XT2`Qii1*aO0(y)kn?ese^TG7d9O?DlCIs@b<
z)P+tll$h-0uYKDysXQ}2avKk}Q@m1laiDNlAK<@jZnv}0vq8YggqBUz8X^n+q-nqE
z`CXS$IY_J+0R_A*Fx-fEOgwmdyK7ZsdboFnCTPM?Fm-8<!nTp#B9=H~=IrON2H6|w
zU{9qlK?AOd8!7t^nc1Z8jIMMx4ZzvS7a)_Eqea)+a1E=C(ac8Eq?8GdP$1pBZsJGD
zpHQONMI#ok;ORf7Ocx4Dhia>Cg;`pT(Cz&}Z%K*)CCbLrQ~Yq?6`n0JD`t<%cWc+>
zWD0i+HsbG8>N9F&XqntQ-&<RIQEg=@e#z*~Y6*3kVm|KI--$q4<zAqKK!RUfVfV9@
z=!?(r!1{$^`)8stO5K^R-nEj{@RLwbypn0&#FIhIhb!8JNv7N>Yx;>6&2cBS?P?oC
zYmjTLP~NM)w#`q*j23;om}oV6#Mvmzh1AwjbO-Oxr0e#Ou27g~d(Lx?CUai1#}m>h
z!;l3ku7Sqev}q9n29mK&pjRL?mJTN_zvs<AhUIUP6)LeUeE;}auiAiG9y~u}y~{fN
zhQXNj;K|Lzi%J8?W|`UKY30eUY|D?So2?y4t1q`s=q#ZJ{1FmUw12db-c^esBh#Ep
z4{Dg5ncj9#vxfXSrv5RD+yAo^n#%sm(;{ZkSR`AsR5pcz!{ofyALJ+|tdo6kH(Ns?
z24PnoWF$G20vk~ruL=dORho_0?CiIu4Ul3q$vpedb*KEP<yL42;ioLSk96#)Y76F*
zhcWNf0zH-9M8UV@26-dO1ThyqI{?g|r(~-6(lxv<{Ur%ql{oT_dNn(#U--)$dWjJ|
z&NAunHA8m+^t10@z~6)lk@^<x^lz=n8`)cww=g(~@6*_8iE1~0w);ItVsD;j)LkF)
z#LJgHeQ@l9(^gvqA*w85P8Iz~*8*d=Dxu}Ls4WsSqTn8IC_mz}IP-jEnJl2}%lu|%
zahq~Vh3{+9qNPB06~rQeD*0HvU)k7wD+C$5`lrSFmyg{fD7vXf-0(5Ybmxm4!b)|A
zxr~?iaGU3duboIW0dF0P1c>e$lo5$b-dg08Nd7(@rnnp8`yneONN|VlPt8v!@}s2`
z2e{&6C^wAqn1&=a0b}idr}9^}-t^L_X3HIaPnN`u4oMgfU!s8^3y$J=p;R6?_V`*h
zg=MdJpB0P;Gx;J3@!BbA<|E!Tw%c9yWF^S|y7C6k1!~V;=r0)Q77to4DjeUPdkh4B
zJm-?waLxjz->tg7-puJOobj&R`W6W}Cd0?NBB3u{P^qdw1H!Qkhzj%!z>A{y1K}K9
zyV;?6*m0}98~Tp;IjkoG{;km55VX=YcS;r!2tM;NA_r(Ci>Zx?N>FA!GKYGSztXMK
zF!ux#h83E4YR%FBSD&xTzuv6#b8}*<kY;Wdh0|-g_QoPG6*Dv-J}^q0LkqGM*=PFD
zd=biSui%@0P60f%bjAoN3UK?R>@Ygjp~>7=v8yGb)%e1688rqEd05)~o#(*Wz_kEK
zEEywEK=l8Vde8ib^7lx775RQ-gEg+AUZJ$#a9#OpZ_awxy5YoMV3m8Uy7t-HhlWHp
zyU}g9#J{Tcy+m;Qa@OijrIE}Oi~il5I#!_|ut%A{Hz@s$(-gSU(*8~-I75G=kY%n1
zSn-<UO`ZgTR#w<Xx{gE}=U;qGn=#bzp0I&6Xz&ac3!cnOXyG86I?&szJJl1ZXD$``
z7oHju&C*k%$$jZ!_ah~d>jw-vP+`sLl4bU($us+!*4V`E0i{O@XOk-2C^wj~_Xy!h
z&x14)PI%t64`{u_nCI5~kgnRhO=y1ga|0xL29LL`G10O43*4cx_`ynRB@j#cPx+oq
z?26Y9c_`SZ=qg#)TZ7P`M0u2TCH19d$@25F-iV>GxN%hu#INuQ8YPkVoGL}MuVsdq
zszlu4DTmLPA29>h8-@4kuZ$*QpUN<bOPIp*va8|>!7v4RC1kk)gXZ~pJ2^Mx6KVih
zA&dmz@uSu{N2R3`KOcuPw#&!)AGjcywE4G271htKisLV9{bB&T^RKANud><a2Ba`j
zL_<AgQ3B2I80|x`M=@_c`B%b=E}6n`3q^n&#b6Gko#j$zMVH`_UKpled5x*;lQJcZ
z`qT_+&g0a%+#4g7Wnr(jCo6wHPFGQyB(zk`&ylCvY3j!_Yzg|r{b*SUhEqp>bQd75
z`wK+9sbF>S``%ni-?FVij1q};j$2HU+m_l1g}ILj6Db-1jtkhB0lj`!r>^99$-r8L
z|61ACsLLlVBc_KPyj%X!?O@>yKU&~=6c27?BG-rYhm95#DV!yQQLys;eqvUBf3wNo
zNya|5SVqW{-ui*brWI*N*1wjUf-!s00tEcTSMjS#F)=<9Ty=6^8%Cwg_dKx)z_6o#
zgh56Ky4}}R3IA>O{(4!d1ABKjFPAk?vlu2UuG-HfTgKVCF1J?9MR(>k-eipg_rG$b
zQN-O46uf>Yw*^~pX#u|dxC`9({pEifDeB)NV2eI^ddo?H_?hsX2jHsWlm=0vHI4*_
zDzCm}P?dAN7-2!CoDqNa%|w+6E23^^VcOc6Yw|RAs9r6KY`$__3t%+)Kf%9q06lP<
zLhk;toD41P7*etT`lyMB!GIDBl!}dZVek19MSlpN-zNQ3w8KifB&^sZnP%Pp@Hu-#
zAe_l$(YWXGDTBRi*wkOw!u-5Jx$xrNanO8^w1H&oshlfcYS^+&o4oShThZulZb9xq
zhTsbz#Iw=+?JeygJ&RR5Q(<v>-e&)$l#Hn7@1rW)baxMxu6D~AN~$ripJBH7t0XFz
z^+WP+#DMjXyZdHFr@(6{UZz!$3isB`Ds-Y`$Pk9Pr;V_>nTeKCuG#Z3AW9BC)}|uT
zy%_hNRbRc5&4rhDL=ZF`>lRlOGmqS>%=dTBPvevv_I0nOx&xltWeIX1jN4q+iO0vZ
z(GY{=@yJ<~YbAJnC>EsdyW6khwk&;Rqwag?^U_tUS(uvasvPxzZmhiHQ}oHV^Ibxi
zLcEW<11E-hc?hS)!5*$s>ANF%sLR4u$i&{5Yk!)iwPj`PaW`D%%+qX_GMX{Xu>+p-
z23A!XkN0Q-nvNLE$SD;alCA=}aUxrt4o!!4mhDlf{;Ez9b&I~D4|Lt1Pv37=*XOx3
zOg5{|REUrX&r#ggE@j&JrjkwmHi^VR`IAHYT<Os<9_?{ZtaKY)l6hp1&7)?v!`AHK
a8kU<9UaHa@{!l}JxI?wJgl@TxG3<ZP6=s_N

delta 4760
zcmV;J5@+r2KIBD^dK41z000m300IC2009610b2k75tfmTegTw|4FO03A(4|;0XP9K
zlaK*N0t^w8*#WQtFSCjQ-~oTj9KX%Z7-ywNELwk;HZ&WxK_}hE%%{J6;~$1=R@E(p
zYXrV3j7jCj5tU*HfGJQ3CoDjX2V;zP;*qYb9sx6JbCx6-SI&n&>b%Ua%aikAae>Wh
zrxdOFBhRUattyU5>Ha2E@hle0;u0UjQ(492jKdHa-RtrlxX0sJGe&=_W2OOQBPQ}u
zy^#TaBKZg;o-$9($It0qRpdH!_m6#Z;=?t;MUEyCL`tdZ8y<&}K<VpLQ%KTggHMWo
z6I(@tEP)Eggp}Y7!Eyk?AtaNYgB8sf$w{}d*BD7nx3{Y>k~qJ%bp<+Os)E?I$1yJ9
z>U!gjJDxGcPLM(Nt6_fzgK)%29{&I}TMfz21mI_mq>i<{Z=vZaH1|{Zw%$vLBqiBo
zjZ5?(<d(qBbMKBg%|7c+(j~dJc>GQpD7H4nnh;cl`A9tm(n!D!o-3j<Nor$OjY&<o
zy**#(VcW!>R0L@OllMWLl``Ldj!#p^zZ~|aTft|xTxgd~Az6PmmP55yVaHbFj!$gh
zV-=<>wE6C!OHUE4x<*tpP9egTLc;(s$R1-a8RQ(}12$*2(`|zl@hUy3S<JCSVP<v+
z#2oSW@S_+#a8F9Ec$qvkZEV)QZ0D|Gwc9t7qg+K0VY|%9b>rp6PJg|h!l^uQG?8tw
zlt!|W>4UkK<;Z{a{{Z#ZXAP#2b|!nz5*1+(V9jw3ORz$4pdOe%mmal6G<^wXEWRW~
zjpC7+cd02Lz&zvT1dadzk%BwZbAyj7{E_Kl`C&uZ)ZOoGe;28Z7}Cix9U|%FMgl;L
zP7kLBlG%(pjl097N|wT8^O8j0<}U7^Fu>y@uX^bq(|mtF2bm?eh{MYy>RF7D#kF?l
zKQK8YvFXQS(B+G#*g+)F!{TUu$gZ1yXm_?0^ljXMz&RZ8+nV5&DJeG{SDR-qB}#LX
zr1bM_u^zdh83GRqhi6@Yi&%(Lg1P$c8Oc4mcdYvhjXL7Z<Cnr$6GbiCy2%6#SfNq1
zLj#a<Gr@lY9l51~%S(z)llYBD!kk9Yjm_tfTR$)W0viXDp1@+6b*c>+Y@yLLsof@w
z%G;hc5HZG7jANpXGBJwLIjv=D8&gwlsawdatgVa|Kj_{Xy0lf4lJ{{)I*t^!;6?^M
zyq+sd#8J&GNBb+o#?_Wj-UPLYnMS~I@??*^803F{5{@y?HGkrbYgC8Hy}oIp++SlN
z;GbM#oonK)YR#O%e9PuO_xTs*KQFiY3;9*GeHm%nR7L%bs(BGd{f~NN4$M#4o8|{-
z1EzX|`PIRvO)h-R7U&RJfbxoEcWuBNZaFG2GfO{>b*qcJd75+)+qyh<>Yuw^j2H}c
z##DbEzO_jBi&i&+?A|w?BN2z%yeMGc0gQ0K8n{ivV&PTCYkkFuZAFCAHTIJ_J<Mh8
zV`bZbHz~^fN7sz|)8x0bN#g@VyV<vMjIksY$i@$@4N$q)H5<#AZf-71%?KeJqJjY=
zk<*cqe=|t>)}taawbK<~RE!RUW7E>Ps=|MApEB#_*W__lr&4ts;`j4w@J6nQZKuyX
zR+m~e%=b?ul57lDF>M3@ODGt_5=iGG)18Se{5t67-@;m>0z)guBS@eStOiwx&eNa7
zeJhMQh1r-)W@8|YqRt20WhzJF2_KDV>HaO%^yMiO=<yX*^5j5NZ3-0ejzCrXswaO+
zqt!pfnbf0I>Yw7xac8H0YDinc8mHJyUn&Kc%vZ?gImR)c#MF~oXsuwrPlWX^wH0I}
zGl9HyC3g~|k&OPeh`uk^7WPZie9v<5`2t2zO0Mwy3}ZPRYMgrBr46H6$8^FLE=u5X
zSYf%wc@({sN4xx3Dm8AM_VZ@GnHzt{s>y3{rXj-!Vz-rJBsi4|09zZlRvmlep{}D=
zvrEe>xGj7u6}*yLsftWnp<H7vklYWMdV2NbSDrSjeD}+G*9>P#JjHAb2F`K^PQKM}
z_^Vqo2|nKYgKr-y<99sc81MQIL5_$fm6_b#^?RM4_BFGvm2Y|B3xg-wyt04LG9Z!F
z23eV04^#7CocnW~Z(ygyM(}uL#e`6#FKsAA`NDu(EO2wQoQ}Qvl6m+%TdrFqX$|+5
zv8yTti3ZSmfyaJ7AxQoz)})uslJ|Upm4iG;NFz8SBeqZHRwGkd()B%0&b+bFjjo>>
zg3IJb3jzmHpy!_0>ySA;b8mmNT}9$sl+vzaQ}PkyZDX|)b8Q^sCppGB>ryw3d_?>A
zYH#!X@7<?7=hN4kt1pQ)dE}AiyfT>s2J<6U2X@TxMnC16epNiG_bZv&#E;=!X%)${
z8Af#~CPLX!mH|U#kTJmZ6&$`B)uDmqme<Qvh|0?HqOehnlBDOj;~js+De*S5_Mfy1
z=Mw(_c~wX8EA}7WML&f{d#~zxgl`?y*7SZD1Xa%}dBFbwVSgc1N!i71sJ^1|+~{`q
zmh;M(4K`zpqCQaNPxrkr2_49%>l$>|5J)V%7$A)c29UHW!LU@Q7&*Zs9OU44Ijmn2
z>S8<F7<@geYSKaWRB3+|=9eos%o_mXjAN%2v*CS5M7q!>e-LZ>+TV$AsT{Mi?aK4=
z<YaPx0ra2_ZLD=fx3Td2_NubI`11G62rS`1QUTy|oc{o{YrF7=gZx$D?QR`Kbh`;s
z?NLRkyz-QM!G>}Ue&Y-bo=<A$d~Gg@g2rzS>YA0r%OGa^OV5AiBaGpcvVqVqPDTZD
z1H?M~1{lV%sYYPOl%nQA<=_xDjPb!eJxu_55_st98n^Z|Iuu`OlIdApZy6VQj)xJ3
zBaVlu>J3_)>b@+o)_%vN+l9Hai_B?n3&#q^(jjF}ED*%R=js9E@m^f|j<0n*b3N7M
zvp`5$H?d?Sl6imYlh5VtS{@qJ=Cajeitkd?t?benRL5;JirEP4hysz;M(M!$j&YJ`
z16nVIz9E)PifsWMcSyhwkUlfF`>a1-Lx}$X;aPZu+&l`l%_=gfQ6U{m0C^ogQhmk<
z&TFZ%zVNl}g`m{+{d7wutE|zPE?pF`17YCg5yl2V1FwHdY?s~=wzIh_t?P45_J(+2
zhD(()AR&SIfE%|noad>}u>kWuQ%sjhycW|-431+-GZ7>J${2M6oDhE+rCz5kr^7qD
zo7r1YznV26V34ft#YVt0l;8!(=g@l!;I-&9{{Zb-n?#OQ(}J&-<T206Hy@a1u1DcO
z88lP2KG1*LTMTdxI@8U(;Y%1~3ObUf0)Qf-q%cgWyu{&f4oaM0_n<*3*@&O#`@bpq
zzLWtS6))N6#(bGE{^|PDOj0U_F|bq6k-?w_QBG*2KuaSo4h}{+^rwq?+c<_pjt&&i
z1XNUl37MHhPD-3G3V1&B)s5NqDlvcVfz1Fmih6&=Ba#+2VmLS%#Xsz~AM@`or`$9F
z4HWSVtf7`SAoL+mG{0w<CjS5?O}O2irx^912<WE-W*Jo{kT@OBK~Gz0*b=bFalyix
z0E&uI2qX|e9YLg^0*WZ00*WZ04(?C*NN3h8HDMiyk~>({HV0JL>AYlhClYgxGxRjw
zEqs4Lp;+BnM{i*)Z6@dQi!owA9f$;H9eeXwLgT}PL|W49GRGKoUW~y2bIbFV+(t3R
zDIRYP{_rKW@C5v%k&r*{uTR(7wMsVE^Zx*Va8#*XO{m`A;r)4zyTlrgi4$12wz`i-
zdzcE`FOwTMAx|7OamhT4A47_xdE#AdZ0vv9TTL_><#;1>hCv`;6P~~H(Q$xzQN~nO
z7N>RLskI&2eTCJ%p3l1NxwmJ~vEv!%Jx@+BXw5E|V6|9ak!4w(r)CEY840ujyRi@H
z)N@?Xa^`95bw$gar?;o-be6itu?DfJTC5sqc_%?J!-U`Fa5o{#WsZJgP5~SYgHL}=
z{?wCReQwxVO*?OwYlkSo_o3kP*|^WA(zN_Ax(wPkjAWA1JPT~teWEcV#&*fkvGSk0
z`f_oa;VWd<R1=Lyepy@Oca7qGdKqn3%hMIq1W1!`+7vMW;ksdg>(N)-8Gqp~@fusC
zZD*!9M=Tht6O)2Z-uBLZwdd4TsZ)QpvHXAF9W>=lM$=b*w*48~N#i|bE-r1J$4g%|
zUPnP2ZNOZSfZyy4XV7-VO$Uy(o5YMIj*!c>kVMeA2Lv8Q>~|lXaCB5B9&5FrDMOm}
z)70#w@fNgN0PtB6G=U;Pyagnao*TJtbJqZ#MrzR2yh5`|=@y=$Sow*$_U?an^A2*~
z?vA*?1J^tq6`e%eyd9U{{zf&Fr7P2RUw`=?gAa)OL3yiNMID}!CAf!rov*c{L@k5!
zX8-_4`=EM?)fT=qFht_dN<d$HBXfVFkcz)3&Hx(+O!7}+YszS-ajDW@hx`*cLa#|L
zyZ#B?*=w4;#qwCj_Cn`j1~z{a6_6w>xn|vy^6vI02kFvW+xWg+?;_}1A&J;T44`3(
zatCZ|80o_>?}6kLR*5ycH*V*v*h%86i&!pg?EF0{UNcCrjIbmUgp#Le&fcV+-k1<v
zYW^vL;?CMjeIX>4MJP;?E)M;pIdQn1y#`wckTZ(%`YDL@3%maS6<L4l3yWPi&nx+?
z(51jt5fFJ9A1NcS`MLi0D%Tz-@a>n|ZtZl1iWp;#Nmx9NK^s9JHzenhJF)k#Fpfuw
zi$=v*sZvLw1QGaxMK*>A>*DcluW@#6A&$_hOur^13dd}K9B%Fj&(VD;lYBzerGerW
z_EGP1A#_F!xT##{cPD?G^W0Y`2~&_rIL8!}l6M=mj=20p)x6E=X{VvjMTxP{jB?y{
z{{T5O;qf0<-4n@Yr^@lJ-O@(qaP&VmG1rfC>s);l#C2)o?Ls&j6|mFx85T}a&&;Hd
ze*XYml5^KQ_2!)y#64aX20MEd8FExaa6=rhBX>;m>z=2Ro=P-|0GjgU?{8<jlqiyU
z8b%5*GRG$$okK+w08vF008vF00sq+&0162>CGt5o5D?I5GUFe!PZ3NEf0d*DcBlYP
zvowE8<=rpMsFTWpxzukmSlEJ<uLuo=J@lw^1alzl+K(HL{y6He_3L~v)Zs1GoN#aZ
zWxz|EQ)xrdDQ)066W{HEwcLPI8!}VM`@baPqv_;E2TWB*Tz5kD^g8z62kRyymW_2z
zK^C?1`r?2t)QrnQ3Z9N>f8*2|*4MtBu0b^zC``Cpz__*4dtUn~+$>~!i$K4ZqXYQL
zL|6LeyVx>0nt9_|T<K}W5=O-%q_14VUDDy2vc?1OI=C&=ZSw$OEJb|WE?QCS@uQOt
z#~|%F4)dXG=Gfb@jZxR?J!RI%{arAfoI-0Z@MVK9e^put=YHojf7HgGp2NWloZJoI
zI}`;NDMzZ4ZG&hq2%~Hc+ruNX42dq!|Ht_q3g4>tRnE6x9SOhUs}4zlD``ZTc%g{O
zLun*VcXeK1MGGa=YarvUwmSKy#)k>Nd>f{7kg^kpe$o&<XQ6O=4#@DA(r@ryT5z5u
z{Vr}2uBlii7>BTGf1W>%aPPbADlym!bo$n5RO`y$PY~)#Z@l#QN9+HK1xw5xwU3+h
zXT&Z~Y=Y!^Iww`4C|K9u)QW2iUm{skMX$IX=&tm(R`c5LiuTi0O_W7~jxWxiS#J_S
zVlsRzXN_Iodj+C+C}nEMKzajp8hJnibOAps_^h%*bU)=~f8N0QaULLsJ4vuUAR^S^
z+9lS3aAz=1n058pjo#M_+DV%T5_xT|f->0Zg*BPeaR5DqlZ(UxSgY)m1Nevh4r#Yx
zW3l`~0nL*pD1Zuom&ZPFh0NQT;?>Zv1k-$J5)fma=QY;a{{aUe3JlrPxWfZLW_GL;
ziAvy|Sw`BYfAOI^>rF6xIVcz!<r=>?BRZs<0^(!?AyrVF6dzH$din+Oo<?s4@$V8A
zLwi=hzAny0-ciJ}%A3tH`K8~C@cMJJ%nhNe^h~bR$YQsId#|hRn2jOSB((R-EDyY4
zS2_t|G^N=xQqlLlrtOSIjB}tAflv=Zy+mF!&DGolfBRU<B#6Envtj5kox;bztZhpR
z8W|~6k#EeN_~3acja){&+@9{<u}zW|vD~Q=QPre-;;yVB0@kE@MMtSYJUs}C1h5(e
z1m1$D>&_aaf~ZISPi>skqZ`ZU=k}K$L4@I1M;|*S7Ckg$A)R&!;JbHhQ{WbCS{>+w
m?X8>I9uN<Egj{z`Z_a@t@Y<umeJGj|@?~PMWFSj}fDV|7=q!=|

diff --git a/README.md b/README.md
index 4fd0e3e7..53dcffb2 100644
--- a/README.md
+++ b/README.md
@@ -90,11 +90,10 @@ a sensitive property, the passphrase.
 
 For basic verification we rename the certificate and print it by
 fingerprint. Make sure exactly this one certificate ("*ISRG-Root-X2*")
-is shown. Also remove the left over file.
+is shown.
 
     /certificate/set name="ISRG-Root-X2" [ find where common-name="ISRG Root X2" ];
     /certificate/print proplist=name,fingerprint where fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
-    /file/remove [ find where name="ISRG-Root-X2.pem" ];
 
 ![screenshot: check certs](README.d/03-check-certs.avif)
 

From 8f43b802bcbd8cf77bf0684c9c0e8ef1857e1a00 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 23 Apr 2024 10:14:47 +0200
Subject: [PATCH 225/988] INITIAL-COMMANDS: drop command to remove certificate
 file...

... as this is done automatically with RouterOS 7.15rc1 and later.
---
 INITIAL-COMMANDS.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 2be51c54..3f5f75ce 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -23,7 +23,6 @@ Run the complete base installation:
       :if ([ :len [ /certificate/find where fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470" ] ] != 1) do={
         :error "Something is wrong with your certificates!";
       };
-      /file/remove [ find where name="ISRG-Root-X2.pem" ];
       :delay 1s;
       /system/script/set name=("global-config-overlay-" . [ /system/clock/get date ] . "-" . [ /system/clock/get time ]) [ find where name="global-config-overlay" ];
       :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={

From 209c37664baddffb730dcb5d85ebc09b9bf8f3b0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 13 Mar 2024 09:13:39 +0100
Subject: [PATCH 226/988] netwatch-notify: do not switch type when resolving

This requires RouterOS 7.15beta4, but let's bump the required version
to next stable release instead.
---
 doc/netwatch-notify.md | 2 +-
 netwatch-notify.rsc    | 5 +++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index f504ed7c..948cbecb 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -4,7 +4,7 @@ Notify on host up and down
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index b658eaef..a49d0cde 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # monitor netwatch and send notifications
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/netwatch-notify.md
@@ -102,7 +102,8 @@
       :if ([ :typeof ($HostInfo->"resolve") ] = "str") do={
         :if ([ $IsDNSResolving ] = true) do={
           :do {
-            :local Resolve [ :resolve ($HostInfo->"resolve") ];
+            :local Resolve [ :resolve type=[ $IfThenElse ([ :typeof ($HostVal->"host") ] = "ip") \
+                "ipv4" "ipv6" ] ($HostInfo->"resolve") ];
             :if ($Resolve != $HostVal->"host") do={
               :if ([ $ResolveExpected $ScriptName ($HostInfo->"resolve") ($HostVal->"host") ] = false) do={
                 $LogPrint info $ScriptName ("Name '" . $HostInfo->"resolve" . [ $IfThenElse \

From a017f2422442d71bac2ae7081e089e90a1636d83 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 May 2024 20:35:06 +0200
Subject: [PATCH 227/988] daily-psk: drop workaround for old RouterOS

---
 daily-psk.capsman.rsc  | 3 +--
 daily-psk.local.rsc    | 3 +--
 daily-psk.template.rsc | 5 ++---
 daily-psk.wifi.rsc     | 5 ++---
 doc/daily-psk.md       | 2 +-
 5 files changed, 7 insertions(+), 11 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 6dafc08f..0562e399 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
@@ -23,7 +23,6 @@
 
   :global FormatLine;
   :global LogPrint;
-  :global RequiredRouterOS;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 4709f3a0..0bef0e9c 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
@@ -23,7 +23,6 @@
 
   :global FormatLine;
   :global LogPrint;
-  :global RequiredRouterOS;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 6b7f5fd1..9d71958e 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
@@ -24,7 +24,6 @@
 
   :global FormatLine;
   :global LogPrint;
-  :global RequiredRouterOS;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -86,7 +85,7 @@
       /interface/wireless/access-list/set $AccList private-pre-shared-key=$NewPsk;
 
       :if ([ :len [ /caps-man/actual-interface-configuration/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
-      :if ([ $RequiredRouterOS $ScriptName "7.15beta8" false ] = false || [ :len [ /interface/wifi/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
+      :if ([ :len [ /interface/wifi/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
       :if ([ :len [ /interface/wireless/find where name=$IntName !disabled ] ] = 1) do={
         :if ($Seen->$Ssid = 1) do={
           $LogPrint debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.");
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 90c6ac5f..83a896ce 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update daily PSK (pre shared key)
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
@@ -23,7 +23,6 @@
 
   :global FormatLine;
   :global LogPrint;
-  :global RequiredRouterOS;
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
@@ -72,7 +71,7 @@
       $LogPrint info $ScriptName ("Updating daily PSK for '" . $Ssid . "' to '" . $NewPsk . "' (was '" . $OldPsk . "')");
       /interface/wifi/access-list/set $AccList passphrase=$NewPsk;
 
-      :if ([ $RequiredRouterOS $ScriptName "7.15beta8" false ] = false || [ :len [ /interface/wifi/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
+      :if ([ :len [ /interface/wifi/find where configuration.ssid=$Ssid !disabled ] ] > 0) do={
         :if ($Seen->$Ssid = 1) do={
           $LogPrint debug $ScriptName ("Already sent a mail for SSID " . $Ssid . ", skipping.");
         } else={
diff --git a/doc/daily-psk.md b/doc/daily-psk.md
index 2a15af58..4a3de64e 100644
--- a/doc/daily-psk.md
+++ b/doc/daily-psk.md
@@ -4,7 +4,7 @@ Use wireless network with daily psk
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 

From 32474c751f9fb69e096dc7f3b9e8c1f2c1fe6f90 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 May 2024 20:37:42 +0200
Subject: [PATCH 228/988] telegram-chat: drop extra conversion

The JSON parser was actually fixed in RouterOS 7.15beta4, but let's bump
the required version to next stable release instead.
---
 doc/telegram-chat.md | 2 +-
 telegram-chat.rsc    | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/telegram-chat.md b/doc/telegram-chat.md
index 95f8cf97..1e6f70f0 100644
--- a/doc/telegram-chat.md
+++ b/doc/telegram-chat.md
@@ -4,7 +4,7 @@ Chat with your router and send commands via Telegram bot
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 2bdc04de..f2750f5f 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2023-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # use Telegram to chat with your Router and send commands
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/telegram-chat.md
@@ -97,7 +97,7 @@
       :local Trusted false;
       :local Chat ($Message->"chat");
       :local From ($Message->"from");
-      :local Command [ :tostr ($Message->"text") ];
+      :local Command ($Message->"text");
 
       :foreach IdsTrusted in=($TelegramChatId, $TelegramChatIdsTrusted) do={
         :if ($From->"id" = $IdsTrusted || $From->"username" = $IdsTrusted) do={

From c28574b8f4484463e326e895fcac110d805efa01 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 19 Aug 2024 10:35:18 +0200
Subject: [PATCH 229/988] README: make the QR code a link

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 53dcffb2..ab6bd8c4 100644
--- a/README.md
+++ b/README.md
@@ -364,7 +364,7 @@ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 Upstream
 --------
 
-![upstream](README.d/upstream.png)
+[![upstream](README.d/upstream.png)](https://rsc.eworm.de/)
 
 URL:
 [GitHub.com](https://github.com/eworm-de/routeros-scripts#routeros-scripts)

From 342d459436414ea94b9081474122c60b50f61569 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 19 Aug 2024 14:54:17 +0200
Subject: [PATCH 230/988] README: match the certificate file name from Let's
 Encrypt website...

... so import from manually downloaded and transferred file works
out of the box as well.
---
 README.d/01-download-certs.avif | Bin 4596 -> 4890 bytes
 README.md                       |   4 ++--
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.d/01-download-certs.avif b/README.d/01-download-certs.avif
index 4a074eb59dce96fbf79c0b50dfdf028f7eff9d4f..d41ca0595fa2f6b2ca1eaf3a94e34244d46e017a 100644
GIT binary patch
delta 3543
zcma)(XFSw_<AA^C=&X>P95S*adu6XHvvPJBp>VQu);D`3<49Ik#@Q>`WOe6kvQ@Sa
z&W?=V@6G?+@5TS~d7d}V+vkuc<4$4#!zuv4qyZ8D03iRx5&$S;lj4IR;mOw_x+FJn
z$)*rFh){AOM27^ROrC*MLxk#LN%|pR(lLedAkXg))LYb`uXw4iHk2N68sp%*o}Bcz
zYqwArLw@+ML!@1Y;CUZC<nOy-4l`{RtR8;f$vWM-&UJhurBV8GuFEdguGG?Ff!>g#
z<3WT%p9Ov)m7_c}+5fCAcd}r7SGr0;j27YIY&W->zkS-tqarv9<DA6y*-C+vG7p`K
zmC73=?xm6=t^1>ijbv|a!n)Z5r;jRPyaV_X2+vqlS<#U?92R8&BNk9b@crVSKJ&8C
zloCd-jGjMpt(p5g{ECL#$@LyiezTMDa7T_kHccDxQ*W!7`Tc6gf{kc-^=6&b6<}*E
zLf;>4<Kn4mz08v|#U5nn+yuTX#PJfpW#9U4;kg&mEJKOl@@iZl@tR6l*D5MG4*eo)
zk&xKz{bugr4U+>iLaccjhK6Mga935@vrN*R#7>U*jgiHwh^Xtl-$w~2oK%ZTCY>1C
zT9!!Z{nmEd?nsu$iWGKaE1F3m+~-5_Jp7UTBJMCgk6~4qe~3sn613-d=XD1s-nZH_
z03`z|b#AifJO!1D#t5^77rj;QD(pj5sgsg!uD=ig_+PBhwR&KbTj&1fJQ`Q}p`zas
zuV_}u_Z%aTcoQ<)#7oUV2WHt#yySBcYuqe084nG8(2v)b(<zev&Nh^`OC1ve#UfI6
zkn@s}Q0Hp=a!!R6_|}A2-sSbWAQ9Rxf}l^~ZAx%nQPHBjoF~FG!mutZXB7)A?TwN{
zERM$}8^f;lO{LPYnzCNbmV<OwR&DhuF}Lz`k!l_NKRz?dze)>f4f#d^Q$l9VRz*JP
ze$A0lp@?TQQx7aH6LDpMt*$af!M%nbTfJxOaeMhe86Hvzf}hLX+`_}rPtEtwtJ-pw
z<u}{BMlPIJGIGM(r(Eqvoc@W^9=|zg-}gOl(G3jRF$gdf(*nHDf(sX2EFY%1d6&IS
z&3Ht>Q5wt5=I-D-VZ1(r3WSrcgT619eHghBA#o(>o02Je&z=}s`G4JOT}w^Q0?;yr
z-KfDHPtXpm<ndJuEQECPx(v%LlqKH#9=4ScgY|RWDCHepVOg}QK|CXf9-vsovOJr1
zJC7=ZV}T8~BNb|0rrc3pdTBh`yugN3v&O*$39zG}4c9(3b`VF~Ln;o@$f=zBPmv-z
zs16m5(@OtX;CJR@;-Tqet;NRm72c2{dd$ER2>6wZkoED0jylXW-Qo)9su{3lv#Pap
zU~NvN>4CvW8=z~3C6BkQdKn?(I;DO-qTMnX!wPFsr!b0@h<@sY<lBzJy#7QX$B95L
z<0UpxeDq53@PXiMRmFzq@weiZGgf}*(v;qR+@<ec<&igJ&v_TWBJ?0qjyH1U&nzu;
z4J18TYGwNn^}Iep%sY}kA9ZIYcI7m#XQgJC@YPdt{|Lu4G^z@Z%v=hhVNI_(6h=Ed
zcP&SbMo?ShJLS0mf?`f;)Sg(>P>sE}6uI&+qh6iP3YNN;ob;}HuzgM@|9GLtp%Ki?
z2c#gMN!CcSQXo)C(ua8_l3QQI47*K(JWR~*t6qG`up(Oh9%&obwU7@?;)1#XihcLd
z3s->B)V=@S{vsR9@TD%|mDInoz5%CzGFIZ;uyG6LYq-i;H@``1ePgrF_=31uD7CRN
zl^FYKbGFw{tnq`s_-!_YJB2jKr8;Qo4D0g1==nF2)BCjh6}Y{p(Ld1~44-L1VJD9i
z_@}s#eUGm^JaDh6<UZu(JEz6|cXu5pd<0Ri0!MgE-le%N^G7J{|M*8~r{MB%`pAs_
zOoiOyDFxF=n0MwC;7cdT`GIFwY$MKzZ#J<pesa&U>$tkDt(<s&X&}l&ZMEi>5p{x|
z*bg}zcP)30M%{Sja?KviC#rkzLHlq7H;=C=sw5#z0Dl5x3w<jIDnK}RtoSt`KYrw+
zg0>bKT0xu8FsRC|FOG{*NqOwLlhKWrH4nbMsDbLet-i>U!JZmuZ<qQm*jxw~$Di$w
z8%$KvBvB`oqt<jA!UWSDNvrzeLUlPZwY)6gLrLssEzewDA8+%%UD1bvcsARn7{{+G
z7vsYnOv%{I2FIn%+3ObjOMQLD?XS7D`gpjOl`v@dAfUW%Uf)>L8vfF#;DiAkx*%hI
z%`09Ty&DRvURT&%`UnVpYiDXm6eQIh!VV@F(fvF7cQEM5XasvK7W;V#KY0oN(%|5W
z!Y{D15>R;KZwBZg&;ne==D(p7`2Q;li;!l%A#tkpJYF8^@CGs>w<-VCHp?kPhgej6
zGf|>9h07ka+QTjP+8IB|LY0cA2+Kc}KptKJp|6~S>Ay====_oBNAb=n4QQ@54uO&*
z9L3{P)za!H?j>^3B47Om1}Oo+H8hU`kGqh9OZe|S5hx#ff8<#5;N+D?$ygxE-A^t{
zf_!bd&qwVfB)HL`kDyu5q=cs3sbZ#nQ<Fu++FOl1Hk@#NTP3?N9V;rhy`C_^$Y`tu
z{4d4+SNy*QUd_-0loWD&`*JdLbR#b%3Tf&PRQeEb9|LF{oaF90e^!0eqo3Z4HonKX
ze4%IdE;t1t`&#Xh-;Xs3hN?!Lw@zv*=i@U|Wr05GBdOxNZk_J^t+&llHn${d){@(j
z7=s)Z`80^yl)-|VuWbu!-BfU%G_&*UAOFS#1F-Nb{y@LV(A&1ZfNF;+!?l=IbVU!X
zr5PWn-47Q4)y*2s%zxcniL~V!qg5tDE=fq*%ZPTvd7roEeuy<@F>fzdr0%&RWjQ!#
zYiL^i24hD`9#Bi9NusKp$$9mGdrZF3E0ZJ6&sR&7O4bZFy&-g9(?<no{TJ#l)I;Ag
zB~Tj-DS~hg&bMv&>~D9?KpUSY3`Ypdu{43cmDarm(Nf6551g7pm+4Vrhu5mpMvAYz
zo~+-wt0OQl$UHpw$F#AQ=>{#yHGB77|EAyX)_<g2>=g;@P<h^z=ii`EgFsr!h013q
z#^zXS!!GLMykylMseYo;fvdUw93%*fZCHd<Xxz)UC6RhPmO&E(IW}-jLFgBU19Dj)
zH-^z%XiqK1Mb|b~IsH(n!~8z|TK!}{?s8&oCNxDQBA4-_o=rLN`T+ytAqoFVmjXoq
z<S*UHf^SgB;p_woHOjFgHSl7NU1=AtS=||!&zyAKpYz=>i6WoF**}Fht{0+1udE7J
z@Pjt7Hv%L%vW|bYglv5+G-KPvrP{;5m&J0Jg(v9DKkDObVdO!|&y^)p=4*dlmkJb&
z48TZqWcUAut41VT8EOyk{>2@sA%3}YH0^la?hB#bFyZf1WVkIkc~{Y^c8HWj=_Wec
zf8rMWc<PZ$6vL()M9ufF*fWoF?&AZ>v)FAbGrqT;M={!;LJ=}evRow^JX`Ct;Ew{<
z^m+b+pFX<hgtw!zlV&+P#Y~cz?;cy$^KHPaz(QFdpTzB~mm?oIc}fz&z{*Sw{28Xv
zwWpQYP%hFXUMvUwh+Lf~QKAj3G4aW!q^oXB*%pnDQ*kP|ajf=;PTB_A^(AY5%VbJ-
z_xS9<0dsiFhrn&$^&c6R7K}d!Tad@)kDaL4HxC8R$2Qk^WG9Nt_}zZ?PGeEaN*n1`
z-Og!wL-c$lYw|-)7W-bRwIyu5ax*oQOr$A(kN1&5wU<JL?nVt==>=wwW$V@^wz0Gb
z28x<^fm`vI-Ny07Bgf9jwY-D@X!qxkI)V0=mhVf9bY+NJc7w70_R@18#h><1e0SZ2
zQyq?gPM=R2&Gv;zS`-*#T%Gb%*MeiI4d(ao+KoTAC!?RV-_MQ4?}vC8jYfAw$gSo*
zAht_qBc}N{ILbxebZRG_w)$#+jE~*gQB9EXO6HELg9@>PF;V6p38Vw+`48=!oRr9s
zcQ`G1?=9*rYK`U27KRjn{T(S`cxL0{L74InrLJ4<#w4_Mq>j5XUl{XSdNiz=aqUCu
z9t-TICAzh}om)8D*&XHp!5~pg`_&aNg7Pm_M46k%wHQ#>x*dOxa=yaaki`}XdIxJ}
z=CZ)gr)B8qK?Tl2YXkHtuAXTYkRHP1Q;GUTa?TGF`~lFLq~LT>u(QyBB^f<2qWFnw
zF4?Rh+cj=$^Yt*}crxp9gBKp(>HW{~y|e760}265%i_^gE*BDu`$714npgSv+Dm-}
zTZo#z=0<C5OMN0DsVY+hA4U47{pi>L-%GlUzXQKWy&3-H<rxHDcg2c129R6^N{7cy
z)TKjuk|a29AArB24~=z#t3}*G<^8kb7G-j3nzv*n7gG^2HjvA>__}r<4b7nAU04ks
zI#eBP_}8mLQ`~VQx(*CvT0~<{>9Hahf@zZec<Mrvt4On@I>|$YVM&89RVMdPLQk@O
zeYE%<JWrTpwel;EOM^FggKF8kI(numqDXckoKx_zy>?`It3P3u`ev^^=y;9#D_O6q
zrV^1HGoz<(fgDxb9-Rq(LWv=0zew9;>sI0El#!^x*6W4d(NQkdVp$A#V;QZiM;TdQ
gC!Z-^{dHj2*I%HO#^IYkDI>klM#V+21XJ<<04VpYrvLx|

delta 3247
zcmb7`_dgVl<HzsLIx~)}>^-tePM3Y1vo}SOaQ05-T^x}&GBUHH>~&<8aarlIj#Htm
zaI!8$#(nw|zTd~=_5AVm!}F)tt3c{NJUxmN3INb|13&-(0QfJC0084+Mj9Fzn#Bq<
z1hJQ8*#k9z5?Sd$1jvRl>kF_6D1l1`jR7&iz7^aQ^+ff<I2e1G&50*XCOuH1wjEZ4
z-xqmloV>()9JaQEgc0H)hAVMVDKz~n1p^nv_utyLmD;C&3llFwPmNC#JpBfzb%COM
zFHlU55~nLtWo9*YEgD5kX-<SKGNH)gj&V(EeOX)UrGx?X8J3D#H*71LcD-ZE1g4>}
z7gvd!axGY#@BV0Kh>1@4mgXqE(=@sowr%JaT0MXWTFzC8Gx=t-L_w~+32>r#O&AvV
z<vR-VoIKEhKjUP00DVwmaj#dLV5)(<IeLLI)wtHEaDFdIq31^Rx9>4Irr@63s1&bv
ze3t6XL%+`6l&xYZr$lS7GJ|C$Hq7F{NJ}OK+op3{I%h?k?{Fm<omGW@6e94qxcTwr
z!Jas<AfJr{TsUYW=5o*lDUw+HbJ0Q4Zoe>dM8cI>>he=Qv)h{K=33`BXUV4WoN^p5
zIvXyI9*&kf6TC^nb6Z@Z65)8GjQ2!9Ff+XbFzaGZW7QTuz24ROxP4;x9>yJtgm8;I
z8Uk;Rn|se^T<ebFZc7||E}5I5IA+NW9+i-lPIIK)AAc)P8{X(>XvN#OntXkDO!y-s
z161p5=JZZP%&?7j$8fgfH`leIwT2S!404x~y%k(a7vP~nNo}BqE_L`*0Y>?4+KfmP
zr|~Njf3!`IKmvf7UvZ}cBbf(1Trc?P-dTXkUk%<>+s#N?dnvK5{j92%x7O33=uneY
z+h)>_Uqvbh7kyfxn)1Ah3s_jlGO|Dk+aENKsy>eJ`-y9vj<x21cQF5Ekdm5b7N7!{
z)1q#?*8M5-TKqNEV(&$uZ>~XCrY<i?Kk&9AEksAFL*p-z=f)yGreM}{c}luHyC}Na
z%5~75IbBynBK>>bK^>C}O-<+Q*|o7NUpGtzCgtV0MPH<-FZ8Xd&|)*$0%hHZXR>UC
z+ddV|-PwZbogR!N+SUEJ=$^d@zQN!Z77Pf*#-)=RN=H(*4J_U5m)-4@vacBO(tHGj
z;Ui~W)rG@kQ=@NbU{dq%;h+iw%6-18pijJiS2oj(k^vhl#2!T}OZ5bqhoUNZJHqjO
zeb9%WLr#cccM}u2=VQ9zVI`eUQH&{RgSbMsN4pMO77V8Dwc!z0#cmX+z9Xt}GYjdp
z6c$2|5+I(Z<JP-o?K3ddOu?`EbeYmf=1lxfCKKy-d4I4PrZ}NCxBQ9b3<;(v#HZbK
zKias}Ee<?N)>P>y>q<X2YLu#7YE%p_omhZa7^2c~;`AqhkKI@+W7o6Vrx^<VRqbYa
z)Z4F$P8fY{73GE1?e>0RO@ADyp4#I=i3&n;x0O3OU92Fiec6AQ)XL|o%8p7m+4c$5
zEw&LRbp$a_o0ntgk0zIKdxt%WmRy{W2E!qwEOzc-*f~ZvS93j~Vdk#+B~_yizGp|Q
zrD<h`w1?~SkA`8{T)^qOK3}i$*ZqNbrnf?Lo2^~^o)2rd+SAY;(4I3^m?H32i%ts*
zo0(lb)ob5|qMNF?u&EU+=kxmqpw1c@8k9XTG#_Kjd3(Be)PX}e<BV{w5*Lg>7q_Lt
zx$1b7HvYcy;@Jwz**DorE!XW6!Dj3ZlYKg;zgv@h-MU)#J}2ARGNyL;RVIyW_tQom
zG-~@?Y4e<^N3n|4il`JeJxE7XiDwuKwr#OD>jxtJO6A(6r?*DVHs_qie2SBB-lUxE
zDvZ{D<)%VEL)3)T2%rARp+wZ!Vt5)|PmlJww>IzVO%0uAjL8W(xJ4GGhr_4<7^%?M
zC(8dPpG(IxQjMl+#`j9l;z^2*exS)0%7xv@USQA`7Cx{+hDl4+(%LJ%`RZsgunJ0Z
z5L|S^roL-(d>@ix6Btgu_&oFz|Et*#lV0VaxD;z^uvPebE#=(wLH{dq@CJ#$M;Y4G
z9++h!0H_ND427KOw?}?1^&s;9LZkEi>l6xZ8fO>WSG;bmx<gwHc*x7UdA6k!PM~$Z
ze<uFd@}%9L(zy|Jp<NW*YC(Tgw(Rl#ZSmqQ&8aD9xnZ6T`134l*0}T<ImWyiQ^zk;
z3QGRJ!>YS1XdzbGX;Eg0nUOZIwH+7uA@_WsxL9Tu5~R84s`J>NlGUJlaKvS4OHgQV
z+pr4AAG|-2w(^0$a)I;})%9C)ASI8~Zl;oQN|d(4yz^41P_6dyP~v`Q-I|pdlooMV
zo=mtcyC6msE1Dv1)?GKo?v34h>(`*DIExgFop%gH{k7+VUxw3hS?c_M5vG2D0GJpx
zBwMt6MMO)dR6(_@xI<=BAZC!i=+^b*SzVWU2-ya`9|Mo1S!JK|?*7wkXpL2A@QN9L
zIchRef3Bmau`$NtrH4p;yq4WL)~m^OpPdx0c|T;_BEvO9>I>Z)pg&QfF_d8Q6wT1+
z!ttKuCDV;&0$fELPwtpSRKhflv^;~;jMReJ+^Wo9`n!MsdtD|Q^M#Y;LqqM%<?Z4)
zzY!Jo{99(-3}$XJOhGI0{4Oj9f*z~VSLIrauTlj5B)0gpkAq-uI|ZyRKUIEviTcW2
zs*tiCU?ckw9Lq6ULp1{pE1a3~BjD`sF_`@`e=9%e9KZ`8bWgzSYk;G*Jugm@Em@XV
zjoe31zpA;t3^roG80SR1<`9V6W!5aDjtrq_m-{*lvd_2jukfb>QlWDpHY*Bmm%Jq`
z<Bi4<ztOglxA#vp%1632rc^iSLUWa<A1o(Pw5RcISAbUW<Zt<4s9+J?uzr-7zu<jb
z2))wWvg7dLCHBWy${%b**YTu}^LA35JKgQ@w$*+k6G#n4yvpFvoIQV1Y?S|VU{CXh
zwZ6d}@9A+R_r_V)YV?MKzl%8KKSFVMR=HIj59H$XvBgm}rRQUPd`VsTFLJ!+%wF4l
z%crh9J6fb}wuqI$>MPaq*DBxa%%0j}O_Yz*@Y$v!K~HMreG;5I6~W@KR%QXBbu&GP
zbp4!_S{5A)Y^$$CTd}{)S!};B;=7Q>nXlugPeTUU{?eIMNvBZF<dxwCf|i>0`Cf#x
zs|}lu$yy{cKchSOYfi%PQZP~uF5~F!$6EG;g^KuMu65S|#NKP{HA9WizPj1ZmKq1X
zvv@qLU6SA|)FU0e1+v^nyF=bF+12BE?UAy+2NjrP%7#_dY!!=$c_wy`^om)i0?ip|
zBFQ%ncuG@3O)7q!tE`7GPNJVavCOto0I2pT#_M)xFAT^VL<Y6A(ADcvsXy3w%On5O
zYd%i>vic(6O~<$u>w=4VIrEW9LhH!y1~!@V)n6(<?i2?b?a(<N785V_$b-MguGxv<
zbyb+RMl-gGcsf}(h7P}G93o(0PB8nNoV6Aj{d<F>HOMPM-K)lKSw_HxHO6D<#r3-z
zHv-=v7*wKicgd)RVhci&#-Ced2q~vD+BN=O&fa-<lh93*{;+TLNc`Q>XL3%9eJaU2
z9~|!(tM=|kh&mCA^VsVBqlLL{i2NJ2@jOgU;NWjx+*FXc_DB|+Kg`WJ3wP3-YoITg
znu<eOUiWDR6$y4)b)|rnEqd$yp2V7m&gBM7&T_Jiwscq@){N3w&4=PB`YFA2q!Z@8
zM8<x$o7*obE_AB+e@ECnq&h9!tP5qJuMG2WSwJ<-ZOedT-NnhxdXzUt<~NU}F*dRB
zpi4qLPc+(Ip${`E!{1>Qwx@UEf+i0A`s2W&zdWC7DRVMRx$lftQs?nQ3$jbNtNUD*
ze={7ad}U+joJrh|WuhM-3wh7GSm|jPSyUZbAU5i@_!8seuHEO}pItd*Q)MOFM@`ZZ
zVjCf4KCBKc>U7-cT*XdIA$i+mOh8^cwi(>b8?_97SvbagDI~Gw5nMz|kN4!-Jc=j0
zjB}J>LjHnEl{-75QpHFYAlRwah!*4yIuEx&J+U~X97arg`4mOwE;>u^xt-`fsWo#c
zMP5PNetyd$uEYm!hkq107X#jHT$ZoaPnwl{q<NM^#TQ((;ew3bP49VTgy~(2|8p1m
zc|w0f)lF$Z)IlfxCR+FI+dMbt0Tu{UNffUG;g#<`QvKoWdv76tmYXo%H{U-&weI41
x##lae$^67aP>*A6K#af{D0@rni^(nUad%&$-MY}_?>FVu<bNb~hc}k%{SSwODBA!4

diff --git a/README.md b/README.md
index ab6bd8c4..98209bd5 100644
--- a/README.md
+++ b/README.md
@@ -69,7 +69,7 @@ download the certificates. If you intend to download the scripts from a
 different location (for example from github.com) install the corresponding
 certificate chain.
 
-    /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/ISRG-Root-X2.pem" dst-path="ISRG-Root-X2.pem";
+    /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/ISRG-Root-X2.pem" dst-path="isrg-root-x2.pem";
 
 ![screenshot: download certs](README.d/01-download-certs.avif)
 
@@ -81,7 +81,7 @@ file to your MikroTik device.
 
 Then we import the certificate.
 
-    /certificate/import file-name=ISRG-Root-X2.pem passphrase="";
+    /certificate/import file-name=isrg-root-x2.pem passphrase="";
 
 Do not worry that the command is not shown - that happens because it contains
 a sensitive property, the passphrase.

From f952ea73e64c167e44ecfd2812c42a1c0b4e9429 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 19 Aug 2024 14:55:04 +0200
Subject: [PATCH 231/988] INITIAL-COMMANDS: match the certificate file name
 from Let's Encrypt website...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

... and our README. 😜
---
 INITIAL-COMMANDS.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 3f5f75ce..84a88fee 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -17,9 +17,9 @@ Initial commands
 Run the complete base installation:
 
     {
-      /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/ISRG-Root-X2.pem" dst-path="ISRG-Root-X2.pem" as-value;
+      /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/ISRG-Root-X2.pem" dst-path="isrg-root-x2.pem" as-value;
       :delay 1s;
-      /certificate/import file-name=ISRG-Root-X2.pem passphrase="";
+      /certificate/import file-name=isrg-root-x2.pem passphrase="";
       :if ([ :len [ /certificate/find where fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470" ] ] != 1) do={
         :error "Something is wrong with your certificates!";
       };

From d360cc05becf4363aef07db652e39dd1315a2875 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 17 Aug 2024 21:53:10 +0200
Subject: [PATCH 232/988] netwatch-dns: disable DoH if time not sync...

... as it is possible that time is off, DNS via DoH fails (cert invalid),
and finally syncing time fails due to failing DNS.
---
 netwatch-dns.rsc | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 9635be63..e205081f 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -16,6 +16,8 @@
 
   :global CertificateAvailable;
   :global EitherOr;
+  :global IsDNSResolving;
+  :global IsTimeSync;
   :global LogPrint;
   :global ParseKeyValueStore;
   :global ScriptLock;
@@ -67,6 +69,12 @@
   :local DohCurrent [ /ip/dns/get use-doh-server ];
   :local DohServers ({});
 
+  :if ([ :len $DohCurrent ] > 0 && [ $IsDNSResolving ] = false && [ $IsTimeSync ] = false) do={
+    $LogPrint info $ScriptName ("Time is not sync, disabling DoH: " . $DohCurrent);
+    /ip/dns/set use-doh-server="";
+    :set DohCurrent "";
+  }
+
   :foreach Host in=[ /tool/netwatch/find where comment~"\\bdoh\\b" status="up" ] do={
     :local HostVal [ /tool/netwatch/get $Host ];
     :local HostInfo [ $ParseKeyValueStore ($HostVal->"comment") ];

From f17502d3d0e54173f6c843685b4e26a3c7cac89b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 18 Aug 2024 22:10:37 +0200
Subject: [PATCH 233/988] check-routeros-update: support switching to stable
 channel...

... with a feature update in testing channel.
---
 check-routeros-update.rsc | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index d45432a5..3584a945 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -125,6 +125,15 @@
     }
 
     :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
+      :if (($Update->"channel") = "testing" && ($NumInstalled & 0xffff0000) < ($NumLatest & 0xffff0000)) do={
+        :put ("This is a feature update in testing channel. Switch to channel 'stable'? [y/N]");
+        :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
+          /system/package/update/set channel=stable;
+          $LogPrint info $ScriptName ("Switched to channel 'stable', please re-run!");
+          :error true;
+        }
+      }
+
       :put ("Do you want to install RouterOS version " . $Update->"latest-version" . "? [y/N]");
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
         $DoUpdate;

From 3e9a7ea75a29111f4601cedf966471cbf4d9c894 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 27 Aug 2024 09:38:13 +0200
Subject: [PATCH 234/988] certs: add 'DigiCert Global Root G3'...

... for quad9.net which can be used for DoH:

$CertificateAvailable "DigiCert Global Root G3";
/ip/dns/set use-doh-server=https://9.9.9.9/dns-query verify-doh-cert=yes;
---
 certs/DigiCert-Global-Root-G3.pem | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 certs/DigiCert-Global-Root-G3.pem

diff --git a/certs/DigiCert-Global-Root-G3.pem b/certs/DigiCert-Global-Root-G3.pem
new file mode 100644
index 00000000..12324dcc
--- /dev/null
+++ b/certs/DigiCert-Global-Root-G3.pem
@@ -0,0 +1,22 @@
+# Issuer: CN=DigiCert Global Root G3 O=DigiCert Inc OU=www.digicert.com
+# Subject: CN=DigiCert Global Root G3 O=DigiCert Inc OU=www.digicert.com
+# Label: "DigiCert Global Root G3"
+# Serial: 7089244469030293291760083333884364146
+# MD5 Fingerprint: f5:5d:a4:50:a5:fb:28:7e:1e:0f:0d:cc:96:57:56:ca
+# SHA1 Fingerprint: 7e:04:de:89:6a:3e:66:6d:00:e6:87:d3:3f:fa:d9:3b:e8:3d:34:9e
+# SHA256 Fingerprint: 31:ad:66:48:f8:10:41:38:c7:38:f3:9e:a4:32:01:33:39:3e:3a:18:cc:02:29:6e:f9:7c:2a:c9:ef:67:31:d0
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

From 90632f223adce7139b831fc2e6a0668431e5f26c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 27 Aug 2024 10:59:51 +0200
Subject: [PATCH 235/988] doc/netwatch-dns: 'DigiCert Global Root G3' for Quad9

---
 doc/netwatch-dns.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index ff6c29c8..54dd6c62 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -63,7 +63,7 @@ Importing a certificate automatically is possible, at least if available in
 the repository (see `certs` sub directory).
 
     /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G2" host=1.1.1.1;
-    /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root CA" host=9.9.9.9;
+    /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G3" host=9.9.9.9;
     /tool/netwatch/add comment="doh, doh-cert=GTS Root R1" host=8.8.8.8;
 
 Sometimes using just one specific (possibly internal) DNS server may be

From 48fd281c1d048bbce9dbe0f0e6940eb8f417a9f8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 27 Aug 2024 16:43:35 +0200
Subject: [PATCH 236/988] certs: drop 'DigiCert Global Root CA'

---
 certs/DigiCert-Global-Root-CA.pem | 29 -----------------------------
 1 file changed, 29 deletions(-)
 delete mode 100644 certs/DigiCert-Global-Root-CA.pem

diff --git a/certs/DigiCert-Global-Root-CA.pem b/certs/DigiCert-Global-Root-CA.pem
deleted file mode 100644
index b0f00130..00000000
--- a/certs/DigiCert-Global-Root-CA.pem
+++ /dev/null
@@ -1,29 +0,0 @@
-# Issuer: CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
-# Subject: CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
-# Label: "DigiCert Global Root CA"
-# Serial: 10944719598952040374951832963794454346
-# MD5 Fingerprint: 79:e4:a9:84:0d:7d:3a:96:d7:c0:4f:e2:43:4c:89:2e
-# SHA1 Fingerprint: a8:98:5d:3a:65:e5:e5:c4:b2:d7:d6:6d:40:c6:dd:2f:b1:9c:54:36
-# SHA256 Fingerprint: 43:48:a0:e9:44:4c:78:cb:26:5e:05:8d:5e:89:44:b4:d8:4f:96:62:bd:26:db:25:7f:89:34:a4:43:c7:01:61
------BEGIN CERTIFICATE-----
-MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
-QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
-9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
-CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
-nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
-43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
-T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
-gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
-BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
-TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
-DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
-hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
-06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
-PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
-YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
-CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
------END CERTIFICATE-----

From 917be4b42574cd66254a4559330e83bc5c2ed233 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 28 Aug 2024 17:54:13 +0200
Subject: [PATCH 237/988] fw-addr-lists: spamhaus.org requires 'GTS Root R4'
 now

Fixes: https://github.com/eworm-de/routeros-scripts/issues/78
---
 global-config.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index cdc1d5ca..2d10a9e1 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -106,9 +106,9 @@
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="Certum Trusted Network CA" };
 #    { url="https://www.spamhaus.org/drop/drop.txt";
-#      cert="Baltimore CyberTrust Root" };
+#      cert="GTS Root R4" };
 #    { url="https://www.spamhaus.org/drop/edrop.txt";
-#      cert="Baltimore CyberTrust Root" };
+#      cert="GTS Root R4" };
   };
 #  "mikrotik"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";

From f4c97559b337413fb91bec4927a3de2ac7e81d09 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 28 Aug 2024 17:56:48 +0200
Subject: [PATCH 238/988] fw-addr-lists: drop edrop.txt, which does no longer
 exist

---
 global-config.rsc | 2 --
 1 file changed, 2 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index 2d10a9e1..03e5bb4a 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -106,8 +106,6 @@
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="Certum Trusted Network CA" };
 #    { url="https://www.spamhaus.org/drop/drop.txt";
-#      cert="GTS Root R4" };
-#    { url="https://www.spamhaus.org/drop/edrop.txt";
 #      cert="GTS Root R4" };
   };
 #  "mikrotik"={

From 21fa46fdf6720cf3ec57980e29b4da9cf2e0f46d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 28 Aug 2024 17:59:44 +0200
Subject: [PATCH 239/988] certs: drop 'Baltimore CyberTrust Root'

---
 certs/Baltimore-CyberTrust-Root.pem | 28 ----------------------------
 1 file changed, 28 deletions(-)
 delete mode 100644 certs/Baltimore-CyberTrust-Root.pem

diff --git a/certs/Baltimore-CyberTrust-Root.pem b/certs/Baltimore-CyberTrust-Root.pem
deleted file mode 100644
index de8121a2..00000000
--- a/certs/Baltimore-CyberTrust-Root.pem
+++ /dev/null
@@ -1,28 +0,0 @@
-# Issuer: CN=Baltimore CyberTrust Root O=Baltimore OU=CyberTrust
-# Subject: CN=Baltimore CyberTrust Root O=Baltimore OU=CyberTrust
-# Label: "Baltimore CyberTrust Root"
-# Serial: 33554617
-# MD5 Fingerprint: ac:b6:94:a5:9c:17:e0:d7:91:52:9b:b1:97:06:a6:e4
-# SHA1 Fingerprint: d4:de:20:d0:5e:66:fc:53:fe:1a:50:88:2c:78:db:28:52:ca:e4:74
-# SHA256 Fingerprint: 16:af:57:a9:f6:76:b0:ab:12:60:95:aa:5e:ba:de:f2:2a:b3:11:19:d6:44:ac:95:cd:4b:93:db:f3:f2:6a:eb
------BEGIN CERTIFICATE-----
-MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
-RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
-VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoX
-DTI1MDUxMjIzNTkwMFowWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9y
-ZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVy
-VHJ1c3QgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKMEuyKr
-mD1X6CZymrV51Cni4eiVgLGw41uOKymaZN+hXe2wCQVt2yguzmKiYv60iNoS6zjr
-IZ3AQSsBUnuId9Mcj8e6uYi1agnnc+gRQKfRzMpijS3ljwumUNKoUMMo6vWrJYeK
-mpYcqWe4PwzV9/lSEy/CG9VwcPCPwBLKBsua4dnKM3p31vjsufFoREJIE9LAwqSu
-XmD+tqYF/LTdB1kC1FkYmGP1pWPgkAx9XbIGevOF6uvUA65ehD5f/xXtabz5OTZy
-dc93Uk3zyZAsuT3lySNTPx8kmCFcB5kpvcY67Oduhjprl3RjM71oGDHweI12v/ye
-jl0qhqdNkNwnGjkCAwEAAaNFMEMwHQYDVR0OBBYEFOWdWTCCR1jMrPoIVDaGezq1
-BE3wMBIGA1UdEwEB/wQIMAYBAf8CAQMwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3
-DQEBBQUAA4IBAQCFDF2O5G9RaEIFoN27TyclhAO992T9Ldcw46QQF+vaKSm2eT92
-9hkTI7gQCvlYpNRhcL0EYWoSihfVCr3FvDB81ukMJY2GQE/szKN+OMY3EU/t3Wgx
-jkzSswF07r51XgdIGn9w/xZchMB5hbgF/X++ZRGjD8ACtPhSNzkE1akxehi/oCr0
-Epn3o0WC4zxe9Z2etciefC7IpJ5OCBRLbf1wbWsaY71k5h+3zvDyny67G7fyUIhz
-ksLi4xaNmjICq44Y3ekQEe5+NauQrz4wlHrQMz2nZQ/1/I6eYs9HRCwBXbsdtTLS
-R9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp
------END CERTIFICATE-----

From 9737bfa46ad5b08f39ba0442061d08e974cb14c5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 2 Sep 2024 22:54:41 +0200
Subject: [PATCH 240/988] =?UTF-8?q?certs:=20add=20poor=20man's=20check=20?=
 =?UTF-8?q?=F0=9F=98=9C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 certs/Makefile | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 certs/Makefile

diff --git a/certs/Makefile b/certs/Makefile
new file mode 100644
index 00000000..2e6ac9da
--- /dev/null
+++ b/certs/Makefile
@@ -0,0 +1,31 @@
+# Makefile to check certificates
+
+DOMAINS = \
+	1.1.1.1/DigiCert-Global-Root-G2 \
+	8.8.8.8/GTS-Root-R1 \
+	9.9.9.9/DigiCert-Global-Root-G3 \
+	api.macvendors.com/GTS-Root-R4 \
+	api.mullvad.net/ISRG-Root-X1 \
+	api.telegram.org/Go-Daddy-Root-Certificate-Authority-G2 \
+	cloudflare-dns.com/DigiCert-Global-Root-G2 \
+	dns.google/GTS-Root-R1 \
+	dns.quad9.net/DigiCert-Global-Root-G3 \
+	feodotracker.abuse.ch/GlobalSign \
+	git.eworm.de/ISRG-Root-X2 \
+	ipv4.showipv6.de/ISRG-Root-X1 \
+	ipv4.tunnelbroker.net/Starfield-Root-Certificate-Authority-G2 \
+	ipv6.showipv6.de/ISRG-Root-X1 \
+	lists.blocklist.de/Certum-Trusted-Network-CA \
+	mkcert.org/ISRG-Root-X1 \
+	ntfy.sh/ISRG-Root-X1 \
+	sslbl.abuse.ch/GlobalSign \
+	upgrade.mikrotik.com/ISRG-Root-X1 \
+	www.dshield.org/ISRG-Root-X1 \
+	www.spamhaus.org/GTS-Root-R4
+
+.PHONY: $(DOMAINS)
+
+all: $(DOMAINS)
+
+$(DOMAINS):
+	curl --output /dev/null --silent --connect-timeout 5 --cacert $(notdir $@).pem https://$(dir $@)

From 09dcd51feb0d17e7c0715aa10786df169936760a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 4 Sep 2024 12:02:20 +0200
Subject: [PATCH 241/988] netwatch-dns: give warning on CRL use

---
 netwatch-dns.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index e205081f..09d471df 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -19,6 +19,7 @@
   :global IsDNSResolving;
   :global IsTimeSync;
   :global LogPrint;
+  :global LogPrintOnce;
   :global ParseKeyValueStore;
   :global ScriptLock;
 
@@ -126,6 +127,9 @@
     :if ($Data != false) do={
       :if ([ :typeof [ :find $Data "doh-check-OK" ] ] = "num") do={
         /ip/dns/set use-doh-server=($DohServer->"doh-url") verify-doh-cert=yes;
+        :if ([ /certificate/settings/get crl-use ] = true) do={
+          $LogPrintOnce warning $ScriptName ("Configured to use CRL, that can cause severe issue!");
+        }
         /ip/dns/cache/flush;
         $LogPrint info $ScriptName ("Setting DoH server: " . ($DohServer->"doh-url"));
         :error true;

From d23d05f2ea3b3d0e5c11d0780ef87566641296c7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 5 Sep 2024 22:10:11 +0200
Subject: [PATCH 242/988] fw-addr-lists: handle JSON format from spamhaus.org

Closes: https://github.com/eworm-de/routeros-scripts/issues/79
---
 fw-addr-lists.rsc | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 4930e865..4675e3a4 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -88,7 +88,12 @@
 
       :while ([ :len $Data ] != 0) do={
         :local Line [ :pick $Data 0 [ :find $Data "\n" ] ];
-        :local Address ([ :pick $Line 0 [ $FindDelim $Line ] ] . ($List->"cidr"));
+        :local Address;
+        :if ([ :pick $Line 0 1 ] = "{") do={
+          :set Address [ :tostr ([ :deserialize from=json $Line ]->"cidr") ];
+        } else={
+          :set Address ([ :pick $Line 0 [ $FindDelim $Line ] ] . ($List->"cidr"));
+        }
         :do {
           :if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$") do={
             :set ($IPv4Addresses->$Address) $TimeOut;

From fe52bd4a0a496f896439887c0943e38e8f39ce2c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 5 Sep 2024 22:58:19 +0200
Subject: [PATCH 243/988] fw-addr-lists: use lists in JSON format for
 spamhaus.org

---
 global-config.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/global-config.rsc b/global-config.rsc
index 03e5bb4a..2ed67f3c 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -105,7 +105,9 @@
       cert="ISRG Root X1" };
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="Certum Trusted Network CA" };
-#    { url="https://www.spamhaus.org/drop/drop.txt";
+#    { url="https://www.spamhaus.org/drop/drop_v4.json";
+#      cert="GTS Root R4" };
+#    { url="https://www.spamhaus.org/drop/drop_v6.json";
 #      cert="GTS Root R4" };
   };
 #  "mikrotik"={

From 41b19b045ad98c528ce9d8d84ab086fe7c54f265 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 13 Sep 2024 10:16:17 +0200
Subject: [PATCH 244/988] global-functions: $VersionToNum: support "zero"...

... to have a clean way to generate bitmasks.

    [admin@mikrotik] > :put [ $VersionToNum 0.255zero0 ]
    16711680
    [admin@mikrotik] > :put 0x00ff0000
    16711680

Once implemented everywhere the internal calculation could be
changed easily.
---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 41120fd3..9ee5312c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1485,7 +1485,7 @@
   :global CharacterReplace;
 
   :set Input [ $CharacterReplace $Input "." "," ];
-  :foreach I in={ "alpha"; "beta"; "rc" } do={
+  :foreach I in={ "zero"; "alpha"; "beta"; "rc" } do={
     :set Input [ $CharacterReplace $Input $I ("," . $I . ",") ];
   }
 
@@ -1496,6 +1496,7 @@
         :set Return ($Return + 0xff00);
         :set Multi ($Multi / 0x100);
       } else={
+        :if ($Value = "zero") do={ }
         :if ($Value = "alpha") do={ :set Return ($Return + 0x3f00); }
         :if ($Value = "beta") do={ :set Return ($Return + 0x5f00); }
         :if ($Value = "rc") do={ :set Return ($Return + 0x7f00); }

From 734a80ba82cfb76c34484415a5e810a1d29bdbfe Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 13 Sep 2024 10:29:06 +0200
Subject: [PATCH 245/988] backup-partition: use $VersionToNum to calculate
 bitmask

---
 backup-partition.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 23dd7ef8..51df4545 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -81,8 +81,9 @@
       :local Update [ /system/package/update/get ];
       :local NumInstalled [ $VersionToNum ($Update->"installed-version") ];
       :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
+      :local BitMask [ $VersionToNum "255.255zero0" ];
       :if ($BackupPartitionCopyBeforeFeatureUpdate = true && $NumLatest > 0 && \
-           ($NumInstalled & 0xffff0000) != ($NumLatest & 0xffff0000)) do={
+           ($NumInstalled & $BitMask) != ($NumLatest & $BitMask)) do={
         :if ([ $CopyTo $ScriptName $FallbackTo $FallbackToName ] = false) do={
           :set PackagesUpdateBackupFailure true;
           :error false;

From c708832b69ece50eca184b0946eebd5b3c579475 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 13 Sep 2024 10:32:40 +0200
Subject: [PATCH 246/988] check-routeros-update: use $VersionToNum to calculate
 bitmask

---
 check-routeros-update.rsc | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 3584a945..84849ead 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -62,6 +62,9 @@
 
   :local NumInstalled [ $VersionToNum ($Update->"installed-version") ];
   :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
+  :local BitMask [ $VersionToNum "255.255zero0" ];
+  :local NumInstalledFeature ($NumInstalled & $BitMask);
+  :local NumLatestFeature ($NumLatest & $BitMask);
   :local Link ("https://mikrotik.com/download/changelogs/" . $Update->"channel" . "-release-tree");
 
   :if ($NumLatest < 117505792) do={
@@ -80,7 +83,7 @@
       $DoUpdate;
     }
 
-    :if ($SafeUpdatePatch = true && ($NumInstalled & 0xffff0000) = ($NumLatest & 0xffff0000)) do={
+    :if ($SafeUpdatePatch = true && $NumInstalledFeature = $NumLatestFeature) do={
       $LogPrint info $ScriptName ("Version " . $Update->"latest-version" . " is a patch release, updating...");
       $SendNotification2 ({ origin=$ScriptName; \
         subject=([ $SymbolForNotification "sparkles" ] . "RouterOS update: " . $Update->"latest-version"); \
@@ -125,7 +128,7 @@
     }
 
     :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
-      :if (($Update->"channel") = "testing" && ($NumInstalled & 0xffff0000) < ($NumLatest & 0xffff0000)) do={
+      :if (($Update->"channel") = "testing" && $NumInstalledFeature < $NumLatestFeature) do={
         :put ("This is a feature update in testing channel. Switch to channel 'stable'? [y/N]");
         :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
           /system/package/update/set channel=stable;

From 60aa553219b289e9d3e4ef7f0bb7db471f45af69 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 25 Sep 2024 11:01:40 +0200
Subject: [PATCH 247/988] hotspot-to-wpa-cleanup: only match access-list with
 mac-address

---
 hotspot-to-wpa-cleanup.capsman.rsc  | 2 +-
 hotspot-to-wpa-cleanup.template.rsc | 2 +-
 hotspot-to-wpa-cleanup.wifi.rsc     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 29bd48d4..45ea72b0 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -50,7 +50,7 @@
   }
 
   :foreach Client in=[ /caps-man/access-list/find where comment~"^hotspot-to-wpa:" \
-      !(comment~[ /system/clock/get date ]) ] do={
+      !(comment~[ /system/clock/get date ]) mac-address ] do={
     :local ClientVal [ /caps-man/access-list/get $Client ];
     :if ([ :len [ /ip/dhcp-server/lease/find where !dynamic comment~"^hotspot-to-wpa:" \
          mac-address=($ClientVal->"mac-address") ] ] = 0) do={
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 06dd9f07..081f3d0d 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -54,7 +54,7 @@
 
   :foreach Client in=[ /caps-man/access-list/find where comment~"^hotspot-to-wpa:" \
   :foreach Client in=[ /interface/wifi/access-list/find where comment~"^hotspot-to-wpa:" \
-      !(comment~[ /system/clock/get date ]) ] do={
+      !(comment~[ /system/clock/get date ]) mac-address ] do={
     :local ClientVal [ /caps-man/access-list/get $Client ];
     :local ClientVal [ /interface/wifi/access-list/get $Client ];
     :if ([ :len [ /ip/dhcp-server/lease/find where !dynamic comment~"^hotspot-to-wpa:" \
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 7c74d109..23f773f5 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -50,7 +50,7 @@
   }
 
   :foreach Client in=[ /interface/wifi/access-list/find where comment~"^hotspot-to-wpa:" \
-      !(comment~[ /system/clock/get date ]) ] do={
+      !(comment~[ /system/clock/get date ]) mac-address ] do={
     :local ClientVal [ /interface/wifi/access-list/get $Client ];
     :if ([ :len [ /ip/dhcp-server/lease/find where !dynamic comment~"^hotspot-to-wpa:" \
          mac-address=($ClientVal->"mac-address") ] ] = 0) do={

From c2c72818de2cf35ea5b50eed3a505f86ed6be294 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 26 Sep 2024 15:24:05 +0200
Subject: [PATCH 248/988] global-functions: $CertificateDownload: add another
 check...

... that the certificate is really available.

Turns out that mkcert.org ships certificates where OU or whatever
matches - that's not what we want.
---
 global-functions.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 9ee5312c..e5471dd0 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -176,6 +176,12 @@
   :delay 1s;
   /file/remove [ find where name=$FileName ];
 
+  :if ([ :len [ /certificate/find where common-name=$CommonName ] ] = 0) do={
+    /certificate/remove [ find where name~("^" . $FileName . "_[0-9]+\$") ];
+    $LogPrint warning $0 ("Certificate with CommonName '" . $CommonName . "' still unavailable!");
+    :return false;
+  }
+
   :foreach Cert in=[ /certificate/find where name~("^" . $FileName . "_[0-9]+\$") ] do={
     $CertificateNameByCN [ /certificate/get $Cert common-name ];
   }

From 1776b8f50b173b49ca7ce3ab917de4493ae36ff6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 27 Sep 2024 17:13:32 +0200
Subject: [PATCH 249/988] backup-partition: give warning on lock in device-mode

RouterOS 7.17beta2 introduced some extra security measures, including
some to prevent downgrade attacks for the installation. Thus switching
partitions (which can hold quite old installations) is denied by
device-mode now by default. Warn about that...

https://help.mikrotik.com/docs/display/ROS/Device-mode
---
 backup-partition.rsc | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 51df4545..56738bac 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -19,6 +19,7 @@
   :global PackagesUpdateBackupFailure;
 
   :global LogPrint;
+  :global RequiredRouterOS;
   :global ScriptFromTerminal;
   :global ScriptLock;
   :global VersionToNum;
@@ -59,6 +60,12 @@
     :error false;
   }
 
+  :if ([ $RequiredRouterOS $ScriptName "7.17beta2" false ] = true && \
+       ([ /system/device-mode/get ]->"partitions") != true) do={
+    $LogPrint warning $ScriptName \
+        ("The device mode has locked switching partitions! You will need physical access!");
+  }
+
   :local FallbackToName [ /partitions/get $ActiveRunning fallback-to ];
   :local FallbackTo [ /partition/find where name=$FallbackToName !active ];
 

From f2576cf55892618c65fca6a1bff03b35a94acee8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 30 Sep 2024 16:10:55 +0200
Subject: [PATCH 250/988] packages-update: give warning on lock in device-mode

RouterOS 7.17beta2 introduced some extra security measures, including
some to prevent downgrade attacks for the installation. Detect early
and exit with message and error.

https://help.mikrotik.com/docs/display/ROS/Device-mode
---
 packages-update.rsc | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/packages-update.rsc b/packages-update.rsc
index b08a48d2..b4fab46c 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -18,6 +18,7 @@
   :global Grep;
   :global LogPrint;
   :global ParseKeyValueStore;
+  :global RequiredRouterOS;
   :global ScriptFromTerminal;
   :global ScriptLock;
   :global VersionToNum;
@@ -99,6 +100,13 @@
 
   :local DoDowngrade false;
   :if ($NumInstalled > $NumLatest) do={
+    :if ([ $RequiredRouterOS $ScriptName "7.17beta2" false ] = true && \
+         ([ /system/device-mode/get ]->"downgrade") != true) do={
+      $LogPrint error $ScriptName \
+          ("The device mode has locked downgrades! You will need physical access!");
+      :error false;
+    }
+
     :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
       :put "Latest version is older than installed one. Want to downgrade? [y/N]";
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={

From f75e701be3ceb89615bd29a2bce1404f1bf4117c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 30 Sep 2024 21:51:31 +0200
Subject: [PATCH 251/988] log-forward: get last message from log...

... not only from matched massages.
---
 log-forward.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/log-forward.rsc b/log-forward.rsc
index 5133e736..e0d8f359 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -94,9 +94,10 @@
         [ $IfThenElse ($Duplicates = true) (" Multi-repeated messages have been skipped.") ] . \
         [ $IfThenElse ($LogForwardRateLimit > 30) ("\nRate limit in action, delaying forwarding.") ] . \
         "\n" . $Messages) });
-
-    :set LogForwardLast ($MessageVal->".id");
   } else={
     :set LogForwardRateLimit [ $MAX 0 ($LogForwardRateLimit - 1) ];
   }
+
+  :local LogAll [ /log/find ];
+  :set LogForwardLast ($LogAll->([ :len $LogAll ] - 1) );
 } on-error={ }

From 5135e836b82d36e49dd34ebde7ad2aedda6f8af2 Mon Sep 17 00:00:00 2001
From: Ignacio Serrano <ignic@ignic.com>
Date: Tue, 1 Oct 2024 20:32:37 +0200
Subject: [PATCH 252/988] mod/notification-ntfy: fix ntfy overrides

---
 mod/notification-ntfy.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 661f69f0..b2bb2800 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -87,7 +87,7 @@
     :return false;
   }
 
-  :local Url ("https://" . $NtfyServer . "/" . [ $UrlEncode $NtfyTopic ]);
+  :local Url ("https://" . $Server . "/" . [ $UrlEncode $Topic ]);
   :local Headers ({ [ $FetchUserAgentStr ($Notification->"origin") ]; \
     ("Priority: " . [ $IfThenElse ($Notification->"silent") "low" "default" ]); \
     ("Title: " . "[" . $IdentityExtra . $Identity . "] " . ($Notification->"subject")) });
@@ -97,7 +97,7 @@
   }
 
   :do {
-    :if ($NtfyServer = "ntfy.sh") do={
+    :if ($Server = "ntfy.sh") do={
       :if ([ $CertificateAvailable "ISRG Root X1" ] = false) do={
         $LogPrint warning $0 ("Downloading required certificate failed.");
         :error false;

From 98e62e3eaca9d5d09b70e7ddad44c7fbe21dfbf2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 1 Oct 2024 21:42:20 +0200
Subject: [PATCH 253/988] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index 0b192fc2..dd21fa5c 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -20,6 +20,7 @@ for details!
 * [Anatoly Bubenkov](mailto:bubenkoff@gmail.com) (@bubenkoff)
 * [Ben Harris](mailto:mail@bharr.is) (@bharrisau)
 * [Daniel Ziegenberg](mailto:daniel@ziegenberg.at) (@ziegenberg)
+* [Ignacio Serrano](mailto:ignic@ignic.com) (@ignic)
 * [Michael Gisbers](mailto:michael@gisbers.de) (@mgisbers)
 * @netravnen
 * [netztrip](mailto:dave-tvg@netztrip.de) (@netztrip)

From c955c94098190847856c62e4e9b437200b19884c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 2 Oct 2024 14:02:29 +0200
Subject: [PATCH 254/988] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index dd21fa5c..ed1d6faa 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -38,6 +38,7 @@ Add yourself to the list,
 * Daniel Ziegenberg (@ziegenberg)
 * Devin Dean (@dd2594gh)
 * Evaldo Gardenal
+* Florian Estraviz
 * Giorgio Bikos
 * Harold Schoemaker
 * Hugo BV

From 85a7a16c1526acfc86ec313e8527fb616f142a57 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 9 Oct 2024 14:30:29 +0200
Subject: [PATCH 255/988] backup-partition: log the warning just once

---
 backup-partition.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 56738bac..8b4be9b4 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -19,6 +19,7 @@
   :global PackagesUpdateBackupFailure;
 
   :global LogPrint;
+  :global LogPrintOnce;
   :global RequiredRouterOS;
   :global ScriptFromTerminal;
   :global ScriptLock;
@@ -62,7 +63,7 @@
 
   :if ([ $RequiredRouterOS $ScriptName "7.17beta2" false ] = true && \
        ([ /system/device-mode/get ]->"partitions") != true) do={
-    $LogPrint warning $ScriptName \
+    $LogPrintOnce warning $ScriptName \
         ("The device mode has locked switching partitions! You will need physical access!");
   }
 

From 82e3e7a9fce024be5b93aa6adc41d6d799c05271 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 10 Oct 2024 22:20:31 +0200
Subject: [PATCH 256/988] doc/netwatch-notify: always give a host...

... as that is a required property. Any ip address is fine, it is
changed anyway.
---
 doc/netwatch-notify.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index 948cbecb..411a4d9b 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -88,7 +88,7 @@ threshould by one.
 The host address can be updated dynamically. Give extra parameter `resolve`
 with a resolvable name:
 
-    /tool/netwatch/add comment="notify, name=example.com, resolve=example.com";
+    /tool/netwatch/add comment="notify, name=example.com, resolve=example.com" host=0.0;
 
 This supports multiple A or AAAA records for a name just fine, even a CNAME
 to those. An update happens only if no more record with the configured host
@@ -125,7 +125,7 @@ included verbatim into the notification.
 It is possible to add a link in notification, that is added below the
 formatted notification text.
 
-    /tool/netwatch/add comment="notify, name=example.com, resolve=example.com, link=https://example.com/";
+    /tool/netwatch/add comment="notify, name=example.com, resolve=example.com, link=https://example.com/" host=0.0;
 
 Tips & Tricks
 -------------

From f7f50a9d45980e94041c9f48f017778b8a1d279c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 10 Oct 2024 22:24:56 +0200
Subject: [PATCH 257/988] doc/netwatch-notify: give an extra example for
 resolving AAAA records

---
 doc/netwatch-notify.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index 411a4d9b..9fa0e262 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -90,10 +90,15 @@ with a resolvable name:
 
     /tool/netwatch/add comment="notify, name=example.com, resolve=example.com" host=0.0;
 
-This supports multiple A or AAAA records for a name just fine, even a CNAME
+This supports multiple A records for a name just fine, even a CNAME
 to those. An update happens only if no more record with the configured host
 address is found.
 
+The address family is preserved, so if you want AAAA records (for IPv6)
+use this:
+
+    /tool/netwatch/add comment="notify, name=example.com, resolve=example.com" host=::;
+
 ### No notification on host down
 
 Also suppressing the notification on host down is possible with parameter

From 71c58c6afb27fc66356f9d5d3d41c5af7ab2f9d7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 10 Oct 2024 22:32:46 +0200
Subject: [PATCH 258/988] doc/netwatch-notify: fix typo(s)

---
 doc/netwatch-notify.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index 9fa0e262..81adfe9d 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -66,9 +66,9 @@ notification is sent.
 Getting the escaping right may be troublesome. Please consider adding a
 script in `/system/script`, then running that from hook.
 
-### Count threshould
+### Count threshold
 
-The count threshould (default is 5 checks) is configurable as well:
+The count threshold (default is 5 checks) is configurable as well:
 
     /tool/netwatch/add comment="notify, name=example.com, count=10" host=104.18.144.11;
 
@@ -81,7 +81,7 @@ suppress notification if the parent host is down:
     /tool/netwatch/add comment="notify, name=example.com, parent=gateway" host=93.184.216.34;
 
 Note that every configured parent in a chain increases the check count
-threshould by one.
+threshold by one.
 
 ### Update from DNS
 

From 435f70999c0fc28aaf804c00552d0d54dcf10806 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 22 Oct 2024 19:32:19 +0200
Subject: [PATCH 259/988] backup-partition: drop warning on lock in device-mode

... as switching partitions is possible again in RouterOS 7.17beta4.
---
 backup-partition.rsc | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 8b4be9b4..51df4545 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -19,8 +19,6 @@
   :global PackagesUpdateBackupFailure;
 
   :global LogPrint;
-  :global LogPrintOnce;
-  :global RequiredRouterOS;
   :global ScriptFromTerminal;
   :global ScriptLock;
   :global VersionToNum;
@@ -61,12 +59,6 @@
     :error false;
   }
 
-  :if ([ $RequiredRouterOS $ScriptName "7.17beta2" false ] = true && \
-       ([ /system/device-mode/get ]->"partitions") != true) do={
-    $LogPrintOnce warning $ScriptName \
-        ("The device mode has locked switching partitions! You will need physical access!");
-  }
-
   :local FallbackToName [ /partitions/get $ActiveRunning fallback-to ];
   :local FallbackTo [ /partition/find where name=$FallbackToName !active ];
 

From 07c95763775cb5fdef056ef6ba7ff3ac1399dbaf Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 22 Oct 2024 19:38:20 +0200
Subject: [PATCH 260/988] packages-update: check for explicit state...

... as all device-mode properties are given since RouterOS 7.14beta4.

Let's assume we do not have to care about RouterOS 7.14beta2 any more...
As older versions will not match the check we can now merge right away.
---
 packages-update.rsc | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index b4fab46c..c2f0ba6d 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -18,7 +18,6 @@
   :global Grep;
   :global LogPrint;
   :global ParseKeyValueStore;
-  :global RequiredRouterOS;
   :global ScriptFromTerminal;
   :global ScriptLock;
   :global VersionToNum;
@@ -100,8 +99,7 @@
 
   :local DoDowngrade false;
   :if ($NumInstalled > $NumLatest) do={
-    :if ([ $RequiredRouterOS $ScriptName "7.17beta2" false ] = true && \
-         ([ /system/device-mode/get ]->"downgrade") != true) do={
+    :if (([ /system/device-mode/get ]->"downgrade") = false) do={
       $LogPrint error $ScriptName \
           ("The device mode has locked downgrades! You will need physical access!");
       :error false;

From 7229c756af86df3a670ca79138e6e35342951461 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 22 Oct 2024 23:19:16 +0200
Subject: [PATCH 261/988] fw-addr-lists: spamhaus.org requires 'ISRG Root X1'
 now

---
 certs/Makefile    | 2 +-
 global-config.rsc | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/certs/Makefile b/certs/Makefile
index 2e6ac9da..09e7a204 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -21,7 +21,7 @@ DOMAINS = \
 	sslbl.abuse.ch/GlobalSign \
 	upgrade.mikrotik.com/ISRG-Root-X1 \
 	www.dshield.org/ISRG-Root-X1 \
-	www.spamhaus.org/GTS-Root-R4
+	www.spamhaus.org/ISRG-Root-X1
 
 .PHONY: $(DOMAINS)
 
diff --git a/global-config.rsc b/global-config.rsc
index 2ed67f3c..c4e04b5e 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -106,9 +106,9 @@
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="Certum Trusted Network CA" };
 #    { url="https://www.spamhaus.org/drop/drop_v4.json";
-#      cert="GTS Root R4" };
+#      cert="ISRG Root X1" };
 #    { url="https://www.spamhaus.org/drop/drop_v6.json";
-#      cert="GTS Root R4" };
+#      cert="ISRG Root X1" };
   };
 #  "mikrotik"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";

From d022c876514107bd345a17a0c01896947a83b45f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 22 Oct 2024 21:38:38 +0200
Subject: [PATCH 262/988] ipv6-update: ignore if address was acquired

https://github.com/eworm-de/routeros-scripts/issues/85
---
 ipv6-update.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index 0577bdcb..47bf3ded 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -18,12 +18,18 @@
   :global ParseKeyValueStore;
   :global ScriptLock;
 
+  :local NaAddress $"na-address";
   :local PdPrefix $"pd-prefix";
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
     :error false;
   }
 
+  :if ([ :typeof $NaAddress ] = "str") do={
+    $LogPrint info $ScriptName ("An address (" . $NaAddress . ") was acquired, not a prefix. Ignoring.");
+    :error false;
+  }
+
   :if ([ :typeof $PdPrefix ] = "nothing") do={
     $LogPrint error $ScriptName ("This script is supposed to run from ipv6 dhcp-client.");
     :error false;

From e803f8b3c0956e8b9f3992433d0a3caf9cb4c899 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 22 Oct 2024 22:35:14 +0200
Subject: [PATCH 263/988] ipv6-update: create a dynamic address-list entry only

This should make sure that the script runs once after reboot, even if
the prefix does not change.

An existing static entry needs to be removed to make this work!

https://github.com/eworm-de/routeros-scripts/issues/85
---
 doc/ipv6-update.md | 12 ++++++++----
 ipv6-update.rsc    |  4 ++--
 2 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/doc/ipv6-update.md b/doc/ipv6-update.md
index 88600c55..42f0fe4c 100644
--- a/doc/ipv6-update.md
+++ b/doc/ipv6-update.md
@@ -45,13 +45,17 @@ Installing [ppp-on-up](ppp-on-up.md) may solve this.
 Configuration
 -------------
 
-An address list entry is updated with current prefix and can be used in
-firewall rules, comment has to be "`ipv6-pool-`" and actual pool name:
+As an address-list entry is mandatory a dynamic one is created automatically.
+It is updated with current prefix and can be used in firewall rules.
+
+Alternatively a static address-list entry can be used, where comment has to
+be "`ipv6-pool-`" and actual pool name. Use what ever list is desired, and
+create it with:
 
     /ipv6/firewall/address-list/add address=2003:cf:2f0f:de00::/56 comment=ipv6-pool-isp list=extern;
 
-As this entry is mandatory it is created automatically if it does not exist,
-with the comment also set for list.
+If the dynamic entry exists already you need to remove it before creating
+the static one..
 
 Address list entries for specific interfaces can be updated as well. The
 interface needs to get its address from pool `isp` and the address list entry
diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index 47bf3ded..ccc0eb95 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -37,8 +37,8 @@
 
   :local Pool [ /ipv6/pool/get [ find where prefix=$PdPrefix ] name ];
   :if ([ :len [ /ipv6/firewall/address-list/find where comment=("ipv6-pool-" . $Pool) ] ] = 0) do={
-    /ipv6/firewall/address-list/add list=("ipv6-pool-" . $Pool) address=:: comment=("ipv6-pool-" . $Pool);
-    $LogPrint warning $ScriptName ("Added ipv6 address list entry for ipv6-pool-" . $Pool);
+    /ipv6/firewall/address-list/add list=("ipv6-pool-" . $Pool) address=:: comment=("ipv6-pool-" . $Pool) dynamic=yes;
+    $LogPrint warning $ScriptName ("Added dynamic ipv6 address list entry for ipv6-pool-" . $Pool);
   }
   :local AddrList [ /ipv6/firewall/address-list/find where comment=("ipv6-pool-" . $Pool) ];
   :local OldPrefix [ /ipv6/firewall/address-list/get ($AddrList->0) address ];

From 3169270dbda239b860ee7b2989d2bfdf7b5b78c7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 28 Oct 2024 22:31:58 +0100
Subject: [PATCH 264/988] doc/mod/notification-matrix: better document
 certificate import

---
 doc/mod/notification-matrix.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index c96a7191..dd46404c 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -46,6 +46,13 @@ The Matrix server is connected via encrypted https, and certificate
 verification is applied. So make sure you have the certificate chain for
 your server in device's certificate store.
 
+The example below is for `matrix.org`, which uses a trust chain from *Google
+Trust Services*. Run this to import the required certificate:
+
+    $CertificateAvailable "GTS Root R4";
+
+Replace the CA certificate name with what ever is needed for your server.
+
 ### From other device
 
 If you have setup your Matrix *notification account* before just reuse that.

From a6584170c31dc9773840adbc1c7b9721544c764e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 28 Oct 2024 22:33:46 +0100
Subject: [PATCH 265/988] certs: check cert for matrix.org

---
 certs/Makefile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/certs/Makefile b/certs/Makefile
index 09e7a204..9ce8dd42 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -16,6 +16,7 @@ DOMAINS = \
 	ipv4.tunnelbroker.net/Starfield-Root-Certificate-Authority-G2 \
 	ipv6.showipv6.de/ISRG-Root-X1 \
 	lists.blocklist.de/Certum-Trusted-Network-CA \
+	matrix.org/GTS-Root-R4 \
 	mkcert.org/ISRG-Root-X1 \
 	ntfy.sh/ISRG-Root-X1 \
 	sslbl.abuse.ch/GlobalSign \

From 3506f710710332186caecfcd64d9a6d8f57f3180 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 30 Oct 2024 21:52:50 +0100
Subject: [PATCH 266/988] global-functions: $CertificateAvailable: fail without
 CommonName

---
 global-functions.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index e5471dd0..47a69c47 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -107,6 +107,11 @@
       "is configured to download certificate CRLs to system!");
   }
 
+  :if ([ :len $CommonName ] = 0) do={
+    $LogPrint warning $0 ("No CommonName given!");
+    :return false;
+  }
+
   :if ([ :len [ /certificate/find where common-name=$CommonName ] ] = 0) do={
     $LogPrint info $0 ("Certificate with CommonName '" . $CommonName . "' not available.");
     :if ([ $CertificateDownload $CommonName ] = false) do={

From 3c0852d6b829d8babc3a57002991e35f7bd31d0a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 30 Oct 2024 17:46:03 +0100
Subject: [PATCH 267/988] introduce CERTIFICATES, guide to find root
 certificate

---
 CERTIFICATES.d/01-dialog-A.avif    | Bin 0 -> 29972 bytes
 CERTIFICATES.d/02-dialog-B.avif    | Bin 0 -> 28821 bytes
 CERTIFICATES.d/03-window.avif      | Bin 0 -> 48111 bytes
 CERTIFICATES.d/04-certificate.avif | Bin 0 -> 22386 bytes
 CERTIFICATES.md                    |  74 +++++++++++++++++++++++++++++
 5 files changed, 74 insertions(+)
 create mode 100644 CERTIFICATES.d/01-dialog-A.avif
 create mode 100644 CERTIFICATES.d/02-dialog-B.avif
 create mode 100644 CERTIFICATES.d/03-window.avif
 create mode 100644 CERTIFICATES.d/04-certificate.avif
 create mode 100644 CERTIFICATES.md

diff --git a/CERTIFICATES.d/01-dialog-A.avif b/CERTIFICATES.d/01-dialog-A.avif
new file mode 100644
index 0000000000000000000000000000000000000000..2fc3c9bdd9e2e846b90814f7d1cb6fc130c498f4
GIT binary patch
literal 29972
zcmeFYbx>r>(l6T3xVt;d;O-3WGPt`lxVsECxWnM?4uiY9yEC}EyIf|U@0`8wi!b7S
z??$};UUgJeR%KSM{AI4SD!ZZ^000n~IJ(*DJDZsRKFXio%FKk(%1qxxT7Xdi008N>
zGIrGe!}}-{rbd?b{~`eZTQft)f75?@OEZIit3j|ebF})42lCN!nOWKx{uv1a06@T>
znUDG@6#$TR1AzW(M0)TsS@XgDiwAN901&@@(3)mu)_>Xc7YFBKVEkvnpY{6A42(iH
zmNtKx^Ec;%{f8r9X=|$gM-ux#Yd&;~xSE;#sec$0X7<MaQVjqg=sUSuewYICmvIP&
zMh=F58T!Z69y42e+mAlo%+}E6qenAyur>bZKMLs1hb6Zk1d^?ptJ$9!AQTkTM+c|x
z%qZkb_GbowYG`9=Z*6Gl`k@;h0O9j7_2Hd=iG%zt42JhdnB&6`p+AI^y)~DWt?{?N
z8bK~YGecW02R8>tV=D))4;eE{GktqEF8zO_BrvnJ`U~#I(hnG5AfWzW08lUx@IXia
zz=6riNdK=$Nk~uu{#^3IgpUdhcmsg_h4>H7k5zxse;SbgqRT&~K|z3jIp61l27b_g
zWFh|4f6(avMgJ8((0}O({Ez|tFWQ0lWAIU+{`$NxzHb1KBt<1eKQ8nqmLJXg3P1<|
z1pxsG0S*NT2?-4i1p|i$4+jeihmC@Yh=z|tNPv%nhet$4M@~dSLyCt-!A?oTz{tYF
zLP*ZZ!@<N&$IQa?M+pctG&CG692Pu0785ZZG1LF+^4<wRh60p>e1IhZfFgqckwM;j
z0fZlRf`j~3{srY@3<?AThk%5FhJpPMs6+bWDIh2q5F8u~?1Ss|!3TgLgQE~L3P7OB
z>qC;*p)vW!WJ8e(R&}8(OkI#M8`%3n!(d=yVdH%IOin>b#lp(Q&cVqgBrGB-CN3eV
zsHCi-s-~`CXk={i&D6}?!O_Xt#nsK-|3^SzP;f|SY~0WIgv6xel$_kW{DQ)w;*#o`
z+PeCN#-`@(p5DIxfx)5S>6zKN`Gv)$<;|__o!!0tgTtfCtLvNFyZeX7r$4y<;QV*_
z7qb5cF60kfpkQD?Fvvf+KtNso07nJ`CuW2|5s-(}w?idi@`XYZjLEL*f+l5FxIj0s
zpMt?4W7+(4`3Krx$o^-*{Qj?y{Ri0JxRwEMK#-5%0g(ZGfa}F=S=#R+2VWHH$?q|*
zN*NFD3s~O)LX8J}yK&wDU!J+{-#pLw&S$&>0O~atr+v4X%el{7#p83%Aejxo4sI{=
zcYtqg3$1G3lT-X@^N0;up*sOkA8R|xmI~JFmfBQ5+{}2C&n|_MiPxYf8?X^Ks}kiq
za>z?RQ(38(LG8NxWwm?2T0YQ~AWsgmy1~yAufb%|)p;ph89O*C08SkLRcV^tpBt$<
zX+`uGLK&K0kpJOram9y`aI3!u96nuMldgn|zMOJmKYE}lNNn-Jj!MLCV#UQJ=~h<C
z)WWZ1OL%_T5bea_Nsyod3HB2|jq1+e#@{dr7iaMR4X6)<v6WUQAh~Fc73l_*AV=m?
zTrboR+9HI-YR%;~Vd|=Xqz{iwZ_)d%1XW1?;{_Jxi$tzEAguB2VE^h^5fRLlrt=ye
zVKB#f)w5=${OcRhMQwo8DzzT+sEj?&!(N^)nyZzeYv1yz=NSY!=imUhyBs*;gRm!T
zUC7i4uL_K4x47Y?ms$CyEJzXLGfD4mvTaqYeJ%|j0O5OJMJAG~Qk5Z#Ivp8blXoi@
zLAogc@x?Fc9M`*@dhWy{_l)!_hvT?oemDZ~3o~QglP^eP=_QJBI-Hk$!ZVJtn6Oq{
z(_dV1mdF^hw(V#T_=t6u-T~0MK`ueh24^}!!=6#otu9+m-NzZUm>P}_vY;zu#`73}
zUo<jIJbeH=RCNjKnA-VW43X7<L~Lx*C#5f_&tZ=$;gjZx&?r(ij$5CWlOrM_B;M)}
z@0`wG9#_5B3*G@RfZ{5?#*TR0Kf=l#C&%lL*NyLh4(T^E?{7NqfQj^h*C(5cESS_k
z0`h;!YQBxPy#q48L_OcEZ;JhYtxR&>y6Q2)T2K$akE82wO!_t5;~l{3LU@1J(Vbz%
z`Z++~!lMQyRvCtEQdR*RAitQosyiGJ^4j-Ovi?uo_-ZP>_s6&2UfCbyz>t?&s-#E+
zu}J_;09)ujMgtYSY!I>yIF)cl^Ms2rIF*{<eGnrExE;iz?Tegwe3@~TSX}kF(4XW(
z<o*wG;9puk*ED&!#jqDJH-OnQFI*O#ovcBLr@;G8#;>-CRZf?^1HS2c|Cjd)wO5WD
zy1!0pa|jc=km4aq0-lnz#f)?FN0+X)10*_!4ybyW$u7?Y?Pj7yM9hWMI$>hrB%w%`
z3*gWIXg(YtQL<cM>{R09j^-d}RapI6KR-SGxP*df>C}mxPlf_5Xg9c>PpKyWE&;jh
zL%s4_igtEV%F^I!3Xd<TjL`Y4bH~ue7LxlLM7a_}AAECsAihspdg(%)M8|8wOA%=P
zX-}uBL4paf(l;Ra>>YYsiFpHq*_P>Q@0NC?J(ewkt+bUi%s7;ubH-u`PGD@}{M0fe
zV}(O{`@oASFk`Y+qR5=RYJep&>(?;T#zwgRq!(}2f@pINv*CR%05xN2;z1R?)U5i!
zK`nHPx`|;BlyRI1dK)a}MR{3Gm=&LGZMQY>+7Qk*8GC>vUxIB*FvZ^PC}^Nqght0e
zyw82V5NqP9prRmrQ^0OWK^BXY^G&oY70wSaenK~H1ud*FfGmohW+j9=!^?dRLymyB
z=95_Z=RH8tvc16hO)=@b)lQ6@1QCrmSTQilz2P+j3W&4;=UsX#^Nf5O_V$nk_w3~i
zn>3Q0=+^`8MQFyiaQHCiTU4AR%sn=6vx9i7SneYT6Z|tWDGKWyz{xT<ql}#_%wNxZ
z<t_(Ct`N+i;sQSaMzGD|uN3TiJv5wf;QkG}RCF+-fVrP{7j)1++7R+}7*N4V5&GpZ
z53GxGBUFNwV_W-VqJiieWQSzU9jPBP0Rj`70&C#y@|wKXS^xOs7=XVyl<hpZONB~c
zd*Ovjw1pZh)~}Z&q2K*7#e30h;;h<jeB%1ZtbZ&S21BrnL3Az0hiYkE%Au8s#n^j!
z+>P`JN4yRr!8Sw77cV+0Z6~q`U-hz-aS^Lp{wM0}M&_~nK)x8<Ig16#@Z;(xCnx9r
zWfna6uE1T<8M&0Enf0f^NHV%b><zdSxoRJXo$ckg@9H^DL;W%k0+25$fWrJ^WOFN~
zJS$w`lOF^R9IRr!85B`Hfq=VMEo>pe1Q9I&=kvfjp!`V0e0f=8$>y20G0JU3&*_f~
zM^3qV6tBMjHiVyu-4bs-@VC^T48LJXe?o^udp!-aYm6m}1_e@Z@ZQSI$YU!0xC*5X
zGF`F#;ul>Wv$%8f4!Bhwdk35}?8=E)fiY3%Sz{~Z?8MdL83APRA$PyVSf5Rgv$~-N
zlM_;mF<thiNcV(qW*IQQovK+?Fbt}BRG7CtgA`~3@(@2gd*A><r4AfV(dqW}ss>PE
zWv5&FpSQ{00oDv=cgS4dK=KU7oHOWZpI!X=+OJBsczWIKv=W2LYFF@?UMe!d7NUs6
zNBW|tDwq@AP+Od3XUZwRP*)W-eIeOPz67ezqK-a)O8UAHZ{SuQaG6%MF@eVK(p7=k
zr%{*Q5mH`Wn}kAXL#)dJ^^$kZBx?8Q{>D1?kiR#xjI}@K*BUAj-mgk1<Az36n^WgP
ztB`u&1(J8n*4+B(bQPt;6*ygM(cccO&3&H|n?U1>S-j23`rEa8ZOdYerO(l7>PO5D
z!2UVcmO+5fo)f~|M~3p?j+v`D;vKLs@UW1sBT=I5>b{51cE$0{G$(TH6t78QYctwE
z#z%m2Wn9)1dD7KcjJ;R9x(b;QkzDsS(j5W9A^aO3J&yxFKKfW5rd_Q=Kfaot9}`re
zre>d+b+n)_sX%}n1E3^G`3D~U5)ZHZ#Ie+CF=p;NV4d{E6!aBc=vjeY>>bc9_Au>j
zE^_b=xF386-~bBk49n9c3hLV;^j1F4#gPSmalY%H^0Ql5%jC(ZA@Rk(u}cW22`}~2
z#Ea<~V72&<mZ^VePhEcSKRH2p1EITJmIP(n-<!a<o4I(AKXtlGlDKPRz>Ch(1AlC5
z-l!y>u6PIheR;k*k{j>m9q$N$O6-D$g;L*%!KM*yG(#B!2e+5EOda|O&Pm`r7P%ZW
zElai%$TcWr<<}d?j5?41){OL70%9YQ>9cueAIPNCs;etmytG%YDcXi$9P+F4(|K7&
z=Uot7zA$d5k30Eu#XsEew;h7Njv*D)rAMjFVwxG4#P7C4=Sm2dW8C>(ulV|-PQ}{@
z-yR9K`7sav+u5T}?|`U=cR+>3%W}y-fmXNv=6iL}-J1nrMU&?T|5H_F`F3zWo=Pp<
zN1PhvI>bka-`)$DZ=yb&nK-LM7909x!jQdssLQQ2{FmBS+6A$bV#M()sBu1ARTIZL
z`P-?g%@5y?vAdKaI^tbJJK;>TgA<9Hw?8(z0oJ~-N*Id-O}}0$rrGuRjllC>^NZ2Q
zyZPg$c%Pn~%+5<y`qQY8TCk=BiqZMbZS##-uJHYi!s(_|$G~NgMg>W)ei<<^1lOC-
zb(k8AW>Vh(D=n^`2)K~De7YJNYDH(sg$qS%(k%s%_nVQK@Nugw9Mojy0{DGSyq`xt
z<yZ*@@=r7xox-(op3dHPr#WafbWf|TmBO)zhuzmK@NIZ=9kmK%NtbDBNTW~0?TC@!
zp+K)*Hb7=R?)!ZStW<=jGdEk?la!Q7wsaV-f6`t^F_Op&MYY2nK?xTh-XYTCAVOiX
z>$#GVmfDn{CtElJo2s9aKp#{ni3%QHMOhl(9_08Ui?_4da-q9?THfIW=Yk|mYJ!{~
zF)M7S>@+y+cV>4}ssR~v#-dq0v-X<T9McGzyy;$HD+`&?*m+yw`?Hd^Fva#V9#_d~
zs2`W}hSx9lXjo#8Nz85+CEHao#y<m!6nlbC;HF}@MC(XpzQ#?F5sb**ZW7h^&8r9)
z`!<q^XO6m$wVS%Yx0a7%xl#P==#SXA?K0Mh#c5;t>eX10`fNQ4jQcDUJh&)>74ADw
z2V1V*)*~1`szf=64QWSYc$I~qcj!WB;zwL0-OM1wNt^gsGcooc_hdX0sC$adPsQKA
z;V{AZ`{w3_x)5hKB!l9|kH_qK25hiE*r?H|&kcsCOtlg5F}WOq-}Q$Gv$NomX7eNi
z!q5RI9y6sf($2$Vt0&t(!K`+yIlw|=wN=(ovGg9IeGt}|T)Z#IGxGsP@*3x*8hO-|
zhJj=tkrMb~3mHG*H5NN-jPEd)?mafrz9(hDg;JZ<;To$Lk`I?u$YybL@urJugdbxV
zkWxBBLE+YC<ZZ}7Nb9d3D=Z#KV=I})3sAZ8$$0~{(^A^f<hZB5ln@hF2Zd7_J_5X{
z`sTN%Ss97blZ_+futAZO*r_Mx3q0rVT}aHe+RrxOO1UYi{Lp6^;27L)3+Gl~k1cq(
z*6@ah@LUnL<05&R#!NNV1>9PO44k()6}WCnX!f_mO9vf#@B;8l-txV8(yxMZ;^%U;
z9`*3-*XC-JGoW@`?T=$gb@u0qfV}fhN3JeId%{co^YV{3#cxx5FSmTrAL)9--52l2
z{il=?oY8Ruqy_{<P9A>ph2<n<ujUQ6pnY5fUMDT~8T3?_N^=IST1GW(Nnij9xON_%
z!_4ZNa!$jtGtf=p8w~>p4>V-<-K*J~mk&+5;+YDRSkwNz5B1?w`tR8+DYzIq{>RRJ
zjtTwaCzXuscL32!<<r(XU~ukRMmMx`yw$OPzw6Dpf-IG6?r(A5?xZx&S646vP~38o
z35}`K)5_d$!6fzQ!`D%US~u&kt$Z{iRBbz7vp}llC%ptJ+9%$)v;KNFl|ar}k;cTN
zH&7D26qXAg3VNe_O~h)O8l>-zKqhsaKYIsQ+>U%0uw-WVAicSxtdjCNi?^At)8V(E
z#+ph3f`Wo*TaXD+XkkYYN&YF)u1~OMTG!aC`_A@6VVavh{~$KmGAG7}sMsVr&Hr?|
z-ZZB!TuC{nEL4IPNy+A|ov%NyX#LgEJAyG*S*kckbcu}kipd^avm}u%g4;LVXB%%4
z!jo$+(T*_`6(}jY3dfED;SgEqpY}YLS-XPx=p;L+{KXqiV|i##0EhH^J$=-zOXu~M
zEu?^|cTL{g(<IRI*|PYVYF9?}<Djux!i?_qF4V;j>t@`2Hgjp(+spKAJns3JANnrL
znr})m+|YL=UkYqenxvmd-uLQ)qbM?MN3R;mTuPenq@s}u-NA<fbkYwwTsRFyY?xz0
z1H6@(4ayM4JIHk4t2b3_C_q1uG_5~~2pEsIm14EQqaXeb=oFjJ&+)<158r3Z9vXTS
zBcG2O48yvL0|U7ivyT6S27<Yig-;w+z<Y2gt0X)=r#z9>#}x{o`o|WMU$Q&A)(AEF
z)!cQU_?894Af+k?gDMMylYDl@v;Q5C!SvnYjm7OFt>89#S$Hu8c_8ph1WsprMA3j=
za`|Vt-b_^1sc^NG#A0nkW>sH4O@f~wN>&zm53(J<HFjLF;^E}i^`??q4G`fmrF~m~
z$ot2h1fX4-?_W1Eeg`<WLE)EX&ep<~3)=2j!t$j-DD8u75Kh!NI(uL4LVoOPyNYs<
zVBD}IJ-emo8vs?)egrQrkMFEa1!kCBj>FwV^6IG|KF__G$J+2{Ac=NH_ox!YA+wEg
zE9!22!j4H-;&s#uSd>?Bs~$Hmr6!?(fiM|U6A2UyFyxl_9iuc4xM**fHd1Ml?LjB&
zQ9L8%5(?0uM3<P+cYp_<o4dQ>q82)l7zLTFXWv$ZJU{jb`q3y>>uB1pdg4u=__6Jv
zVA-ITP;qIk95{I70SDPQ|HQDi+ebG0XCbkIGH<)V+%N@@Tf`ZWp7XeWCr_=Sf3@}0
z*FQnV>sT}tP|$6k2bL^>hfH$$Rs3wOy5AXl9G0T=Mh=`D6Yd9<WZsS5k)8abs&CDn
zj99i&ISvJA3T%J~TpS}1JUnco4UP^bx|k}>*2O=xNd#bA%N63JPg4S6pH+c-{0^AU
z&YqPjg*KLJ8un|nsq`MMqsW3=r+WuHPdrvW%xq~Eg&1PH@JKOy<ZB%w0Of1zcfkI~
zIfBrO>EERJ92$tEyaQ8!DFcKo91qm(eOa>S7aQ&|mISD2&Q(npvK>NQImAtEd^C^<
zivnB;pompNv<#N>0KQj%POFI((?K&Dui}L`PlRU4a?p#vb;ohoJAjlQvF0PCq2N1C
zc?VF9UYgX<2encbA6@ju4t)bk7VU#nEpFAGyaTp}5uf%thEu)uEs7V%j6Gl`te8$>
z*$;XqCn3?lT|(@cN*1IgD%RE{iJSNu1tMh_Zu(Mnwoeuo<MZ!jWFmk6jcmm%jq(_a
z)?ijhfrTq?Th?PnTBPN0e5(CvAdp3>iYQYipf?s<4ezSgiu@9fQ0FGMM}uNkG>c^s
zeDaV;i?F4pP_|`YIuMe+;6<o8xz@v?96ROcY<_KPXSrsuil+C6{*~i4Z7f^lX=utw
ze@a5dvXRQNmWovo+4R7t(KUmUD8NOQ6M2-iSLyfl?iBRgmA3X&I4f&FaE0h30{`(O
zfq&Mig4E_1fd{MyHVuh|h5c8`iL>jpjaz(aL|ZY&Z`-AZJ2T%}szXO)TaXKv)pdl;
z!hRa9b~r?{B@nW0YH%%toZWaM3t2gUIX`J-DCF<Nw3NkuL6WP!#3rO;_u5*UEAnK_
z!7k5#8*PBML=ptulq3J$c{pGr8GGFGBz^nhvY>)A=7390-8hadqqLn(bi-2wOn(Rb
zSbNgc=Gs~jKq)A;)vtoMpmbV1!+z6^J9FHx{2rfbb_ro2h5h^Hu!6MVS$JmT(;`hw
z{z$JaDEuO9G#}i3MgMw_25a6SPkSbuf*55o%nrCc)F3`2+<J1^{RMCM)2Pds6?Q1c
zlFDlFN?RTi=J61XLnxr%hTzCq<>}}BvhZhWEBTWI@qHUQjyWJ^d_8_EL1VuR0$0Wr
zJBn~DB^U!3l09cxSSF0AYLxvwjwPLSrsv~08OO2&_CBfq@mf7HI<h<(RZ%A}3k^^!
zF9JaOKU8#0xpzRc)xxWt_m274KhtS|SLTbGz(;Dm@TkHbL4U?F0i&b6qJ`@wp9`wj
zQV%5Yv%C3RZ~33Qwz^fbL?Y+G;OvbeJAQi+bQD^sY0eFJ%uird?Ao9d-nU~ht?AEF
zg+GCp8V~5XfM9YR*iFf`+s3!1ebWtvOH~dAW!cAv-0strB|NH;Bngt5S{B4RWvhT*
z&W~i+=b=(>HLK)5sLVT1a|1K)#^~RE2Y}|Km>(32^ez1$pq<CJTDmoX**NFqS6%-&
z?6{rFzmzF*OcxX?Wk9ZLL_N{{9cYVnb3=ZWKiz6kth3HjR*%EG@#F0ba>GvmGShIn
z-g}d1)|Vj+o*i)(j6*-8!@W^!j&fPLg`h=eEwKr#@^F1}*XBjLxZi5{xJJ`0Rtj6;
za->@il0&{0W3cO{1m$5uLtHzq5AMt-wp{}*%@*?NT>E!M150yyTX}zaA=U7v%wSX3
zL`R)7q5j7^AybX-e6gZL*-)7sb+la2QA6R#R^B!6HAmqo41%YD;w??VoR?&lboyrh
zZQ9jyrC5FkSHQMNvO=85Xye;j8{|p-JK(yT{&_=gev%2y)Q|!}Fdl2ne)A%pQd&~c
zMwaiIb5?`f<hq}$AtR6wnYFpCdSaJ%2qrEw&Q?AyqVNs;R4x<im<pGd%9;rTnfTnt
z%T|or-HZ8@??3kCp0IgeA49%Aqp!(tsS>a(=!NL;p|Ff<n(>E3^IE%3WW5|`UAzNA
zZ>c9x%v1)HV_ggFKZS&{U&KYC*=4*Q&wTGO`#AUf<-J}dE2ZhW$RvRB>p&U6Iwe!4
z4~dCelTnU6ZZ4@Jx$OBWiyYP8JUd@C=qWk%RR|k7SBvs@05Iwupo&j9(2vv20l!s1
zxd;BqKxn|3V14suq7D~V(B4Y#<HTczQQ{7l@A20E?KO0t3z2lDRku{4Sb*?uWi^*N
zQ8sRulpyR()MJ~Y&oQ?bvyl8*z;CxIjbPQeVnbb{cz8t+u_#=zeGKyDBI@k{y(_p|
zsg&1r*35a~#&j)Rtxvr)LvxD{{TQQR*;DR_9!A38GgY?e{WYEw>6C~;&$hOKylv$c
zwt?%SCD~^zz5R$b*W2^ywyM*tXo^^<Rf^74pRMHo7<fbUXeOFESJ5`Eig}86o_pZh
z@$#v8Bg*^b6S?(9R&ZR}_KU~%I(`B@wuRsonl5tfMm-+XEJ(DB7~VGFa9ifTV}h2`
zKZzHn2KicpwlQmz3KL@=7V6xz$K;x-C`SF-*aMr{Sa{n<bjem252-^+4(Cjd@Ak?!
zfqjcut?50{s(as=dy=qzeUABhL0xk!_a-~?5=mIB)Nx6;{q`-95Y>FMpEZHfPwGSq
zcql82a%8z^W%m;TkRGzu_T}FTDV{$yygc{413Y1P8xVJNgB~GgOS~rr9^L`T!w>YT
zZL<~UInAx?lsLo+{8;3ihuQ&59Jyh<TBgazb^K$zP3B`VT0?3lxzaO!VJ<KfIW?>>
z<$vc_CZ*<tSMbdrNjLpV1c3MN1e`}qrgpCEQ&sy9X)6kl$yjFpn8E!b^iThJZz;`!
z3}*(ep;%f^J4A9eC4StadGCM#i%r5OFvJ(AKjU(5WD8qY522>n3U<p7*KUl*sIR^&
ztos<=m<1U;@W!FYJfr1z8}(QEs4fJ$+-Y8JSqRH3odj65CZ;T70fC6;JA7j$6EDQe
zh%XP`JF4%1ty0Xc@07E3=g6*p!xud}i_*J&RSb4*1Kii$3s&mG@tj|VDPJNCb;{6l
zKPMK)SZ#XYOmET=Rm0MJvu{Y+hdhwBm=aOa$D$TdOP)>py|;4v;gTYsoKOnD|D^si
z@lY|Z|Hn6=N#Nf(MnTcvZ|;ID1oEx+e1`&0z77u$eWr2n)-qiJ4Ze|<^;ig=<59;5
zUFF(K@<5ThV3IJg8SZ-m`?x!MXtRlI*zvViRsG6`u->Q4NLE?sL+57C%Mwyi>s)Zd
zN8~Uzdqi?z<W^OkEYeY&YxTWIW9w9HLLjoa&ecp<A9WzyhG&U4h#v*$M2`)+>G`&{
z42RV@Nt|YS-j88rA5za$aY7eAkIa^ZG}UU=0KTAsz!#g`LmhlaFB4bpxu!;|OU+%}
zFA$s??6i#=3%^{y^VrjJ7j*EH-Rlpk)+=OH8hAb3fEM7*-#4)La?yD=$*h@_qsc4j
z{hxNlfAarFJEYQFj9H1nILOXBV1)IJ-X>rAwe%hE)%)`Ntq!24=Bn|uu%(l~#qQzo
z%>fXB#&`_^;~x|54SlZmMt9K>+A6|2mMf4o@s0Eykh?m93w^pUN%#)Xv1oXkdj}No
zJ>0(oG@?#*pA0|pNblPsU_i@*Q;Au%X-a~>7g|b2G9aLRE<F}8wSdcOi}5hhqVD49
zIINKHL7ZT!Vk8#4h*;SJnDJ_^`?rdJDE477Ej$1JIsX?v_}?C{Iq(1Yu%zv+IGt<9
zjqhrxBW&?m4)T2ofC7Ml#QsdjR|w<7ln+D#03K_q?`!S7-`~<;{EccaT!wR0i+t{Y
z)8Aw%YfbxX)@#XK)r*-q_c}{XA{XiWcmdh>U13nS>*Lv)1}oDmR1z!NVb!$aZH4(}
z4Z%0yB~g6%s>B&rU%$qHtF76L+g1)nmifUy1Klei9S(sb*hNdSJI9_+zlqiqUPOx-
zO#|F_QQCpedSOv$TLr>dl0(sj>9LiRhEtO}uduP|{F8NQeYpHu0$anxkT^)>`NF~A
zU9cgF#U5@2$w7|76s$XezvpXKGmPtU05-<bZWNCBlctDY-gXFlz#m*DBY(wg$NRC@
zN|K)oy23IMw$kwX5|@fBkNROGbJi;RLrW`a(~mM?G_I<^wc6wb==fR^JtsJC5wA~+
z^w#~-{#kOhTG73cT}&j+C6y%!Vf(PVq0d$H<>;z4;W=X0n}L=^GEP!<Pfch(q^*pk
zj4~$m;fa6-_ZI>-;%?cg){n2{3uo)P(A&|sw8Nh#m^^4PRb`NWd0g=o%UUzAVP}|m
zJQyMc)j?*GRBT@|OLld=<<nK1LR~3NRE-cuR`%&neuNB$^H0d2piEhOnD#S3z8Zl(
zmh-)|%P~)qZ`!5&R0{N*A2V?K^&Qezw%!NDK&U6DFD3g_anzcO{wDbz33_bk{(B(;
zn4o=0#vDo0kNH$lKeoVmv%2*km8cvro2oJ!#o4w(<eY*rN0eM|>hI`AjAD4ol0KE)
zVBuYGmO)1jM?7dIQk=Vn@ONjP%Al-YcVpGu<0fjV#s{w_RRsx0#OGgVst=lZC~2k)
z&PRXHJJl*eB3IvI*=Tca@sp?SI4h9%qW-M*t?l#a3)5Jd=0vZC5mWq?T-T;z&to0)
zt=ag9wc@?6lrb+@u(wSd(xKu`*Wb_ET0d=UByLS5Y%dM5T}>&3g`g`LgC$1E!hTEN
z#;H!iM`CC<<~744i;41DG0dgWsVnVPieS0pH!>E9@7niX`l_}gHI&UcnC17C3O;ik
z+D#y^C!Bs*AKcKcg8y1SNowr#cR9hAIu(qhV*qLPu)p<Zc;GRP0r?EGj4%`ZH4g}X
zDjVCOu#H0DHxvEkoJn}ChZ3S<_1^IxrQLHcN^uYb-HJ^)HPU;^O|S#bs7#GcEsqKT
z*kCaAJTWaG<~uahe!4{Sh&aPqi4@NfTQ(f<@9xd=?`;XrA)%q}%V>(qTP0h8Gpc2b
zw&lsKpW6ia#nVq>+K!h52JEIyps(o*OH*e_G4hjN*67ZXoFqx*EQ{`i3t$wH?KK(G
zk(GeC%|3PLj2dgUQAnO65-_$3kyEg8>qeASDDYvj7^A3H?aP(gt@Sc;7_F_K(=%#>
z?ZR_Q8@0f_u$YZn-E8LI2S^6tdfb9k4yC2-nS&qYkRd_!qa4{ZSai>eW3Dja$xmxP
zdTt9zc%o<+O2UILAFh0?o^>)xKOY+Idh>>lQqYo9<CZZ{4)(VpWeZ~<Yg;06<PZ_Z
zP6T=3)B10-n#8i(3|SN;L1nROqXIR*qR-*W%k;7><XW0GY$%tR(Fc^6`?1dWP_Wj`
z#H9)cZ$oC{f5DroaQ@X#ga=Dtf2bP9>Vg_3j0CIpUEK+F=$RAFhCEVl_$U(WFq&h=
z8r?DD_=2X7!}0|ALVDCi9{t#xjRHopyND-dVaIWu!}R+n<AAZMdb27_EBJlZBt1oX
zEtC6$dQ`eqa)Wp{J+%Zxtu)gyhQajxquqGHMV9C>AwOl+rxeQKA^~W;!@HSWnv-8K
z`&fBQi*MwozYp%y2ENbmdEF`^P*BzVh`icEW^?NCFl(9&@y9Vk4nmOHy8MaO@awC}
z^(>J<;ki5XDBWjSunqi+l;|J}2K)q(+TC3;NDTJLu=B2q#b(3TFNZ(XdgCPKHPj+I
z#V`qsVy=5#a&5%5fdRtd&~VH#V!yC1k8~B%TC+k7XGVA}T(qPrQV{h3l8wAKXM=mV
z=KP><D}t#Y!Q$S5Ux0m5^;Uz@CkJ#I@=Gka-)@Yw)HEKP2&R15Q*Vg({SSg5!W0as
z#wO24F0Q=Lv26m&J}0hs>wM0xo-8d8^ly(b*zsowF3ixEbR(r<9(}^qUmnthkqcfK
zt1jcM`n{=QAIWj}q(6o?9_z-3<m*112rHsG)1=3h4;kb-_KYicvJ);%o-~JD7=uck
zTgtGze@EAWvr5tSIjDFtLtO?)RZF-d`%SnkV<IJNVOtNPl~o)eK<0rBUpJ>V-kOD2
zWcG}7bzN}K&RQw=>#xkZ{+6%mpLJ-dg=RRf)m?qb9+MDz!j}rjnhIjOe`^lC+p8Il
zYq;e|VaD4UXs73SB`8kL$%M!H!VtcvjHO%@I!7rrvC(6es4gr+wApV}U5gg%JAc~w
zbiY1sw<9JjIq$FLe-=J-Owfo|=uM+WfGI)dg`wPP`7Y)UH?+_5Om|UrUv4Y%h`pkF
zk;=`M?zRuNn`NNZM2dncX(*+dTBA{;(5`QnAN-bdrXhWQtEknE;`g~&UM!<6nmrCx
zahD4#W?jglt+-A!pzJ%+nC62$?mY+}G$yNzshz)l{~cKx2VFvs)<XsiYmEEX#u_a|
zDX3>=KL!um5(bSKmb|?RN+I@F_yPEc`%;c)ECJ&^F&5#=4j80_tkU2HwUb9)omtKb
zE+jI?6;M^uU64BGWVew~_)!BOSLE2QBPse(+4DzcrpEm;90DFIkU23k6sIUnd38ZR
zAUbBMihL}*Y7^c3D}t`S6LI4Vz%r<5qewh*AUiHwFG=sT!+fMirgG|-H#|#+sLBys
zWXt;ia$i3DYy^9tdy&1Lhwmz)P{*K<`012_ZB~LnxnUo`(40;zBm(2ayq9gaKX9wt
z%rF|0S5$B!m}a2(wfkiMY7+{!)<2mqw1uNsRBIa&Hf<`(DWiOO6n2q0I9n~gKB2|=
zK}B|fqQA}$l_wPJB>K~2b43HqE@$d@gxuW*ml&tXb&Yf}SY+h!Db$5+5Wo@|Bc*-S
zw$B$yh`ddVUVN9&8o=Z(L))Q8iP;|$<9SNEGlUJR249Yy?ORQ<U8S>!S6z*44@IhL
z6{&!CKizVgcPTIOkc+XDUn@=_t;gxLXf_M&KN8}xmL42KR*bP_y2JtYS$E&&ecM{%
z0{OcpLVYvD8ZlY`$mM;9(qKm6n1KCHTIG;+US`ORd*8V@Fh7r9Pxh*>G+<sD40mRu
z7a}OjH|LQe=g!cspIkAN83OE!TY2j>zBd)pW)z{c#K4tt$8=tl%3)-lEi`bGX(9cl
z$E8OrEvT6snd6&t$Y_!Avlia(AY62cCS=}EsgmVp7}>mv#Tb!2JF+CkC*BaAgvO7j
zMFO|BGaUGp87U7{+B-S5m`O%70$T~+XB>#c>0PJ=+lmh2_jHENDeBw)UBJTuPvW@&
zhc|HMH*1;Ie$myk<W^4#JNZSW3#&4X5IY-MTaelK{Vvnu^IjnAm*$a}c;MKpZOCz@
zdI!P6#0f(*ZW(l9u(F&EK@YKa?z0(0&*n_X&aD6H>qWKi8`l8tpf?r7%Y;Umh<knB
zuZ!3tF0(`zJE@m!;)YC9`BKVz&Vi8h_EAz^CY+7u7N>p`gX`sND)vK!Czvd9`qX&5
zf!ng|a(LRsc%l0V5DN}BRiAjfbvnLh$mu|h=<+CSwrv=?V7w&khED<XoZ8sl9CaDF
z!J7kMK$wAmWTDG&lC~|9DQumFekYXQlcZ3`DmdBe^JaZiJvkov^`nxhCEuQ)lU5`<
z+rs;xiO!C1If+kBarq8!>W9#B9-CTzj1R=OU8niFnANXh1Q4A6B-OS{p82{^D`dB)
z3(s(OJEN3I7#?6=O6HqquX<h#LZJfe%RAyAT4`5fuQ*i6!Nk^6E)8Oj&YU1n;QCI0
zr+qZd(NL}>N#12^MKxo3+iJDTxg0nrdbC+>kq_&u|2e1=7U4L|Nu*1r0eMr@9CxRA
z+KK^+-4h<t8nv5*M6+|1pqVWGQh}PAkwg4}4Rx?mq~-8{1K#zipM04hM{YuX2&^}i
zGPCqj1Aj=oTCf*}09ZQdBvzqw3}YfN<gJX5)yEk9ojT+e*`BOUBgJ->JR_#gPJ!V!
zlM{M;s+(<+kD)`Cj1Ui3$m1EEwOSKwU5zLXTr&@7TKjgwlJ`-T)<MwS(9rwhqEG&7
zhZ$IOZ#x!QM5aw|PAOFr8|ZSM1Do=)QrOp#Cc05)3vVgW>Xu~SNH+YhZ%{Y5<ctfG
z%OasDBqRAfPG`)XS!lpI`<k@)t*E*i=zTuz#A|l)HSb~4Kx`GK5LApzj<c$xooKK^
z4}`Av<q%gyr<^+ry{te^SWMliIQyk;33F0YyO9wcRoY6fkSK(5exIA9dv_^5YeH=n
zCiiVLw7UGtF*Q#H?<^9zjB6jrflltpDDw!$hv=_)ipy&;R>so~3Z1IoFlTH-uXdvK
zC&f`q+NvZ#VHkSB%#~cq-8za1NJsAKuM<Un2QVY{qYFx3Qei``pC8zAoW+jXQN^RW
zL7#deC9-G^C~zi9(H}2gEf{-62bsrMT8>lD15blBjX`{Da%rzdco8{Db@Hv|91}+!
z=OcOU=Y#FXPB^Sh&N1IO2GzEcvF-A67;iB*>QBlRk6%3#&8Gs4Erm9we*qJtLWEmG
ztrjEr@;!`dE9)tRj3${C-V}hVkH3W!dv~Hs%aw-7*)g;g&597ITNFa)A88a$`O?!v
zTjLja62Z|%Wi8wt8qcO62Gm294!_<)hP!r8B}5}WE{45DJ1(_L{EVlbozb%D3T<MM
zoZLq7s=6tZMDypVLtJhkWb{`3MY_wgO3rs(1<j!p%zx51Lg;Mbq)1s!&g03j8Vgy%
zvn8RTyh+0|Im3iK{bhSb3#xvz*e8@&Mnz=|%u7LT{V94e-<=vYAv~)1$Swud*I1#a
zrLtYpy``F&kTG+3bz-5)$kis8iN$*-2wSZ4DbP`Q;<qbk*icD*-G+z;ouiG6)qd+y
zpY#H<wNy2zHKx@dnBWmgySzEo%yT$vpj8!Tk*VIt)1!<Ktoy)XQy1^3IW`()z?CTT
zJKte_R{m9pquGIzn~K=}>SsWKtP4mKjtXgKIFHuS)S=MaH<_%w-0p()I%LZM!O$O!
zf?Z1yx``DEXDP=G-+y`Nwb1N7t?2|D7PuRJ-hBpUn!|(r4nH?zMB4Knp61xZkRt;L
zS|PiOT^bHaIVd)6x$0Y;f+#U|#xx0~hT6N^5bbc7!iRf*!`KKgW$xyyZQK)clB+O`
zTgGd5Kc*n;?4*<KeD(A1ZOR#cIy=BJs;AFq&Fi`qf_~<8j8QlylQ0tpb;ycH+Mtb$
zPQh<wlSj&rwBGMBtnqJUH;j%@B_M*Bn`>5caT<OFc5)HqaczwBS%yfU<zN<DgM3nX
zWE+)?F14Y_nQo%+@+zKf0A>-!>(oKHq$0dm`Za)pF|WglGw~>fxM7iy6GA27=xuf*
z7wL*VQg3xcnS51ig;Ujz2K}1J-B=$@)e`kZ#>8s}LM~knQ!KuJh?G-ZQ-pE&Xhxa0
z5u)2JxZjQGX&q5jymwxgql>k6n5(PMX^7kPT)1m-O$7O{(2rvxz{Ccb?zbF}a^WYO
zrrTtG!Nb{JSkt5h)&?cLPO=YdWx+Qq>!hKaXTq6|#4{W?kBuv=GWksNR&+~zHeH+H
zQYF>u2<hdo0PH~NZHPxZAKD>P=AkxKkf~lVHt49;(PdL}f-oN6?{OIIVtYXA;>m9%
zUK(en)yW>SwnooL^CJh!&xq)*15c8+Gq=%<y8IPj96dP`oebn`CNoIi$!s=k;A$7u
zB|7FpNb=_4umJ3Y{ATJz2kBr;8X`y-yJLt-z6~fsJ!X~?=1+e83I&29#hwY3mNaF%
zI4#a74c@#z#m=si<<AoD^o}WzdMYGR=iL(b1$A433R<<*@?8~GwW{j}^!)dvUOu;s
z4rd#9-BTOHDmNwQlALSyf8S>1*$GF5aUj34%KUN}g`A;T@}!f;12gxoz=0OeZB51Q
zVFE^kop19w-5qUP0hDBS(g_3DSgU%VuJz+E{<wyVa^`c_Px9aF_dHo|TFENGZg8q}
z!PSX97beO{5qe<oZoB>oh@``b-xI~7jA|@VZhDJBO*0}6e@gwrDy)vhA$uAARzl$O
z9oB?@Y5dv(-oLG63I!+a0^g0xMQ4OQ?FVfdBG+isz$5s}eC-@G#zx9Ht2F+uX%3Uo
zDo~+dt##J<iIm4)+*S>e*E>Qe8O9Of8Q3h$!x@kAv;MduG;HQwfMf_{m5k?8dq4qC
z0*ITR9EPj==)Bi?n^IBOgs2Hf%AM#mk`tdDB+-vs<Q%Zj<b7-Q-FlW3-}C}*`XSMw
zqU=aOw>LAqq@2o8aVs0^^rD~*uMB5t1SL%1j9-4K+P2x=U{Bxlrt%_y_E#Z#n8o!m
zQ?f`Q3*}_+f=jy;8~#luJ@WNt@>cE-^<ZpuXX@Xc4HDQIR0>yjQxVRdMV^I3nd7qs
z<w||-={SPrI)-<nxL>;s*<T!T`!k9{*rB8Wdux{yx8#|a9mc=B1hC1O3eQ@~M;g@3
z-~`x)T4^2bi1q?oAakv#u70=$uVxLN4=z$hQQXCE_aCxg3rOFSVfTT!n0K{&%f>78
z0&9<ZuFMhOlTFU1RXvMvTG(5-8$;5sjVGv7AcC=kLv(0clBaBe(Z1q5|KSgFUg2?_
z`MDC8;{uMXA&*}{uwoAX*J?Pqp%2Y$x5H8=@o#?LFAGalwF!!{zUcL9QpA_O>Y?$D
zh^#NABR106m8ZGQ>L97OTAnt%0-gkBL*8xR`H`On5mB(`<zGHeZgAOa%jL{U`v3sl
zGd=W&W~&=rh)Cg@pT=f%_hYY;b~&YM3tOt5cO%m<+pwQ)17acD<-kJqv=gHBe;T`?
z6pcZCQC~aUsKc#nO4_H!?ml-dM9>8RM=LkCt9IX`4MwFv#m~6vs&VKooHoi41u*75
z9eo**HtN5fSl>E)NIjfGG1)=PT0z)DBmb!zW12r+kp6w)oQ$V~<Y&x8rmP!b&)D7s
z*S+7aTFHE_{4(7e&f@W^R@7_%Ym#1f=mv*vLhf#(cL%{%yclmkTS-KcHm+&~T+Txy
zWAaytZwtp4qrQQzXZyqPQM_}<7$m4p#}&V@MZZ0OOA$VJ?CmJ-8t`UVK29-LkTPm7
zp(YHZaW7njCf-&%j{<dcN_Hfho>(F8XMwh(Jsu55XTxar1f!*DR4zk)pVy5oF&<|{
zlmd7LNb1gw9EgL-qywDG&KzYVUP`~5G|=62u~~P5x|Co!{I<Y}!8eF3HIgTB?7?TX
z3FY=7OJDb|d7fw~1q}!cMZR2m(L0cKH(}TK4FNA|jyK`+RPmjs-6)6%HoDkUvQqEK
z>N<pB`Bu+Sjb12#-~8%f3tcT3U7RvIMjVDJf1aBxEwW?-EDEO8SXbfWR|R$aJ1Kdy
zx-bT!YCp{3!NHIMjNVfHxj8ktPlcCX5d!Y8W32ha;>DdYR=Dx;YLlR3`l2r00D_uK
zjx_DyEE3C7zpRdI3F>_L>ss#b90YYl7G8(vbL(YJPthN6cMzLf8eBD}jKqjnsnDoO
zD~b47vJurW9}O`kZe@qX6kOp#4ea(rcSTVt280MN+<zTpdddFO&Dc(3T|htY+~C4U
z#vAN;Fb%gff4yVvqJWoU1U3;N5lJYz(5|1WNa5-XrbqOq9=JeAr(uKRwWfH#DjCqe
zbc*V2Wa_!VlqJ@J56^F9==$#?-os#BoDdv7aU7xV&IHQC9oX4Bs=4|yo5P$ImuW*y
z?(i_{QH`G^9&!4O>z6`&egHirhG&qEvTDo8e>z3Fxp)VcDNx}ykg`c5D%pUL!#DV?
zzcLx2sjSlJ)SAJnPL)$P2^vI~gN632d-wS$=u8*hd0v^uSbXOd&Ni>+>!WPjM0r)u
z1sk=@FIMOg9Dg+^g!4%PP6g@Koa|HC>P<a-SLYywFx0TBgABO&x(UoeIepJUDZJF0
z80C{!>xjOmMm)Apr8|NS6$A*MD7YN7iiWbP5xEz!L+qMr$X~V~V^LJ%Lk(mu&uDdi
zD)x1oUE$7ooewNIRG8!K^*+)|*~NB11XZ5keI;)hpr%ESl*8(m8zneENRKbM<I6~U
z4e=R|Ws%K*FHQ|^DWHGQ0kw}$xl*T{CtPHWrlQb;0{zm!koZc0K13H;kl!}4b{nNn
zO(|hLr;obmVif3Av5NMDC|ooPnx=35ipNP`m(#sI`AwH@$zwg@EWEhsGb(+m&Rstq
z!>+_MSvJ@w54Wh&m)X<<6?8>==b0O~fI1JZM1*b3La9Sl%^n?l2kdTBah2+y$kHhn
zy}_yl&G7`{{T{DIE`xp6JQ+=3oksWwpok=^>vqU}%=HhI;hu~97~<FOiOy+Rks81v
zmN<!DT>3SUCvdJQi!_)%h4X^`P^YlV+8u26DKoGnMcz=p&xI;HvbbsMR`|aj_}lpA
z&CcZnoxJ%R`l>o%-{7QD8=PP&hx;z=z|GyAnN{*z-3;wxY1Wdtpp<wmua&<=fs^dj
z4+VH1yFCYo$#*|}>nU{Fkw=fPxY%Ta_fvJY`Tic|7#71nnN)_5AR<vZ+2-=gZF@s%
z*v8gkG8@&w2@_=_VQ4{=J<#_%2BnWjlizB)#?O0AxGPY8xgU*49xEnTXI_x!^P7_|
zkAZSQjFa(bimi({UB&Q;A@vf`-Nmkv+jhUL$<+@+9ejk`Bt-^ah(WO8FT^x@9#Ca^
z!y0ZLc*0tK$U6@}<KfvOuILud7#0}GcMfI|$Cs5XsYB8OSI#CmVaAe{QXUmo6;<(l
zg*&h_vq0^?ut30OeYSg%G7Xn~?mn>Ei+UM@uh`Q}QAE(a#LEJ`Hw~tr{h2T|xTj5<
zy1VDJ*TA{6iutl{<b&4g{7G`gyg(73NKT}83q5XGV_}{*8=3%Q$WqxWNxA}d!YG?F
zcOqB;BzKkABy5+ZqZ}2CTDdoT<@3cz)Iq*k&G;Odl(6S^G)rL?k_!i<=K2ltyXAm5
zB2c&>KRL{|%GxYJZ*SEL1|RYUP}vFJ3ZuhgS`^(!-#!4DV?kAiJ$jnX^ot{zF=U7&
zMXM1cxtkA=d~b>SxrzHE-!lJa%7nX1Id<!&t6^pIy92*z`1D2V>LS#sbT}cFHm|!x
z9%P~Q?o!oSM%H#xc41X7_u%`2nu2p8`OA^O=akShpUb4$bwKOYWcqTg!hJ?&MJ>bJ
zPGRYzRv~9#oIV}d7sLuNF0#&?v}(TW^QL;uZcn3bF~Qe&Q-c!IiimD^;_E5tf^CUZ
zQy?eq4~Y!oCcfiZ?F(Q@yOR7clUKZ;?P4-x(;I=GJ|*(Vg06#jn>|<e!<z0na$_Fx
z8NF#YJs+2@j}zQ@7!qT4U7}h&UV#p`kfE`daq!qKnn~C8?*;Y2%GVH-K3hwf9*%EZ
zUuMgw{o1%5+hDtd30=X@5}_-P9(dHRyjSZHsT_RygdomyXOPm22~xvoe6htfl;UV&
zOMIbcqkq9Rrpr1l>5x6YD#CW{#M;D`I-6#vWbGG`yHOWX^3MshAdL->^QP?moV?{C
z-Y{mrM0G={6X&%t8mQ0Tzb3EBZ}?J{jsKQYc9QNT6A1@pXxyWo)7N-NGTrgqF_8Y$
z9s!2wB`o_jkIEdOBGrpz>CMi+%mN~dxeutHh3`1J)}&f$Db@ueb_dU6BtgMTcxkHN
zri&{BV}{cyj%jX1bI<h>g9SM0^sFJoI;G0YmNXROmVf6iqZOI*2y}U1eQvLzi%<|!
ztv=I4lnKWanaIfXuguwJqQ;3}cl0h4zBUX}0WvcZC6C4LqK>wIM!<=l3+y-K8y9|T
zz~agMN$j6pSyox@@Zd#d$ci)o83kZ8OVKUVjTImv%EJQf=sv8jhQNXB&%RLC?e|<#
zg#PO5!!R;XIcN(Nb5^0kD6bucaKAso|Fc*4D&Fh+HDHK7DyKghnc?QX=7=pp#kK2g
z{Q+Rdx823u1uOvl(#J8!BwyBfh58w)DKB)dmCRWt5aJUN*Zc^UWf+hC!(=A2sM+3}
z<3dry)?3mu5+g{zhLlzKf`)D#0wFPz-P<t85-*$sHvZL=-Z($~IqV(kw0SB$ujZA`
z%u!)>Sw2KlS@Nyz@#q0$?*5$D!JsB%su>!6nNTv;{p7E_Vo5$H;6a9Xo+82fToz?e
z#K=O76LrfAtKU4bN`TXggB#MMMGMyusI)lZJ+}obv1F*Z1M>H5^IwML8#4l$fL+JP
z(>HR3%tq>h9>g<hvC%WOkn?!n`D4t4wgET<vr7cEU&=icUa2ljwJD>)Klr=n9b0!7
z$Dr`-nn;B6le?lofb>UeGTiDdn+V?(r!;3$gi?t*ra3*3R3r$nJ(3oH+R+bavD%3V
z+|-~y5Q{AkQ9vEk@EQ>leB{L02xjCP2^v#$ej3digKSsPY5O*V{LXkcubtwxA1l$*
z2e}DU((`&)b*sIz2Rdn{zBl~pJXxSpa!2tly>U-Jw6cIvBi_y1RO;7u)W+ecK|Kyy
zaVuypC_lVW1lVqlN_{7LEozLwo0P1agbH{Ltz%zCp-Y8Lusn_Wc9=%HsB1yQb!SX%
z-=!tNDjy%Xcr+qvrxBSm*;F5^m123s4lTqg|8<8VG1nn?MI_y2b>&&+G4Q^PC}uo`
zy!Gdz;Vru;HID5)R99jq3VF6FSUMRzdXL4xGe069koBoBI<jrXR&zp&_<j<mchR)F
zy!~QhRANuM(8iD7i++Ix0$JJ|0Xn%$3h(8v+Fln(iMG_|1Bd+5cwV5dLNN6fem}JY
zD&b)fK>L+z@7QZuRL#hMIRAB9f_vRUinjwq?oOr0k&uhe+cVMKksDcMuS{|2?T85V
zTM#|%{R4EfH)<w0xh(cM-WTtxO#<o3fHHK5&dyr~1A7W1OloLyHZh?mOEd_Oq0R1F
z7iobp1=!8vBBS0Df9aT4Yz6?$r~1ZPi{${0$L8u<GhVn5tqAu(YOAzX+bj)4>~`so
z?_-u*cb&iX&wQKp&yM)s5IcoInM>}&k<Z+_*Y3ZD@_SS<A%r8|uf=m23b(Cwkk5pA
z%SOX2kN1ag(P?djsaEsbB?VluViHr$xcNa~A9fdbDAfXaCn3l3JjlVkLTJ#qY`#;I
z^#9J@(D{<wD3dnClsyUpWq;#?GKaioK~tUK`B*;WIUQ!gV79m+=xems$C{#ixn;9~
zvil>50?=|@%S}+<wR)3zTTzbepAqewX3vDpl8mUQxhe)@1RAK+k)nz|-er^(k>)+z
z8*uAk=?bp(6<$fB%Pv~7al#xA!`3uj!U@LyF)Bg-`=e!tM0fs=fP?oL5`*&EoXT<+
zy5pEOvm}x4Papp_kvt^%itMC}Dn3)of?>OiMM7nI_%(sSJU7O~lizYG8dq87?SBPj
zFPhLr#c&G#W=|b{Erqlw@Jgi!v1~Y@z?*-nrH-AZBy3S=F*RG-AdyF^98I1D;i9j-
z4k2i<83bWf`8m(<d$`d>@-JdQ-0A&raoi!jR~bp^IICl3gP@U*C?EmOo)uf<TWImV
zBP#Aq(hm(>rzX{<#*-}AV{pw7Rqn)N?flr2%5P8=r4kj?>X3p!Fa&?>?D1Maj^_0i
zpveuTl2jr)oIct-vzt}-*C6s*$C&4qB!nQYdqs(jCcJ&y)~6plXYTMsg!bg!Z?H-J
zlZSZHN_`zk#8Konnfz6wtm3@xqHDq@^8f!K>6vS~g6joXmbk(QQ5eM$@D|4Ex<mp!
zg1>s|^_2^x*vZ_E>ORic*2M0I5WX6P*zG$V_Wk&ZmI;8S(>R&QziUMB3BS=EAca&j
z(z1VSfF5&Lw+RAmpJo&r!pTX`VQ46NDX<x;6>Jq~h|o-S@2b>YD~rQk0^OD@Xt_J<
zZCN5PH(J00D*=ynHENEr+pM*gei88AtF_J8lyk{S$`FVjO)by)V#>$KQ1v;XEbC-f
z*mcVBO`W*|*;e5?YWP0Ma*Ka*1<eJ(tknxhB0-g`ozd<wkNJ+rGvBv^mT3Gg@1;zm
zqZ;mSV=IL5+=A{Pf96)^(pgVbi8g?>PPygP+{qvzkp^{?a5vk{U2z1TgRjLpwy8JO
ztEtYUMmcmQ&GX^0z}I=8XeGgN70qZEJ_1T%G+Q~%|4N2=c1vSCTKc-q(~`nsVuYQp
zR;-t#+A!;Q2o2yyC}Ouj9D!$JIzn|;VW?$fp_hb<>jR~S7yu{*?>u0hG<*}8eK_NL
z>9H<``c$dQvU^1P$LYAb<3I(lhADvoFT$1NTrhu+d6zR+|Ags!U*mdwforW)fAUV$
zrOA^s!c3mot(;MiAEc7q4ODyhJh|y8(dy{DY-}Q=ucMspT&2g%pM6Q%BG_aCaC~*S
z70Xs1M<BlA@p66%ycWZ#I_2W_9Z&zFr4B60$}22UX=EVp<U)$>XumEseY#^B{wMak
zAhM?IK1k(RTFg@lVA*%Raz%?vb{I@YjhaQTaHn3$pLddDY7f3BZF8VDu52ca-LiN@
z?b!|;+@tX%yr70R_SN}0d(PS3cJ%V_l>(*rHYuTrYX2eAED6s0E%TsM`oWsCssiv!
z@(-=XK=pM{`fij8zGtZ`4s8)M>bc^dVdRC4)krhHNj@gOHXpE+aK&iAM;=yeZ0eCN
zYSySB)Svl3@1M)ypi)O4z-+jq!uU8$MK%Cb2+ReOH%*+pC@rayyYZZ%e82<ZaFf|g
z4MLC&1C&7;*?W@Qu<hqS-Ky*^4Ah%eq#z!`#Jf8}O;bifBy8^@=!qrOa1e0J5j_>-
zTqz<ND)$w_D69Uq$Igg_$YI+)<=~T6s>qQdm1~g$P#1218sxgJ4||i-7v+;BtM{fY
zm+Ey|1n-?{ILj5B(&1Db41gBYJL%20Q0Q7S@w`E+si7;K0Hh<OMt8Cva5X0Vl#VFz
z2A{vvT8l^w9b~SKvWt(*c{ph(kEqjCv47g2vA@`nm=Lrmol~mYc$jR1bg~4u;=)Du
zFiHEMHX7lb7-8*eIzBH`N4Xkw^`#Lu=4Y<drq5in=tIS{@~tlaKCYe#lA++h3#PdH
zo9Ua!XUNW9T2{+3GnV{uOEK?cKid@ToBh6wUhh$~m7c<3G|2ZglSa*pEY&yt1Fv!a
zDProsPE$sRvuYl8+u`eT)!@9=5pF)tBQ>z+kxshRPZY3223PH4^d)+7zc$$@9yx)Y
zW}DylBBBuWUFcnc(ofuHWl4ra;%c7J{;s!xOO(*Nh!gmf`ylB17r?8*PAVqpa6L*&
zS)_;RSB?TU5zJ4wOD%)k_VJJXR_H7ToE5roDwGUiK3WkPFfnG1ZUEw;6CIO-KtoL>
z^Uy(2K7C@EzTxgpmBpT|JR+ELnINF2J`uKQ2EftOz8$O#bjog668o3Lk;e$hlWp?Q
z0$H~ir+=8h*HUiZC|uK5>a&q6pRSgLcDbGewsck%c_42N!W6ZMlQD}1u!f-j>rNQo
zmV-`Wv=F4TB!on!knKYBO?*mp1#1fm+5@0Jo+l186K;d@Sx|>~0qU8+dV`7m*Yh4c
z`%IX!nzUp6A*m79O2M_N*a1P3s9vH!k&HG(X;XYjN*?`d`mD~=x(3pCYM(FxM~v4l
zJy-M-1W+!&Px}=98(6I9?7;(qNJp2FSE<+_lsCXNek^JbMaL+sU~lWJT^W*wVdmQ_
zDOrgjNvGyC_1jO2>E*HjXj`To5lTb?ExRcEcjWY~Iz0%5oWBcbZcp9|LDE)#Nr+|m
zBvKuk<}lN80|@`LOS6W80ljSf_sSrAoNridC5<t5GZAq@1iQIo5umKgo}2zXUCIFR
z?JBBcC6%@OskQ7kBzv92#5j+hyCp*?9JPZad8l;Ai0y5xU`UO$?P1uM1*>%LpqZ0m
zv4g1z@|tj9pil%6nJvP__JQb*2OIo<foVOm707yVYe!~(qK!#JT7DqCRcXHhy9iVr
z%h$bSwcoiu;27v|GgB=(z@_jAqE%H|aUB1oJo9=9DXPYkQQ;a*@*vze0qwZg9+tyc
zvPw4^iJ@v|?MOjfU}b~HVcfU%2)z<4PHI-{7{*Z;B4A(%R0XGJX}v|!>5JQ`NGsWW
z^v^b5VX{7h?&k_CfJdN^tr6gn%Vr8Cua&L1+rZT))7MQtn=^tz_6Cy4zduoH?#ZR3
ztW#k<r<A$6C>#4~=)Yqo$Wge>yxxZKvDw=oKqXlilI_r;G&C5YlmWe4{Cz@JB~h?u
z4SxSQ*A}W&T~Pb0)zTM&qJ*PE9XZ;H7L_yk*b-sRQc$8#36A<R-GLfew(zv5i*8A_
z^Z~n+n2@fKiT<fNG`571krb?-l=utW^))|fQv_}?Sp+B3<S%gkPw9-nJ(Z{L5|?&t
zS{<3<B)+~o^iiTPU)Ii0Xk9A>y2<4DmlvqF<SGdFKa`R6RQP$=(>!9V3*<W3`&)m<
zRtw{gN=7C#CSK#lJ7SSYgYSUzO4y;29z$0aMo8E!mY(4n$NsIxl;j(^;@eI=2A;`;
z1hulIY6%#{rKxc(bRl(pFbOz8(=}VP`t0^)t*G;8+c65uDmWAsZe>d~FP$zVpx1*2
z%8Cn^$fz081H-T@xL<-R+l2iMV9kzZ+*PS`G$=~Bfx^nccIhFGeepDqyLhR264_@~
zuhX$fcX{h1z0WfmJTx%jg^i=vE1q5e>#p{$68-QZeP#o3%AE0;lx#>yw<;7#c)xQe
z!o?B(=5FO)<umw8(Aj(P5W&F*+Q5^rt#piX3_OO-%KE8#jb7@njE%D^HIx_*9K5)*
zEs1hpgp0oIlVcO$;M<vr+*Q*R+bMQiGV<!o6KEO-V*m8p4|WeaZW;giu+X{gct6f7
zNruMZtK7ZbNUmR~_0%}B=U5K3)At8emWd7EQ*~OX&1T8WFcq@q?!7gki~wd%Sx9e*
zH#0UD&Mqv~rJvN<Rks!6D$+MKHP9PF_#L07BE<cgZ8_1#ZPQ_G>u|%}I!F_3o(+u(
zs55^k5-7@iIaW-b&j>fI&++ZVYj^B)yvTj%P@xtQXa5KIb0x{AOl}(0T%&Zus&`SE
z>8_cwiH@&2EnjNL1M_E^va%s3?lBnHjJ9i8ZEtx^Ftnk31piUT1r1`Ma-;ZL3UmUx
zA9l@Qz3&>ixO`vj`WBAZb4sH(vAtvhYaQHPY`Ab~0u%!#_L7liXyY#5(@=q6h|0eo
zstSkAmy1)`i=Uzne{C%APsfDYiXV{q`$0EuHX`LnepC29a5pGLU$13o=GPSNXC1q5
z8}V@I+!5Xn^X)&C^q0|EFf$eVEDje~b*&lmW=<HYWQ1Oy;45ZEXtQrC1?L0XOh9=k
zW&JGpB7$>jjiSs6>uz;s?K1sdoYB2T=fSmnRoi_Zjm4So;Ea;4=6m>;JM)@9u|!@Z
zf0$i8@-AZy*6#Y~{chbd5WKj2>J_YmC5$B-d`Zt$%m4a4Ua_B1r&xUo#CaZEziGkn
z_Bful{cac}#dEos^RGZC59*5m?qhkZSK42;uvT{MntjjUhL~s?nw}|p_Xz}Ie`ecz
zYXsTxMM|MzF^0NKgiSS8<iQBH1V<Ger<>n)2BoA<@#{p6q9&~*ueo=&%LW}BGhjz!
z1-`ck1aJ((O40RaMk7DvO%JW<Xq{WS65a3o&7h32%jp3tA^@6lCv3h_seTvaV94zc
zEScmp@mI0dSh0CYX^#;P!+)sg&RQjg7HVfwmWUX4**%0IJRrxYnx92FDuG#jpOLjB
z^%3B}s3EutQmwr_x{KI%KA6DgJn?A?%>%DB1sVoEPO_VU5JjldLD0^gYdPckY6jxs
zq=YgOD|e30{!(7Ip?X7L!HnApY8Yr?^sef|);7b-LzS3h#f#iJ%q__0n<{5H<8Q#M
zxK{!NumO=(o*gQ9^U~dQRl7{7sPwr2wGwoXADJBgzpaIdvS}U-e?&2(aMPtIlq5>9
zv~V`TPFm$(R}Fm$+d$(~+DMMgSboY4u6Y~V&j4Yeo&|cDiA=&yuzvaf=WSn)Yl(i5
zB}>Gx12XcQ@cywU5m+ood`gZO#>L$M)fu#<s+-n!(XYI)jCG9G)2Q;AoUmB?P=;6!
zIEjrM$%K|oUvOt@=xVExI%}n%#1vTa-K>TbvG#)vUpQH&zGU8L_#M0^loTv4c#Cyf
zVatDHYN{&vplGHa%6c1>Un)mX=?AmK_z3zbd(L>Fp=R{J<i|<=EmMJlI!^e6RHL>#
zuwXaZ$l)Y()9n)uiuaI-9{%*#v-iN5x&bv=!JVqK-infSntAHhcVU7$T)iYN;CoP$
z&mnBdwn<s!Txq$z;XwrK7ua3f@3yc6EUO_NKk=ycYvZGxQ010C58wkG^!kZy>p=1F
z_1FKdHa=4|jAvadj%087<wz-?aqo3qVh1c}vCmYikIL3!6$nNSYx;BqTUGCfrAZvg
zTa@w<tfUe8AcSmDqLU3uUWILN<$t)9g7J28N*n!=a$~)NLCq!`Z;-5K2&Y-&iB1M)
zBm+&&igDahos_{RQ~~=QZFXhC_?rz|u#e!&{n$4fKYIgxeFk}VE4P`Q$^`qAkvA8X
zm=0kq&^nSr4-Li76s9HQB7|VzsBgpk%CU8%Q4q<J>mc!4B%!!Yv4b<J#dc$+%LS2#
zH|Ez2fM4-Jb`4l}Lr}^&{q=!ndx%<5ODEt2q1FHvMH8A<ZCaGXZ6KZB?CH4RVFn_d
z?j75*(p3B;Di~(?3XR>U_DSGLD%HUueoMKrPe6xO$!W$wyx8<Q?-z<5o#SO12EwEs
z&l`U^lRyli`2X;@dJ<y0|01Uf*hR^&w#4gdgpIIE6@u&E&KV98n{NlhB9{OoJ`(2(
z<9(6fP!?+AZPXP{tcPGOT|L@FG`a9_95OQxNUF!Ljv0!i<~rKQ`4mp^(yEc310{lf
z6O{kJvJM6uhlE!`>?s|z9u>gE!_sNH??zS=n4w8O0i=AhLA|sS+`0)AIBFQbK!vUS
zn7#c-yUq!c@jO~)M$vuo&oshr^`oEfL(`_~I?(4U7+OzElqOY?;TS}do+~|W^Q^$<
zyya_;svnJ9z^t!fI3Br>=?lf+4}8#lB}OqNtH*P*{J(+t^|X(j7|+W6m`idbb|p4Y
zzNXlTt6|&9_MRF?n3Z=+>HP%4+u98&AkOX!UV?$DDJLsFzzR}`%s_&mY6Hc)TDRSZ
zPQKJR)&%#w#5%}AB6Zv;u}Yh3xHefF1nj5j7tq#)+d;|@ep1xOH`&RE>dnY`u?eOw
zED4y?-4sGZA^d$$fE7ocCw?;@c&{3;(x&jyf{ERY_&hjJO-zqfkID%qNM^t$OX|K!
z!_CS0_a;!)T}HwSbtezQ#OSy0B89(!ZDCAKr6M4n?|h{pWt7Rk^?UnRIbGchCQVx$
z8PP(7U&Ue#km4#sR*=49s4vuq)o}18#fa8)v1U@AAS{HhSP+Dl#v#yjW+eGA+_1=$
z1O~u?kJr;))=cYP25?`rZMq4z<>tH?PW1Jn?MsQ1g3s-QJbw5@vYDRQp&09I3{n=O
zRsWSLWt1{=mq?83$G1qZSL9hMcZN1<>&z-bBVCyyHmBa0=c9ZCV2VU%zD;%_%&+?(
zbM*pyhRb+s{DeTt%zscluIC7%BjIy6r<BTHterTaOe6NlZuuwx^BIN)8(`~fC14BL
zR46JmlB-o!pm@T$0NEwTDgTa!?^Qd^#TKp6$%9H}F*a|9F{czj_W13OWN94@&kzv#
z=VbN51WLV1Ef|c)hb(<}qK~fLUvLc^q~2nsnbwO|QN_klC^GhF?neSzK}C7)u)_Ni
z4`A5r!qw4SD`O|ggjuBoz@E%|g854xWG-r;g)7+0;`|($N>XfXkq-mh2d0W9ZVzaB
z3S^rdmt9c(b@nC$*U@V<C-r|7$Wp%V!^?Xilxd`^1!HqjC@s&$$Ww_2EOq0N?{hSR
zN7?gQ%@i4}<z}sP*F`+LHL-xS7&tIzrL72a-Asz>TjSwGn-_4LZ*TA=Gmcw5o#@<g
z@cW%oAJd8F2u@&(cKpM&!y1B4Jy3SM2MjAFiDFtC7Q~7p-etMPYi>PPG4As8YQWvJ
z`x{uru!hO8yQjK2pD3I(wupcjLxbyoV3j|W=wt2DKZW+iqZh08<@(>@;RKcjq{BOK
zLwwO*jwR^>3C(f}73mZ9;`e%EIL&?Ro^cH&xZX?hh-PUOT{M~#hAK@yesN5>PTfT9
zjl13F`?9uQzVezk$x2SxB7`x@=if*tNJVOq$mUVtscw^3%@&ug!Mzw=q`wG|Sxtqf
z&C)%v442B12@-Tg9^AG<4Tbp!)+nmt<O_+|23iY-5I=}RohJLDTi{a`(TB(RV%m%y
zFM|A0%%LSzk(2Fr8Ws39-*hLK<?XI1z`nPYyp(x_g);?P$ept1<5vFu@*_<hfFPNa
zK9%66k(@QVIXUMiWfLrXVT}A#M{6o%iz+8urA?#Xt6BN`CFd9n!%CP=3O^#n5(EBk
zmR0@t6I~pS{ysu5B%XXJT3OL9nSJ#8i<5=|0dYIviBeMG-JN?Q(V^o9lwAmGU`FdS
z$cCg!Gf}2V$ijNk=}j7FfGMH`is$_~=R%GIzAI8ZaP~Trhc~`v{pBvzGrgdVz(iEI
z*lQiNGq?#*(Lxutb&rJN2PVvdR|jrk$zaC?0tb|}BKxjl4rd=;k@Z02dePFj^>MLQ
zJxh)J>S0=~k}V9RekAEOQ$auWk}9MQlH{b-`2b~`9#py$xqh@Em@jnH=i)m7TK`79
zr=v`vpJ(vXTIf!y^Z!Ld_*KFp|FCvSb7t$VNOg1x;rhKxREH@Ojslom<kAh0edy6&
zJc#EDQMuzngnb&nBE=J3dTi;r{(#a|0KT(>#MgcO+<f_C!LUVO6t<2|9jvnwm%?@(
z4FF3=!7SrR)+2PIzC;k*N_}UPnc7~uQ0L??_>8QSa3%u0CiBZNbpR^KVP3bNB(=PZ
zHlvEnJxUL=0sC9#nVy3WCckyMlB9EN%w+~hJ$7fx=&o^^x;SWWK31Z%L#}=Cv6@tR
z@^g;ot{&E{Uv{UouYU1r^`y3WS?96rZ5=1zM#zw^aVNntt8xdfPBDm~L2K}&*-(z8
zc^0h~J^b@YBxzqv^gb<F$0ca}x_PDt`8WiKNC7n?{>yu7?c6#qNf$RFihWK>nw~8>
zL%I}RoZlIm)`&5}G0W!%j`1*($lH9K8<a;fbQQsBIAs6u=;NJx3;s%U4=LGS<wtk-
zcGRDAbyRATc-S^o7i3+Z^(Fx1<JN>CXGQy=mW8ZCW7F>wD^V-Ar!!MtZK?XDYQ8zi
z+b(_tME1#o79+;x8lQ@Co_T{~xG@<!ZZdTl=xh)RZJPdadG**sy%BENkTku%kWUD$
ztS{!8B8i{QiB*{)0Obr}PUtss)bk2@D&Ean7=f^*J6iCaVgB0y{~6%!A^^HE?d*LD
ziEh<EGStH!WItxf#0B>UFy_jV5D1^)l56qFiWOu{if-U5q|TB73hfZdLx*sz<c)Kx
zWgaIl$!0ROqAnks2}W=H^f!>`P<rEm3BdGj5@TWH{#akwYexY4wAUsiaH25huJ5R0
z8LS>68fPp?X3v!JWfSuVB8L_O=$ou}Y@jzqBWai=pMFySrr)IjlQky%wb|{?ktK4M
zo~HFmIpCBae((;;G}jKJg$b%<V|&ayZS8_l1TZK*9Uq5PHtHP9mN<;g_kz#Mz-A)H
z_7^mHm!|7Wd69hH)t6#MS^o|HPC?+{BS4|8u&USe+Mv`terJA+#L*F<pln|=`R`ah
z!JP2Ze7V#&Y$psnz5434|E$UX6#aO?ljk!gLgR*kKGXn?W(LG93blD1(6b<L@O2HH
z-tc+mhYvdEMte1qtSKNls<eHALD<eT#fxkF_;%d+K%9;q$~I;|B-I2Ul>#@v@g-q*
zDkmdl)4B9UgY{sQ#|M{tl|7H@$w5$c)5i}d@yyIMGVgJwGoNlr!vU1qGX?$@59v3x
zsgWA~@HQO**}5axR3d8zg3Q?8S@J%phq+`rk$qC4oduMHB4V_0XlV{l8fE&j!yUQ;
z&0GdTI3?^C*Xjaq_)q4S*&H|)(f|m01##^_;2{#2TAYRW9W^#*-&{|dIWrv@VZylt
zjx2A!%T170cpE4?IQ6G#=E6l>{zObwQKD%xB|$5mHw-VowG3OU#-He=9ufbtM;YA{
zDgf_x+>^2kw5g8!xPt91DJAs=EWH`2eg=jdI|P!rd>M02_n$svpH@nPCzu%qrRNQ0
z2;Ai_lyAT`^Q#OydXqsL7m2nCzNW~JalgmIZKSH|B%-xY!}5u9b`=k6e_HP-<fBeE
z@TvFucB`p3+|SYi-b?;Do#_%mR7^*R1??#?;2mbN!|pg<aO4mP;yKuD2YtgEplOD{
z%y*2{k@4DGGMEE|qu)3$n>alQ!Il6R1tE5CyN8EkF9Uq9^hnPT1@ihNDND8S&$MJ*
zAm=%^gt(ez<_6_)D;PBD?sHRerZ4L>Tv5)3x1{?^bs!doKPQ!=la+tsFP1+EGEhud
zKcY^G9q2m69hUvh4h<{Sf@-p;pqe!;%eehi=mdMrcgoez8PpWTkZNHWi#o4rJ*6_s
zA@<vNiR-fVyLqqfQeu6JR*<^OXL7gWR}BvG%v8MA;MJiNlUwQXAmP<!9Ka)-_d5mu
z@As2fM`Y}B*;gm{mA9z2kA@N(M>aVAmIv0g^%bI<ArTfUnhvjA>L{$?U3+geLK4`;
zuaJdE(447*&^02Nd(Sw1a2EKl`_~$zUncw`UkceT7UsN03jE#w89uqwrz3JUuFwU>
z@YoJ^-e^E6AwnQIGAiiE91H8YZYY;S;|$wb2L87*sj!HQC=~n+nRprI6D35G#o(F~
z+pssw#Yk3)d5^nHfj(!FiCVkd1j3of*3eU+=41XIa_+HF6rf5k=lVG_DGVn-OaiKy
zB^f9)mcT_QO}CuZ+S`FygV|U2k<;hs<nbOPK=L_7O8xB4;R>~O{!MaGi@VLOT;XO@
z?W8&Mr~A&vwsO+S?Q}WZ%(n|uzdcWbPmm{R-<c7(n@{%0vl>mXTqD95i6RBYh0N4s
zG6ud4`?AQq#1emeQ|Bx;Cv%{^Q{LsC^lE8B)T;`nK&e!VdaUe<zNpyvZOQa@TD(7R
z*?E%dND-ay$@m2)S~4ZxAjthE1xAX=&3Ap75+U$9F)|{IquyX}$785A)&K{dGekZA
z4oi~e`&Q`-{!`0d2?uhE%6uW`e_i#JOCc7)MvE(D*c>Xc23_clw}!EYS9wtKxQoA2
z!z?+{0Xd<f?BD@7mEXi#P9mLYRs2mM_xX|`zI8T0WLOM16(-wv#zPAC0f5~e9#A|m
zvHicc-&hiK0@H#OUzs<Vikb*9TV-KO@|!%TF1@9Qnh<gr9zXBRe8%;^3P%4+1kj(`
z$f_7KyuiT#S9-QgnLB2a_cd9!>d?ToM1Y7{1+&1G{g>CjmMi`JC;}#QcLa=Pu1E$f
z(1U8U&@B47CSGDpVSK|j28ND{e;y6B>{V;64mLw<{cF4`vqo@5XebVS-?(Y^e`3ex
zNO;J@LKu%w%$W!kMc2nr+qMZ7cB}f%RadiTOuYn|XyDs7sFK>VRcW$^!njH8reRq2
z?u|+!=oKofv~OUXX{f8A*dM+0Q%MrWL-f1IQAEu1EeDOlq*XWRiDKjL4g+-<n8(X8
zfHawBXax2okO!J@fG4-^%vl<~{Ei!|5RFCoNN@Ax^gl-cLxG8iqx~WSkNh7!A`=W3
zV(IEXZB=Y{Vi5eAYZBT)^D1nqq+H%-f86Rfbkc~)XmHSb4b?(htT*8p^Y_EQoypb5
zMApXYU$Uw+16eDH3E0hahM7%BCmmm+`UBcBrQAg-+R?y&bp8L<O*HuUg%hc~J0OW2
zodfAAcwRjec^P>xxv6xwQGG2FEPp9jwlLz#d(8*6$#A+K+ZKb!RLpZOv{aY8->lOA
zSW`ycRf>kYhCqlS!P<?e`FXA!@2Qum1&{4iwzDqXEf|sUeW@(P`hc*~CU{OiKZd<c
z&LScUK9m|&1iX8~Ryd{udR~?&ron<*uM2!CG!kre76C08d>T*|;$2CjYb^tmG@6wx
zjF)XiJDyvS%79aQ@rk53j$aB}`l~p#9Z$MyI!3ppZb^{kCz1)bUvL?jCA74|MNiTD
zh0Smki#LuO`$xD6VM)poyC`s)g6~oJ)rb=7Q(g!7el0pk=}yW4in@M5ij}{b!!1KZ
zaY)E(UR8&|rl`IF_GWgIXMUO=o>y&D@{Mg&*v*LQ*4UT9P$VME**n+cb_uY*AX%QU
zC!I^xlxd*X=%63L$7S7DZFlq>ymDz0F86K+<5N+Lp=Y6)MG1(9yrQCbTK-=XneZPe
z1>FC!h!->q^8lE&J%Mkim-l%ZBQgd5<nyO)hxa&eBr8dWLkMtDeUwCK0Bq<+T+pw_
zRYgP>ig`JH#iA@S3zr|EFOdv{tQ6n}VU`(7KS<P<j;o6X>Kx0UwV|Dk8OV(PpYV87
z-oIhIB&LB2t6guV@*0#dPnPQ`N4$v<U*IqS(fxA+Mc21SoQaG!MCDeoA$OQH&L1c*
zJK6E5e&a%=9&gA}PM0r})j#SI2S1@sWZ@7LEl-N{LULzJzd0%P@Sib`#7WHNDHwQv
zolho8qvsss#xrRlm*Z{~MHrRY3y<g>fHDK;(k*1hRCi%$`(p>wvokiwk%|fv_22mi
zm24R#S?&=n;57KedY!Jn3=+(C-TO-zxBq0Ea%$wY;@6Z|H~H41^u3n~Bku&8Z;pM&
z0!4xD{Jm&nbVmE_PxAXs_X~jMKb|vV`DPXt4+D3y>p)v-8j?r5u*H@zKu0S<p@{E7
z+mG|=ulX4sl0Zfp*9!Okga%i|DVl=_#4}W3sJu{j83l0)|EmLPW@Ip$$44+we4U*%
z<<TFm0C4hfCTlNU4$9EhXt*3HuL!z~mvV2v;!OTd{;Tqi_a#g#DMlvaC<3o=_)Hdr
zoep2*ds$ou^@Gtq!UX8--ORwCl3|3E5QJU%U%Q^#oFP!0pHit;1S=9WtSDq>EheB#
zI`Nez=pD%?p<4wdBSy{CG9)R%@^B=*9%_4SxyzB0)ujPgKH<S?l;3iIUoQjV$sHVV
z%uKT6@T<r=+1(%+G^*htF~W55qdXo^HIS&=w1WH%s?@x!6oM!z;yJr<#lN1Afqt%A
z*`aEqS7))@Er3BT&17a&_IYEg(&~~E0~{ICp!r_>ooE}h1f$c}ArEF@<3x4A`i(8&
z#E-T5#&a9?)3|Ql=B)x*KWXnH_Ol5mDxwpDNG{D1lSkM0Cjv?~(yl3Q14j|PHTTcF
zbeQsP$^>@+L%*bBL>hLNwI5`@c8tTyS|nE)D@-fRBYWqDi&MkK8mw+WIj1qcqMS_|
zDaH~BmOWP@Vgtbd*`2udwSCnkDm(xyQs)z_cK(p%bH9OIt%p(GBSP|YNowr!!|t=0
zMNUcQc8fx@3jrnOwK`s@WsIQzi^w6_6Y9>e0^us_m1~%lz}qkr25@!GWHfx2A_3Kk
zG{dlOU-P-l6i&A|7W)_GBnhWrkg(#Z`_)@NrGFmbC*|66I*_;UEM03jIPMM#$Zbxo
zbA6qVN3M3laG@tx@YWwTL9&{YgCuVqP0o4+x`m<pA&uhCc#`gXl`dG0t3SSEbV#92
z*YcdP`KBFtcAXpFP+`d}Qato*-@x<a$jJYb<HM7-rjcJ5sQN#5@ciMFjuye$w!37^
z$H~2Oz6E51P)olkXOeSAa0enzbJ^FH$ZYKSFne*rz&NB~lC=|-WP~v_A2JY!p#n8v
zLN@Hh5~oLUowSet2O#mhN6_}m7!0$W-&g7LUC__)zh~S994{y%JtA=`lM$YQT0iZV
z$ea3E!)12}{MecY_c|7>oZS6589;n5IpaSH9tPnmk1F6+n1>S0215W;LLNVcDywQb
zlzO)?MoTqj&{V&YWS!mz-cP;i>t}+xu+m2oU1bg3obw~!>o^&HZ+q5+gG5#A;@TZT
zHnAYj+H9ke17Z(qfu<Oh4$Jj}>FP^;M7FJ(Pn!y-bDC`jju7z$d9h)|1S$w+USgo7
zw0e%LtT=LCic#*VQjYlA$@2Y8%?#FL!&*e0{tkUh?RLQH?W9yw;ioH$z?#-1=1hf%
zoRh|}`v0cv^B_>}Zb13rn>U{>u%bWK8xTli5xK_NnAKp=8q^Iwc>J81|Ni29tk4R(
z^hAdgls#@S)4_2UA1|rog_rF)u2XOx=EJ%3#np3bo|liZTZ~$FFEw)y_WXT>JYe1V
zZmfd#6Pk>WA`?t*GpSj8ov5cBj`nk90sY}$CawG7?87x2*-eA@BN~o6%)naZPqe(p
z<s00bB(9SxQ!hYdNkpD7yy{odFo7@zZA<&Qu0!4um=%$&&yrOtHFQyt1nr)3xv++-
z>a_%m9MRdprzcd<I*PfeJ&d!5AEzJg^KPa~Bv=!=od+K2I{Vq`6A&5xyb0l@nSJ`m
z$R6f~8pe3cEybSG4uBqME<(v!e5CAxMuNNeJk`n`xwY~50ga?v!RUjpH@=z;Re@`7
zm{I%Gm94^EPlP5!tIS1G6icD9;#oZnzPdt*qwi+0uBjzhU_)$@FEE{A>imQvB6(`T
z2HfmnX)niKGBW~DJ4#r?$FE2@DpC#0JWM;Cz)IlPq>VmYda(ys`!&!dw|m7z`3&-g
zjSy>84cE>06KS=UQt=u!!5PfU!W$*0@s3A)d9N<JsauIHlzDkWP#zW$72Hk!#CZd{
zn3GjhRY<5?13pTrdU;CD&epfw-^)V$!Ka#3Pg1?nD{8|2ki5zsaD+hirdXTCCYA1W
z(ZB33k@B$Uyr>*4^Yd%AL{d{<h>JH4h_3SD@iF{nq_@9t|1ee#S1IvTrWL6G$lHmW
zW!ndB#)H8gG^J(T5KN#GQfl7tNjS*bG&L4zvUTwkZsN(sT>WP67Q8kXqvPg8-trKH
z{Qrz$o?AKssvnfqX|Wcim`5aL@&H>X`m(p1cohqFxt#&yy3++AeFcIq3j{EtrC$w&
z-k{n(maydP6J1JHQ%3!q$QJ_Tf9)A+qPxY?Vl22uiLRzA>ZcOqS<wyOwd8l*V5s4M
z-^O<5JnN~@(Y3gs6et`L)IkaMPnE(P4Blq^h1E+1eAneouGC$4d0*JFDUEmf##U3-
z{ZiA+UBh>v0B9!TNwe5{Mei4K<zQKbb2>sTrRLEl^8@^~H`x`gT$7Gp?ZWiY<fQpS
zUKRfgn*gd9T<z_vQhTA&;X1(COaH_47aNk57A+9iz3S27S6rUN8n-?!rnZ2}D)SfP
zJmsY6d?Z=$6<D8I=RQaaiEX0^zxtC{rmrhQ5vqx{yPs#|+DPei32=w~S6DlI)&`p<
zyUzQ}$f@mTC+q`(_CCJR@a$okd^IoStu9|M&v0yPq@Hj=A-z!2yAuYp-SC3~R^%d2
z7y4t5Gh(d58bNbj>I-y%B?{)A<uarlI%SfW4=f0(r61!eGp&v@xW-V*hb3vfRc8(V
zm@!8cx_(r<df7Bb@+A>&CjhDU0c35DHK|DK7%k!GlS53XB7oH8nlau8HV_py;>?@T
zyEs);h@hMzQ9<SUfKN@>1os&J;mkmW14XNUL>=&9wZ~bMSSL4sPU2~ryb688m!L^q
zISx#bjwHA&bi8N0+`4P>xC741#@L)pA0pf7e8j{fBTg{SbC8f{VI0;{>g|w1Xz)MQ
za>9i`U6f#*{%HgJJ;1)5JqL}?iHtzS>EXCRZiQxa2(zg8j1M9!n;V{JSpC^6$>*a-
zhXDa(%4M7TqbqMfij4T(R<tKU=bT|QV!;FO#FLnjv@hb!yR@?oLpfAd&$?hGJ6w*&
zf4|l2pNwL{_j2D$YNJ6AI74Uk3_sWu30}Gnw?*=g+SZw!Ii$_7wl|MMxIZ}jC&H92
zk6m$G>SsqxKMFL~BrEt;vun@UskODHO!spg(EQZAD>falO8O?U+Wjjs(IhOJB6O5`
zngjP9DA^K=Q?y7C4<np$v^|wGEZAL;KPjYA=9+zM28_twdV5SnG4Wga`)11BUB+Iv
zIFqsl!Hj^AETMVNOt!Z7RYXY_$mdPwAhNZ<I#SjsEol1$v)FN4Uu-+njm;&14$cra
z3osbfI34A0g6i;VNByy+f>&-yasb=%2rPHCxl&c)I}_6_;4?8hzTrRPTeLw$A@YgA
zwoy@Rb>A`!g_QCTBiZO}f&O1mMXXFBZmNwFuC$U-0H;*e;n#}b6V1|RMym9Fa}MN0
zglV+E<#b&}yB~0b1Z=*BDHwn4BzfWDLSK5ctUywo9S$zUahB1c%A40TDgJqrh!RlN
zktUn`Qaj}1?Rm_w@*%{}I752I2n=UBwcDVg4E0u@Y-+RZv(mC#GQZ^A*+Kr6u_qiY
zJ~@<Qy5yn@bfvPevb;>eUJ&$2V*+?QrD5gmS(V$sq1pxY8?c|CUglRl1;V^0ykH6(
zLf8+-^1r6@xBJRdQXM)C)yZyLMSXDAt+g4P_wzeKud~PZT2OK<-Ke{V7hTXD5(d9o
z6FwE?N}-z77Rq;~BrUv<Xo?`y1c_jCR>PibdV-2ZNx)L*=t0J7U3ED-uL*|J3%2J-
z3N9>eews^pccSu1&UWqFY3<DCQM_)_3T2;;P_j61isAkosa}>$v!M$@G=J?|SeoMw
z1{KM7xVck%j36fs50+q4$#Bi4Yp$(%z?f}vFs2?@!6P9kf(C}24}~{*iJ$H}CfsG!
zAqX&9^%$DN1-xmu$W=&Gl7lh1c8Hy_d`mf8Onu;{B;OL1Eg!xZK(CvA_4+|t-|0Ev
zxp|qe;X1ucSnv-tX&bme!llRDqS7F9$o=^YmM^zgT~uo(UVzHKapB&5C*H5-%yKDM
z!s9I4TI|gxbQ6%&&~|c{!Uj7UTAuiWk2wyln2B-+VA`^TaXZ`1<!?)7$tQCNSwER#
z@wc@0oOv#uuCZyAbf4$r8WimmRB+sFO-h7rhA_Wh6ie~sqM4OWin=te?@cJP!DwsP
zuB|c_E|5gQj$CP0=|k+hn_GH;>}4bX5OjB5@+zjDs!zC0J2BDjDtX5Or`V`@;(5}y
z+r5vGt8lSNsQFDRNu#my{|ZS0VDEqZ2+@l|$Lp7#YBF8*R|R6@4DD2Q-Oxq<xaB3?
zU##1iz+46#6qxtbxT$c;(K_ez0$dX}5w=myu5pd}o`jPFLA~8=7hz5}mtU2v*Suam
zMu4chrC6w>cg-|QS>LA5?*(atH8Q_)vDPz(&?-%+$>wtgU%mVqx3Z{WSOubPJcaB|
z;sR9%z@+Jj?($SaT7|T|7O538#zDKMM0d*YkS5?uR5kN7{w}uQxxMJeKCup8AKU3?
X(5VeJS+20d`+(Mw9f)=(A|Jb;MOUpz

literal 0
HcmV?d00001

diff --git a/CERTIFICATES.d/02-dialog-B.avif b/CERTIFICATES.d/02-dialog-B.avif
new file mode 100644
index 0000000000000000000000000000000000000000..5e408abedc1a94d8d0988382312d3f34715aef9e
GIT binary patch
literal 28821
zcmeFWbx>u?(l5AicXzkO-5YlrXdD`M*T&sx+@W!IcXy|;#@*fBVRoPM-Ft4#M7+2&
zG4H=uJ8D&~%B)=Z%Ur7}t2O`tAU65#W~c9LZUO+7KdrU73A44izR4FMW+4Coq}ST`
zyZ#>@uuz*BSvmYo0swaAhTs21|7oqv4gRGD(a!w4^<O*?;FZVR%GU7DohSeR2Kdth
ztQ21W02xUD=-+o_sld)UAonjG$T0vwQVpcPnVZ}EW!GOET;PrIp8<cy>pL?si`ZJ(
z{$<WT93cA-N65;~O#hE0&cDY1b&I*0oBXMN7}Vwt#(%2@01)+^T&;knfc#|~qM?za
z;a`USF}2U!&cP1YW|-R<+5%g2b4NR4U<)juyFg3sfCRFgxvTk~9x!NVXkY`c@60UX
zNB*Y=fM#fG<zQoI<qFh|0D$xbb^*Qfw>Zc@!r=ISgt>r*i2Na(9Bg>3?Tk(Tx(M?a
znj6~jIJ!B0H@0@<0m_(Lnd>{a@#y~xC84>U^<Qv-LxC{BK|lk*0ifU@5W!FYfK8pX
zk^Wzil9Kua`144h3BU>icn5(0h4>Fn;HbaoKNpbyp(}vhpdes>Io}sZg8}J3vXFo3
zf6y5JL;n>%(7*Kr17$$}ho&R}-T({qU%!vVk4*rww78Tw@IilK3A}u)07L-LkdRQ2
z5YSLiP%tpiu<+;z@NjVOIH+hy=mfY#gao+w_{8K4RK%ooWcc{hoHTSy%xr9IL{!}T
zTr7MHtZXcQlz_m%z`(=7V<RA7vykAEu>8L+AKd^HXg~!B5G*MG6a@qf1>~b2Km@cC
z0_3mqHx%GKC>S^dBos6ZEF4gv0r`)oz(B#lARxfOfm|;j9{`R5fl9(G1c~-lABxl-
zoy9LU2bxT{rUyfD`jVX0z`-8|7845_2bY49ikjvV8#@Ol7dMZHsF=8fq?ELhvWlvj
zx`w8qk+F%XnYo4IcPD2TS2y>7z@Xre&>vxO@d=4Z$tgcmbMx{G3X6(MN^9%t8ycIM
zTUvYj`UeJwhDSz!&&<xvFDx!CZ*A}F?(H8O9vxp@-`w8aKRiA?|H1VK=fBF|$o_A*
zP=L5V!NI}6q5j|k0d@HU90eSLgc%Z5=qr@IJsK&CA2hmfY)(xN3>mB9C5C~+G%O}L
z+ZM&uA83Ce`|p7H|9?XEZ(#r6S_Z&_fdGRCh5`@(+$`?M(|d~@@+vh_Jz!mzF&{k?
zvVQ<Xnhyo`;(da6Uw9tgJ<kO$W_*GG8g-Xv19w@=c`rOA6LZcWSxsPFd|nnG0KfV+
zdbNRPr^K_?F<bH?cS10I?44-4PjKdUv}XDd=ElDS>{Dr2J{$Dq05;=iRipjJjy^Na
zR8{F^(z@>PuJ#Vud<}Lb%vXS_ZSwcTZ!%eQbzaI)!3m8Hf|n$CQ~u2vz=vF$vLarM
zSdQ)=5^!`^QVBE?esyigk>cuxY$Zbc^^6<m$pcMMYFhyAmsH#qc6@w_ZdH|BJ;F+k
zlqbcecsDM8lGG=VP=Cp@=-x~|f=!bMNj4AApvGWWyDu7qq?fI6V!fbJR44*U8%3HT
z+eC2K?Rk7AEIo}+j1f^8ZF=6y&_#@auW+!uQh6GH@aFf!gX<F|Byd-{?i&Qe;ar<l
z&$^Wg*>~d0`XHHAT0N9sat{2D`}w-)uGWUG1IuTg=a5v~!$W-T3J^$-qMmRKKc-JV
ztHO%+N*YdinOAJdgA_x(koNEWw5y48$fFYgAbJN^W+A&O*BG*CFpvwh__Xs7W|$F@
zTvmU{b-mwh<V!ww&&;@XJc&OMgeQc!G&j~g<wYLPC{>Er;l2_Oo%t@01!v9ko7WY0
ziJUom$DR&RfJA5M0|28N;u7*=aIO<F>KXmJ-DTUU_au`ZOY^&<Jm?C!@jND=nof>|
ze*j>QrXgh$TR*>tDYhDvjDth=tjvq{68@wbF=deqgDPYDeVbzWXJizl)O!Qcz0<|(
z)2h!#;RgT~P*Nk%+?9y;M_8rn^kn1druhTV_2nJi$5iJ7Fqtv*_H28Z4V(5y;Ok$q
z-`*!WJ^)#~(J!|fTN3}fl}XRr)I3Gn2<s6HaP=IGe|gLB_yBx%A$mCK>dmxfrwr1!
z^r%CPQ-S4}l2?QPd|k|1)g6ue@iy>Uy78a33Di~j98B!Izi~b)fTJw4)yR+v<B$Sc
z0Cq3~%m%7@IUwYl@Tw8a7D<=m@Tzs82Ovg}@ViLGJD0ih1acFqad;YYVF^?tQ~{3)
z5WH=abuAulv7CjhP2di!3s=SGr|Zy?sR({kiK`tFRlmzW0H(S=|Kq(P?UiH4UfC&a
zE>RK}GJGUyz;lYWgmGTMuchmqAgS(=!%zLJ<X0EM_A@bJViqFm-LP@+($Hkfh4APA
zbYCuDl&lt*yOp{5Vz>y~6<1{&=YLN;EumsrId$U{kfXu~+Yj#)(C7(4NI@<8(ypw@
z(9cfESQ%VT;|rve6FHxE?;6_LLGhVFRwy$KAhae16ZocQlr1z!b-g9M7K0X?^>wQm
zB$<#Xn}Siz-ebg<S~M}4Z=0?5Z)-<6VA~<ueX;%mI{~fdoVi$v8yuHBKfMgaT<Mt6
zIrM4<mO0ffRcygoGsG5^T|LUOxfu~K<@GsxLA*7W)$kz?fR?#5`KUt62umNiyh<@`
zqI*HZeRAw|qEQYO!I|J)B8V(eB1WfUAUWWEP=q~sU07Kdu_a_bq9~6|#{Di{o(Aua
zlsKsyzk(iK6ht1)NVoEXHq*;}3Ib#sk44$-w~ZcbWDz;x2S7TG-(+1113V72-&Z<@
z>!HkNY15Y(5is=JIeSq<q~3KA2AFJG&})fk#c`!$Qk%YyfAh|YRL2eb87T5=)kjY7
zy@6*DoVfUh<WcBV^iBL1ZT7D}6GY(*1*i%D!cNoy5T<skc0%W@lI)V9M11KbHX()f
zsr6Prjt%(?&lTuGxgnW+R<mJu6hrg6QUztvGNJS1m7>_!f4w+B+IifT2^esZF>mgW
z8I!5oYFF%GOq^O>q)&mv73bMJrDGW66Y~4?=3CZQOHtDa(^#2S;S{}vq`#j~rJn*{
z`NDLorI;L}PkrFl$JC$|8MjTmePrTlZ{-JZ0y+8NU(HQn_J&bLpr0lrPh#hMaO(*C
z!YOcs_~l^U8}Qwg?Iv!-Yv`&nCeY&JGktIYQ##5-7E#;Z8yb_gwL-Ur&-^k0BL#5O
z02?{}60p5gDy?**O(SHVk!)CZof^!-nNQ-=^>V{P7Xbmvo>JSPuUvXa<`g{%%uhxt
z-C$YmKF{m<sudLl6-gg}x^JNm>5WjjH}SHaGv(|8RA=){t4|E%;S-@8g9Ol%B2pVU
z3ik5ri%obxNTmS8ECB%*%4h5-PF(WTxy{azO<>J5uuB9{^70=56|If;F>e)c)hQ9u
zR`IPwX$C1?p+Q0Lt0`~g5zO;5x*fGxb$|Qoh#5wFsr*&030z1rf%CcG<sJB-kk<XO
zjcQ!uDOka4-KLss=={zQxoO37XE=O&8uB;VU$&hr^7lKCS^8*&cDUkv3+CG=@=dOE
z-!48?lC4S<VT`!CkA10`VH`cW{Nj2I9?`CWfV;zOyT#jN^v3f$zP1fFJieB}JPVmU
zLx^v(RwHl%MwKdcQ5R>75dKOO$`g0XQ>9E}<uP@6Maqvf=^EokFnUy;mE4plxoSsi
zBTUDdKPSpdopv}s<(IMj?Ln+?nKZ4M!yHX#$P}(zon=|C&RP%cgD*d=c)R6h;>@I5
z35~%pihCw&y!Ju_{W)d(jI5gY8nzUnAQWROCm1-&16hn|G5B_7v>|I*@y45{Po&%2
zZfe0oNTvRaEm^R081>ot^jJbB0}eDdHaJ>F`|d*z0aA$e^6L*w)z3=E*G?Y*^|uf(
z?m^b9<jj_A#K``_ZPKC#5nf-egQhLT87X34Z6SWH6LGwkzUyo#6_3S(qz&t~Q?F5Z
zuF-?obbNay{jPR_PfQ!@M2P^yx2%3}q}vrcJIBBszMZB@0i=mMO95ob#%-BLmMHi(
zEHnFt9s<_coRj6IzlLDjULcM7vM3_BN>IMEdF@leT-y<mnIFwm9o^+KS*{ShF)X$i
zHo^HqdWY~CG+h39%->^}lUBZkE2_OHN?B7S;3I$jlAUamHE``0m0=<C&DsRhhv$qU
z!l(+&{z)Fn?^UHN`2F&=_$lNH_&BCBy@mJTN%~&;{xGf>#$m^i-d#ejlOy?WKFAlm
zRTYf{JE2ebo<&6q0=iZNS!qD%c?fS?PYRIq1C^ckoL|MfU?+)5aqOUy7l`_9U&|Cn
z7~(dt;_~B-UWc2p&;HXTJYhC}T=(~Quu_T-Ky=dwpwjYnIqQ!_CE*_cBHIsu*1}T*
zKt>E*0pw3rX+U~{T=QAL0#1l?)*|mhO}cjjAAs0wMAN}07R^U&DHM<^Z1DRkx+y+2
z&t&ubdX!;f=l<PI#B#^yg%a2Ox${n<)<HWJGTS{J(rPeVY6FU4o95vmu&Z%<gOlFW
zy`;?=*oX$syJnKME8KQgvW|w<b7MWGC#p+6m9ZDYZEFw)<1kkCYOdvG@~AxSi=*30
zlQojYSR3@XEc^J_9<WS)m<qA^2u;PMZjSSHBCz0|C;5f>X3S5#h30q1obfhCc^!|2
zMSVsO2#ByFxG@s;+VVeYN6gX`a$;D|ad<@-<vg7DFN^RO=r8M&I7|BwP)XlT?<OCK
zCR(eI&Co2dRO7`Qcb`y(L%{uA_^f*l-rY8%w#sJvWKvUITH@m3_P^m@S9B&j?f*nI
zCk<Q`zwXaNWod!NMuY~BNVj{9k5_V)`!;k1zwNqWQC1#et|HNIY6D}_7EQc)#^)Gs
zbJ62t+1U7Y%e*Rt9GN1nLG=|SQe}bc6I{#C?+P<QqULFvF?o;sxMT56Sks{6mL5Jr
z_Z_hLR!EEWWi5HGILfaL;=dZ1mL}ZsZ_%6FJ+!oj_*@v_sQVx$@MfBi;@=#9CvAHS
zSI!wUq6!M{)%nBl0rMyyi^`_dlmy#4NLF9_SE{aA)2Pf_07K$;`U(<jITI#-f_J^&
zZ*u3&&+q89<}OIq=rYBl1z@0?jo-)#y=|?$`3zE>5QOOUGiB&dqka#vCiZNCokYBS
zkzPnH`$Szotk*(DPBR9!vg9LR0f_qYX<w>|K-yRcuUMJxvw;J4##+}<6Z+%rNlJhC
z{lcf|Vy&dD5TymaO_xa>w|tonk<;uEEAVXbZ?N_^L@9>xF`paoEHoqR^Exy9>iM!b
z*YMP1?}oqL*;)YXe>325&sMTX^05K{lSCd}MDLX}<i8no_`8;sYyew7tO9Nv``kH?
z20zKbt+bU$WLWMF{Y1ZXF9UEt;IJ16;)qD5i`5^a);$d>95~x4M|OE+Pag8#$WX@9
zMMN<csH*c-^zo$|x~x}7Q-gi7rrfq<wOI}fV6Mf)t99rOcxVHOK2f7P+iQ~0FlDu|
z?v8QbZ=o!o7KA|m`gb+7aG6=!@IzN@t+&jg1B?2$+-OnPgWnXT?I3Eo`rH68UEa`^
zM||QNPUBi075JPeuuSy<$Sk@h+ERTV0)CgkkSVE%X#D&ojJY*xN>vR0{GtTP*rbKT
z^tz)zG*K4(Y*1%&cP0*(6if?OB50Q@SXLhp<?fL+TCe&d*KPYrb}tw}l|y{{d80yL
zvKk_J)N8Z{`ho9x3c^c3sjW2uMn8^Xn1~Di0Oyq7M|x&fU>6TKCu`|G;g;Vl3Niey
z=&*C0B+NLL+LOBVC_&~@LW|C-0)z>QIOS`cX!3V7+*)0MtM<0&*q>Tvrfs=|?EN%W
zYyXh|;E?7)DrR2*ZYzcoi0;OH5(S?t@*P-M8~4bG67GsKsO7h%;&!lFxgj3E=91gu
zu5Fxow|p0Pp{MhKY3B<oozZO#NM|csxYRs>tTPfM6&5;2pV^!}v!Oug->sS8Dpq%w
zIjw5enIH($lnA=*KvkkoP^1gQp!<y$<JGD<j;>l07FMqkD@BnD8~K<jkW=!BMqs{Z
zY6eH)*gR|d1JEh(eCuOD^`iSQ^a0RmY3pD=XH?y?*$piXT4ar4odoxB4U=R$+D5hQ
zOj11V+n)rlA-+3h5`YC9`81%tRlV$d0IDSJbA1{<0G>W~CrP-nV-Xf;Z)@c;9P&G@
zsn22~4r)p%Br14PhQq+MZ|$1vJ{z&><*UH*|Ks8LGY8+InbwDux%ATgqUC^lqR;K~
zK>*+$`rigdpNW0|EZ-kL04MV*=pbcp#aU-Q8$@sJ0{=EfLs<c`>fZ((zR$|vcU?rk
zcNnWW?N<;aP6bOY`6&z}Tyyic-R3WA)^NnN@!0;OcKY8chr-kkei;7<AcOa(xgGqk
ztf=q0y8QqE<D8}nVPi|{Jc^Q%l5iERbZiDX&Tc45ry@w_AYW4W6bXE%jb0aC&2I4C
zT}Pg(9;d)A`5_pf3WOgB)giW>p!lwivUDxVojg>?nR^I?jCby`;T8!Kbrn7UG1d!j
z_CC87T<kKIKRCo!q6E2&xh5+Sq>6opIZoc2yRO*)-|8wNJBP>K&)kuD)dWh+urvd=
zh8Hn?xZq1BV7djeEDnL$?anCD^M2Q8VKySPE2db;m?~{IpmI6_|M~m<tEHptZ-(zj
ziGhN-bsS(I4?hIvTXCtu7`8{wDdR-YO6+nPYj46rkC=C3Ez~NRl=i5aAC8`Y?;A)o
zX8P2xIC45@G8fw65w3e2;&%+UWoP1Yc<k@Ier3uE5V|Zk@2*ux?`&?#SvLbd@>hR4
zSt;JHLgQ`iqkL{Zx%_kk`bQ1uN!$i8fXWS{z(Lr1){eygAKmIY#M2B7j_9Sh+y>w@
zirkZi@iTtf{OGA)G{U|rs+v%SVCI?T^;ok>>M#dHWq7yG`^7!r3%9%q3|34FtEz&R
zmw(+T@tNf6y2yGTjeJgiy$OGR`T(4k-k}fv2Pg1Fvn4hcepl}rFqFMt^;HnVbEWI)
zf#_ihh>GtY5(rQ+LF-qJCOk-dACfS?*9oOA;>slJ7Ycv2C>PAN5pJl3S+GYn2{C}7
z=27r(!Rc?-yJ*1#HAA}kYE?LCvaJk3NC~f~NQSD%jX56x;+3jr;AcHN1@=#b>-aRv
z$F?qDE!^9g$!j&bf0uH1TRC%8@CrO$2fVjbT^DXFY92eYYUuRVt;n{KM?N#%vVja}
zyb86XqLvg<%%0KhqvB+1kOWetJnBhTGuG1_ODJ#`74_>jiGGuv5$!YzqF**2g@l~d
zqGei^JjTL*eo>RM--<*%m86=<u_q5!h2pEhlX{haTIis@oDXA1DMsJ``OYJW1$BOU
zG;@A+n*%)c>Owv*v?g3W5jSaVYXF`_a+F`w$uN^(duDKr8Aax`85GuD6&92={={fZ
z#z?b(VXGN&<V<NJ>*k{-klI<vve;<4EDSQczpyRr!~5n-N*h}b7Q=H3m3_#o9QWub
zk=eUGC<C3kyc!Sd_|ksB#V?^GvWoIc<MH^}jcw`tG`Du<yx;sjNi7!FU=N3radj7=
zAY{B*HL79Tql2hlVMVKlpfi~&p~Q{c=7c<|ADymUTw*M8!?mfwf(YI$*wWmmj=t|3
zII?fEGR%V=kNwK;{MO6&crPD<ySYGCt-;aJbJk#`M6N?gek2RPfzK9aXVQXPbK{g~
zNvRgLl~6mZwli<APx9_d2KUKEfyuI`Q0nhN7cU;m(6jexw(AjRIC67`D||qJGw3c-
zAOA^B)8%}mIgh+;Q6GBjsEKe3h?YMKlu#e%z9s)FQr_n}f}3yR22mU;O`n`E%;AHc
zuVwJJeVNmSS~C(m3;6G2VZv6FJt*S1SH_~)1qb%5Lu{ccnd1YZirORlW68sW;6cFg
zqbx}edQ&lWRyzjM;L?gVK0E$E<cJe@8{T|=s0b7jRThISWda;R0O<d<;Qy~$)&E#r
z>;5Cf_9Zg?01ztpEU>?;MDEDEM6&iKCp#}dt}B~$r!buP4rix(!BnLE>y<69!aR;M
z>%?yB3Zpi5y$95RDx5p%2tH3irCI3E&yg{^;oc@~j?+mv4pHt2GQEOCWHLXQ6tB7t
zeGB(V-VUIgGXO+#4+%Y9sm%;Mm;VmU`F-mg6T<tY%-^}hFoJthI>{E-a*BuchzFBU
z2)8<@2Dlt`mr$m*e)?+ftPd6L6!Oj4OT)jJcR~T<VNl@B$=p+^lz>Vh=J*%5wGH?S
z)`NaJBtJjQYsvR2++($-NlW_R=w=duHor&W7@>p3+ls75Np@mc(!MW!cOZz^rd8{e
zSnSfy@is%13rz**LbT5=x7^=809Y3GX%4NY^Xo=&gUam=mnk3<=++RmOkSS?J6Y%B
zu#B!mc(ci?k^-pkL0;PyTudv*8H#Kz?TgGuYnzp78SES{&a^`otv&z;^GGlEw55sa
zb6@&zXcaOr6I#>Jbx69*5;}8xqOC^-iqKP|LmQxPJGegp^_fH*$I5PyQ(B);%i^GM
zxNsh-gkI>oUN6JnAJN(C;r(#2N5NtW#96hPJt?G>6cbivCSNC<Fr#tWuc9grazgsQ
z*i>27J;~P!=O65@q8sg)0}sPJl&J=JMuR8A(jt6CB|SEYv`{7qvt(c7|7{@k3qscG
zbI%9Bd%z{ZHE}4CeUVfxx<8T?b6J7Z2q`U-^-zH4kWXN{L;9vaRi$RmD3fOOhk-%l
zEBQ_kzG;{H?MC&o&ty5#!>Q8m`E?HX7}0Vb3_*nNN@dtW1B0grW#W#hafxw_SprJ^
zhF6sh?BxzbsP#(7gQ8{&urB(7z>H>YNZS4?xH<~VwIs~VPf9)JYAvMc(Tnv=d~hl~
zO&vzy_Lrhp@Z`If9`M}Opk*Rp`1S(p__u|E#9QM7_2}Nr?vvzD?n`Xu;{>xd^%ca?
z$orIDi<K!<6G2%srfR7}<5a*g8Tv(?5OAR*113Tcb_Ps|pC(h;akU%Xa5;-qnN=+g
zk{+W6+y^S|v(S0Md*jr9gcX17cpV~;y#1<P{kWi>phf!_te(k%2Lls~&Anr*!|!oh
zW#wT;4omLO3CqMu%vJc0jUCXRHNO_#SynkF4!lV49zGK?0*|_Fn#neRjnqmrH7WT4
z7w`jod>AqgAJm*`55nrV=AsV)Wd|6c#SU=|U00d@6Bz26dMMI)kPm>>02ezBWpBP#
z?si6{TSO-1?DXgdz=o;!;GE{oUXt%i$)3<c=tv(y_>hi|{LP@3$Z68X%>~xmCG`tM
z)9VXxKkW&7`aCNTfBgX<3prL{e3bwucR%-r`j?ySBaOrK;$E--&q_1>t!W&1TE-y0
zR0b|pa{r9|JYo$@6R&(WK%*=Ap0Kvwh3-CO-CVs3>^pSA&0RRrwjEYhA&iQLD#t*=
zOt`D*%SKUePbTA1x}Pbq%2#UEDJ8S0@>0)y-^^X>4Wlj}7cR3Px<+UPo(?d+MrxEU
zhr9;Zbe#YX2*?DH>VW44)B-1|AAnEMUuP=VEn%!|bI`s?1HO|-Z0<U6A45p}Gl{VS
z9E!G@0@Lv7(|4k5j6VR|B?4QTj}q^GU>^Wb;1R@jnQp)4Dk0(2xf5;V3aJiLP^aMx
zvGcgwK-R!fQM8DLL7==NtyeRBdy44VQ1T=dk&YQyW8)=MFg;Ex0;|4$z{?ZTjRnvs
zXy*W+6NsKLJ^+uU1DCpCPV^rAI>fc@OivtWZuVBP__p?we3uO?styHma@S!#Wa<lL
z5N0C<$41{=b;awOWkTuv$8c6F_PKkW(KK(rs$h%5PODNnQE|F8z6pm>ml9Lwh5`PY
z`sqKDkh#=~|42$-{xx@(l;ZuHEC&1WSXH8Rl!bJ$zP>11=VwccHIx*6eg3fP7wvvS
zK&Ccl%_p@L>y-<gJAFIJKa`&TmhP|Vcqn|+RE4o<`A&NExo9U+sn=b*GK<e5bULlL
zNBv#YU_3owq<g2i+*+xhCx4x;W7>w1&6*-7P&2u`e)~##D}amWQ&zWL7@+QQWk8en
zaX~2x&to`${=l4sB~cH0gYq}j+Ggg#`P~7=Y2udr*40)Q-r=)ah&GW%CK9`i4W6g!
zllVkWlq<rR4Hx?<AyKqexI9hOq$U5N1IAfGG3{cOcL$&(guUZz{0cEV>s+bnXPFqf
z3iiKu#s8~C@?X6FX0c>9(zHma^K}!r9`^}fIa2Zg?o?)oUV;DER0v{Y5@L2XJSLa8
zMy{_et#*@%!FzTKXYU#k^?J+;gts$pSD}1yG@CMGT^jxX96qoN_IfzoLVW-hQqMjB
z4L(QF@BANt`Mejk_Y~lUVdKpLux0a3V3BH-N?DM-Ax2qLC`e-4U}_Ywe-xGF8sTo3
zdgl4Lb^B=O9TlqHvUb<c0$N3<`=CoR`5zSm|JIw0fJ@8!e;98T|D8+z`Iy*s|M6Ot
zPpPR~3!(gLt?l;x=UI@CB~$<`6b>bWKoP7jO92=%0Ps{-`%v%T^YNYz8(>s_=`xzD
zR_uEZ_S;mRrrvD8cB7ukRilKJd%wH%G-{E-|1%)xp(h;rZet?no59NOl}}PD+TpeI
zk{v|_=1rlu5T(%q1ZpIi*Rry)5bEo;6LwX@QRV&!FJSJKP>x4nV>rc2^1COV&uhf%
zim&1&%w|FEd#IgYFM8q8=-Y*&+0r91MHz8bG=|etyKiuD8iG>|=>vFzT0+~SBv81>
zR0X1;5It}|luA6@3V()t7o}$34PKkCTg^0X$OYIMe{rM!UNB{b#QVNW=nL`aG8I)F
zyOZe8Suag>A?ymrLex$t=toi}w*1Q<^Cx$`N&w6kC2huEESSx!s_^Z$`9V5<R>Ut!
z&f6p#zs33+s<jhJuU9L3H*-pezwpRpOGDZ{?rrMx6!RWmw<o<s?)fm$vq{HG%kQg;
z%>U>pCoQLmO?!MMq{FL5#6j9CKhp}7tynnU(1qEFxuYMYoMiE!$5N9+srI-QD3P~e
z;=su?_joi!4rzeOBCXuHVwLXcc`sn7JcGVgnyeWkimDpWp8|#qmitf0prOs!d|4Wk
zKxB<TpDF}iI~7=`sJ84=6O@BJ=f@4)s=cB7<Qsia4Mh5K2U2s+lz!QeGv5AuK!zC~
zdGIbm1Q&KF&731`37k(8_vZ+nH*eSotU}|0-BOd=EXlDGq2d;fJ*MG#*Z9CNVwS*H
zk@l_X1&`=~w+cCSJmyC?k>TDmM7TfqQ~_m|-HTIqkDsionHavAQWGW`lbnC0t37Px
zr=goRxcC*w=v1!+g;M)~ZL7__El8EN>#RuCkCssDS3lr85U#oOn;WARRzj)zXG4do
z1HVnIX{+%ud*#PK8FPN9aDRs+lw;++Zh*g!jeh$0Sp2$b_<lN4r@HbFHo~5tm~64i
zmJZwcwoVOFzEUH5v2U3s*(@|SO5rZePCe;&GK9-rYbe;He(T=-j5Qs{>Zn_Du*)AS
zl>)%*e+vw(FM@GYAHvYSQt(DUMP{7RTS54>K@~IQ1VENE8el_-0Cs|FKsCcEC(6Qj
z!w({u#=&tUYO7deYNEfKJB6V2SV~-?(LWJb);ssA91ls@tJIQP_hnzD1#ZY0jiuSC
z?MX2R2OPGMKei3TVwaBAUzd0u33pU0nffJi+m;LA!@c$EM@N$LkFYTJWppK#?b7Yw
z8MSg|yNaLflpVr?k{PG59VbgdL-xN-U~U+T%F<@ZFbjUZt}~pcI7yQ!SQS5r7Q!l_
zIDBKyKv4$EYxQlwVAfo>i$?YwlY+HVjGBg1*f650K}86c$NYtM-ML()-QFmtfZ5&-
z`g=y5s8e)qX|o<|KRkA`UN?s|^bv|lv=Of`jZ1lHXXY@l0_sOd<1elpI&6lQ#c@~I
zh@a2vfqi#Hr2NrzOr;T_SC7}e)-O7lWt2yTdp@5deo@m?(c+ae(F_lEAm@l;qG($o
zape+|#7%~H5zq(hu$#nj+KyNjra))2YomdElf{@L_$t@Wv5;qF*0iZoZq67~YT?g5
z<4eunFcY698oC3OMZk+cUFlpsNQ@6h=y0SK&hCO1E{Y7N?ycd3HuAy^Z%Y-WH+mce
zeiXwsV}tQM^W>6lfXnI><?_ofm#-KnJ{;7r(!Is}u?xH3H@M8aDU5^0YZ}dKu&fad
z*i-bB7`03u4ja)JR;dgU;q}y$khIdx#+imQ4vzN{g%{ak#zp*9)SgpmN{WSG@Q?0i
z^5{;hV-K+NSr*@^&ejee(ucff1ibE)5UD>k1V&x&qi{I&d6>6MMJgEhyr0ec!XdNb
z0Xn2=p5NJ*%7%YiINJ}?=}0Zpa@@asUF)S<0^uC3!xzr5f){AUZ!S#$OmHqO+=1gU
z>cPS9-X>6f?HjA@fTnU8D58k<t)Hf~U5P$2y(~0262k<soOLsi4*7_FT@FC7LuLpg
z6wt;+-mBILvB@gg$HE^?O~!3IEw+#rM@7#uoudEJ2Ihr&B)>>C8|IwB=kn7^s)>@c
zd=2rn3yEr4v2-i152lR|LGfoT(*p|vw}u(yuZQ2JG;P<UdVIAfdtQ(t(inZV_XXML
zA)#bwt%(s0t^?7}dEf26X7U(iq9DSf;w<#M`M{?ktVh&({@8kjV0MZ&QyI#?$y26+
zXiomJEF7dS_E?7zC--?z<U3#q!>`U%z=*9pQlO$UGcUJXpsK7!`lm}z^$9I|p*Ge@
zr(YA3Ix*bRjA9h`y2d&F2IHEa{HGa4bCsp0;=;gRFw~sUiSpz7-bfH@OKlWg4-~<C
zdqt__2QV0$-YrKXg`RZBxW>w(W8W0Gz6;$)e1}HYB!pp%`Negbqj&Uye;ArB;!jX~
zmK|TZ)@YI>tXjX4t#TcI<c;YTL!~~DOjb3c{&|ltXQw{_P?TjQcbtbkA~qE?WlE@Q
zb{4Vt*4izlv|}}b<KT%(_;d&B=vi#;r&g7mIXVR^Oc?k(lH5Z|T{L1=KZ*E4HaPId
z(ZKSud0y<q;EOh5$Qo_@glG6gu%|0168$9~S>W@p_|Tdl>IaSRB2>a>39(Uar>|sV
z?`ab2{=Bbo?rF#r`zrj9b>kMQCqlthBI}3ECD8^Dr#2CHM%Um<!#jDnT1g$yiuXC=
z_EUajg^O4fJR8{!f(k39Hs8JQEi(Y<LSl#@8o2Qt7~6qKHVc-q1%!C6*$A}U0%9_P
zalz^x>zUi)g1IZ&YolFo2(!UEvLLmD2mU#vyoA=T##WmklwO=uxStiIE$AXzjwZTA
zf77A)WD{kGv$oNh;%D#rQ)*#pL}bOEEz!dR3<a6A%!j_RIY5NHHZJ?~)2p(}ND+*6
zhJ=}Innq9@n<Egj<(e%8LcMyG$mck`CY^8Y&L5}{Ity`fp;TU?pXw%hf^Ww$bP<vW
z3u22!bl{BHx_iy3&IFf17=U?K4@4AzjccNN@lu-_;5nFBHhwGA#cGA#3RdZ4E>BNd
zt{_J7ad+I$F>ldlw-*7h%}s#xBU?l^i&1=X^ew!vJZNo2kXND$hqr+Lyvu>Mt^{v+
zIw6Wpb-T7#xg~_d5RNZM$iudK3LP|v==${4zJWTc#qu_$)fV}tk%6;(ACJ2zPGbFw
z=+>Zo91KLgzsIIPfA($_X?>v4bF!x^6i;Fw4fvI4U|ikAbW}rqLXns(`-AHY2l(#H
zI7^I|uAq8#WXwTkG6oSK#!xRGmRZ`%6|z_roYy^AHC^YF6~d{Ul+x_#?5CZq6M9jX
z@xDIG6p5M?M$Ulq$D`R|D`C!P;oe46G3>h>$=%wawcKTh4n0+h2SR9u3q?)dD>u{G
z)8o*@jA=_>Q2b3e-tan-w)&h(KE`hA{C6bbgJ0@`?=IaaT{`1o*Dn|zv<<pzv#;=m
zRc58(nBX_rx`il1C@aCMtywVX3smu3L}A<baPhEhgNvo<QXG1(a$h$FV@t`E@=ig5
z(LrVy8H8sUNjGImzLkM<Rp(rC%~hH_`=u1%toEgh%h&XCX0WO*#*i5*`X;dGHeB5|
zoB-xN&#pk}GOSz`!YsmAQqVh3?~^plT}akGJDGoh@LJ=UQfHEaS4L?50^c(<@^ivh
z?vv;C1~p3QhWYgu)mNW=Qi)dotCrmf%&(@sl>^JyBQD7#h#l5vd$bcnFQP3d#FtC1
ziz+f$2UVxFiz-0}U_zs>Sft3}5592#npiN?<YL9{ll5@1B4r-t5fLypHq=#KqI)id
zoP~zSs`}u~gCm-6!v;k`2~C||<l6&J0hM!XC$Hkw{%1`#N3|6JAuB_-B9-+8*d*vH
zg#578VcKMPWPDk|S7r`hrJIe}mFb*XHbwh2e?l8P73Qv-JNqA#PmaqF&qi+w$pte^
zza=!%f4n?yoT;o~cZ*0*!L1qVVZ(#Oii@$57K<DT2cTVszS>&tokO3!EH!cYwu-`n
zPwRRcC8nn}g}S)n%3+=&bnM#B{~T7UckTxzVoI!aPuJDZ`D}Hd_RfxrGr-cND&lYZ
zFl{%J7O@cCixAj@ZRmJ=z7`s_g6L1r-VVL{+U?&`K|vuWt+5BCfv$b{q|2nEak`Wt
zr`yOL|AXS4yR&g7Q#d{a!mtZz$ph?FOMQh%BsDuI|AS)>C1O^tBoAL^Xc<D&h8FjM
z`zy~N!MSGT?Cf6rnFC~l+dBc*v-C%TQ%oFd8}Tnc8!b}jq+n~WH6I_24W$usQSf*)
zPA2Hc!N7G&I^Mv};sS%JHBAs~AzQ_<X1C@Ddq)3@bf|z4p~6VHur9il>o&VJIQvs0
zMq!f`-V{3_2|w7p*P7`?1!x`p!5<|q{MTX$amiqvLbg{?PVho50w%6y7aQ^`%7vXJ
zHp8j{-lZ;B*0r%E-YT)X#|VaVr1gFUa~`)0JMv#2cv~$YpeM9Hy$LHy-@kEN_80_O
z9%&a*(#;K^fDJA^_&JW`;s&XW%VK7g>4@MYBk_(xJb{a+qJ%s#ImUIHz$l5>y*aJ=
zuj1tVF!e@llLnA3#eNhT45rVmEn(%?TvyD1HVeY-Y7d1pka%HyO+Fan!EF*K;0T}+
zvi<?KhyXsCk=<ndyiM1n9e{%CZu=38d2R*8-E|#$HPCE;zQ9iIdM*UbmnFL~D~UdY
zD(GZ398v6-QZ<#3!ucT!mY;j`G@BA|Z5hBI{Gy>Hz24pfg;)C-t%H(GX;bvxUwNkS
z6Gx6&fvRcEgoJT-j$qOz*pmT4bSZIDA8BEZq6afyW@5F7{y?YSAS(o#Fu!|Lr89HC
zK7PGrv<3YaPq?lXC5OVXj9%AC5p(LR1-~jzCdMB9)6U^Z{XF{UK5^QF$3zF1z~%I+
zt_e&j6BQRXW*aO?M$+!ZU(X3F8^ny95}~bS*5gFfcSU?VHrA&k!Z~y$_+@zoq_%)d
zR+aSk$btbG#!8ExM6Dj1@wp@kNuiW)aIiW<<FP;e!*|&*yZA{vWP5qiwV;)$s2+zk
zRzH5y>)=3-eY|5t)y}^X@Ps?HvN(McuNa`av9fR4-3$x`ho`GDmI%}sY5-K@nwW}#
z8K_|$pmWqci{m<PlH2FA!Ml!4no^2?VoQb{4;Lx{Yp3@-H&HIh0nVkpqxo%ZjD0wX
z3u}I9q_z9+qE3u$qhDo&{2c5b55SxQ@8ukCJohi$yqRwoVPN!AbG(*h**Hs)^K%3e
zWfI4b3j#!39?+T53de9#XJ9e7K+&G77wj4oGeP;G>%ZGoPgncVu}qRm_mZm_6Q?k^
zbYSlz*W5HI%}h|39O+MEq18H%tAQ@L9!i+%>SGhFA}Uc^MyU~k3A*3vV~7dE>nZUC
zR#Zh~iXkOyV~X6br#(q4yZ&@kIu5K&nqpw|@=w>=n|nxn2&QzSNM3x2e>-@Ke-(NV
zVHfV$!v)<jjieK5j%cvZbW>``$}Y_o-Ubz9W{VIpuYzQ4At4;pHXa~^6kSg0x)jO%
z&doNcsFA!cf)zG?GIC(-xtv32sJIT5FI;t|>`i}3uKIdIF+9CA1^6|NjHVG^PZN;$
zU7O&iUq?`Gqf>Z9rv}($g{;fdK#zPBG?%m$xxB||Oz#T|SGqNtm$JneO?&X6nqC#`
zFGBw1xcdAmcI*h~EdO&#?4IXDSz}2gL5>?Hg^~+1nIq*+eGelzuigvjpX*==jR;J6
z4fXC?A*GM-tzm&Vm2b;D>)?m`L2Cr+WTo<tNokl0I={k|c`0=+bvQ3tIzJRgz{zp(
z7gZ^6h^imQkWD(9)vE>gPacjDQYdN|_O?(WcCDiMns97i_RST2=-r30A#20~j(2Mb
zQ#qL=2>iVI8Gp)LwQo)d61h%wd?p_sPE}4mqQQ-|G;8pm)ZI%DZn~$!RIU=DtgTq`
zv(~^U9vJtQL@@`hea!USNA_feb`Wc6qB?8K0_2>d=%i<NZ`IV|;t<qikuzrLVPKl-
zqBQ-|mgIzim}ducS^dvr=qND;>>{jHQzmJqkou-j%W+Tv2e^v^gD{eiIi@VV<&@=W
zUK70Ep8^T%T(|ogiZFfq5R)r*uYP~uDVHwtQR#u1W-qMj0eg5xfZn0lBJT;L^1VZ#
z#YPyaWFBTpC{6hs4hn5_{T<PSAibUM3wzb+eL#`1RH4`4V3V&jS*lRyJ2`e~6bcso
z1qO=F25SkL(Gu$ljAQJ<_flQB&tTtI$@Gd=3in-vT#>!#WQ@QvfLSPAHF&CIbYA;f
zgN5hsT&6kgLRj3!hqe+c>uQi-;ytH=?qS$;h}kZ}n%$H)vPfOAY&As@cT%{%F=2a(
z@@S9IJMnt70DC#q;uN1P+YT*R3<z;-<-~mlcOL%U^D%Dsv4n4rP-?K_HYpMzZQrL#
zBHkS3;JHC~EYmTbpo!;8)kUgx`d#1KX&vRy@kLcz_LT%v85W^is0b9tv6e2`26&P&
zUe5LD$c-O&`%YLW8|&!VC_6iFJDP++Ht^3p!lX<c*qLr}2EU1K_xdPY(G3NTf~s3G
z$Csdq=uE`U(+v<k1a(>X3$O{c#%!ay^a_mgerv|6dt}c%SgN~evV4L(Y-fBG6t?ih
zRyU>CoXPo2>`X=`eKF0>F&iPl)y%_*Dx^%U=W!!h<WN9qU0WUozERMWrQP2k1t>|f
zVoxU|JW1294>ApIjwZOqt7yTbm*U^i2erv09m|liJ#qZTtO6Qx$5+>V9ejS+0Ud!_
zKV-)HDl46ztZA55m@_CvY}$EdRYa3^#L8_b@OCxBwk{Tn)FX3&DTr<*k<i!i?zS^0
z{ZqPxZrpdp)##o!(WB~yd+m<3guPB8>|Nn4vaxWikhY?#;qWmVQjxvbJVvsx(yE_%
zhiG2ks<*i_#*`nD<0H`-@c1^tGOcVfkxJJU<>h2dOJh$&jgUK9G6S~&-t$%29n2zO
zZ)u(t65Y_h2j|d<I2XFRUKpjLaTR9<{?oVdV81-wt|t6UicB*{wYif`1dYWi#WROK
zfy9^aC120}CSs>?J*nJK)fK<H1@XZA7JzXxzG8{6=rvs%Cv&^_Q<lET#h{Yh`O!YY
zdVmedy^V8o?J#7?=Fs?J<J+l?55}Pjov;(V&qlEEUjErxfwx>(Ujw`Cc=EgyN&xTK
zA)*dd?1YWj1Y#~NC5jTt^5AIa+1HS8yhhY)aAx;A!rJyiPRDyLNK?;kP1BV;#I~eL
zb6+AF>wUjr)c(VJ&~<3fS6h;$B2FAFBmD)M$jw!TmP5%!huUwNy@NYi2tQ;dS&CA4
z^~N;<Lz7J}b_29oKg!x4Em6&9mc-L`*oD!*co+xwwb$AB&@s`sNt|%<*4B}@KliTr
z3lY6UP7WByfN>#sXZNkn!k;z<+!ft+t;5@p72`2B+Ii>RuwX-(cK1R-^OP}jvN~;f
z7F8K&>4!QOTNMG$Le|zgJrySg_V1f?*!@2exi6uE;7XJn?me2(r~Gy&bkkEl`}YZb
zx0)-{RzM#RsWbVa5P!%jjAoS@C9s_3<9K0Wa&BHWC`e-nH3$MW0FeL{O5hsFE^{!=
zC||z&#8t?rS;v`&=eoN)V6v!FMv@-5rZLCB6STx&8~{wd;7sMJU1@B|ySRvQv>)ow
zx@FQ62<X7VY@lG9(nyF-uuPmZ3S8-h4l94cMlVognB`{oiE1StAqMZVV)*kcRhlW1
zFNZa9H|otc6?}2sae!v-RrMz6+AT5p9f`9V;ho`|g}TIpA;v6~c~BLQkhHrxsW5>%
z^Md9i^1v9}X89?JCEvk2m`hQk(6ea$V198=cjdEQN(08et9yiA*y-y0V`trH#tu|^
za5EgE#5WHYpN01aEzQwqt427@4UdkH2NPkgC3~~loheT3U)c(vHDm^DiTjRI!7@*l
zCzHGx28dDgYlzy!)+hK@6Ujf~IGMDT!9}AptC?S_RZ5*{>iYA-H=r(}8>X2;)A%aG
z+xYdM;v}S?7jp;|mxjv8$kHc#*ydl*y?3(Q*N(fzd9|@Af`-G-eP1BkHO^U9BSZQ?
zChT>lL%Ge{s=h)@YCz_TqvwV4Ey0$6!VzCpvsc}AZWgb3Mtyo=G#wK<2(YpKu66>Q
zvK_Rs+`SP)s`xB;a!Jt$vWFTenLpmc!%Ep|+9lCoEGxV$;$~j`bCHlF86z(quZCoa
zlbP9uZu=bnUSPPj|CA%i+W7g@kQF!mGSywr#4x7rEU0BA(WFr9Z6}+@n4uA|N$BUO
zFJh4;^^ISgMX-WAg2)$vQg+&|{=A6PvNsWp7UZ^0@DzK$y_fXd^`6Iervzl_V?dx{
zghRR?qWyRE>~{#OpkENrwN)YHd&easesAPCowo^PEt6a+KXAcT!|T~_j9k>GcTwMD
z5P3xeP*R|exVD!QKhG%L%xMn}&6OEJI}Z#CqU+n=vbwa@lyv5^hV%mP_2^1EGM<*8
z<_;fZmO5T`kaRR2?R2GMn6EaRX}37TRjtxldl`trDzb}ClRH`QneeQK+j+V%$8kR*
zw{Ox@j7=HJf8V6xBlf`_FyHRGJ~Hk4VHwZ);9D{Ct*lfGO6X#<*5U_IjYFDQa!@U2
zTMy0iwOJIy{WSZ8u9<fL6U78NCmps)zbG+GhM_C*lkJ528KOc>F?Zqc8w9<SJ4}|d
zg3wvT-9Trlnv-2!u#Xe=rQkLatOY214-Fi|_GMerW|WXTWSiTJW-oUv`jG*yh*zTI
zX>8~j!^|o~0K^+@1UmT-%df-P^VIO!_Dv3MIhR_DM`SF-CbL+b-VTg3C5tH?L+U#P
znJZspMf_A+P~p@giPs0;drw%ZW&)to*hEKDkX#m5!?$O3bEZzMI%Wqc3b>>y^x4G*
zQsbboRm3@2^X3Ehrtl&^_rlw9ab%NCM3zF7h-2CeRBAf_@_b1I&CPI__pD}4u)a_s
z3!Zoq@$V={xoAv$9&ws7dP#F_378uV0xPMnQFhihT}S5>*S1IuQe1YC%`*w($a3#g
zx5GmW<r%fK*GmGPWcFR+&d0dMn2&tvW_@D8vj9wC7hZEGkut;=ndccD+(0D8{*vSH
z!Q3GXlcfSn93y<;Y|z=_aEXy>i#8+9w0tgrK(GUh-D@*7y0IMw&tNwajn)B7J$RMP
z#sZ5yxo*U~k$Qj$UtIvfT>xuS4|OGFPu66B%abN!f6?l-hAu%@sSzY*;u9h#vcSIG
z4u^ME>c;P6P1^p}EuD1n*S@V^lT)Kr1Pv9d2z&?&wL;ngq0)~5<lSijBT4v4)(H9_
ztzL|>>L`-uPBnE>!oRfAAsr7{7nDkK?`)SB(=aI3=GWHrNoeXqk;L3Z7n?8HS?{#c
zKJRs|V}-#&+L+W-^KYL^6EJz^--N2me%WF1ZdmW?+ZsCMrZnKHeiYWt591oZsIX^k
zo>0<o>H7o%KJ`VwG9oVohtL?_QkOwrLFOU0-hO5KQXC_7xJ6)M=z?z#lDYiN^RU<q
zD(H&gvSGcJ?e{HgXF;_blGp@f<mVn<GEKZJ%X&NT*8_d}(0gXq3a<!2KC{9v@kt`Y
z=y(o10MXrdU7fn+1!UiF#=JvjJI8bVM)dMb=zSMtZT4T5j#u-_`({pw09W5xxTwff
zT%@A$#uV9)wy`RuPu1pFvghd|{0E=VDK3SiISmVmi9M(Mf&}!lZTiC6f;ff~+md2L
zaW+W#XzycxGA7lbj}u+r64YnroplC`*Z5;7d^(1!*d=*E;$t%syQeH>XOTz%ahitg
z7d@ji+LLR=jg*sfSeqKfBsHx9(8a4%j$`6wjtXD1;S-PA&?oxXRrKxRRRACzh+R?5
zc>?&$yrT;TGFS?nZ$jas{q}M{F<Qh=2-3JzfX;TgG`%{gvYzZaY%?n9l0tn@qbu(O
zIhb}lUyMe=dL~!ruGX<niNO$0i{@-1?0v3}beN3RT(372{R{?+!>?@jd^ax3)`|3p
zms#2ZD}N%ELt~x2mBZ>II#W5L_?_k2r^Y$>xEk^&(`?nfW&IYiUSVPp`i=4E0HHY{
zG7<|cGF+#(xRzn!6;?RT{1Q56a5jkE*vnJ4rhK5Q62Syk;wUKwmM<EYK%+)MQ!wlg
z>CBPsS7<>jV_S?85i}Ycza9^A&IRz=_)Rxh_<TjDW3uuaBjIvFyCjN~Zu@;mS5x+g
z4X|pNA1?QpV==S#oeg4NGQB3OT~36Yz0))r4{8ZUWp+z67-J~x(7zGlxP)8G`eirv
zzc^oB;V_KcCH8_QMpVQ08F?I%g_}bCY@LZM$zDT+(tDf~4{x)!7Z1@Igb*!lnli>7
zeb`**R`nv3ms1;cy~S!Gj~#@sA+Yt;xtzj*jKRMIuBS<`csuuMHcGYC27&QpD5bw}
zTWq?}t`fDzrgf;OeW(T<KPN*B=PSr7OOZf>gkj~VanCeb^pz`txbiy>VDRO`2-n(j
zlu<GgA~eZ_<>zJTa|Qn5I)MrJ%?3(?s$Tn;ej|OO5DjvTog%lXdA-?h(RksubG?TO
zrSxVFrMuU!9r2+RZs(OTTg`t2^&CEi$C-%hOLGPJ^Ol!*?-GoI@B^C(#bZ=%AySj7
zrzsQF-5yQlrWZ|yxmIVSl#Yz0WuJyT31%42jw%^rm~iAkb0`DKrz(#ZlGiiu5JDu)
zQjy1O*usl=Pz{|^mR5!RbvETRR>C8E5sB<vR16MLWk;{haD=oaW_|YEY(u2sjeTip
z6iM8evCsZzWJHqD!}7r#wST@HQp@-1s1agMoe>ivQM{q&Ch}DAPyzCp&;l#=PdW6b
zO?$`%6qMkfq0io}Wv@wY5o@f~Npri5!A*XrejuvUKmR=1m(>Lif%OK<;kBw$K3;cZ
zy{uaK9kIf6s~jvco5lXw&5mZ6R??7$IQHkKE@YlPZBOS)SG-fi+P2PniC<D42rpPG
zUrPK{rWMYZvct?g+srT(W4k1n_&u7icHT55e1#nizvF8U(HmKIHt>z~i=V;@HF?iJ
zjR`c#$xh~I(R868x=wZ!so^O{yLU_pmwwJG8K&3}74wrx^QZs?#Hsv<eM1OKto_=m
z(;g%+UsH@a*m~n{#Xo=N^V%0buy=sgS<Woxv>}PhR1J-b$wsyVPxmVCq=dzZCh)|r
zQ$k5*EwLk(`A!l`ERLfISf&q0?CaF6@}7V3mt!s_XyHj2jaX|T>QoBm!PI3((4+sR
zdMzP^6`b{^o>7O;k2{KVi@>54sn?SOkq6hqg~sWZ8x4h>;LM_JSv@-W(I9HC{TcN>
zmFtqNdimqlPx~PDvJmgh{(e{p)0csdkx9Ab`(vX-n$7|emAR^$MW#SnTejz-?J3`6
z?(youzANFVU6?@7TxuAONei0Wex~UyX|*_+f!t;#HZf$$xb0CM3LakLBzP>y5gU$i
z)vjUH8h>d{0?4d6#Z5E^dE~`DT#e8TU-x;$XJ!(p><>8VD2P>zcSm=_odUGB3?{vZ
zm)$l<5qv2U^}$t&H1#-~>ao3HG>roYZ%zcgq~M4fB8JJ--K}rWI@dX*eMD;@;-Wix
zq8vRB%rDYWr#VTDm|O3YFNeqr?>r~<<M;Y=?cVT%&3$}JY;p)_k}dTE3!|8iW5e7w
z2{KTTxUJLP-VP`h)(}|1-LP(xKIz>?b|2F0=+g~6d=M;Rjp^EM7V*I+Rq8iiVP!EJ
zDRPC)yJyV3V_q`Y+@29ccYVcf4x6F37fU3#OE-t!n_e!cK+dslk%tY=|E~aSDwEZx
z2!6Fz_|cV30=h#d%Pm3&nN2qUff1ZM?gz(cLs5TAOAfI!fqxt`9$QIK(+HFVK!Z@h
zy|9aDQN{UW;L7U^2d}p<=JzDo7uVBpvNAOz#K+3N*{~0c?QO^EYOOfbvgyxQw#5Iq
zFA9VIJEd8$Abmz7hFpF)1}B=JWUXAB=i-H0xR_4O2LRHRy+4l0ZK1GzGA-YVc53@-
z7QsUg#@;E7lED%108IQ%Le4v-@nyYxRKr1Ktp<|tu#)QZmK9?vTc%-1pW&GrC@Rir
zk#G{em%KF;F_~9b>_%n20eQz5u5kg$47S>J8|k^!s@J(MlJ(~=Rfmg8nJ3kTvA^4X
zt@snvp@$WiV5G(09=0a)@)BjJi<lPLtb8W_S~QnSJLVV66`9cfg0h9^2=UP>d87RL
z=bp|&mUdQ?b9fhZev)Lswfa156CUK^p9sjzV@n=_iA!!qGG-X$0Dw`+Y%7DsRaAbH
z`un_J2IEjFipcdwWk+(I|G1ToQZsFoW{d&=6f}dql&1?;IuNV3R&Z>cjIdCwwaZui
zmqMjOWv|c>NXHGWcnyzQk_=OVIgd_5B@a=I#dsZ1Yk8M>XAvC;Mz4|}E%<3c!Xi3q
zo|XXdZO3I(obmYDz4)0$ix8)xZhDKiR&9XJtmz#8^*B^Sxp#j5`l-d#=~dFR9j`@9
zA{3@@z;uS|sGFqnhax;qHq4mU`cs<knFNAPp>}XF$z_I1ydq$D$-|RsyY5&h$&Co`
zzwjIhDsWvq{}GuCM=f=i6^cJa4C0p@)y;I51rGy($qT5=b&jVBHUvZIlrS481AC>S
zp(J-~-z`t}fWACsN`Bv0)vWFSTAn8WjhK!jU3Jy8m*Fv{Ip0yppbFft3K5VYf-TuV
zYcXOcXV2t;+4&Y7H;Z@@Sft){ddgn_NaoYLab^wt=)+r|PrOn?J^@ZoCEvqG^JcO(
z4P}N8tM6ZkMw{tt)IrFEsN!=?eMnk^E=L4J?gDlBG@s1gPTE>8Hc|ZbqPw8d#%2}b
z9*$H#|CW)1QQJ8qtb0Mmsm^&$zXCn6p*?SmLGiBnUui@tV2zY$?Z8v@xcON0r$f4C
z!D0e!?!}j3cX?g;-m%zsh{-|ob6!&_lYJFe+F*#V-Msw(pGBbVJ#RJP4RLDWk0)Hw
zBTZw3&=%a3E2apmq-BJlO36wL`2$T}C<bG_Rlvy?MbYm-e=W;(QYos4{)1lb05btb
z-9DYj(%om({f%_ak8o7;DM=gGn?r9F{Be#%*TA#X?1f3f)tRp!2cqEl8C(la>1q?H
zN4}#<lEW;m^q!10W0FBNU)lQv^+LnGA^$`4HQu}D!h_zQ=VR-}ggz>gQKc)5oci!Z
zn7rxDSN&yi8<xkfS9O`-aYrCG%2{$;N5T4Hr1_>FE&2OE_&ZVEbq%VkJiJ(nN)b!A
zHK6|{qhXLKtbljdHv;<p1}Hf$u(=~F{WvI+d#A8C$OW0f0FiX#$c3}Fl+=uOTJsRb
zo8U+uJimHAT`GT^2c&u0e6T!D`>G5dswI^&AqOAo1EE9J!S{ZS50b}CyrXzfg6-9Y
zBE`ZewTVEVRb0kw&OCWs<<B5qFeFEB$(3=%@vz=9ng+vwkBEs8%lvm|`uN&{He8;{
z<1@^5&Jm1dgAmPJw91j}aZyj#luh8LXFRS+oH-F-jZ3|LlJW0tt^3CcbkDd<X~fYx
zMlyu+CqAYbEMUYdptU%@ZH#z1sdQQNnQ9+OXuevwhQAjOjj{66$VBF(<G_6!GDfoK
zGR&f#?hxg-7iL<>l4b3Ac~tpwLBB94$RZ3*Sv(I@Hm2m#qJDBUB@E=VD8fkt8#nxJ
zQ%~4h2-2C#X<sWC4=JP3_!$qGsXf+R3TP^xo=RO`UG$qV`6ExnJq6Y+jt!IZ^RTHa
zGr~XeByDhEwF3Vb+p6Mu|A?i<+|dW0gOT8M2&7-4V1E|xdJal@+J<X`ghBvI*6w_Y
zaS2RJxohGEj9OeZ{P`*2$0p>82~=6=;={4{`s}Ynoo$!C>kzmDQWYX(0j_(Daq5yR
zRvT5DdbMzaiz`|unrn-0bP^qE3#_)Ox$UrkcWSiS2zIIu5?%K0#qnV`3Ese~@xjf5
zT+&#cA~3Jz$EbG?M_wSKsam7na~TH>=V4YvSJ%2_@(!RmO?6>i$^=+2>GX`q&KA+>
z_9A@O=ughw7Q*sl2xYI*Rj`8x4xLF+(;G4dQrtpvU9)UFaRt~L^0>Myuaob#Sd1`#
zFC*(PEBjQQ!0~pVMCD!&GD2!MqN&s|Oz4-YJBb(Fq|CaW>=gV3po#hql<(>nTFpzv
z0I|&S^;_S@D$cenKBLiyb4WvbnAxh9xhE*W$}D$qQP7!cW=g9rl^+mhq;AXRvfixe
zMhd68$5Vb(2!!J_5<F6d9-DBw-HDTB5R6ATovRR@8E2@tNXU<7X5@+Q8oPxr^ZlC=
zRG~!2izdS0FuJI9D`@S2jNcR4%tl^X>O(;3WYs#oF8Y}98)n6;yU@pPssJUpW0EIw
zCT5FA8JYfi7kWjX9?B<t${eR2bk3PWm5q17#%oQ{WgDhQJENyS<6%VQ`6m+K;_snv
z?!woAU)2GUizY%(tHA+>Q;fi0W$~eF^2a!5MgA4g^zeR<hAc5u28`bI{PirlHz!Xk
zq@w6HC-Q#aFXmYJ!50i+A$1}YB5u)Ds&gRstJi<&&31;sp<wx@p_d?<#FMujLS}m#
zC879<I_p`*C0sZv0`i*)$J0KmMe%D;XkfjNg<e&i7o!vsbR%rgRk+zFy}fTDTfcnj
zB<j{50$;t`Ia@}G4_xRrEJ%(Znrt+tk_kd=uC`WEBl?z0CauCUnkoe%&Jxp+-8c?!
z&^Fw}3M+9{ZGJY})zZU<24tNUexrONzUU*Ph(@Y@&at3<@$$rn)ZDcflLHr3Ba<9A
zWDtF!<ll<c)BU~s#Y_497U=i?4hHLU-1wk`@b!_{^ig0!<yzVv840V}8M166l1j#J
zC^n`uW0oQNZi?#gcEQZCZzjop)WANx{{vYA2OIQOT?~veAk~5#TFv?S=bF&rHf)Y%
zUnZn}?n0;)C!WS&)bo9z7ROvjuj5>Cv(5ByBzQ1$o@CuC_)SIuO<t$92Ogf2-%!ZA
zPRgZ~3wVn`#Eq(|*gd<t0j)bi9*){`Z}Ay;nU0y=x5gr{p|4wtJfx45un{h?R`joV
z--kNiVZ|SpsGZKM0vBUhngyQhc+OhOE}%<-i1u0|D^DNmrW!bd)Rj$C+IXD1n2-Py
z*%{GR!lXQ~qU5#_0WPqEb^SxBT?#NwjY2N{bLgjeczW2Fq(1)V37C)pzi!I-l^4N{
zr|c1mY*ee&czd1m6F?*DBV|!&<%iWO>J`>bIqIWw35`VhCq;1)g~x3%33YvixDT+u
z!tQ<8!F#rJ7e<<Lm&{2q(X1+O%vzHwF_t6+6klb5Ev@L?`w{|d+gtrPV_!m{ye_m_
zhhIz{o8&==$}fiO0v7XQTOtewwrVOB#vi<Beov9h2$`khmCWfgof#T@t!;PVCmT0B
zq>((QQrD?q1X>xTZG#hB?Fj253h;ZV4>0QUnE?&TogP42*~#o8|E7#6mozRhmLbY<
z@mhq{u3v9FC}np6^19`F0q7p_l!b_#4BznRCe6nc>c_~(1=C6ICtf<xl#0C4h|DCy
z+wbmOe8J}f5y~cF>P$kgBOZ1k=644xj%nx)#ZMUUxWx0xKtLD&?@Tvs=-fqzaH|+b
zjSB&lp=ZF`e_A6qgt)4PrA?pB8tHrKUjF6?%Vf0CYjgsc6ghhbz=De8@J0lhA-<&b
z=syh72B;G%vFql+O=FcpF?JzKs*fp#R!`={+fd{xdX@*LfCV2J?1K0Gi9wFWa9xTL
zL;H8ljwx&G;Kz`IenegbFKQNx*g10!*<6$|FoX4JwmJYIOj0iNLxASs$>JqZy+rf1
zFU&c&BJj7pykYsf2odGDAi95&Ry_vfg<>NEU^$!RZIjBsDV&q?x(-EVbhL@A+hhog
zHa8@$agE(X8_0D+RB-X8u?XtQvi|`!j|@YDd&@uQ2Z(u4(G-aLR5et+61C~tr{HPv
z9ISu{Jm3U-fZm&GUEX?uJmUwnZs4gDI@tC&ZS}0M5Fz$HQx6`-p~bDq|Ab&%@-A37
z2~#yrF9I*^ufmUf6Bw&dFH~NbF!PHp7B&*v$$XK#$@$}6C(f4%SR?b<6XXkj*iBS)
zLjj__>sy(vnkLB1zExDe>n{sVDcNYX!}12kCb&LXq8C+rauCA$>ZXq@)a7*M3k2x_
zg?1WtUaU-BU?*C6*$ZJHmH#NPpudJ)2h+gRX`^%=95+Kq<)Dm1@yYF3Wn>*-FO|AG
z>ckrsZB@#=>yoCe7Hfzd7pr(sNSIxt%-lC?8Rz25)bH!<I^N)mELv@Vm3RJ$nR$H>
zk`c-#(47bI8+ZXSH>2IJ(`;fu7-k7sEam#@>)u$kg4PKJnAw=*EEw{qord>5K$%8z
zV3$g%8;PW#g3Yj}7`1!?#ebx~!!k9w;?fMgDa*1m*YDENb2qx04ei~`^Gm7wpE@KL
zn48`yqAN2LF`C@KFx!)JY*S&#X~$(^iXv*wxze$b{O$-pnH2mIMtZ#yE?GHxu$ZNW
z+=2GK;kJod^;WMw@H79aCk~7%>r}*&?g|HVt!oQ7IPh%FNR$Rt(zna0YCw6SB9<LF
z#0I&07niFb6WgBThw#E1<!6cO`+J49Si2Sdw$$8f1Ps;?054W9W><q6;6vWb81%YY
zHz%O7Yw&BSxuzNa8(rkHfqxZ}{SUJjJ-%VwvEo9SGvaPR2~I`gg_;;@KTdPbXL*Zm
zJpT}aGv7B+&Llb7oCDYE7y%Q2AR^x>hh9j)EDrc<_mM~*uA>8FRD{DBv`@ba<LeH7
z)c#Cf`T5XB{754ac-|hC-khBLUi(PQ%&<pO-mBhYbg34HY>S8dsl>z!$@u(9>Z`(Y
zxGfr>KZQ>^1s<oE)iyzgF5Fq(XtdwR_sD^2$<rFKgaC%?qU>RhXv=>afpAjG`MN;A
zw<lP~t`w;V;^b<pX>Kkib(GeF44L;C7`93akSHh##USeBt@<q`7}w(RJe5R<thv)_
z&8nu|u>Bew!Skv6-H=5~eiL1PMqvD@cIh^l+W;gmB@8(ttl3%E2xsd6v{d0RQP&@U
zjKW;>W=)_|{K|dG@X$Pa%?a&wD87MERQq-P!ES&Nkah4hln}0IrKgcah)cWV8(bRy
zQ&CggV8OJh<s%(5F$EJeXmkYlG;>WEl%sf?2+uHQd^bJ`%RUuO^R19U!;MdVr=RQ`
zl8Gkp47iA>1cLcl3x;o?)GwZYrF`^cEh_{CN0Y+?jEuOd@!@rw*sL_10>wo^(V`4A
z1@spgiPlq!5+yC2M%l7KHyA}MZ;sm<3;`9Y7QsH}GV=uql+1p2*^!Jt`-qUbttmR&
z-!(T5t`5sayhqQXW3%mlf0V<I#~m)wP2OkvYDu#@7{|s!;e1e(>lxk@V2J4fy;+~2
zl|8L>$5&pH(sxMH0&e~?i5R={08P5DAk&+X2{&GMj1VEkkA78xU8KfJHVx9=_+g4<
zcsBK-^fh{CxOANB20WN!s7}15LR>9|4hj?m=|p6-IA}eEAUUD#K(tCSaET%RXU+IP
zYqu8i-%eR*rjeFRe%*Hxb;j%>RE)QZ15eMt^LO4dlIFJ}N8AZ(pOnBXsSGF&fo$G>
z)Q~`yWMnlM6NXG$7wRifd}T=j0VT=+S!v>!cDBcJEL>ziO7KK3jeh>2JeJD$mVbfc
zzNE6-4^mAIv#~JpG>(;BY$D|YBb4&zl&+Gj5~me`veHPi4jLMxQtH|{*WBUh5w5lJ
zjBLb}0##|qTk1JbV#KVb^SE+2YPn0RTRX{^P}Q#!hk%hQV<)hV>HSn&u}$!qunqYB
z<wnZV;KN&gIgkgWsYz(q6!E7<?D19mXlNc<br+T+Hp?GaR|RlzzuwP7_~4tQOG!II
zYE0t>Cc|tpJdZPWXy+<`*n!tWBpTYFTAxlLDElQb914a3_k5L97A!mF05)S5+oRdD
zuB1~REOGzXFtPERJIlgb@9fCEgsmNGI&fhc1;tOix53WQP|GVTE)dE66s4LN)Yf$e
zX#D)0GGCM)#O{JuoHO1SMO&O41#DuP%QUo)3_O^FnzSh~r0S&=DTocafN`kZ$FRX?
zHE<>1WDllEePJ;$*hPKyqzfM^^9#I-m|qoNC~pThWQ5juaPu*xD1vFMS~@*{4<}SN
zg&}5eZ`6zl{0Mo&x~Kw0jW?7H_i#q4Y>HzGTw(*T05SA+4MQv%xrgr3sqeE@BbZ2B
z%Z~+qMIYIhqeq|XR*|0t<c{KDgdn%dEE)=GVDnN3%9}?dFIV6f1KMa&foK>BnY>#}
zav5CsLs$ISy()uV@72w-DD8?rl^SG2=1XKi*mCh}Y#|O$$>+!MUZ+?*w^|37^R)2f
ztY7U5P;VxBt9b=jl%}KpNQuSf?lIa(;KqYvDqt=;ag2Z2yJ4lJjdSlqc^V(qCnE_6
zVYWjF-2l6K`vqT!_8*}w_T>)2Zqe^A=60jJYdR-a5^;uJtJl|U{NZofQ9QA`XA94m
zqyv*jtQj=FUVDAyGT#e_xZ!n)s+obZ3Y#XPxM=I0%m+Yz2xg5B*(*Zn_^ebF9Gl*D
zL`9N?dX{<3ivrzY?t06<cYdU!V<>Nb?R0GS`#y0}+Psyw(fZz=7)*~)gIs-g<#T?J
zU*bffOBF13ZP!6-O<nWRyZK-~o#_JM3GW@x@HtuZOdi%^ZI_cAi^bs-n7;+pa$4z~
zam;rc63n&Wk9Gg_R05HmAfcOZbyIkXeh;i9Q;$5>r<-xbBH|IFVx!-yGOKAfHb=mN
zp!063KRN$&beUA4ia~0))i+$JqavvexkjPW>uRJ!_)A4`CPExTk<B>$jET#of`tu+
zU*uXQOGb!0)7+92R7Lx&gHIkICz$&AhUzhes39h&W?L@%BS2#{^T?83TKrbOcPS-B
z?x<DpArazmib;H3I~#Dfg_%>Oz?8M+CFBRp-*eg&Ne=QyUI+Mg^$>OPA@E0h<g<~I
zHd2wl#M8EG`MDTcelrw|VWN7hM`o^&F?5WLW(g!IktxyfJxyY}jA#~JJ6OLAglc78
zckRo*R(y6F+hY#aS?&Wk>CP*bR7K~!c*saUz%MdjAIvB!UGUL_EoMW7|Gwu@Nl{-*
z=)+^L_XdhyU|$P}biG>q6Ss?Cm)GDvOstIuA=RO`T&!-_6Zxwxt<7hg72`;woBaz(
zA##vCHf%?}<21-8jTzoEEa}eA%E;+XCDCX&iy5?HgRkBTVgCkQ)HYBp?(Z?+{h(G4
z`tGF~Uz~$tMU=78<bzySRUK86(rncy>{y%Gp6xx9`b#HeChlR|m5LeCd)7Md_tjEj
zy3S!V%x3<ozq`_|hm1iMdd}LhoMHYdB@_`C{zNg%HxrAt?Z<YtK9$Qi1YU=Ks5bTr
z&5#PFj7;Os3*TGW_l>-dd7J9OzSC<S?xlL%f{3NY(y8p=6|ebf^Ey$Hu`)7dQ8`RM
zKj=aC#8?HhU7wz%{Mj%MjJ+%Ri>8zwuVtF0I?t<3l}vRKRNY=+j*tR86pu6JVz5q9
z(o;`dN<%8dmJ1&ShUa4j3Ii?nJ)P;v(lWogI!5X)kR69Gq3DfjQqKB*9BHgSnsXq9
zXMY0;he^2Tb*Uz$rc*$)IK#JT&KU|jDCiO4&$!h%?Fvkf{m(ge$h!R;3)bNk+C1&g
zKy%$M6FP4m={-3x-K4{m8newqG>ify12v)?&C6kZrakkLdOFz40c#Rq_`0u{kiP1K
zz|Ed1TFGKEy0(ks7D5M3uIprMnbLaMZzhAKXO3#`jZ^xo)=cQ5Fiqhk6)g>V+-luf
zmfcz}e*yGdU9$`Tzf;UR$~p35X9*AMkRYq$O@d-W?o6O3<n5R4Mv?;V%Ds_DWhBXC
ze{nY15M@izFayLw%n{h%WY;~ol2nS3ix)!j`EE_jIgiiz@pQbm!8R3@(=)%WtLnne
zO!?tfhnlHJ=cJGRl8LECkG%ehew!2`h7VAQum__6a&i?JA@itA)GwG|188#1Z#OX#
z$!?kC3#rWbmomQ26vTwOplyLXt5V~+X|4~XJPdo%EwE<S-YVZlG(IV%o~`>5t?i%1
z-~?DdjNE1FLNZCl{6s8xyC3B_A&phEW?<8yfVny#s%aS^Qat5|suVZ=4Y=?V5q7m?
z0mrIwzoj5!fJ)p?LyqSZ-y1x|v;1XJBKjYQCum7!mnuLfh*=Hvq4=*{kL2?mEGf~B
zqs?6o$qFL;relOtJ5GcH1#qUCwcTh7EssRkw~1wC+J4zLgzi&_Y3Z8D30Q0t*KCfT
zcVnx}AZdxZEe&oKhfYLr<p@m3iay5I##RhIkF3SdMVW*IXI^DWQ6)sFLP)M7AbLPx
z6443m%kNBZ228k%|3I?-yl&lI9nUy7*vs!{b9IFSW0*EAs}Ba&!iN(l8-!@%7?Kqq
z5Y@yS5KD`W+9LS#mz}a$ekCDd=NwjK(6LL|rFd&eGBQ{TSqDZI?oz1zhE<(cS{We*
z78~<OgM};q&nJk4m&~w(vN6_@6XZE>HC2;uMbWyL62pnY)tiHm&{N`H@&JWWo*BL^
zyM;BsY4U}6@QwBTD^3U@lR5RabJy6G*fm|swoJ%!ex7r9J9fImBIq>=3;&=b54hyU
zGuUbWETkwS1BI{sl0SWz?A1<pPoNBd;s53}a``6Bo?;V%$V+Cg(8}}CNAOF=1@1Vz
z;$V0E{4JgCi;-Fp;Zaa*SLE3Zxqf<4bw`xcMAu~O8*9996Dwp}^=tkVUPhBSi(aWR
z<muu{4c~$`2cB^3(QhxV7!TlZ2h_S9ao>XiH5TMsE7uynZw*rBc2xdQUFyX&>k{op
z+YY9GuhqaZ$Fn2aY?pH1I=&sy)d|C%P>kJsKf{`OL?bq*xPc&d3DJ$zS^`4XNdSSU
zVSeDC^%1#gksa=eVAxs>6LOlkr3Zp=hUukD-<Hfb@mJ5}R!E;AckvA3VRcv7R%Vy~
z4{8Z48d2AkI--2s_&Tv8&f7c(PE~!2`IUT+mOF!N-_^)!uqI_JDR~YGGBLw1o%M&9
zGTI|RQaj~qS#ar*ucDAvd;DBPmtV4!4$)le-^PmXmz&%fhcS}_r7<@RP3BxZ3qg+A
zWQbWU7txe4Pxr)i2uzwwx6G#%VT?3Smn%-x6oc4S?j;oBBApe+0Z1^dmrK`K_cfD7
znS9)NOU1r@VnL4o*M-O=hT)Y&#d1}iyOOfjjssxQWX9@A%MUCxm?LF+4;Orm8MgRX
z9)|_4g=fqKm+4sx*oc^Y$c(}MqHiEgh-a`>BOW8;EGACev=)uqw~Jvtkpc@2u}5t1
zWf{!m%n`UqWP_6si&#5g3bagelPP*v#+FZ;WE5o()JMcRYGSv)C7=6rB9<D-MZgP2
zzV?#(n;q5G|4R^YJjXP(N0wMtmgT(*z80Oc+qa3$ju4@*wW=8!bzS#TyvFZieZeAP
z<)~?MqB{IM+^4kSLvb5|sPWpEA?bigpIKv%7vRfx0@B!%|C9v`7G23xTC6-rkP`!+
zm0hNP3fz@4Oq2o)s+`|ppRF@|oX>n60QaavXWCy$mc~E7&Ae$SyUQ>bMA^%QYSgX<
z@7ysGi=Yv@e>t-Y1KZ3brp$I*2%9KoV&VKaJt8$L71eLqFcL!jqL)k)6cL8b-0WVh
z=_VAEh{40F(Mp-d<}e7l2Y1v@K`GBKW~r<wo0n3!gckDhL}5H~eR)OcaxvTt&}#0h
zX?N;rf$-~`0Rv;X-e{jPOmAHtss*YqBZ;o$gweX<SH+gu>vV3ohlo3#LUjeQD^xhK
z3ZY;9Twj}jfG>@)wS*OWu?_GPLeVqr!qDI!Zg|MhA|MEa&$3;+%o6%M{d0~#86oPo
z&7E{3ls}E1&Obbbk1|RY;HQyv3$7eESL=JXP+`cyS6_*1*DtkrdHPa<T>*U^%M{7W
zywJljZ_v7zG~^6@f{=%K<p?D7TEz5+tKrz18I4azGU}EN&mH1{02x!Q=y~%5N}&$^
z13?qf?9D9&kV89`DMZ>)%0aIef^^laYPhRLX+Mod4K8B{i&8hrYT!B~e+u|#Qtajn
zf{nj{-DmU`7EI&sAVR%s7Tp+dJhcWbT@%T-c8kMi+Y?f8g{xtzMQl#}2Ygx@qf>~1
z!~?54HeZ-3#;T%vOnKW<Cgkqh?w#r890Lv9Vr7Ud&bg9}^lBffj~lw?)Cc*~E7OcV
zIu+0}7%{xFAC+^mx+&DQG2A+u><QF1M=d)F8ee4KP@Y37`yPh7<sPow9<s~<3YMI5
zAi2uUI)jNMMyWn)VV;dVt_1nCM7XBToD);uiqEh(g3{FRw6<v~8osR;NTO(@u8y+s
zJ8R9|XF|z`?G=m3q>;@jx((j#r-K4h#<7BNq`1L54~5uwh>$cXzrdWl-l0%XD+e6)
z?a@kK?iXau*|z#QRl1`%SfeeM<C`9toGu^T79JePkb$f@bY)&G5<#rR?0denJ#N9f
z*V`xq+1?50JTsh*cFOX~6HUNG6M5`Jymrx1qD&|qyGQ-+z-W+Tf&;b@aw~)=Xz!#N
zxwO$70eKepLiN_lg}zv^(bH1%O9sjiTINKE$=!RJp(n$-9`L9Yl)iNczkG+edn*1k
zifVu>CnlR|PSXw8=1N0b9$#w7xW)U?X;+#;jyuwKx|(^SH#;h@V3&T!GSL~a*k+f}
zIZO~ST=KuJcx1Ng1g2{@TfNsNsYHD*-fhB2ia{SaSYoLJ#Au*gf<HvdZpV%>Z8_4O
zSaxt=zs10Ai_f~2W+A>0T8Nh%MX)2{O$(sP>Bhu_<V1gLmT1?>PgxhGkNkpXI{M+2
zv2aUFt!0vmej20IXEI%1PL<qTN&@3(sfY5QmvO7Ac}4w>C^gE9L<xT{yHx9Dfzv6H
z->vh`@6Zr7%px-F{ZwS$RAjxN`WR!E5u^y1Ll@Kjs3a%6i4YL7U^wQf6&vp<g#Rh@
z5*a`L-VKA6+};?vu0F)2`{C9=D^lacGU^$%QU(|THN-%e<R+ZHr+rQaf*99j-u&Mh
ze4JeM(*BOrP~%_@Mn4q;K9EPE&sgRj(#Qc{C6oP*XgW?R2_kwPe=G}2gOyODPn8aU
zp@+zEV&Os<!3CF;t=dP8m6wqf{a*YUB;^45uX+~pDXHS^6<k^UG~N9C!;($hPk{#5
zs(H_3wAfgjUXJ0#YF=Cfn6?qjZWuvnG{JlPn}+}ZV|lpcyAxH%PY60+OQ1~iAANu}
zvBjbU-bg*g2@c}79%BImag#R^f@JT7Bi&0Qg}%YHfqA!pWx?WvB%Sc)CB7sN7UQoq
zJ5$~1UPzve9CzWh2HVb-j6VOEmfRxFT8R=`10RzxOXY~H9g+qaT)aJJ<tLkEg7)>6
z(UuPu{+P9(0NDuiP6i5?do?L)(f^N3`n`CrR3KnLckiZgo{1{q2cGt&Icb=~(Ow^H
zreNnIa!A<|*oEr3QtgbGGiLjQ2sx?4hVRgwQDSrzZAK4Mc3nDZ_b5lN+#v{t6V&YP
zq(#&I7LF3fd!V8tU;b(8;HL6kFTecv$5lp%Qp7bcZbiOxLdy1@6RA0ASZBGj!7#6I
zdDZc=qp*Xi?KRQvtyil8VGW;@oj48A5Luj~OejOJE98{iRVBRCmxisameY`RWi~2c
zLDJu>x0qYnxXA6f$F^iG>Bfq)JAb&sH3{1PI@c`Zm7uZMZx`gvx3yiej+ddYu9h+z
ztCT*+tCqDx?%Y;Q*QCqPYmx+O<$d&^B7IHi(ydv$ze<F1e6USAgUQ<RE8;ftBJqr{
zL7c1O#=J0s&go0U_C*pA8yNybHCHapN=|y2St0T7jgOA;KiG_igG`&s#!etDAXJ+C
zH77+kxxH~)Yh24;ajJ!Od%n;P;&30Ns(#9wYUhlaGa_Nm+jnKOn|6M$;)1o4UCGpp
z!vq)sF_-Qd>A9ht;L7#e6wGHPGETf7gVUZyM4|ZX2y;ybnYIg}h*mwGeP6oZ5}}Wu
z{k;yO2%zC!H-8XYt(9UH{%zv2`iV{bfe3J>fI<7SXJabQ(=Z3rU%!L@w+GkOm1RJY
ze9(BXKt@hGX|wcxuRaVNr)(ddu`|zYSW~Z<wppxg>9o%%xq69vB|%fFmhb{ELUgRH
zAqzaqWkbg1HqTSh@xbezE}4oz#GLZTq`RfN0+xT5SgzBDh_!vSBmL*ajATIGVE`<i
z8u9?CTU=iVg3`nL+L-tOwlVFALQdLiPsTa&qaoII;8#4$4j&=Lh~!U5m4!a$U?g{1
z1f;V#9o8tfi|p9PoWRh}Vv&*F#}m-Bn||yAEcSncltv8#n(pX(m7OAn`0S0MgSFRq
zclV|)m?s=L`%bqam81wk@@VBD>UO#0Ps?)o$SU0|Gpi9*d^A+4MBO@jIU&DPgxVXN
z8l{4n;iS6q7gw`DCBpX>1jgZM#`?YQYs4Uvm?GuvQlVg1s9a5<z=9OdAp>kO#1&16
za>pNNi{B6n9^VEpBt*y2bR!(Uim0gXbz*O$RKL~%iw=)$u)WKIQbrKo2O8Z%_%>|p
zMoMUnRj4B^bzk&}#dg?xUuJ|xSb@v3LvF7+ZxZh5(?8}p)y8mY;&Lm|Zn$g>eb2=<
ze?ZKU>=&-ho$8}uhT^qy$8oL2FM|X6B}DAA+>l%Tn+hp^=i!>hW3dX%A2-SnNHR*6
z`7z?C>nF8aQfAoC#75kCd+!LYy&3be1I1|#rg#E7ABz~ZQ<*ND%@^W!twG1C!Zp3)
z;Wu@|6;CNk7Nklw?}_VSyUTk`8$f#6UneSe@fH@LUQjCuQ{##^7vwR}RwMt<D%W3i
z$xq*xB4XH||1hh8H4_%$d18^&VCU`0y4DPxf@J!=Lh?_;l~igdKaH8;v;U=J8<sBb
z<MVCK9S!<LI^j)Ze6b_AVDyUN#S0#923H0`U_i>FZ`HI7nG&~v<!!RD39&^#AKx>m
zS4mCDN>lJd*1Cwg&fSirvx}KjtV2-Wx$eEBZ3==Dcxe2DWg0t`UJoGt(iL8M$l*=O
zUj&E+3X@qZeG)xq-C9wfamv`wL>8$^s25VY%3teJwE8b?nq;uL8ZIu<aCti_Y5{6B
z?$t2-{vL8d?R~Ov$JK_x^GaI7?eUoOVqDc5<k~hAmX4GdzzrpM?2eRkCs};ouEX?R
zdX%IDX4+e`q36wW3<`CsFFFg+LyyK*fyzfmSUl$leZ%xP;SQwF2ko#>W*MnhG4v9R
z+@<)sT*pIGDF{zWmyl3gAwE0vRQx;^oJo_2ZiY_JJbXhUnA>mOpQ%GF{J_=e>&b%G
z_~Ow=r>C~B25gccS;TQJ+EiPp;|>JrA@_c9{I&e#P0?5WYbh=%KG6IIezfhA`bO!P
z8ey7BZY&96&stXPFk9+ZECW^iw*!Tke2-K9VgpH-)211I;ezSfv5cm5=4onoLs&im
z4Y8Kw+PjLA20beSe0~gp%yN^uquT9#{r2{MLn+lnO#Fzif$OWexF2ky&x*@CPK>R|
z{FcJK@Lx!`!L7UsF}gpQVyz($bsBG6d!db#A*6lla=s7CfC|9~a%JL&s~LKC6|QD_
ztcc)1fqAkbBO4`L_&dPSPD}rk(Dq8CGQ00h6DIJ|_|J29F7IL<*_WYh@XbiIK!)iJ
z3{~Dv_2I7%&WmCC%9Qdt+ICFsJhnY*Ep6-$B?=ulH4$c~aiw#*SI~LxxzUUZ2`EKu
z1WN1$n|L?DK_Gw;BQPern!Se{Sa?E+brQ*b&L=T@pLVhBS1Mg~>i^kWvr6a?G=&+G
zno;cV%<nf-%;GVKs>P;hG`R&AI<tj;7YI28FkB~Cg>e{XQc7f|V~FEnub<7?cG`K4
zc_1)5I@W2wy`ux2M;Kv<Huj^M1tL+ao0j7H9`jAyzHcx7d;gh~@9NG47Ooz&^{Y_n
z)L85FG=qlgMmn$h*%TTCL1I#~>wOqRcr=4V?VewTlf#8lTneRl9ulSDUs*O5h8npo
z4ilQmFdRf3<P<W`fjVZ;vy6&jk0in&!}z-Mhto<sku3TXE%oCz1=x1C%Rm^CR2Oo>
zM;nH)T(cm<TMljV5=QjNV@?I3Lt)uls{k8>Qjp31b{V52KdBVZy%SESig{YA^D7lp
u3(|evVxp0F1o;?$@RIruJ$gTh-+Rxns=8!=*^TAyGv3Izwt0#nH<^coEgVY#

literal 0
HcmV?d00001

diff --git a/CERTIFICATES.d/03-window.avif b/CERTIFICATES.d/03-window.avif
new file mode 100644
index 0000000000000000000000000000000000000000..96039a3bbab865a20c017636205ab56dc3c0f099
GIT binary patch
literal 48111
zcmd?PWmsO#&M>;*#@*eaxVyW%ySux)w#BW`7AR2Mi#x^Li@Q4%cRTdi`~A-DzK;Jr
z!!=B1O(v6MWhFD28vp<jOLre<6HgmU;H~^=9c(OF9BfQ16+~D>004~5!NT3-&)8d`
zwl=qS{TB!T&NgQ5{{#PN?QKl|hYXUljl07?V_<Lp>22(t%>MMm0RSBM^W?2EyaGV%
z*<1gg9+=)6THYHhVq@d@4=4YO;JtM${-FGsVdBZmBIac8^bZ5L|7+xJSi;-J@=yJP
zh-c$!@h<`ZfMjOwX7<mLe-^d1advfnYvpX5&79s^3>!CRi?{ZzfMdO_aQOzHINNyJ
z{CNU`fq{8z5KKH-#6n2_JOR+noa|j4&FsD3m_Y=fg5Mrt+c-Oz{26;IU;r2d7<d>2
z05oSfn4A2g8W|Z{;18KMR^BQs@B%>mk>sEHhW_vNt^aTM^lc0r3<QAQ+TgbedV~Mq
zL;b1$0b~9f{(}bw{x3T3-(c{6!?^Tsowow>&)@6(>pFlUD=8!Sw$ML}0>JAMAO^rd
zK|w=7!azeq!@|PAAz&aPz{4ZpqM;*W5aJON5#kXLkWesEk&w}o6A(~y(a<xqu(Puh
zQ}GCJv+^^tv9tam0tO2UivW*+gNTU3N=iV=`v1DTb^xd_z$w_9uw(!@Di{bA?6n6V
ze&Z7o?4R;4QT_-Df`EjAhJl5He?zE4`J*WiI0Oh165>tiU;%IA00b%|8Yzni6uOED
zG?@zqYe?dE7;@37PE6IwGYU3S*HBnEENmQHymypT)HJm09GqO-JiKD!5|UEVGO}vw
z8k$<#I=W`&7M51lHnwi=9-dy_KE7e$5$`{IjEqW3{*;pX`ODX|oZP(pg2JNWlIoh;
zy84F3rsl5hp5DIxfx)3)Q`0lEbMp&}8=G6(JG*=P2Z!eumsi&}w|Dmsf8_cj=l_&{
zN%miIp}xrl4gmpzfc_&F7`WFT!BHU~Nm-!KL{y+nT+qo_LtrpO6Teq=!jiM8o?)80
zPQqbPuy4FO|0CKzlKnpuEcE}AWdBRB|6Q&{009K{_VPfefDo`g%~q)~XzC1{DrMr9
z7g$?L%3y4yG)FaIg_X<TDIg^W4s@{c>NP<Si9o<5DS(Vph6nR(9rsE(YQwXB1(QzJ
z4tkUut|>)n#O_i++b1x?o?MkL1QH+F@ko!LNhLvqDnoA~lhxQ?#iMB(yql>=DVAWh
zvWwOl80b9Nw{wzfKaWet>v1oa^hSlFaI(EKY`fXM7WxJ#D?!*nT`dZIO2+Zu@AUtG
zpW@OlmP%;z3Y>);z6d*UE{(D}px$>U*6Dfrn(e8)0^k_=Pc}DG-u1jmN)5&q)sEOC
zA-4g-PenTZj!6{Jb|p~q5kh8;ho#SJ;zmQkEbUbsqDhT4pYr5~j(Ndb@fI4+C=1=3
zAiMPSU@Su{HEmd8Qtp-7N9cHJgV3s6-B<MX-lgB7xhfgXe8<S-d=K%SPeH{@e7^LC
zbHf=*@U-%&2rPcx!CJ0bsAd4ZI<y99sZS|eQ13;3NeO0U-1=gewdYXJmdMLQ<mfKs
zZsxuY8Goq0v2t4F<id*~ahP+DFMfD#k1U(@u5%N0FyE+pkLnq*lRwlK=}`ipc!8RB
zs2!{*NTu*r$+NfwGstxU_I`{WC`+x!dg@vK#)7$#4w=T4bk=encnD(A)q2Q^Ii*C#
zN(pjo@%*I6X}r)UGjur-sG-RhParN5H>a+Osg7#yO9K&vY!3%Szo01i1x^u=XP{Z)
zKyw#4^5d5+E{h?Q!mz$44euy|Yl)<4z_cFU3N0yE(&*YE-jAK%d#oM&@niv`mB}Ci
zP(jJbd*BFY{d#}Wh?LyXoQK_oyUGzfPGRV5|J>D4&%3qlG!$(FepubahLg%M;E+_x
z%ss}EcsFA?)2cxAb+>#Zq9-^tEU`6dp2Ukjh_^M9@|^5o+}^>`Mtg6ZnXo&?y<gv}
zcrV_?05hx8>wy1eb91F2P7UXI7qbdCaZE{`QHWRRPNZ%*rWXZg`#v|W33}NqQF*-B
zJ8qrn%jb8&F6{#(-;Szk`aL$wx{L3IoQL5KS)bBz-c>mYoo3CI!>RZ&H)9zAM~SuR
z5Xg9F{GH6ex|_z{nPHO?LEJ<xOjmNXvdl1M$2AXxMqzs21*ul;3=B#9-33o44*yAB
zsu8|?68Yj`o^+<(=41$6#ujOSg7VP8dbvXq7fVm5Fx=@EB$*CkBip9eH-BDEQCX%y
zGzUYNDX|gR*#|p-i!o4m-pVWm;n|!W#S&pug$Dh?H@8-<$kb}z?7GO9RSZsnyc;dK
z5;7ThDjzceiF_wkN4>Ye)>CAXr0(I|S)Y*YXYo~POKotS(2+YaI3lA-Q-pdb{!>`y
z)*i-gR^JcQ*kcbgE-1AdN_=Sx{}`s*6r~L%yEVc_VCgV}^Yre5JX2`lhByTf!4Bal
zOtue&`HbLIn@a#5bfc!-9GCgvT!&0;l?nN!=mn)`Jy2UH*6F#lUmJA1SOLN!-naT8
zbo`h}$NMOIPW0VvZ`t}GB%mY=D-M7IK!w@a2=ZBKl1jzp*6czkdWy*sxrgv%1jU?j
zL83Hsx<VgMEiWtBV@2}%Sm_sngloaFENnQQ2STxgmvkb%7PF}-l9Vd*+UnA}4o(W_
zcBvsw-q?dMeugQhQy}i~<O26|pi+?mNQkR>)?<j^9`NMK@q4@)m|R@)4w>k-7;dBp
zp`b<fslj6-BF6IB#Oy(`*v<;`3|B>tWPWy$q*j{drg_B!Pe+<_GUxA-YnE(uKRFK9
zR@V7%EydB|j}q%!ru{yW{V6g$aAH4{+e8%uCQK}Ir}rX3i2c$^@(N7aX`SMf=Y@NK
zqP}l9-D9{LJ)DKT0utqhKe=lIVGky(+5lIsv~Hb{Jz2~zPq~gVPmu0ul*Le`#?`&7
z1BafC`|6Kjqt0oMGKF`kv(M$bnFG|w)vU7XdpI2V>)ei%({&8e{S=(lPl@C)=wohC
zYYS2fZfk0oJZ=|DVl8D1R+<4qYW30d<cY352wNFJx+@i4hLue%GYsbMC1X(qEme|l
zOF@>XcE+|t)yq8$p-&@Y+3)vatOQfq5YF`}?=pBFqPB?odl=lvMBX)OxoUg`Xqygh
zofQS_N~aw58fxL4AGd!yLtktb|2TRO@2%d!P*GL+z?gmHwSzc<U{Q?|({8a9_o>-q
z`(mt=&aE|$%Q(h7;Pi57w#KSH@^_}|F3*SqUPG!Equaz(ExuN5lY~!9ejWt^3moTG
zsXE^!V=pxoHr>(u;Zgee=ch1}SD+&6SF`Nylf^4QG9PqQcvV&v)baUyic&;|lt2j8
zgyvTZDLJR(J(e>(HPG*Egp93*tFmGoS~NxIatE#_@>jq-9R5o~e=2diBTk&(Tyj{!
z4%W=iptF&_7}MFZ0edIorVa{(7%h$UAJ+{*zsp_fOCnLFU)Igy-1_XQ&$J$v+HW;e
z@%S5C7>~bDl;{vfV5k`0&tj-Z0RLSvqqmUn(XQJc&eLB3VU9ZOpUkg7B9q=L@B_E~
z3M7o?{h!vNvRZf6p6KwY289!AY=-c;M&-_gZ9@QmH|Xv>>~8$&Qg>!v=;teNyO530
zWI8K-ucIT43xTk;eQ<iapUPkid=!DG--N*-tfW&jetCQa)-2O;<1|(XMvjtLtI=4I
zkb_i&u|9}s<0aWrX=&AeOC_0f6h%V9&s^yycm<m2jQ%|<HtVGQ`NkSVJ~(SYipHr8
zXoCae{tu6usToc#TuT^CqZfc%AI-j50$MT~AkAk^1>r$x^C+~G{PM^SjLJ*T(vwke
zZf{!^Y-DC!jarEzm1X}}gqK7f=rK-=<9(bh7{A$m1%8g=|7!|Z%J$(a&~x8Ua-KN%
z3Y1Hu>zJe}!vK5a<U2f|tG(5_`k)4?H;xuwmb3my-<CF@x^&@3-LE*K*N6Ku)Ua~f
zaCxu!``={61U_L)qiyidK$GxLXli61syQ3Td~z&vK4g%nRp8b??tqhOFbb^0!NPr4
zzitK~%`66)+O%KpVLx9=-B7;0D?yi_HIA+`whNXU`K`&ad@$K;l}n<202FeMdN<n;
z+CFFSM`3o4=nAhu7I*t;TIQNkT^+r{CMwoZ<rar~rCWpq=WK*zx&rGnrjga7YtWkI
zn_357fq=9t#ApnSfPZ&5|0NlC?|)+fRT5hNk~jBX(}U?%G;aRV1N{F18PmJ&7x6Zy
zmsZPHU;@#`{uOXkdOV(GicTg%nvL6g1>$L%t6ny;VV{^@0kYKCSHO@tXuqz^ruCig
zV)z{M+Q*bz2aR{q+o%HvPh#=93uo<5QMz2u-kq;N&TL6rMRkK~t1B|yx9o<-{(S{N
z#R=gsYKomVnKS`3a^XJ$Zd}hYWpfbodpFMr$yUzY5--~S!pXIUn*z!eIuLmKe*I@^
zu&N`5cpUFcnfpPYrJq4?t|BG<R7j#V+ZRYsd~n8E?Pu55Ge@JC`?0vUAx-b6Vyr-+
zfpv;oU1|9}l$<m9i<3ADx?aYv)nNxKTS8|DTKeg&bt|`3W48D=DfCp<Y`fv_nAygE
zrFOWvS@Y((v7Z?<d?TmLkl!;srHJ!=D#V;ATKw*+2*qlLHpqdv>cZM+;oS0K=-o+v
z#@-ii^gJ(vo_Lws5B<dbYz+#G>ea6E)Evq85zZy&UgffS0cEJN`?l!x<D;1`!#5|e
zb-XlXBR11!W;WQNKUakWESqIxx(35h=ltK-zH_gq$mY3c@6lHv8*ib^2|H*Yy*y|x
zX6*qi8<zjCmsB!!G_}|oGeJLuPo(dINX(7jyeA~0>Hil}xv<E-1Yn$nI)d(8iDL|B
z>ComGu&K54`0`ArICT9x@{&}$$sU=Rg@nMp|6){kwWa<y?m^5{O%y=O_ujoeF_)H5
zJ!P4d?P{PHY+M$$WAH#2ho)>LhJK<?Q41O0eoQn8hGgA;#qD10H@~pMartk^?+GKw
zL-7-F3;q0CS-wjYNQD>?DUv$DM0pcXFy{!n)}1x6DqlY%GA}z1K{0a+vD_;a>WXaQ
ze$<huKItFJbaZz1hISI*y{ZU}0{WX~E#J@1ia4h4(WP8^0bGD+;%yvqo$ycclsh?0
zAv(^}TA&aPc}N=fDC{6?w&7t?7?<^kJ`$8)>7EE*g(PC=5^{0*pyp8bwGh2wVH2EN
z{$q~OPZ9EBz$|3E&0a+q2XWIFn`~8J!KjTzB~;mp&)4G3+6AwWQKgSX7qj8CoG)30
zNzfDHkoi5v=sYIP0p3tB1hzvY394kGIfF1H*Y4S1)`Hm;hLilbDW7j%w78tfNdPF$
zcl!ZZ_lMJ_Rg)1bANtN-aYCq85sAa^d?ca8e%mz-xbN!5NB~AHSUA53PmHv^iW;t|
zBb4wMA85Sj=(^w)a2hGWlXE9He;lEK`~)teA6M6|;I4yhS7egl93V3AW{tE8h8j_`
z>J7`5(LQ377_PY$%bBh2B}YG&i}_B-9TuodNudc_+<yCMK4XA|zmTNiM#-5+g^_!I
z$rMhwTAI4Gy2O~7+p$1nhsh1akb4;%+iEC~QqjA{m)5umr*}yn1*{fqcMsR4DB$5L
z@3jXrvgC~eF^iQs`Z~NQnc0TnRM?myB%K3#0R;(BN9ImhlXzim^IsgDBB}C$WWiK9
z-*tv#O3d9iBA7B3$cK3d8{mM{s@6A$N#<Dh=5E-6_Mz$!Msg`xfkRh1rrxy+$|Ixe
zEv}bfYj7p_S70DN_s#r?9~f+@emVa9^-IcKQ((I!EauJ1e+Ye(+X%YHsC9Zc|7Ry<
zI{}5h|CxbbH9CXc+$56XIworpC#a)D&VccP#v#ovo^80(zUpW>zTAFN7{_R#;e6yf
zrJx?qGG@GD(+y9rt)cKOp8d`Kl6exPaL*NmY1x}CAr>r;dQK^jn6pBm{^kaO;wN6*
zHwyJ(uvj-jm3FBa#+HfL?q<s|z!K6NHsx`a9YtlRwXb>h&aO)O6{f{Qu(VhzCSZe1
z8ehz=IVMzuG3^;LXP1UN5ya421l%->{!hF@$bzcna)&vB`LnGrHHcWXo-3)tES0%5
z;ojfe^C=EdH2_NtKYaRTV7$f0)cgJ;&KPgv9o&Jl0CmSzHiAqUS05_l7DQJSwxhOL
zBhMBG_Kj$0S%WnJIIDIB0$9J`%!IM8O2~mQ!7;DU!YeSnDlT~5N#IE0zv6rTkd_-@
z%iiLiDffeGPlGl_#Ocdc#^X!Mys@vQ)W_r1OPNG6V1Ri*pqFZ!%Fmj2PP1m(*aaeY
z1U?Mkx%;f>@3-58Nao|<FJt~$c@Y0M31}`cWUA;D5Gbwu%hyG@?P*y@X%K9AmJR;x
z=gJN^3>@&*)5X2rNMeFD-cKm~bkh~Ye%m_9Nxm5Yj?k6v6tRJ}d7?!`iWWD|<MLLF
z=KJ@4-f0g!W-$k<ESKR5!OIuf2`(}I9WT(o%604-xU}d%x+PWhk0KUSak)4ot}vkU
zQs$$|are{%g#3l5Ou++uw|hs7>O&XdOh2*5{=^N{HW^iCAz5Ioa*hN48)<=`s^c#Y
z(M%oXA?brGv)ST!G&^|fljltN;}~J%c_cDT0N^!GoGU8#oO4#uByT4tjbnvX$$Ikr
zbQgltg$6y6L>t-<vT@gc1-7>0ZMncR0!gReeIAZiR2yG2?QmurCp_=9x8WKuwmDy6
zH`Mx?RGK-X>0sQ?*G&Pk)bWBEmj~;Af{U0niB|GyP1T5ouS6h{!XbJ>?hCH^Az>QS
zC4~{$3`5wr4HgglHqPGLcavQu(bTZs;2~kw;vOL983i0vbV^He7uk>C*SUppwkRIc
zLOkx)hCL#>q>+}_9eG6V0v>>coEoS~iaKo64*zx*tzCNp6r><syCdoPVWA|?`v`r<
zeel$Q>vi{RL|r=EClNHxDXf*k+lcgt#}$FVgF?ziMi@D7-2C+vNA5x5i3zAS3{B6%
zQpzur_lc=mn(sn7aQdJ(r7^&AB{XZ>;x2<yD_W5GKB&ykqyf}9QGZn$TrmXHUIq*>
zg{!-?4N91nx$pgCMRzSP;-hx|-r_iDaz(dqE6lbZ^*KEQ6A+ny*~v_@iwV=0yq;b#
z`aFbS-V6<=|MW06ECpiD7x<yL4WzhRnQcYj7Srr=JW}DGjFp77NC+;EZ7rLtVR3D;
z7heHZ^B67xsZBek7m7S5F7cB$<pl_!U$N_p<?@OkG$4q-yQ$ymr&m-eP=8Se^E+wQ
ze9qA`H6o8OezrlpNv+6kYlLR}aj~9(rqr-<q^^lb8spOS`*5@)#$|9|oM^_S7N0Zb
zJ8Oa~l3vwH|J1HfKA^;~nuQ0Omjn<vB6coA2l<*A9#l!*r7nXFDyy4^WQ|9;FB-I-
z_r&PKT*l@hwTrx^y-aoe7cTK#Q+ArcVT48|Kxs#^orv##41XMWr^qA3w2MqMU9EpG
z(Hcz?%83g>*klj3v@fBRE*6oeLuwj_??Ug&+jMZ9*!bY95$RrPlkY<yxW~ioRCosm
z#H`q$F9rY7ySE6#G{w%$B|keoP=!BX6*r}-Hz(jC2}z#1H2Rgst|z>3KW>tG&`JEr
zQXrGPFo1(jjW~xqmn!tg^Gpq{-d>sLvMW~gv2T;P|KLuocP#71(&b%yLhRtcBL0&t
zdd_0%vi#Rqz^`7We=05LMx!wzNA(aMYQRwhL_8FXp-}M26>q)_PVTA;>Hg|ep&?z~
zMoxqtp&ztk?CTDA<||Ona+^nrK_tSVX7(gM+k{DlIBtG}M`nm#&n(P3X9vqw8HQks
zkwcT|6ZC+7y25;CVY{cQhOZ6YLFcFvC(}U~z#|j^SocCOL!tB}zUSe?K*-WXI139S
z+dI-Yrf5l!yUAO6fA8I^Nk|QnIzf2_#?_zpAH{_(XM}h=ZLC<i<9(d_Lk0ECqBN4u
z21?W&wixPzxdJDVpRSe0;%mj;yrJ4<nGD{B&J7e5ze{3FP^{!H!&KsyE&gCWxBHuH
z#8=?oSh@cue*`12{sI;(h3^+&^Gn8KkGC(23Wq`&YHgA9704{UpS<}Pv{w@7@jlk|
zfbn_A<zn6a?TmF@oc;rvHr(8uTqqWBdd?xfKg{|@Z2jTIw{TC}wQe8*1Hn1U85-g;
z>p&iDHBJ^yk$b7*&%7d#zY;1p8V%KI_214t|3vw(?+^GpBFirteCi2nYNB%b;xcY1
zz@~g>^diB4|I%vwCn2Ido+~|0-s_H<ahaUqmdQ4CmJN??t?7ny=K<GKsU^frI~@Py
zKh<7kkM9H1!-nQU+JA2D@e0^9-j-C_sJ@$a!{1FLce`-h7t}|7a*y{<OOj(_sJ`ct
z&bRdOA`)Jf=_GuZfV?aF9uY=uABrT0zJw_#>5`b)SO#+?7fA|X3sH=FA9zF%-;INF
zuv*rgHwv%MItD)o8%tQ-gFeM`2npCtY9r<t^n=m3j&hIvLSh+4-DhSMqD|Y9Yfjyf
zcMVsM)pFVMD(Y9X23baR8o(W>h_nt<D}9Y~9cmn7nOZu>;r}I;y&@hg@F*<?4v*fC
zbN!$Ubxwi;iz`6Q_`M4Y|KkAe_AI_Nnt9+W-~tzDs_5!+y%m+ZC7I+U<G+0=PJ_>^
z@7Q;$xM1w^ho4k9R%v2gP_aXHs7qE?_4efLd>Q1-Hqw|upIgQ&5G$TWKUu5C=v-Bu
zz|#R1*(dk`1FTL0Lm5m0^J}SXl1(|TwttU>X@4U*5Lgh*eh9Kb6+nKzvgO0y@TKUn
z;3RN$OKT8D2}ojki>^OoiOr)Y+fQ><2VC&Yeq}mrF1ld&oTOlY867A3ay?&JKT;UJ
zof-r1hVh!?zm|zWoM>nedz<kHGz}D=)NwoRHiq({B#Gj@oC`yQMFA~0(rx%J5A6R#
z{Vi?dup|j2P3ok`B%23$;XFOuu>U9{i4tvg)>Iwh3I?NV5qdyAqy{Pd*Lt~LfeeiK
zP-C2-{NSBDgT#t9AG8}(y|ja&+*0;gvXo?j$^T(Za1c8;Xic(ubIxH$bW4#06bcu!
z7nj+Z8TjcHI5Ee@$Lj<S<|2ZH-nlurREGLk`;lP%EnOm6<Nwz#wVvWVDLijqa0CSk
zi}otx+x~+~_kX2s{<dqGja#3*<dY-^%Vl(aq}ISXp@>&tTXpg+Dj`2()s+h4lzwL&
zGH`^;V&?95`WpF=+(I0jLkQ7xp2eRKmN@0Im`k;`^Q_>YrYXJhO=adQ5)LS-5V!Mc
zJqoZ#DMO)<X2vkh`x6}t?jv`7{N@7L8u+*7Fb@9;mw&=14P2=Q@GQZA0fcC{)q-Vu
zW7Mh$!wfe`U+4O_9|zXfDua-AA#gTHZpgkQ&^sEK#jttsP;qcz03CVmQK)^q$|5`?
zE(95wG*`+XJwI?<a+2$Tyrr-#TH>KB34jf;|M%urAqFPJc0a0MW8tJQq8WLyS}i!U
ziw@CWD$?VK-8{WV_xSOz>=!%m3jAm6wGCgzZ`2zstZdX1p)V)*fi|It0e2R3^uwF@
zE9H<jc}V>Vv>-MP$g$Xmva;Nnv4f@g^AvqWDD^+*i_qa*k@W&3eFW}=<Tt+&MU?gB
z5sD9AU@G6DAr{&OyYdJi8|hz{+NRCJUKW#ty2TKDxqJocgk&}1HNAzuW_ivCk%BUw
zI$i-;dTg2>ADrHD_N%*ceuX}$;~68J^)V)q1XJW^vw7)UhfG|b&e=`&Jd8deZxHg`
z?(xr@6aDyBBKo7A8~5Z?brkba@S2|Dky)c(go;OKD0ttT>H|ko;{9UWjl%r%<F>ik
zdy>S}W<8vO&_0|B0{)_GHgH9y=}UER+Xw?g(L(3NZU~3LXP2m=A7%Q*`pu5=SAD!M
zZPcKgoXRLWq((~;Y<@;oDDS-~!hl1Y6G!u=l)k4Arj7Q9E!?j_e~mESm8L$T3+8;P
zMS}Qb@KV#_JR$I8+q`rrxzAtLhxKJRf<J;ZSl`b?NEcYnsW!RXn%Zedv9M`c7$51L
z&J3PLM5>6(;W5aCKyM9JG8Ftq4f2c{Y~e~?KCOjJw$>O^r!)UeH5X&HZ(CJ2{W3+6
z*wXL#ohz49hP)hbn$*56_Hq$?qzouamvQ>U)OdTKT>i5xsfIsh03ixI0}Z|j`V1d>
zPZ)n%6GNsvFXC(1kKv0NWc#h_Qm#@r_eypme~4VP;g}yo!Z-pKZg<L1`IxazL?yaG
z0zWn5QP;1yah`l9?U3>qjeUmg4PgcbaZZKt*)@?rm(#I+1@CVfJ7X0dI@vmCxhlT8
zufs~>Va#<%ru2-zx0D$Z0(&X~8Ac6o&Z!Jiu5p=th0>@N=3ex9vK5ay(_5&4LdJ+O
z00r!HgJlJ^2;;eHS~MF(KmT&NxaH&`cxuEU{$?`)_Q$LKmnZmdGY6yk>&qv&JWP-u
zMe+GOYEqT6{sX5I@Xho&Q1$*RDvk<P;7P;^>VM1YPo6sxhDgi&j+IU@4hOsaDO&^~
zwr`evXMK;H=-VOotOqeq@^L6>J1~fj#42U@tvM!6Lhk09#msmz3N3{N6eR^}aPANP
zObPPgl0oK6k{AkmX7P7lV&^G*T^57i@y2DRa$dBxTKbqT>_nKvKOR9B*wim(W?zaY
zEmUebxAZVVagVv(x+L)&Ma}DTYc5?a^SpVPo@CV-gqkwWAbLm9&k=p=TtUIxR$;38
ztG0ADsB$LcgXmcEahwUTH{|?at9AR?NWKPo+8?3tyggQj>&OzSgWbj}gzZr~Db%u5
zW{f2%r%~8ux%hXQ-3HcOPW7&0N)9!qSu?X^qJX|EwP`auCCUkXDcUfK#P6gs+yV#o
zbqu0DTRJDWs14x$pY@H=*fN2WwX}JF`t2TmACdtuVazT4Bx%RK$CqO2AMfZgbq-y}
zf2bSEiw?&sLnfZxweKqYu1NrT^j>p@6iASUi2DRK+F53Mxzx|Q7+Mkh<AFbz;NCoQ
z+srLKpw5BGg9;mRlX?(`77L2pixBp4<w0}cZK)1IAU_+)f9;43hy?FVCLZ7Zxd~rH
z0qR(9fY>%;rz|XMC4K2B5ydi|XorUFFYdHFm~+B>%K_lrdM$op72DCfZ^;=Zi5&X<
zw!LkbxKzo%DQ<(UH~LcSN}h}}1d7=rU?cig>KX-f*H3%EM^hKhr;mI|;)sk?so^H)
zA;|n0u8Jt9K|jC%Mhix7?2L>{;`VIkKrTIJZ(Z^;ikW5_EYyR+Adb9F<vmGigFouU
z7D2q)y=p*%h9*6UaTD|~bBh<x-bMKXH3;w5qiWjW3RSpd46H-KPh_GpL8E+e4+SG)
z#;m4v5)eM)EF3=c(kbE!ThwY!Fe_Qh^iKV^MednYlEHfHok*UIN?))(zG)+;nN$lA
z$Ff+eHEVqb{VVSAy$P@KA!;BeiW>MUpIM&vceWEq?s^3-Xsp++x1e95bv0-C%f6a8
z6o>}L3k#1Q$^4b+(ZVaEb2Z^48Ty3+=Zb`^)(;g-72t_8F>uZuBUz0FK>$U;v?;rF
zj?p*wsfDad@>gf10JC-wJBOr!>!7iC)6|lS2#<7}$kJuVk^sThbC@Q&O5I0xn}T{*
zbNl#BOGnoLpQi_9$ox4{D-Bd3hM4n1s32V(k4BRw@4VO)<pgu8I543{n!Kc!)pwG5
z8u!yY`#cOG4>M{NdaY52VVM3FaeVh?uYm23qq|_)pA-#N78hB;EFsgs>EcH;!b)lC
zQ#E2!a*gxxe~=Y1R@t5rros?|Y^(4Ug&ni~UIE@T0bNc_RGVWTiY)*Qx?LB@+|x!8
zbL?Zv)X*g7r=~#eFV~3gLEddhcZ49%g&L$f&}3vH#k0p&Uh1XvR_BMjm+6;}3#&t0
z6+=iQU!u{$ltW=H&GNUp%7$o~Q^ho{OilE%@bZNcdSnpX)8cHP!|zUE`7q$P=hDAj
zcvW(7h`OXNO;H)sSJqMOI!}Paa;m^PLXU}*(PJ-fj^L_Ieelxx)Jyugy)Fl<Ydsf&
zQQhh%E%C{tvpOqls)q*Qm^ALwK*=kx1ZPGkkkl~dnUnau32js;m}1IzWMkr!Icy!L
zA(FtG3ZK=HW=bwdB1vl!-2AOIwR6wvDj`sVWX{ANX46$0v5hb070@k8>#ZrX<O6~u
zEGUqU@QI%hgUIEu>c9{nBUwQW5l11j!3>C=B>S=G-xj*52e|u!7`m?uDQnAZr@lxN
z84GhE9pVd>ix56BK>QLj!%0QU4>Lwcj>{%mej&>aP@S`RZ-)uR6W3$-0cjsU<fZ@Z
zats^Ys3B1!m4>sbgTid-VM=I&>;w5NQ&<O~4<E}b@I8uh+M)d9WG8I~A(`om22W?F
zfXm5=#*|uh6nnja5Msi2B$!U;uj2*B%8>VU9-*$W@MfmmJe~IqE_V)jO|#z{l1;Sk
z)%lErkl3DSvu<|EmgKbA9O2MO2)0T4iBIDPW=g-wa#vs?rt>)D@_XU-0_@(QYbPke
zlhQxffb4k94x#Z2_8L1=a$0(c6<A;o#KRx7RZz-UV|yW4sZ(siO1a4l(1(%7WL<xK
zI+XDcVm#UO<G%TAv06wKnvDkYW}neuv`1B${GaJDzpUR7+T`}2_?Jvpw{Q#RUAT6-
zT@7L+9xCH=WgQ1I8|N!xeCy_+D!eR0YOtY5H>qSDfIGhT`?goX8;0-aHvw^Ocm5@D
zJ2J!_NtkC52KxL+O|Y`qvO!SJez`M*KZeHXKsi=&LOY;nAwv04MfSq&pcn0sMIbzh
zp=6hfe8^?`gesHo(K47|m83z&kTUkRVnTQ?xdn9eiTo%^>12OFWtIx2n<Q}%mv~E;
zxfi{!`imLTI-9Xo)(>B=g>2%BUV*^<Y&g&6>Xqd(Scu^DRI^Fj_W#HS&3>$Ez!u#m
zMGFZQBM3C0<NLozH^X{}fRFsr`93d4n9D<QzVrk0?@fGx3X*Gy+gudTi`VrvmA#U$
z0h6H?fawdm;(zhLnUzYwrB`PL6Cnp&l3#(@^5^L1$$kME{@Rz#w}jAVk75bTxrNc{
zCOBs4b*s6>@5vf)I*9MRxk1F7TxP_#r)LA@IUf~ei^q$ybBIdXQvfruAmaI*3;Hdi
zn(T||IGC-)BmsG!Qh4nObB89Ci^PtX_Iw8jVHmhv0q<PX^NTovA`s=42G$fm*)WOV
z42iQ#oKm5_hSzL3AC?~CcvEONZU;ojm4FcM8g*ewSeA-p@0e%IGc^d#z`D#;K9w&D
z(vm!5dn?{|K9(d2wVr#3C>tye`EECVKHHf3sR#fI28gDCHCp~X(`~O_B6V+*D(5x7
zxOUwD3}Bp=-)vYus99*-MC3hrOkYM&_1gggLdF5XRJf`LjiB**3u6mG3O5#s*FWd&
z9Kqa;3gAp^6%KJ1Jg1?P^Tf)rp70PhZ(+V2T)HvLjr+m_gvRq}V)0MOGM}P6Fu-s^
zNn^yrpviX#h;_YEa7~x6sfzn`-v;0pJIU;=l`Gcg`*92OwRKk*7rtxa4uWE`{5?w9
zV>;EV_Mxo7e#+~~-rIz_N=^=5e>aVl#Kb_@1JtURZn0k;@=T9nJE0VzjM@O&A`Q4~
zfEP?o9!Zuip1yR;X03BPpU=L1+34{w80){UF_uOo=#`CK18oQXN^SpFV4JBB>;6gm
z%i)PFU+i5sblez*$xZ_V33Q!JP?u3|(0KRT+4Jr02M$=tsche1nrz?Ocm+<Uf+C2|
zKJTwxp1oc9AGCJ`b6J-$-N{`!-QNX0Uaf6NJ-vJ2dU_IiesDU=MqH$We?fc3e+eXh
zdFHx%O9a9OzMayAkY9no^rt`D__t6S-u`yL&-(BRv@5(|{QqL<uhf)Opo%H&_Wx95
z{C_A>82`oJ=yEcMH}r(GCDM#70<7CY4?5o2yDaEGu>MjtM7&5G%!}N#7fe)s%@b{D
zd|RC7UV)^-+i#TfBa*r<dq$^^@zn{CfWfP>@&7X-h=Z1~-#w7>Qb+(h{QvMtHd+74
zX?3g8<~Pc{uI5@)#XcE^cN#=`2uX#6MWELO01beH<F+I<`V0eO%^u9Unhq{+4t|f@
zNjNLYyPG3yzlVH6?k6}u)GEJpW@oTIDHq>kf3u-y-hq8QlKSO>TJ5vD-GRz&JrrqP
z)#!tTH^x$Oj$yD6{rRFS({^Alx<AMiPWbo5jGK;XYYk9uXNV>8-iW$JGkRSF^QWNk
zLj1~F43Vyou@W?WX~yM?IUh?@Yj6kV^OxPWy}iu*V`Qmkz!fIdUb2YGpMqaG&#G)e
zKs?HUyKH=tvt}T?kONouJWrb#nk57JK8|8FrK@ftyge}GHfUS)F>A>Yfl-b_N@PK{
zcJ9N^gl>;c6W74ps@t|Ja7#&oA3sf-7Db_92D7GVp=uwa_Lyxhv8i5EadKy8^ay><
zYq@x4qB-SWDchx|t}oB5(VRRvr)a@f#6vAYy+gPjkbw1`xRE;!3fBWr5H1&or(3ow
zGDxhZURslPuZSQ9``Mlw*FrSmA$1y#!Fy+_I#%)c$uJnh+b5Tc9f#eB7TUv&+6#Q0
zhft{w`EKev-$cH}@Of^iSgW#DiEls&f5-alpy8CQ-u=wGutlg*oiF3!Li?Vt&{dU?
zmR_m)EJMGdd`T(!Jbh5uckkL%WTOWU<7vFKD)W6{X)8!~+a6|h*r}rD6>P4ZR;aE$
zOwZetQB{OtyYQ+>(yR@()mQZ-T7UO^ZXU6u9(7LM@*FJMr}v5}8xLW8UP^gVr1aLs
z+~?{c6N{KiYk+t?*n`WA`<ikkvC8#RzCkgNFApW*ZZw%@^MQG;|2gv@q9oW~HFB|T
zv2*vPbSjFSbjFQ4Y{_FQ(KNVABf~qNtdN-VpcH_Av4W+f7LYBu&iQ$I<D?Ybf>&gs
z1eQS2xS#;)zKO#8#KHNI>cr2)?s~KJB+zsnaZ;!qI`M3r&`|8Vtr#SGh`a!GgCKQ!
z{>z9tnNI;%*o*K}OKg1$Rle)sYP<DPv8YU+fEwh=heQej%LqrQ18Pd<COZoQv+*jK
z-D5V^6BhC(yW~PVVkUyHUJZ|h+I)$V&t`h}XuD2Z$#tQ|2bLLwY!<6)L6&eXXrtl~
z%G4sq9JtF!F6}W^F?Cl8?Acrp5rvSi3X+nY<*C0<JT5YHya$^sK$L7b`NM*4{z93X
zzGNATL3CWuA!)ervLYAg*x~Teg}Q;&#ZDgSY-kP)1O+Bi#->G3bGKC)uM}uf6ZP+#
z=Y61RqsVtiVl?mZ$<%4hzrj=<ktn6(M3MZa-Kf8u6v4QYNoj|H>B{lP`S9{UCie{X
zTqZAF6GE3Y9AHHj+Gs0qR&Z?;)%%_y(2ofrgd}g#kFzl<kKR}cW^#xci8N(xv;0>|
z?{6pv$>?O2V$uyPrN?;gwTJEp7H(Z>X2DV=^HW;Jv_L_Ywh(O5)FNhci@lEe%1Wau
znkoq^8y)ev1VX&sW21L))90b{mR048KKw~69AwzH(;e29UPz;hU(M;Nl_<e?35InF
zdm;tvN0$BG+0jZwQMY31rv!`j?0qZB*znijbt(<9_N25eK!&XUodVAfBR_Jm`r?CF
z)&W(rah8Kg`)*tdJwn}BPZu$!*bN~JM#E60ecDXDw%2AIURb43ymAgxmR=zm9wDks
z`JCtKCtPK#SN}RvY5|`7<7y>>CuuY9hq?=a59$tkc?F_#rzK{{FXl)dtynLNuwaVD
zxJSE%!9-y)DCh<fGx=o*3n8QlFr4P^agV+cB5L(*oH-XQfSRjc4|_XBHuI%yUoYkx
z=wBH%KP0L7y)r8H5V?ie%9SDU&U!#0FstU3a6y$hdY&KcTr`O~=P58y;>kyShnyEZ
zJL*s2hzoA9SKl^RF;^v+qA1P1xw19zTmju)#BGxL;L?mw?_<^leOlWq38q2MjYF3Q
zyi_EuKlN92^!#Fkx@z?X!i{IRaMOcm(fVC5mL@}tLn7ZR@%9Ajq*n4SLr;MRcazy%
z2#GSjtF`y&*c4Rj3J<v6ygvwHU@b2=reSs@*@QyIZw~m})i#rE47!oG<$IOM1(<MI
zsHF-39~Lj8jOk94d;?NrU20iqFWv~QU<i^AUlNK)k_E^<hq+^~o&Oegh1dWGrJTKE
zz3n@o_l~M>3!;V}BRt^_-fz)m#RU_5m0%2fnpSW;1~z7h@lp>%!I%33XgpQ!+wxCa
zhkQ?T9;>cuLS_aA5`Wk~d9&x`BGK|7nU%(4z3?p?rqSW{6OFet(iOdEy7+FFC37_z
zO)t3`%%yT~)Sb9V%Z6v9A~)4}ydI#Q`AuO;;q4_!=cAes5@HPSZQfMLM&p$$8QGgK
zf2*_J9)^%FboCbMw`_yM?EUO(kFQM==1&5~idpXx^h91zOIJDLzl1~u@5flq5){u4
zaoCLk`%xv}mFa?}p1yP}0F*-bzN90~9KWaH^y+&6Rm^i-=>SPwfQ98zwQO9m_<Y!4
zWlaGAa=p3KG?K-3i83s-*3i_@zQ-_KDDOp9S>*v_X@+n6kqGSIBVJC30X^*6dK6fN
z%hDLwb=prvsnPp#I?Cv05|+Y~ssblP1>^Yw)4b;uE!g-%BoeIOh_5um9Ocnbre?m&
z!?lmFY5W)=N^U|3VOLP)$A%jjTWEPDD;3{xtig+uXN5eDSj^=!2+n7XKcWz2^A1At
z9gJ;kbQ~TUQj{Oe!~Pnw@$u|g`KZvA^HBP2g4%)U($3%@Y#F;L<t+1EFXZaDCx@e`
zCL`#+x4|RrN?3nuwkXDmZrj41@oaN0MfNcIhf*Zx3#x<)SeAV|cMOc`QS1CtP;Kba
zD3&nUY<ktt3k5u?{YjUCaJyx;)3##bto#oR8<=ZXCc7C<(T6(vmYBV`yOYjmaf!41
zoW@T2Y!C?}XEqHX{%y-;`k$sBg9?m`bG{J$BI8YilPA|)g%&zg@%8I&<Ddws&F4g}
z9AFFZu!AWR+;0XGFQo1DxhZGM*G&zkJjKX(`bbVuDi>^xs>q*$taRYC_YjMPF*6ig
z_T4+_{R$%ABqjiw)ZwQlwqJeB?c;@jqsW+(He%1HZjMsF+Yy?Ba=EkJ8zfm+$G@D2
z=LcDF{oawy`qA<1NyChMEmax)dbv`>Uz^2=v=oq-=}E`9+^4opI9@C^14A%=dMOev
z!bcRGTVIX42hlSXPT%&KNu5vvS?urtFM9;?8=JG7xgl^=)0+UF9Fm^4DB;A5V+o!g
zVAj&r&l6srGImOaZ)foAJKA5hIa#C<<~O4#M4@;HPVrLK*dNO(-O1P$CBqg+fVAQ(
zerqJ7xZW(p;UH0_qrCp563%(AM?b(vEoITK*ldn9Wm|(A8d4mvFtQ^O14Grm))3se
zHtE3X{v60$dHe<W#PdskmS%=&69Ff$BngreV#w0?8hR0c`Mn4M)hwcz3`UWSMM*D)
zN6Ow3g`-Gkk#rdzQ(MOCG~?c#dNh_)?i*Z8d5un<>-0M-P;9{D5b<cRg*z9R#nI4+
zsp*6+beG5QH(wM;x*9|+`)P8k95*6j^RE(|7Nd!W-XFoZmx)#>;~~^PN22Qu?&CxY
z(g=E}YHwKx_S-y0AVU8Dqgu@eqZS!Tt1Vh0yv-q<bHFCyMgAyGRz0bkc0Z9t*N!5@
zS-}JRG+l6_RJ7wz34fjHE^V$ah=`dM7B@zx+)@LBiP1+1X`}Bc<E5spz}UU0BZd4P
z>j}wlv2&W(UFSlJyqZqlrS+h~yt*e||9d|?V6aU0+cjQB-o|}28>dc~IZU@tE1~L~
zb`=8!LkAgVy;}jzdE1U<MT&NyXADZdSm!>yw+?c!K#q6~?(G94nVJJC@zkTKsXdo9
zL;qJoM<h#s$b_4;f~jiy3aVc@nzRO;J6p+%6XeE7mAR;&%D#esEGfDwI%O7zbg9|u
znKx5nm0^j$pqPCJ7LCn#VEj&H&6;f%VcSe&>Fq}`?4Q{`v#I|Su^L@GSTsLXZ89CX
zgclHJY=exls}7c3`zp}k?q@0>{W|jaJz<X6LZt59K=7mPZ{Fp!l(p%G3Q*HQyy9br
z_s#c4@@?VnNQmQ&3`LyYOojM<w$!}dUv#Icm12Vy@=EcWU?8fi&bC1Yo){|4-z+?7
zAocVQBdrVh>mQzoPpveddi0<xBC77Yt~O5GgIk<Zxciy6RTx_JTm(}Bb$+FWhv;^}
z?OBXqZ6;oRL#Ysy;&ksq(e0{w`EVFiHH}h|lBu=;FdWWz&MXPhUsT@UwTn$smKm}s
zq5z^9mf=v}I`#(7qyQ)=$*b`NgAhFK!d9a0)}rUKLTkUo<nWyL=F;vyS9d+t65waJ
zSK;i@EI%c$pJ3*!*t_aw%f|LneTI>dpivBSNwIkz$t!y+wOwVy*5;w%!e)Lhrx*YB
zY)HzG>sbY(it7T;`E=btx=&U>0}){v(@SWhs^5!t9*bhHm8Lm@<Opvk(R%r?>}QcK
zEI&4uy!=fkGpBuN2QNz9-32~0c9I1;7;}-~(ISoD*%P6f&%=TKkgF4dz;%?cE$ID^
zrS%_7X{+cLi8F0OW9qy}(?L&5#_dRh4vQ*!?|a2Cxvt&MOjNmO5i&m6e{mIe$=nrA
zg(IJcm%WweVXF;|mcCT<xImYj@?1|LOg>my<lY@MxQ1DxH-lgmcp{9%kx9F}?nycq
z{G!+Gd7cylZ}MGQe+Rq^{WaHBqZJBOpg@cjoz+sB^uV|5r}v8<uIYT)w`cz3X>Y%8
z8B84JF;AZ&cod&|+1nSBBYV+Svn8%1j}Bg2g5cKiCDyw-P+amrissX3^9zPUjwD_j
z^h~x`jGekI)jYBS>D^J#Q`6vMClO|97h4`5DRH^>Pdzq?p*Vfl8W0%vl$V81#Srk7
z?Obm<I5go!akeJD9vI<88g8AXV<%vx9{G1^auB(=`0pCStXx>}{b;5sKJYXopPcA;
zg<fyQIdygk4?^VAB`=+Diz{%@qI!n8V`rWo=~z-t*_ey?c=<hUvAH`C202PiZrrd{
zky2K+k~}UsCS&ts(J4_rV*^rDm7^vcrUcqo_Zs$eF}8r2MwoPl-rP^S(dX=#sGYh_
z)havmS*Xl8+L;e9agpt4>9oxxi@|oi#CrrjspBIwgV_ow+j)Um9;O1~0m80(uasWG
z(|o%yKR*bU%ECqcRO5F(LYacB+^Ea*_u0B&o-#*=uoR7av19N<D2)1SYQ4>$U4blN
z5p^+{`N47kGhzMs%rwsRXJc^B?&mwj{u2iDjjSjh70&}f*Kt+LAI`*1k`_JLyG8{0
zC8V)S&`%XEpIh#vFdOz;nx?j8OZDHi;TG*ZQ!?dyhdy7MyTEvVjA#9F^uF5oF#akh
zvTd5wq}c9AluWoY>rg5?@l&`Y3bYqR8U=*gdqQ-%IS!8wIV(6RPTYM4ZEo&j$CJ&1
zdkL#-x#zQi<H7mia8ca!FAd<sKQsp0OsqHxeq+sYq>^@#1iZs&?x|ro<aBa6_mUU8
zdM#&?sh0`u2A>cNe_cBZM3yWOT|mbKT=((pHI#yrPooomp3(8}K<>S`M~R-<uY{n>
zz$3hyYb?EUddJ4fiY&JMfp|<VveWSM7gs0+!;Lj$Id45Zx`!OZk9@n9IX&|24GKTa
zV72Qnh?%bWqYNL5aoELo=@rJ9uoe!!k`6-~i1vP31nVeSXEr}ZyF}+4V(zWNDkdTb
zlA}WWbvg`Tvs5zq%ci;dY*ukcX!FGgJK@MD%e(7qU<e9~WZ+P^diWUzY{u(swDksP
zx<e!RRY)6B+Toz%sz|>`9ZwXK+6JQ}wDR;4oo@JLJpZhr`4c;+F7ECVn9xTn%a|?A
zo2{x_X$5Z}gqZm@Zme`aCw_`*qK|d&uqxaIF+3_Ns>o1Vc)y44#Fm3_Wfcgg)Y@_x
z6)XDs?ute@@W*ZY*eFZdC;X4>?4Nn8-6HY4f+x;Uk3ddhJGawEC4F{h)Gc<FLp?k&
zIpn%F<2`;)i9rFCSZ!-nQ13H&VD1GI>lLf0%Rt>|I6f5QF9_|t-LkI7sdr5+j5h+j
zPxLI7{9(#b8{nmBx^0>?*PljAJ~vts4Gfs21x8jB5q<PU>R@w7$mJVhCC_v37WphK
zQ93%qp1mrDVj3H!k<gCpjVWzAKinf8pJFHVSv`Sidu*qLV0v_x%%0rxGG^V_J+f}1
zqJABdd?&1J_%&{d-&pN_Q@K!xNuZikp2w|+?8f+|Eb8zqZPp%oylQ@Bc|t7}{{Wf!
z3_r(ZeS)m0?^~cak#kD6B^vSwGrk3wTT&5(wc#rP6<nP889Dx%`QrJaH||XOL_)S@
z9lC`As@BT4iepzTdkaApG%70FVN3OHocH=e(j`(utm0`X-3P~M^0UlHJNR1nIsqQ)
z9|j!Qx{nxeV2F6g8uBjTgEPjxy!J-XxwhX48_<uX5BDSPBXw?xxa*VU(=dti438*F
zQhy7;P46m%zZ=SwsCapp{HiP+{XW5^yEY}n=)I(Ban;Ex)}a`etTV>(`SG(BOACc`
zc~3d~(sBaR&W9Wm2YVf3A0ibVnw)?Q5zMcw_xw`0?z^ki(m(IA6;U?d-B&=`ZZ>El
zXJ_F0m4ZWw`H8)Z;~>l;XK}_G5QuXU58wF9LyG-MR`}@LyQ8*@b`ZN2@=IeHdLViR
zGVdb<HcTFz>JQ?5SC!q^zR$_j=4hv{F>;%x>PD%>Gs{9OB$eh`xbl`yLeMbZzVBU4
zR~*-pib2X;dQvFRxa{bRoHx5kHCcX*mcPU1BXsYh&f<;dktwHc6g9fpo>%92N!T$0
z9~FW4P^^$9DZM0?A0ld2j@))slXz!xL*iX0(sv47480*xXLn34_;7$<0ZylF(*@Ww
zbo+v%Zs-jOuM(MNu*-C?tmUxDs+CQ8tR?pyr3Um5IRM9Bp2^A%Gq!Ky>(XV+xY+}T
z)z}Mr(|(SvTgz$vZeX%^qVG9oYOAwD3X^M5kh=e1jm$Q`sD%zmSS|7~{eIWE`(FDM
zI-A+zBe6uPJFO(n3m!95EXt~y?6wzjS?2AQak31AmZB><Pk5gWiPcKI-)tuebvg%D
z<`=nChqz>#m-|l**Yz$x8~q%vG`YgC^@=L5F$JlJHIIv3MLt^A<)mETBTu(K4>8vm
zfRx-A^5hzBL`X<fjKUOof4Ug=HZ*1qx(cG+s(gZZObt47Vp7?f;+qoPQ@3V?5bz!n
zUS3CR@<VGF4Q&44&yz{KLFjQ_lj~C<)VP>%gs1pj8muux63~Y+gqA*#g(0l@zTf|K
zj-~ikMmRm6X@HvNRHLY{>>*3?c?@qy>{enCA+_Q<X+<0eg3DydR)*u!J;DAS#`|Eh
z*}O%eyFjnD?Tef9+pY^Z4uMsUkqdkdU^8QB9?9aYIB6A^de7Re99cZ3P$efGxP=LX
zOw@;>Kz}bs|GrJmLfGLLF`hg@>LNS4R@2i{o=b+cO67c3@t{@9c3^xS<1%W_1!)q@
z5@p5u{Sz?^jIKzl*^;R$)jak5OGcM~L}zVZZ4`peLuuBg{M!VUWRdnL@XizIbs?|f
zCcta`luV`Fh4Oytc(#5Vs1<4=1s_z@RBd_&uRa%Psg}wm#FS1Zu4xQ$V=Ow!H}a#+
zxm6X<O{ich9;jFFjVG+i_F_iwbly{|w7MX|{D|KhSs#hV?c<ZV_gwkDOfh6+QjEr@
z5o4tB+^n<vWm$ARn~Bf<yIDG<4UW;^xzF!Q5|*)~CN(vua~J$IUlHh98A%Fp9vh*t
z(M%-<=C2)urPbg+mvh59wIWcfs%M92mq=N`VB*Dfu}ZeV+jj)B2a3Kgh=kW(Zu2O$
zvhU!V2t+PdKpl(B1dL9%p|bH9+#WSmW9|sz|33B{B`|Q*Db*IN$=-EYBWYqf3w&9M
zX;^&E*!q!I>I)2ab~ZO7{>S%-hN(>QWug_@DRwCntC4-r=@^_-2I51t!DMut$oA>Q
z{i0-~fDSyfO%!C|w?*j=UP^MBQ<JS~vy^P90s?p59r#hPvt7A9yl}0<#tPciCcbDc
z{XJHvFjE+mo>Dr5v96DNQ8$VW53zA5m2iavroWK<HOMvD;Ul&0{dGgxILf+*a44uu
z`RAg3^aNw>hU@*5z1y(1=$ccekqkm~>7m8&KMj&=``-W~K-|A$N6z#Gxkjun9wI=<
z#2uu*_)yKI&+%wF4T;_4tq3Low~}w|xKED`I|z3kb}VXRYs(BLofJ?zRA!MRtE4El
z9ZI((`Y98qJ)MbcHsJzh7<|Rm55n{)rKun*h=XKx`+cdUINJ@!Ge1*1o#KtUw-8>d
zNCn>iJG}G;p&Ez)w0i%~k%AG9suy)`QMQ9?C*H3n=eZWyw@&<a=RA;jx=l-iLCQO=
z<%V-#5Z&5PcHg}ahJ5mFphwRV?$TW3Qci6c8L@(oq^%8%QBT8-N|fg*({8T}$#-r6
z9Bxj?lgLR3TI>h0v8Ae(L*fICfP2o1z-~Pg&%dy*$r83*?>V(*PsdrA`EfAHU{GjG
z@0}s2tqDyvlyv!0c~q<lWS3o{=U}^2d*2r_9~t2Ca&RXAitW{>1)>J7AGiEVo;oV8
zWca-pkztSEQ|!xsnj`{wMZ$S2(8z_BLa{V9|A9v!3@;5?;o2Pu35`GAT(^;i?f>gf
zEcK`Wt3!E>DUT`|03IUuH7tg!@L7*@n^XvrtE^fZD)E5Z1~%{JS#$%)uqIF6!Ze?S
zkw)kH+c~4$bw}*RH5Z$wN`e(ejcTA2>4>h@aK90eldD7Nt?UIs=mvV~QgO^&;}f-5
z6Dzz^R&P>(z|-Q{XJ=K9R^7Yt;O-2}nO{7tEh^-Knwkwu^@`S5ieqWO?4r1)JqV!a
zPj2{DY)EuGjzI+g_4WLB4{0++e~7I81Sy=<-abc%VwKxoF<d@U`$yq)qU0T*(D2++
z7Xj^Qe!JJ3{V*Jk*i3G7txc`#{HclO1*9P0KzM{w62#O9p^d>WZ%69fHCZNE2lQjF
zsJGI)5fyfp3FUG(gcO~Bm#9<Rp$){jmwzWd2_Bd$VcXu;<$TB8_{1~a&KU+UAM&}J
zxccljvaH@;W-?tS8EoH>?3w_wR@ASo;yxYTMKP10h`kCQ8yZ(;KVfL41!|UMsz$R>
ziII+08WvMEVZN#<S&6DsGWZYew5ooO3naT*>&%vE)noULzNy`nXdqyE4d49$gzO0j
z8ms48PDRJtghXpmWN1S6&Rc*;^S~G{3yE@>3uTqjElblC=i?8|9W||Sh}EY2b?cOG
z>Eu=_f<eNd6zC|R@ame>3=>V_`WS0lYHsvfKI)ef!pG~1pCAp|#gK#ZUp4a4did+k
z=6%jWv-JVfU9;8T;SV{F>U=2OU0^UWA($GjhtbyV_i^rPBut_!dRouo!lhv*_X%`X
zBP<jt4^=nHj2eZWZL*<A)XUzIs^mH|h5_A3t1^WzV3C;gpJ5KJwXZBdG`TFspZyLE
zSyw_$Ggk*I5EVFF%dEdVe`jO1Kh|^R8Tyn2B>2XYn8flEqsqN7wGk<RA+9JPLZz=b
ztOE0N)I1Fb?RGtF#M&uh&rY-cFb(pzkG~v6{g_akrOr~ZesgmIj9e)?b|}-Gb=P(y
zEoqgq?sv_Jz+XOks?*aiMgMgtccCDi(hhgC_Enn>1@u^50B`HVu*NSY5{uaYm%iEU
zqh*9ZM0Dq0I$B_Xu#ub2G_u?+BM0r5>ia9-;;VOwCHFAJ@)oPEQEG#4z4hS*;hQAN
zs%!#$XY619=Xvy7I_=v0`ib;CVQ7Z6Z?ZAr?Ww1i><Sh*-1nj*GqnY(JE+QN{>Pfv
z=hLI#7y64Y=AsB?Sfq%di(e}$AmLs06(%nZB?%jllmDrXI!MZXU8{-U`*lKc_8^ji
zJ?GkkcHFhoBRB{HRy8K?$P!#k5{VhYZ0j}sAwzL57$mW+-<bP2n_*JJx9(;Qs;@~f
z5enj+f&xdaSTUsCL$r+T;(pd8^EOT!^GZgMrl*6}jlFwyUL{}RSE`|$mzHrFJW{8z
zvOg!WER$CVy@)3A)pk)-Z7g$buZYuvOYZZSVs4kS7o=gY-;*~=o@fCrjB&nCh&G#3
z+t{3bC@yZ@Z_S+ng3$W>xmZMkU8(7q+~ikU#{H_XQio3olvxh^fOQ8v!+$?C9}m^p
zY~X%?VnbagN?-hB6<v31t!bE(S_49NBwkkkw1{v-45t+;i$SWC|9k_RK$OAfkB0_!
zeLyq$^;UE3zh81{g)WgIxy1#_f;IKvLlGBcorjnIST7(Orq*`0WS-1=6JyZ}US^5Y
z|J6fqH`PX}zKCEOh+GHU`)-Hfv+nYImWq4Cxs?%zoGeuY2BrqklC5wJVp(hNlQSo3
zn8ygUVTy8JOtWK)<bBtz6gPdG38os>A38*$!Bwx$8q}@Z?{~ig&8tWOX!!W#h-MUX
z8)~6GIqd=P(=brs1!#E3e~B$ByLe~vrW>NH>lFwmbMl^R7Zm>+A_6|+qa^TB?8haK
z9X?(|S^p;BjQ6twrois3_+YQXFH+=|n2ooJYhL{rHNNe|+6g{*mD_Ddn9;CV+RP|I
z=JiCB+DLKqulBN<l;W?C7472((&LPIf2zl`zGsI}wP|!$^<B80<*EsS&;ZcwQV1$i
zejp^6UwVrVST*#XO2%ShvfQ&?>Y@>T$%()Jm^o7&u&b{&?x~!LNbdwoV9)G1o|AN0
zh6qSI_On~TSSF*G3y%{{a2`u~;q3<`Gdt_4<j9i*Yt9&)AzMc>n|WxjjVpS*hos<9
z^TmOhq&^7JW$JZTwyv{zvg?E^$$Cz>JTT<67z`q$#^O~Cli0l$Q8S3-p>9}%YJNG~
zPDUW7h;ooU);bn<uF#pLMl{(vO7PQ)$1125(JahJ`qt7M!)No;SA;&b-ixI}G6}a4
z^H}apku)I~$+m~U7Aln%9%a!TBe7DP6Ure9>yec&YCpQ(!0!fG)O7j#0rW&-M@YMw
zXgS1|kOj76p>Tz&G_4~XfG280)u!XL)S>io+LWUhQHkkFNq>gWuk0#Q^2ElwF2)YO
zr(HJPk(ycqmOk1%wd{gR8MJ*w;%_kS5)AY@PdLVw4?6|RiOvFT>6!nGMET<%6t2rG
zUI?9|!-X6kR4Ga!9NO4Oi=q$xZX<Qu=WJKv=>Pi$ouJ-^%p~~Gs)m<Ei6@FTs|DF$
zm5co8RstZ^4v&Z*5QfR-am=}D$t^}9k{w;hZ<VP~a5~Y9z%Z&zbSK`ZTdOn|RM7jI
z$v?#0&Jp((PRV~LkT7A1BQZuNd4n7rwW9IK1^>2uGKX*J-Gt@XAE+Uz5uc~Pi_(k;
z5`dT$f;1y@UUmIx3)m8_SxNgMZy}}qU<?9qHfz$|2sT}Le7eP9Fqr{NxXp9!rS`91
z)`HqU>C_W7L|5m|UOP7uuSI6$fqZ&3+FUD52Km~0nEZ72A?~QtPu8cM=dy<x-x%}u
zBlYf@Vf-txl0gY@UWr^PUnpR$hZ-l~Vdo^n6lwv<MD~`OfQKHbEP-%P#z{cJNBl*0
ztu%J^QfVXM2r}JteZ))T8G7u5sM%nZY^g-E@A<&Sj>}dyq)4aS%7iYh+k@tr*^3Ay
z)&;bTLn$`=eGx;aFwRtqpWL7wJ%zh+3hzzrXm96Gywog8PZ|sL<Q*Aqpn?6E)0lJ5
zLTh!j7iawW9aA%wYlC-$SbAjgy}x?vwG2dV@%cvsvYkJA<^vL0{dY<?uX?LZkI#S%
zPxj@3^BQt70!l$H$aZiFJXXW3!OnL@vHF?Veap-^cnekg!)*-hc)hc}XM?`$(bEfe
zp*$0vuYH;e07r>+2b{8RIFJP2d91@n19c|cQ$e_Zq%op;!!c4;TuFl&-vF$IdsUP0
zm`uL;iw_nx3Xa8riiyxGj!flC&4Sh&<vJ(0%RA>SpyP*!wXc`D(rLhrxUOJKQ93MS
zO<G+>TY6*8#ZIn1q}A~3t4MzgD8$<<zaNmf|Il>fxK~aj2*Z-5T>Kb8@yH^wB}hYo
zW^uQiu0z^qYUid=5l-(mk2H}*sEXf#`K$szC2c@J3Yxln=<T(w!-Tw7U6*E|s?FAn
zhj4rT3b|RjcjsHcK4d-sfC8u)6`b(L!7$VOP&zSlN*fDLN#Hd{tV-}WWl5V8B4Hct
z&Oxqd%met2O%2)32P{@D>(5~$K3pn3HjP=O4uS*}uD1VSeJi4WrezvuX6UR+_0oY_
zi!MVH%9ljor>6=Ic)ls+(*!6Gy&~{xIN!hIvPQ_2rORa-m4fAG2!%vO->^*&It9PQ
zu8KlgwkkeWPZa`}*QT#KqLckiF-$b_06pa7D%_Ji80xC!1mT3l#KxJ{%Qzdr$k1YX
zbs`F-_Jok^x9nwA<498>F!Vx&H);~om#uI|li^uqAVp2V-egxZ6_Nz^z$?ohwS*6o
z+9ogb%=euK=;jYc_D|hRHgHuoQd}moXoqm-lFqKl3d4u)poLP`zr-f%Krs*ouE3ae
zS7-@P%g?v0Ua!o&_PD%D*}eqg8%uh8j$RmpM|jS;?X2(Ei#WE3#u0!dnz`~mWE1gA
zwcgmFQaXOetAY>yUhK*Ugy^1+mfAU9LP5n2#~y7kiA7kzwJ{%c1n|_d!QUHfJR0rm
zyw|TZ<qxjXT-eW|xfjI;8C1PJBX?GT{7S==K&q;c{s_7vwko9dxDxw)V3*JfBLX5d
z8=%lo6~IdD$E%Pyo&fYD6;lf4ryy~w`vFWxZ6=}U+}P#Oek6y*XOX+1?>l-AvzG_k
zYFj{sW-@Ho=bje8hD59^a=rE`5ES#vwgNvjxVs=Jf$!#`5JOfqPE1YlfXU);F~=4R
zl6(*lFj$nPygg|T_<y7Dakn*1xZg^1{2ffdPUq9PpFLNFHk`dvB_)-zH_ZYVW92pS
z5LD%Wu)!Dd<X5IJqd8LIa(CJ3pR<@R{qpGi`-7IE)6-EK1tnu&2&x*49Cnr!YEia*
z4P@1n-8@+<cA<T!h<d}#WZMyPE-<*HnY9#|fDw9Wyt|YwZa7v837$C7q5=YVZ5Sv~
zqNvKzjPb?P+jR(LUp=P%V7cn}^@bq${y*XwDv8`i2Q`hLjF=q(-A0I7un=%^loe*y
z4%7DR0>tur0g7y*;%v_LqOBW)AQN?fX-L29SPmQCo#3V(ac?9n!`0pQzsL1TcL>E(
z<h=+YkJvik{e6tBBA$C6VSf6Vt9pY+f+YJOOLMHR@tTWpRxY$8YnCZkC~$pz7Xf};
zW;6F%1dEDiH@z1r$6K5?!@TH&1w60OL0p?$B6`M^0Qu+gu{B~Kag9rBE`Idh5XS-6
z>E^~37C|d$f+yLM?K>7W_16&e*YwwLFm20RdBU?68+L$K70Z&XGJiY}K5ZPAFo`lY
zn@s3^drH(`0HaozN8O<yTxb}A3c$VtdJzn})tuLZHftENWfh<2Lrqo(C&J(Bmd|g?
z^ZHx$`-R~850DimR=A7E>@Gl?vz~+zY)`*(r}Au?1&@(Jo%g*Yj$+zOs0vPO{36RS
zU!_|58FHQZYrQ>sAd1Q)Y(b%%ge4@U%oX!8rzQ;K9D-;oZ{JERmn0(?uG@*+|Gh7y
z*k?0TYb48UO>6Qv_!HW@vi#!5{E&wLyYE?e3E%5PdUY)TT;Oz^WddEOr82?Rg~|ix
zx7CeQ=O;7xDAlyAw7*NR$pM=URi3`EUvVpN|LpRXN)C!e=js|yu>ol5`g8p%&KAYo
zOx=v{dU7Lqwr<Sd$U?dPNh>kfu|nMjZS+NbvEIbbMIQ91V~MBj^<Y6xGj%PEcKy_N
zJl>CTtvyH=?IhzwbUSo<X%o}H$KPIGF(ZjBRpvud85W<_!<K(nfamXG`a+M$piqc9
zEfMTg0P*>Ey-a2zoG7@bRC*4Jym8T9nnml0oU=r6jkKS>rSr-DJ(vYZKLc#Yx9P;R
z2SL+N_S4~AVxCLgnZ!n4e#Q)&KmXXl-5OXONyHM(XRGd<Y>+cYbXy#u()3OROhA7J
zwGxe|lE|TII&(}85-xFEJxs1#Dx&^<UZ#gDo}9N}FNyerYZI<lccfg$StU~dEfaa5
z(R3y{f1oc>b)*Qy7BR-vm{EHP7J<uN#;XM2$TBN)WqQT5HXG;g-hsHZN_0Go7pQ;f
z^j7Ubi^$@cdWLT{_(&7^2-Z@gxy=q|2iD;m^zl4-b#EY`b2MX?uKluQ2%khs%g^D(
zdC6PSMB9lz()JCL%|=3#&9lB|-5A=-sy$1WS|Gj+c0))g-wx=d%ET>5&YCCY=Z>s~
zJQF<4HP|Po{`vVXOjjDz-G6YlA5qT0u+BXPwuARAbAV?r3JcX=IkBNGHZc8%kpTj-
zYm;rrCd0Gp7h;#Rv)z<wsFOn03D?lkA4<*BhsLNZ)$NiwV9Uf*v?W(}m%8qUGerrn
z4Uv*tXf;%;@S?bBV-+NVghKl;C4P;?Y(DRUgmV-46Nqr!Z}7zlDO%$h*#W7+icR)v
z(-8&kgovC%lD7jCHwU07ZCGQ9`7F9CPbNG*8Yq%=OV2SmW25}s6tFC+9$A6DjuV4g
z%o8)jjp1srnkUt;H2`hcFOz2K#%cc(6d+keBDRF63z8@$0Sjo!-oT-T*0S)f-(GG8
z!;hau3_c=GI+EY!xh5~}&*0|A3F?D7Drh5L7~IMYdxb`tlJNvi|IzQAK0kDQ4lvYE
zSm|2C`u}X<h2B-2+;340^m+_=PRC(}H7CIDV6Raj-k73%Ec6cXxJI=I6N-F^$wOH&
zB(wvdCpsx!r_*YYk1M%6xVWR`uy%4Uk%yVKG**2#x6Rr}H2``PYin6VgoS!acx~rx
zyGZhg$?4Qjyv@#X7nMyY@7V<y-ifBCEG|=!8%7vksdlu70>2KNsY>HuP#2a@uXIMP
zT7ZcK!|nh6xG3Sa-LS5uzN5>_`xcv}iQ($+lCQFbI;HY}4yPz81mltFO2i1FxCDmV
zNPX_e!(3WA@0*R16YH4oeZZwhCk0<yy&;e#%>-LA2eU_(?Gj{PtDN?_-L9WQvmjlI
zSFoha)!||()?|ABrjgNBI!J@&{%m$a2#6qt>7SydB+eocy_LTQCd=eFu~;!c)sU44
z8ozv~oVe5~dOG|KY}{*~t$0ksSH+{3a|xO~yaBji`N?@@iK}Q*jPsy(PfN1GB?QB1
zuT27aT8&5#CC%1d-{ym~pxIT&GBpB%q$KYwunNd4=Wcw%6}vXHJu({Oh65e3aCP5P
zp6N_YE&G28SH9`-9#mwAy_gzMPp;iuC_OUp65>S5;i46_)@Q7EM}1z{YTAHq{bbI-
zLhsf3ZvOqEIv~ras=ux{bh=Y%IG~Xg>66|Yy*B<}Nee(LKuP>pxw)1rZBeZsl(@Q-
zTmGc&G_ZqFMv^WOJEE2%zCbH8<5l)gr+<CEC@Oy$=SqWc{~7RQuo~cB6@`3Vg0d9a
znw3nphMV9G$)d)@U#fH%tI3Qf14&PIHj{pc;>!M98xo7uIu}j>$Pjv-`}PSyHP>qC
zcxs1%1@5o%P<)#_k<M`+<A`VP_39qwh*AJsm5$2<vT5&9yRj7tX;k$b2R1gD#uf3Q
z^0!=<=oX&aM$A(@z~2&+^l&sll^Y0?u6n4TJ(bby%=m+jO7<2Y5a~4ZpOU?2<;f)K
zvUk5R>Bv&uOAykNR#(mB&;up+U!{LhUR=(%pN@KCqApBC6;bMp1ok45Q3eh*`{Hof
z1*^ti6jzgv483($h=xLF(X3XZ|1}WkY<>MD`XsyIKeDVdOX<*hD3-q6nexgWbU20N
zqR09Hh`m<f8P=U%$JcWPN2<un|K^Jn-GTU8shtNNW>{eGo(<$wcMdtnV^CPhovMP8
z<NlDt^pai-8(nhn@NGlEuKXk6rvD5=xv?+eK*t4d<3ey_qaTk)Kuq!tWu;?_rX|-K
z1cDRasoRo>?QE&t2TLf`@2rE`0&XM1x2aZ(XEBIZM_P8Y>VH)@njhGAII1QI?t?`=
z_$-vJW+|}GFem@<$JrM8;U6J51g};q_X_~!!gP8)q=CK^Ku`8Wc~jt6sW;d9;6E<F
zECK#TpT(D9<C*)-)&}e`b_Lz;3U0~CbiG%5IT}zrbR0f#eReShO8LpMAaQKfy^tW8
z3_2Ls%eK3(2hEIYZbE?oH<m=qnKcj=5xx5Pqmv*Hdlun*Ro#98E{T?a{nXiZvU_|e
zjCD&ETR4j`Tf5n=)XLTJ5LEVfrXFlMtM9dBTDC9L5q|)I%TX)}e-Ys&xcTfVB@Rg1
zC}PfzF6JF0h>?rY6Fl_V(?okrn{z9}x#h*hhjrT+b_mF3eKt*yBvtHN>SVgwhlPjr
zNa0Tmb=;WDdn@GxBO{776zG%lUq^07hSto#as>HsFD6268D*2XfWW+qU%URjq;9cM
zBa|9Hn1|$~K<gu9NqIIad)aA)9i>1!DO)Y10Ri*2G^pa7j4S+q2l^!EwJd>7wNt~H
z(#en@X4#nx4^0)sR;tfOY|5=KnJdG7$?SPnO&JXtUhk4%Se(?eLizLl_chw{5OjOg
zNA=wwY=XV;I6wIk<k%jl1#JrKNSgq{p!_KS@K3Xm#gcQKE<tj@XBQ(rME(Q}LaAvI
z5$(g%A~;!*q2Q!eO2IEB88#BGdf0xqCPYa^8WYIuaZgipkOf86x6UnD&%a+*cHbyh
ze$v7t6J?!U|E3Dz?y>;alNaWcRc4jR$Nm%!kiZN^GNOBmr3_l+NKP)noa%`-F^S2-
zxbAS%S`f^K7rgn>jQ~ey*!`)*ee^=X2h@pFu|{hAr5gA$wJ@#4PoK55NhO~{>>g-i
zx1|nT+Bk>L;+fepU)vr!C@<}mHrBp6i$SYA3Qjw1%MylI^ksQ&KFp*J@gYv>1jJ{`
zJaxE8s)Bc$${3ZkQOeNw1TPp~TW9~QKLTW(onJ6G8o8xrrxmSw1+&?v1O;77%HTmR
zI=}qs%{lHqS};^_8^-9BIX(I+t<h=|43g53P<G<`m*uMhr>VJsgU1ZzHxw{j=+ooA
zgh5?$3nKZarjOIr7z9{K7^p#r&8o^jMY_}$*mY&WvoBD9I=L&@R*nd$+XOrn*Tn_s
zs|;_U4g>ZzSk=Ez+#k*o{0*TavD4B>)?kt0ycjo0=MA|b52-+-XaXtTbCs@qfJGrG
zd_ogj;1MHpx~8&(w%o7sEcdBT^$Jtk#@jk!d6V9U!aTjQNgiB&OgulIF-BKXA)rf9
z>*i=Z(eS=%cP$2R3|w47r5(tI0pf-{@?ii@yn1;oYJwd*Dn+oyaKK)8xb^3mmX6F;
z9YI3ty2;!Tt)<Nfb>V5!{>ych+pE`1;1UFeu%$F$)Mt0Lal}6}(&tKJ9nW~Ml9N4P
zeK#*APHiV)vqev6lq{S2d&fJ<W4<1Uc9c@d2MbX^Ko<|Lo(;LO0ak9vkTXlzw9cJ#
ziI~S~@puPkIe^~YD)F+v-4pu%o<}rg;&CRUHj{cGR$v$hMrQvNC)g{@vC#2bO-38s
z9q_ioO%u`shwhsL14-BMWbl=|wh+w!Jv(>$Fc4r4d@zcl0JGAH?;p9~q&tIN^J#`K
z6yE8m!^a5YrH=KD3J6S`zSU4Nq^qazD_pi+_{U0JzhX_<)HVftBmtAK$V&0^jz;gJ
zm>b2h;!g6EuL3XS`=cb>#`z^!(<P@Mbb2Itq`rW+x8PAr7WUVjBZvGlQ*(HmoJMUK
zKQO!Wz47O}!I(9640p(i1g(3VwI~RXbr3@90}{3rqEj{8<>(6gXT0p2Uas<!T}jaG
z|DNE*mhCkpSFq}xxK4M<Z=21j6hhh;m_A8zu%`}=t^kYc)+2X)K~W`gakP4D_SS={
zy4rN4KUQX5k~S;JF^|zXW2h{+7YPt!gVJ~so;zXj`JF|eBQ5QLRz^w?IzH(1i#i!4
zAKJu`xI0R0puaeS-ae{%nJ@?61TZW%?5Z2~5Vn1T{I3Hy%xJ4zeMeH^$R)mTFHsV(
zL;f5Wb#}~Bv8Kc)A_B_!pJJf-!`-!-0QnQVCLi`??A(On+5Exb6sdvGytG5<9&0bP
zgi_mF`$RZO;{8>@2_8fFh3eM)1DeDNsHGB2i}t_)5n#B|Q79oXW=OtM)s&HiELCF;
zJAJ~Cm^e^zx|>uPgCzGvt#yBF?2k6sm)@X|4ueh`x;n#W*War0V|LLE8jL!wyg16W
z0u#2ypG1|O6#E*tSu7a|+GsQ}`WMz%{C-%{s84tV^As}4^Fk@D56CP-liCt!zFP9a
zZRP%lZ4v|~e@bZDjJD~!C1h+k;rfDV^~^lt{kkn7U!j55Z=y|pu<ZeV4-m>;&h({z
zd-B8OAeLM^onMjWm6`u`Nkz~FkFXIph-`y62Ox}N)_3bxMPmPCB4u#aded@g2b#It
zO#ORhEvQgDck5z~t@UqiA-Xf;%uDMhcQZ%hJPJFQ8mJL7wegOhV_PvbC(@u_1Kq&S
z!eEKczxwn?=3-mVmnPChiP55+m&QN!5?{lPoTqoCd(5>kCuslzmP@FK#$E<6Ki<+_
z^*YwUcR+heTE!4X^G|DgTQyr$!D0Cl)ra#Fg@Mj++3r5yQ6xOx)qXGEy=fuLY1lKH
zS_kTp)pQu6)D8=kDX1WzU~QQI{QB1#)$KSOz;~;WCqKc5e<E!uA#{rZg_ZlKC<2*F
z`}=i~P)IB`c+0^|gq<yWfKT{7FkxU(whY2nsF~i^OoX{Vm8Lym;RI2&4)R58;qC2X
zt_+72aR4tX;s|M~SQ35B23TQ@)_<j!AR82)&n{VQ!K(s`q0I}{E!gRd4KX=U)V%WA
zG)djM^{Njtijo~awKNzg>DzR@VdqUA(A+{TD@aPc`Ev{1+-xwr3hfDfqfBWRX#3Yu
zJCDagOEL~Z3GA(A%p~bZ``g|+X8B9%U@yTg^+D08M3Hg=ouy(<&b!zN52i6V9wXoz
zrn?;TyF?bZ%RN;6H~d9HGmyy>H&*;O74EhrxBpr_B0_ouy6>UqMsZ%voEVlE)1H6@
zKvYDWX1%~32S9N;ePqQ-#%q?faT;rk2|YxTz|jQdDdd?6c}Uxin@qG<5EE=|1(hrk
zp&+HD(bOMcBpbvR@o~SKDAX}8+NF+yU9bI~uSXG`(H&>vf9UQCBo1|VfG@vo;+R;I
zjNUR4+>8Jh7=hxbscaZfigdwjSR@Fdru(z~%z;PN>c5HP&DfdQ$^5KMbJBOXqvhlo
z;%OrSbvtGBn@D*mK(OXeD35juQ$xdcV>`uimj-cWy`(vk1B3Wl(-^86C%D3x@#-vn
zE^+!qS(WqT4#Z^fV$UB4mKe$UpufBpojx~G=>kT-O<$%Ft<7&@Wg7sG;C{Cw+QwY-
zx`+7WS+V|hc<&URC)hqUZOfUzZ*PlF-#nD68-1jN$u(u7uHivS$RinCBsG9YUZ4=l
zCRr4Rsgqw@g@C)*-C=rpLocYY)hV8SnMF|*BTKP>Pem2^vEO5l4#k^c;lCj)IN-QZ
z=Aai99288-x8YJnbJzt$3Xlt1cQ!w&^L+sTAFk<Ribg0uU&s8U8e27Rlt}dE_v(Q^
z1;As#m`QpYrnYIN5<W{$qaUVd@Dq*!w7O`*Pf}yOl)!K=7~o=)r+>WghqSlSo{H#n
z=pys65(oPk^;G@uwj+-Z2c=9y3x-KQgtzE%46&xhd2of8E%)+T6Qh>>OIby&;GhUr
zdfnoXW9eDDim|rL!JtSPL4!RGL9EKBhT*J559CUY3lpz^XmbIePdkb6aFbWHXJi97
z|9knP)leiRr)BaX!G-EKUP6Z7qQZdLQG)0_`2bSE`4tg}?=aS@@%|qAq{9@<vhWA6
z8i93(u;=np*$u$f)zdS|Z&(k<8<0Y|yvMFKB8yaqD506aG)RE>(us<2YE_GC3H;_B
zLZ_wa#a18pZBEpnIyWum1y&iJCARKKnsQNl){NpdKGUjV_)gpxyHBIyEl{$x8^xSs
zfWuO}33rwKtOcXk(~}UHT&|jGtoCprjp)kOXFc{sEr_*gre*r*Bzkj%jBbupgenxi
zm>GWgY{NX9y^i;JggN{{3>I_xM%UA%XUo6T^EH*DcXb|}qr^j)!V7lu0$$-Dq+6TE
z{Ozo|=GURjuJ{gH!n_%z;F?Cg$s6Ktu?lE2JPWLucZy+_I!;}xxq-^2ww<m_L(lO;
znY>L`zd$#c`pqKIGpyy}4l5JA$1p#zxNzrRH^`TUmw6sXAqMqQ4~;gO886yCzbEs&
z9LC)W8$t7-O;&v4+Qi0&r`uw>-5N!!VSF$lK!}E-q7WWn4GmSJyz^9f8Sy@yAp1kc
z;`f*w!>%AYrER2(`nJ(J0;*QaHzrI}wyEmE6OeK;_Ywb5YHZm6A)-f2DiD+MAh2kw
zb~+!pU-BcBu2yKLBHq;LvZ(t9ynpO7cZ-OVyh_GFGJ}x?4ZSh=xl?mde04I$S7hs^
zk2xuQs2ubjz9=-HOLUo+u|LmMG*ne>h=K3$sVTF9<`O8STp%PKAn#S>SSr&BFOhoL
z3kWT63?*X6fpfiR%SNm9gftD}dcFD9MI+UCp7>~PSM~FWk*S4!%rAzi?<CIQZVZ(-
z3srDAX{FjOmQx@xFJL{dw1lGLqeb`3n8>)E8R>F=qPn#N5(ChJ38AbA`5*+rU&&Nv
z-un+5BO&mGEmnjfaRTZ5&ThTap7Jtnta{)<*d&?q3Rp;Wavw+V_~kEEQ~DhLwC}W0
z)FZ6wh@R3p2k$r(F%!D==el6<sKnQxl)NX70G2mwmE+(IsNV+hQ~-S-OhP6(OQOH<
zuXDI1U3N6yW#5=93m!Iv#+!O?uQ&~Svc{<?P@})r3Qrg=Ax>=Q<IFaJW96;^FU>kE
z*dXFc0?aZqT~kYVT_AFTAi!4Fdkor}kZ+|ZG-(k=Wq;h9dt<qlfaQ~X)nu(?=Y!~o
zHJxXX!h%=btv6p!%gXq=`_CEhW=MjH@nMR8sN$^AfGZ{@Ty*<$s0ksV=sNO}USk|3
zuHb3SxjOMQHyJIwaSJWkLh^<^W%Zeqhzoyr$Of3^>-qY0B=6Hsp%Ud3s@#NickovN
zkPR^?Iv&+PB+<2oPrCM;_JtRC2eM9|JS>nI%2W<!H^G9Yk!Aq;-{0(zsKKLy<ksEz
z$x3m7<TsJ3JQx(~S?U)j!8iV2Ls#y<CoRfU@5mXG&8>X8Rqbw^tCu)fZk6+Cbk3;V
zX+3j@F(z#Kzk2%fts{+nc{M2o1}g&?<}iiKMpq~8X4<=}?IQ4POshxlwcmXVN+yqc
z5`7g{Cm;y|Ns~%%8G{Sl|MT~f=T?oGGJP`QJ8)(|BRPFqi?L#<>zJ*2eA#=Jaq!;W
ztt3_O_UR*ca|(M#$|N~?ZKbiaEq4}Xpr7Hh!{T3F7yqf?@mz`*FVv{L>DWurEInO3
zaTjqlxb08ZkJ~$zzlV@?sXF^w)<O3neaxL;Ny-feeaZ;it!kHdkPHf)$G<O@6+z^B
zGvdqk_KT*t7s4e#{@Ci+%=hu`TeFz_Lj>3huD@Kqm@Dsj%9je_KXUj(;6dEr(w!K7
zTYr6)f3PF!8-h-IS~1Rsnc83DzMghPuQ2<?H5tnY{Yh<Zp2wqXF;;rx|Gv`d4$=^6
zSg>z={Os{`I|N(fpo*B!?*kdTHcCdWkb$JjEh42{13b)MJg>!y?aWN|JHq3nH_#d^
zE2I?;Nu-pm%Kws!-|^%C2zFH3xzlIhM-3tYrUIa<#G7M`s6d_JCdt9Rk?euNV?N4R
z84D093|m4=a$H;vKJ-rbpTXAT31Wl&qJ&L$1R~7PW~<bVJ`_(Az^mnq>IzVf-J<+T
zyyX8Zi};CKS0LYhoLm-<X%^m6i59XWaZbF;lT87im7>pi&oKF3E>FHoMX2YMfuu<b
zcwAmX*0YWINjBsQo_}XmyhvkqKK;B+?F7x;4s*BzCPe-{LJukrte%oE$-$8;)n0vH
zg0_MxSn$iL%h^!x<e%iNF#<g2jESzZqj+G?Ge0TH{3q0m%4?;(X$J*SO`h`=*b7m;
zQe)qIRct79t_r=z`-is}DBKMUo=dB){IQ;!(gof=OOBBf>4%Y=Ubg_UY>%gC?m}E*
z3d2P6YksAyUq(_Zn@$6VT~Zm~s{eG7J4fi*QkulP-eXKOwdMUibqPTl(T+eVjr9dm
zne6VQa;HJ$&25f?AdcjMM#k7TG~~uVXo~Og&?Pyt50x+hDt9}7F^SLAt3~ChZSs0B
zHwBUBI#s0lvx5p<>agsx8b6@?s}u)idAMTML3<PV=MhZqx@|~xIUzNUfq_mWxSU-1
zGwR3nUp6x1_bSK+C=k9<(n2cV7%cJ6S5QM!7*Rm|JaRgpXyp|v5?x^aK3%UA^&6oD
zf_FM0%789XBm{0K`??W0z85;yry3^rPM<{k7-Bo#_JF1<C{hjW7KxQs{s?Z>5&}R(
zamz%wtR|TQTPG?M>O%j?F)^~mi<lIFMSrBb6%Ecem&u})VO?gfhP<yiRJ89(Ih3ke
z*h?~afq~T~t%x|yJs$&jm)WZcD1^y}+2ssFfk$N{0xZZK3L8av07*ZzHtIEy^?dvp
zG6+ur`KrNL&f2)^S$l4j%&Q^tpuvU0!1K~Bo{m7Kl_+!GSnVUPN}hVE%R0tTh(VEz
zD|CaWpTwnx@_;yl2vO4?QQ(l@Vegh2C`I=c%Yy<i>Ugv@zrw>Fkd;5Q@j)ej`&wtD
zmp3f+Ja8N?+Z$Qpof$?T>*_9V<DD`fN7BNbb9e@9uu>)~g7~HT9E<2JSp=f+n?8ip
z-dHT7&RIq1h<BQiALl?uL=X~@v72Q5f||ZhDF5fCF0iX3;5?&;4QPH({{mRq4ueH2
zspQ0%*3FH<ebD1#HhG6KI^!m^^)y?V!)B^_i_wAiw$>f14BFTtkWf>OZ@0ni4<G*9
z3dxFgYk00K|HI+Cq%Z@qnYPGzno8QGIf#GxsK}~|<MztBe04-I1a(lZliXFgCWs43
zR5A8~ed|kE?iTACWUro&?+vb-{JiQJRKT`dn(X$MyO}dcV0%IO4Mu4#@Syhw%cbr#
zdRH{c(JXS|jj43p7c%$BfA4?<8oET5t)#=AH2B+AfpIA%W^|<NjV4w(xq5d=okS|b
zp+E2N7X^4#VJqvhS?A=C`XB2(w0i;|$UV8`OU&Iu{e^Xw2u@~+OF3!F2)2BtHE5Xa
zuVYDLd3Mu^GmAP7ujS=L!b-=9m_~>Q@!v9&N0O6C5|7<=2)xUZ*Uz2s(J&Gfo1T+^
zYC$=C+kP7F;__AvOta)CuF{b1Dw=ma(yIjr!*ljHVtjy&YRcGy!?sobUmeLX{q1_?
zR?xLr>{@~Mle>Wq?Dy`8LC5r=YO;XAPe2Bzd2H3kPyq7fUGCd^tn*+FuQ;g5W`kpM
zccS2Wv<0G$dn&(LFxNKlp8{S}ms1AhPFXupYduk%?q$t;@6rAAH8y&{bYYZm+?rUD
zXCKb`4$AKKu$SVaKX9#b^1Mfsdb473s2vt&(9$P~L+LeXP1u`K!u;V)Ecytv$4sYL
zesVK<H?ZZ_ijaMYw*7hO*C)BK(JbG7wG;>MkFa8ENhBBXOYX^Ld^~M9i1y9e^^&KG
zuDbVC7O8(BX^?bD|DlM9)|W{!q6@Z|^d+E3)qmv%f!(#DaLzM+ZTb1$IfitAEu^FQ
z4YEUcGAqs?YN>l)4K?gj-~mkxb!bhdC7KEqqa*3kMC~1@p4B?Xlf{5Yg)5n>ye>m1
zm&M@$Y@3m6G$|%)n1CYY>)JkF&)-vpcN?lw$AqTBTd387EW`LG%7QA0(5or3pLs7a
z|9C?|A_R?rv?Zz~Z^cc+#Jofeb4gsNSn75ucy_P!nydK9c=M$U{Dy<ckBx2msdVzK
zS2YSoF7H9Lml^%ya^cC6WX(7=<CtKG7WA8GVhFv(HN*IDJ%t9C?Rt+l7s8=On8vwe
zBNapdddu!fs?bip67Qfrx}6RS>IK|6ppd>b@<8Qxglb*xH$kVMqSfJ~(^Bm~F+`^v
zR%KU0ZA+Ho<FBR|2EuZMgHURn<5d=VzyFgsPSPi<fEF6zm0kTMrLQ^$YQ5pN6R0I0
zf20j62Oz+)=SIl=StY-vJfo6%Nmvz+q^1qe%pd+C<;|e~p&;Z*QTooIbEn;^MbLxX
z?4ejyRM!XOX}9v~;+51vcc%=a&+A8@-YF#JRXumHQ`>2}00|In&aUVi4Jzml2UJDo
zhg_*x^0iSv0$!hK61Wc9u|j$jC@E*{q17B=N1ID3>K+I$ag4#xpf(TkyT&OX{sNk5
zj=Y7S`)ng;8$pE`lqpa-%yJGsB7bVQa5(aMcv}_d?So(M$&PH<k_P{v?B39=`)@Oo
zsQIa<MBaB!9Rax8M*NQuUIHiaA?T~1E^T|-GJf|uo#O7#f8?B(P}Tfv&x|uOu!C8A
z=%;k!gg>U?7=2c(idF6|PYMtnx?3(=zxyra(H40vnZdeKpoiiXx5Q3LuhoSmyu_X+
zYWWszdBUa&vBwnXo=ew!hv2UyJaKkioAP7dizbkOctN+0c@z!B4#wVN@t7hBE&iA{
zU(7^wA(yZ1nd%E%#(XHn)J|ezkiW0BdxGUr`OXdIth-5?2BrI*D~{#S(@}=KD|PE!
zFDfM4!09t)Nx9m}>K1<!$XioZCkw>cM>fq=q&M~$)=j0+g`RDhGa8kCt=Lf;XCzD|
z3NFI6s7)n!iqs+Lamq6fvSKVoGE>>uiwo;v{f<GmbxJ8EDXo9fGm6gtu2-d>yxItY
z^>b<<O<SdK853jsQt!K(8|<amW$?AsrzJ&7c!#WrhD0gu18x*;adQb@JnoYr5ozVW
zO^b&Qnwy&Xpv_aYw6shK{8hp-Gq2^&9!Xr}>IGCR#57*)?&p%m3utz7MIERa%Xi&F
zruFZG$6Bs<CnGNyz{*qRG)*|S=cLd}o|81e{4+s-V;T1a<K9`C8Shl4%ZS?RZDE#-
zIsO?bDKQ!yOO7Pnl|m-{<r=l!WiZ=xk}L&EyFa2Th?bm7l>4w!g|JJjq9l;M+oc2{
z-{u=Xpvm<?+68MEgKkP$(tdC<$Ky7Sl839Tquh;>e-t>duP3*9d!_Bx&sm@H+=pm>
zOB&tVGX$Sj|Ls}-n}_iv7S^;Xj&buV7m0q7cVKRL*RM7Pk#)Pg{^O@{^C1r8n7f_!
zq*gEg^7bUl1D5m|Gg$+uy?lQ-Y538we}C7#>hWjkBM)Jl&gq~4{=ZE(>qr<X!ta5h
zGNw0#wpGCfP_UB!R;8znGaO9pF(WcynvW)C=UGbPV?90sQW~Z8t!}P@dNvx$1LzcZ
zq*e^pYRT#Th83=x1mIk~B$wJJ6!Df)V*lP6S#_OHv0PD>1kS_sEFH~2y(YWJ%;4fc
z>Y7;*mB+AVW^Ta6A(WDiBVYI>Bd+`|TXbxqRsp0`GO~5uAQ5a}f}3>$WZb+anvC)K
z5!wu@Zc#764jnWmh(lhgfS;(v`JS4qt{oc`7~8JOHFi^r18r!u1;=gcP@?ppf15ph
z-LsN&Q{NNV#*<iRZ96TN4WCzb8&x!xqae6*b(6#f^THTLClM5_fMMzdRu>a<Wt}X7
z2{Dsc#|Xp}j|KN>U5k6uWaV6CKvrOEq?e*Q7``+i+J+|-8K@NFKXU{6K8008m6dmE
zAX%LBc51BGeygSK?m4A)yGMo%=zNk)8n+O8KU9#>UFF`AIBwG0M9gVv(7WylVIGFZ
zMYS3+m`&p#?j7gf!~I~){n*=$Uyx+cR^q8%!3C{!iT%V;XA*QsC|81QYTCY{O=IX8
zU#qh|%prrF10Fvm1NXQg`<P{=JOv>#+HO)BPh{D81H`Y)mla~hWig3}Eem8?R+8|+
z0JTN0M<4?D|0A6JLj})45k@$2d2H@DQS8cAwpQ{1y2%n4@l2zY36GQQ*_Ik@<S7<i
zM7mr#plWU|B+uq3<@W4#2U#z0x#`t;j(j}@67(5yZusH%lLN{VSDa3_vfOwJvAb|1
zxK9_U*Y(_C8kzeiSq`WUh$yeKre6vIps!0-?>y#Sm9Qb$#{EueXMiqdF;Wcd+$Z*<
zk(Fh?06Wm?{}2SlT05NjrSdJnCI}THyPxr4H^T7y(%g;;8ZH_!<x8rk&?=(GLSwR~
zW<y}<Glcup?o2*zg<Y>gX6J2z)h8`EOW3a)XYqwD+)S8|>q*}nS%JpHhI#41(4dTt
zhz&T}oxE`#CCO_2=?hd)xsn(0A9$@g44@R=eJwB`Px;P@Lf`;kWynqNIo$8M<FKS^
z?Ib%I;mZ$=>QP?ZIyxjf<KPL&?k7*QH}~v?P~#b-L<2JLn@?N`S&5MlOZiZ+<}*bW
zr1Jx}rfKAA0^taHmUx4mu<=G_DYJXe3eS6_5c(#S;G>rKY@n6B5BSHca*}C=tt34E
zM-lh4rZ(O{21AH~Dxvi%<NxC>LYwZ+Fc0uPz=!4c1y0-GysYE+QuNt!zcgWNK_h3N
zO0s|@S%_2JXy6A9Jn5?|Ed(#*Q3+<knPK~F*g)*w*{MeY!A*P6H@R#uWspo>>chu?
zX>tmr+Nj}l3|l?^PU+E#;HxZ(Ktk29pn_=0&5BphfArJ#nk$(wTE*ukOzSqxnn;HO
zOaU-BYQbj5PeTiLS^GZXwikZgXAt%}5<brar;xdN`4wQ0cI~DT^*#P0dv1t4I!DOY
zS_rKC$u07|CZY)__FKo*!64{y#;F@<gV68%gyku{uG9%b_&Pn)Jzx`@qQX?T01RB;
z#HbH{OvzKT@@TgB3`EzgXRFFfzZZw4n`24(5^sgx-X|M*Qa14pB_P|4CE^Zie+`|y
zFi(<wQ-HmZf$M~iWa8WdxvlVwmj_mLhq1n#o@%<fzA7G_T;4NCIAJx9Mg506smClC
znvL0>x@p^)T|P0FaXlCVjA@*kT8xdGUa*gaglrm>ZVc_{=8P|U<UB{nCFW_G-Rfb8
zlIz{yaJFa=RJ*TD>15c2JGMFimsqdb5gUXEJ7)mLPV?*WRk8OtM1BMLrq7&mC6h3!
zIXc$UUI6x=S(5jChDr7A<`~xC7YI6fo^p>tdk{eb!vM28e=^nSPk~296ywf!hTy;o
zR{g;ZMP;us){4yT(vdllW*&;J88YkZfkm_LW19375`=F7vwtYGqL(xBGM?)pRB-*X
zo(^}Hh~=moPys(kPF>4IQ6W4er$?TlvN)p$9%Fj_H&1bqi#`MP<}lw7nrw}?hFVlq
zBI0cA*9mj-4HK}pNnI%L7{u_G4%BB9_#@F=&;b*(&?s9G4+~FtZICI?j{!`ABgWR@
z!FaEKD~iY#OME;_%;<+?dg)YRTlnU6{3Nq~U4yteI4BQ}R_BSn%;8P)f|&gOD)s1k
zj$|F7+-_4?M0B%OK{$MI6Z5`}yl8ME@8w8<k0O5;evPyOjGZwbijT%B_(A%QUM~a%
zH<%mdRpP<OBj#J|0$m_mla8-)&$sHi`aBKO7RFH*+@OAOGq-0}JCN!&GPdH%P{|7E
zi9=vAFIvMkw^jiSo5LjZ@O)j1vF3&VSdPK-!eCky;u3nT7!Amp%A&`0F|-oN5XfH6
zt<pI@5PDbbH0zeyHc1sQZ`(^6g?Co)cUFPD=}4sIs8!+qX9iP^A_%_&a!&J6l<Z$;
z*Jbb_>0d8-2{r#PL;phR2Rk09z`!UX^NdU@-5sMy5|Dubmwh-+r`?vgudM|+x&x#p
z)ZKKS5Sr|sjpo|ypW+j0CmN3i4&YcVo)pm@%$l*@!6wD28l+;;fV6fiWb^7-+T&p`
z6IPBI+^Dx1hyf`6bXSbbK|zKrE=<sIxg(Y;r4jpoKs?jvD}Ai!JxH2mptdVSwlz#A
z<KouO|8d$sBy<fn&}v;{+q)tqmeoihPzH!{TgINCh}N5UYZKIdn9XHCqU)DjFVlh-
zT^Ee@JiJrYUXjClZf-Y^jBYUP6`@Ao$ro}fKW#s*B>Y1qjs+rq*v)aZ7>q`fj>N+{
z2=>cUUPtU<Wb5-xE{~#|f8-@Y0AMv;{tl-HW|0Tx`<#GOZ;?0Pe*@12RV46l_izGT
zdXcv(?WnrLF4}uuK^{(??IH602rP>F)ZRJj`zif=l$ZA$QHz4GBhaMcf}obcd9mun
z(<jB$e0Ddl^DA<zK~PwnhLpkYL8W_(V7q7Huh(P|z9(-B8q@!OT<WRPPE%0IC^h83
zvC7~qN71>6<A3DAUYRP0Px4d!OuF~e%b?gmuWPG3mq2cL8tm*4>xfYi;Z9PS)!et|
z;yOU~JBla)+&#jVX(^S;7wfoqrmI<77`B^*5a<M<^TS-XR27dQGL;zO<mt|BsD)mL
zjP+uMMSxbSB(QOfK;w}qYrmqd?sCU6fz=;#4($+NOfDhR>$@V3(CIN+U5lN2F_}_?
zIT*PT22%2X@nXs72nf&ROiJVJmy3r$hzZ|{GDWkw<pnE@4l2mb5mOWQx{M7&lErW}
zm&Yk3gI{}|L-MQ${M;SQFHVQ5z*!{wmxeIfYeoN(i+NK>kT!1(nSrJKx5-9}zWQ{H
z6thUo4jh7Eg%VG7DCr=Bczcj+R^lo(qo&RsD5{t0WW>~YMM}CjTQe9X3Nw|+W$jQ7
zSaU-uWmQUj1=uQSd+DN~FB%gd)C7AYEsp^GYhmwM9CR4$C_EiK$8QVZ{kNW{-_@Qs
zTCpkvKp?shUP`Q33xt}%Rj>(r_GL6_6LOH37^VD<=KS__b{q3Xc8JBnzfYG{?$>xy
zMd}P{Fi@HnX|!qf<~3BQaus;V|9sHEB@Bg06(bQY_Ji<eyM4>7VGpoa7<D9|Ooxev
z!%CU~7#@ggrIrubiG2&rM~(-VT9r^{-z7z3^`g*egF&0ii19_Q3^n&j6yzdp?7O%p
zoj8LCNMSxu)*2tM8x3qC=9Q{pwyL^&g7uMc#xR}6oA-N{J~9#p(}QrzVUr6*ik^Db
z3j+<KA-{qz)|Q=t>L0H%owmfM-HsJT-Pc?BVc81qeMcjalw!bOWb~5L)Lqgqs#t!r
zLJ|Xt;%R0g3GDyiA+@-;c*ad%pk%g(M|CMVp(7m~roQ07!}6yH{!dW~wT%T60?ulA
z%7t0YLw|g_(eB(>(yg0Qt|E%dcY-;TW;N;b`_Bn~!+=v2MRS=x)rdd9k1^(cB-u;f
zah8f3)pPsTMh-E<^1e5f?-xQ^_AfFbnY7=uD&ITFguDO|=SOR5<N9)Um;H{AC-&=I
zZu-BDB{B!egJjx`R`dc!I$b8NQV27C!h#k^9p|>a8rJiuJ)dL53640FrIHTu&6`>M
z9=TcDrhed}7Dl~eWX{e<j8t!pzf+RaIDA_Txp%a2mW6~lpH|RZP!@0=|B*9!Sl*5B
zEW~pxVzedyK-8lmZrbJ#Z$yEJ$+`{D2KH<0LV^<6_ytmXgD*N`A-i=H$md?QOhR|G
zA0NLoB4B6yLLlH$0K{UIaVViZ2O=R=&!3-8GLxdO@`?okOr3qDe(#Av@L)H^$ea0q
zcr~OXFySgB^S1kN+V+Pp&wWyR37@V|;<BDCkScch-y4%mKTJez<<$>oVZUai)E3g<
z?RMcva+|g`h}-+-;!sj9^EJ#^R<0X-Y{xybl4P}?`K|zdM;x@=HzhQ=wgl)t4LIwa
zPF*>o#Hz|<8_Yi4{IP)x7Q>kQiDwm4?>>kKi+HmdE;%nrtKroNC47@fF@Ib4Tih|#
z_%rcADHUPwsMb-j!71|VYPPc;3QdoH?7Vhi@~95?^mr1L2<TBIOT38tLdx1sca%oL
z1JJO$?hcr#plw+>Gpe?8CKf=xVJc>L%+>+tH5kfQH%6%7em4IG+m3?&#bTK{uty?G
zrba-G>O-^rNv<;m{eH_6Xi>JF(6TSDq}2JS|Hswv*F2ppeebJnhF8JF?oApcJD^+N
zGZ$n2tBIPuBzGI(n@U7aJK|)rjR&0By}9#&tC}yW6eaKiI3N=+ztROcpE1{Gl8R=y
zvqeQaJ0Bb3oeZ5Y^Di|+ZBKHjSOmO!+y+9%qWDeQDJ@>-?z4<L=$b5@CLd~Fg4*0@
zznECX9l#jN@snMZ#wc>&=d`8=kV>KBVR83JNmHOc=Yzn%H{<=J88cZ!P`1Pixh1bA
zVo%ey#4lIH2x;q0{6Han)J1MRP>vr=-e%eK<#%}UwwP$8lOd<qMH*X3wsSooRsXT5
zLd(0in7bISD+lZL-g(!0`n&qpj^G5HzjzAZ1xf%cI9CDXF2v=-fidB-d{a%XOvSOJ
zoy<_qO{=Qk<WqWnagC|aon3|bQZ^AC5Hp1)x`0Zp<0#;`*RMtRP3P*8JtPIRt||ac
zhm1TP_7_q%lS&G(MOf^RCscJl^AO_i_z#k_I$@j6i%TsgfyTN+L<Swf`3Rx)k)!r=
z2U8iJ{)V*)QAX1Z#53}7VMyWN-4mwtgD~Xh5jFQ8KNOi?D;FUn^wsrogBh6=mS2jK
zTUMCT4hc~Yr;9#FMv){)xfXWD$ZIY;%b4bO>0rOb5;WGKKB~oOGbGj`F?YA$a~ene
zw|Byl{!vg*RC8C;GGmfV_h1kUFyOBTA<o6~%k(k6&m$Cxm!s5fX8ADhE|e;f#(2nk
z&DMl0*6X5H(y@y&woO>wX7ZClqL){lg^xI2gn?~2x@)Rw4c9fQ4X4EOcSO$?=KGY4
z0eW4jKmta!RtI!0_PBG(q$yV#lVWxYY#2+31`#jhqszYzEBMHGd@31`{ladv251>+
z0$6RR$G~I=wG?7S+F=DSh?Qn^C$bwZqOk~ZuvxZX0Dy;UGO@3kYh~gr$jSdzdXtsW
zWa7$dJY0OPNNpH2$Oz|8I3i1%%P&B~G<vF<JlVc7@~+9rB5{CBu|};R>k-8th3imk
z!t=1{0yqJ{HwMpPz1%{t4%@2Vn2}9}Q*s!E;dD_$tx#%G$+P#wyR{3}2$l|}zm3BS
zpPQ_4I<Q~nY_%ts29(B@(O$r&ur~gX*jUmzjKT?`pkN7{v)qn~s(Z^8g3w{~vj@U<
zYEFKt;2uQmZm(AZWz6baSE@3{&k2m)Rykmo06<!#%Di1rOF?LD$TFf@*U&X8{6ZXs
zx6Ea@(WU&d4<>uU`5!+@wKIGht3@S2zI&1U%Np&8QHl~ie1|W+A})$*nY*qtgprxW
zI8L$pskX#uAqVG4fz&|v@^m(>jLX~CrK_JVr!tKH(GhZobm~O0m#4cseJYB;ale40
zzhVT`TKG0+PS%{AWz<mx*_+djg50^@blr1N(f0IC#ILoCv|)xc`Sl-tKKQ3I&PnVa
zy#_mnCybg@Cja@@&R}z6R1t!|R$Zozu?T8ZUWUS}4>T;NGu1mK-AVVAZ4cO6^8RJX
z@vL&Mf<MMGk!O1L0`|MU(34R?xb8jgb7WqAmYIUS=c$dKBU-tY7xHJr>lO+F5foZT
zsAPHga}dW&HnHj%X&pP_4pf!jNo0LrJvc{FGy9fb)k!yWEVv`cQ{h=3Mi?A^biS30
zZ=oDYf{C8ZH0_+D<WH!`j=v&<gcwo7XaR=ANBUqQ6VCqSE0~UaI<YXUpU)F_rQMf0
zU>$Ly+@LRSWL32neyeRfd<hDNAA(i(Bna|u5QQ(4MbvDDytVzN1Z?fmLh<?utMB)9
zmlX#vxR6}~OQ&cYw0Bp(%75^0E8Ap2ECP+Nv7YjJ@m6`LsHgrN&#e95CUml5=Ki<#
z>Pzuw<<(>Y8JBCpU;iIW_L|9;#RQL3R9|&QUgW^x?VR|VZ4^ryK6P}bVZK&0m5j|;
zCgUVa%7l6lp4YrK58k7WHJ^fq+Uy)J3w8+Zr;09^^3M~*k+FTOoU22^wJ@W`r2~Rc
z^!bc9n1<mMj=<FR&I?o`gY^;m?CoNgFcqqC4D~Gd4MkfsUwGU`JI)pRU9pd6{r?J9
zAKleb6v96o?5K>}24H9i@Zw*L(c2)&4vb{|@>jyBv%8J`gRpd{r{OS6IUYppP{XH^
zkDol-J}?Q!bkT{=w0rs%Sx*8_;OLN=&nltVpTl8;#kPf{%S50g1rfGo48gHI)+^Dn
zFpDr>HT12r&4Mc8BAU59D1wuWKjwZ>=#IE#a$e{8b}s>PVd=f)-P$#AuP5$b+|QR>
z;tk&~6U|WLYzJ<8A}*+OySFsXA{10&!;2z*ud;kRW&dudOYpJ5okw#fOM-4hpdaL<
zp=G@R>OX%Qm~ud3JQUiR(m{D2^{B%9c-#JRaXPe)T`zqopMjcLe;gFIl{Jsq+&Ss9
zZcC4^#&-e-^)c{ng(Y}fLG&N8vMy9EjsbWwGzJ!jd&pa9j8Z@TZqRH4pxtUTFWGop
ziJPHZv;g*~@(7HP`}@*4IIaO0;!>FQz+v!FJ)wyvVugmKDyS(Q3~u26vf7-D`LAkh
zBg}`E|0+4@NPJMev^+cY`t03RN0QR$f#Uf{tE=g+=ci!eG7^Z>5+9!@{WiP+0M49y
zTTIU|>J-F+QNCt?3t#Ujz4#{LZ<C|QVA?C}=r<LVxkLCov}>&tH0`a4@)<(|*lTh6
zGp6I9Gc`KSM;fe_OHyQ|$nW~Su7|^vZe+N<*AljR8WfhjjOfW@5q0-hF9~tu`wGFm
zAcW545~<YyUBs^ezUZN4R6ODz7-6p9kfwmiAn&I&aW^ap8A@-_P%w-9vLl%wJNf?5
zPv`!8)fux-{il<y3AAR2v)QYr;Pem_HUMv(?k<gO@z9tm!)vPeQVkk9{x~WW?71b6
zg<cx|I!SWF+F`G0t*K!A>g=3&IMs^gE-0a2*E^JM$XC(MBhU66{oj2eRz&+z$<pE}
ze8DZ3xcX%f0%1cnFbG`{WxzbHw@i`oYTy*$7GEhOvdb)g#<?mC7D(J=u820l%FW72
z{lrv6{f&HXXZU7(69LCW`(fxV?$AGXCVfMn;nQ-9K!euSDqaB8yZ5h`Rw`fCMwVD@
zg6DRZ6K|xlEn-F|`C;!cC{;;#G;ICutlWBi^8@xo_YBv8Ak9;M?ELArO5dGSgcP9L
z4W-un#xuF;o^PWm=vWfZoH%GV{^+<%D1vFRJ}3s%l62}xq<dbTHa2maJ2E%`d)tHU
z5M|Lg=w4^VXLBRg9Qli9#y$Wb)v5hJ@~K)V0ZxEjp{B9IV)#aD%$~P*T<YbLqJ@lh
zZ7IyCO;jB!PJAsjKlGyE26Hu34O%HP+kXvk1aULm5K`fRe>_%_?%Cwku!VJGqE`Uk
zy<T9_Di#FI04xE%3VmM2M@2~z7Byc-5qFEuhs7r)zskG{@%+er_Y;g_!dC|!XtSbi
zf;>iSt@zWG4T#i)tg>;(Oi!hpplr_`;lA3xdhoC;R-V#a;bms3cT$u_R$xe3Us~Wt
zvjHAfA!A_c6)R0r4y?br;cP*QAhHWg7;7R9LeL*4HpH;*$-Re_9F)%*LS+xnKB<1#
zG^2KoFd;n9ZZ#&fvBkolhfDCLx{Tv?i)3HVA1A5&-88n$;OO{J)=Y==$_!;wowGT3
zdU|!EQbVVSD;I4)Y!n3u*9DbOD=%btCLYLSJDZ49UURD}6@=lQN5V+}zdH4s0I6G0
zysLV`!wuVEB`>+7k1>}sjWQyC9<+8dM+^0i_*i4}_CTo`Za)V-=DB+S0%^?@eJO@K
zH1L4e?#(Xsz5z75pFTiIn>iqSbB=Kj4ks^UL~qrMt?9@!cwqW&rOFsfTHj$*Q6sDh
z=u653>EwH~gOA#qNa|X4ua?<h`8XE0eCopu#D%s6F_{`cZn@8eq2Ann;9I)vM=t*=
z-E<cmGg}RLEJ*ZP@2(sw+MECferM1KNlRCKc<u_pd=#QT74=X?RJiVN&?4wwE*z{o
zB-62~?A$nN3KHiL6=!rHU5!0Ren}LiU+p5gaY$&V`F^MydKsAcmB#b98;ufSf4D1u
zfsL4IVMeLLPZDA>Oi7=t${FxzA^V8sT44xp4n&RDciruitMT1+x-iC-QSO3DcSXku
z`z-+vz?2*3sR`DJ=3xg47Z7I|W0!HiK8#wn_R(iW^MuF8N`>%B5iB6r*eYDO>aqfL
zJC)j`iF!I;5rqV^+nCKuc>HdpwSpq)r(<f<hZdyo5=Y(*{=mY{+)#~#ZjXH{_1k|C
z*qXpPy?RQJgiLeKXAl~|W~n{vB*AlEc&Hr|Y4fE@Lmfn+D_p<GmNOC|NNTBNI--M4
zFJLm04aq_~<^Mbz#r7@_bqjok8TE}Gf3(51okNi>6-E{l?h%joqA1}m^LboYOr7tl
zn0%NJsP~B$(#==A=fWePkO-Q8rg(S#Yzv5?uD+0^Ms>#H_4Y<d$?xiJ${V81)e73V
zDr5zlsR<Hn@NAGv=ohc|o+c5yp9Qz0MXko&1uvb2(Yx}wy@JNIo4j&IJcyg-Mag23
z83(w{mbbdpS>@hJGlUAg!ioz>ZQ6qjkP=(MU12xamm`KqxGABw@3c2r_amYj{I+ZD
zMR|PhRMnrkae;+=PS&?VA<+n%?rNeFdNp=+u5mnsrtX@lcb9PF$)nZ=fO_mXjmjMl
zk^K|pHt1Y)stKqWT1tVQ-2z<f`d$D_WDH?>TBmi6uBjIT0gv+I{NYfv+*y?^UR_)?
zu=-6wp$TE|HngbEgghj=!SNgqq&U9DtYbTIz?g|*i<@Fcn)+>7V}|VX<qt-cyH}_5
z)dn8xWRUq{Qy5dA|4liCc2fNpEbLp}77^_sV7TZL5Ci1IA<m1siWhnEVp)#_-2=O6
zc0^grp9nPf*ZROnH672H7^2UxO@C149k$)UYml@nmGL(?s+zyu-jG9v8$?f9mV$~v
zL=!tA{<GJa=aS~bH<QrD03?FNyyGrT;6pV!SSWUJ-H<_)e3_gy*hNT$%fK&w+t*Q3
zR;$0ZS=0^STd`d$)yA!@J2t=jjCeEan1w6Tvk^-IrV}B81St)A!HvP+xPi1)CR!Pf
zi>nZ;oRW&H9p(WBaFq%isOvRKy}@EK8WUGmcmg03hWOdD9V~N`8I+Cmm=^QUI1&)F
zA`q<*Nj2_wBd4<C!JA#XM#yNgg`<K1Xs{wvq%n-HQ{a{@Xr@L`&NKZ)%*l((wl&UV
zB^Gfkbqn;GWbJz%J7vom;7@<?*|>SV4m;g3deA$G_#V=Y>g|KX0o?$0Tz15)*g{Hm
zQn+>>?q}M9Y~x;hh}eZ*7OSYlbta88ugJ&KM46RJWAO;%0g{e-{E4ntv`ppxdc=Ne
zg%@e1iq!-b+ul)A+5f`cF&34#X7$$+Qc<o>^J*5H_<6pMnS3Rw0KFe%x?E|mJtsFi
zz}e+iviT4w`!Tmpy9*i7Thk1Q-xOXUFq`_pyljM@Y~gz7q7cRcM<csQm=%vX)lFsL
zdi0AdG&?TxkQ{r4-fb{12*r~%XD;y<T?1!~*FeDA@53XJ79%?Ij^@0r2^kpxsa6B4
zZxfuJguh(9-x}0nX@)md&EgRPg2@>@%8Itr$DFimV(6VWw90R~xp*2HQjHclnn1Kq
z*>nuCv&!>0ib_DeJB;+;8sg`$nsP_0Iw-%hzaKYd%!{h+w-f<J;W0>h<MT%4kiS|x
z<#5Zh?0EIix-uy7QCWHUnwfmeP03m*ev^=|CbG4S7{Xs1rxd8LE>v;(TyP<HeAlkc
z!`@Hl0>)nfxU%-&`WzWI(_I#WMLu`SO{m8>K1;;+#+|2Sc)+xJo|2c;2EwjPQNFQ{
z4=5ScP&2z&P;JF;5Qrn9)(&kL>@=NEkv>MR#jHW}{w1=-G7fDPd8GW(eIYI0OcHM8
z*X&GWEi_iN!kRwUie;<P^lz#34)V}Jo?m_2B2P=)8<ZMr9Z3+zb{b~@{NS&al(I_)
zt41c}vOOQ}6Lfb(EcWo!wT#~R{K(1#wDzVZ!Y(Q;m9Oi>5}G9WUKEmRv;enJG>PQ8
z>bH2*_j|Gm@bud~h$ox3kka74!0b-zU~`>(6p=ur#%Z0)%Trz8JQi|f^!dP>lyzG|
zo_!nXEh4e6ID1+}dwr|n<=t)<<xkApPIt&8T5j65lTKR_|5fTJ!8Ym7GZt-EA-@+_
zXM!J7*=sG-m*CP~w&_30k9>6D%=r@IybAQrPN=r=iA_QdY8?QPsCbHDxephew8cJE
zhD0@EvdgWZuiE131Y)-Nbrk^HBU|l-0gbClc-X@49cTb|)oW|J)C~r2+~;%z5W9)9
zD|^hWHcXk2>fV(SGp6bRJmRxDmSoH45#R<$$p4joliT$hrFhYH6YeRh>{|M(zUEs*
zr}wcu`%AgX*<E5I+8TL{#Xhoj*E=gEZ!FQzRUp7)6*vo+40|<I#`#+*T@ljpIATwA
z#hW`~su_5DHq0U<O)*>K|60*qh&z1IUqRL3<h6JHmVA31hSuTVp_8|UQpmSiV#$b=
z$i%Qz)_DJ7WxGU}|4!_0%!3BUk0wXTVY??6M-~+Zy4)J;hZ;FpyfsbAfsG5`iLS<{
zf2?3o(=S0%HEu(bu93ywyy#LEg@s0I{q4oj&>g}x?M^dEMO#nc+*ch%lez6EeH^}q
zNF0b!^kjw=x#ca?UOoJySVNv4NNlWNC!uLYvJ-Z?8KH5MQS<WQkvn@N%q5W<Fr*O2
zLC8>V?x-TO0C?ZcF{?b^-&Qa$8lp%xGdfRP^3;fq7}WQmWr;}!2cY=Tw37llFDa^a
zW1u}Io-$lX$IZy%WajyWdYqbgr#4i<DBeCoK@#S)`a$)s^a_bIFBm0cArOSxusmrp
zDB)Ad`8{eq*av-<!7AQ0@8)=y8kO-{&CFi{XORRt?h~YDN`2o*S4~*>UK8DG+LfR_
zjANrj^_9t!JvPmWGSC9AKoBcgi0kurm<~}IKO~x5sotBo^UBr~a8}K|=LO`~rlm;Y
z*U1ZaKg2tgwp(!JBxUxoTfN+QY>omL29@m@AnN-(BH^aoK96#13$C@2(aKJd)!HFM
z{#KQN68}n-PS+wNL6-x3xIzeL3zRnpu*(=KjZd%BEWcEj@hR+D?g~$L2(}VxZc2)W
z)jKelrL1GLtbg1UMTJAeUzy!6%Xou_`FB`@HyNK10~ViH5o3Z+W^s_<<aS|&@?}Uv
zoV|KrHJk_j$66TtOmJHnefQT`P@G9%VJhi-Gx|4C-4Y(<6rhAzAxwIU+g9b)EJUGt
zku016C$4=osyZl)Jn`Y1vEL{T${5>1#WfE8HKCs|cUL{woi%F8K<<nKVOs<p6(zlx
z#Y1Ds)I|?2Bljh<YYQA*;z@-S>KcUHOYp?ih(!t2ZiBPQ`rL}2{$5F2#iIS_?EpEu
z8lcQ?OK$x=DATlB0c<mWIen2*3G}VZFoL?Y&OpR5x-SuT?1?Hdj#3f%v=Z#OY1I*h
z=P&gl$$^9O+_U9($+VIbT^m3@y!RKc$`0oe$utdZ6l|AVy_Wzv63u<kx*_~N0O6J@
z%Ll>BK~vjPiifxL_3MFEK_viWeL*ila!24pIp8P&*HHEQEE7FJyzd9aUOG)Ss2r;2
zveaQ34kB8Racr$0nI@nMuM3bwZIe*z<*$BiFe<np9@@@OnGGqTn4rTcjclQ72xP|2
zv>${qI3~kJA!n~c#Ou`$pt&_rC1P$7D-RYY{s>^SjF`kuxowB>JILQolP36FL1akc
zb4|`1XZG6SwqAI-wM+p-q_bSDw=V(l7n)ka7jnkg-fAkqP+Gf2f47!i{Q%19)Ri?*
zl?#_kM5_HAYWe*lcw=epMV6L$5U>h=@F&%$8)6lgZsu@Dulxaz_-uAKzVP+WNtve_
zjUbueHVm04wLgX?)R|xW7c<4ZpAJMo7%o2!9%aN;oKSIGEFWuqTj5g-i;WXlywHTy
z9Jaw8pcp*Zk@NUzBo(F|8NBq{2r_h1D3v@y;_2d4?9PQU)3pY*4X;%8{c9`thr*cx
z?}CSuBU%}94aUu?=huUocSc7x8in0GN<UNRkpJgp)O{GpT{2V6$A_|wJHBm}wfvS_
zqB`2*1BCex>N*5+5A9~iDNYu@v>d`x=iXUVtP4DpD92VE`_eI0g;xcc0P^@fF0Syj
zr%#t&YOKb$oM0JjUgA>2I;AR#$&OW_&%RJd($W+R2`>pjJm#+v+7@zhgvAcc$pKnJ
z6}p<)Xoga7huIJ#2N5EfRNN*B*TDs$5*b8k?}CZ$mW~Aic<IP;5KIYRADsw7#IRK&
zc(Z4<J_|rROoSH3Ptf(9Gh87?Fot=bvUp~z-fo|9(}%M#jY51j?K${AElpGo34L)f
z<CBin^D4an*B>y<5+gT;pIYHTMU_hv<owAggzb#9ZZ9bxn<|F|NQ{>V*N&}^rB<%w
z%sweo_j-y8_3)AG%FNqL*n1Aus-X7#he$~=TkiC8eK+=NRF=wuY`1K&ogsO}kU`@X
zZpK^ZO}k4CECI2HmueTFyt2%ulFJrTh?08tIi{srN0EgRlw$fxeAR~wLJY}`{tnuW
z7Z$Xr1ws_J<$l++_WDO<CL?JC!;=qnU5(OpVcG`2?=uNssop?PXE5^7exYfBLXg;a
zrTGQ^xpg=2jIa)c-!G<ErAtnA@+q1ZE5{M`<@yS?yyZORmBaEutJqX?7`^>eW)Cf1
zk=h88nd;(km^a2<53q<3KkQofY{M3KLReT~n3McNrv&GG!=nPk%M6X=^{Aw#&!hU!
zqUe0ydY5&4txH)L7hC&z1c=G7)P65C5+QLrc_L_6@pg28<i&fvFXD(`$c|m>ga1$@
zRf_ci-=pPHKwUMY-;snArVHgLS7^lR66IUYWKFoDJtmDvehAfk0?zuw`^2oIvbvb=
zbw&Ue@hgs424=%pz*QAoNz7%jrZfTtYw`9-$4_yLW~??9S){3(kge+v*^?C`nS!Aa
zDj%@%WY;3@&&<i%ln%~R&EbqcefviQRFcib;e4IAc}7kh1&qO{YC!c4-CH9{STS8~
z1xOmqw>nm_xKQk*vOJ9E=HzTF_T^Pd$TX32wo7TFKAsBs*S#ACe#fBUviMEp7g;Pi
zqQa*dJi~X)QH84E4-2y)f6da~O>J2whJ0HuDPRdhufyD>dRtN?;GyyAKV?dU@=P^R
z@|T50razTBLmL*LP`FUAyo9On?zvF$%8EAS`v}7}&n0<Sxx}*MrVEV>6Ttd~1^CLG
zhnXgH0(j0@vpmIrVsBplr0p52#{Mb^Ig^6jCb3gd7jw79R;PS^XgINNLKBYX6$QFl
z3qK^06b55t3TfP^@~5bp<rvLt7*T{ZJZk8T8iYyx1dY%7vuL{WyNu`wq1{DYC#jYn
z`#2RXn)Pm0+ou9L%?=zTB;{KBGBCi8g_e?sE9ZO^SP)&1!^UAL`GM><HGLQs;JgjH
z8NMgSi)dGJ#ZQkV%B=gGfM;5Sx?cP)UPFwM@nogJ(ek2No`k%HN#dyalX{_^mFD)m
zUd$Wy11>~E=W!^j-fdZ_&fH0Ru2Rax<>l%5MA2%auBydkvL9mB_e7zZI==Az=_mHY
z-A%eB_sEYHJU7LDo8rj37m6Yq?qdRT;K*$g5lGV<ehQEt0ZIvXhd^4-7AwgPEWlL2
zYUjwp%3Yi=K&O6rq_Q5CZ_}KV<S2D6AlOj1L?H#Do`)hwZ|Mj_Kv9TlcF4C<{A4-C
zSb*V)7laxt&cDGEeAj(+A=h%wwuf?R<W6zFuqOmHrstS~>#BUI%CUV>Bc5HaA&69H
zOIIKMHgJC3E~zFvsSo1{`%wm?<t#LLTG6|r8nAC_H0@uuI$xdDA)z7Z7Xuj;?JPjk
zdc4qu=b6=Q4}l4O-7hHkU@4@M6reHmPImGRX&~W~X_Rsq(EwF&(G+%DmwFDv;?RuS
zJJF(rr*^uN9Qc>bBcIjWou0x~9$k1ndoj8ozd^~{MDd~-gwbdS3FtzSkB6(Q&ws$e
zsZ(@1eXOgW?{vFE*O*84c?$!SrwsGghh)CRs0@S`V9fSd<i2&KuHaKJK#>v@r)X-a
z>`oZSQjO%k=0vW7mUjW+G-Gk2Z>(!jQ8j7K)DC@<1bEyEK#)4pA`Sa;RY%}*?JX(P
zp8b*HYs>nXu!>@gCk(>x_ZaA41a}Fss2j3()sMdd-M3SiX}lANFwTR1!j!6r<sctj
zU*HEmy5<JoQE&}8iCpP^QuOWwMUttcNBn*1#E$_o#dIW~v<A0IuJ!_LDOw}Rg%I3!
zpSUAwvJlCwMTrw#CqIHiH<$CQD+~VEuA-kr@gO-jF6c545l5T6aC~7lYu3N}hS*N{
zH+L>a!1eVqgW8k;w9`1KG(dE4vSFdo(WbdxHrZ81J3T*Gw#8^D?cyHfKJY9$G><{}
zL_2fDG!AQ41qIYUA%}4cuqIk!PXEVZTixff!83p!H=@$Hc+Pm>U1(CKq-@7Tq}1$7
zQKS8ZW^u{$D)fFH=M=#Nyou_*8$3@)f_4EaFB<xv9JyL>A@j?w*wp|b<l!O0C4x@T
z*G_kQmHW+$t^PlikM6SYX+huBd*QWgiSG)1VCBTc9X39EA@j97I5Wh>+XW}@6my+e
zxCPMm=jdV@JQ$)I=-PyE^I346P1keP#iE%_i)ZWd_yFRpFC5FHrmD=}A?!}VzVZ75
zdQ>|ss<d>}7^#MiqtfFhsVzE`HQhPQzkyWXyTsokRC5+CkBnIWiyW-oM*i;dR}i=s
zM;Rc&{wa9AogfbW&X}5|KzdK%k#qCkaL7&xTYw%6@cm{<^pyAJy;VTz+}QK{!stTN
zLIw-3V{f*$|KA(GG?_^E+z3CK{+3SvsYJ#s5Ys?iIhrB+!l0JXdLT<|9mtDp&y``c
zO&S$QK?FGShsT*b5OQ%!>Df|GF*$|S1s8JkW%`^Y?F$*X6p%jkXW|paR@{XShUIh3
zzie$SyW-i;I7XKyL14c2sx|cV2k!S3BZ2ql1WrWf=n!m~%wg4$^I1%iYAQe?{TFrE
zQ8Yl1;gKJ6*K14Vh>bG@YHY<-$%P$cS};x@E}`1_RqUSdxzhiyPRT9ln~vi{l<AwV
zN@=5SRx0!tRAvk-t6{2^__+QIjKk#5*5E`&!$aJnAg$U|O!Y6e1L*ro8Z&F&8&_^4
z5Z7ctz$?bu*__i<XsNzK5~S4CuWU!AI^thijX(nxYKp5Z2`Ge&<=uqy6}_~#Is$i7
zm*#r%fw<x$aAo>7;Iu!X*Aop4yRPPw8Dh?c=4kA8=oz=q9xbEUAGcRW-lN#UPxS)F
zy{=l?xc6Z~jJ8QN(1qc89PS^NF%5%Cayvm+UX*tCaTr%X*=*cIzu!54?)ekVf=Wn~
zMpux>mj}(3uMZ6ylFks?K@Hyl$d%OY4#UU4U*qP}I{+#ABysSqMHS=Y-uxPyopQlq
z*YT>LJ7-`M_{r&;V7@m_L2_P#p60Cg)w%Ea)-^DiM6OjaQOYG7j1-GJRLyK2JC#+a
zw9j2RM7*eG>h&jNz@zaWOuNpCWn4XA#kE#eqy-Bb!6F$x_85N-WM$Np<j2|et`t9^
zx`dwsdZyyWVHf6DB%mT;3kHbCdSptG6HyFiDnU6&{do7Ld*qsUmN09e;PMcSWNfwU
zJa_KIH+;p?>_xCH8i(=gX;>vH!?l@+PtVTx#tFBp8psN;PmB>~Z@Dx74OA3V>;2mr
zC0jq)`@=J6DAS<bz$B^V1-#db2Qq`7`6ZOsfA^Gnkm;<CJHnbhTY2b#T3z`J<ooUF
z#1=Yebq>x{z2{rs9SJliBYDDnvRa{HpVP3HQQ7c0uUK<pIySoMl=dYmyRf|aZD`r3
zfbz%*FX&^k>gs}@wJ40)-0;rQlKv2;+KRcR+>a!P4kNp@{HHG;kzo;8zA?fa)#i#>
z|K5c%G$|P-<)yRobxMxmiKucwHnk|5`KCq%9>ZItJuVH|#{|somu(q)Dv6QTK0iB~
z?Crzj2?g$PsGl@K)TXxsj@j7^LS?FqJZ$;EZT_hTJ0A$_@2iWFev-y{yvgVMXcu)<
zr2Vk$^M=G5sv@O0W~yo$pE)Z8`rx|<T+LMH5Z|85&k2@Nft$L6Cxx>fg!t9*iEu6t
z2<t*zem-W&8n|JM`r^6r-%DomJ%L3m_ft3?>SpOmI;E52xN?-=$~@0$eP!}WL3+O&
zs-I4qrSJc_XW%L(>zVBM$$7bUj5&+pW3#rAGExOUbeL;iy7KnSsMI-`?!YYtt9_4i
zPr3k-q%EEBUG4^0xWmwic9^~@i&ERnz+E)BD}esK>3Y3oc-l_u!|AY?Bo_j%E21&?
zsuq&Rg%M<2stfEdQ$emc#)=}qK6I9kzNiNd8zHgt{EV`qU?&#wtk-8xq#j8P)$x1s
zS1<n%_&zN&U}g8$&Uv9<3TD_GpHeh3g2ZfO<@sL{PKU)91k*nn3F0y{!OpZ+xzqDU
zo2HffMK~?;wVagl_W)#Jj5y?M%2@;!qO!bhN<GZ^myO2fGpx|S<P>?}q6n*&mE0fd
zhL7=Q@i{Vh<ADm@!MG^XP~-8jE!^?m@0)^Ij(cnWHAjqBl07wqhK7Jr%iAtSTl3C&
zCe3dLVvR6!r;f?<{u?j5Rfu8&cADtJd6n;@*;kNiL+SLL4iM&M3Oo~A!1{bqT}d)M
zf96t9>($B-BUl$Q=|fcHEa}eX@Q#I(ZsTv&F*y5^>u%W;0I}>&h(YzGnIxYtr?1ue
zW+MtMquruM5dq!6|AG<_*!E5NUYo2!H~e(;6ilrKPn%6*pKda5wjP8<u)(x+=e$+e
zBZ(nSkx*kwgIPCpWrwZ0P!Yy$&Bo?G4}wkTu5}tNSA{8GS%gcO_bV=|*$Y9RnY@d*
zp86+gbvWdy>fGaRy>b32^>JOQRmCMQPn2z>J+*{mWWKpAbb-Y4^#s8><!jmY=zgp0
zH2%<j5{bUjpbFo%7&$C?4}>^vUiZ!qXl1ZCy2Xax;w^Z$;xgO09c#roI@3%+$iDD4
zHw`Vt^TAE!6+Y@8PW5XQz=pu<YJDnO4CD0t0I$`b5wE*W($(CzGK1$iDk#?!=Q|Qx
z5V*dKIaq(FGMcK-vQg7)3NjxA-oyxaY7omFs|_0|qS<;x_u;rE^|+)ZiAMj<5@}B{
z{$qR)dDzq^IFlHF7v<Xcx&p1?Utn!B%7FN9<3|PQ<yY(N>owJa6soV7K-3B2@0}#1
z5_kUpnX{geB>Te(bwisJNGYN+`9o*o-A6M>Vgg`tKCPTZweX60fJE(^`n8;7`>ibW
zM|N__b2Py~iWP`(6ie2kFr%4k1x*6*KxEeeDy)lf_#=(}F2PDvi~0D?0*NfZHRp#V
zf92;lT6l0FnZvMEcBI@4GS~ej3}<W{0G7xjPcxW4h_h~o(1H)cQLumw++b8)G0uJH
zhZ`}CD|6ULUWy_$P`%sOE$BJ$(KMYemwNbQYLHt;mS>Ap9nK97aMgtw|Fjl^d8I35
zcA)ADO6554eFwM_2wURImp8Sy`-JsE&!(6AITIvGz9oq;;3ka{am&%OO;Ws1|0Nee
z<c?alKbw`no1TA9U~I3i(wsMyjq@U7eJkEmGM|KokgkOe!3O)X<pvE|ik}LUqTd$3
zCx|LMArIWCBEWhIDa}DF6ZC2sc%`PZkF-Xk4Zk0;ZcNzhBq~U7ia{?+emWP=qb#)K
z8L~Wqo8A(OHt&8@N_aMTmKsg>Y(=og6!~B1lW@P=JYEC}>(>&jj5}$9#%p59#>vHD
z*7k6`5#t;h%P%fkNKJ+TLAd_9%2W>aoH(g)8#HlyCxv+*1Z*wMX2@d$O>FF#)q_R}
z2eoYYJo~`Hoc?A*^Un$o;A*>w@Or@2!TvXvi4K$P>|fz7DqN){*qyIw?bFuFx=#0u
z8`*4QeZ-ZKDdQ1FMJoT&-=!Fg&CmnR_Dx<yjrZVQ{C8mNt%D+wNxzy8?D3p4xpvWj
zW&73gk##^!JKi|or&X;Wf14~cqB#7=>7ap=!a^UMwfFV#np7S|GnTpnQgC)6Hc*GC
ztx!M<Aw}}>z4*{|A^JL@IOYA#H2$2&SAzgBONy#1&-DIB)r-az9O7!pTu^0N&O_(x
z`d>XtA1zPAmeH!)R@<0>>ga6?KD^A9!|tMx18!9)L3lzFj}kcPcXokP6eunohB2av
zuq2@kt*m9W{aWOK!}IoGM)C(=iCm5t2|noVm-RXu%ZXZkz3Cvu_>j7SEF3O^I0^#H
zjQl1uZgrSDUBrLPkM5cpG0q#na;+{T;}(d$Oe*VIt3p9vEV9zlu`bNhqZSclhYA@l
zDR3*9FbTvZNM@{L(p$%+A?*d{SX^)3P!0Gc*H-Cl+YorDe~A)%k8rfSUMK}N3}(&y
zVs1H$p~(@{p*;KH0E+0)@1#%IE(Qh32Qj<Xw_yDmCB8RAwLu?8<N_UgRt5t_Td7EW
zciQj-WKWzt0MJUH!lUPStbt=jA+BPT()mTGv?RJ1bi>UzFEy|Hn0!VPMGsATIc4Gc
zT0gajG{`1Z2XSdXwSog6uUln^C)owwGkui{lkEnjbkhC)+>a1joYl$L__XmPGz=|2
z>ayr)Q>?1U!&I`0=OK%PJXv%CB1WCS4Zj4BJypz?bxp|?vp9Wr-C_iA^&B#2F?W%1
z8)41_kwkDWQ^*9izJ~WemUpda%A$F!dsp1_9XoxTT5%ZfU@;qG(ez}^FUa?_ow3hw
zP(l@@x1X<%Vsxr>yO$ICkt>7Iy}YR4t5CgwO6_i%T$)ZmrLLfeh;IyYJQq0Qo<<ky
zcKUFNI81rVK5FYYwOdA!US^`Q+NH+9?tUL@?CV@r6PhlsbRJ-*{#GydWK7HPRDPWG
z<ViMt6(ENi5^xGcPp<Oa=-@<1{`~TuE2s7MKhA54w$EBl$>82T$nY_zYrXe|DM*XL
z09ab?w-Av@J5;OUZwuU62qNVTV(vv1c`)ioHqR1;MwdE^!{fG?9{F`UY?w-nd%DB0
zJGs}f4=v$Er_M{J&FKwZU${#v#R}*p;bn-#V94>{Bea-~Fs)YWG5xp+?gg&^E1N9(
zSIb*A0i(I>D(P-%EtNV~sXxzhont^S_mPyDkCAO@PWLk`E5>#v<BPIypU~la@EMGG
zJk^AQTVytUy2y>-=Dt#J(2dJjPCVR(0kkEHSL{f*Gi84As+-XQr$&mmHGhi5D>SHs
zf|m<lFps(!6lHI?(Is-1lTSAO`pSLBn<NFVLg?aj?nX)S!&mkIr9_jPfrk?9<Zn1+
zTR0;l(jFVxB`bfwNHm@(|6qbP0~(bSw>hc0Q93b{y-Fhy>)R=HfYWkCL{dM$BkcI&
zH0>k5&6@5P>_PtFS4nQ|*S@Sq8oM)U3j?_U@$J&n;o2k#%J7r8)DI|BHUIAm<N=-3
zF7)a_=BYp!2*)%{>(PrMo;QZG^Gb7N5359=VnOXn7Tt<1@cQMO2K5^Y$3%jK!3i2D
zx{q9c3#}pLMl$+FOz5L5ID^JgXkITh12gG5bOXot-oD<Ze`2=#YX=>imv!(ptccna
z>4GaiJ@d%sfWm`jFDZ7tc<o|dJ^QlBd)Lw?ozqQnHzXbQrk^5F8UrCg9!Mo$D3r4<
zKCLqi<Hu&Xi4Cd+ORXrMdGPJ}<49}JpcZGm-TSE9=@K`%Sh}b0JobYC!n`hTwGKUB
zVzq2?249y?3Wze$!WRM`eUtP>#=xZ`jgr_mGHX2trULS^BO#R@Y0o-1H21seHa{R}
z+hXK?X&)eC@kN_YIcy>%#!+_5yC?5%x!w^!EQ<P?YEz|Kt|&)`p}ZCiY?Y7VPiM0C
znDLxC)xj(@!t3bn)iUEP#=F}uOAx{$PtsSN^B=pIu1}`rZ;y6tP&IGLcd|<On_=Yz
z0!VE~f0)wDQQp(#lHL~v&wR;A{!e^c6nPox3e)TIE{@wHJA%wkyoj<UkeMMuUdv(Y
zx;@b6<UdODGMQ|%(|YA*RFy7hMFPaP5_X;bd_NIjr1ov!wb&{5)2IeMpQVLXB*Fz{
zlETI&WM^-icSX)hw4TC}J3W{L8M7U^nc4K_wIgJWrp!G5csi4k<<Df!d*6fu0qr;G
zYP=7y*<|W;Oh7K=?D@xB_e<Yj^#UZ53vIY8IB+X)QATSriD?w0NTo0|BiO|kcCuGm
ztJ=0zU=F4qmF-!HRwS)yBC$GW^VcnON~e8rf{2hTBpQ<^GZ&z>#QTf6%LVvE7j-lU
z2`6kcy*&}kg>fs4=}=p`)Z5DU0T$h{!@4sa#FP)WI@-zPdHklPj<v%Nz={~uI-VLW
z5vmX6zh3Grhv|RXm(RG}9~Weq;Zu|n*FA8-+=2FS1yCLoCH>ERh`^Kr6<?**%s*Ay
zBBkGM+b;7r%=RBTQbYJYIX4Z7k{sC*BT$;)?-vLPab)Yy>&f{Juq<qeXVCllkF9Mv
z0|O^;+{Y9w8XBX9q4RPr2{M6HZzB7$6y)*PHby-j(g`jFkGaJ(n0Ei};K-{D0lOWF
zA$jGGup0{3g|mFq=+i>dJ#_9FQ58jkl+}?YK9=r*e5!O#G(~`zQSZ<I)Ff4l^)`(3
zO*u;JUSs+E;Ebzot~xoM+)y*MY)wB;%&ts;Nak84ghxP=+*T`pmOb9d4E8Ni6JBh6
z$A?gf^~e)mF<T}mmKXXB)m1|PZm~1Oza-x_X+y>?6VOZPY;4Gap7yvPX!s$qL6!Y!
z9uO!tE+nnJfy!m)uPxp~ea2>RN?{_gUQVAj%Db5RRs@JnXc#=SA|Xzy;UF>dnFtvA
z$VCk)6By2OkA=_p?JBH}_aofnv`))9ilwd_@D%-g5*>Bdj7OEjltcMQ?nR%e(5s}s
zg1}!a9(5{pxyNoySGx%kKA<{I7jpbK*=p=$rl8hNLRJkR^;c0cizjH9lO17~><b>V
z`$VG9E`(lOGL4l2PQ2SL(LP5PmzL>~bg9K<I=SHAz0$ViLT?IVl6s?I#;T9kvqF63
zqfvyHv!zIi7EF##+L>#WC~EZL0gM%x`qu!gTlV;vYViS0gL^LC>Mu@IV0_j~6mZ9P
zHzlG>86i`&7sVR@n;&&j)!+dw%xv0<4_fA~;NI|SoeNfIhG^pN0F`Rr=~Gj>O(T4%
z&Z|E%=JGWi7mysd;|P0iF0jwuyj%DhmEs@3H<xBk)BD@dfXwOHh@~%XME~~Tw&r24
zfF6>FNd2gSHHknQu=OCOtd{MN?3|l*nI|769l5$_Zg%!@eVrE)p?R9S#Jscr-DO>#
z*g_H8f0I{CQP5={ZCBpHajqYV`0>}R0{c%6v2u?~LP13dDg7mCldO5&KmgpT6f`?7
zA5@0|+&8bW?#S00;htMfS!Jvhs86F_)M4OQlzQ3FXnG-Ou=Zg=Rfk{@x;nmlXwGkK
zfKdgVgZTUB2vb!kvN-ZWAXjXi@lMaI19!(tH5wuWXB@{<(P~j1v4O?C=^R}<qha2q
zJL5v_I?Zvg!<p6Px2@unwI7%4x?A`JI!JV$`?A5AYmN3PnkP>@B8U<?5rr%Pz{ti<
zTChiu0|?wd1qU`x2qw}`7~70_R>OIR>o>mZP;Mj}!@O=9XAjd@otYH{CulCMu%LaH
zFFOvv*;7ZXfF`5Z73c8({#>KPGm)D?s`PMrqk>O8<SYawM9E#;u7>uV&{oqV1$AXn
zV2KguBsj)z42?suM*5&$8h(!2v#(O<)il;I<sFKl74RN<IU6Jf1Q`+*7s8LiNhbi*
zcX;xXV}gQO84ZWisaidTy<~Si&2R07j-Yp=G8DnRW}pd~6C5+tiE0Y3qzl{#tJY$X
zN2w|N#jyC>#9&jD^N{8KCL7`AHa7&shCvU}?N73HTr>+3%C_8T#*2@!{!OT7PMES~
z0qycgU|qPacKo=C!Yw2Uu>?l?{q&m<khcvQ=c4hQ*F8x39TkNt-x)@1FWcQo5UkH8
z_)yLoI)P6O`h&z8>>(KoHbioT03;J3B%%XUmIUK^gcdxPL}o<F%}Bsz&@a8pOnHBU
z_f|nt6K&b4rT;Pw3GA)0GGSYZWw8d9c^~`oVu_FFn7(ZFKKEO7p;{oT3<V{<rZv@r
zVb&>aYdZ_(iXsbrv}twS{XvsjeiWPm`wvg+MFAe!n`QE>!Kz7jCoB)eA?MJduP_>M
BgM9!1

literal 0
HcmV?d00001

diff --git a/CERTIFICATES.d/04-certificate.avif b/CERTIFICATES.d/04-certificate.avif
new file mode 100644
index 0000000000000000000000000000000000000000..e6663146d6f4ec8f70a068751ed96f7f9b90ad75
GIT binary patch
literal 22386
zcmdqGWpo_NvL@QX7Be$5gT>6UnAu`xW+uyGW@ct)28)?lve=R=i=`*;bI(3|X3ea5
zbN{`Uy`u8Vh|I|NDmt^Ws{sH2k*TwXy@9KRDd400sckGwnQbf#Ol5_bg#ZAMej5{K
zgFm*9LS=4j?f5SU0N7g?IsY5~sjV#x|Lq3B-on}DFB{0mmD|GF&gf4|6aWAN{Ly>}
zZWRE)GXwzrR}1^;L)q|Q{mTY&3IJdsePC@13){cq`pbgz(J=Wl;LmsiS0-i=J8QeY
z!ugNo!~Dl0WNmM5@TVvC-(x;}i@95v{*gZhDho%Gf4K$#5DZ-0tv^Bm`71aCBV#9{
zzXJUe>VSp4qy0ynWnph*_fex+IN6(g)E@=(;3JZ|4}fHE;coFq0|o^J^-;kYxH5|b
zkp0mBP>t-Y9c_)Q-9LQ810elBR3CTeU)@3e(-|D^PiM}LKt%ok7e`xe8+#M8zb?Yu
zMixf)+)f@&&L%ca+#h``tSt;2J-7}2&62>v-sUg5A45NAfP;VrfdfFnK_Ehb0Dx+&
zjj_RBnUa#C0sNWrBZLou2D|~l|6=@y=f|kO@Sh9Ff8mc50YE{({<``89~kTd|LF_)
zNB)7){|o<>KG1*p3H|5;`d>H%^P}-mp#J*2ue|R7kfg<>#6Kqblgp3G`#L}b00jvN
zgoJ<s0)f!bP%v<4@NlrOaM&oQh-mmYgar6Fcz8r)43tD9bfkEAR2<ZFOw4R-Y=o3t
ze4H%246JM{f1H3oLqo&C!ePO~W3dq95wrYXm-k)(G8CW+<bx~;02CPn3>oBo5J315
zCj`h}<zG}j+Mr<I5RgD9Xc*X!4oygZ?i3g(I2Z&3IQWOv=fe&FM}|NlW)^}(RWtyS
zIH0iv#N|Pe3fJ|aE6x5SV>NUPgoeSu#KOiQr=X;wreS0M#KFnMEg~u=E+Hu;t*oM|
zrmmr>Wn^q(YG!U>>E!I<>gMj@85A568W#RFB0eE8DLExIEj_=Wu&B7Cw5+_op|PpC
zrM0cSe_(KEcw}^Jd~SYWacOyFb!~TV|KRZG_{YiV_08?CyWjT@k57Mi{o(oV@-Jrp
z6EEZsUZCLMVBo+%yg)$R{t!n7hahH#L=jR18aSYmumnJ%3CHEt^+A)eD*Z$^bex63
zAY<Dlzy3q*FJ}Mmhz0()nEg%cKfKlea9|)G$pb?M2mo$Z_T}k)#eVQ8H&fnY-c&H3
z+!wRI14LSX2plH(h44Ic-@kcZ3S7<mg#a`geqIdS<*XGvbC*pmx`O1ifc5bDSh0y`
zYkPmY53{SX(UvdM7J)PR%wX^wIV%-+i-8XX1kcVd^)uUgw0R42$c%Y3-g;XAX()IA
zsxH%^{GPOtq3alP?Ne+^G>cK;W7Vkpaqrk)UsQZxLRV-M%bn?|E>!&RZID|xsw=C@
zpIIoY<03WT76Y4qD9X71X|cV02!AaE3oHC5AGh;6;LKBrdOZ*I!SjvvRtrx5)6RrH
z0v9Fc)ypdlYrbA(D66SR$d(XT$-}cth0UkdJ~#5&H2`+-FZ>w1Xl}nK%8Y7{eBBhU
z{zUjgyq&v?g@fCrG%`hZ&nHu{=tU{F6@HUpFQ-hu%thC^<Ijl!xgguN+{m}i2dckX
zmr2D{q7U7eyer9&Buemn(ZNP4q-dmPbgpC|21P-F;(7@h0ZTJ>YJxc?Kzlk|e<-Zu
z?4ay-z+Czh`GIz1avrF^6qynDj<0DIbkj_p>y|#T&~wARyyE;?2C0=&ydF<OEXeEX
z0YX-XUsw^qjJ<#kmQ@&B#vT_8{Pqp~bQ{*2arafee|asmqIkfG%*}@2Sjj#QX$RzT
zxO1|q=~IY-l~(~uX2{Jt;P&E5uj*%u`g~&!oZgD%&`$j4<^<!|ZfqE$Uw6ua_#zLV
zdrSM|qD(sDJ4B6RC3K#Qc;`xjz2Ql0ap+S4J4Yl?$6zr|YVUwu;-AgTzk^TZpGvOA
zF1FDKk=#|IWv=glub=Pmc@!YzA4I+3>+sB*t?`@TMCA~m`+n^Z9xi3_;_o=&jIwD{
zL<J!eMJDxPQ}QvZjfB52q3X8@wr$2xKX49vdg9n$3xtNWtcHw3ImFNjKa3PJ3u50q
z$oIw$&NasvtBT95eC_S!+Fyy8%6bPt#RPEJyp7G@8<D$a2AoASdJF9;#S>@q)%#o@
z^h`c^!65YPijYd0e)F=QJm{9UlLk}}2J^x)xLRPq2j6mv-23>PN_wO3WQ1#JG-^YN
zJ&%~lSINHvpfN*wjywI_%#eEI<q{uW<abLA&G*~I#82}v`(CNQlCF<~cv;PMD%Q{7
zDb}zHU}h(f`ks4zNz<>XtW8>@HAz|+;uwyJJ>ddg#k^XgU&IQx-D!Rg_nW3$2v<5t
zz`g_A3FUz3d$9xM+Cyv(+M6^o9Xe3!aj|~6xo{U>Ux!}G)f!x4zFRq>0xqeC5#=oH
z&d;_VZ(H91J+g0Tw-#k=w6NNnsfqEWip_zZu~eYZgKv9pD%SFsjE5gtYN+u$p4xwV
z<#<qh&GLE&@VgP-pY-(m6GhJ!MQEZRjUhpdg89o)e?w`2fP$t37&aPwQ)vk`H*Ct3
z;DjY&G9&VlAPm8%J#}?#j9r_mRLSF);w9|&r`}v;&ze~O{<VuatCch^yC+J*&Ge_R
z=!`W&aP{FSpKp@cGxzhqHxTa2ZRKnf)4-E{V%RpU9Zv<|BGY*7NuA{5S{*efL4S#a
zCMNA%Zlk`nK7<s3*6-hC0{|xUx?j1FvQBsqA_-$)0cS(>gA+D3bXQq%#I7ScAn8g%
zM2VCii&rTb97!eCrxdiSYoUHq7QA_wksf*AF{1C@_8dX{(>=gx*xqtc1WsYSOv7LW
zdTg!BOC{qSuxdB%&+O7AC(AFpWtW1bAP-i?Svmb6X<}u59C6StAPo3L`J{GKP&8Cp
zck5J_Vnr<zNK?p<*W3~=2EF2cY#v=y=A`$8!)SK?bnA=3f;+^3MU}3`Z<cHy6cp(7
zO7oUgIpM_#%fk}7)?3YE_K2(&9RNM0&4ne<@sWn&qL$hHmLy%QpHBX%<*e8gEq3Sw
z{d4>Z_=9i(kq%FDezt2b+g-8cgXD&2FXf(udc!rioZm2*sf{vo7_-fv@ieCs+wN|D
zfCil{osf*QE1gUB;xmnxP_ESGxvan`NgjzJCvWBmZPk3E66_6Oa(@S?|9S_2JStf4
z+161%jR>NNw?N~0lq`dB67(!(vxi4!Yp^6w3oyz#ET5@EWJ*gRmr_=f{)shKbFcsw
zCtyVKRp3?FpSAEBqS21THZgU970w8-k4LEU7B-i3w-UFB^*Je4VjVml&^O&>!QTGK
zjlt<Oaoz-a%0MLZE@nAF5G}L;SL}!?wi+v1kP?VLU4xdhp8V`MO@uYN&xJK@*=<8Y
z-#W};#<e<S5mlnyUZ1KCpSjDNd3Pd+h8S+68qqM0$E@2S=Lji(JF*mV4N=EQPm_}o
z$jAJ0J2La67O^TEQC>#{^C>1F_g8UKFd{DTSJ$2`5ax7%HAl7s5vGpAt%IUiX=6k1
z%>mRwu=g>U%jjuOl=f$1LC|Ud)~+ShuQPWukAe_2^{Hd%v9W1^D8Lsz6++ACJ?Ez8
z<UO76J>iRhY`|CvWG@)}NE1X5C`>#eII<v`bC)5#Y_UpIfq7PJ&^8dV^dVsg`N6)I
zVD57emC?;;g+EZ>BMEn1l2zK;pS9`V0j4d;S6tQzJ;xMjJ|!BKzVhpp25mPwQkYpt
zHj&)O*`WzN!nu1nU3In`D5CKIK@%Wwt8C4Z<kUV}QOy1V*A{56gkH~sm!0!g-q!P)
z{8A28l^ZJN95q0bs1xrR6zLDWpZii4PrtdQIb1_h2flxZU988MAl2%S$p$Cxw^;$-
zG>i?4=rXC^qt7;xixzOuV`n6Yvic4fNhG|R^h=Ue_y-n*KvVqhiQ0m|0j|qCK<CRN
zPJ?O_;v?jy-!kT#xIdxUJAgpJZ<+l~mEGe;*XmO`?=&2Df@KBc)feL^B>$dqLtITM
z=$6Y0g0>14f$&3rUENK+;pTgc=e>p|pl71e0cc37EoJn^aR~swl{i!g+%rP!c4hAx
z&a)9yA!9)WnW_Z|BKR_1e-+n#hnO-t_r7dru~YooeBZRtG;aQ)+a^{Fyq+$CUk+W!
z5Z8_KbYZTw+Ra%VtZ?fgpHD)zA>ks*lBMCZi*;`YP=6<m5Wp~3l?3F|&b=ywqsor}
z{ND&obKX0EXualX?;S9@m|j)tH~Q)9t+nTd4e%`Ra1->_R&!HUj{7$(1>{Fi{kNoi
zE$k)8w&(2IJAhQp@}JYrfStbs_Qw&Qj(Wz6%YTP-4*|hmweEkH-E0Nj=0cP*(yQGp
z?zqK)868E9*Y-_=tE}1yJ<cZoBFq9f)s#HMb`IH9{k#d4>45(lZx6X8hp^?jLx5n}
zZqB`D$s)(jn<oLI<z|$u5w=MR20_N_=T+pQ`EL)ff?NTG4;j{$Yl9vWcKY@Xp#a2`
zg|cazt{cnc-@Yw)Q?pwIq!Kg%WKlQq;=|7+xzq0ey%xuh&<f~(2yg?2XV2NSKeuW9
zKH_N6A0pMnj)-3!mc$;Z>5+r5Q8MWQ9*b+w_&Ng`|IZjCtoWq8s_Pfa#>UlGLu!)O
zyiDe?J{T4K+hxAGprsZImcM7!qW%Y_sT%9q=rPeYY(1Vdo$>=wFw=ZH414|9TX$6o
zeDm81#LWJq5qHVC)bQJue?xoZozW?9D>|L$LfQ&n%pi}P?7elf2fSV3`vCDR-L2V)
z?bwubBI`>v!7C>-Z&!?>InOSXkN@`lw<q)(-YOfYLow!(GwEK~11dB)OfE`u?30y)
z=VKr`>&hu8C%6-+Aq$3D)<`<^qY&rle)hvKx6100Uz@=@z(?RgG0W^Znecx89T0-x
z=o6F#7pB-!dqc-qt!n#Ht4*ijC`rf+*2-t4)LMglf-||XcY!ifKde&D>b*Ilc=vLq
zEXutyTcx_&Ag;0=X1Y02gC1IK!xWjrL92xi|If8v^Ph>-d$>n_yG$vK5Gb3$y@jn+
zBurvD$xXlU=Dq`}tzOD4L;ryTLOymH<Vgqk?rCoG{jGI%FOb$JxI1>-ZLMM9w3%l0
zL*>?&5x|b?v~S|XD?hw6TEq@Y>Fz=#DAXmQUFlJsb{~#<0yx!txv(;z+Y!A5BxlZ_
zV{)^849|3r=q6LVXjo?_8|Vun5b}xknJ0J~eglP)kVO*e0F;|h7;%r5e|bR5Cv)aA
zRGb#JOvUK%O_3C@8=PN`RxvMPK_$N=CJFtXJmVCP8=O;2uR@<k7Rm%}CT#_tSx~x*
ziNzK{?c8P5WIbo>$l+lIubDuI<qU`zn!^7{0OI2CB&CY}Ow{JNpcR&cH}LHrH;3^h
zO7ow~SrD<|9S}n$aF+fKph?gBXTu+cD&HT5hU>sQH(pGHlqMO9yAG_#NUCNMhLkU5
zbgHbgO~FxeboAurV<@1(uS{o6XS8mOEv``dEX3%D*$`?Jh${%po3d=MYN=c|oHGU*
z2dB_6so3*halHe$3f}?2p+>NhY>((FnaLYYLDBp=J9j|B5EehAO(JE2%ySN!=FRUO
z&ftiNW}!wWH^=FK9+NV8CqMGWW?uzW20{-m+=yr<COPOQ!^Rkq=%x&Vaw!kTnWlol
zJgF@yqFBNGfHN%>khl^{^%O_3-`|W-+M{`!!SQo5k8^<}O=r;TX9ae4Z0Qa{bOzyc
zj)m7jH`mefGp3pBC->hGGDs?|VuxZTpNHk;_%E;W&{jxoBgPZd(y8*}s-WS>HzK6;
z)pLh=-ZEXzWKwk8s|r(Bd00lejKs-PckrC=_fI6@BWP*1Ra?D6LbYWpZyNPOdG%W;
zqf?cfw%6IgJ@1D5jptY8JTZqML8j&XYUK3*98{IgOIs39&30{H0Vo6AT#xQoIr1ZH
zKkmLB9G^3QG+8WzC$ti_igWVD3=&EMmh$Vgb&~Ww)P@dJHz1+m4jr-z2wt2<!C!4O
zPyMXA;z7V5#5Q}l@S_p&%-je?1aZ(5#Q^`apld6<17dBKUmg4oEGPfD<^Vo9FCIc4
z&)Vfjl|}gf;01u97#c{HL%C1(VZJ#mpifA7Z2XvWL~he_k$4a5D1y?4d*=$o--M8n
z^X1Gl0x%w=t^IW`QfsQ)IEvs1j{(xrvQUo_9>cgc%XkBG0-G|^DH9|z{RdSp+!?-x
z-bSie<7^zk%@pTZq*{#ShZd?+f;SNEq#7>HBN9Aqjj7Z5?A8bfjPYz>Xq*)S&z~*S
zgbiI;g>8K0n%>n~P=GY%?w@oe!nk3aZ0xY_VvY3*%0$%jq5iFvp}XNBjxL`Rvpu%6
zgQsur8FZqBrU0ssf&eKYtwog!8u1~K04cDVe>eUp{we?a)dXu!c&^|*@mA#*wtlAk
zu|anB-2Zv#6#Neh3pecTW6f*}ym~Ud1Gc_AAHM@?<nsOhm+H#FYmC@K|DIr$W5<N?
zT{pa#5`pkscszmol()x^Hx;vg`zpX_E1I@XzW&mC%LSsSO%@N0=ku{AsRa#b(fxk&
z+$I@{<=~_p1MGjiEMVI6XaD*4+~S1K6Yl`;kK^QNQFTp;-t>XimIz%3?_~H+R@<<{
zNqUDM{J=ZF!|y8RtqaTVit+XK9k5)Y`2Rbt+5*_eL3;Befkp3tu$AY<_W$*%s)A%*
zWhfJD>>ZG7^`f^eo$;*xmiloJ+J3bJ%;q=rH2Iyxyz#vQmJ0r9s9c_5YvZtMgu~Jg
zoD5_VXU=hYoO=gYz60h7Up{_KS4sS?d1d}MF84ew0G@pa`e*mu=@;S5r~~awY&Qb3
zTlXqr;LHm+=ku`j2jToBe|X;QHQ0GeIH4adIEV)rMxf;0#$Wa(JWy5c?(>{P8W@Ct
z4UpcGA#oPiubfpmPw-H~t_#+&GR!w-B4^&vY&!lXAaBc2OJ33_pentDIUpdT0iHZ9
zHCVPPd1r5LeSEtVAd}EXEqtlkTiaTsX1FJ?IKklv>9Ml2E3Lf#L(N7*YU6)LTZGNL
z^6KKtlhMax#_z85ZSfsYEbwsu4$$)d|ET4EH~=sD{mres>#Zz{`@losW~}Gi%CiFS
zeHDNLfB|AtFbI^u__Gv&ef-(-*ie7p=;-(UmI)JN-1yUNJYT)k|2Np2nLKr)`H<aq
zBc;1$87tROZ~1xj3PT`2An(5K8`RzQRGzls`rJB=)Vl7sdV0yOk|K+i@Lv$+F#`DN
z#Mw78GI0<ZTXs|SHKWm$f$+~@p4C976R-*F(pC9`Gw-KOqAjHt@iJ!f5YI!DZm?(l
zZ!u_l#iF^=W3eS!@io*&voi;;u<@FLGfkO8xPm%Dd*j4F93;vj(Qt@9*sscEULM71
zVa}pd><6KnOAQ;@CQbPOI}=$CD(9jZb3~rE0|I}D2e+B%+PM9sK#oRf$}3@aSQf%g
zI>7+q3bD2Cff#9AjjBP=vdX%Q-&rtPH`L%d?FvKm0<4LilU?_Sx97wLn`(6v%WpQS
z`*-rnh-A4x=SoA`KOF8DaF_C&-gG8EM;-bx(X&Y>NXs8-h%9~WswAnTj>~v>BA~;q
zMZiWpth~?(mZ@64-2MW+AA3hXPBG2mMUSa2hg|D*BTy!9%k&95+rsO?2q~-ym_t&%
zf6Xf0*Y{S$P<;V)qdZ+VK^R>#WH9rQG8nEuDT9JCXY*%ibdxa#eXJ6A=~iH!q1<&y
zPgDu@UYa!YsPzQ~$T$0=7>W$!52fc_D1WylWBiqNj|4qAcJEt)050rUp1nxY7QB=p
z9{4GA$)agHxCWIIW>;Nqr!3E2RmD88s^%b)az~?rID&JpTm`}xiOdwr$XGx*NAX7i
ziw4dhtyxY~hgzX9t#6a;QwQ#yTc3yuS}-`$S=a=CV@KaSh9FPsEXgoi-a$ZA`T@}a
zlnGxB8|G44lXl=4#I!;?Wx4L~&|K0*N$dN%lGou}n2s@xXkrI;6&q}F;OAbhKAPf~
zv!Kc!mG<o?tidw=wSY0DF7HY0uPK`9`l(EN@ziU0F3>h9-jnoz$z3>{E_h%w`=`uc
zqiBUXC!ytecp-;6%sR&dd26pBTE>X*EIGm=etl90wEV|kQwE~|j&GilJARhh7~S5h
zx87;2n`*F2{`s)9oG{`!kh+Z;Ajgu6KIKoEIxXKBiyvMBjsn8UbYOYTIS#PeS`1?Y
zM+F(oAW#Lau=ELdWcZ&5w>n<w5X(XcRXFCd2jg-;)F>Y<;KCBouMm~wW=(ZSgPM2(
zr4+?JIXPoIggE>peAX}Mxe!5w^BgWE#Vr97eVvyA)(KZoixLh&VY!;%jR$C|-FmIQ
zDE3FA21=(|BM-Hv^+&_0KP9S(jTOEeZgrER=ocoBUZr!O)0&cRZ|Eph7E3x4B;s9^
zhdkn3A6qr?6Pw)VGde!jj*tP~cM&(PMxz>RTwJKwf3RPX73uTboyF0S90PV{Mcsim
z>RK%hKC26zEHOP^$;y$5DO7T;Rk;^7KQKeovMm;OzzXBhKLaC_<FH<s7W6JBxZh#d
zM(vSp<1rSR$(9DUCTaYjU@QvIz5;z!sC<03#Cpa(tkQFv(;fiw3tF`vQQ;^&%FuGT
zG)-W%tS$Y|?WVX@L}^b1F6EdMN@YurpD<w;=|~I7f<;d|h)`eC7ROm^w3%$=&fR~W
z$8_1eKK8%6y{G5#YEYUxN*L<CT3D<;Gh8q102fYN%1=-kN2hooE~aDN)rWWm#xY`5
zhGjS0LZ%Fj4|B&iOIw69$Cyvq&_)^9`rXC1<hY0G2RiGAVdCf70#}%+;uPY4h}Jw2
z-rYbYUsfsV5g@h4Z>3Yk{08?~yQkH0P;ODvNdv91^HPlVBLS2Qze}g8`WbbBYx(zr
z*5gqr2U1Q_KY{HD%qd0Uy0sp_rjf=_lMWFO7;WiKxLk+hgxPVvF*h;T!<}-t$dkkm
z#njD#32tf#!Y-CwAD2p6kq>4YHjKJa5?O0`d)nG#X{AJIZ-BQn>D{uT7@YVI=?9$K
zpC4oqal(LOBsow=pY3s*>gM5!JfjkWzd#f(c4)rIA?8hX8z5RTXgyj5Z(cv5_~8A>
zwU!+vt>5cM!Jp1@w5NiMy0{N)*8T<SFc1%j*Yr#{D@jw=;b<6jIb7&U^Y~g#iuPr0
zr!#sZ$@sJ~Ixj%lKI5L&tZ#d<+{m_lA%I(e#0c4&3i?JuHc33Bfib&1?XV>u2cCHn
zy@dzEf%;NBm=kB^+Ut2o7w7Z!Pna9()^9#;PUnvXmo6MoJN4wm`iR)gpU3(QQCM{y
z&0b;`a4$)GRf!u#iD!@%smx>*YFN6Z#bZmO+a;c9Q+p*G&pBu4F}wicZ5CFpmi76*
zz7Gn?GEUFr0^4AbQpV#215AmOD=e)Gvm+A9J=bNBJ1M6n50uyFt?q8z!UzSpMnR>p
zj0a%IqU7ES6%oD(gKM;NgkQbXJYdFnd`_V`zMAUrHZ!2rjhciV7yJe}pHRt2cpo`e
z+s<5Uc*h@!Hh<QNj`bCwsD7FSpb^=kOeIS|>MgbC=Ubwx#$&)Tn7*$sVg=h|Y|;kt
z%o^KkCEbOf&Zy?C?(EMn5wy}<sv#WRJ*nk?#qUrP&u2rfHfg)kp$(yy>CDsh{xqRB
z-rJV?F7s(B*XtN}6|&Ep9vQ>FEWFHp06Tm7BGwAoef!g@CA?$Ct@R5hG8$^KCc@4a
zP{#(_(3<moN4oRmX`|qc5COB=hK%tpu5IVvG{3BZe--YCcIZPFXvfRi>LW5+jVU1z
zFU!0`1)xDb`G-r#GF=wGk@SMPz47gxo(Aad7Z(K~=CJ-iQl5*%&iFD|i9Z^B^Fs<O
zELRfA|14L~p0kSK%evSD%=i8fR!1F!lb0KB%+rS*8x8)-Rx})e#B|Ox4@G4@gJziI
zr1;7C@uE}z9)g%F<Jf3Qas;MgTAvXvQu4&-b@Q9@d9#v>7sz3S!6yMLd>hv!dAE8I
z?gPlhu!&C_uSzvrIz_^*1HXh|v<Ae}gd5JxQW!&-c4*UW@O>bXDj|X<>=x1UET6{R
zAR_N;&uKonC9Kr<V=TbM`Emt7$}HC$@@f%0y%2cm+wWjL$8ebT+kE;FLf@y2khbU;
z8!y-DyM{UFB|6mNcM*YIKzI;{51INH`cq|!#*3E3rpCX`X19dTs6M-!=kdohec_WA
zU%K_yQZW+uLq+S&o|Z&OQI=E@OHNVBL^M{=hV2H|;ewc$y)Tw1_Ef8Or3p`XuctDb
zuCKfTyL77~<zxcpTs%FseY)a?!kWNR1Bg7gVgRIr5BB15M5s4)aKo7M!Ci$vLi^W8
zH_zhlh(W_l{qz`ISJl>j>^VcT!>13EC859>_NLWtpwX<gZ~RKNCJQ=WVl@fk3bvYY
zNyS+e$O$pCdChCuo?yFP65%X(Ra$(Qe3<gD`lC7}khWjE8^z)$1)oVF61bs6OR`IM
zu~+23T0~>Rj!|?(6EXSmn#8kfe_y@Pq)l3FK^XDhaz`AEuatjpOfW!Drl@6Jb|i-?
zl(Z4a2!Q%I<sxXB%4qqcHk&AtLZMLJ_N^W8sD)J!$Ff*@<E3STRQNd;Q<Vsti(z<p
zBi}lHy{-EU<;mJwG+~}?^oLp3AQC1f2u*U4r;RG%U@XFL=BGLV+puR8gzrm0ux&jR
zoKU7YZ(f9;Sp`<EjPyueus*+u<{)1&vqbRW(r-gCtlqYK#w0&dsBI`tjSNeBumzUm
zvmlP}Z$jxHFj{2qj?nQIxw_23nzyCXAz<NlwARHr?ocCk6A+Bu`N0Ah(5Ic6-IvGl
z{n{-dzrU{qKa2hBQU2ZYoqxF>#+EMa2r&f9{Ba-iM>;H;$XJruH;FD~j8x)|FNj-m
zwJf9UY4&Oy*>wR;KxbkjvB=Yr#9MOuTh>w100=q!#4hV{9%peG50E}+LSpQv?2d8d
zR_h_9efqOZjfTSc&qZP~x`ns3)z57SpN2^h!EwS2sMjopb{hfnV+zv6ZuzjaZY!Ma
zk<sM=$t%5kx`Fsd-&o+dyo$HSps|T$0Htv5PG?m)n4*^JngUV5v0DmlwuElsOv#s1
z_LJ4#(lc_ypFQ-?)N~`zcIwwPwYSht6vArKebR(BZAPQc>Q=sCGY61$tQLw%Oj1Si
zP#`UHXG6?)sNMr$T2sQJC6b;G=fAig;ybYo@I*>`JRN@j^yT?XZHp8$H6upi#$}L%
zGq+GQ8A0O#o#2*+aV@Ys2NmQzw%(=XY%-78^jq2-4MEvuT2R^$7Qq6z?;KKEPL|xW
zK2p5nPuJ9sx3^>T1ht#s$vXv{hIu~xG%ZtkrWPj8-s>3)%9H*XAlEzR{d$8iEEm7j
zviIAup(vgf`Awu8kuL3U{64?wt~>}y!k{@SHe?Vf^~mx>=FJ+CZlZRIi}MCmfMCsO
zCzOkFA;5+4-e0==&(zx1suq7=DysYy%zs~nWRcS(;3K4jQz%DKw@!A#W_btE{p>k_
zEQE(+fTAlh)KDs^-<665NB!nGz{)8Y1ItGN0n&&lFZi~*1wEks43KoBsR)LAx{q_y
zD1}3dF7Zj*9quk2T{EiR|M4yaqD?a(O$d()WmKwp<#s!S5Yf_&m}Fv(j#{Y;8q%Q&
za`_wm<umIPN2Xp|a%bYBUjtxm5S3>+bgA(xmIJWb50so9KFGH>K-ZV*G{CzyYPB8j
z`<qGjBXQ8Z3u~o@T04&((&1>wJMG@}gKlnbyC{F$07`n2Ke*=c*Wfu1CI{aPL>*Vy
zw@k0;?~GOM9KVyf&-U_W?M$A7$*XxT4q6jiJ~ugC?`a-Nfl_rmMtBcW5O)1?niYI{
zSCuD{sF#T#WBW#H!Anr-%{iIi6p^k12gCZx_za;#>25Zbcu+Tqfm&^A#}2D>J}88t
zX$^6r2n>wvTNAP^>>75iH9C7Uu>=!2Xf#9NRcUZcT2<Q=A0hrhOw?*b17dlaaUx=C
zS+@Fvd_o~gav4P;U(wODXOqwz8kbqq<6S$M-_=!PNnD1YrR_>giorii7nqoj@g7r_
zB5qdBmu$dZMWe^i?@v&_uM*n)RV=!bDRrtdval`@y&CH*S_*>gFgHF%s!qOTm7NYZ
zA%uj$nE3&r6*{tl%>9DixHFOL2uOPqRC86Pe<O2SCW_|J|9O;v1@w~#eyPiM#hHso
zUaZM-mTe}`Xc_L5iV-v03q*Ga1SvGF?_pTH;^vYjrmBlNb4*tF!g~yyj~8UHbCgw7
zVDYXy=}i_zHG~yc)xozL*xv*p%!?%mZc@aUQjX{Cy995@i#*)E1ToOgK9X|NnXo@B
zXX`|<WY|tGN3y;qb%NIMLUVje2!ILG5C(TlObI@lFYLATS<_g<Z(qY^JRb7tXMUk+
ziE?7LcgZ9dZ6~XyuldBdacqdmRxg}wb9a&04Bb9hpZEBnHsh<i+j}nh@H|+2C%f8W
zwq!Zo=<pkbUW*6#(_BI*g|i$UOxhzU3y>0~2pxMn`*rCOUg?XwB0Q!<rLrcqfXPee
zHzqM$=1jGtA^=UDMs3o#1JBMX5b~Zb@f(-x!o_*=omVjPVH0elk$|Gp^t4zuc}{$3
zY;6MH;SQu99BpKv(~{xci#pCq>Eyzv5PH3-n_?dEmSkxiv?WmoW;CrYs2&?X67xn>
z39m;!PlPz?)68?*)1gv1WTWo;%GwgdKiNxAWKDIL+s}NGwLvuieyMvxuCCVcie9<b
zA7za}nPqL23A;dzmNvtv8{AmHSZaoR2$1m1`!0BC@?@;PXHa<yZCF7`TQ$G#t-8XT
zAJe?h9Q6E?p(z-we216tTZ}c(K|BFk)g^?!c@Ez7^Q`95?L0q3F4<*==n8a@A%k_~
z=aFE6H;@qZh_1Q?Ua|O=?fpo!^+%(h)MV@mh}F54*0F*?j;3g;_45spr{Kv1<__2P
zOv!v%kTsAZ5{%|BlEF!cbM||c)kE1X+%|p$HAdjBd(9nQFJ34T`k(Gy#t`YDZ>}{m
ziyh>fXqf1T*DwSLlxi7P&Po`W$QE*xswKb*Qzq%9Xcbis@mp_ikR7-<q!WcX3Y5Nl
zhs~En-7+RUm_>jMIOYi#3<{C%=L)ABt=6%v4Zuo8hScjJ!y3?S`-KEm3yP+Bwbz9X
z&fU{X<9!xH5GSn?CY1ZwZQz->7dh;WmGbJ_5U?SdL%*N?n7i&qxgW>{L(k?L)rsN0
zJx%11zf^UFX_waVNg<lTR|~Z=oRO(m=UU$YjTZe21Ro+7%(4KS>8TsStCh^AIpj^C
z-D`xIgwCm|OoGg~y6rlkHA8rx9XpEFlq(s($tO$+JNeSj7T=u3p7+eqH1q1R=8bFm
zhcGy>Es5zUlABvF%|L%Bs51mC$JA<C7{907Wsq;WxeydZx4=yz{nWJ=t#Ju<l12EA
z&FOH#dK3d-dFkZtIu$YiODS>7EmuJ^@ROk{p9@UKp_-_JdK6f8alekBfrS2JkTT-z
z*J{jUOK0JFM~nm9@-&=Lm)a6-8(EaV-1(9MRW`ml!wQ1?p@(4Ucdm%EFda{hB8zJ|
zZZe~^{rp9C4o#2+dC#&J`rlac-cQqy?jm0!vUDE1=}pEc69yJ4^tFZZ<GXTuE|=yO
znn@x*@ss1@sZZLCv<`C~BJ+(M3^=LBt*!;=u?_6j^Y(th@)Q-QN-JZ}hxjZSjnNY<
zT4gye1V?)*|3ZX`=GhS@5SA($EX?0uuqSoTxGJNxlfKij?qDL<u7=TMwBR!K>Ke9~
z8cfTh+xL0V4lqiH!iRN!mfJTY!!dGNqriYlK^km^NMs$GlGru0lwB#a7&%!H)iFOW
zb-<p=Bm4fs#%m4R2d=DMp9-DcOzm%N4HL)nTBg?oN_U}=zPeFkszUvwAr20{+wVrM
zSDh?ki`>T>9@myRHR?9A?G!o<@(cRe1zzt^()|WnmVD}`gsVzxEF@97QfiDlRu(7Z
z(7ub3bCna(5jhHDyB3+A&uTC@|NFS@@VZZ*N2ia}VRI7YLc<ITUt_xGGf+}6V)Apb
z(?pkSMXdGfr|Y&UUmayxl?b=a?kwkw3Jy*dSP_pd7Sau_sfynk#s~LX`dR2X6Pk|K
zjah>fqr@7hp2T8o2-!`MfXIiaRGuJ&gCCx;)`5_e18iU2;uXaTS^K^`L$1N1qPnr~
zcH$A=xjrH6Bd(GY&h-t!Zq#}PCf$t&iM~~lRVY}-3A5iAH`VRS`m8RyP);Q<rYLLp
zPEx$zuW{Pov-iuHG&M1c-KEh%YcEoenve~BPY{ONbVyR<rCa(5Ws@21MKSRz9NKIw
z*a40cM<!CGSkBsr*T|A~Fl;_<B01i{57OfeH$}x|T~c+4KIUG_Ggpu&NgRH&G1Mrx
z8rsJ5P!6M_j3a%qX6bla*Yx%HG1yL1kMkuXcD={~2#rXGH1vHO{Ws5n_0*2Fpdk%A
zjvo$82irU}-EFUhkmY(F`_CFHCDhrf4kF1SvBlt4i0gw=<uF_h=ivS!5`MBv9OJy*
z&uo>m(Lq6l=v?1m2X3T8dAVz^A4Lj@-<HnS808FTA(drN#YW$EnA}Y=MqHgJz`4dt
zpzFY4U+&eyI_4Q}3Gp)&e~Rjwa~S6()v`$Zq8wNwY$ze3RRupontqfa>T;p(OCCaZ
z&m$mtNKz!)L9HCv>ok2nDBiFLe3<G;yIYjj>g{GwqoI<tRqm)}03uKEko^>peb`79
zA8pxg3w|g##*5`Nosi<7JA7jd`+8xRhZ8Zr4=n)gzC*jt%VPZ_T(c=Xlo_kAf6Cg*
zgFf=Q_j7pKb!Ljk8+Z!l0(e6V!gr#Kwo?(v>)x_3GEO_;IP3H;#D?+gv&7ZBE`gU|
zbE7oh&8Ogp5ydutTM;<3nd41#V;rfyoY3VWq_$)K07-QEcA4qDQ|fL0?%vX-RlMH8
zQKrd<DuJNg&Tky|z#ec0&W4Qsoo$2pH^jzU70-2THG^oOa0MRUgRru`3~<h$Hdt2y
z*p%D>X3WdW-osXEtNesiL|%L=Nh0zx+eZ@5f0QbX?R%Sg^BdJMi0f=Q+N@l5weW)A
z4&L-j<UG2xcoRI&bIPrutZq`_WeE9ppX$;aw%eU6+R{OlL?Kv9#fyTpaS8_~rDQC+
z9y;}6fdVNVuU;UTn;*nv=GHS&kOZx)B)*NZ#K_S016y?!=ZR;evh=Hd6+;Zix3N@0
z&cj|m-8tLDy74-f9QZugO`((f>LX=HA&*l;*9RD=<muz5v^pxJE9vq3a~GdoeEgcZ
zvI`UH@%QQcPX)zp5wpvtck=)t#9$jwH;|$I?ED?O=NKya#Fk6$4uk=#rmrR)yJT;g
zTJp2|C1Hf?w?Ms3M~RH(N?^fc<Oaja<oOpd(Vpkt?5`vS<OzUk{Swhyg^Cx_oYArx
z%p>=Bm*`wldbNOA5Y>FCTje6+eLV5Z0Z}u{s%WhCD*4%R(5>Vvo{nXx0az`X9~nJi
zL>130YsWmT^Tz>l8tmOsoMv*TMkVPHTXh@2^@|6Pjw7tb?JwjDJw|q_?rVH-mi-eY
zwh}P>c}wfq_2@AABt;izWTVU_9E0?N&Q#6dxJb}ehrU;Wp2ewkYjK_tn=k!Z`P?J}
z1a~vf(7KBpuO=#8`c|-0h%cW(^%xtxvYhW+!!)F77Y^m#UWR`+_v?y(&j*8|959TE
zynA3i02h1ES!@~<Z%C@pB+35ZX}_6zD49rb?%`_?G}HhSm(9r#e$L5eLAz+bTXU+1
zXMdhtH{@)?SHJ81sVsgJB;pa9Cx49aJg`I(kLb#@EEqPy!xNiZDfb)T@PXdEI{auV
z*V{Vlvi#dH8y!pHD`L*3cD|9nZ`Kc0QQ7wWFCEIRs2zHDN7Jtp^1f?I)c#E|hK96P
zN>B{0qs$^0!2%m&Vkp86fyy<}X6F`P+aYqCu7@oUJZ|}fTaNWugEeJw1mdw1YMmuk
zT)I!z&9m`T=;}>@FyNGOWb|1e+42W|MZS-~fjmfaf_TSC5---n8<3~XpSS?D)!;pI
z#at-_<=-kQ&;A51A;xf__*qILK8orhr*7rT0V}^vT$avDIdYO`zHI1&q(W@{q|*f%
zD9_C(-pGuqnFh)e@ik6eP<hfAG+&~kRyI}h<-V-7UgL_>8##rhk{bEXhpO5bPS3Wt
z^7bRnm2giz1QMaWjQoVU(20XprNA@&HpQ^w4vze5MMjp9-hVEv)Hrq;hva6|Ej(FJ
z(lO9sP0~`uRfWIs20n3oV74>Mdm7b4C1raX)%JVIkJE?G41uK}A=vV|E!s(iiLks?
zjicw6Ossm9!B1mcy{JzvGx-m9GdN$OG$5@{0#i|k8><j<{Sg~rS+;=FbWcIE^Kl3_
zQgJ!s_zh04YDn~#U<Fl0^p2fz5l>{(+_*fQ)JO6J4w>pXpf0$cG1|>U+q5a6P`@wj
zqI6OciQID|Kif$&4=CWYW%<R7Odmm@@aD37hYIpuH?eI(d1jXQrC%3Oj%_^0gut0H
zZM+nRJ}aB|dx~}$SBJwMx)d_ql6WhGaytuEcx(YVj-BH3-u56nR~7j0rO&6n<G=c!
zgp`}Ddas3hYqIu?8RoEdiZ$U5J=)aDIqAMm*tgW{gk)Krx$&=oOTFG4S)Hn_!1AR;
zsF?Ply}*cdMQr{$y_Gv-g+8qk7&oM@Nt?3NHt%NI-X(D&g<pjTKT@bH%fu>F_@2Y*
z6dE3IIXhjf8z4-@?Z6bcv~_4)0n^vcuf^NMjh%3HbHC*?p<?}uw7mO07-S-`mDNto
z3t4F&oX#%2{K8Ak?FDxP#fPQ#>l?A5k;)Nt{9aDj#pTPkjHP{e90oon>@ozVPPk?6
zL{G-!%4s!);kE;i=6!1qmX13(x(I^wdopvl#NfC-wpSA$S!vt1Mec#r17UVO|B|AH
zIKFbBgj_c7_063^-bx|?{YjYA*INZ08mG^8Jy(^Ll-v*!dSsHZ&r%+xd5Jn2;B17s
zMrjg8G0AaGws+4X5UUwBc_##%h*_UE3p))~;JVG7j;;#RH~Qvw_hIx}JhpCpeNSa9
zIr`5oOm~;Xm{xj}ZhM*|$^@l-;#!RY4NWIex@eV+xii$(g8*H1GX%PbH(TiHkp%4K
zY;5ZB2CO4erZN?v>r9Tc#4i_ESr8Eh`!!U)cjLd73kOc29%pAJ%Z?o$uM`@y53}w3
zDPuzYua@6>aSIl!q^j*e#1|;X(n8{eM$h`O9%b>%(jP7&ZY~Jl1kSbvAtee{j^rqr
zUL@^#&@u_j5+74~>%fR0Ouk)JzPCrS&gvz&zB;A;_8T*hK(~=hcYar_BOUn?=%e?A
zRyf(qcF-Y-0~vW}sN>1rTo$Y#b%nOlzIcI?S<H*=yBVcY-3S&^PD^b&kaOtwQSS3@
zB9cDawNfnO#maHZI4(6AkvL(7sCzqUWM49m%NWb>kmo2%cTLYI5&wGpw?4}qV1Q&B
z0sWTQeYgq3u4#~0xqIz9v44au;$cdXs0n8`N;m-=dX6zLrOQMtX(Hvq)h+3l9u{kD
z!A;I%nIK6eo#>VRZ>YD8nI4ww2u{333l_CfUz#Ori)1(WWkvoiTD{^`%wI$4(O-q5
zU=-cUOi1XvtU#r(!#1R%n>qC1O|G<uLLwU;5mAoQ$Kt$fFxOKxGJ~Ek>Td#?ef``R
zD8;;>RJXMpV#m24G-ZS;a8AW@cI^q7xB$9VdbXtYH(v<|^Kj3w&6p}52(M*LlCYwj
z*XX)b#z|ZVrRi51ChiNOo))*Qv578=HAMKs9p-1HknD^5_ekA-|0W%)R2eMq*EU)C
zj{bst5YX4Tkl9<0%X?!XZOcy|o`^UEolejAP37=O@u(jz@utk}RGxL{v41ITJYh(#
zS87#|(YsMgWE9n1aB%KK+*YLE-N>~w>&L+0!Xtlx3{*uz=zwI}-M55YNoCugcVaMu
zKNot16tUSACW_fLsnve7^INXL!MTf2`NKso$z<}PDucar7Ydd)skW6+m)m~w=-cwB
zN<x~`^;D!qfL)_o?ZiG+BDm4{vUL$^kzH@>z*edoMva~8GLSF+9ZS}Hmxfng?;0UC
z;d_P{5Z38FzY-dCn!BEB{hfI#pH5R;P>x_6*M(Ui0E!07j>}HCR1v9$JmUU<p<4O%
zmLZ?D&R_!^rrt$$D0;VyYxmv%7gm+jFRhMjuO{bj_n1zqkr5}mmK7I<$^^mC&`qVY
zp0|U-B~)$R=c`xhR6igEF>3a^Fd6G~wm-9jA;yvXM)>_$6DmQ8Yl&bulNT<fj}d(p
z<TUUm0t{KC)LMvdrqf}lxeMk?@F-IXym1)7&?#vgj7DZah3kHt<x7{^E(K&9b?*P7
zNP^eq;K3__B;8%pI2Z%&yzl!>8Kpi51o{f&o}g{rLlU<V8p2H5dxQ&WV1q5lUuFsH
zuKg4)`n*w+#`^+VkrPpy;~g@(&E5*|G}|uooHQIQ%OQojv0=Sx;%!fbJzx<0!r#tp
z{MlIRP}gO9z!57+cTRX$$3!#a2QkSBh>bsf0G*9;@ynKkHw)o0S_N_y7v412uacdJ
zawAQ-Pw?gO5M2=(!bZ=p-6;8NYA|&m`dgS9b!aMy`~khbjgiNhM7QGbeF>sKI`X}<
znPCvNv1=)2@X6ctf%kG^jp`5sz6F-gJto*?T3oKc_|>vp?%p_KzEsz`MjV%H_7)3<
z*K_1md~o^Nb=QRns%r2HWH-{%nv8Oecq;_wJW?%OKH)t4>Nn7HTPXoVQL(h6nuUV7
zCV~#f$lyg$O+~7rse!M0w=C1(HT};f;{9Lr0=Q#-OV%Ys!g8>5_A3%qdUq6hIc;0z
zfX2uwf>31j)qY*lZP~;Od+mf&PXi8>{FuN~+=iQe2R#nY;o!|`i|%H`N^HWPRtmzL
z%n5R!kIL;DHt@EeYDiZ`lSX<e{(-$Fd@4+~FLCZ%DQ7dr`HUyU;inE!F%=bXt|DdR
z0_y)uOiyOT-03hiU!Llqod)$L^$mHpm}xVHOpC{YRZnh3;-FmFqv_nLkb!ij$%u;<
zxiC%_^*~_4y~GAD^r3cE&6|J%ZDU}_ga?{bA8U^{>b)AKO4dK;M#8W~|FYoR^^w@9
zr1UzwlPd-jfxOL5n({b4KR&P>T27anubjSvEzp@}oKuin*}-l_fH(q&Xm|g;b8$F~
z-o^KJ_;vvvAs=O8z4Hyk_MYj&o@U=&V@F!9Ed_B<ROE9vQ)+FB@%ROPNg*-QWzjB)
zCfP1VjRBc*#<$r>R0gnHG)HSTA9Dds*e?eUdLa3}NDL@=+P@kTTP0%EaP4rSAZ;BE
zF!2`jBEBNND<5egCUNmCHdPc~ki_uCUMiC646Yz)UJV*40`|jTI1{NdZ3LhrvA;1e
z&<5gn3f0wyR_AKda%f>(HGvWz+>c|?0C{%T6@Wwg5{Is6!|_t=TMIus6rEq2lFJAY
zIQt3J=pUpHMkLVbW(J=x&!2MT4Q%%zyYxq;I7mdW?T>ts>v5v!xEF$wGQuq{9QRL(
zC;5_#!OeTIkCMT)meU`a!aVg@coJ@y21kAq4E!Ya%?(NsD(u7mw2Oi-g(WHQbs=<c
zf!`gq)tpmTu3$eiNIwEc(|0rYr}Vh3Apz5&^7dPNTDqvs@tBYEuO0!VE{+8lw6g?V
zZs_oZ4Eh#DF}EsNVUBxDz4x<%Pb6Z9x<gPSRRXM9Q_{uyW~^=c1xl-5)ti8m&o91X
z&xDdlpzIDt_afH_?0hmfX3<5EpQZ<{Sng!`>KuPwMl&m7R}I3Y8QSpxL^3G1G!W3J
zJW%XiR_JAZO(WL1sB{%?o!hJ}f&LJtGvX<<bzK@!lhH??R^$88OcnLbSF^Xn&488!
zZ16fg;Dk{x{&GA_(@eixMR!Nqi}CGeDv|oA4RUq9J!oPjhkJ@kPkqwS3==JLa}$2u
z>iths?0~T??8V8+du&`-KF9EF{D!97v13kUKslD~nv`@iLnrHZAxsTO5lH6kpr_Y_
z;v4D_3Ig5xH#jKPT#15$_;4t_u;@D5pT+5B=;ZqpIR+<C!G5w@aV3T*H_=3cB`tT0
zsa7JH_Q>#k+@v?xp>i|VUm3hlOI2hJ@lV#dW_oHZMbypNV|@SwY_Jd{073H;@I(A2
zqJ}Z<AH+$H5Q-kiP;1#r9Rjr2ON3N2;q4%h2|CIYhIDng?1FbcpK)?et{`kr87g9(
z#oae#7T=9l<eQ>hUY@*Ndx&pQ&+Fto93(9VXP+i-t<k;<t&1&gP+Ebf(di=4?d1O~
zl3Tp*|5+mlR`^uk-K}vS;Jcp(Dz^6O#z^l?4BQj#U)znNUrqMh3mN%_42Hot+>Hq_
z1P9rptD<#1z9)#$;;hH81i@Y0Uy;5Vjm_M@I5S3{fq_0-h#~R#k_zb`GbLSJ4=S+~
zh_*iY)5PHF1bG*4lK9Kxwgw{@9+94`X|$1xNw-C1Ou9w$<SMwkcgKKT=mZ5W1QWxl
z(mF$;^WluV(OH2jX!&E$f{38n>a97tXZKlkOr-2q`Zcj;`*F|}45&d<qLmJs&;pL&
z>$^tuj*;5D#2ZoE!lX{Y;!Lj^rQVrBgl3zb5@NO$nH9eyl%&8hIL^HhPLlZ+nqz<{
z1wx|T4tr#`O&KI~_nEtL3*t$YLJDce<AC<&-J5Lg#izIn$}J8;vO}&TaS$!?5RV_t
zq*P5J5T)T+Bnd(-GFJA3aybe+Ulw30U|-RdH0+w?D3}IreS0GdAX9PeduKsm&9w%(
z>YtZmCx#{tsos9x#;YQ3S{dZb532PRu)95|Bu88NqsUM!)%@--;c|7#s0w$nm5M0n
z==(y%irI1}RG*XD4cq-@+@R{rS!mIK{PHXW{jJcD!^=ZK8luyWz$CN(nK?K9WO31)
zZ&=3ls69@e%C`|l5Wiu}dofm|aE785*zuzU%FObhJDBxIYcsr*@dRftYB{jU43DZ{
z3wC1<T)o;8#e`gNROi=h2fOq9G~Am<Zctihed_m#Z@Eml@y6tFt!=mnnxv^}@761*
zYI_%x%K?`afW}S0D;Cu*wA0v>kh}geo{<tC_{yoQK{cg$=ywO|FSrf)2ZPsOVpB9X
zL++^?@PV!oMk%P*t%te=eT`bwzyWypoi&}+6pG{%kprB)os8WQSr>7$g72c(0f;F}
zhj;o4{U%Xrfn6qpGO)x$rrO`!yOK&oxYZZ#1{`*X-l$f{Cd0u69K`U0dFdYs6OL_v
zZH%#g-oWYY7POdgRod)0oau>lZv%-rf$1tsrR0s{hdjLCoJ?{wO^;p@?x3a>dduQ1
z(Z3vy2x{54@P%Z}wwPC{YCl`4J|c;XWm#k>t2lG!i16Ge^l}y8i2;-QG+%{o7r<dF
zciI&Ob8i78DA&Q>2m)%2TDCZW)P7do;W89Mdw@51AfMn?EB1vYw{u525?q8_A7UYw
zp3sKjcOaYV67XVsGLzcs`kJ}I)vzAG&xl#2oVWViBtG|jrf=rkW*1sa3#iGOm8wU?
z<PTha$}i=q5so7H(`peU7l&#P_8j9I1M2o1?(E@0cu8*Gygs=nFuoNf?c$xN#{slj
z8)KHV+qEY|Y?6DtR~e~gSRPF3x(JDv5jhS)s9fL_;m|~q74o>QwSt}TP>z)HQU_CB
zY|ORK5o^}!b%tVOjVm2BF>vtN=V@sQug|6&O|cfcS`QXe)a1gz8!&DfnZ)3ho2so!
zjXIqA;52Hbi4S^T4Y-t=%KGF^1&kQ*Cjv3NyC_-!4w9X~ypaI}W4DYmfw@d~iu91o
zK_=f#TWv<wPZY8&6sHs9DLwaJIL-5=uLuhs7sEy@tYYgDhdi{@z>)9vZf<SE)wvc`
zLqYNoEr}4sqqq!D-Y#HIbT#(AzfyD$WWbG2D_j`|L?kbS8*XMSMtA}M$=><<J61QN
zaWNud1E<AUwYu_C*Qf74nmxdtPsF+GZwoFjMR10g5ey2~=M!}(vabqWo#_JSN!4QV
z?_F~=>rFbPNo-h5Tl02NA4w;H%Yz#c5afL{|4#sC5t!~|dbJf<CKDQM{-`Is5CAr@
zl5^-4zvQ(e_yH_;rzH8?;9MUR2=xnlrn4-@lqpQ3?nf0SNvR;6GcS@qYCHl2y=OA2
ztCVxnbWaFwCPc$k5apnF>hSBwhhZ#4;(oXOa_;$P>Vsrx+hA)_%P9l}i|Yq12gPaK
zC9Du|eWrrPF=PPm(7II@W->Fo2)V!dp3!G3RvbVhB#D!WKLL+r{q1ZkpTKY)DvVMX
z5@5}Ly6q1PIR9hF14R6XRK?eEL>YP<FsWkRG8qfcEI0>Jen$Mz*y!6|C|LCh`Vid+
z{LFMLW@7P#ILbQSA2pZ^$FW$H*<P>~Yh_~P@|>z=u7`j{mT7_W>n)j6m8kZ+2GJP-
z7p|UDow?EDuHSWa%wI?&N5mH4&`iGzk5SCaQ5kF3)h`VFrdcy7b+QF}(Jd3IoVUuB
zPgGF&!rl5?22T5h{Axz+!GJi&KShb^N@xP<d>ja-+4QslkyJz?keP-CA3Vbmh2Hj*
z3YDENt1;WTbcGkdfJNvU-4%0Nz499@J-SC{V?S_XM3HuXpS(R#JUaL=Po--AT@|J3
zQZ1GsgC|bhV@FZvJNtVuk(N0bd1G$IlkH)tDK)#B+S^Iza0G!IUS?qBo)E<S52r>m
zfB?c|y9^N1!-pX8=5AvuX2blexPf*JouiW-Hz~1I1+LtaqIh2d>j!E~*d7n_>gAtq
zQQ3@qKk%6-!&Dzo`y5>>>$4YN`Iu>60@+O954s_gimvy-uhv=xccBa1p%i-_gYWYP
z8)uW|xKr9+*`WQ~wC%Rg9W#t7@G3g6ghn&`?XGG@DJ`feAn=7~HYfME_1Fx=T%jRm
z#g)=7+#c7-NUP*W#eD6SiW>~fj<0cUao|$DMj)SOch(R=I-(`LUwMZ`4^dMZ*{En~
zkEs<dw0Z{GQ+2<DZJd(yPzdTq1ZvONta!GeQLD{@5c1Hf@I;F}H=`u&i`%;#F6yUs
z%pxL4ONE5lnOxtjBXY3H%VYeb!6rn@@i(7k?Xkp{bHMMg@ui0KJ4=%mAVCG)JZjm3
zG!-K7yg}av-V)1(s6mdBbenhB!%cghdu32p4u?~Yu54iS*LO@*^9t7G)Wv0WAWe8n
zD_dQjf-P7fLZIGUo2jrUXU`K{-@BXsYh}j!m(7v!+F|Q|R*KcIuCPukym??5*03r@
zmz(Mt%o>{J4M&+r2KUwg)#g^vTe%e*L^Axwf5g>l(<G_wr{^=u!qUs(S(49+oXEf|
zB|N%nDk!44v|m{`xI1Ly=BD@zBf3{V4F|=|W4L;&b4ghUy3XNCP4Q_1M5_BOEUttb
zs_O|XLf`MxJ();BG?xK)hXRwbcTJta9pyeJ-8JGZPo(ppEf<Ri0s)pW&ix6DZoVhl
z=%0xo4m|M?GC^G063K8jL)0~t<YlX#=@8=Jv_KR?i?KasT`7bUF;%)F(U6Sx*a=VZ
zel?b1vbzR`@##NVo+8I>&YC6fSsaT|KC<_GLF>utyNSx7m3#4#f}!EDXdi&@AL;^6
zJxH2$rYJ9(`vbyU(0`{-zu3W;!y%Fo`EaFBqD%k;N43pteGAI<zGI7#j9Fp%>I21!
zXSEhdbik_O*3BN6n9qr;If}%8q**Ac*1QZ#-9y%5j8>}SF0x=W2~G<H{OCMp#A`(P
z`i4kR93@n)X2&atD-hcB4yT<hW1^UHDXxQJ4e<@04x$2@>u$(P=2Gx1!qs8WidF%*
z)@KPe1{>LmglW&jKrpyWcbf#mQKXqZmSb$t8&1dkG#7m2ZXmUZMQ%!j;I0ddy0H-n
zfkEU~E%tu#yuBzahtSZAFZvN!KrR+SR=m?u2N(tQHou~CFVkQRyT=oDrLqJnn?@#M
z^CHs?u#xd!SBelTfy~i;=i1sgvrZ6Es2D&6*7&P>90I2J%G!rqAm~82*u)WC-qem}
z7N4Tl#^CJXxQHJ_P@fEQN6;EO?sF7|0MLh{*RRSfm?%qLWs7Hycf<m%nJGt;EQQu}
z5tQH|oz#^*3&#x1edqaK?fUXS4f<O6Hnc2NPeLE1g?)xIkpVyho*x6C$C{UM5Pq0X
ziIwkppU%0F465)jEDXg}`isV)<8<753JonO)|P^WZF#(MJx++9n#Y5d)#hz#%bMY{
zad4C1yY3jl5EBz)^prrAdIFN}(jlja$z<F})oiL@s33e@Kb=<4jdd#*Hf@k5;+gB&
zTOZFZGH{?UhSz3yCsz<Uq7I98hX{oPFbK=hUAxgofuSt7y~7Eo&vUE}>6(dWauyXO
zFU_m7H**m&6cEbwC%&KL)Z=AYY=;#yP>qo9z2ov_iSO-q&-5-bW&0e1GXdEDS-z(H
zCNHq-q*LG~-+l3`b?|A^a<RBN;uC5^mW?W}*qICclExZTpf6`>ASHzWiZ_aqB<y>;
zHi=q`oV*-Y%)i_}$Q3eCPN(BgXb3MyC_k!0j5YVf6wmH`(qXjnDfra^!_QXtxS;$h
z{xB(+y=D^otV>uzn7OH)FYRS>=N^(=m4%?RdNhE}n$pZVpJm@u$8cORhi0Zfp+6Dz
zWjUfjeAx-~Be_ZGzCe<uo~B&)-A`#pNvWuwSI7Ze@ernZzbh~0oHZ%eVhkcI8u|YF
z%EZKsN5IwxJ=@Rh$mkZE{OhCDFW~G4I~+tWR>14%XIG!;yJ3Z0uyf(V`(|9@{mg?Z
zWB_6tTU3)QIy60kPie#}FTD-RYLOnT4SejOR7B6WHJle$$NYqmTmM)QWyyA*f(0@(
z5M==b+^LzX-vgL`XYCIsdfrJ~9_mXHgB-4(x4TXfFIyEtIQyrb5HwA~66weEMo{C<
zL=>#uajU=0$YL=B!9kpW^F=^BgNMM%rA^)czaM{}>rN3lN|l7`HeSiu9mlMe=0RBv
zA$WCiaZiVjmgcKLC;ohdN8t`4Bx$0x?bdM-RyfbaTy+z_&p$^Tq*4$BkYzkt2~esl
zJ^k4#g(@K<Xg#<e$I;@0I`+VAViz^i`_X2JQU)*TcVz;4bM?s!((cg0lV8^K1KvO)
z5nW_*1Azq5BU2N8+xny^@lKAmm?gZ8312vo%FiC6F~gn;+qZz$5iZKqBwaB?5Qg)(
zQX*{P(~TG^1Q1yq^=A=oHsh?j-M3mvb(K&zZ4wQGj<<GjoN9#M^F+x>Zz)A@mL1YO
zEo}|s?@gZZcjd3TMToK1+9nRXS@?J{xlZPZinfHKBAJKhOLov3UNR%2cB}w4oNc|%
z&#Lp``f=!+M<_tKDJ!C-B-4U5nIOE1m)>L^UeAT7d$Y1MI33cX+hnwkl|P1j$UM9V
zxy@Ls_zfKMp5t@7%1h>D{4hxNo|5R>XY1r~T_9o7anEO%ME?Yf8;<R+CxH;W;;kQ4
z`7dDXI`LaB^m0VypzVOr^>NG63UC!XGVl`k{+imEfkrHNF4}R3U1VZEFM1IhmJmm^
zP_ZTwn!1Ra*r?Xqt1N!yPh7YvWaNf3r(xLB-O6efWt$&0ZlQyT<Sm=%QYZDE{y*?S
z51!VeKiH=*aGn9NE_)#vTIVUw$18Gl{5RH%9!qt3B1^QPaUE;eLq($f)t?izl%g{Z
zNPcSn>6JH#3^2VR$YTvK>*(Gc83Ef)1|<v~w!Bv4{F)v?y45*PbL;FB(;Tg-W;6;!
z+XF}>$;@Pc*tsi+<gQ5x+x%(0k~V{_CQ+g%oeMJ9v;s1l`FLFQHkNB1&d58ycx|2*
zVi{@%bHo|SW^n)!Tbb2f>a2NJ6;VthUCckVds8Yw>g$1^WHlIkF~Bm-{t|hp{h2J1
z9I-0!u*|wG!>EL(%SY78*x>#JX_l|$G7V$o+ZL}Lwmd*M(mdAPP2|*d|CyBr*p`hK
zX5pLl32Ps81!3d7*qMBbawi##k6`Ijc9XqkCzmh`U5@Y4vS{_t-K!Oa$|q0H9IJ++
zGn@^BLZwb5TF7$^1jW8|N?mZ(>(N7QKKM8}evc)!flSVFL`J056?M(EY{JL;B7nr*
zp6_~uEyyu_Yc^9q$$B6ul~HnX&E;@z-(9GO{f#m>^BP~$sX@hA#1L10Uj%|-b@Sp?
z=%9g0DW7!yZMdrFpZfPN#bwJ@j>nQ=aF1Rdkx^2e(IeOq2{lJ$1eY}!ST`SCVsctp
zNYT^B$5R`W%yQx<0VC3TNCjq_hbsMh0r5ulBx_NG@PYy)u404<yz<O9DMK5ekO^<7
zlQfQXxJ22G9nJtq789v4d|9Sk;*1j$tIsGF%A|lzR`fdBJRehh_|pbRV-K~U-tOCx
z%#<V|2PMXp`e;7)*De8Nz_FR9dvzOFZpDn#q{X3vRho)&r${NXo_MI<8%d!!dB3S>
z!9x^y%$|e2ymysjAZl`pRg`MI?TBm@nO8h}UD%txlF#jzK^p((^7)To;y(R16JF54
z5DFe5P(2~ShsbV#pIvH7qM|P1R5pZqT2lrZR$}tuDf~8DAe@5w+Arx4x~3bgIkR+e
z_rAhen=Km!zpG~1@|}_0k@AyfLUsi=LH6*Xe#rx!NStW06{KN&c#CV=j-VHXR+;I>
zpX<Jx>QJ0FO>P|Z`M2fCn@>6IoB1a5Md0-N163P2>$1rdQKUQhr<ynqXHX2*BY@TA
zFP`sif<Bn^r(%ct80#s@R+oeTNv4lIoukAE8##)j3f9f!#;co|w@P0_x@sP<PehoO
z-dtmCZP^5IbuJDSUJW}E$m?9YZuT<;M_%yyH}ou~V&Q&8ND_u0$Zt2#c9_j!IBTcn
zZ9&G6Jf<l1P-Pl>RhIX0=nBskZmg~Fd(Muw*tSKBbfz%>tb*Q;_(&9M0%x$(*ucN4
z6AEWC!s^e}_iq=d{hbdPpCM&Af*T%(C>V~(UWiY282&Pay0H&}jprP_A|p()A}Iw=
zM)gQV{Lwz^uFE6+iwN6fYmgd>K%Cg(R)OMy!sA;!Qj@Is>{Tpw93^v);Cps;S&Rtw
z>^Vo%L&^qgJ=M?#CLoQyL86qzBb)$Fa&e1MvZ%?(7Y1|IT|=;4K)CgPBtpkmlPp(d
zlPM5{KHMMV6_duQ#(2L;*@0iLejEfDa7TLC|H}{7Ft8FilHijyUG4<mXP10750mt4
zVV}Wq>MCQexgyhziW1_--^BHW!{jSpe>f>8+8QSfWU6s8lWSC3ACQT!^N*h?R&wo_
z=haz7{&786ZiGBUavA*19OHOv!BOZ7j;rcc|AsW0MxC4Tv1`>2>BN*Hwbann##llB
zx6W<MA}&aF@M|MQ(c~zzm#Ya{QLbv>2~3iiqD&LA55jK+YwVQj7BoBV^oCY(Qi)^M
z;G%tUMW*X9o-kg)4KS|l<@|*(6Cv0`c9j_xnhc>o{L!e_+aX2@k(f1CNhIIH_*o6?
z>u?T^V*PAGoAs)2`w{8-tFe;T9*$h!y8ayY<W*`r4ZdrCR5C|S`ZX_M?tih;b#l;-
zSvVD@iY1tEe!NTl!=?Mus9qD^G`kLmXwM0IRM4|r1xz(7jq-|yTTtUB$?z>n2OhMI
zUY@p)t|>`aH1{loJzqj?g~F1ZA{4rDeH;Qa`rM4R36688KMiHk3#6pZ^c?EJ4{Tj{
zXSVFVpIBB_f<_!-xlBp%<v?MSxU)6dlWShI_lv>M{N3~pEJ5|dS;wZ)P5?8}bZPo-
z?h=rhMv`s*p-;X0++eTy!P^e;%wXT1EoW++I|CIDXukb2Z^V5Fz9$Tm-@>N&)kbYL
zqOSt>O4AfF7cLfsHWRg3MDGfhB<xMUCzI13h*9ilf#L<MD5UBwd<W3c#=mzP4BFsf
zz=W|_O_}vX4vAOKnid{V4I^7ZA$>IqHtN*MuYTsgfc&Vt*l^0u*F+~dM1~&3*#REm
V(D}T0{ai`;EVN36d*R2n;;^5yT!{bx

literal 0
HcmV?d00001

diff --git a/CERTIFICATES.md b/CERTIFICATES.md
new file mode 100644
index 00000000..dfd86392
--- /dev/null
+++ b/CERTIFICATES.md
@@ -0,0 +1,74 @@
+Certificate name from browser
+=============================
+
+[![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
+[![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
+[![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
+
+[⬅️ Go back to main README](README.md)
+
+All well known desktop, mobile and server operating systems come with a
+certificate store that is populated with a set of well known and trusted
+certificates, acting as *trust anchors*.
+
+However RouterOS does not, still sometimes a specific certificate is
+required to properly verify a chain of trust. One example is downloading
+the scripts from this repository with `fetch` command, thus the very
+first step of [installation](README.md#the-long-way-in-detail) is importing
+the certificate.
+
+The scripts can install additional certificates when required. This happens
+from this repository if available, or from [mkcert.org](https://mkcert.org)
+as a fallback.
+
+Get the certificate's CommonName
+--------------------------------
+
+But how to determine what certificate may be required? Often easiest way
+is to use a desktop browser to get that information. This demonstration uses
+[Mozilla Firefox](https://www.mozilla.org/firefox/).
+
+Let's assume we want to make sure the certificate for
+[git.eworm.de](https://git.eworm.de/) is available. Open that page in the
+browser, then click the *lock* icon in addressbar, followed by "*Connection
+secure*".
+
+![screenshot: dialog A](CERTIFICATES.d/01-dialog-A.avif)
+
+The dialog will change, click "*More information*".
+
+![screenshot: dialog B](CERTIFICATES.d/02-dialog-B.avif)
+
+A new window opens, click the button "*View Certificate*". (That window
+can be closed now.)
+
+![screenshot: window](CERTIFICATES.d/03-window.avif)
+
+A new tab opens, showing information on the server certificate and its
+chain of trust. The leftmost certificate is what we are interested in.
+
+![screenshot: certificate](CERTIFICATES.d/04-certificate.avif)
+
+Now we know that "`ISRG Root X2`" is required, some scripts need just
+that information.
+
+Import a certificate by CommonName
+----------------------------------
+
+Running the function `$CertificateAvailable` with that name as parameter
+makes sure the certificate is available in the device's store:
+
+    $CertificateAvailable "ISRG Root X2";
+
+If the certificate is actually available already nothing happens, and there
+is no output. Otherwise the certificate is downloaded and imported.
+
+If importing a certificate with that exact name fails a warning is given
+and nothing is actually imported.
+
+---
+[⬅️ Go back to main README](README.md)  
+[⬆️ Go back to top](#top)

From af942d90d3eae961cc5616118800ec1727e14004 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 31 Oct 2024 14:31:20 +0100
Subject: [PATCH 268/988] doc/mod/notification-matrix: link to 'certificate
 name from browser'

---
 CERTIFICATES.md                | 5 +++++
 doc/mod/notification-matrix.md | 3 +++
 2 files changed, 8 insertions(+)

diff --git a/CERTIFICATES.md b/CERTIFICATES.md
index dfd86392..92a124bb 100644
--- a/CERTIFICATES.md
+++ b/CERTIFICATES.md
@@ -69,6 +69,11 @@ is no output. Otherwise the certificate is downloaded and imported.
 If importing a certificate with that exact name fails a warning is given
 and nothing is actually imported.
 
+See also
+--------
+
+* [Send notifications via Matrix](doc/mod/notification-matrix.md)
+
 ---
 [⬅️ Go back to main README](README.md)  
 [⬆️ Go back to top](#top)
diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index dd46404c..fbc9b912 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -52,6 +52,8 @@ Trust Services*. Run this to import the required certificate:
     $CertificateAvailable "GTS Root R4";
 
 Replace the CA certificate name with what ever is needed for your server.
+You may want to find the
+[certificate name from browser](../../CERTIFICATES.md).
 
 ### From other device
 
@@ -127,6 +129,7 @@ function available:
 See also
 --------
 
+* [Certificate name from browser](../../CERTIFICATES.md)
 * [Send notifications via e-mail](notification-email.md)
 * [Send notifications via Ntfy](notification-ntfy.md)
 * [Send notifications via Telegram](notification-telegram.md)

From c5740c2328c4d468766686717fd14b9860e0494c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 31 Oct 2024 14:43:39 +0100
Subject: [PATCH 269/988] doc/mod/notification-ntfy: link to 'certificate name
 from browser'

---
 CERTIFICATES.md              | 1 +
 doc/mod/notification-ntfy.md | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/CERTIFICATES.md b/CERTIFICATES.md
index 92a124bb..819c32c2 100644
--- a/CERTIFICATES.md
+++ b/CERTIFICATES.md
@@ -73,6 +73,7 @@ See also
 --------
 
 * [Send notifications via Matrix](doc/mod/notification-matrix.md)
+* [Send notifications via Ntfy](doc/mod/notification-ntfy.md)
 
 ---
 [⬅️ Go back to main README](README.md)  
diff --git a/doc/mod/notification-ntfy.md b/doc/mod/notification-ntfy.md
index 2a43e3c8..5393d444 100644
--- a/doc/mod/notification-ntfy.md
+++ b/doc/mod/notification-ntfy.md
@@ -52,6 +52,10 @@ basic authentication. Configure `NtfyServerUser` and `NtfyServerPass` for this.
 Even authentication via access token is possible, adding it as password with
 a blank username.
 
+For a custom service installing an additional certificate may be required.
+You may want to install that certificate manually, after finding the
+[certificate name from browser](../../CERTIFICATES.md).
+
 Usage and invocation
 --------------------
 
@@ -82,6 +86,7 @@ function available:
 See also
 --------
 
+* [Certificate name from browser](../../CERTIFICATES.md)
 * [Send notifications via e-mail](notification-email.md)
 * [Send notifications via Matrix](notification-matrix.md)
 * [Send notifications via Telegram](notification-telegram.md)

From d213369e73da042014ca68af17831c5bc3eb4310 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 31 Oct 2024 14:34:17 +0100
Subject: [PATCH 270/988] doc/fw-addr-lists: link to 'certificate name from
 browser'

---
 CERTIFICATES.md      |  1 +
 doc/fw-addr-lists.md | 10 +++++++---
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/CERTIFICATES.md b/CERTIFICATES.md
index 819c32c2..25432994 100644
--- a/CERTIFICATES.md
+++ b/CERTIFICATES.md
@@ -72,6 +72,7 @@ and nothing is actually imported.
 See also
 --------
 
+* [Download, import and update firewall address-lists](doc/fw-addr-lists.md)
 * [Send notifications via Matrix](doc/mod/notification-matrix.md)
 * [Send notifications via Ntfy](doc/mod/notification-ntfy.md)
 
diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index 2008c7ea..3d9e771e 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -62,9 +62,8 @@ The configuration goes to `global-config-overlay`, these are the parameters:
 > your local `global-config-overlay` and modify it to your specific needs.
 
 Naming a certificate for a list makes the script verify the server
-certificate, so you should add that if possible. Some certificates are
-available in my repository and downloaded automatically. Import it manually
-(menu `/certificate/`) if missing.
+certificate, so you should add that if possible. You may want to find the
+[certificate name from browser](../CERTIFICATES.md).
 
 Create firewall rules to process the packets that are related to addresses
 from address-lists.
@@ -127,6 +126,11 @@ Drop packets in firewall's raw section:
 > ⚠️ **Warning**: Just again... The order of firewall rules is important. Make
 > sure they actually take effect as expected!
 
+See also
+--------
+
+* [Certificate name from browser](../CERTIFICATES.md)
+
 ---
 [⬅️ Go back to main README](../README.md)  
 [⬆️ Go back to top](#top)

From 31dfdf7e6243527d77af6b4ae93e753cd45c8cbb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 31 Oct 2024 15:17:31 +0100
Subject: [PATCH 271/988] doc/netwatch-dns: link to 'certificate name from
 browser'

---
 CERTIFICATES.md     | 1 +
 doc/netwatch-dns.md | 5 +++--
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/CERTIFICATES.md b/CERTIFICATES.md
index 25432994..589d4801 100644
--- a/CERTIFICATES.md
+++ b/CERTIFICATES.md
@@ -73,6 +73,7 @@ See also
 --------
 
 * [Download, import and update firewall address-lists](doc/fw-addr-lists.md)
+* [Manage DNS and DoH servers from netwatch](doc/netwatch-dns.md)
 * [Send notifications via Matrix](doc/mod/notification-matrix.md)
 * [Send notifications via Ntfy](doc/mod/notification-ntfy.md)
 
diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 54dd6c62..cdfbd974 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -59,8 +59,8 @@ resolves to the same address.
 Be aware that you have to keep the ip address in sync with real world
 manually!
 
-Importing a certificate automatically is possible, at least if available in
-the repository (see `certs` sub directory).
+Importing a certificate automatically is possible. You may want to find the
+[certificate name from browser](../CERTIFICATES.md).
 
     /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G2" host=1.1.1.1;
     /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G3" host=9.9.9.9;
@@ -87,6 +87,7 @@ Also this allows to update host address, see option `resolve`.
 See also
 --------
 
+* [Certificate name from browser](../CERTIFICATES.md)
 * [Notify on host up and down](netwatch-notify.md)
 
 ---

From 084c246ef0cab329fe981732089277fa8398800b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 5 Nov 2024 17:49:28 +0100
Subject: [PATCH 272/988] fw-addr-lists: simplify looping lines

With `:deserialize` the **record** separator is always a new line. The
property `delimiter=` is a **field** reparator, so you can parse a lines
into an array.

We do not want (or need) that, so use new line as field separator. This
will result in an array with just one element, and we use that.

Also convert the data to line feed explicitly, just to be sure.
---
 fw-addr-lists.rsc | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 4675e3a4..a9513d8c 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -65,7 +65,7 @@
 
       :for I from=1 to=5 do={
         :if ($Data = false) do={
-          :set Data [ $FetchHuge $ScriptName ($List->"url") $CheckCertificate ];
+          :set Data [ :tolf [ $FetchHuge $ScriptName ($List->"url") $CheckCertificate ] ];
           :if ($Data = false) do={
             :if ($I < 5) do={
               $LogPrint debug $ScriptName ("Failed downloading for list '" . $FwListName . \
@@ -86,8 +86,8 @@
             "B for list '" . $FwListName . "' from: " . $List->"url");
       }
 
-      :while ([ :len $Data ] != 0) do={
-        :local Line [ :pick $Data 0 [ :find $Data "\n" ] ];
+      :foreach Line in=[ :deserialize $Data delimiter="\n" from=dsv options=dsv.plain ] do={
+        :set Line ($Line->0);
         :local Address;
         :if ([ :pick $Line 0 1 ] = "{") do={
           :set Address [ :tostr ([ :deserialize from=json $Line ]->"cidr") ];
@@ -109,7 +109,6 @@
             :error true;
           }
         } on-error={ }
-        :set Data [ :pick $Data ([ :len $Line ] + 1) [ :len $Data ] ];
       }
     }
 

From 9c945b1a3283bb352707c69630c579cf82484dcb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 6 Nov 2024 10:03:19 +0100
Subject: [PATCH 273/988] mod/ssh-keys-import: $SSHKeysImportFile: simplify
 looping lines

---
 mod/ssh-keys-import.rsc | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 8cafa954..00f443ab 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -88,12 +88,11 @@
     $LogPrint warning $0 ("File '" . $FileName . "' does not exist.");
     :return false;
   }
-  :local Keys ([ /file/get $FileName contents ] . "\n");
+  :local Keys [ :tolf [ /file/get $FileName contents ] ];
 
-  :do {
+  :foreach Line in=[ :deserialize $Keys delimiter="\n" from=dsv options=dsv.plain ] do={
+    :set Line ($Line->0);
     :local Continue false;
-    :local Line [ :pick $Keys 0 [ :find $Keys "\n" ] ];
-    :set Keys [ :pick $Keys ([ :find $Keys "\n" ] + 1) [ :len $Keys ] ];
     :local KeyVal [ :toarray [ $CharacterReplace $Line " " "," ] ];
     :if ($KeyVal->0 = "ssh-ed25519" || $KeyVal->0 = "ssh-rsa") do={
       :do {
@@ -110,5 +109,5 @@
     :if ($Continue = false && [ :len ($KeyVal->0) ] > 0) do={
       $LogPrint warning $0 ("SSH key of type '" . $KeyVal->0 . "' is not supported.");
     }
-  } while=([ :len $Keys ] > 0);
+  }
 }

From 0837391c38987462c3a1787143d631b92e0a0551 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Nov 2024 08:30:07 +0100
Subject: [PATCH 274/988] mod/ssh-keys-import: $SSHKeysImportFile: let
 `:deserialize` split the fields

---
 mod/ssh-keys-import.rsc | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 00f443ab..f67c0fc0 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -72,7 +72,6 @@
   :local FileName [ :tostr $1 ];
   :local User     [ :tostr $2 ];
 
-  :global CharacterReplace;
   :global EitherOr;
   :global LogPrint;
   :global ParseKeyValueStore;
@@ -90,20 +89,18 @@
   }
   :local Keys [ :tolf [ /file/get $FileName contents ] ];
 
-  :foreach Line in=[ :deserialize $Keys delimiter="\n" from=dsv options=dsv.plain ] do={
-    :set Line ($Line->0);
+  :foreach KeyVal in=[ :deserialize $Keys delimiter=" " from=dsv options=dsv.plain ] do={
     :local Continue false;
-    :local KeyVal [ :toarray [ $CharacterReplace $Line " " "," ] ];
     :if ($KeyVal->0 = "ssh-ed25519" || $KeyVal->0 = "ssh-rsa") do={
       :do {
-        $SSHKeysImport $Line $User;
+        $SSHKeysImport ($KeyVal->0 . " " . $KeyVal->1 . " " . $KeyVal->2) $User;
       } on-error={
         $LogPrint warning $0 ("Failed importing key for user '" . $User . "'.");
       }
       :set Continue true;
     }
     :if ($Continue = false && $KeyVal->0 = "#") do={
-      :set User [ $EitherOr ([ $ParseKeyValueStore [ :pick $Line 2 [ :len $Line ] ] ]->"user") $User ];
+      :set User [ $EitherOr ([ $ParseKeyValueStore ($KeyVal->1) ]->"user") $User ];
       :set Continue true;
     }
     :if ($Continue = false && [ :len ($KeyVal->0) ] > 0) do={

From 1f526b356121749991fee69cee5a6c728855c8f2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 8 Nov 2024 08:50:12 +0100
Subject: [PATCH 275/988] mod/ssh-keys-import: $SSHKeysImport: split with
 `:deserialize`

---
 mod/ssh-keys-import.rsc | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index f67c0fc0..d6b3b3fb 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -16,7 +16,6 @@
   :local Key  [ :tostr $1 ];
   :local User [ :tostr $2 ];
 
-  :global CharacterReplace;
   :global GetRandom20CharAlNum;
   :global LogPrint;
   :global MkDir;
@@ -32,7 +31,7 @@
     :return false;
   }
 
-  :local KeyVal [ :toarray [ $CharacterReplace $Key " " "," ] ];
+  :local KeyVal ([ :deserialize $Key delimiter=" " from=dsv options=dsv.plain ]->0);
   :if (!($KeyVal->0 = "ssh-ed25519" || $KeyVal->0 = "ssh-rsa")) do={
     $LogPrint warning $0 ("SSH key of type '" . $KeyVal->0 . "' is not supported.");
     :return false;

From 6c8fa8e639318b72c2102dfff884aa039d09a0f0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Nov 2024 17:40:05 +0100
Subject: [PATCH 276/988] check-routeros-update: replace hard-coded version

---
 check-routeros-update.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 84849ead..c7a57021 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -67,7 +67,7 @@
   :local NumLatestFeature ($NumLatest & $BitMask);
   :local Link ("https://mikrotik.com/download/changelogs/" . $Update->"channel" . "-release-tree");
 
-  :if ($NumLatest < 117505792) do={
+  :if ($NumLatest < [ $VersionToNum "7.0" ]) do={
     $LogPrint info $ScriptName ("The version '" . ($Update->"latest-version") . "' is not a valid version.");
     :error false;
   }

From d97f63fa5a9e4649338e2a70e83516fbd6a61abc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Nov 2024 17:41:54 +0100
Subject: [PATCH 277/988] check-routeros-update: add specific message for empty
 version string

---
 check-routeros-update.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index c7a57021..7ff9ccb0 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -60,6 +60,11 @@
     :error true;
   }
 
+  :if ([ :len ($Update->"latest-version") ] = 0) do={
+    $LogPrint info $ScriptName ("Received an empty version string from server.");
+    :error false;
+  }
+
   :local NumInstalled [ $VersionToNum ($Update->"installed-version") ];
   :local NumLatest [ $VersionToNum ($Update->"latest-version") ];
   :local BitMask [ $VersionToNum "255.255zero0" ];

From 04172f0438411dd803705f372c7e85bd879d4d6b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Nov 2024 17:42:54 +0100
Subject: [PATCH 278/988] check-routeros-update: make invalid version string a
 warning

---
 check-routeros-update.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 7ff9ccb0..d4893517 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -73,7 +73,7 @@
   :local Link ("https://mikrotik.com/download/changelogs/" . $Update->"channel" . "-release-tree");
 
   :if ($NumLatest < [ $VersionToNum "7.0" ]) do={
-    $LogPrint info $ScriptName ("The version '" . ($Update->"latest-version") . "' is not a valid version.");
+    $LogPrint warning $ScriptName ("The version '" . ($Update->"latest-version") . "' is not a valid version.");
     :error false;
   }
 

From a545d0d39e21b4fdf0b68153f7b4b175e2ea2bdf Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Nov 2024 17:46:02 +0100
Subject: [PATCH 279/988] check-routeros-update: always exit early if up to
 date...

... and just make the output and log dependent on terminal.
---
 check-routeros-update.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index d4893517..06248088 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -55,8 +55,10 @@
   /system/package/update/check-for-updates without-paging as-value;
   :local Update [ /system/package/update/get ];
 
-  :if ([ $ScriptFromTerminal $ScriptName ] = true && ($Update->"installed-version") = ($Update->"latest-version")) do={
-    $LogPrint info $ScriptName ("System is already up to date.");
+  :if (($Update->"installed-version") = ($Update->"latest-version")) do={
+    :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
+      $LogPrint info $ScriptName ("System is already up to date.");
+    }
     :error true;
   }
 

From f1533b8962bc67d17e9f6b5666ae51ee4d1e1ff4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Nov 2024 17:53:30 +0100
Subject: [PATCH 280/988] hotspot-to-wpa-cleanup: use the timeout in message...

... not the actual value.
---
 hotspot-to-wpa-cleanup.capsman.rsc  | 2 +-
 hotspot-to-wpa-cleanup.template.rsc | 2 +-
 hotspot-to-wpa-cleanup.wifi.rsc     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 45ea72b0..e3051709 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -65,7 +65,7 @@
         server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
-        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.");
+        " was not seen for " . $Timeout . ", removing.");
       /caps-man/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
         mac-address=($LeaseVal->"mac-address") ];
       /ip/dhcp-server/lease/remove $Lease;
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 081f3d0d..70bee421 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -71,7 +71,7 @@
         server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
-        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.");
+        " was not seen for " . $Timeout . ", removing.");
       /caps-man/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
       /interface/wifi/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
         mac-address=($LeaseVal->"mac-address") ];
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 23f773f5..c8147057 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -65,7 +65,7 @@
         server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
-        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.");
+        " was not seen for " . $Timeout . ", removing.");
       /interface/wifi/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
         mac-address=($LeaseVal->"mac-address") ];
       /ip/dhcp-server/lease/remove $Lease;

From ae655646ba21cdf4638e6001a49c9d3cf849bc08 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 12 Nov 2024 18:02:26 +0100
Subject: [PATCH 281/988] hotspot-to-wpa-cleanup: clean up daily only

---
 hotspot-to-wpa-cleanup.capsman.rsc  | 3 ++-
 hotspot-to-wpa-cleanup.template.rsc | 3 ++-
 hotspot-to-wpa-cleanup.wifi.rsc     | 3 ++-
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index e3051709..674a480a 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -62,7 +62,8 @@
 
   :foreach Server,Timeout in=$DHCPServers do={
     :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
-        server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
+        server=$Server last-seen>($Timeout + [ /system/clock/get time ]) \
+        comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
         " was not seen for " . $Timeout . ", removing.");
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 70bee421..88c307b8 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -68,7 +68,8 @@
 
   :foreach Server,Timeout in=$DHCPServers do={
     :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
-        server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
+        server=$Server last-seen>($Timeout + [ /system/clock/get time ]) \
+        comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
         " was not seen for " . $Timeout . ", removing.");
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index c8147057..b73f1a9f 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -62,7 +62,8 @@
 
   :foreach Server,Timeout in=$DHCPServers do={
     :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
-        server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
+        server=$Server last-seen>($Timeout + [ /system/clock/get time ]) \
+        comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
         " was not seen for " . $Timeout . ", removing.");

From e5c3aeb5cd314119dd7b062e43d65fdff7371051 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 13 Nov 2024 08:57:05 +0100
Subject: [PATCH 282/988] hotspot-to-wpa-cleanup: prepare real timeout value in
 variable...

... to make sure it is not re-calculated for every single lease.
---
 hotspot-to-wpa-cleanup.capsman.rsc  | 4 ++--
 hotspot-to-wpa-cleanup.template.rsc | 4 ++--
 hotspot-to-wpa-cleanup.wifi.rsc     | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 674a480a..d429904d 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -61,9 +61,9 @@
   }
 
   :foreach Server,Timeout in=$DHCPServers do={
+    :local TimeoutExtra ($Timeout + [ /system/clock/get time ]);
     :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
-        server=$Server last-seen>($Timeout + [ /system/clock/get time ]) \
-        comment~"^hotspot-to-wpa:" ] do={
+        server=$Server last-seen>$TimeoutExtra comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
         " was not seen for " . $Timeout . ", removing.");
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 88c307b8..726bc74d 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -67,9 +67,9 @@
   }
 
   :foreach Server,Timeout in=$DHCPServers do={
+    :local TimeoutExtra ($Timeout + [ /system/clock/get time ]);
     :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
-        server=$Server last-seen>($Timeout + [ /system/clock/get time ]) \
-        comment~"^hotspot-to-wpa:" ] do={
+        server=$Server last-seen>$TimeoutExtra comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
         " was not seen for " . $Timeout . ", removing.");
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index b73f1a9f..32ae565e 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -61,9 +61,9 @@
   }
 
   :foreach Server,Timeout in=$DHCPServers do={
+    :local TimeoutExtra ($Timeout + [ /system/clock/get time ]);
     :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
-        server=$Server last-seen>($Timeout + [ /system/clock/get time ]) \
-        comment~"^hotspot-to-wpa:" ] do={
+        server=$Server last-seen>$TimeoutExtra comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
         " was not seen for " . $Timeout . ", removing.");

From a224fbc42457550fcb7f6daa81c2cb14b7075799 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 13 Nov 2024 08:59:30 +0100
Subject: [PATCH 283/988] hotspot-to-wpa-cleanup: revert display of timeout
 value...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

... as the timeout is a time value, and showing "4w00:00:00" (with lots
of zeros) is not any better. 😜

This reverts commit f1533b8962bc67d17e9f6b5666ae51ee4d1e1ff4.
---
 hotspot-to-wpa-cleanup.capsman.rsc  | 2 +-
 hotspot-to-wpa-cleanup.template.rsc | 2 +-
 hotspot-to-wpa-cleanup.wifi.rsc     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index d429904d..e9358502 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -66,7 +66,7 @@
         server=$Server last-seen>$TimeoutExtra comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
-        " was not seen for " . $Timeout . ", removing.");
+        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.");
       /caps-man/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
         mac-address=($LeaseVal->"mac-address") ];
       /ip/dhcp-server/lease/remove $Lease;
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 726bc74d..fa99b5df 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -72,7 +72,7 @@
         server=$Server last-seen>$TimeoutExtra comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
-        " was not seen for " . $Timeout . ", removing.");
+        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.");
       /caps-man/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
       /interface/wifi/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
         mac-address=($LeaseVal->"mac-address") ];
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 32ae565e..d3f859ed 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -66,7 +66,7 @@
         server=$Server last-seen>$TimeoutExtra comment~"^hotspot-to-wpa:" ] do={
       :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
       $LogPrint info $ScriptName ("Client with mac address " . ($LeaseVal->"mac-address") . \
-        " was not seen for " . $Timeout . ", removing.");
+        " was not seen for " . ($LeaseVal->"last-seen") . ", removing.");
       /interface/wifi/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
         mac-address=($LeaseVal->"mac-address") ];
       /ip/dhcp-server/lease/remove $Lease;

From 5b09469cc6c707b473b74687951b2d1e6468928a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 14 Nov 2024 21:03:07 +0100
Subject: [PATCH 284/988] packages-update: drop check for device-mode
 downgrade...

... as things have been revised and this specific setting was removed.
---
 packages-update.rsc | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index c2f0ba6d..b08a48d2 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -99,12 +99,6 @@
 
   :local DoDowngrade false;
   :if ($NumInstalled > $NumLatest) do={
-    :if (([ /system/device-mode/get ]->"downgrade") = false) do={
-      $LogPrint error $ScriptName \
-          ("The device mode has locked downgrades! You will need physical access!");
-      :error false;
-    }
-
     :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
       :put "Latest version is older than installed one. Want to downgrade? [y/N]";
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={

From 1beda3aa7c08cbe0e06aff164fabfa86e8b6353d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 15 Nov 2024 23:01:22 +0100
Subject: [PATCH 285/988] mode-button: fix the caller parameter to $LogPrint

This is inside a function, so use just $0 here.
---
 mode-button.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index 7908a7f1..84eb8ea9 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -52,7 +52,7 @@
 
       :if ([ :len $Code ] > 0) do={
         :if ([ $ValidateSyntax $Code ] = true) do={
-          $LogPrint info $ScriptName ("Acting on " . $Count . " mode-button presses: " . $Code);
+          $LogPrint info $0 ("Acting on " . $Count . " mode-button presses: " . $Code);
 
           :for I from=1 to=$Count do={
             $LEDInvert;
@@ -66,10 +66,10 @@
 
           [ :parse $Code ];
         } else={
-          $LogPrint warning $ScriptName ("The code for " . $Count . " mode-button presses failed syntax validation!");
+          $LogPrint warning $0 ("The code for " . $Count . " mode-button presses failed syntax validation!");
         }
       } else={
-        $LogPrint info $ScriptName ("No action defined for " . $Count . " mode-button presses.");
+        $LogPrint info $0 ("No action defined for " . $Count . " mode-button presses.");
       }
     }
     /system/scheduler/add name="_ModeButtonScheduler" \

From 53b6f7720ec33146581ceb878447d35d462c8697 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 15 Nov 2024 23:02:43 +0100
Subject: [PATCH 286/988] mode-button: catch runtime errors in executed code

---
 mode-button.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index 84eb8ea9..ac1fb4fd 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -64,7 +64,11 @@
             :delay 200ms;
           }
 
-          [ :parse $Code ];
+          :do {
+            [ :parse $Code ];
+          } on-error={
+            $LogPrint warning $0 ("The code for " . $Count . " mode-button presses failed with runtime error!");
+          }
         } else={
           $LogPrint warning $0 ("The code for " . $Count . " mode-button presses failed syntax validation!");
         }

From 08ad4e519410c91d61e172f4ea97046dffc2db31 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 15 Nov 2024 23:07:26 +0100
Subject: [PATCH 287/988] mode-button: do not act on disabled LED

---
 mode-button.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index ac1fb4fd..3bd922b9 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -36,7 +36,8 @@
 
         :global IfThenElse;
 
-        :local LED [ /system/leds/find where leds=$ModeButtonLED type~"^(on|off)\$" interface=[] ];
+        :local LED [ /system/leds/find where leds=$ModeButtonLED \
+            !disabled type~"^(on|off)\$" interface=[] ];
         :if ([ :len $LED ] = 0) do={
           :return false;
         }

From 4d8dce97691ad090091574a790449a7bd564023c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 22 Nov 2024 14:06:22 +0100
Subject: [PATCH 288/988] fw-addr-lists: spamhaus.org returned to 'GTS Root R4'

---
 certs/Makefile    | 2 +-
 global-config.rsc | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/certs/Makefile b/certs/Makefile
index 9ce8dd42..870cb542 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -22,7 +22,7 @@ DOMAINS = \
 	sslbl.abuse.ch/GlobalSign \
 	upgrade.mikrotik.com/ISRG-Root-X1 \
 	www.dshield.org/ISRG-Root-X1 \
-	www.spamhaus.org/ISRG-Root-X1
+	www.spamhaus.org/GTS-Root-R4
 
 .PHONY: $(DOMAINS)
 
diff --git a/global-config.rsc b/global-config.rsc
index c4e04b5e..2ed67f3c 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -106,9 +106,9 @@
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="Certum Trusted Network CA" };
 #    { url="https://www.spamhaus.org/drop/drop_v4.json";
-#      cert="ISRG Root X1" };
+#      cert="GTS Root R4" };
 #    { url="https://www.spamhaus.org/drop/drop_v6.json";
-#      cert="ISRG Root X1" };
+#      cert="GTS Root R4" };
   };
 #  "mikrotik"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";

From 794525b706827682c3525eeeb0797567c757b7de Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Nov 2024 09:54:19 +0100
Subject: [PATCH 289/988] fw-addr-lists: require RouterOS 7.16

Actually the requirement bumped with the change in commit:

* 084c246ef0cab329fe981732089277fa8398800b
  fw-addr-lists: simplify looping lines
---
 doc/fw-addr-lists.md | 2 +-
 fw-addr-lists.rsc    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index 3d9e771e..f581fd29 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -4,7 +4,7 @@ Download, import and update firewall address-lists
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.16-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index a9513d8c..34b2fcce 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2023-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.16
 #
 # download, import and update firewall address-lists
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/fw-addr-lists.md

From e851cd5ad0ccb38667ec88a52fdc123cc5a16aee Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 27 Nov 2024 09:57:11 +0100
Subject: [PATCH 290/988] mod/ssh-keys-import: require RouterOS 7.16

Actually the requirement bumped with the change in commits:

* 9c945b1a3283bb352707c69630c579cf82484dcb
  mod/ssh-keys-import: $SSHKeysImportFile: simplify looping lines

* 1f526b356121749991fee69cee5a6c728855c8f2
  mod/ssh-keys-import: $SSHKeysImport: split with `:deserialize`
---
 doc/mod/ssh-keys-import.md | 2 +-
 mod/ssh-keys-import.rsc    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/mod/ssh-keys-import.md b/doc/mod/ssh-keys-import.md
index dcfd95b1..344f4bc2 100644
--- a/doc/mod/ssh-keys-import.md
+++ b/doc/mod/ssh-keys-import.md
@@ -4,7 +4,7 @@ Import ssh keys for public key authentication
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.16-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index d6b3b3fb..c7b27885 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.16
 #
 # import ssh keys for public key authentication
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/ssh-keys-import.md

From 6548f83ef4f60efadc3574876680801ee09ef638 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 Aug 2024 21:30:46 +0200
Subject: [PATCH 291/988] dhcp-to-dns: explicitly expect type=A...

... which is provided since 7.16beta7 (but require next stable release
7.16 as that is available meanwhile).

I had this on my wishlist for a long time, and opened an issue in
March 2023 about it (SUP-111312).

Back then I changed the code to support both, see commit
779b3b8872b23b784c331d7a454c86439046f5d3.
---
 dhcp-to-dns.rsc    | 8 ++++----
 doc/dhcp-to-dns.md | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index 0ab5e2a3..9bf506fc 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -4,7 +4,7 @@
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=20
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.16
 #
 # check DHCP leases and add/remove/update DNS entries
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-to-dns.md
@@ -40,7 +40,7 @@
   }
   :local PlaceBefore ([ /ip/dns/static/find where (name=$CommentString or (comment=$CommentString and name=-)) type=NXDOMAIN disabled ]->0);
 
-  :foreach DnsRecord in=[ /ip/dns/static/find where comment~("^" . $CommentPrefix . "\\b") (!type or type=A) ] do={
+  :foreach DnsRecord in=[ /ip/dns/static/find where comment~("^" . $CommentPrefix . "\\b") type=A ] do={
     :local DnsRecordVal [ /ip/dns/static/get $DnsRecord ];
     :local DnsRecordInfo [ $ParseKeyValueStore ($DnsRecordVal->"comment") ];
     :local MacInServer ($DnsRecordInfo->"macaddress" . " in " . $DnsRecordInfo->"server");
@@ -83,7 +83,7 @@
       :local FullCN ($HostName . "." . $NetDomain);
       :local MacInServer ($LeaseVal->"active-mac-address" . " in " . $LeaseVal->"server");
 
-      :local DnsRecord [ /ip/dns/static/find where comment=$Comment (!type or type=A) ];
+      :local DnsRecord [ /ip/dns/static/find where comment=$Comment type=A ];
       :if ([ :len $DnsRecord ] > 0) do={
         :local DnsRecordVal [ /ip/dns/static/get $DnsRecord ];
 
@@ -116,7 +116,7 @@
         }
       }
 
-      :if ([ :len [ /ip/dns/static/find where name=$FullA (!type or type=A) ] ] > 1) do={
+      :if ([ :len [ /ip/dns/static/find where name=$FullA type=A ] ] > 1) do={
         $LogPrintOnce warning $ScriptName ("The name '" . $FullA . "' appeared in more than one A record!");
       }
     } else={
diff --git a/doc/dhcp-to-dns.md b/doc/dhcp-to-dns.md
index 572011fb..4211d854 100644
--- a/doc/dhcp-to-dns.md
+++ b/doc/dhcp-to-dns.md
@@ -4,7 +4,7 @@ Create DNS records for DHCP leases
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.16-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 

From 09e8b1d21953ad8ba5185b3cb02bbd4b35269963 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 28 Aug 2024 08:53:20 +0200
Subject: [PATCH 292/988] netwatch-dns: explicitly expect type=A...

... which is provided since 7.16beta7 (but require next stable release
7.16 as that is available meanwhile).
---
 doc/netwatch-dns.md | 2 +-
 netwatch-dns.rsc    | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index cdfbd974..6d2c8651 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -4,7 +4,7 @@ Manage DNS and DoH servers from netwatch
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.16-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 09d471df..6fbfc895 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2022-2024 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.16
 #
 # monitor and manage dns/doh with netwatch
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/netwatch-dns.md
@@ -80,7 +80,7 @@
     :local HostVal [ /tool/netwatch/get $Host ];
     :local HostInfo [ $ParseKeyValueStore ($HostVal->"comment") ];
     :local HostName [ /ip/dns/static/find where name address=($HostVal->"host") \
-        (!type or type="A" or type="AAAA") !disabled !dynamic ];
+        (type="A" or type="AAAA") !disabled !dynamic ];
     :if ([ :len $HostName ] > 0) do={
       :set HostName [ /ip/dns/static/get ($HostName->0) name ];
     }

From 0d69f8952c25f3bfecd9e33c1520e74eebe42314 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:06:56 +0100
Subject: [PATCH 293/988] global-functions: introduce $ExitError...

... as a simple macro to print error message on unintentional error.
---
 global-functions.rsc | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 6fec6dd3..26ccc2aa 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -32,6 +32,7 @@
 :global DownloadPackage;
 :global EitherOr;
 :global EscapeForRegEx;
+:global ExitError;
 :global FetchHuge;
 :global FetchUserAgentStr;
 :global FormatLine;
@@ -425,6 +426,18 @@
   :return $Return;
 }
 
+# simple macro to print error message on unintentional error
+:set ExitError do={
+  :local ExitOK     [ :tostr $1 ];
+  :local ScriptName [ :tostr $2 ];
+
+  :global LogPrint; 
+
+  :if ($ExitOK = "false") do={
+    $LogPrint error $ScriptName ("Script exited with error.");
+  }
+}
+
 # fetch huge data to file, read in chunks
 :set FetchHuge do={
   :local ScriptName [ :tostr $1 ];

From ed6739b8bcb93f8e1025401e22db4244c70ac8c6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 8 Dec 2024 22:02:52 +0100
Subject: [PATCH 294/988] global-functions: $ExitError: give script name in
 message

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 26ccc2aa..8941994e 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -434,7 +434,7 @@
   :global LogPrint; 
 
   :if ($ExitOK = "false") do={
-    $LogPrint error $ScriptName ("Script exited with error.");
+    $LogPrint error $ScriptName ("Script '" . $ScriptName . "' exited with error.");
   }
 }
 

From 36b81fab9474aa0ddc6acdb88f51ef211a1c5563 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:19:54 +0100
Subject: [PATCH 295/988] backup-cloud: use $ExitError to indicate
 unintentional error

---
 backup-cloud.rsc | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index f70752e4..4cc7a589 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -12,6 +12,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -34,6 +35,7 @@
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
     :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -44,6 +46,7 @@
 
   :if ([ $MkDir ("tmpfs/backup-cloud") ] = false) do={
     $LogPrint error $ScriptName ("Failed creating directory!");
+    :set ExitOK true;
     :error false;
   }
 
@@ -87,4 +90,6 @@
     :set PackagesUpdateBackupFailure true;
   }
   /file/remove "tmpfs/backup-cloud";
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 52b5490babc9005fbbb8e0cb1e2ae323a2bd2f70 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:22:11 +0100
Subject: [PATCH 296/988] backup-email: use $ExitError to indicate
 unintentional error

---
 backup-email.rsc | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/backup-email.rsc b/backup-email.rsc
index e507c6e1..e1d44eac 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -12,6 +12,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -39,17 +40,20 @@
 
   :if ([ :typeof $SendEMail2 ] = "nothing") do={
     $LogPrint error $ScriptName ("The module for sending notifications via e-mail is not installed.");
+    :set ExitOK true;
     :error false;
   }
 
   :if ($BackupSendBinary != true && \
        $BackupSendExport != true) do={
     $LogPrint error $ScriptName ("Configured to send neither backup nor config export.");
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
     :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -69,6 +73,7 @@
 
   :if ([ $MkDir $DirName ] = false) do={
     $LogPrint error $ScriptName ("Failed creating directory!");
+    :set ExitOK true;
     :error false;
   }
 
@@ -116,9 +121,12 @@
     :if ($I >= 120) do={
       $LogPrint warning $ScriptName ("Files are still available, sending e-mail failed.");
       :set PackagesUpdateBackupFailure true;
+      :set ExitOK true;
       :error false;
     }
     :delay 1s;
     :set I ($I + 1);
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 2c4053cff55a7d0a90f364f7aded280422dc1d65 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:26:34 +0100
Subject: [PATCH 297/988] accesslist-duplicates: use $ExitError to indicate
 unintentional error

---
 accesslist-duplicates.capsman.rsc  | 5 ++++-
 accesslist-duplicates.local.rsc    | 5 ++++-
 accesslist-duplicates.template.rsc | 5 ++++-
 accesslist-duplicates.wifi.rsc     | 5 ++++-
 4 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index d6e2928c..ce0ce115 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -13,6 +13,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -31,4 +32,6 @@
     }
     :set ($Seen->$Mac) 1;
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index e90842db..aa78fe81 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -13,6 +13,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -31,4 +32,6 @@
     }
     :set ($Seen->$Mac) 1;
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index d2753404..d0c282d7 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -40,4 +41,6 @@
     }
     :set ($Seen->$Mac) 1;
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index f4dae4b5..b1444e3d 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -13,6 +13,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -31,4 +32,6 @@
     }
     :set ($Seen->$Mac) 1;
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 95030b9b74db03cf67c4702c82bb1d1224c9690e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:28:30 +0100
Subject: [PATCH 298/988] backup-partition: use $ExitError to indicate
 unintentional error

---
 backup-partition.rsc | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 51df4545..f1e1c170 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -12,6 +12,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -42,12 +43,14 @@
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
     :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ :len [ /partitions/find ] ] < 2) do={
     $LogPrint error $ScriptName ("Device does not have a fallback partition.");
     :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
     :error false;
   }
 
@@ -56,6 +59,7 @@
   :if ([ :len $ActiveRunning ] < 1) do={
     $LogPrint error $ScriptName ("Device is not running from active partition.");
     :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
     :error false;
   }
 
@@ -65,6 +69,7 @@
   :if ([ :len $FallbackTo ] < 1) do={
     $LogPrint error $ScriptName ("There is no inactive partition named '" . $FallbackToName . "'.");
     :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
     :error false;
   }
 
@@ -74,6 +79,7 @@
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
         :if ([ $CopyTo $ScriptName $FallbackTo $FallbackToName ] = false) do={
           :set PackagesUpdateBackupFailure true;
+          :set ExitOK true;
           :error false;
         }
       }
@@ -86,6 +92,7 @@
            ($NumInstalled & $BitMask) != ($NumLatest & $BitMask)) do={
         :if ([ $CopyTo $ScriptName $FallbackTo $FallbackToName ] = false) do={
           :set PackagesUpdateBackupFailure true;
+          :set ExitOK true;
           :error false;
         }
       }
@@ -103,6 +110,9 @@
     /system/scheduler/remove [ find where name="running-from-backup-partition" ];
     $LogPrint error $ScriptName ("Failed saving configuration to partition '" . $FallbackToName . "'!");
     :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
     :error false;
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 268743ef6be5c400ec9fcb044e4961c5d8d9b531 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:29:02 +0100
Subject: [PATCH 299/988] backup-upload: use $ExitError to indicate
 unintentional error

---
 backup-upload.rsc | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 8d96eba5..12698e93 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -12,6 +12,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -43,11 +44,13 @@
   :if ($BackupSendBinary != true && \
        $BackupSendExport != true) do={
     $LogPrint error $ScriptName ("Configured to send neither backup nor config export.");
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
     :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -67,6 +70,7 @@
 
   :if ([ $MkDir $DirName ] = false) do={
     $LogPrint error $ScriptName ("Failed creating directory!");
+    :set ExitOK true;
     :error false;
   }
 
@@ -158,4 +162,6 @@
     :set PackagesUpdateBackupFailure true;
   }
   /file/remove $DirName;
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From c909bef613884bf67d239a1e6c0bed4e3d7a112e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:51 +0100
Subject: [PATCH 300/988] capsman-download-packages: use $ExitError to indicate
 unintentional error

---
 capsman-download-packages.capsman.rsc  | 8 +++++++-
 capsman-download-packages.template.rsc | 8 +++++++-
 capsman-download-packages.wifi.rsc     | 8 +++++++-
 3 files changed, 21 insertions(+), 3 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index f2ff0249..18028840 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -25,6 +26,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -35,6 +37,7 @@
 
   :if ([ :len $PackagePath ] = 0) do={
     $LogPrint warning $ScriptName ("The CAPsMAN package path is not defined, can not download packages.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -42,6 +45,7 @@
     :if ([ $MkDir $PackagePath ] = false) do={
       $LogPrint warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
         $PackagePath . ") failed!");
+      :set ExitOK true;
       :error false;
     }
     $LogPrint info $ScriptName ("Created directory at CAPsMAN package path (" . $PackagePath . \
@@ -82,4 +86,6 @@
       /caps-man/remote-cap/upgrade [ find where version!=$InstalledVersion ];
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index ad9b926a..72edaa91 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -15,6 +15,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -26,6 +27,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -37,6 +39,7 @@
 
   :if ([ :len $PackagePath ] = 0) do={
     $LogPrint warning $ScriptName ("The CAPsMAN package path is not defined, can not download packages.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -44,6 +47,7 @@
     :if ([ $MkDir $PackagePath ] = false) do={
       $LogPrint warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
         $PackagePath . ") failed!");
+      :set ExitOK true;
       :error false;
     }
     $LogPrint info $ScriptName ("Created directory at CAPsMAN package path (" . $PackagePath . \
@@ -93,4 +97,6 @@
       /interface/wifi/capsman/remote-cap/upgrade [ find where version!=$InstalledVersion ];
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 056136f2..74a5d9dd 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -25,6 +26,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -35,6 +37,7 @@
 
   :if ([ :len $PackagePath ] = 0) do={
     $LogPrint warning $ScriptName ("The CAPsMAN package path is not defined, can not download packages.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -42,6 +45,7 @@
     :if ([ $MkDir $PackagePath ] = false) do={
       $LogPrint warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
         $PackagePath . ") failed!");
+      :set ExitOK true;
       :error false;
     }
     $LogPrint info $ScriptName ("Created directory at CAPsMAN package path (" . $PackagePath . \
@@ -84,4 +88,6 @@
       /interface/wifi/capsman/remote-cap/upgrade [ find where version!=$InstalledVersion ];
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 172d43288e2117f2a687df6168d2d461e780a8c3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:51 +0100
Subject: [PATCH 301/988] capsman-rolling-upgrade: use $ExitError to indicate
 unintentional error

---
 capsman-rolling-upgrade.capsman.rsc  | 6 +++++-
 capsman-rolling-upgrade.template.rsc | 6 +++++-
 capsman-rolling-upgrade.wifi.rsc     | 6 +++++-
 3 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index f287ea3c..d0f9fb88 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -15,6 +15,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -22,6 +23,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -43,4 +45,6 @@
       :delay ($Delay . "s");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index 3d987475..1bd5f2a5 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -16,6 +16,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -23,6 +24,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -51,4 +53,6 @@
       :delay ($Delay . "s");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 369dccc0..c9e6622c 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -15,6 +15,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -22,6 +23,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -44,4 +46,6 @@
       :delay ($Delay . "s");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From dc7642c1fd3c3029e3993d9ff73b7743ec8e0ea8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:51 +0100
Subject: [PATCH 302/988] certificate-renew-issued: use $ExitError to indicate
 unintentional error

---
 certificate-renew-issued.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index f2c1dfec..ce61f7d3 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -21,6 +22,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -45,4 +47,6 @@
       $LogPrint info $ScriptName ("Issued a new certificate for '" . $CertVal->"common-name" . "'.");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 00487f93d48e5e7547281808225d108eeeae586f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:51 +0100
Subject: [PATCH 303/988] check-certificates: use $ExitError to indicate
 unintentional error

---
 check-certificates.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 7aaac84f..52cfc5ea 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -133,6 +134,7 @@
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -218,4 +220,6 @@
           ", it is invalid after " . ($CertVal->"invalid-after") . ".");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 451df78dd8371288413fd45064141b6063e36187 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:51 +0100
Subject: [PATCH 304/988] check-health: use $ExitError to indicate
 unintentional error

---
 check-health.rsc | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/check-health.rsc b/check-health.rsc
index 540336dc..495b4500 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -40,6 +41,7 @@
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -78,6 +80,7 @@
 
   :if ([ :len [ /system/health/find ] ] = 0) do={
     $LogPrint debug $ScriptName ("Your device does not provide any health values.");
+    :set ExitOK true;
     :error true;
   }
 
@@ -175,4 +178,6 @@
     }
     :set ($CheckHealthLast->$Name) $Value;
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 91c8d306558c056792ff8132caa77fdf0bda059a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:51 +0100
Subject: [PATCH 305/988] check-lte-firmware-upgrade: use $ExitError to
 indicate unintentional error

---
 check-lte-firmware-upgrade.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index 2e52c2a7..898d6f18 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -19,6 +20,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -100,4 +102,6 @@
   :foreach Interface in=[ /interface/lte/find ] do={
     $CheckInterface $ScriptName $Interface;
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 9d17beef03ace2d75c9e2f9f98fa297707c9e0e3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:51 +0100
Subject: [PATCH 306/988] check-routeros-update: use $ExitError to indicate
 unintentional error

---
 check-routeros-update.rsc | 27 +++++++++++++++++++++++++--
 1 file changed, 25 insertions(+), 2 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 06248088..510acd98 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -34,20 +35,24 @@
   :global WaitFullyConnected;
 
   :local DoUpdate do={
+    :global LogPrint;
+
     :if ([ :len [ /system/script/find where name="packages-update" ] ] > 0) do={
       /system/script/run packages-update;
     } else={
       /system/package/update/install without-paging;
     }
-    :error "Waiting for system to reboot.";
+    $LogPrint info $0 ("Waiting for system to reboot.");
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
 
   :if ([ :len [ /system/scheduler/find where name="_RebootForUpdate" ] ] > 0) do={
+    :set ExitOK true;
     :error "A reboot for update is already scheduled.";
   }
 
@@ -59,11 +64,13 @@
     :if ([ $ScriptFromTerminal $ScriptName ] = true) do={
       $LogPrint info $ScriptName ("System is already up to date.");
     }
+    :set ExitOK true;
     :error true;
   }
 
   :if ([ :len ($Update->"latest-version") ] = 0) do={
     $LogPrint info $ScriptName ("Received an empty version string from server.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -76,6 +83,7 @@
 
   :if ($NumLatest < [ $VersionToNum "7.0" ]) do={
     $LogPrint warning $ScriptName ("The version '" . ($Update->"latest-version") . "' is not a valid version.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -88,6 +96,8 @@
         message=("Installing ALL versions automatically, including " . $Update->"latest-version" . \
           "... Updating on " . $Identity . "..."); link=$Link; silent=true });
       $DoUpdate;
+      :set ExitOK true;
+      :error true;
     }
 
     :if ($SafeUpdatePatch = true && $NumInstalledFeature = $NumLatestFeature) do={
@@ -97,6 +107,8 @@
         message=("Version " . $Update->"latest-version" . " is a patch update for " . $Update->"channel" . \
           ", updating on " . $Identity . "..."); link=$Link; silent=true });
       $DoUpdate;
+      :set ExitOK true;
+      :error true;
     }
 
     :if ($SafeUpdateNeighbor = true) do={
@@ -111,6 +123,8 @@
           message=("Seen a neighbor (" . $Neighbor . ") running version " . $Update->"latest-version" . \
             " from " . $Update->"channel" . ", updating on " . $Identity . "..."); link=$Link; silent=true });
         $DoUpdate;
+        :set ExitOK true;
+        :error true;
       }
     }
 
@@ -131,6 +145,8 @@
           message=("Version " . $Update->"latest-version" . " is considered safe for " . $Update->"channel" . \
             ", updating on " . $Identity . "..."); link=$Link; silent=true });
         $DoUpdate;
+        :set ExitOK true;
+        :error true;
       }
     }
 
@@ -140,6 +156,7 @@
         :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
           /system/package/update/set channel=stable;
           $LogPrint info $ScriptName ("Switched to channel 'stable', please re-run!");
+          :set ExitOK true;
           :error true;
         }
       }
@@ -147,6 +164,8 @@
       :put ("Do you want to install RouterOS version " . $Update->"latest-version" . "? [y/N]");
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
         $DoUpdate;
+        :set ExitOK true;
+        :error true;
       } else={
         :put "Canceled...";
       }
@@ -155,6 +174,7 @@
     :if ($SentRouterosUpdateNotification = $Update->"latest-version") do={
       $LogPrint info $ScriptName ("Already sent the RouterOS update notification for version " . \
           $Update->"latest-version" . ".");
+      :set ExitOK true;
       :error true;
     }
 
@@ -170,6 +190,7 @@
     :if ($SentRouterosUpdateNotification = $Update->"latest-version") do={
       $LogPrint info $ScriptName ("Already sent the RouterOS downgrade notification for version " . \
           $Update->"latest-version" . ".");
+      :set ExitOK true;
       :error true;
     }
 
@@ -182,4 +203,6 @@
       " is available for downgrade.");
     :set SentRouterosUpdateNotification ($Update->"latest-version");
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From bf322781d17629c3254520766ae540fb3ae846be Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:51 +0100
Subject: [PATCH 307/988] collect-wireless-mac: use $ExitError to indicate
 unintentional error

---
 collect-wireless-mac.capsman.rsc  | 6 +++++-
 collect-wireless-mac.local.rsc    | 6 +++++-
 collect-wireless-mac.template.rsc | 6 +++++-
 collect-wireless-mac.wifi.rsc     | 6 +++++-
 4 files changed, 20 insertions(+), 4 deletions(-)

diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index 9efa9ef5..77fd6e30 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -29,6 +30,7 @@
   :global SymbolForNotification;
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -93,4 +95,6 @@
       $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index 27c9d1cb..dc7be192 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -29,6 +30,7 @@
   :global SymbolForNotification;
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -94,4 +96,6 @@
       $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index d41c17d7..34b1695d 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -15,6 +15,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -30,6 +31,7 @@
   :global SymbolForNotification;
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -111,4 +113,6 @@
       $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index 00753203..23c93b0e 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -29,6 +30,7 @@
   :global SymbolForNotification;
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -93,4 +95,6 @@
       $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From f9a6916827b3954637f52ac726d937e04a471e3e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:51 +0100
Subject: [PATCH 308/988] daily-psk.capsman: use $ExitError to indicate
 unintentional error

---
 daily-psk.capsman.rsc  | 6 +++++-
 daily-psk.local.rsc    | 6 +++++-
 daily-psk.template.rsc | 6 +++++-
 daily-psk.wifi.rsc     | 6 +++++-
 4 files changed, 20 insertions(+), 4 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 0562e399..263f6e5e 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -31,6 +32,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -89,4 +91,6 @@
       }
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 0bef0e9c..f0757e16 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -31,6 +32,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -88,4 +90,6 @@
       }
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 9d71958e..7e36b5a0 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -15,6 +15,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -32,6 +33,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -104,4 +106,6 @@
       }
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 83a896ce..293f0e42 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -31,6 +32,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -89,4 +91,6 @@
       }
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 87cde2cc2fe8604457f9fd4826abac1409d88a0d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 309/988] dhcp-lease-comment: use $ExitError to indicate
 unintentional error

---
 dhcp-lease-comment.capsman.rsc  | 6 +++++-
 dhcp-lease-comment.local.rsc    | 6 +++++-
 dhcp-lease-comment.template.rsc | 6 +++++-
 dhcp-lease-comment.wifi.rsc     | 6 +++++-
 4 files changed, 20 insertions(+), 4 deletions(-)

diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index c435ec32..5ac0009d 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -21,6 +22,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -36,4 +38,6 @@
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index 27e6605d..1b74d932 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -21,6 +22,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -36,4 +38,6 @@
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index c562ca29..8f1ad470 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -15,6 +15,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -22,6 +23,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -41,4 +43,6 @@
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index ba617d71..d3741c5e 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -21,6 +22,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -36,4 +38,6 @@
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From c8d423c7d59a9051914d5dd676bcd997d7e9854b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 310/988] dhcp-to-dns: use $ExitError to indicate unintentional
 error

---
 dhcp-to-dns.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index 9bf506fc..ad55c4d0 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -12,6 +12,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -27,6 +28,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -123,4 +125,6 @@
       $LogPrint debug $ScriptName ("No address available... Ignoring.");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 590030d391d523bc555c192c5f84f9cdb6504abd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 311/988] firmware-upgrade-reboot: use $ExitError to indicate
 unintentional error

---
 firmware-upgrade-reboot.rsc | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index 74847acb..96559032 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -19,6 +20,7 @@
   :global VersionToNum;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -26,10 +28,12 @@
   :if ($RouterBoard->"current-firmware" = $RouterBoard->"upgrade-firmware") do={
     $LogPrint info $ScriptName ("Current and upgrade firmware match with version " . \
       $RouterBoard->"current-firmware" . ".");
+    :set ExitOK true;
     :error true;
   }
   :if ([ $VersionToNum ($RouterBoard->"current-firmware") ] > [ $VersionToNum ($RouterBoard->"upgrade-firmware") ]) do={
     $LogPrint info $ScriptName ("Different firmware version is available, but it is a downgrade. Ignoring.");
+    :set ExitOK true;
     :error true;
   }
 
@@ -51,4 +55,6 @@
 
   $LogPrint info $ScriptName ("Firmware upgrade successful, rebooting.");
   /system/reboot;
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 923a6385bf8fcb770a70650318d96f0571d7297e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 312/988] fw-addr-lists: use $ExitError to indicate
 unintentional error

---
 fw-addr-lists.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 34b2fcce..6682f4ab 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -36,6 +37,7 @@
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -184,4 +186,6 @@
         " - renewed: " . [ $HumanReadableNum $CntRenew 1000 ] . \
         " - removed: " . [ $HumanReadableNum $CntRemove 1000 ]);
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 90cfa83d95baf440544a331fd60f9903afa1fead Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 313/988] gps-track: use $ExitError to indicate unintentional
 error

---
 gps-track.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/gps-track.rsc b/gps-track.rsc
index a2ea9fff..c0ecac49 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -23,6 +24,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
   $WaitFullyConnected;
@@ -45,4 +47,6 @@
   } else={
     $LogPrint debug $ScriptName ("GPS data not valid.");
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From f7b96aa3e93f98b7a8dd076e34b7c302fe436f50 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 314/988] hotspot-to-wpa-cleanup: use $ExitError to indicate
 unintentional error

---
 hotspot-to-wpa-cleanup.capsman.rsc  | 6 +++++-
 hotspot-to-wpa-cleanup.template.rsc | 6 +++++-
 hotspot-to-wpa-cleanup.wifi.rsc     | 6 +++++-
 3 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index e9358502..8a38213f 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -23,6 +24,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -72,4 +74,6 @@
       /ip/dhcp-server/lease/remove $Lease;
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index fa99b5df..e8d2dfbb 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -15,6 +15,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -24,6 +25,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -79,4 +81,6 @@
       /ip/dhcp-server/lease/remove $Lease;
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index d3f859ed..e2ef1fda 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -23,6 +24,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -72,4 +74,6 @@
       /ip/dhcp-server/lease/remove $Lease;
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From ff00c27f990b851b9d14f708aecae6087fedc011 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:55:12 +0100
Subject: [PATCH 315/988] global-functions: $ExitError: give matching message
 for functions

---
 global-functions.rsc | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 8941994e..6c74c2fd 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -428,13 +428,15 @@
 
 # simple macro to print error message on unintentional error
 :set ExitError do={
-  :local ExitOK     [ :tostr $1 ];
-  :local ScriptName [ :tostr $2 ];
+  :local ExitOK [ :tostr $1 ];
+  :local Name   [ :tostr $2 ];
 
+  :global IfThenElse;
   :global LogPrint; 
 
   :if ($ExitOK = "false") do={
-    $LogPrint error $ScriptName ("Script '" . $ScriptName . "' exited with error.");
+    $LogPrint error $Name ([ $IfThenElse ([ :pick $Name 0 1 ] = "\$") \
+        "Function" "Script" ] . " '" . $Name . "' exited with error.");
   }
 }
 

From 8e12453058ae848a6d61c104ab6aa22902205d98 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 316/988] hotspot-to-wpa: use $ExitError to indicate
 unintentional error

---
 hotspot-to-wpa.capsman.rsc  | 8 +++++++-
 hotspot-to-wpa.template.rsc | 8 +++++++-
 hotspot-to-wpa.wifi.rsc     | 8 +++++++-
 3 files changed, 21 insertions(+), 3 deletions(-)

diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index b85c5911..e57d3275 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -13,6 +13,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -25,11 +26,13 @@
   :local UserName $username;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ :typeof $MacAddress ] = "nothing" || [ :typeof $UserName ] = "nothing") do={
     $LogPrint error $ScriptName ("This script is supposed to run from hotspot on login.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -57,6 +60,7 @@
 
   :if ($Template->"action" = "reject") do={
     $LogPrint info $ScriptName ("Ignoring login for hotspot '" . $Hotspot . "'.");
+    :set ExitOK true;
     :error true;
   }
 
@@ -95,4 +99,6 @@
 
   :delay 2s;
   /caps-man/access-list/set $Entry action=accept;
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index 44607cc1..efe37d0c 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -14,6 +14,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -26,11 +27,13 @@
   :local UserName $username;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ :typeof $MacAddress ] = "nothing" || [ :typeof $UserName ] = "nothing") do={
     $LogPrint error $ScriptName ("This script is supposed to run from hotspot on login.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -64,6 +67,7 @@
 
   :if ($Template->"action" = "reject") do={
     $LogPrint info $ScriptName ("Ignoring login for hotspot '" . $Hotspot . "'.");
+    :set ExitOK true;
     :error true;
   }
 
@@ -115,4 +119,6 @@
   :delay 2s;
   /caps-man/access-list/set $Entry action=accept;
   /interface/wifi/access-list/set $Entry action=accept;
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index 25933c63..6242d047 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -13,6 +13,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -25,11 +26,13 @@
   :local UserName $username;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ :typeof $MacAddress ] = "nothing" || [ :typeof $UserName ] = "nothing") do={
     $LogPrint error $ScriptName ("This script is supposed to run from hotspot on login.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -57,6 +60,7 @@
 
   :if ($Template->"action" = "reject") do={
     $LogPrint info $ScriptName ("Ignoring login for hotspot '" . $Hotspot . "'.");
+    :set ExitOK true;
     :error true;
   }
 
@@ -92,4 +96,6 @@
 
   :delay 2s;
   /interface/wifi/access-list/set $Entry action=accept;
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 8c5bd8f5e2a5943e720e6086c1aec74ddb81eaf1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:02:04 +0100
Subject: [PATCH 317/988] global-functions: $ScriptInstallUpdate: use
 $ExitError to indicate unintentional error

---
 global-functions.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 6c74c2fd..743c50e4 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1018,7 +1018,7 @@
 }
 
 # install new scripts, update existing scripts
-:set ScriptInstallUpdate do={
+:set ScriptInstallUpdate do={ :do {
   :local Scripts    [ :toarray $1 ];
   :local NewComment [ :tostr   $2 ];
 
@@ -1237,7 +1237,9 @@
     :set GlobalConfigChanges;
     :set GlobalConfigMigration;
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # lock script against multiple invocation
 :set ScriptLock do={

From a6fd6bd80cf827a417549c5d433630efcbf1b8b6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 318/988] ipsec-to-dns: use $ExitError to indicate
 unintentional error

---
 ipsec-to-dns.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index bd74a8f8..47676cac 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -26,6 +27,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -76,4 +78,6 @@
       /ip/dns/static/add name=$Fqdn address=($PeerVal->"dynamic-address") ttl=$Ttl comment=$Comment place-before=$PlaceBefore;
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 5b9031ccca75e7e1ba8479af1ae180ae8422ac74 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 11:06:38 +0100
Subject: [PATCH 319/988] global-functions: $SendNotification: use $ExitError
 to indicate unintentional error

---
 global-functions.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 743c50e4..625f8cdd 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1374,11 +1374,13 @@
 }
 
 # send notification via NotificationFunctions - expects at least two string arguments
-:set SendNotification do={
+:set SendNotification do={ :do {
   :global SendNotification2;
 
   $SendNotification2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # send notification via NotificationFunctions - expects one array argument
 :set SendNotification2 do={

From 82de8bd935c5a2ccdaf3bfb9db732bdec0ce7d96 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 320/988] ipv6-update: use $ExitError to indicate unintentional
 error

---
 ipv6-update.rsc | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index ccc0eb95..ea1d4445 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -22,16 +23,19 @@
   :local PdPrefix $"pd-prefix";
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ :typeof $NaAddress ] = "str") do={
     $LogPrint info $ScriptName ("An address (" . $NaAddress . ") was acquired, not a prefix. Ignoring.");
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ :typeof $PdPrefix ] = "nothing") do={
     $LogPrint error $ScriptName ("This script is supposed to run from ipv6 dhcp-client.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -90,4 +94,6 @@
       }
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 1fe90a6e9aeaba7350f13f52cc9a196a0bc8ca1c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:03:41 +0100
Subject: [PATCH 321/988] mode-button: $ModeButtonScheduler: use $ExitError to
 indicate unintentional error

---
 mode-button.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index 2d428ed2..90fe80e6 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -25,7 +25,7 @@
 
   :if ([ :len $Scheduler ] = 0) do={
     $LogPrint info $ScriptName ("Creating scheduler _ModeButtonScheduler, counting presses...");
-    :global ModeButtonScheduler do={
+    :global ModeButtonScheduler do={ :do {
       :local FuncName $0;
 
       :global ModeButton;
@@ -81,7 +81,9 @@
       } else={
         $LogPrint info $FuncName ("No action defined for " . $Count . " mode-button presses.");
       }
-    }
+    } on-error={
+      :global ExitError; $ExitError false $0;
+    } }
     /system/scheduler/add name="_ModeButtonScheduler" \
         on-event=":global ModeButtonScheduler; \$ModeButtonScheduler;" interval=3s;
   } else={

From 177a1e798a09115ecc9241f5f39065a2583bcfac Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 322/988] lease-script: use $ExitError to indicate
 unintentional error

---
 lease-script.rsc | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/lease-script.rsc b/lease-script.rsc
index f484414f..995c7e4b 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -25,6 +26,7 @@
        [ :typeof $leaseServerName ] = "nothing" || \
        [ :typeof $leaseBound ] = "nothing") do={
     $LogPrint error $ScriptName ("This script is supposed to run from ip dhcp-server.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -32,11 +34,13 @@
     "de" "" ] . "assigned lease " . $leaseActIP . " to " . $leaseActMAC);
 
   :if ([ $ScriptLock $ScriptName 10 ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ :len [ /system/script/job/find where script=$ScriptName ] ] > 1) do={
     $LogPrint debug $ScriptName ("More invocations are waiting, exiting early.");
+    :set ExitOK true;
     :error true;
   }
 
@@ -56,4 +60,6 @@
       $LogPrint warning $ScriptName ("Running script '" . $Script . "' failed!");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 5db686a15ccd21ed3a190cd4c9eea0bcc6e56abd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:09:05 +0100
Subject: [PATCH 323/988] mod/bridge-port-to: $BridgePortTo: use $ExitError to
 indicate unintentional error

---
 mod/bridge-port-to.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index 7dae6797..9e7b9114 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -10,7 +10,7 @@
 
 :global BridgePortTo;
 
-:set BridgePortTo do={
+:set BridgePortTo do={ :do {
   :local BridgePortTo [ :tostr $1 ];
 
   :global IfThenElse;
@@ -65,4 +65,6 @@
     $LogPrint info $0 ("Re-enabling interfaces...");
     /interface/ethernet/enable $InterfaceReEnable;
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }

From da7a031081bcbb4c563bb8b56f7ee150c32b54c0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 324/988] log-forward: use $ExitError to indicate unintentional
 error

---
 log-forward.rsc | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/log-forward.rsc b/log-forward.rsc
index e0d8f359..8e660fc4 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -33,6 +34,7 @@
   :global SymbolForNotification;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -43,6 +45,7 @@
   :if ($LogForwardRateLimit > 30) do={
     :set LogForwardRateLimit ($LogForwardRateLimit - 1);
     $LogPrint info $ScriptName ("Rate limit in action, not forwarding logs, if any!");
+    :set ExitOK true;
     :error false;
   }
 
@@ -100,4 +103,6 @@
 
   :local LogAll [ /log/find ];
   :set LogForwardLast ($LogAll->([ :len $LogAll ] - 1) );
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 495232b299bafadc4d21551f094c3c42fa090f57 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:09:48 +0100
Subject: [PATCH 325/988] mod/bridge-port-vlan: $BridgePortVlan: use $ExitError
 to indicate unintentional error

---
 mod/bridge-port-vlan.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index c9f55ae2..18fa2db0 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -10,7 +10,7 @@
 
 :global BridgePortVlan;
 
-:global BridgePortVlan do={
+:global BridgePortVlan do={ :do {
   :local ConfigTo [ :tostr $1 ];
 
   :global IfThenElse;
@@ -74,4 +74,6 @@
     $LogPrint info $0 ("Re-enabling interfaces...");
     /interface/ethernet/enable $InterfaceReEnable;
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }

From b7ce6aee71733a1e84b911a21c8868b8d2279c10 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 326/988] mode-button: use $ExitError to indicate unintentional
 error

---
 mode-button.rsc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index 3bd922b9..24de4532 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -83,4 +84,6 @@
     $LogPrint debug $ScriptName ("Updating scheduler _ModeButtonScheduler...");
     /system/scheduler/set $Scheduler start-time=[ /system/clock/get time ];
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 05cb87f475ffc3f9fdc1fa6988925e79a3dacd38 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:10:08 +0100
Subject: [PATCH 327/988] mod/inspectvar: $InspectVar: use $ExitError to
 indicate unintentional error

---
 mod/inspectvar.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index 73205b25..0209214e 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -12,11 +12,13 @@
 :global InspectVarReturn;
 
 # inspect variable and print on terminal
-:set InspectVar do={
+:set InspectVar do={ :do {
   :global InspectVarReturn;
 
   :put [ :tocrlf [ $InspectVarReturn $1 ] ];
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # inspect variable and return formatted string
 :set InspectVarReturn do={

From d89a3694850a76e487b139eebf24572344a5502e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:08:36 +0100
Subject: [PATCH 328/988] netwatch-dns: use $ExitError to indicate
 unintentional error

---
 netwatch-dns.rsc | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 6fbfc895..a704c847 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -24,12 +25,14 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
   :local SettleTime (5m30s - [ /system/resource/get uptime ]);
   :if ($SettleTime > 0s) do={
     $LogPrint info $ScriptName ("System just booted, giving netwatch " . $SettleTime . " to settle.");
+    :set ExitOK true;
     :error true;
   }
 
@@ -92,6 +95,7 @@
 
       :if ($DohCurrent = $HostInfo->"doh-url") do={
         $LogPrint debug $ScriptName ("Current DoH server is still up: " . $DohCurrent);
+        :set ExitOK true;
         :error true;
       }
 
@@ -132,6 +136,7 @@
         }
         /ip/dns/cache/flush;
         $LogPrint info $ScriptName ("Setting DoH server: " . ($DohServer->"doh-url"));
+        :set ExitOK true;
         :error true;
       } else={
         $LogPrint warning $ScriptName ("Received unexpected response from DoH server: " . \
@@ -139,4 +144,6 @@
       }
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 34172e4c78cc5a6d0fe99df279e42a8794f84c94 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:10:27 +0100
Subject: [PATCH 329/988] mod/ipcalc: $IPCalc: use $ExitError to indicate
 unintentional error

---
 mod/ipcalc.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index 003bdc36..021cd306 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -12,7 +12,7 @@
 :global IPCalcReturn;
 
 # print netmask, network, min host, max host and broadcast
-:set IPCalc do={
+:set IPCalc do={ :do {
   :local Input [ :tostr $1 ];
 
   :global FormatLine;
@@ -27,7 +27,9 @@
     [ $FormatLine "HostMin" ($Values->"hostmin") ] . "\n" . \
     [ $FormatLine "HostMax" ($Values->"hostmax") ] . "\n" . \
     [ $FormatLine "Broadcast" ($Values->"broadcast") ]) ];
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # calculate and return netmask, network, min host, max host and broadcast
 :set IPCalcReturn do={

From bdc15eaefb51b40b3d414f0e94bfa22233b0f2a4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 330/988] netwatch-notify: use $ExitError to indicate
 unintentional error

---
 netwatch-notify.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index a49d0cde..f1e87bd4 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -75,6 +76,7 @@
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -218,4 +220,6 @@
         "since"=($Metric->"since") };
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 5450618723dabf9d42857047ea906c9fc87886dd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 08:51:50 +0100
Subject: [PATCH 331/988] mod/notification-email: $FlushEmailQueue: use
 $ExitError to indicate unintentional error

---
 mod/notification-email.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 3d62ddfb..ff4188c7 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -34,7 +34,7 @@
 }
 
 # flush e-mail queue
-:set FlushEmailQueue do={
+:set FlushEmailQueue do={ :do {
   :global EmailQueue;
 
   :global EitherOr;
@@ -113,7 +113,9 @@
   } else={
     /system/scheduler/set interval=1m comment="Waiting for retry..." $Scheduler;
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # generate filter for log-forward
 :set LogForwardFilterLogForwarding do={

From eeb76c227cbc04c410e7062daef4cda9cb3d5bf3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 332/988] ospf-to-leds: use $ExitError to indicate
 unintentional error

---
 ospf-to-leds.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index b78faa4a..d96e7636 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -19,6 +20,7 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -42,4 +44,6 @@
       /system/leds/set type=off [ find where leds=$LED ];
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 1927dc505a88ef5ecb86d1d925cf44a5225b4b7c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 11:09:44 +0100
Subject: [PATCH 333/988] mod/notification-email: $SendEMail: use $ExitError to
 indicate unintentional error

---
 mod/notification-email.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index ff4188c7..e51779bf 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -226,11 +226,13 @@
 }
 
 # send notification via e-mail - expects at least two string arguments
-:set SendEMail do={
+:set SendEMail do={ :do {
   :global SendEMail2;
 
   $SendEMail2 ({ origin=$0; subject=$1; message=$2; link=$3 });
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # send notification via e-mail - expects one array argument
 :set SendEMail2 do={

From 81f59f9894cfd9b29a2366e8a13e124b358dadde Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 334/988] packages-update: use $ExitError to indicate
 unintentional error

---
 packages-update.rsc | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index b08a48d2..924a5d96 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -45,6 +46,7 @@
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -52,11 +54,13 @@
 
   :if ([ :typeof ($Update->"latest-version") ] = "nothing") do={
     $LogPrint warning $ScriptName ("Latest version is not known.");
+    :set ExitOK true;
     :error false;
   }
 
   :if ($Update->"installed-version" = $Update->"latest-version") do={
     $LogPrint info $ScriptName ("Version " . $Update->"latest-version" . " is already installed.");
+    :set ExitOK true;
     :error true;
   }
 
@@ -85,10 +89,12 @@
           $LogPrint info $ScriptName ("User requested to continue anyway.");
         } else={
           $LogPrint info $ScriptName ("Canceled update...");
+          :set ExitOK true;
           :error false;
         }
       } else={
         $LogPrint warning $ScriptName ("Canceled non-interactive update.");
+        :set ExitOK true;
         :error false;
       }
     }
@@ -108,6 +114,7 @@
       }
     } else={
       $LogPrint warning $ScriptName ("Not installing downgrade automatically.");
+      :set ExitOK true;
       :error false;
     }
   }
@@ -116,6 +123,7 @@
     :local PkgName [ /system/package/get $Package name ];
     :if ([ $DownloadPackage $PkgName ($Update->"latest-version") ] = false) do={
       $LogPrint error $ScriptName ("Download for package " . $PkgName . " failed, update aborted.");
+      :set ExitOK true;
       :error false;
     }
   }
@@ -130,11 +138,13 @@
     :put "Do you want to (s)chedule reboot or (r)eboot now? [s/R]";
     :if (([ /terminal/inkey timeout=60 ] % 32) = 19) do={
       $Schedule $ScriptName;
+      :set ExitOK true;
       :error true;
     }
   } else={
     :if ($PackagesUpdateDeferReboot = true) do={
       $Schedule $ScriptName;
+      :set ExitOK true;
       :error true;
     }
   }
@@ -142,4 +152,6 @@
   $LogPrint info $ScriptName ("Rebooting for update.");
   :delay 1s;
   /system/reboot;
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 1994b23e462c02ee71d5cb9db21d0e6075010c3c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 08:56:35 +0100
Subject: [PATCH 335/988] mod/notification-matrix: $FlushMatrixQueue: use
 $ExitError to indicate unintentional error

---
 mod/notification-matrix.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 3adc1dfa..751967ca 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -18,7 +18,7 @@
 :global SetupMatrixJoinRoom;
 
 # flush Matrix queue
-:set FlushMatrixQueue do={
+:set FlushMatrixQueue do={ :do {
   :global MatrixQueue;
 
   :global IsFullyConnected;
@@ -57,7 +57,9 @@
     /system/scheduler/remove [ find where name="_FlushMatrixQueue" ];
     :set MatrixQueue;
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # send notification via Matrix - expects one array argument
 :set ($NotificationFunctions->"matrix") do={

From be0548007184bae80dd40b4a6390ababeeb39617 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 336/988] ppp-on-up: use $ExitError to indicate unintentional
 error

---
 ppp-on-up.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index 337b32da..13b42c71 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -20,6 +21,7 @@
 
   :if ([ :typeof $Interface ] = "nothing") do={
     $LogPrint error $ScriptName ("This script is supposed to run from ppp on-up script hook.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -37,4 +39,6 @@
       $LogPrint warning $ScriptName ("Running script '" . $ScriptName . "' failed!");
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From de9dee83bea855a893594e0d58ca609872f75072 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 11:10:03 +0100
Subject: [PATCH 337/988] mod/notification-matrix: $SendMatrix: use $ExitError
 to indicate unintentional error

---
 mod/notification-matrix.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 751967ca..14f369d2 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -166,11 +166,13 @@
 }
 
 # send notification via Matrix - expects at least two string arguments
-:set SendMatrix do={
+:set SendMatrix do={ :do {
   :global SendMatrix2;
 
   $SendMatrix2 ({ origin=$0; subject=$1; message=$2; link=$3 });
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # send notification via Matrix - expects one array argument
 :set SendMatrix2 do={

From ede351f47e8311fe00bada723e69ab90dc1332d0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 338/988] sms-action: use $ExitError to indicate unintentional
 error

---
 sms-action.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/sms-action.rsc b/sms-action.rsc
index c8966595..fd3096c1 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -23,6 +24,7 @@
 
   :if ([ :typeof $Action ] = "nothing") do={
     $LogPrint error $ScriptName ("This script is supposed to run from SMS hook with action=...");
+    :set ExitOK true;
     :error false;
   }
 
@@ -34,4 +36,6 @@
   } else={
     $LogPrint warning $ScriptName ("The code for action '" . $Action . "' failed syntax validation!");
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From aac723e2a1eede3649c5f3b4bbe67af0e951063a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 08:57:01 +0100
Subject: [PATCH 339/988] mod/notification-ntfy: $FlushNtfyQueue: use
 $ExitError to indicate unintentional error

---
 mod/notification-ntfy.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index b2bb2800..5fdeedf5 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -15,7 +15,7 @@
 :global SendNtfy2;
 
 # flush ntfy queue
-:set FlushNtfyQueue do={
+:set FlushNtfyQueue do={ :do {
   :global NtfyQueue;
   :global NtfyMessageIDs;
 
@@ -52,7 +52,9 @@
     /system/scheduler/remove [ find where name="_FlushNtfyQueue" ];
     :set NtfyQueue;
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # send notification via ntfy - expects one array argument
 :set ($NotificationFunctions->"ntfy") do={

From a78fe98fd0746dd88429413d9c81123866d880bd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 340/988] sms-forward: use $ExitError to indicate unintentional
 error

---
 sms-forward.rsc | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index 0d493b65..8334d5fa 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -12,6 +12,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -28,11 +29,13 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ /tool/sms/get receive-enabled ] = false) do={
     $LogPrintOnce warning $ScriptName ("Receiving of SMS is not enabled.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -42,6 +45,7 @@
 
   :if ([ /interface/lte/get ($Settings->"port") running ] != true) do={
     $LogPrint info $ScriptName ("The LTE interface is not in running state, skipping.");
+    :set ExitOK true;
     :error true;
   }
 
@@ -92,4 +96,6 @@
       }
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From e76ae11b029169e971f7313b17d5c43589fa8170 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 11:10:24 +0100
Subject: [PATCH 341/988] mod/notification-ntfy: $SendNtfy: use $ExitError to
 indicate unintentional error

---
 mod/notification-ntfy.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 5fdeedf5..7e0234bf 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -134,11 +134,13 @@
 }
 
 # send notification via ntfy - expects at least two string arguments
-:set SendNtfy do={
+:set SendNtfy do={ :do {
   :global SendNtfy2;
 
   $SendNtfy2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # send notification via ntfy - expects one array argument
 :set SendNtfy2 do={

From adbefca0e48bda15d90cc53c52c3982230f8864c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 342/988] telegram-chat: use $ExitError to indicate
 unintentional error

---
 telegram-chat.rsc | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index f2750f5f..8589aab7 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -11,6 +11,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -43,6 +44,7 @@
   :global WaitFullyConnected;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -57,6 +59,7 @@
 
   :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
     $LogPrint warning $ScriptName ("Downloading required certificate failed.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -82,6 +85,7 @@
 
   :if ($Data = false) do={
     $LogPrint warning $ScriptName ("Failed getting updates.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -130,6 +134,7 @@
             :local File ("tmpfs/telegram-chat/" . [ $GetRandom20CharAlNum 6 ]);
             :if ([ $MkDir "tmpfs/telegram-chat" ] = false) do={
               $LogPrint error $ScriptName ("Failed creating directory!");
+              :set ExitOK true;
               :error false;
             }
             $LogPrint info $ScriptName ("Running command from update " . $UpdateID . ": " . $Command);
@@ -176,4 +181,6 @@
   }
   :set TelegramChatOffset ([ :pick $TelegramChatOffset 1 3 ], \
     [ $IfThenElse ($UpdateID >= $TelegramChatOffset->2) ($UpdateID + 1) ($TelegramChatOffset->2) ]);
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From e89867be1533cd561bf61b65f3019946e2ceeee1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 08:57:20 +0100
Subject: [PATCH 343/988] mod/notification-telegram: $FlushTelegramQueue: use
 $ExitError to indicate unintentional error

---
 mod/notification-telegram.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 671bd1c4..993782d1 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -15,7 +15,7 @@
 :global SendTelegram2;
 
 # flush telegram queue
-:set FlushTelegramQueue do={
+:set FlushTelegramQueue do={ :do {
   :global TelegramQueue;
   :global TelegramMessageIDs;
 
@@ -56,7 +56,9 @@
     /system/scheduler/remove [ find where name="_FlushTelegramQueue" ];
     :set TelegramQueue;
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # send notification via telegram - expects one array argument
 :set ($NotificationFunctions->"telegram") do={

From d4ea0e18a710c5a68c7dabaa5c1c5a40568c965b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 344/988] update-gre-address: use $ExitError to indicate
 unintentional error

---
 update-gre-address.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 6dd829d8..87762d6a 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -12,6 +12,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -20,6 +21,7 @@
   :global ScriptLock; 
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
@@ -39,4 +41,6 @@
       }
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 4968b79fc1142c9bfdbfe93c8f917cfdd7f51790 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 11:10:43 +0100
Subject: [PATCH 345/988] mod/notification-telegram: $SendTelegram: use
 $ExitError to indicate unintentional error

---
 mod/notification-telegram.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 993782d1..7d75b8ba 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -182,11 +182,13 @@
 }
 
 # send notification via telegram - expects at least two string arguments
-:set SendTelegram do={
+:set SendTelegram do={ :do {
   :global SendTelegram2;
 
   $SendTelegram2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # send notification via telegram - expects one array argument
 :set SendTelegram2 do={

From ee030740cba5bd0c8b0c9c3e77551dd460abe48b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 6 Dec 2024 10:31:52 +0100
Subject: [PATCH 346/988] update-tunnelbroker: use $ExitError to indicate
 unintentional error

---
 update-tunnelbroker.rsc | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 67a5d30f..dd43c643 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -13,6 +13,7 @@
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
+:local ExitOK false;
 :do {
   :local ScriptName [ :jobname ];
 
@@ -22,11 +23,13 @@
   :global ScriptLock;
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
     :error false;
   }
 
   :if ([ $CertificateAvailable "Starfield Root Certificate Authority - G2" ] = false) do={
     $LogPrint error $ScriptName ("Downloading required certificate failed.");
+    :set ExitOK true;
     :error false;
   }
 
@@ -50,6 +53,7 @@
 
     :if (!($Data ~ "^(good|nochg) ")) do={
       $LogPrint error $ScriptName ("Failed sending the local address to tunnelbroker or unexpected response!");
+      :set ExitOK true;
       :error false;
     }
 
@@ -64,4 +68,6 @@
       /interface/6to4/set $Interface local-address=$PublicAddress;
     }
   }
-} on-error={ }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}

From 48bcf8ee6e92445b01f792f1c52af012ba05b7b4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:45:30 +0100
Subject: [PATCH 347/988] =?UTF-8?q?global-functions:=20$FetchHuge:=20passi?=
 =?UTF-8?q?ng=20boolean=20to=20function=20is=20still=20broken...=20?=
 =?UTF-8?q?=F0=9F=A4=A8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 global-functions.rsc | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 47a69c47..6fec6dd3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -427,9 +427,9 @@
 
 # fetch huge data to file, read in chunks
 :set FetchHuge do={
-  :local ScriptName [ :tostr  $1 ];
-  :local Url        [ :tostr  $2 ];
-  :local CheckCert  [ :tobool $3 ];
+  :local ScriptName [ :tostr $1 ];
+  :local Url        [ :tostr $2 ];
+  :local CheckCert  [ :tostr $3 ];
 
   :global CleanName;
   :global FetchUserAgentStr;
@@ -439,7 +439,7 @@
   :global MkDir;
   :global WaitForFile;
 
-  :set CheckCert [ $IfThenElse ($CheckCert = false) "no" "yes-without-crl" ];
+  :set CheckCert [ $IfThenElse ($CheckCert = "false") "no" "yes-without-crl" ];
 
   :local DirName ("tmpfs/" . [ $CleanName $ScriptName ]);
   :if ([ $MkDir $DirName ] = false) do={

From 73e0ac75f10019794a2692371ca08a46bea69eb9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:10:44 +0100
Subject: [PATCH 348/988] mod/scriptrunonce: $ScriptRunOnce: use $ExitError to
 indicate unintentional error

---
 mod/scriptrunonce.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 3d5dce9d..c8dcf26f 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -11,7 +11,7 @@
 :global ScriptRunOnce;
 
 # fetch and run script(s) once
-:set ScriptRunOnce do={
+:set ScriptRunOnce do={ :do {
   :local Scripts [ :toarray $1 ];
 
   :global ScriptRunOnceBaseUrl;
@@ -49,4 +49,6 @@
       }
     }
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }

From 1788c0599865ee9cb7e5015e260d7e4a49abf581 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:11:39 +0100
Subject: [PATCH 349/988] mod/ssh-keys-import: $SSHKeysImport: use $ExitError
 to indicate unintentional error

---
 mod/ssh-keys-import.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index c7b27885..b2f1d20f 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -12,7 +12,7 @@
 :global SSHKeysImportFile;
 
 # import single key passed as string
-:set SSHKeysImport do={
+:set SSHKeysImport do={ :do {
   :local Key  [ :tostr $1 ];
   :local User [ :tostr $2 ];
 
@@ -64,7 +64,9 @@
     /file/remove "tmpfs/ssh-keys-import";
     :return false;
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
 
 # import keys from a file
 :set SSHKeysImportFile do={

From f8a55860afaf8817e52cb89add227fa9a84435f0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 8 Dec 2024 22:19:01 +0100
Subject: [PATCH 350/988] check-routeros-update: pass script name to local
 function

---
 check-routeros-update.rsc | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 510acd98..a2e39b62 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -35,6 +35,8 @@
   :global WaitFullyConnected;
 
   :local DoUpdate do={
+    :local ScriptName [ :tostr $1 ];
+
     :global LogPrint;
 
     :if ([ :len [ /system/script/find where name="packages-update" ] ] > 0) do={
@@ -42,7 +44,7 @@
     } else={
       /system/package/update/install without-paging;
     }
-    $LogPrint info $0 ("Waiting for system to reboot.");
+    $LogPrint info $ScriptName ("Waiting for system to reboot.");
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -95,7 +97,7 @@
         subject=([ $SymbolForNotification "sparkles" ] . "RouterOS update: " . $Update->"latest-version"); \
         message=("Installing ALL versions automatically, including " . $Update->"latest-version" . \
           "... Updating on " . $Identity . "..."); link=$Link; silent=true });
-      $DoUpdate;
+      $DoUpdate $ScriptName;
       :set ExitOK true;
       :error true;
     }
@@ -106,7 +108,7 @@
         subject=([ $SymbolForNotification "sparkles" ] . "RouterOS update: " . $Update->"latest-version"); \
         message=("Version " . $Update->"latest-version" . " is a patch update for " . $Update->"channel" . \
           ", updating on " . $Identity . "..."); link=$Link; silent=true });
-      $DoUpdate;
+      $DoUpdate $ScriptName;
       :set ExitOK true;
       :error true;
     }
@@ -122,7 +124,7 @@
           subject=([ $SymbolForNotification "sparkles" ] . "RouterOS update: " . $Update->"latest-version"); \
           message=("Seen a neighbor (" . $Neighbor . ") running version " . $Update->"latest-version" . \
             " from " . $Update->"channel" . ", updating on " . $Identity . "..."); link=$Link; silent=true });
-        $DoUpdate;
+        $DoUpdate $ScriptName;
         :set ExitOK true;
         :error true;
       }
@@ -144,7 +146,7 @@
           subject=([ $SymbolForNotification "sparkles" ] . "RouterOS update: " . $Update->"latest-version"); \
           message=("Version " . $Update->"latest-version" . " is considered safe for " . $Update->"channel" . \
             ", updating on " . $Identity . "..."); link=$Link; silent=true });
-        $DoUpdate;
+        $DoUpdate $ScriptName;
         :set ExitOK true;
         :error true;
       }
@@ -163,7 +165,7 @@
 
       :put ("Do you want to install RouterOS version " . $Update->"latest-version" . "? [y/N]");
       :if (([ /terminal/inkey timeout=60 ] % 32) = 25) do={
-        $DoUpdate;
+        $DoUpdate $ScriptName;
         :set ExitOK true;
         :error true;
       } else={

From 210ef26b93364f4b69cde9ff34139d51572357ee Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 9 Dec 2024 09:11:56 +0100
Subject: [PATCH 351/988] mod/ssh-keys-import: $SSHKeysImportFile: use
 $ExitError to indicate unintentional error

---
 mod/ssh-keys-import.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index b2f1d20f..583e8270 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -69,7 +69,7 @@
 } }
 
 # import keys from a file
-:set SSHKeysImportFile do={
+:set SSHKeysImportFile do={ :do {
   :local FileName [ :tostr $1 ];
   :local User     [ :tostr $2 ];
 
@@ -108,4 +108,6 @@
       $LogPrint warning $0 ("SSH key of type '" . $KeyVal->0 . "' is not supported.");
     }
   }
-}
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }

From e51191035b21c529efb4387dfe59976c3112f561 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 8 Dec 2024 22:22:18 +0100
Subject: [PATCH 352/988] mode-button: $ModeButtonScheduler: explicitly name
 the variable

---
 mode-button.rsc | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index 24de4532..2d428ed2 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -26,6 +26,8 @@
   :if ([ :len $Scheduler ] = 0) do={
     $LogPrint info $ScriptName ("Creating scheduler _ModeButtonScheduler, counting presses...");
     :global ModeButtonScheduler do={
+      :local FuncName $0;
+
       :global ModeButton;
 
       :global LogPrint;
@@ -54,7 +56,7 @@
 
       :if ([ :len $Code ] > 0) do={
         :if ([ $ValidateSyntax $Code ] = true) do={
-          $LogPrint info $0 ("Acting on " . $Count . " mode-button presses: " . $Code);
+          $LogPrint info $FuncName ("Acting on " . $Count . " mode-button presses: " . $Code);
 
           :for I from=1 to=$Count do={
             $LEDInvert;
@@ -69,13 +71,15 @@
           :do {
             [ :parse $Code ];
           } on-error={
-            $LogPrint warning $0 ("The code for " . $Count . " mode-button presses failed with runtime error!");
+            $LogPrint warning $FuncName \
+                ("The code for " . $Count . " mode-button presses failed with runtime error!");
           }
         } else={
-          $LogPrint warning $0 ("The code for " . $Count . " mode-button presses failed syntax validation!");
+          $LogPrint warning $FuncName \
+              ("The code for " . $Count . " mode-button presses failed syntax validation!");
         }
       } else={
-        $LogPrint info $0 ("No action defined for " . $Count . " mode-button presses.");
+        $LogPrint info $FuncName ("No action defined for " . $Count . " mode-button presses.");
       }
     }
     /system/scheduler/add name="_ModeButtonScheduler" \

From bceabebf9c6c30e2b1057448d74a5de006ef5d1e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 10 Dec 2024 17:05:12 +0100
Subject: [PATCH 353/988] mod/notification-email: drop useless safeguard

Guess it was useful back in the day. Now the function exits early if the
queue is empty... So this can never be zero.
---
 mod/notification-email.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index e51779bf..dd909237 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -71,7 +71,7 @@
     $LogPrint warning $0 ("Flushing E-Mail messages from scheduler, but queue is empty.");
   }
 
-  /system/scheduler/set interval=([ $EitherOr $QueueLen 1 ] . "m") comment="Sending..." $Scheduler;
+  /system/scheduler/set interval=($QueueLen . "m") comment="Sending..." $Scheduler;
 
   :foreach Id,Message in=$EmailQueue do={
     :if ([ :typeof $Message ] = "array" ) do={

From 42bcc63d29c85a7fcdb175b3ea725654d2db7039 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 10 Dec 2024 17:12:24 +0100
Subject: [PATCH 354/988] mod/notification-email: increase retry interval on
 failure

---
 mod/notification-email.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index dd909237..b109bf4e 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -46,8 +46,9 @@
   :local AllDone true;
   :local QueueLen [ :len $EmailQueue ];
   :local Scheduler [ /system/scheduler/find where name="_FlushEmailQueue" ];
+  :local SchedVal [ /system/scheduler/get $Scheduler ];
 
-  :if ([ :len $Scheduler ] > 0 && [ /system/scheduler/get $Scheduler interval ] < 1m) do={
+  :if ([ :len $Scheduler ] > 0 && ($SchedVal->"interval") < 1m) do={
     /system/scheduler/set interval=1m comment="Doing initial checks..." $Scheduler;
   }
 
@@ -111,7 +112,8 @@
     /system/scheduler/remove $Scheduler;
     :set EmailQueue;
   } else={
-    /system/scheduler/set interval=1m comment="Waiting for retry..." $Scheduler;
+    /system/scheduler/set interval=(($SchedVal->"run-count") . "m") \
+        comment="Waiting for retry..." $Scheduler;
   }
 } on-error={
   :global ExitError; $ExitError false $0;

From c311e58d998fabc7568acd77f0a8bd42468f50b0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 10 Dec 2024 20:23:26 +0100
Subject: [PATCH 355/988] leds-toggle-mode: toggle in one call...

... and drop the condition.
---
 leds-toggle-mode.rsc | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/leds-toggle-mode.rsc b/leds-toggle-mode.rsc
index 136c9d1c..07e12ae1 100644
--- a/leds-toggle-mode.rsc
+++ b/leds-toggle-mode.rsc
@@ -6,8 +6,4 @@
 # toggle LEDs mode
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/leds-mode.md
 
-:if ([ /system/leds/settings/get all-leds-off ] = "never") do={
-  /system/leds/settings/set all-leds-off=immediate;
-} else={
-  /system/leds/settings/set all-leds-off=never;
-}
+/system/leds/settings/set all-leds-off=(({ "never"="immediate"; "immediate"="never" })->[ get all-leds-off ]);

From d70efe910ae3a9bef3ee6b62c0fd6d591bab89e3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 10 Dec 2024 20:32:50 +0100
Subject: [PATCH 356/988] mode-button: support led toggle without extra script

---
 global-config.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-config.rsc b/global-config.rsc
index 2ed67f3c..52928537 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -186,7 +186,7 @@
 
 # Run different commands with multiple mode-button presses.
 :global ModeButton {
-  1="/system/script/run leds-toggle-mode;";
+  1="/system/leds/settings/set all-leds-off=(({ \"never\"=\"immediate\"; \"immediate\"=\"never\" })->[ get all-leds-off ]);";
   2=":global Identity; :global SendNotification; :global SymbolForNotification; \$SendNotification ([ \$SymbolForNotification \"earth\" ] . \"Hello...\") (\"Hello world, \" . \$Identity . \" calling!\");";
   3="/system/shutdown;";
   4="/system/reboot;";

From 8231c3e833ee83a118f4d8395c097e6a9f312c2f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 11 Dec 2024 10:40:06 +0100
Subject: [PATCH 357/988] global-functions: $WaitForFile: delay until
 "complete"...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Well, turns out that waiting for existence of a file is not sufficient.
Chances are that a file is available just partly, so wait until the size
no longer changes... Let's hope that works as expected. 🤞
---
 global-functions.rsc | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 625f8cdd..e5e5d502 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1577,6 +1577,16 @@
     :delay $Delay;
     :set I ($I + 1);
   }
+
+  :local File [ /file/find where name=$FileName ];
+  :local SizeA 0;
+  :local SizeB 1;
+  :while ($SizeA < $SizeB) do={
+    :set SizeA $SizeB;
+    :delay $Delay;
+    :set SizeB [ /file/get $File size ];
+  }
+
   :return true;
 }
 

From 009a6bd76204083f4b1971b285d90e916c0fbc29 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 11 Dec 2024 10:55:23 +0100
Subject: [PATCH 358/988] mod/notification-email: $FlushEmailQueue: return on
 success

---
 mod/notification-email.rsc | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index b109bf4e..1d9a0a18 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -111,10 +111,11 @@
   :if ($AllDone = true && $QueueLen = [ :len $EmailQueue ]) do={
     /system/scheduler/remove $Scheduler;
     :set EmailQueue;
-  } else={
-    /system/scheduler/set interval=(($SchedVal->"run-count") . "m") \
-        comment="Waiting for retry..." $Scheduler;
+    :return true;
   }
+
+  /system/scheduler/set interval=(($SchedVal->"run-count") . "m") \
+      comment="Waiting for retry..." $Scheduler;
 } on-error={
   :global ExitError; $ExitError false $0;
 } }

From 53106731528adc607ee40336b79c516fac594a17 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 11 Dec 2024 10:59:37 +0100
Subject: [PATCH 359/988] mod/notification-email: $FlushEmailQueue: return on
 purge

---
 mod/notification-email.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 1d9a0a18..60c1e9ba 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -114,6 +114,12 @@
     :return true;
   }
 
+  :if ([ :len [ /system/scheduler/find where name="_FlushEmailQueue" ] ] = 0 && \
+       [ :typeof $EmailQueue ] = "nothing") do={
+    $LogPrint info $0 ("Queue was purged? Exiting.");
+    :return false;
+  }
+
   /system/scheduler/set interval=(($SchedVal->"run-count") . "m") \
       comment="Waiting for retry..." $Scheduler;
 } on-error={

From 1e2ca3d21441ac7881b7c556c8d73c70bb92edc6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 11 Dec 2024 11:28:12 +0100
Subject: [PATCH 360/988] mod/notification-email: $FlushEmailQueue: create
 scheduler if missing...

... as it is required to be modified several times below.
---
 mod/notification-email.rsc | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 60c1e9ba..c4747505 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -46,9 +46,15 @@
   :local AllDone true;
   :local QueueLen [ :len $EmailQueue ];
   :local Scheduler [ /system/scheduler/find where name="_FlushEmailQueue" ];
-  :local SchedVal [ /system/scheduler/get $Scheduler ];
 
-  :if ([ :len $Scheduler ] > 0 && ($SchedVal->"interval") < 1m) do={
+  :if ([ :len $Scheduler ] < 0) do={
+    /system/scheduler/add name="_FlushEmailQueue" interval=1m start-time=startup \
+        comment="Doing initial checks..." on-event=(":global FlushEmailQueue; \$FlushEmailQueue;");
+    :set Scheduler [ /system/scheduler/find where name="_FlushEmailQueue" ];
+  }
+
+  :local SchedVal [ /system/scheduler/get $Scheduler ];
+  :if (($SchedVal->"interval") < 1m) do={
     /system/scheduler/set interval=1m comment="Doing initial checks..." $Scheduler;
   }
 

From 8c8c75ca66d59d9368fe3f4fe7f1124a425f41b3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 11 Dec 2024 11:51:17 +0100
Subject: [PATCH 361/988] mod/notification-email: $FlushEmailQueue: move the
 check up...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

... as this needs to be done before creating a scheduler. 😜

Also remove the scheduler and return.
---
 mod/notification-email.rsc | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index c4747505..bbce6d06 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -47,6 +47,12 @@
   :local QueueLen [ :len $EmailQueue ];
   :local Scheduler [ /system/scheduler/find where name="_FlushEmailQueue" ];
 
+  :if ([ :len $Scheduler ] > 0 && $QueueLen = 0) do={
+    $LogPrint warning $0 ("Flushing E-Mail messages from scheduler, but queue is empty.");
+    /system/scheduler/remove $Scheduler;
+    :return false;
+  }
+
   :if ([ :len $Scheduler ] < 0) do={
     /system/scheduler/add name="_FlushEmailQueue" interval=1m start-time=startup \
         comment="Doing initial checks..." on-event=(":global FlushEmailQueue; \$FlushEmailQueue;");
@@ -74,10 +80,6 @@
     :return false;
   }
 
-  :if ([ :len $Scheduler ] > 0 && $QueueLen = 0) do={
-    $LogPrint warning $0 ("Flushing E-Mail messages from scheduler, but queue is empty.");
-  }
-
   /system/scheduler/set interval=($QueueLen . "m") comment="Sending..." $Scheduler;
 
   :foreach Id,Message in=$EmailQueue do={

From b66332eb464884d69eef56aa5ecb7ae74d1914cc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 11 Dec 2024 11:58:41 +0100
Subject: [PATCH 362/988] mod/notification-email: $FlushEmailQueue: just return
 on empty queue

---
 mod/notification-email.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index bbce6d06..a3291d9a 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -53,6 +53,10 @@
     :return false;
   }
 
+  :if ($QueueLen = 0) do={
+    :return true;
+  }
+
   :if ([ :len $Scheduler ] < 0) do={
     /system/scheduler/add name="_FlushEmailQueue" interval=1m start-time=startup \
         comment="Doing initial checks..." on-event=(":global FlushEmailQueue; \$FlushEmailQueue;");

From a7878d664f51ed77a574a5d360c9c53863d0d488 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 11 Dec 2024 12:11:15 +0100
Subject: [PATCH 363/988] fw-addr-lists: do not fail on invalid json data

---
 fw-addr-lists.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 6682f4ab..a195c893 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -92,7 +92,9 @@
         :set Line ($Line->0);
         :local Address;
         :if ([ :pick $Line 0 1 ] = "{") do={
-          :set Address [ :tostr ([ :deserialize from=json $Line ]->"cidr") ];
+          :do {
+            :set Address [ :tostr ([ :deserialize from=json $Line ]->"cidr") ];
+          } on-error={ }
         } else={
           :set Address ([ :pick $Line 0 [ $FindDelim $Line ] ] . ($List->"cidr"));
         }

From d1b9b1b410933e0510845c245f742a7df172dc61 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 13 Dec 2024 17:40:49 +0100
Subject: [PATCH 364/988] mod/notification-ntfy: support authentication with
 bearer token

Closes: https://github.com/eworm-de/routeros-scripts/issues/86
---
 doc/mod/notification-ntfy.md | 2 ++
 global-config.rsc            | 1 +
 mod/notification-ntfy.rsc    | 6 ++++++
 3 files changed, 9 insertions(+)

diff --git a/doc/mod/notification-ntfy.md b/doc/mod/notification-ntfy.md
index 5393d444..04dee355 100644
--- a/doc/mod/notification-ntfy.md
+++ b/doc/mod/notification-ntfy.md
@@ -52,6 +52,8 @@ basic authentication. Configure `NtfyServerUser` and `NtfyServerPass` for this.
 Even authentication via access token is possible, adding it as password with
 a blank username.
 
+Also available is `NtfyServerToken` to add a bearer token for authentication.
+
 For a custom service installing an additional certificate may be required.
 You may want to install that certificate manually, after finding the
 [certificate name from browser](../../CERTIFICATES.md).
diff --git a/global-config.rsc b/global-config.rsc
index 52928537..0c8f738c 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -58,6 +58,7 @@
 :global NtfyServer "ntfy.sh";
 :global NtfyServerUser [];
 :global NtfyServerPass [];
+:global NtfyServerToken [];
 :global NtfyTopic "";
 
 # It is possible to override e-mail, Telegram, Matrix and Ntfy setting
diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 7e0234bf..7e4eaf0c 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -67,6 +67,8 @@
   :global NtfyServerOverride;
   :global NtfyServerPass;
   :global NtfyServerPassOverride;
+  :global NtfyServerToken;
+  :global NtfyServerTokenOverride;
   :global NtfyServerUser;
   :global NtfyServerUserOverride;
   :global NtfyTopic;
@@ -83,6 +85,7 @@
   :local Server [ $EitherOr ($NtfyServerOverride->($Notification->"origin")) $NtfyServer ];
   :local User [ $EitherOr ($NtfyServerUserOverride->($Notification->"origin")) $NtfyServerUser ];
   :local Pass [ $EitherOr ($NtfyServerPassOverride->($Notification->"origin")) $NtfyServerPass ];
+  :local Token [ $EitherOr ($NtfyServerTokenOverride->($Notification->"origin")) $NtfyServerToken ];
   :local Topic [ $EitherOr ($NtfyTopicOverride->($Notification->"origin")) $NtfyTopic ];
 
   :if ([ :len $Topic ] = 0) do={
@@ -93,6 +96,9 @@
   :local Headers ({ [ $FetchUserAgentStr ($Notification->"origin") ]; \
     ("Priority: " . [ $IfThenElse ($Notification->"silent") "low" "default" ]); \
     ("Title: " . "[" . $IdentityExtra . $Identity . "] " . ($Notification->"subject")) });
+  :if ([ :len $Token ] > 0) do={
+    :set Headers ($Headers, ("Authorization: Bearer " . $Token));
+  }
   :local Text (($Notification->"message") . "\n");
   :if ([ :len ($Notification->"link") ] > 0) do={
     :set Text ($Text . "\n" . [ $SymbolForNotification "link" ] . ($Notification->"link"));

From 6bee4675509e874d2f2ed8ee960f251b5667a451 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 13 Dec 2024 17:48:49 +0100
Subject: [PATCH 365/988] mod/notification-ntfy: add basic authentication in
 headers

This makes it a bit easier and straight forward as we pass the
headers anyway.
---
 mod/notification-ntfy.rsc | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 7e4eaf0c..f8351fd4 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -39,7 +39,7 @@
       :do {
         /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
           http-header-field=($Message->"headers") http-data=($Message->"text") \
-          ($Message->"url") user=($Message->"user") password=($Message->"pass") as-value;
+          ($Message->"url") as-value;
         :set ($NtfyQueue->$Id);
       } on-error={
         $LogPrint debug $0 ("Sending queued Ntfy message failed.");
@@ -96,6 +96,9 @@
   :local Headers ({ [ $FetchUserAgentStr ($Notification->"origin") ]; \
     ("Priority: " . [ $IfThenElse ($Notification->"silent") "low" "default" ]); \
     ("Title: " . "[" . $IdentityExtra . $Identity . "] " . ($Notification->"subject")) });
+  :if ([ :len $User ] > 0 || [ :len $Pass ] > 0) do={
+    :set Headers ($Headers, ("Authorization: Basic " . [ :convert to=base64 ($User . ":" . $Pass) ]));
+  }
   :if ([ :len $Token ] > 0) do={
     :set Headers ($Headers, ("Authorization: Bearer " . $Token));
   }
@@ -112,7 +115,7 @@
       }
     }
     /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
-      http-header-field=$Headers http-data=$Text $Url user=$User password=$Pass as-value;
+      http-header-field=$Headers http-data=$Text $Url as-value;
   } on-error={
     $LogPrint info $0 ("Failed sending ntfy notification! Queuing...");
 
@@ -123,7 +126,7 @@
       "This message was queued since " . [ /system/clock/get date ] . " " . \
       [ /system/clock/get time ] . " and may be obsolete.");
     :set ($NtfyQueue->[ :len $NtfyQueue ]) \
-      { url=$Url; user=$User; pass=$Pass; headers=$Headers; text=$Text };
+      { url=$Url; headers=$Headers; text=$Text };
     :if ([ :len [ /system/scheduler/find where name="_FlushNtfyQueue" ] ] = 0) do={
       /system/scheduler/add name="_FlushNtfyQueue" interval=1m start-time=startup \
         on-event=(":global FlushNtfyQueue; \$FlushNtfyQueue;");

From ba39c29648282159082dfa999ec40c7fc84b0e3c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 25 Dec 2024 21:47:23 +0100
Subject: [PATCH 366/988] global-functions: $ParseKeyValueStore: split key and
 value...

... into separate variables.
---
 global-functions.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index e5e5d502..b212d3a0 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -925,8 +925,9 @@
   :local Result ({});
   :foreach KeyValue in=[ :toarray $Source ] do={
     :if ([ :find $KeyValue "=" ]) do={
-      :set ($Result->[ :pick $KeyValue 0 [ :find $KeyValue "=" ] ]) \
-        [ :pick $KeyValue ([ :find $KeyValue "=" ] + 1) [ :len $KeyValue ] ];
+      :local Key [ :pick $KeyValue 0 [ :find $KeyValue "=" ] ];
+      :local Value [ :pick $KeyValue ([ :find $KeyValue "=" ] + 1) [ :len $KeyValue ] ];
+      :set ($Result->$Key) $Value;
     } else={
       :set ($Result->$KeyValue) true;
     }

From 8212bd6c95935f02335d7d774bd3115a2c071fb1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 25 Dec 2024 21:56:45 +0100
Subject: [PATCH 367/988] global-functions: $ParseKeyValueStore: properly
 return boolean values

---
 global-functions.rsc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index b212d3a0..766e8a2d 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -927,6 +927,8 @@
     :if ([ :find $KeyValue "=" ]) do={
       :local Key [ :pick $KeyValue 0 [ :find $KeyValue "=" ] ];
       :local Value [ :pick $KeyValue ([ :find $KeyValue "=" ] + 1) [ :len $KeyValue ] ];
+      :if ($Value="true") do={ :set Value true; }
+      :if ($Value="false") do={ :set Value false; }
       :set ($Result->$Key) $Value;
     } else={
       :set ($Result->$KeyValue) true;

From ef3ce7cc6c43b28e6a80345d9861775767ba86f4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 25 Dec 2024 22:22:30 +0100
Subject: [PATCH 368/988] global-functions: $ParseKeyValueStore: support JSON
 as input

This used to require a key=value store, separated with commas. An
example for `netwatch-notify` is:

    /tool/netwatch/add comment="notify, name=example.com" host=93.184.215.14;

Now JSON is supported as well, so you could use:

    /tool/netwatch/add comment="{\"notify\":true,\"name\":\"example.com\"}" host=93.184.215.14;

Looks more clumsy here, but may be of help in more complex setups...
---
 global-functions.rsc | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 766e8a2d..85818b44 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -919,6 +919,13 @@
 # parse key value store
 :set ParseKeyValueStore do={
   :local Source $1;
+
+  :if ([ :pick $Source 0 1 ] = "{") do={
+    :do {
+      :return [ :deserialize from=json $Source ];
+    } on-error={ }
+  }
+
   :if ([ :typeof $Source ] != "array") do={
     :set Source [ :tostr $1 ];
   }

From 3ada3055fff08e655864f4e8e07f060b73077394 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 30 Dec 2024 19:51:42 +0100
Subject: [PATCH 369/988] fw-addr-lists: spamhaus.org returned to 'ISRG Root
 X1'

This reverts commit 4d8dce97691ad090091574a790449a7bd564023c.
---
 certs/Makefile    | 2 +-
 global-config.rsc | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/certs/Makefile b/certs/Makefile
index 870cb542..9ce8dd42 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -22,7 +22,7 @@ DOMAINS = \
 	sslbl.abuse.ch/GlobalSign \
 	upgrade.mikrotik.com/ISRG-Root-X1 \
 	www.dshield.org/ISRG-Root-X1 \
-	www.spamhaus.org/GTS-Root-R4
+	www.spamhaus.org/ISRG-Root-X1
 
 .PHONY: $(DOMAINS)
 
diff --git a/global-config.rsc b/global-config.rsc
index 0c8f738c..cd41a9c7 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -107,9 +107,9 @@
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="Certum Trusted Network CA" };
 #    { url="https://www.spamhaus.org/drop/drop_v4.json";
-#      cert="GTS Root R4" };
+#      cert="ISRG Root X1" };
 #    { url="https://www.spamhaus.org/drop/drop_v6.json";
-#      cert="GTS Root R4" };
+#      cert="ISRG Root X1" };
   };
 #  "mikrotik"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";

From 191cc1b952b469c474b0181ebdee0ccfd47ae75b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 30 Dec 2024 20:09:46 +0100
Subject: [PATCH 370/988] global-functions: $FetchHuge: another workaround for
 complete file
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Turns out the workaround in $WaitForFile (commit
8231c3e833ee83a118f4d8395c097e6a9f312c2f) is not sufficient. It helps
sometimes, but not always. Possibly depends on CPU speed and bandwidth
of internet connection... Who knows!? 🤪

But! Reading the file goes beyond the known file size. That's suspicious
and indicates this exact issue. So add a delay, and keep reading until
sizes are equal.
---
 global-functions.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 85818b44..a59eca17 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -479,9 +479,13 @@
   :local FileSize [ /file/get $FileName size ];
   :local Return "";
   :local VarSize 0;
-  :while ($VarSize < $FileSize) do={
+  :while ($VarSize != $FileSize) do={
     :set Return ($Return . ([ /file/read offset=$VarSize chunk-size=32768 file=$FileName as-value ]->"data"));
+    :set FileSize [ /file/get $FileName size ];
     :set VarSize [ :len $Return ];
+    :if ($VarSize > $FileSize) do={
+      :delay 100ms;
+    }
   }
   /file/remove $DirName;
   :return $Return;

From b98b2457140701261b299af0a2d742bf6aa2b9bc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 30 Dec 2024 20:22:51 +0100
Subject: [PATCH 371/988] global-functions: $WaitForFile: drop the first
 workaround

This reverts commit 8231c3e833ee83a118f4d8395c097e6a9f312c2f.

Truned out this workaround was not sufficient, see the follow-up in
commit 191cc1b952b469c474b0181ebdee0ccfd47ae75b for details.

But possibly the second one does it on its own? Reverting this for
a test run.
---
 global-functions.rsc | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index a59eca17..d5df5e74 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1591,16 +1591,6 @@
     :delay $Delay;
     :set I ($I + 1);
   }
-
-  :local File [ /file/find where name=$FileName ];
-  :local SizeA 0;
-  :local SizeB 1;
-  :while ($SizeA < $SizeB) do={
-    :set SizeA $SizeB;
-    :delay $Delay;
-    :set SizeB [ /file/get $File size ];
-  }
-
   :return true;
 }
 

From 9e3729c27990a7ecbdc73694319b924ee00ba867 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 2 Jan 2025 00:04:06 +0100
Subject: [PATCH 372/988] update copyright for 2025

---
 accesslist-duplicates.capsman.rsc      | 2 +-
 accesslist-duplicates.local.rsc        | 2 +-
 accesslist-duplicates.template.rsc     | 2 +-
 accesslist-duplicates.wifi.rsc         | 2 +-
 backup-cloud.rsc                       | 2 +-
 backup-email.rsc                       | 2 +-
 backup-partition.rsc                   | 2 +-
 backup-upload.rsc                      | 2 +-
 capsman-download-packages.capsman.rsc  | 2 +-
 capsman-download-packages.template.rsc | 2 +-
 capsman-download-packages.wifi.rsc     | 2 +-
 capsman-rolling-upgrade.capsman.rsc    | 2 +-
 capsman-rolling-upgrade.template.rsc   | 2 +-
 capsman-rolling-upgrade.wifi.rsc       | 2 +-
 certificate-renew-issued.rsc           | 2 +-
 check-certificates.rsc                 | 2 +-
 check-health.rsc                       | 2 +-
 check-lte-firmware-upgrade.rsc         | 2 +-
 check-routeros-update.rsc              | 2 +-
 collect-wireless-mac.capsman.rsc       | 2 +-
 collect-wireless-mac.local.rsc         | 2 +-
 collect-wireless-mac.template.rsc      | 2 +-
 collect-wireless-mac.wifi.rsc          | 2 +-
 daily-psk.capsman.rsc                  | 2 +-
 daily-psk.local.rsc                    | 2 +-
 daily-psk.template.rsc                 | 2 +-
 daily-psk.wifi.rsc                     | 2 +-
 dhcp-lease-comment.capsman.rsc         | 2 +-
 dhcp-lease-comment.local.rsc           | 2 +-
 dhcp-lease-comment.template.rsc        | 2 +-
 dhcp-lease-comment.wifi.rsc            | 2 +-
 dhcp-to-dns.rsc                        | 2 +-
 firmware-upgrade-reboot.rsc            | 2 +-
 fw-addr-lists.rsc                      | 2 +-
 global-config-overlay.rsc              | 2 +-
 global-config.rsc                      | 2 +-
 global-functions.rsc                   | 2 +-
 global-wait.rsc                        | 2 +-
 gps-track.rsc                          | 2 +-
 hotspot-to-wpa-cleanup.capsman.rsc     | 2 +-
 hotspot-to-wpa-cleanup.template.rsc    | 2 +-
 hotspot-to-wpa-cleanup.wifi.rsc        | 2 +-
 hotspot-to-wpa.capsman.rsc             | 2 +-
 hotspot-to-wpa.template.rsc            | 2 +-
 hotspot-to-wpa.wifi.rsc                | 2 +-
 ip-addr-bridge.rsc                     | 2 +-
 ipsec-to-dns.rsc                       | 2 +-
 ipv6-update.rsc                        | 2 +-
 lease-script.rsc                       | 2 +-
 leds-day-mode.rsc                      | 2 +-
 leds-night-mode.rsc                    | 2 +-
 leds-toggle-mode.rsc                   | 2 +-
 log-forward.rsc                        | 2 +-
 mod/bridge-port-to.rsc                 | 2 +-
 mod/bridge-port-vlan.rsc               | 2 +-
 mod/inspectvar.rsc                     | 2 +-
 mod/ipcalc.rsc                         | 2 +-
 mod/notification-email.rsc             | 2 +-
 mod/notification-matrix.rsc            | 2 +-
 mod/notification-ntfy.rsc              | 2 +-
 mod/notification-telegram.rsc          | 2 +-
 mod/scriptrunonce.rsc                  | 2 +-
 mod/ssh-keys-import.rsc                | 2 +-
 mode-button.rsc                        | 2 +-
 netwatch-dns.rsc                       | 2 +-
 netwatch-notify.rsc                    | 2 +-
 news-and-changes.rsc                   | 2 +-
 ospf-to-leds.rsc                       | 2 +-
 packages-update.rsc                    | 2 +-
 ppp-on-up.rsc                          | 2 +-
 sms-action.rsc                         | 2 +-
 sms-forward.rsc                        | 2 +-
 super-mario-theme.rsc                  | 2 +-
 telegram-chat.rsc                      | 2 +-
 unattended-lte-firmware-upgrade.rsc    | 2 +-
 update-gre-address.rsc                 | 2 +-
 update-tunnelbroker.rsc                | 2 +-
 77 files changed, 77 insertions(+), 77 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index ce0ce115..b611917e 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates.capsman
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index aa78fe81..ef0cf32b 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates.local
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index d0c282d7..ab5b671a 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates%TEMPL%
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index b1444e3d..0205598a 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates.wifi
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 4cc7a589..37ca92f2 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: backup-cloud
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=40
diff --git a/backup-email.rsc b/backup-email.rsc
index e1d44eac..489927b2 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: backup-email
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=20
diff --git a/backup-partition.rsc b/backup-partition.rsc
index f1e1c170..b2b75ac6 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: backup-partition
-# Copyright (c) 2022-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=70
diff --git a/backup-upload.rsc b/backup-upload.rsc
index 12698e93..e050140a 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: backup-upload
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: backup-script, order=50
diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 18028840..46094983 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-download-packages.capsman
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 72edaa91..642a0689 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-download-packages%TEMPL%
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 74a5d9dd..1ea9b792 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-download-packages.wifi
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index d0f9fb88..7a5ed81a 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-rolling-upgrade.capsman
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index 1bd5f2a5..fd7e31fa 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-rolling-upgrade%TEMPL%
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index c9e6622c..3fb99b80 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-rolling-upgrade.wifi
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index ce61f7d3..32c3267d 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: certificate-renew-issued
-# Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/check-certificates.rsc b/check-certificates.rsc
index 52cfc5ea..226364be 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-certificates
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/check-health.rsc b/check-health.rsc
index 495b4500..d3586dbc 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-health
-# Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index 898d6f18..cd9f979d 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-lte-firmware-upgrade
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index a2e39b62..c3d26253 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-routeros-update
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index 77fd6e30..05e4b898 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac.capsman
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index dc7be192..67c1a989 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac.local
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index 34b1695d..84a96674 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac%TEMPL%
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index 23c93b0e..fa4953ba 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac.wifi
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=40
diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 263f6e5e..f41da297 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: daily-psk.capsman
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index f0757e16..2920cb5b 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: daily-psk.local
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 7e36b5a0..05c376e2 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: daily-psk%TEMPL%
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 293f0e42..4182ab8d 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: daily-psk.wifi
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 5ac0009d..947181bf 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment.capsman
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index 1b74d932..27306dd1 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment.local
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 8f1ad470..8552b263 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment%TEMPL%
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index d3741c5e..bf67bd07 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment.wifi
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=60
diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index ad55c4d0..1eb832ac 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-to-dns
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=20
diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index 96559032..f9e557cd 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: firmware-upgrade-reboot
-# Copyright (c) 2022-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index a195c893..e98a6109 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: fw-addr-lists
-# Copyright (c) 2023-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2023-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.16
diff --git a/global-config-overlay.rsc b/global-config-overlay.rsc
index 9ffd90cb..227ae5a0 100644
--- a/global-config-overlay.rsc
+++ b/global-config-overlay.rsc
@@ -1,5 +1,5 @@
 # Overlay for global configuration by RouterOS Scripts
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # global configuration, custom overlay
diff --git a/global-config.rsc b/global-config.rsc
index cd41a9c7..1f4e9ca1 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: global-config
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # global configuration
diff --git a/global-functions.rsc b/global-functions.rsc
index d5df5e74..a2dd279b 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: global-functions
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/global-wait.rsc b/global-wait.rsc
index f0631e27..529dbd7b 100644
--- a/global-wait.rsc
+++ b/global-wait.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: global-wait
-# Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/gps-track.rsc b/gps-track.rsc
index c0ecac49..1bd976a0 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: gps-track
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 8a38213f..1d27faf6 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa-cleanup.capsman
-# Copyright (c) 2021-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=80
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index e8d2dfbb..f92dbe5e 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa-cleanup%TEMPL%
-# Copyright (c) 2021-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=80
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index e2ef1fda..cd215935 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa-cleanup.wifi
-# Copyright (c) 2021-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # provides: lease-script, order=80
diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index e57d3275..d962ba75 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa.capsman
-# Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index efe37d0c..3438be70 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa%TEMPL%
-# Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index 6242d047..a2bb3ca9 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa.wifi
-# Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/ip-addr-bridge.rsc b/ip-addr-bridge.rsc
index 758cd463..00b45a32 100644
--- a/ip-addr-bridge.rsc
+++ b/ip-addr-bridge.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ip-addr-bridge
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # enable or disable ip addresses based on bridge port state
diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index 47676cac..39b21d5c 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ipsec-to-dns
-# Copyright (c) 2021-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index ea1d4445..a2fb8317 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ipv6-update
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/lease-script.rsc b/lease-script.rsc
index 995c7e4b..3d0fc72a 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: lease-script
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/leds-day-mode.rsc b/leds-day-mode.rsc
index b7c6b5b8..e0f08d61 100644
--- a/leds-day-mode.rsc
+++ b/leds-day-mode.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: leds-day-mode
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # enable LEDs
diff --git a/leds-night-mode.rsc b/leds-night-mode.rsc
index fb7c7a2e..1f50dfd5 100644
--- a/leds-night-mode.rsc
+++ b/leds-night-mode.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: leds-night-mode
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # disable LEDs
diff --git a/leds-toggle-mode.rsc b/leds-toggle-mode.rsc
index 07e12ae1..55d5b82d 100644
--- a/leds-toggle-mode.rsc
+++ b/leds-toggle-mode.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: leds-toggle-mode
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # toggle LEDs mode
diff --git a/log-forward.rsc b/log-forward.rsc
index 8e660fc4..8c2ebc0d 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: log-forward
-# Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index 9e7b9114..ec6f6128 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/bridge-port-to
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 18fa2db0..62216467 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/bridge-port-vlan
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index 0209214e..01724bb9 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/inspectvar
-# Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index 021cd306..69dec8be 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/ipcalc
-# Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index a3291d9a..6d700f5e 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-email
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 14f369d2..aad8b425 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-matrix
-# Copyright (c) 2013-2024 Michael Gisbers <michael@gisbers.de>
+# Copyright (c) 2013-2025 Michael Gisbers <michael@gisbers.de>
 #                         Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index f8351fd4..53ba9b47 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-ntfy
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 7d75b8ba..f9700cf0 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-telegram
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index c8dcf26f..7e01e72e 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/scriptrunonece
-# Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 583e8270..ad3a81ea 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/ssh-keys-import
-# Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.16
diff --git a/mode-button.rsc b/mode-button.rsc
index 90fe80e6..f8bd7b83 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mode-button
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index a704c847..81f9d95d 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: netwatch-dns
-# Copyright (c) 2022-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.16
diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index f1e87bd4..e79977ea 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: netwatch-notify
-# Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 9ab811d6..545a0c93 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -1,5 +1,5 @@
 # News, changes and migration by RouterOS Scripts
-# Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 
 :global IDonate;
diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index d96e7636..3400e7ff 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ospf-to-leds
-# Copyright (c) 2020-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/packages-update.rsc b/packages-update.rsc
index 924a5d96..a79946d5 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: packages-update
-# Copyright (c) 2019-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index 13b42c71..a776ce23 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ppp-on-up
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/sms-action.rsc b/sms-action.rsc
index fd3096c1..f22a0bb1 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: sms-action
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/sms-forward.rsc b/sms-forward.rsc
index 8334d5fa..efebb758 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: sms-forward
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Anatoly Bubenkov <bubenkoff@gmail.com>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
diff --git a/super-mario-theme.rsc b/super-mario-theme.rsc
index 63308b08..fc868c8d 100644
--- a/super-mario-theme.rsc
+++ b/super-mario-theme.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: super-mario-theme
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # play Super Mario theme
diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 8589aab7..eebb617e 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: telegram-chat
-# Copyright (c) 2023-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2023-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index 7ce40280..f1bc5529 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: unattended-lte-firmware-upgrade
-# Copyright (c) 2018-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # schedule unattended lte firmware upgrade
diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 87762d6a..4ac311a1 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: update-gre-address
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
 # requires RouterOS, version=7.14
diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index dd43c643..589544c4 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: update-tunnelbroker
-# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #

From db508ddcd1a4bb78af95e5d96a4f626173d29557 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 6 Jan 2025 09:30:05 +0100
Subject: [PATCH 373/988] backup-cloud: refuse when running from backup
 partition

---
 backup-cloud.rsc | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 37ca92f2..f32a04dd 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -38,6 +38,14 @@
     :set ExitOK true;
     :error false;
   }
+
+  :if ([ :len [ /system/scheduler/find where name="running-from-backup-partition" ] ] > 0) do={
+    $LogPrint warning $ScriptName ("Running from backup partition, refusing to act.");
+    :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
+    :error false;
+  }
+
   $WaitFullyConnected;
 
   :if ([ $ScriptFromTerminal $ScriptName ] = false && $BackupRandomDelay > 0) do={

From 303c39390068ebf0ab5cba3bbb967d6079fbdeb2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 6 Jan 2025 09:30:20 +0100
Subject: [PATCH 374/988] backup-email: refuse when running from backup
 partition

---
 backup-email.rsc | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/backup-email.rsc b/backup-email.rsc
index 489927b2..731fb95a 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -56,6 +56,14 @@
     :set ExitOK true;
     :error false;
   }
+
+  :if ([ :len [ /system/scheduler/find where name="running-from-backup-partition" ] ] > 0) do={
+    $LogPrint warning $ScriptName ("Running from backup partition, refusing to act.");
+    :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
+    :error false;
+  }
+
   $WaitFullyConnected;
 
   :if ([ $ScriptFromTerminal $ScriptName ] = false && $BackupRandomDelay > 0) do={

From 6c990079a6c6f92c748f98a5128e7438e05caefb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 6 Jan 2025 09:26:44 +0100
Subject: [PATCH 375/988] backup-partition: refuse when running from backup
 partition

---
 backup-partition.rsc | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index b2b75ac6..22982257 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -47,6 +47,13 @@
     :error false;
   }
 
+  :if ([ :len [ /system/scheduler/find where name="running-from-backup-partition" ] ] > 0) do={
+    $LogPrint warning $ScriptName ("Running from backup partition, refusing to act.");
+    :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
+    :error false;
+  }
+
   :if ([ :len [ /partitions/find ] ] < 2) do={
     $LogPrint error $ScriptName ("Device does not have a fallback partition.");
     :set PackagesUpdateBackupFailure true;

From d9693f4d5f783935cd2e47479889cc035b294934 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 6 Jan 2025 09:30:38 +0100
Subject: [PATCH 376/988] backup-upload: refuse when running from backup
 partition

---
 backup-upload.rsc | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index e050140a..e035415d 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -53,6 +53,14 @@
     :set ExitOK true;
     :error false;
   }
+
+  :if ([ :len [ /system/scheduler/find where name="running-from-backup-partition" ] ] > 0) do={
+    $LogPrint warning $ScriptName ("Running from backup partition, refusing to act.");
+    :set PackagesUpdateBackupFailure true;
+    :set ExitOK true;
+    :error false;
+  }
+
   $WaitFullyConnected;
 
   :if ([ $ScriptFromTerminal $ScriptName ] = false && $BackupRandomDelay > 0) do={

From 665516b33de8d4d58d18274e05a0180cf6978af0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 6 Jan 2025 09:30:59 +0100
Subject: [PATCH 377/988] check-routeros-update: refuse when running from
 backup partition

---
 check-routeros-update.rsc | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index c3d26253..19abebf4 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -51,6 +51,13 @@
     :set ExitOK true;
     :error false;
   }
+
+  :if ([ :len [ /system/scheduler/find where name="running-from-backup-partition" ] ] > 0) do={
+    $LogPrint warning $ScriptName ("Running from backup partition, refusing to act.");
+    :set ExitOK true;
+    :error false;
+  }
+
   $WaitFullyConnected;
 
   :if ([ :len [ /system/scheduler/find where name="_RebootForUpdate" ] ] > 0) do={

From ce2d090e998d51b92376f3470b829f598f3ce5bd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 6 Jan 2025 09:31:13 +0100
Subject: [PATCH 378/988] packages-update: refuse when running from backup
 partition

---
 packages-update.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/packages-update.rsc b/packages-update.rsc
index a79946d5..7644219c 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -50,6 +50,12 @@
     :error false;
   }
 
+  :if ([ :len [ /system/scheduler/find where name="running-from-backup-partition" ] ] > 0) do={
+    $LogPrint warning $ScriptName ("Running from backup partition, refusing to act.");
+    :set ExitOK true;
+    :error false;
+  }
+
   :local Update [ /system/package/update/get ];
 
   :if ([ :typeof ($Update->"latest-version") ] = "nothing") do={

From 98791f48fdb684f946fb94e8735b1073942cd731 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 9 Jan 2025 13:20:45 +0100
Subject: [PATCH 379/988] ppp-on-up: release only bound ipv6 dhcp clients

---
 ppp-on-up.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index a776ce23..ba9d0aae 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -28,7 +28,7 @@
   :local IntName [ /interface/get $Interface name ];
   $LogPrint info $ScriptName ("PPP interface " . $IntName . " is up.");
 
-  /ipv6/dhcp-client/release [ find where interface=$IntName !disabled ];
+  /ipv6/dhcp-client/release [ find where interface=$IntName !disabled bound ];
 
   :foreach Script in=[ /system/script/find where source~("\n# provides: ppp-on-up\r?\n") ] do={
     :local ScriptName [ /system/script/get $Script name ];

From e8b1e19b284af74032e1edcbb08665752dbe508a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 22 Nov 2024 14:06:22 +0100
Subject: [PATCH 380/988] fw-addr-lists: spamhaus.org returned to 'GTS Root R4'

---
 certs/Makefile    | 2 +-
 global-config.rsc | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/certs/Makefile b/certs/Makefile
index 9ce8dd42..870cb542 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -22,7 +22,7 @@ DOMAINS = \
 	sslbl.abuse.ch/GlobalSign \
 	upgrade.mikrotik.com/ISRG-Root-X1 \
 	www.dshield.org/ISRG-Root-X1 \
-	www.spamhaus.org/ISRG-Root-X1
+	www.spamhaus.org/GTS-Root-R4
 
 .PHONY: $(DOMAINS)
 
diff --git a/global-config.rsc b/global-config.rsc
index 1f4e9ca1..c63283dc 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -107,9 +107,9 @@
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="Certum Trusted Network CA" };
 #    { url="https://www.spamhaus.org/drop/drop_v4.json";
-#      cert="ISRG Root X1" };
+#      cert="GTS Root R4" };
 #    { url="https://www.spamhaus.org/drop/drop_v6.json";
-#      cert="ISRG Root X1" };
+#      cert="GTS Root R4" };
   };
 #  "mikrotik"={
 #    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";

From ccf17a438cd10f77f0f0c0cd83f6f6729b6479c7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 23 Jan 2025 23:07:38 +0100
Subject: [PATCH 381/988] global-config: download scripts from rsc.eworm.de
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Currently AI bots are crawling website all around the world. For a
website hosting git content this adds a lot of extra load and traffic:
The site has lots of sections, repositories have a lot of files,
branches, tags, commit ids, etc...
Multiply that and you have a nearly unlimited number of unique urls. The
bots try to get each and every of these.

To speed up the learing process on their side a swarm of hundreds,
thousands or more ip addresses is active at the same time, ultimately
DDOS'ing the websites, making it inaccessible. 😳🤬

Well, there is one single file all of these AI bots are not interested
in: robots.txt 🤬🤬

On top some use random user agent strings, making filtering impossible.
🤬🤬🤬

For a short term sulution I deploy the repository content as static
files, hopefully making these accessible at least. We will see.
---
 global-config.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index c63283dc..3e173204 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -217,14 +217,16 @@
 :global GpsTrackUrl "https://example.com/index.php";
 
 # This is the base url to fetch scripts from.
-:global ScriptUpdatesBaseUrl "https://git.eworm.de/cgit/routeros-scripts/plain/";
+:global ScriptUpdatesBaseUrl "https://rsc.eworm.de/main/";
 # alternative urls - main: stable code - next: currently in development
+#:global ScriptUpdatesBaseUrl "https://rsc.eworm.de/next/";
+#:global ScriptUpdatesBaseUrl "https://git.eworm.de/cgit/routeros-scripts/plain/";
 #:global ScriptUpdatesBaseUrl "https://raw.githubusercontent.com/eworm-de/routeros-scripts/main/";
 #:global ScriptUpdatesBaseUrl "https://raw.githubusercontent.com/eworm-de/routeros-scripts/next/";
 #:global ScriptUpdatesBaseUrl "https://gitlab.com/eworm-de/routeros-scripts/raw/main/";
 #:global ScriptUpdatesBaseUrl "https://gitlab.com/eworm-de/routeros-scripts/raw/next/";
 :global ScriptUpdatesUrlSuffix "";
-# use next branch with default url (git.eworm.de)
+# use next branch with my git url (git.eworm.de)
 #:global ScriptUpdatesUrlSuffix "?h=next";
 
 # Use this for defaults with $ScriptRunOnce

From d4acc5aa59e30c5e430b553fb2142c7e7e004822 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 11:03:50 +0100
Subject: [PATCH 382/988] BRANCHES: adopt new default url

---
 BRANCHES.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/BRANCHES.md b/BRANCHES.md
index 2bacf8e8..5d94077b 100644
--- a/BRANCHES.md
+++ b/BRANCHES.md
@@ -22,13 +22,13 @@ for testing.
 
 To install a single script from `next` branch:
 
-    $ScriptInstallUpdate script-name "url-suffix=?h=next";
+    $ScriptInstallUpdate script-name "base-url=https://rsc.eworm.de/next/";
 
 ## Switch existing script
 
 Alternatively switch an existing script to update from `next` branch:
 
-    /system/script/set comment="url-suffix=?h=next" script-name;
+    /system/script/set comment="base-url=https://rsc.eworm.de/next/" script-name;
     $ScriptInstallUpdate;
 
 ## Switch installation
@@ -36,7 +36,7 @@ Alternatively switch an existing script to update from `next` branch:
 Last but not least - to switch the complete installation to the `next`
 branch edit `global-config-overlay` and add:
 
-    :global ScriptUpdatesUrlSuffix "?h=next";
+    :global ScriptUpdatesBaseUrl "https://rsc.eworm.de/next/";
 
 ... then reload the configuration and update:
 

From a446f31262118d59d6ec938a022b2f7d99fb5a70 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 23 Jan 2025 23:56:18 +0100
Subject: [PATCH 383/988] fw-addr-lists: use my static mirror

---
 global-config.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index 3e173204..c8b2c2e6 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -92,11 +92,11 @@
 # This defines the settings for firewall address-lists (fw-addr-lists).
 :global FwAddrLists {
 #  "allow"={
-#    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/allow";
+#    { url="https://rsc.eworm.de/main/fw-addr-lists.d/allow";
 #      cert="ISRG Root X2"; timeout=1w };
 #  };
   "block"={
-#    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/block";
+#    { url="https://rsc.eworm.de/main/fw-addr-lists.d/block";
 #      cert="ISRG Root X2" };
     { url="https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt";
       cert="GlobalSign" };
@@ -112,7 +112,7 @@
 #      cert="GTS Root R4" };
   };
 #  "mikrotik"={
-#    { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";
+#    { url="https://rsc.eworm.de/main/fw-addr-lists.d/mikrotik";
 #      cert="ISRG Root X2"; timeout=1w };
 #  };
 };

From 500054535c44f7682bf82712dc37e299299b09dd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:30:01 +0100
Subject: [PATCH 384/988] unattended-lte-firmware-upgrade: require RouterOS

---
 unattended-lte-firmware-upgrade.rsc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index f1bc5529..ea18edfc 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -3,6 +3,8 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 #
+# requires RouterOS, version=7.14
+#
 # schedule unattended lte firmware upgrade
 # https://git.eworm.de/cgit/routeros-scripts/about/doc/unattended-lte-firmware-upgrade.md
 

From 1dda59034e366c6cb6e2b78fa820ece1407f93e5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 385/988] accesslist-duplicates: use short url rsc.eworm.de

---
 accesslist-duplicates.capsman.rsc  | 4 ++--
 accesslist-duplicates.local.rsc    | 4 ++--
 accesslist-duplicates.template.rsc | 4 ++--
 accesslist-duplicates.wifi.rsc     | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index b611917e..0c4eaaf5 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates.capsman
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # print duplicate antries in wireless access list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
+# https://rsc.eworm.de/doc/accesslist-duplicates.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index ef0cf32b..353fe1fc 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates.local
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # print duplicate antries in wireless access list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
+# https://rsc.eworm.de/doc/accesslist-duplicates.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index ab5b671a..4219014f 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates%TEMPL%
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # print duplicate antries in wireless access list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
+# https://rsc.eworm.de/doc/accesslist-duplicates.md
 #
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index 0205598a..3ee53d8c 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates.wifi
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # print duplicate antries in wireless access list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/accesslist-duplicates.md
+# https://rsc.eworm.de/doc/accesslist-duplicates.md
 #
 # !! Do not edit this file, it is generated from template!
 

From 5281b4ba02a721af189ad70244c95cb175c6af06 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 386/988] backup-cloud: use short url rsc.eworm.de

---
 backup-cloud.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index f32a04dd..efae055f 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: backup-cloud
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=40
 # requires RouterOS, version=7.14
 #
 # upload backup to MikroTik cloud
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-cloud.md
+# https://rsc.eworm.de/doc/backup-cloud.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 08ff07d037d88e7aba7356ba0f744a4e92d597ea Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 387/988] backup-email: use short url rsc.eworm.de

---
 backup-email.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backup-email.rsc b/backup-email.rsc
index 731fb95a..f6ebad0b 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: backup-email
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=20
 # requires RouterOS, version=7.14
 #
 # create and email backup and config file
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-email.md
+# https://rsc.eworm.de/doc/backup-email.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From c70b6a8eb304641df205c1d18f12670d183a9385 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 388/988] backup-partition: use short url rsc.eworm.de

---
 backup-partition.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 22982257..b8bf7b1e 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: backup-partition
 # Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=70
 # requires RouterOS, version=7.14
 #
 # save configuration to fallback partition
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-partition.md
+# https://rsc.eworm.de/doc/backup-partition.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 38b5fbab9cdc9fd755c04a2f7debd2d62ae05aab Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 389/988] backup-upload: use short url rsc.eworm.de

---
 backup-upload.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index e035415d..011c5029 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: backup-upload
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=50
 # requires RouterOS, version=7.14
 #
 # create and upload backup and config file
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/backup-upload.md
+# https://rsc.eworm.de/doc/backup-upload.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From b938847030e90c8c3b8decb55e6625aa2e537798 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 390/988] capsman-download-packages: use short url rsc.eworm.de

---
 capsman-download-packages.capsman.rsc  | 4 ++--
 capsman-download-packages.template.rsc | 4 ++--
 capsman-download-packages.wifi.rsc     | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 46094983..fa76ff5f 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: capsman-download-packages.capsman
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # download and cleanup packages for CAP installation from CAPsMAN
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-download-packages.md
+# https://rsc.eworm.de/doc/capsman-download-packages.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 642a0689..912e2795 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: capsman-download-packages%TEMPL%
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # download and cleanup packages for CAP installation from CAPsMAN
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-download-packages.md
+# https://rsc.eworm.de/doc/capsman-download-packages.md
 #
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 1ea9b792..3a5e7d1e 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: capsman-download-packages.wifi
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # download and cleanup packages for CAP installation from CAPsMAN
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-download-packages.md
+# https://rsc.eworm.de/doc/capsman-download-packages.md
 #
 # !! Do not edit this file, it is generated from template!
 

From 26dbf5805a83a2670e678ec93d02796f7c3233cd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 391/988] capsman-rolling-upgrade: use short url rsc.eworm.de

---
 capsman-rolling-upgrade.capsman.rsc  | 4 ++--
 capsman-rolling-upgrade.template.rsc | 4 ++--
 capsman-rolling-upgrade.wifi.rsc     | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index 7a5ed81a..abe066e8 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -2,13 +2,13 @@
 # RouterOS script: capsman-rolling-upgrade.capsman
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: capsman-rolling-upgrade.capsman
 # requires RouterOS, version=7.14
 #
 # upgrade CAPs one after another
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-rolling-upgrade.md
+# https://rsc.eworm.de/doc/capsman-rolling-upgrade.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index fd7e31fa..c1c7ff1e 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -2,13 +2,13 @@
 # RouterOS script: capsman-rolling-upgrade%TEMPL%
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: capsman-rolling-upgrade%TEMPL%
 # requires RouterOS, version=7.14
 #
 # upgrade CAPs one after another
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-rolling-upgrade.md
+# https://rsc.eworm.de/doc/capsman-rolling-upgrade.md
 #
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 3fb99b80..44c99db7 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -2,13 +2,13 @@
 # RouterOS script: capsman-rolling-upgrade.wifi
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: capsman-rolling-upgrade.wifi
 # requires RouterOS, version=7.14
 #
 # upgrade CAPs one after another
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/capsman-rolling-upgrade.md
+# https://rsc.eworm.de/doc/capsman-rolling-upgrade.md
 #
 # !! Do not edit this file, it is generated from template!
 

From 1b7458ac955dc32ea12f19a779c985f27e0c6a28 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 392/988] certificate-renew-issued: use short url rsc.eworm.de

---
 certificate-renew-issued.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index 32c3267d..5a4043d2 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: certificate-renew-issued
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # renew locally issued certificates
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/certificate-renew-issued.md
+# https://rsc.eworm.de/doc/certificate-renew-issued.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 1239ac31044270036a8204cd7856776d8faee06e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 393/988] check-certificates: use short url rsc.eworm.de

---
 check-certificates.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 226364be..02e3e520 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: check-certificates
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # check for certificate validity
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/check-certificates.md
+# https://rsc.eworm.de/doc/check-certificates.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 231be730aea0bad7a914c387a719d7c46ecbb468 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 394/988] check-health: use short url rsc.eworm.de

---
 check-health.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/check-health.rsc b/check-health.rsc
index d3586dbc..31bd6c24 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: check-health
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # check for RouterOS health state
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/check-health.md
+# https://rsc.eworm.de/doc/check-health.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 7484663b92062ae6c120227de22d387df93123ad Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 395/988] check-lte-firmware-upgrade: use short url
 rsc.eworm.de

---
 check-lte-firmware-upgrade.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index cd9f979d..562b8fe6 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: check-lte-firmware-upgrade
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # check for LTE firmware upgrade, send notification
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/check-lte-firmware-upgrade.md
+# https://rsc.eworm.de/doc/check-lte-firmware-upgrade.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 36c87c91ea9b4bc5ef1153733d38e52ad0e3e291 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 396/988] check-routeros-update: use short url rsc.eworm.de

---
 check-routeros-update.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 19abebf4..9486d6c1 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: check-routeros-update
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # check for RouterOS update, send notification and/or install
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/check-routeros-update.md
+# https://rsc.eworm.de/doc/check-routeros-update.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From f8058eaf71c54fb722fb65c5e87c9f448927a36e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 397/988] collect-wireless-mac: use short url rsc.eworm.de

---
 collect-wireless-mac.capsman.rsc  | 4 ++--
 collect-wireless-mac.local.rsc    | 4 ++--
 collect-wireless-mac.template.rsc | 4 ++--
 collect-wireless-mac.wifi.rsc     | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index 05e4b898..f718e0bc 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac.capsman
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
 # requires RouterOS, version=7.14
 #
 # collect wireless mac adresses in access list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
+# https://rsc.eworm.de/doc/collect-wireless-mac.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index 67c1a989..00178752 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac.local
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
 # requires RouterOS, version=7.14
 #
 # collect wireless mac adresses in access list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
+# https://rsc.eworm.de/doc/collect-wireless-mac.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index 84a96674..527e9851 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac%TEMPL%
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
 # requires RouterOS, version=7.14
 #
 # collect wireless mac adresses in access list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
+# https://rsc.eworm.de/doc/collect-wireless-mac.md
 #
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index fa4953ba..5f9de7d2 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac.wifi
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
 # requires RouterOS, version=7.14
 #
 # collect wireless mac adresses in access list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/collect-wireless-mac.md
+# https://rsc.eworm.de/doc/collect-wireless-mac.md
 #
 # !! Do not edit this file, it is generated from template!
 

From 96fa76f07dfe86d31f32c90e969cb824d727280a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 398/988] daily-psk.template: use short url rsc.eworm.de

---
 daily-psk.capsman.rsc  | 4 ++--
 daily-psk.local.rsc    | 4 ++--
 daily-psk.template.rsc | 4 ++--
 daily-psk.wifi.rsc     | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index f41da297..56729315 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: daily-psk.capsman
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
 #
 # update daily PSK (pre shared key)
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
+# https://rsc.eworm.de/doc/daily-psk.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 2920cb5b..9dea4692 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: daily-psk.local
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
 #
 # update daily PSK (pre shared key)
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
+# https://rsc.eworm.de/doc/daily-psk.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 05c376e2..8202eeba 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: daily-psk%TEMPL%
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
 #
 # update daily PSK (pre shared key)
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
+# https://rsc.eworm.de/doc/daily-psk.md
 #
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 4182ab8d..3de3c5b6 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: daily-psk.wifi
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
 #
 # update daily PSK (pre shared key)
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md
+# https://rsc.eworm.de/doc/daily-psk.md
 #
 # !! Do not edit this file, it is generated from template!
 

From 61dee2177634b6e464aab4b644eb686f914cb365 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 399/988] dhcp-lease-comment: use short url rsc.eworm.de

---
 dhcp-lease-comment.capsman.rsc  | 4 ++--
 dhcp-lease-comment.local.rsc    | 4 ++--
 dhcp-lease-comment.template.rsc | 4 ++--
 dhcp-lease-comment.wifi.rsc     | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 947181bf..38039637 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment.capsman
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
 # requires RouterOS, version=7.14
 #
 # update dhcp-server lease comment with infos from access-list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
+# https://rsc.eworm.de/doc/dhcp-lease-comment.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index 27306dd1..d5f14613 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment.local
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
 # requires RouterOS, version=7.14
 #
 # update dhcp-server lease comment with infos from access-list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
+# https://rsc.eworm.de/doc/dhcp-lease-comment.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 8552b263..2bddc268 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment%TEMPL%
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
 # requires RouterOS, version=7.14
 #
 # update dhcp-server lease comment with infos from access-list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
+# https://rsc.eworm.de/doc/dhcp-lease-comment.md
 #
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index bf67bd07..515b4384 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment.wifi
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
 # requires RouterOS, version=7.14
 #
 # update dhcp-server lease comment with infos from access-list
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-lease-comment.md
+# https://rsc.eworm.de/doc/dhcp-lease-comment.md
 #
 # !! Do not edit this file, it is generated from template!
 

From 632d294a988188eb9ea182316d28411b8c281ed2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 400/988] dhcp-to-dns: use short url rsc.eworm.de

---
 dhcp-to-dns.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index 1eb832ac..9b940984 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-to-dns
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=20
 # requires RouterOS, version=7.16
 #
 # check DHCP leases and add/remove/update DNS entries
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/dhcp-to-dns.md
+# https://rsc.eworm.de/doc/dhcp-to-dns.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 7b760d9fa408b12ef00328266c77707f835f0600 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 401/988] firmware-upgrade-reboot: use short url rsc.eworm.de

---
 firmware-upgrade-reboot.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index f9e557cd..e3d62def 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: firmware-upgrade-reboot
 # Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # install firmware upgrade, and reboot
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/firmware-upgrade-reboot.md
+# https://rsc.eworm.de/doc/firmware-upgrade-reboot.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 39c5aeda13e107f1dd91fc632cab536befeca6eb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 402/988] fw-addr-lists: use short url rsc.eworm.de

---
 fw-addr-lists.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index e98a6109..d41dc04e 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: fw-addr-lists
 # Copyright (c) 2023-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.16
 #
 # download, import and update firewall address-lists
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/fw-addr-lists.md
+# https://rsc.eworm.de/doc/fw-addr-lists.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From ac62b8f24fc72aefbb9994abac3baa07bd3cfa93 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 403/988] global-config-overlay: use short url rsc.eworm.de

---
 global-config-overlay.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-config-overlay.rsc b/global-config-overlay.rsc
index 227ae5a0..9afacebd 100644
--- a/global-config-overlay.rsc
+++ b/global-config-overlay.rsc
@@ -1,12 +1,12 @@
 # Overlay for global configuration by RouterOS Scripts
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # global configuration, custom overlay
-# https://git.eworm.de/cgit/routeros-scripts/about/#editing-configuration
+# https://rsc.eworm.de/#editing-configuration
 
 # Copy relevant configuration from global-config, paste and modify it here.
-# https://git.eworm.de/cgit/routeros-scripts/about/global-config.rsc
+# https://rsc.eworm.de/global-config.rsc
 
 
 # End of global-config-overlay

From b7923485bdac90458321989eda261517afc4986e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 404/988] global-config: use short url rsc.eworm.de

---
 global-config.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index c8b2c2e6..df26ef97 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -1,10 +1,10 @@
 #!rsc by RouterOS
 # RouterOS script: global-config
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # global configuration
-# https://git.eworm.de/cgit/routeros-scripts/about/
+# https://rsc.eworm.de/
 
 # Set this to 'true' to disable news and change notifications.
 :global NoNewsAndChangesNotification false;
@@ -238,7 +238,7 @@
 # This project is developed in private spare time and usage is free of charge
 # for you. If you like the scripts and think this is of value for you or your
 # business please consider a donation:
-# https://git.eworm.de/cgit/routeros-scripts/about/#donate
+# https://rsc.eworm.de/#donate
 # Enable this to silence donation hint.
 :global IDonate false;
 

From 7be415d0ed8238564608c47b251f21f25e6f1d43 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 405/988] global-functions: use short url rsc.eworm.de

---
 global-functions.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index a2dd279b..d5ac31ca 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: global-functions
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # global functions
-# https://git.eworm.de/cgit/routeros-scripts/about/
+# https://rsc.eworm.de/
 
 :local ScriptName [ :jobname ];
 

From 0431b02324877ae8585eb31effd789747f2aaf96 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 406/988] global-wait: use short url rsc.eworm.de

---
 global-wait.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-wait.rsc b/global-wait.rsc
index 529dbd7b..bc984622 100644
--- a/global-wait.rsc
+++ b/global-wait.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: global-wait
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # wait for global-functions to finish
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/global-wait.md
+# https://rsc.eworm.de/doc/global-wait.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 72db13c0ab7bc2ba71400bb74976391d7a78e925 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 407/988] gps-track: use short url rsc.eworm.de

---
 gps-track.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gps-track.rsc b/gps-track.rsc
index 1bd976a0..08873de6 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: gps-track
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # track gps data by sending json data to http server
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/gps-track.md
+# https://rsc.eworm.de/doc/gps-track.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 996602bfe9f0363edae13c51604c23f46546ac49 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 408/988] hotspot-to-wpa-cleanup: use short url rsc.eworm.de

---
 hotspot-to-wpa-cleanup.capsman.rsc  | 4 ++--
 hotspot-to-wpa-cleanup.template.rsc | 4 ++--
 hotspot-to-wpa-cleanup.wifi.rsc     | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 1d27faf6..fde36f90 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa-cleanup.capsman
 # Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
 # requires RouterOS, version=7.14
 #
 # manage and clean up private WPA passphrase after hotspot login
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
+# https://rsc.eworm.de/doc/hotspot-to-wpa.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index f92dbe5e..3ddcbe0d 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa-cleanup%TEMPL%
 # Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
 # requires RouterOS, version=7.14
 #
 # manage and clean up private WPA passphrase after hotspot login
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
+# https://rsc.eworm.de/doc/hotspot-to-wpa.md
 #
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index cd215935..034530bb 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa-cleanup.wifi
 # Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
 # requires RouterOS, version=7.14
 #
 # manage and clean up private WPA passphrase after hotspot login
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
+# https://rsc.eworm.de/doc/hotspot-to-wpa.md
 #
 # !! Do not edit this file, it is generated from template!
 

From 9474102c62b4e9d36f908e40e14031da5a6fc116 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 409/988] hotspot-to-wpa: use short url rsc.eworm.de

---
 hotspot-to-wpa.capsman.rsc  | 4 ++--
 hotspot-to-wpa.template.rsc | 4 ++--
 hotspot-to-wpa.wifi.rsc     | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index d962ba75..1c77de96 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa.capsman
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # add private WPA passphrase after hotspot login
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
+# https://rsc.eworm.de/doc/hotspot-to-wpa.md
 #
 # !! Do not edit this file, it is generated from template!
 
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index 3438be70..d8cd261b 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa%TEMPL%
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # add private WPA passphrase after hotspot login
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
+# https://rsc.eworm.de/doc/hotspot-to-wpa.md
 #
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index a2bb3ca9..345087d9 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa.wifi
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # add private WPA passphrase after hotspot login
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
+# https://rsc.eworm.de/doc/hotspot-to-wpa.md
 #
 # !! Do not edit this file, it is generated from template!
 

From 453d80a121f7e92602466490b77b7d47ba3ef251 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 410/988] ip-addr-bridge: use short url rsc.eworm.de

---
 ip-addr-bridge.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ip-addr-bridge.rsc b/ip-addr-bridge.rsc
index 00b45a32..68ff4a41 100644
--- a/ip-addr-bridge.rsc
+++ b/ip-addr-bridge.rsc
@@ -1,10 +1,10 @@
 #!rsc by RouterOS
 # RouterOS script: ip-addr-bridge
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # enable or disable ip addresses based on bridge port state
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/ip-addr-bridge.md
+# https://rsc.eworm.de/doc/ip-addr-bridge.md
 
 :foreach Bridge in=[ /interface/bridge/find ] do={
   :local BrName [ /interface/bridge/get $Bridge name ];

From 02cc581aff6c6a4191620450e5607c74aeaca203 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 411/988] ipsec-to-dns: use short url rsc.eworm.de

---
 ipsec-to-dns.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index 39b21d5c..1af58091 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: ipsec-to-dns
 # Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # and add/remove/update DNS entries from IPSec mode-config
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/ipsec-to-dns.md
+# https://rsc.eworm.de/doc/ipsec-to-dns.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 71316f7377987124858d74a9f5f741a133047dec Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 412/988] ipv6-update: use short url rsc.eworm.de

---
 ipv6-update.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index a2fb8317..7eb625b2 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: ipv6-update
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # update firewall and dns settings on IPv6 prefix change
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/ipv6-update.md
+# https://rsc.eworm.de/doc/ipv6-update.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 5ead61cb6269ab5f2e6c145a4736765d938f6305 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 413/988] lease-script: use short url rsc.eworm.de

---
 lease-script.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lease-script.rsc b/lease-script.rsc
index 3d0fc72a..b6ceac96 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: lease-script
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # run scripts on DHCP lease
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/lease-script.md
+# https://rsc.eworm.de/doc/lease-script.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 5e60d2e1b7d1973a18737042e94d3e0ba262db14 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 414/988] leds-day-mode: use short url rsc.eworm.de

---
 leds-day-mode.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/leds-day-mode.rsc b/leds-day-mode.rsc
index e0f08d61..7344fde7 100644
--- a/leds-day-mode.rsc
+++ b/leds-day-mode.rsc
@@ -1,9 +1,9 @@
 #!rsc by RouterOS
 # RouterOS script: leds-day-mode
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # enable LEDs
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/leds-mode.md
+# https://rsc.eworm.de/doc/leds-mode.md
 
 /system/leds/settings/set all-leds-off=never;

From bf11489d11058562a1a10b883dbdb1d06f8c1a8e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 415/988] leds-night-mode: use short url rsc.eworm.de

---
 leds-night-mode.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/leds-night-mode.rsc b/leds-night-mode.rsc
index 1f50dfd5..8bd028e7 100644
--- a/leds-night-mode.rsc
+++ b/leds-night-mode.rsc
@@ -1,9 +1,9 @@
 #!rsc by RouterOS
 # RouterOS script: leds-night-mode
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # disable LEDs
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/leds-mode.md
+# https://rsc.eworm.de/doc/leds-mode.md
 
 /system/leds/settings/set all-leds-off=immediate;

From b75a35417a4dc0793515275bdee8443248f5762c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 416/988] leds-toggle-mode: use short url rsc.eworm.de

---
 leds-toggle-mode.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/leds-toggle-mode.rsc b/leds-toggle-mode.rsc
index 55d5b82d..b55e3514 100644
--- a/leds-toggle-mode.rsc
+++ b/leds-toggle-mode.rsc
@@ -1,9 +1,9 @@
 #!rsc by RouterOS
 # RouterOS script: leds-toggle-mode
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # toggle LEDs mode
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/leds-mode.md
+# https://rsc.eworm.de/doc/leds-mode.md
 
 /system/leds/settings/set all-leds-off=(({ "never"="immediate"; "immediate"="never" })->[ get all-leds-off ]);

From b8841a71356c6e25870913183d10ef9a8732a42d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 417/988] log-forward: use short url rsc.eworm.de

---
 log-forward.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/log-forward.rsc b/log-forward.rsc
index 8c2ebc0d..379fa54e 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: log-forward
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # forward log messages via notification
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/log-forward.md
+# https://rsc.eworm.de/doc/log-forward.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 6920842d1584a7c8b3a7208c1230a373d2932a8d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 418/988] mod/bridge-port-to: use short url rsc.eworm.de

---
 mod/bridge-port-to.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index ec6f6128..f00e10b1 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mod/bridge-port-to
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # reset bridge ports to default bridge
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/bridge-port-to.md
+# https://rsc.eworm.de/doc/mod/bridge-port-to.md
 
 :global BridgePortTo;
 

From d5a50d824f0343a70e1945127b42dde719d761d2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 419/988] mod/bridge-port-vlan: use short url rsc.eworm.de

---
 mod/bridge-port-vlan.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 62216467..62e71e38 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mod/bridge-port-vlan
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # manage VLANs on bridge ports
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/bridge-port-vlan.md
+# https://rsc.eworm.de/doc/mod/bridge-port-vlan.md
 
 :global BridgePortVlan;
 

From 18fcecd21126b72c9ba1aef4375450bb8751feb3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 420/988] mode-button: use short url rsc.eworm.de

---
 mode-button.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index f8bd7b83..9339f1c1 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mode-button
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # act on multiple mode and reset button presses
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mode-button.md
+# https://rsc.eworm.de/doc/mode-button.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 078d5368fbfa195d1e6584b3789cfb3078babad7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 421/988] mod/inspectvar: use short url rsc.eworm.de

---
 mod/inspectvar.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index 01724bb9..0f05da72 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mod/inspectvar
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # inspect variables
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/inspectvar.md
+# https://rsc.eworm.de/doc/mod/inspectvar.md
 
 :global InspectVar;
 :global InspectVarReturn;

From 828f68be3c85a43e28884546f74dab3aca403eb9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 422/988] mod/ipcalc: use short url rsc.eworm.de

---
 mod/ipcalc.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index 69dec8be..fbed74b5 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mod/ipcalc
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # ip address calculation
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/ipcalc.md
+# https://rsc.eworm.de/doc/mod/ipcalc.md
 
 :global IPCalc;
 :global IPCalcReturn;

From 631f63836b6b758c4ff3816ffdd5c76d95d31961 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 423/988] mod/notification-email: use short url rsc.eworm.de

---
 mod/notification-email.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 6d700f5e..ca23550c 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-email
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # send notifications via e-mail
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-email.md
+# https://rsc.eworm.de/doc/mod/notification-email.md
 
 :global EMailGenerateFrom;
 :global FlushEmailQueue;

From 6567a94a4f4e263308a0b01663448179e6554821 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 424/988] mod/notification-matrix: use short url rsc.eworm.de

---
 mod/notification-matrix.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index aad8b425..aee231d9 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: mod/notification-matrix
 # Copyright (c) 2013-2025 Michael Gisbers <michael@gisbers.de>
 #                         Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # send notifications via Matrix
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-matrix.md
+# https://rsc.eworm.de/doc/mod/notification-matrix.md
 
 :global FlushMatrixQueue;
 :global NotificationFunctions;

From 6e7f311269a1694dbc243eb60a363f1db4d89cd8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 425/988] mod/notification-ntfy: use short url rsc.eworm.de

---
 mod/notification-ntfy.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 53ba9b47..df252bbb 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-ntfy
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # send notifications via Ntfy (ntfy.sh)
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-ntfy.md
+# https://rsc.eworm.de/doc/mod/notification-ntfy.md
 
 :global FlushNtfyQueue;
 :global NotificationFunctions;

From 27144a428a03241a7e67859bfa6acfc37e62f6dc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 426/988] mod/notification-telegram: use short url rsc.eworm.de

---
 mod/notification-telegram.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index f9700cf0..a20367cd 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-telegram
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # send notifications via Telegram
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/notification-telegram.md
+# https://rsc.eworm.de/doc/mod/notification-telegram.md
 
 :global FlushTelegramQueue;
 :global NotificationFunctions;

From 66ab2a85114165ca2b5f4f5a6e221eed4c560b45 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 427/988] mod/scriptrunonce: use short url rsc.eworm.de

---
 mod/scriptrunonce.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 7e01e72e..cae2b051 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mod/scriptrunonece
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # download script and run it once
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/scriptrunonce.md
+# https://rsc.eworm.de/doc/mod/scriptrunonce.md
 
 :global ScriptRunOnce;
 

From ed184445783921343498f4f3589df858b2754cbd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 428/988] mod/ssh-keys-import: use short url rsc.eworm.de

---
 mod/ssh-keys-import.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index ad3a81ea..35aa7ec9 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: mod/ssh-keys-import
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.16
 #
 # import ssh keys for public key authentication
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/mod/ssh-keys-import.md
+# https://rsc.eworm.de/doc/mod/ssh-keys-import.md
 
 :global SSHKeysImport;
 :global SSHKeysImportFile;

From 299b34883ff508291dfa4acf04118695223c0cd3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 429/988] netwatch-dns: use short url rsc.eworm.de

---
 netwatch-dns.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 81f9d95d..e05c3ac7 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: netwatch-dns
 # Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.16
 #
 # monitor and manage dns/doh with netwatch
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/netwatch-dns.md
+# https://rsc.eworm.de/doc/netwatch-dns.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 563aeb8f71da109060961a16541f56c7dc019e2b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 430/988] netwatch-notify: use short url rsc.eworm.de

---
 netwatch-notify.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index e79977ea..8b05c5e3 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: netwatch-notify
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
 #
 # monitor netwatch and send notifications
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/netwatch-notify.md
+# https://rsc.eworm.de/doc/netwatch-notify.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 719079c5c1298a4800ac482247ee9ac5a9502740 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 431/988] news-and-changes: use short url rsc.eworm.de

---
 news-and-changes.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 545a0c93..7508b43f 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -1,6 +1,6 @@
 # News, changes and migration by RouterOS Scripts
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 
 :global IDonate;
 

From 3b0ea3a2388c69914fa76204c6e940b60f6aee83 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 432/988] ospf-to-leds: use short url rsc.eworm.de

---
 ospf-to-leds.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index 3400e7ff..9d822c15 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: ospf-to-leds
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # visualize ospf instance state via leds
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/ospf-to-leds.md
+# https://rsc.eworm.de/doc/ospf-to-leds.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 90a148a9d86f069048974399feca29a7911e833d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 433/988] packages-update: use short url rsc.eworm.de

---
 packages-update.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index 7644219c..9971e47c 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: packages-update
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # download packages and reboot for installation
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/packages-update.md
+# https://rsc.eworm.de/doc/packages-update.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 867e504c94faf9d87b8caa6e4d77cd5426af9f73 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 434/988] ppp-on-up: use short url rsc.eworm.de

---
 ppp-on-up.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index ba9d0aae..85e96896 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: ppp-on-up
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # run scripts on ppp up
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/ppp-on-up.md
+# https://rsc.eworm.de/doc/ppp-on-up.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 1f5aea9fca6ecd5706cb29c8226109281333510d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 435/988] sms-action: use short url rsc.eworm.de

---
 sms-action.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sms-action.rsc b/sms-action.rsc
index f22a0bb1..34d21272 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: sms-action
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # run action on received SMS
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/sms-action.md
+# https://rsc.eworm.de/doc/sms-action.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 7addf2e53a73e230aeac962c9b86a1f1f7e2ddd4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 436/988] sms-forward: use short url rsc.eworm.de

---
 sms-forward.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index efebb758..654fd564 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -2,12 +2,12 @@
 # RouterOS script: sms-forward
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Anatoly Bubenkov <bubenkoff@gmail.com>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # forward SMS to e-mail
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/sms-forward.md
+# https://rsc.eworm.de/doc/sms-forward.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From dd2854e983685ae39465c4375bbdb7b4d27956e8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 437/988] super-mario-theme: use short url rsc.eworm.de

---
 super-mario-theme.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/super-mario-theme.rsc b/super-mario-theme.rsc
index fc868c8d..726c5267 100644
--- a/super-mario-theme.rsc
+++ b/super-mario-theme.rsc
@@ -1,10 +1,10 @@
 #!rsc by RouterOS
 # RouterOS script: super-mario-theme
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # play Super Mario theme
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/super-mario-theme.md
+# https://rsc.eworm.de/doc/super-mario-theme.md
 
 :local Beeps {
   {  660; 100 }; 150; {  660; 100 }; 300; {  660; 100 }; 300;

From e3ca37ad9a6f49ae5990e0fb4630d40e77153439 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:12 +0100
Subject: [PATCH 438/988] telegram-chat: use short url rsc.eworm.de

---
 telegram-chat.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index eebb617e..dcdbefa4 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: telegram-chat
 # Copyright (c) 2023-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
 #
 # use Telegram to chat with your Router and send commands
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/telegram-chat.md
+# https://rsc.eworm.de/doc/telegram-chat.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 32ac10e6efcd8967b998aef066220a75d4819e0c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 439/988] unattended-lte-firmware-upgrade: use short url
 rsc.eworm.de

---
 unattended-lte-firmware-upgrade.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index ea18edfc..c7df92f4 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -1,12 +1,12 @@
 #!rsc by RouterOS
 # RouterOS script: unattended-lte-firmware-upgrade
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # schedule unattended lte firmware upgrade
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/unattended-lte-firmware-upgrade.md
+# https://rsc.eworm.de/doc/unattended-lte-firmware-upgrade.md
 
 :foreach Interface in=[ /interface/lte/find where running ] do={
   :local Firmware;

From 49aef0606bb36ee1b0d2ed93e7ce6b63d38338da Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 440/988] update-gre-address: use short url rsc.eworm.de

---
 update-gre-address.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 4ac311a1..6b169a00 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -1,13 +1,13 @@
 #!rsc by RouterOS
 # RouterOS script: update-gre-address
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
 #
 # update gre interface remote address with dynamic address from
 # ipsec remote peer
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/update-gre-address.md
+# https://rsc.eworm.de/doc/update-gre-address.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From c04ee5aadf4880bcea019f1cdcc1bfca918cce2c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Jan 2025 20:46:11 +0100
Subject: [PATCH 441/988] update-tunnelbroker: use short url rsc.eworm.de

---
 update-tunnelbroker.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 589544c4..c47a45f3 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -2,13 +2,13 @@
 # RouterOS script: update-tunnelbroker
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
-# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+# https://rsc.eworm.de/COPYING.md
 #
 # provides: ppp-on-up
 # requires RouterOS, version=7.14
 #
 # update local address of tunnelbroker interface
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/update-tunnelbroker.md
+# https://rsc.eworm.de/doc/update-tunnelbroker.md
 
 :global GlobalFunctionsReady;
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

From 106a9bddefd7577b4baf7ae1d78e1bbde09b281e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 09:18:48 +0100
Subject: [PATCH 442/988] README: give hint on device mode

---
 README.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/README.md b/README.md
index 98209bd5..8594f58a 100644
--- a/README.md
+++ b/README.md
@@ -34,6 +34,12 @@ Specific scripts may require even newer RouterOS version.
 > ℹ️ **Info**: The `main` branch is now RouterOS v7 only. If you are still
 > running RouterOS v6 switch to `routeros-v6` branch!
 
+Starting with RouterOS 7.17 the
+[device-mode](https://help.mikrotik.com/docs/spaces/ROS/pages/93749258/Device-mode)
+has been extended to give more fine-grained control over what features are
+available. You need to enable `scheduler` and `fetch` at least, specific
+scripts may require additional features.
+
 ### Hardware
 
 RouterOS packages increase in size with each release. This becomes a

From b177e298d7b447c41854d840eed6f687b6cec8b6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 09:45:25 +0100
Subject: [PATCH 443/988] global-functions: $ScriptInstallUpdate: support
 checking for device-mode features

---
 global-functions.rsc | 34 ++++++++++++++++++++++++----------
 1 file changed, 24 insertions(+), 10 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index d5ac31ca..7d65f45d 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -5,6 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, fetch, scheduler
 #
 # global functions
 # https://rsc.eworm.de/
@@ -1071,6 +1072,7 @@
   :local ExpectedConfigVersionBefore $ExpectedConfigVersion;
   :local ReloadGlobalFunctions false;
   :local ReloadGlobalConfig false;
+  :local DeviceMode [ /system/device-mode/get ];
 
   :foreach Script in=[ /system/script/find where source~"^#!rsc by RouterOS\r?\n" ] do={
     :local ScriptVal [ /system/script/get $Script ];
@@ -1113,19 +1115,31 @@
         :if ([ :pick $SourceNew 0 18 ] = "#!rsc by RouterOS\n") do={
           :local Required ([ $ParseKeyValueStore [ $Grep $SourceNew ("\23 requires RouterOS, ") ] ]->"version");
           :if ([ $RequiredRouterOS $0 [ $EitherOr $Required "0.0" ] false ] = true) do={
-            :if ([ $ValidateSyntax $SourceNew ] = true) do={
-              $LogPrint info $0 ("Updating script: " . $ScriptVal->"name");
-              /system/script/set owner=($ScriptVal->"name") \
-                  source=[ $IfThenElse ($ScriptUpdatesCRLF = true) $SourceCRLF $SourceNew ] $Script;
-              :if ($ScriptVal->"name" = "global-config") do={
-                :set ReloadGlobalConfig true;
+            :local RequiredDM [ $ParseKeyValueStore [ $Grep $SourceNew ("\23 requires device-mode, ") ] ];
+            :local MissingDM ({});
+            :foreach Feature,Value in=$RequiredDM do={
+              :if ([ :typeof ($DeviceMode->$Feature) ] = "bool" && ($DeviceMode->$Feature) = false) do={
+                :set MissingDM ($MissingDM, $Feature);
               }
-              :if ($ScriptVal->"name" = "global-functions" || $ScriptVal->"name" ~ ("^mod/.")) do={
-                :set ReloadGlobalFunctions true;
+            }
+            :if ([ :len $MissingDM ] = 0) do={
+              :if ([ $ValidateSyntax $SourceNew ] = true) do={
+                $LogPrint info $0 ("Updating script: " . $ScriptVal->"name");
+                /system/script/set owner=($ScriptVal->"name") \
+                    source=[ $IfThenElse ($ScriptUpdatesCRLF = true) $SourceCRLF $SourceNew ] $Script;
+                :if ($ScriptVal->"name" = "global-config") do={
+                  :set ReloadGlobalConfig true;
+                }
+                :if ($ScriptVal->"name" = "global-functions" || $ScriptVal->"name" ~ ("^mod/.")) do={
+                  :set ReloadGlobalFunctions true;
+                }
+              } else={
+                $LogPrint warning $0 ("Syntax validation for script '" . $ScriptVal->"name" . \
+                  "' failed! Ignoring!");
               }
             } else={
-              $LogPrint warning $0 ("Syntax validation for script '" . $ScriptVal->"name" . \
-                "' failed! Ignoring!");
+              $LogPrintOnce warning $0 ("The script '" . $ScriptVal->"name" . "' requires disabled " . \
+                "device-mode features (" . [ :tostr $MissingDM ] . "). Ignoring!");
             }
           } else={
             $LogPrintOnce warning $0 ("The script '" . $ScriptVal->"name" . "' requires RouterOS " . \

From aebc4e37da1a8e9ed1b343a83c7d60ac50fab9d5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:26:22 +0100
Subject: [PATCH 444/988] backup-partition: add dependencies on device-mode

---
 backup-partition.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index b8bf7b1e..bfa7765c 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -5,6 +5,7 @@
 #
 # provides: backup-script, order=70
 # requires RouterOS, version=7.14
+# requires device-mode, scheduler
 #
 # save configuration to fallback partition
 # https://rsc.eworm.de/doc/backup-partition.md

From d81a786e8288fea463c7188f1939c59713add31a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:20:26 +0100
Subject: [PATCH 445/988] backup-upload: add dependencies on device-mode

---
 backup-upload.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 011c5029..dc5120f5 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -5,6 +5,7 @@
 #
 # provides: backup-script, order=50
 # requires RouterOS, version=7.14
+# requires device-mode, fetch
 #
 # create and upload backup and config file
 # https://rsc.eworm.de/doc/backup-upload.md

From 95b675f67ec9d7c5a9df01a54c1754834b02beee Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:21:12 +0100
Subject: [PATCH 446/988] check-certificates: add dependencies on device-mode

---
 check-certificates.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 02e3e520..4271e00b 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, fetch
 #
 # check for certificate validity
 # https://rsc.eworm.de/doc/check-certificates.md

From 43f6c0b975bb4db73131f78014ca3d59123bd4a6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:21:26 +0100
Subject: [PATCH 447/988] check-routeros-update: add dependencies on
 device-mode

---
 check-routeros-update.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 9486d6c1..5c9b392f 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, fetch, scheduler
 #
 # check for RouterOS update, send notification and/or install
 # https://rsc.eworm.de/doc/check-routeros-update.md

From bc0227c49b99372ff46516e55175cf6ae1da31d3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:21:40 +0100
Subject: [PATCH 448/988] gps-track: add dependencies on device-mode

---
 gps-track.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/gps-track.rsc b/gps-track.rsc
index 08873de6..5e35f8da 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, fetch
 #
 # track gps data by sending json data to http server
 # https://rsc.eworm.de/doc/gps-track.md

From e29ef31eb85e9b9001536ed1bb63a0b479cf4cad Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:35:31 +0100
Subject: [PATCH 449/988] hotspot-to-wpa: add dependencies on device-mode

---
 hotspot-to-wpa.capsman.rsc  | 1 +
 hotspot-to-wpa.template.rsc | 1 +
 hotspot-to-wpa.wifi.rsc     | 1 +
 3 files changed, 3 insertions(+)

diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index 1c77de96..de9f9d9a 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, hotspot
 #
 # add private WPA passphrase after hotspot login
 # https://rsc.eworm.de/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index d8cd261b..003b12e2 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, hotspot
 #
 # add private WPA passphrase after hotspot login
 # https://rsc.eworm.de/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index 345087d9..0d6a7b96 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, hotspot
 #
 # add private WPA passphrase after hotspot login
 # https://rsc.eworm.de/doc/hotspot-to-wpa.md

From 1ad4d05be8a69490902308baa515b8c87095bb2d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:35:23 +0100
Subject: [PATCH 450/988] hotspot-to-wpa-cleanup: add dependencies on
 device-mode

---
 hotspot-to-wpa-cleanup.capsman.rsc  | 1 +
 hotspot-to-wpa-cleanup.template.rsc | 1 +
 hotspot-to-wpa-cleanup.wifi.rsc     | 1 +
 3 files changed, 3 insertions(+)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index fde36f90..c21ec3ea 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -5,6 +5,7 @@
 #
 # provides: lease-script, order=80
 # requires RouterOS, version=7.14
+# requires device-mode, hotspot
 #
 # manage and clean up private WPA passphrase after hotspot login
 # https://rsc.eworm.de/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 3ddcbe0d..1bd877e9 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -5,6 +5,7 @@
 #
 # provides: lease-script, order=80
 # requires RouterOS, version=7.14
+# requires device-mode, hotspot
 #
 # manage and clean up private WPA passphrase after hotspot login
 # https://rsc.eworm.de/doc/hotspot-to-wpa.md
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 034530bb..8e362048 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -5,6 +5,7 @@
 #
 # provides: lease-script, order=80
 # requires RouterOS, version=7.14
+# requires device-mode, hotspot
 #
 # manage and clean up private WPA passphrase after hotspot login
 # https://rsc.eworm.de/doc/hotspot-to-wpa.md

From 5f1cbe6de5466ccaaf1b5eb29f7087f04cf342c3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:25:15 +0100
Subject: [PATCH 451/988] ipsec-to-dns: add dependencies on device-mode

---
 ipsec-to-dns.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index 1af58091..91f6b45e 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, ipsec
 #
 # and add/remove/update DNS entries from IPSec mode-config
 # https://rsc.eworm.de/doc/ipsec-to-dns.md

From 56e74268b079fba7bda8803c0d88eeb67d0f4397 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:31:30 +0100
Subject: [PATCH 452/988] mode-button: add dependencies on device-mode

---
 mode-button.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mode-button.rsc b/mode-button.rsc
index 9339f1c1..4cf5e754 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, scheduler
 #
 # act on multiple mode and reset button presses
 # https://rsc.eworm.de/doc/mode-button.md

From 370e81321fe485a94560b4debe2ce7044c99e86f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:15:49 +0100
Subject: [PATCH 453/988] mod/notification-email: add dependencies on
 device-mode

---
 mod/notification-email.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index ca23550c..404e74db 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, email, scheduler
 #
 # send notifications via e-mail
 # https://rsc.eworm.de/doc/mod/notification-email.md

From 9a12934202c1bf8f46b326b37e7b06d84609c4ce Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:21:57 +0100
Subject: [PATCH 454/988] mod/notification-matrix: add dependencies on
 device-mode

---
 mod/notification-matrix.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index aee231d9..9b2b641c 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -5,6 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, fetch, scheduler
 #
 # send notifications via Matrix
 # https://rsc.eworm.de/doc/mod/notification-matrix.md

From 9f2f54b4790659189c60e72918cc200625c22d25 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:22:08 +0100
Subject: [PATCH 455/988] mod/notification-ntfy: add dependencies on
 device-mode

---
 mod/notification-ntfy.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index df252bbb..212fde2e 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, fetch, scheduler
 #
 # send notifications via Ntfy (ntfy.sh)
 # https://rsc.eworm.de/doc/mod/notification-ntfy.md

From 378a8978dfb86f1f690732cc0e513330282bcd98 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:22:22 +0100
Subject: [PATCH 456/988] mod/notification-telegram: add dependencies on
 device-mode

---
 mod/notification-telegram.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index a20367cd..c3ef2dd3 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, fetch, scheduler
 #
 # send notifications via Telegram
 # https://rsc.eworm.de/doc/mod/notification-telegram.md

From 59c9d0ce4bf97407a5f35d8556ecc9f4f03ca752 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:22:43 +0100
Subject: [PATCH 457/988] mod/scriptrunonce: add dependencies on device-mode

---
 mod/scriptrunonce.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index cae2b051..e5368c45 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, fetch
 #
 # download script and run it once
 # https://rsc.eworm.de/doc/mod/scriptrunonce.md

From 3ef458860153ab858eec70e0899efa91a84236d4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:22:55 +0100
Subject: [PATCH 458/988] netwatch-dns: add dependencies on device-mode

---
 netwatch-dns.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index e05c3ac7..467d6362 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.16
+# requires device-mode, fetch
 #
 # monitor and manage dns/doh with netwatch
 # https://rsc.eworm.de/doc/netwatch-dns.md

From 8dc1e1ea6bdb815de28823dfa43d1cfeda67379f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:32:17 +0100
Subject: [PATCH 459/988] packages-update: add dependencies on device-mode

---
 packages-update.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/packages-update.rsc b/packages-update.rsc
index 9971e47c..ff47b2a3 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, scheduler
 #
 # download packages and reboot for installation
 # https://rsc.eworm.de/doc/packages-update.md

From ef48b8d39ebacf2bd1c560c6dea33399a9a47b47 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:23:58 +0100
Subject: [PATCH 460/988] telegram-chat: add dependencies on device-mode

---
 telegram-chat.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index dcdbefa4..8f29d8c0 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
+# requires device-mode, fetch
 #
 # use Telegram to chat with your Router and send commands
 # https://rsc.eworm.de/doc/telegram-chat.md

From 9421566352041654e1f2ded815739b040eec1df4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:28:40 +0100
Subject: [PATCH 461/988] unattended-lte-firmware-upgrade: add dependencies on
 device-mode

---
 unattended-lte-firmware-upgrade.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index c7df92f4..74495d1a 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -4,6 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.14
+# requires device-mode, scheduler
 #
 # schedule unattended lte firmware upgrade
 # https://rsc.eworm.de/doc/unattended-lte-firmware-upgrade.md

From d921af9a6bda54da74f6b7520db1a8e5697c8c3e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 10:23:06 +0100
Subject: [PATCH 462/988] update-tunnelbroker: add dependencies on device-mode

---
 update-tunnelbroker.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index c47a45f3..a58589b8 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -6,6 +6,7 @@
 #
 # provides: ppp-on-up
 # requires RouterOS, version=7.14
+# requires device-mode, fetch
 #
 # update local address of tunnelbroker interface
 # https://rsc.eworm.de/doc/update-tunnelbroker.md

From 8b19e74736693483faf533fd22fce458ae4fac9e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 21:58:47 +0100
Subject: [PATCH 463/988] global-functions: $ScriptInstallUpdate: resolve
 nested conditions...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

... and check one after another in a do-block. This uses `:error` as
poor man's continue. 🤪
---
 global-functions.rsc | 97 ++++++++++++++++++++++++--------------------
 1 file changed, 52 insertions(+), 45 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 7d65f45d..befe8f0a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1109,52 +1109,59 @@
       }
     }
 
-    :if ([ :len $SourceNew ] > 0) do={
-      :local SourceCRLF [ :tocrlf $SourceNew ];
-      :if ($SourceNew != $ScriptVal->"source" && $SourceCRLF != $ScriptVal->"source") do={
-        :if ([ :pick $SourceNew 0 18 ] = "#!rsc by RouterOS\n") do={
-          :local Required ([ $ParseKeyValueStore [ $Grep $SourceNew ("\23 requires RouterOS, ") ] ]->"version");
-          :if ([ $RequiredRouterOS $0 [ $EitherOr $Required "0.0" ] false ] = true) do={
-            :local RequiredDM [ $ParseKeyValueStore [ $Grep $SourceNew ("\23 requires device-mode, ") ] ];
-            :local MissingDM ({});
-            :foreach Feature,Value in=$RequiredDM do={
-              :if ([ :typeof ($DeviceMode->$Feature) ] = "bool" && ($DeviceMode->$Feature) = false) do={
-                :set MissingDM ($MissingDM, $Feature);
-              }
-            }
-            :if ([ :len $MissingDM ] = 0) do={
-              :if ([ $ValidateSyntax $SourceNew ] = true) do={
-                $LogPrint info $0 ("Updating script: " . $ScriptVal->"name");
-                /system/script/set owner=($ScriptVal->"name") \
-                    source=[ $IfThenElse ($ScriptUpdatesCRLF = true) $SourceCRLF $SourceNew ] $Script;
-                :if ($ScriptVal->"name" = "global-config") do={
-                  :set ReloadGlobalConfig true;
-                }
-                :if ($ScriptVal->"name" = "global-functions" || $ScriptVal->"name" ~ ("^mod/.")) do={
-                  :set ReloadGlobalFunctions true;
-                }
-              } else={
-                $LogPrint warning $0 ("Syntax validation for script '" . $ScriptVal->"name" . \
-                  "' failed! Ignoring!");
-              }
-            } else={
-              $LogPrintOnce warning $0 ("The script '" . $ScriptVal->"name" . "' requires disabled " . \
-                "device-mode features (" . [ :tostr $MissingDM ] . "). Ignoring!");
-            }
-          } else={
-            $LogPrintOnce warning $0 ("The script '" . $ScriptVal->"name" . "' requires RouterOS " . \
-              $Required . ", which is not met by your installation. Ignoring!");
-          }
-        } else={
-          $LogPrint warning $0 ("Looks like new script '" . $ScriptVal->"name" . \
-            "' is not valid (missing shebang). Ignoring!");
-        }
-      } else={
-        $LogPrint debug $0 ("Script '" .  $ScriptVal->"name" . "' did not change.");
+    :do {
+      :if ([ :len $SourceNew ] = 0) do={
+        $LogPrint debug $0 ("No update for script '" . $ScriptVal->"name" . "'.");
+        :error false;
       }
-    } else={
-      $LogPrint debug $0 ("No update for script '" . $ScriptVal->"name" . "'.");
-    }
+
+      :local SourceCRLF [ :tocrlf $SourceNew ];
+      :if ($SourceNew = $ScriptVal->"source" || $SourceCRLF = $ScriptVal->"source") do={
+        $LogPrint debug $0 ("Script '" .  $ScriptVal->"name" . "' did not change.");
+        :error false;
+      }
+
+      :if ([ :pick $SourceNew 0 18 ] != "#!rsc by RouterOS\n") do={
+        $LogPrint warning $0 ("Looks like new script '" . $ScriptVal->"name" . \
+            "' is not valid (missing shebang). Ignoring!");
+        :error false;
+      }
+
+      :local RequiredROS ([ $ParseKeyValueStore [ $Grep $SourceNew ("\23 requires RouterOS, ") ] ]->"version");
+      :if ([ $RequiredRouterOS $0 [ $EitherOr $RequiredROS "0.0" ] false ] = false) do={
+        $LogPrintOnce warning $0 ("The script '" . $ScriptVal->"name" . "' requires RouterOS " . \
+            $RequiredROS . ", which is not met by your installation. Ignoring!");
+        :error false;
+      }
+
+      :local RequiredDM [ $ParseKeyValueStore [ $Grep $SourceNew ("\23 requires device-mode, ") ] ];
+      :local MissingDM ({});
+      :foreach Feature,Value in=$RequiredDM do={
+        :if ([ :typeof ($DeviceMode->$Feature) ] = "bool" && ($DeviceMode->$Feature) = false) do={
+          :set MissingDM ($MissingDM, $Feature);
+        }
+      }
+      :if ([ :len $MissingDM ] > 0) do={
+        $LogPrintOnce warning $0 ("The script '" . $ScriptVal->"name" . "' requires disabled " . \
+            "device-mode features (" . [ :tostr $MissingDM ] . "). Ignoring!");
+        :error false;
+      }
+
+      :if ([ $ValidateSyntax $SourceNew ] = false) do={
+        $LogPrint warning $0 ("Syntax validation for script '" . $ScriptVal->"name" . "' failed! Ignoring!");
+        :error false;
+      }
+
+      $LogPrint info $0 ("Updating script: " . $ScriptVal->"name");
+      /system/script/set owner=($ScriptVal->"name") \
+          source=[ $IfThenElse ($ScriptUpdatesCRLF = true) $SourceCRLF $SourceNew ] $Script;
+      :if ($ScriptVal->"name" = "global-config") do={
+        :set ReloadGlobalConfig true;
+      }
+      :if ($ScriptVal->"name" = "global-functions" || $ScriptVal->"name" ~ ("^mod/.")) do={
+        :set ReloadGlobalFunctions true;
+      }
+    } on-error={ }
   }
 
   :if ($ReloadGlobalFunctions = true) do={

From 414c83ef814af82d53f5b4de3a8d6b5a004704c1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2025 22:07:06 +0100
Subject: [PATCH 464/988] global-functions: $ScriptInstallUpdate: resolve more
 nested conditions

Just like the previous one.
---
 global-functions.rsc | 28 +++++++++++++++++-----------
 1 file changed, 17 insertions(+), 11 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index befe8f0a..a2ec8338 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1221,18 +1221,24 @@
     :if ([ :len $GlobalConfigMigration ] > 0) do={
       :for I from=($ExpectedConfigVersionBefore + 1) to=$ExpectedConfigVersion do={
         :local Migration ($GlobalConfigMigration->[ :tostr $I ]);
-        :if ([ :typeof $Migration ] = "str") do={
-          :if ([ $ValidateSyntax $Migration ] = true) do={
-            $LogPrint info $0 ("Applying migration for change " . $I . ": " . $Migration);
-            :do {
-              [ :parse $Migration ];
-            } on-error={
-              $LogPrint warning $0 ("Migration code for change " . $I . " failed to run!");
-            }
-          } else={
-            $LogPrint warning $0 ("Migration code for change " . $I . " failed syntax validation!");
+        :do {
+          :if ([ :typeof $Migration ] != "str") do={
+            $LogPrint debug $0 ("Migration code for change " . $I . " is not available.");
+            :error false;
           }
-        }
+
+          :if ([ $ValidateSyntax $Migration ] = false) do={
+            $LogPrint warning $0 ("Migration code for change " . $I . " failed syntax validation!");
+            :error false;
+          }
+
+          $LogPrint info $0 ("Applying migration for change " . $I . ": " . $Migration);
+          :do {
+            [ :parse $Migration ];
+          } on-error={
+            $LogPrint warning $0 ("Migration code for change " . $I . " failed to run!");
+          }
+        } on-error={ }
       }
     }
 

From aa294b4c67d038eae1b4e785dfd934176a1fb704 Mon Sep 17 00:00:00 2001
From: Miquel Bonastre <mbonastre@yahoo.com>
Date: Thu, 30 Jan 2025 20:27:14 +0100
Subject: [PATCH 465/988] certs: fix curl false positives...

... when default capath contains system certs

If curl has a default capath (debian 12 capath=/etc/ssl/certs)
it will add those certs and return ok to any valid https url,
defeating the intended use of the cacert option in the Makefile
that validates sites and certs.

To avoid that, adding option "--capath /dev/null" overrides
the default value, if any.

Closes: https://github.com/eworm-de/routeros-scripts/pull/88
---
 certs/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/certs/Makefile b/certs/Makefile
index 870cb542..b5f6a926 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -29,4 +29,4 @@ DOMAINS = \
 all: $(DOMAINS)
 
 $(DOMAINS):
-	curl --output /dev/null --silent --connect-timeout 5 --cacert $(notdir $@).pem https://$(dir $@)
+	curl --output /dev/null --silent --connect-timeout 5 --capath /dev/null --cacert $(notdir $@).pem https://$(dir $@)

From fcb5347e3398dd8c77c44904a4bf0cefc57f3174 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 30 Jan 2025 22:16:49 +0100
Subject: [PATCH 466/988] certs: split checks for dual, ipv4 & ipv6...

... and check both if available.
---
 certs/Makefile | 48 ++++++++++++++++++++++++++++++++++--------------
 1 file changed, 34 insertions(+), 14 deletions(-)

diff --git a/certs/Makefile b/certs/Makefile
index b5f6a926..87b4feb3 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -1,32 +1,52 @@
 # Makefile to check certificates
 
-DOMAINS = \
-	1.1.1.1/DigiCert-Global-Root-G2 \
-	8.8.8.8/GTS-Root-R1 \
-	9.9.9.9/DigiCert-Global-Root-G3 \
+CURL = curl \
+	--capath /dev/null \
+	--connect-timeout 5 \
+	--output /dev/null \
+	--silent
+
+DOMAINS_DUAL = \
 	api.macvendors.com/GTS-Root-R4 \
-	api.mullvad.net/ISRG-Root-X1 \
 	api.telegram.org/Go-Daddy-Root-Certificate-Authority-G2 \
 	cloudflare-dns.com/DigiCert-Global-Root-G2 \
 	dns.google/GTS-Root-R1 \
 	dns.quad9.net/DigiCert-Global-Root-G3 \
-	feodotracker.abuse.ch/GlobalSign \
 	git.eworm.de/ISRG-Root-X2 \
-	ipv4.showipv6.de/ISRG-Root-X1 \
-	ipv4.tunnelbroker.net/Starfield-Root-Certificate-Authority-G2 \
-	ipv6.showipv6.de/ISRG-Root-X1 \
 	lists.blocklist.de/Certum-Trusted-Network-CA \
 	matrix.org/GTS-Root-R4 \
+	raw.githubusercontent.com/DigiCert-Global-Root-G2 \
+	rsc.eworm.de/ISRG-Root-X2 \
+	upgrade.mikrotik.com/ISRG-Root-X1
+DOMAINS_IPV4 = \
+	1.1.1.1/DigiCert-Global-Root-G2 \
+	8.8.8.8/GTS-Root-R1 \
+	9.9.9.9/DigiCert-Global-Root-G3 \
+	api.mullvad.net/ISRG-Root-X1 \
+	feodotracker.abuse.ch/GlobalSign \
+	ipv4.showipv6.de/ISRG-Root-X1 \
+	ipv4.tunnelbroker.net/Starfield-Root-Certificate-Authority-G2 \
 	mkcert.org/ISRG-Root-X1 \
 	ntfy.sh/ISRG-Root-X1 \
 	sslbl.abuse.ch/GlobalSign \
-	upgrade.mikrotik.com/ISRG-Root-X1 \
 	www.dshield.org/ISRG-Root-X1 \
 	www.spamhaus.org/GTS-Root-R4
+DOMAINS_IPV6 = \
+	[2606\:4700\:4700\:\:1111]/DigiCert-Global-Root-G2 \
+	[2001\:4860\:4860\:\:8888]/GTS-Root-R1 \
+	[2620\:fe\:\:9]/DigiCert-Global-Root-G3 \
+	ipv6.showipv6.de/ISRG-Root-X1
 
-.PHONY: $(DOMAINS)
+.PHONY: $(DOMAINS_DUAL) $(DOMAINS_IPV4) $(DOMAINS_IPV6)
 
-all: $(DOMAINS)
+all: $(DOMAINS_DUAL) $(DOMAINS_IPV4) $(DOMAINS_IPV6)
 
-$(DOMAINS):
-	curl --output /dev/null --silent --connect-timeout 5 --capath /dev/null --cacert $(notdir $@).pem https://$(dir $@)
+$(DOMAINS_DUAL):
+	$(CURL) -4 --cacert $(notdir $@).pem https://$(dir $@)
+	$(CURL) -6 --cacert $(notdir $@).pem https://$(dir $@)
+
+$(DOMAINS_IPV4):
+	$(CURL) -4 --cacert $(notdir $@).pem https://$(dir $@)
+
+$(DOMAINS_IPV6):
+	$(CURL) -6 --cacert $(notdir $@).pem https://$(dir $@)

From 87fb70534f8d86509505185f787118c64b3924ba Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 30 Jan 2025 22:25:55 +0100
Subject: [PATCH 467/988] certs: support checking ipv4 or ipv6 only

Just run for IPv4 only:

    make NOIPV6=1

... or for IPv6 only:

    make NOIPV4=1
---
 certs/Makefile | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/certs/Makefile b/certs/Makefile
index 87b4feb3..5dfb0d10 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -42,11 +42,19 @@ DOMAINS_IPV6 = \
 all: $(DOMAINS_DUAL) $(DOMAINS_IPV4) $(DOMAINS_IPV6)
 
 $(DOMAINS_DUAL):
+ifndef NOIPV4
 	$(CURL) -4 --cacert $(notdir $@).pem https://$(dir $@)
+endif
+ifndef NOIPV6
 	$(CURL) -6 --cacert $(notdir $@).pem https://$(dir $@)
+endif
 
 $(DOMAINS_IPV4):
+ifndef NOIPV4
 	$(CURL) -4 --cacert $(notdir $@).pem https://$(dir $@)
+endif
 
 $(DOMAINS_IPV6):
+ifndef NOIPV6
 	$(CURL) -6 --cacert $(notdir $@).pem https://$(dir $@)
+endif

From 0eb91b6bfa8e22f24f0be8052ae2b93c0114ae59 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 30 Jan 2025 22:30:57 +0100
Subject: [PATCH 468/988] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index ed1d6faa..ef1bd8bf 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -22,6 +22,7 @@ for details!
 * [Daniel Ziegenberg](mailto:daniel@ziegenberg.at) (@ziegenberg)
 * [Ignacio Serrano](mailto:ignic@ignic.com) (@ignic)
 * [Michael Gisbers](mailto:michael@gisbers.de) (@mgisbers)
+* [Miquel Bonastre](mailto:mbonastre@yahoo.com) (@mbonastre)
 * @netravnen
 * [netztrip](mailto:dave-tvg@netztrip.de) (@netztrip)
 * [Stefan Müller](mailto:stefan.mueller.83@gmail.com) (@PackElend)

From 44d0c852f11cce04139a25613822f103e39e06b1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 31 Jan 2025 11:39:51 +0100
Subject: [PATCH 469/988] check-certificates: try with "star." for renewal with
 wildcards

---
 check-certificates.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 4271e00b..a61cf81f 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -158,6 +158,10 @@
         :if ($ImportSuccess = false) do={
           :set LastName [ :pick $SAN ([ :find $SAN ":" ] + 1) [ :len $SAN ] ];
           :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName ];
+          :if ($ImportSuccess = false && [ :pick $LastName 0 ] = "*") do={
+            :set LastName ("star." . [ :pick $LastName 2 [ :len $LastName ] ]);
+            :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName ];
+          }
         }
       }
       :if ($ImportSuccess = false) do={ :error false; }

From 75e5ddec527ac505540306ca5b26b7c40cdb1b5d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 31 Jan 2025 13:09:22 +0100
Subject: [PATCH 470/988] check-certificates: do not rename the wrong
 certificate

---
 check-certificates.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index a61cf81f..2900a834 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -68,8 +68,10 @@
           $LogPrint warning $ScriptName ("Decryption failed for certificate file '" . $CertFileName . "'.");
         }
 
-        :foreach CertInChain in=[ /certificate/find where name~("^" . [ $EscapeForRegEx $CertFileName ] . "_[0-9]+\$") \
-            common-name!=$Name !(subject-alt-name~("(^|\\W)(DNS|IP):" . [ $EscapeForRegEx $Name ] . "(\\W|\$)")) !(common-name=[]) ] do={
+        :foreach CertInChain in=[ /certificate/find where common-name!=$Name !private-key \
+            name~("^" . [ $EscapeForRegEx $CertFileName ] . "_[0-9]+\$") \
+            !(subject-alt-name~("(^|\\W)(DNS|IP):" . [ $EscapeForRegEx $Name ] . "(\\W|\$)")) \
+            !(common-name=[]) ] do={
           $CertificateNameByCN [ /certificate/get $CertInChain common-name ];
         }
 

From eabe3f6e951010ff9c112d82ee27bc39e3786960 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 31 Jan 2025 21:33:57 +0100
Subject: [PATCH 471/988] check-certificates: pass real and modified name into
 function

---
 check-certificates.rsc | 22 +++++++++++++---------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 2900a834..b9861793 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -34,7 +34,8 @@
 
   :local CheckCertificatesDownloadImport do={
     :local ScriptName [ :tostr $1 ];
-    :local Name       [ :tostr $2 ];
+    :local CertName   [ :tostr $2 ];
+    :local FetchName  [ :tostr $3 ];
 
     :global CertRenewUrl;
     :global CertRenewPass;
@@ -49,7 +50,7 @@
     :local Return false;
 
     :foreach Type in={ ".pem"; ".p12" } do={
-      :local CertFileName ([ $UrlEncode $Name ] . $Type);
+      :local CertFileName ([ $UrlEncode $FetchName ] . $Type);
       :do {
         /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) \
             ($CertRenewUrl . $CertFileName) dst-path=$CertFileName as-value;
@@ -68,9 +69,9 @@
           $LogPrint warning $ScriptName ("Decryption failed for certificate file '" . $CertFileName . "'.");
         }
 
-        :foreach CertInChain in=[ /certificate/find where common-name!=$Name !private-key \
+        :foreach CertInChain in=[ /certificate/find where common-name!=$CertName !private-key \
             name~("^" . [ $EscapeForRegEx $CertFileName ] . "_[0-9]+\$") \
-            !(subject-alt-name~("(^|\\W)(DNS|IP):" . [ $EscapeForRegEx $Name ] . "(\\W|\$)")) \
+            !(subject-alt-name~("(^|\\W)(DNS|IP):" . [ $EscapeForRegEx $CertName ] . "(\\W|\$)")) \
             !(common-name=[]) ] do={
           $CertificateNameByCN [ /certificate/get $CertInChain common-name ];
         }
@@ -145,6 +146,7 @@
   :foreach Cert in=[ /certificate/find where !revoked !ca !scep-url expires-after<$CertRenewTime ] do={
     :local CertVal [ /certificate/get $Cert ];
     :local LastName;
+    :local FetchName;
 
     :do {
       :if ([ :len $CertRenewUrl ] = 0) do={
@@ -155,14 +157,16 @@
 
       :local ImportSuccess false;
       :set LastName ($CertVal->"common-name");
-      :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName ];
+      :set FetchName $LastName;
+      :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName $FetchName ];
       :foreach SAN in=($CertVal->"subject-alt-name") do={
         :if ($ImportSuccess = false) do={
           :set LastName [ :pick $SAN ([ :find $SAN ":" ] + 1) [ :len $SAN ] ];
-          :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName ];
+          :set FetchName $LastName;
+          :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName $FetchName ];
           :if ($ImportSuccess = false && [ :pick $LastName 0 ] = "*") do={
-            :set LastName ("star." . [ :pick $LastName 2 [ :len $LastName ] ]);
-            :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName ];
+            :set FetchName ("star." . [ :pick $LastName 2 [ :len $LastName ] ]);
+            :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName $FetchName ];
           }
         }
       }
@@ -174,7 +178,7 @@
       } else={
         $LogPrint debug $ScriptName ("Certificate '" . $CertVal->"name" . "' was not updated, but replaced.");
 
-        :local CertNew [ /certificate/find where name~("^" . [ $EscapeForRegEx [ $UrlEncode $LastName ] ] . "\\.(p12|pem)_[0-9]+\$") \
+        :local CertNew [ /certificate/find where name~("^" . [ $EscapeForRegEx [ $UrlEncode $FetchName ] ] . "\\.(p12|pem)_[0-9]+\$") \
           (common-name=($CertVal->"common-name") or subject-alt-name~("(^|\\W)(DNS|IP):" . [ $EscapeForRegEx $LastName ] . "(\\W|\$)")) \
           fingerprint!=[ :tostr ($CertVal->"fingerprint") ] expires-after>$CertRenewTime ];
         :local CertNewVal [ /certificate/get $CertNew ];

From 3ad7ccd3d6c443bf64156ffcd980a418584c35d1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 3 Feb 2025 10:05:35 +0100
Subject: [PATCH 472/988] check-certificates: check to characters for star-dot

---
 check-certificates.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index b9861793..34e7537c 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -164,7 +164,7 @@
           :set LastName [ :pick $SAN ([ :find $SAN ":" ] + 1) [ :len $SAN ] ];
           :set FetchName $LastName;
           :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName $FetchName ];
-          :if ($ImportSuccess = false && [ :pick $LastName 0 ] = "*") do={
+          :if ($ImportSuccess = false && [ :pick $LastName 0 2 ] = "*.") do={
             :set FetchName ("star." . [ :pick $LastName 2 [ :len $LastName ] ]);
             :set ImportSuccess [ $CheckCertificatesDownloadImport $ScriptName $LastName $FetchName ];
           }

From 61f3c26199b4c22ae312a09f6c82f8e9cc403dd0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 3 Feb 2025 14:35:47 +0100
Subject: [PATCH 473/988] doc/check-health: highligh note on bad initial state

---
 doc/check-health.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/doc/check-health.md b/doc/check-health.md
index 578ea437..a9453714 100644
--- a/doc/check-health.md
+++ b/doc/check-health.md
@@ -26,14 +26,16 @@ health related events:
 * power supply failed or recovered
 * temperature is above or below threshold
 
-Note that bad initial state will not trigger an event.
-
 Monitoring CPU and RAM utilization (available processing and memory
 resources) works on all devices. Other than that only sensors available
 in hardware can be checked. See what your hardware supports:
 
     /system/health/print;
 
+> ⚠️ **Warning**: Note that bad initial state will not trigger an event! For
+> example rebooting a device that is already too hot will not trigger an
+> alert on high temperature.
+
 ### Sample notifications
 
 #### CPU utilization

From 3024b246b58fa106592c7f6f949e421e15edcdb3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 4 Feb 2025 12:02:31 +0100
Subject: [PATCH 474/988] check-health: remove extra line break

---
 check-health.rsc | 1 -
 1 file changed, 1 deletion(-)

diff --git a/check-health.rsc b/check-health.rsc
index 31bd6c24..76de4cb4 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -91,7 +91,6 @@
     :set CheckHealthTemperatureNotified ({});
   }
 
-
   :foreach Voltage in=[ /system/health/find where type="V" ] do={
     :local Name  [ /system/health/get $Voltage name  ];
     :local Value [ /system/health/get $Voltage value ];

From bfe5f20920a90fc54b7b25a238a1763fa6f2d5e7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 4 Feb 2025 15:08:37 +0100
Subject: [PATCH 475/988] check-health: remove trailing whitespaces

---
 check-health.rsc | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/check-health.rsc b/check-health.rsc
index 76de4cb4..34c508c2 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -107,16 +107,16 @@
           message=("The " . $Name . " on " . $Identity . " jumped more than " . $CheckHealthVoltagePercent . "%.\n\n" . \
             [ $FormatLine "old value" ($CheckHealthLast->$Name . " V") 12 ] . "\n" . \
             [ $FormatLine "new value" ($Value . " V") 12 ]) });
-      } else={ 
-        :if ($NumCurr <= $CheckHealthVoltageLow && $NumLast > $CheckHealthVoltageLow) do={ 
-          $SendNotification2 ({ origin=$ScriptName; \ 
-            subject=([ $SymbolForNotification "high-voltage-sign,chart-decreasing" ] . "Health warning: Low " . $Name); \ 
-            message=("The " . $Name . " on " . $Identity . " dropped to " . $Value . " V below hard limit.") }); 
-        } 
-        :if ($NumCurr > $CheckHealthVoltageLow && $NumLast <= $CheckHealthVoltageLow) do={ 
-          $SendNotification2 ({ origin=$ScriptName; \ 
-            subject=([ $SymbolForNotification "high-voltage-sign,chart-increasing" ] . "Health recovery: Low " . $Name); \ 
-            message=("The " . $Name . " on " . $Identity . " recovered to " . $Value . " V above hard limit.") }); 
+      } else={
+        :if ($NumCurr <= $CheckHealthVoltageLow && $NumLast > $CheckHealthVoltageLow) do={
+          $SendNotification2 ({ origin=$ScriptName; \
+            subject=([ $SymbolForNotification "high-voltage-sign,chart-decreasing" ] . "Health warning: Low " . $Name); \
+            message=("The " . $Name . " on " . $Identity . " dropped to " . $Value . " V below hard limit.") });
+        }
+        :if ($NumCurr > $CheckHealthVoltageLow && $NumLast <= $CheckHealthVoltageLow) do={
+          $SendNotification2 ({ origin=$ScriptName; \
+            subject=([ $SymbolForNotification "high-voltage-sign,chart-increasing" ] . "Health recovery: Low " . $Name); \
+            message=("The " . $Name . " on " . $Identity . " recovered to " . $Value . " V above hard limit.") });
         }
       }
     }

From 6501c98c822af958588512c374474f16bac61493 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Feb 2025 09:36:15 +0100
Subject: [PATCH 476/988] certs: dns.google switched to 'GTS Root R4'

Note that 8.8.8.8 is still at 'GTS Root R1'...
---
 certs/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/certs/Makefile b/certs/Makefile
index 5dfb0d10..ba25303b 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -10,7 +10,7 @@ DOMAINS_DUAL = \
 	api.macvendors.com/GTS-Root-R4 \
 	api.telegram.org/Go-Daddy-Root-Certificate-Authority-G2 \
 	cloudflare-dns.com/DigiCert-Global-Root-G2 \
-	dns.google/GTS-Root-R1 \
+	dns.google/GTS-Root-R4 \
 	dns.quad9.net/DigiCert-Global-Root-G3 \
 	git.eworm.de/ISRG-Root-X2 \
 	lists.blocklist.de/Certum-Trusted-Network-CA \

From 27c92b4382f961ad427313f6a0bfc01716e805d1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Feb 2025 09:51:42 +0100
Subject: [PATCH 477/988] doc/netwatch-dns: switch exmample to
 cloudflare-dns.com

---
 doc/netwatch-dns.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 6d2c8651..aa4e91f6 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -53,8 +53,8 @@ Note that using a name in DoH url may introduce a chicken-and-egg issue!
 Adding a static DNS record has the same result for the url, but always
 resolves to the same address.
 
-    /ip/dns/static/add name="dns.nextdns.io" address=199.247.16.158;
-    /tool/netwatch/add comment="doh" host=199.247.16.158;
+    /ip/dns/static/add name="cloudflare-dns.com" address=1.1.1.1;
+    /tool/netwatch/add comment="doh" host=1.1.1.1;
 
 Be aware that you have to keep the ip address in sync with real world
 manually!

From 84ba3a463a46876f3e728326034d404d02aefb67 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Feb 2025 09:55:41 +0100
Subject: [PATCH 478/988] doc/netwatch-dns: warn on different certificate...

... based on indicated server name.

Currently this is true for 8.8.8.8 (GTS Root R1) and dns.google (GTS Root R4).
---
 doc/netwatch-dns.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index aa4e91f6..0d949182 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -66,6 +66,10 @@ Importing a certificate automatically is possible. You may want to find the
     /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G3" host=9.9.9.9;
     /tool/netwatch/add comment="doh, doh-cert=GTS Root R1" host=8.8.8.8;
 
+> ⚠️ **Warning**: Combining these techniques can cause some confusion and
+> troubles! Chances are that a service uses different certificates based
+> on indicated server name.
+
 Sometimes using just one specific (possibly internal) DNS server may be
 desired, with fallback in case it fails. This is possible as well:
 

From 23d38927bcd553229d1cd80bff0d3506ab40f6fa Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 4 Feb 2025 12:27:35 +0100
Subject: [PATCH 479/988] check-health: split off plugins...

... from 'check-health', so the script works on all devices to monitor
CPU and RAM. The supported plugins for sensors in hardware are installed
automatically.
---
 check-health.d/state.rsc                      |  48 ++++++++
 check-health.d/temperature.rsc                |  74 ++++++++++++
 check-health.d/voltage.rsc                    |  63 ++++++++++
 check-health.rsc                              | 108 +++---------------
 ...l.avif => notification-08-state-fail.avif} | Bin
 ...-ok.avif => notification-09-state-ok.avif} | Bin
 doc/check-health.md                           |  42 +++++--
 global-functions.rsc                          |   2 +-
 news-and-changes.rsc                          |   2 +
 9 files changed, 239 insertions(+), 100 deletions(-)
 create mode 100644 check-health.d/state.rsc
 create mode 100644 check-health.d/temperature.rsc
 create mode 100644 check-health.d/voltage.rsc
 rename doc/check-health.d/{notification-08-psu-fail.avif => notification-08-state-fail.avif} (100%)
 rename doc/check-health.d/{notification-09-psu-ok.avif => notification-09-state-ok.avif} (100%)

diff --git a/check-health.d/state.rsc b/check-health.d/state.rsc
new file mode 100644
index 00000000..bcc1fbcc
--- /dev/null
+++ b/check-health.d/state.rsc
@@ -0,0 +1,48 @@
+#!rsc by RouterOS
+# RouterOS script: check-health.d/state
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# https://rsc.eworm.de/COPYING.md
+#
+# requires RouterOS, version=7.14
+#
+# check for RouterOS health state - state plugin
+# https://rsc.eworm.de/doc/check-health.md
+
+:global CheckHealthPlugins;
+
+:set ($CheckHealthPlugins->[ :jobname ]) do={
+  :local FuncName [ :tostr $0 ];
+
+  :global CheckHealthLast;
+  :global Identity;
+
+  :global LogPrint;
+  :global SendNotification2;
+  :global SymbolForNotification;
+
+  :if ([ :len [ /system/health/find where type="" name~"-state\$"] ] = 0) do={
+    $LogPrint debug $FuncName ("Your device does not provide any state health values.");
+    :return false;
+  }
+
+  :foreach State in=[ /system/health/find where type="" name~"-state\$" ] do={
+    :local Name  [ /system/health/get $State name  ];
+    :local Value [ /system/health/get $State value ];
+
+    :if ([ :typeof ($CheckHealthLast->$Name) ] != "nothing") do={
+      :if ($CheckHealthLast->$Name = "ok" && \
+           $Value != "ok") do={
+        $SendNotification2 ({ origin=$FuncName; \
+          subject=([ $SymbolForNotification "cross-mark" ] . "Health warning: " . $Name); \
+          message=("The device '" . $Name . "' on " . $Identity . " failed!") });
+      }
+      :if ($CheckHealthLast->$Name != "ok" && \
+           $Value = "ok") do={
+        $SendNotification2 ({ origin=$FuncName; \
+          subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "Health recovery: " . $Name); \
+          message=("The device '" . $Name . "' on " . $Identity . " recovered!") });
+      }
+    }
+    :set ($CheckHealthLast->$Name) $Value;
+  }
+}
diff --git a/check-health.d/temperature.rsc b/check-health.d/temperature.rsc
new file mode 100644
index 00000000..9b847821
--- /dev/null
+++ b/check-health.d/temperature.rsc
@@ -0,0 +1,74 @@
+#!rsc by RouterOS
+# RouterOS script: check-health.d/temperature
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# https://rsc.eworm.de/COPYING.md
+#
+# requires RouterOS, version=7.14
+#
+# check for RouterOS health state - temperature plugin
+# https://rsc.eworm.de/doc/check-health.md
+
+:global CheckHealthPlugins;
+
+:set ($CheckHealthPlugins->[ :jobname ]) do={
+  :local FuncName [ :tostr $0 ];
+
+  :global CheckHealthLast;
+  :global CheckHealthTemperature;
+  :global CheckHealthTemperatureDeviation;
+  :global CheckHealthTemperatureNotified;
+  :global Identity;
+
+  :global LogPrint;
+  :global SendNotification2;
+  :global SymbolForNotification;
+
+  :if ([ :len [ /system/health/find where type="C" ] ] = 0) do={
+    $LogPrint debug $FuncName ("Your device does not provide any voltage health values.");
+    :return false;
+  }
+
+  :local TempToNum do={
+    :global CharacterReplace;
+    :local T [ :toarray [ $CharacterReplace $1 "." "," ] ];
+    :return ($T->0 * 10 + $T->1);
+  }
+
+  :if ([ :typeof $CheckHealthTemperatureNotified ] != "array") do={
+    :set CheckHealthTemperatureNotified ({});
+  }
+
+  :foreach Temperature in=[ /system/health/find where type="C" ] do={
+    :local Name  [ /system/health/get $Temperature name  ];
+    :local Value [ /system/health/get $Temperature value ];
+
+    :if ([ :typeof ($CheckHealthLast->$Name) ] != "nothing") do={
+      :if ([ :typeof ($CheckHealthTemperature->$Name) ] != "num" ) do={
+        $LogPrint info $FuncName ("No threshold given for " . $Name . ", assuming 50C.");
+        :set ($CheckHealthTemperature->$Name) 50;
+      }
+      :local Validate [ /system/health/get [ find where name=$Name ] value ];
+      :while ($Value != $Validate) do={
+        :set Value $Validate;
+        :set Validate [ /system/health/get [ find where name=$Name ] value ];
+      }
+      :if ($Value > $CheckHealthTemperature->$Name && \
+           $CheckHealthTemperatureNotified->$Name != true) do={
+        $SendNotification2 ({ origin=$FuncName; \
+          subject=([ $SymbolForNotification "fire" ] . "Health warning: " . $Name); \
+          message=("The " . $Name . " on " . $Identity . " is above threshold: " . \
+            $Value . "\C2\B0" . "C") });
+        :set ($CheckHealthTemperatureNotified->$Name) true;
+      }
+      :if ($Value <= ($CheckHealthTemperature->$Name - $CheckHealthTemperatureDeviation) && \
+           $CheckHealthTemperatureNotified->$Name = true) do={
+        $SendNotification2 ({ origin=$FuncName; \
+          subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "Health recovery: " . $Name); \
+          message=("The " . $Name . " on " . $Identity . " dropped below threshold: " .  \
+            $Value . "\C2\B0" . "C") });
+        :set ($CheckHealthTemperatureNotified->$Name) false;
+      }
+    }
+    :set ($CheckHealthLast->$Name) $Value;
+  }
+}
diff --git a/check-health.d/voltage.rsc b/check-health.d/voltage.rsc
new file mode 100644
index 00000000..6394795f
--- /dev/null
+++ b/check-health.d/voltage.rsc
@@ -0,0 +1,63 @@
+#!rsc by RouterOS
+# RouterOS script: check-health.d/voltage
+# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# https://rsc.eworm.de/COPYING.md
+#
+# requires RouterOS, version=7.14
+#
+# check for RouterOS health state - voltage plugin
+# https://rsc.eworm.de/doc/check-health.md
+
+:global CheckHealthPlugins;
+
+:set ($CheckHealthPlugins->[ :jobname ]) do={
+  :local FuncName [ :tostr $0 ];
+
+  :global CheckHealthLast;
+  :global CheckHealthVoltageLow;
+  :global CheckHealthVoltagePercent;
+  :global Identity;
+
+  :global FormatLine;
+  :global IfThenElse;
+  :global LogPrint;
+  :global SendNotification2;
+  :global SymbolForNotification;
+
+  :if ([ :len [ /system/health/find where type="V" ] ] = 0) do={
+    $LogPrint debug $FuncName ("Your device does not provide any voltage health values.");
+    :return false;
+  }
+
+  :foreach Voltage in=[ /system/health/find where type="V" ] do={
+    :local Name  [ /system/health/get $Voltage name  ];
+    :local Value [ /system/health/get $Voltage value ];
+
+    :if ([ :typeof ($CheckHealthLast->$Name) ] != "nothing") do={
+      :local NumCurr [ $TempToNum $Value ];
+      :local NumLast [ $TempToNum ($CheckHealthLast->$Name) ];
+
+      :if ($NumLast * (100 + $CheckHealthVoltagePercent) < $NumCurr * 100 || \
+           $NumLast * 100 > $NumCurr * (100 + $CheckHealthVoltagePercent)) do={
+        $SendNotification2 ({ origin=$FuncName; \
+          subject=([ $SymbolForNotification ("high-voltage-sign,chart-" . [ $IfThenElse ($NumLast < \
+            $NumCurr) "in" "de" ] . "creasing") ] . "Health warning: " . $Name); \
+          message=("The " . $Name . " on " . $Identity . " jumped more than " . $CheckHealthVoltagePercent . "%.\n\n" . \
+            [ $FormatLine "old value" ($CheckHealthLast->$Name . " V") 12 ] . "\n" . \
+            [ $FormatLine "new value" ($Value . " V") 12 ]) });
+      } else={ 
+        :if ($NumCurr <= $CheckHealthVoltageLow && $NumLast > $CheckHealthVoltageLow) do={ 
+          $SendNotification2 ({ origin=$FuncName; \
+            subject=([ $SymbolForNotification "high-voltage-sign,chart-decreasing" ] . "Health warning: Low " . $Name); \ 
+            message=("The " . $Name . " on " . $Identity . " dropped to " . $Value . " V below hard limit.") }); 
+        } 
+        :if ($NumCurr > $CheckHealthVoltageLow && $NumLast <= $CheckHealthVoltageLow) do={ 
+          $SendNotification2 ({ origin=$FuncName; \
+            subject=([ $SymbolForNotification "high-voltage-sign,chart-increasing" ] . "Health recovery: Low " . $Name); \ 
+            message=("The " . $Name . " on " . $Identity . " recovered to " . $Value . " V above hard limit.") }); 
+        }
+      }
+    }
+    :set ($CheckHealthLast->$Name) $Value;
+  }
+}
diff --git a/check-health.rsc b/check-health.rsc
index 34c508c2..827f5974 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -19,11 +19,6 @@
   :global CheckHealthCPUUtilizationNotified;
   :global CheckHealthLast;
   :global CheckHealthRAMUtilizationNotified;
-  :global CheckHealthTemperature;
-  :global CheckHealthTemperatureDeviation;
-  :global CheckHealthTemperatureNotified;
-  :global CheckHealthVoltageLow;
-  :global CheckHealthVoltagePercent;
   :global Identity;
 
   :global FormatLine;
@@ -33,6 +28,7 @@
   :global ScriptLock;
   :global SendNotification2;
   :global SymbolForNotification;
+  :global ValidateSyntax;
 
   :local TempToNum do={
     :global CharacterReplace;
@@ -78,105 +74,37 @@
     :set CheckHealthRAMUtilizationNotified false;
   }
 
-  :if ([ :len [ /system/health/find ] ] = 0) do={
-    $LogPrint debug $ScriptName ("Your device does not provide any health values.");
+  :local Plugins [ /system/script/find where name~"^check-health.d/." ];
+  :if ([ :len $Plugins ] = 0) do={
+    $LogPrint debug $ScriptName ("No plugins installed.");
     :set ExitOK true;
     :error true;
   }
 
+  :global CheckHealthPlugins ({});
   :if ([ :typeof $CheckHealthLast ] != "array") do={
     :set CheckHealthLast ({});
   }
-  :if ([ :typeof $CheckHealthTemperatureNotified ] != "array") do={
-    :set CheckHealthTemperatureNotified ({});
-  }
 
-  :foreach Voltage in=[ /system/health/find where type="V" ] do={
-    :local Name  [ /system/health/get $Voltage name  ];
-    :local Value [ /system/health/get $Voltage value ];
-
-    :if ([ :typeof ($CheckHealthLast->$Name) ] != "nothing") do={
-      :local NumCurr [ $TempToNum $Value ];
-      :local NumLast [ $TempToNum ($CheckHealthLast->$Name) ];
-
-      :if ($NumLast * (100 + $CheckHealthVoltagePercent) < $NumCurr * 100 || \
-           $NumLast * 100 > $NumCurr * (100 + $CheckHealthVoltagePercent)) do={
-        $SendNotification2 ({ origin=$ScriptName; \
-          subject=([ $SymbolForNotification ("high-voltage-sign,chart-" . [ $IfThenElse ($NumLast < \
-            $NumCurr) "in" "de" ] . "creasing") ] . "Health warning: " . $Name); \
-          message=("The " . $Name . " on " . $Identity . " jumped more than " . $CheckHealthVoltagePercent . "%.\n\n" . \
-            [ $FormatLine "old value" ($CheckHealthLast->$Name . " V") 12 ] . "\n" . \
-            [ $FormatLine "new value" ($Value . " V") 12 ]) });
-      } else={
-        :if ($NumCurr <= $CheckHealthVoltageLow && $NumLast > $CheckHealthVoltageLow) do={
-          $SendNotification2 ({ origin=$ScriptName; \
-            subject=([ $SymbolForNotification "high-voltage-sign,chart-decreasing" ] . "Health warning: Low " . $Name); \
-            message=("The " . $Name . " on " . $Identity . " dropped to " . $Value . " V below hard limit.") });
-        }
-        :if ($NumCurr > $CheckHealthVoltageLow && $NumLast <= $CheckHealthVoltageLow) do={
-          $SendNotification2 ({ origin=$ScriptName; \
-            subject=([ $SymbolForNotification "high-voltage-sign,chart-increasing" ] . "Health recovery: Low " . $Name); \
-            message=("The " . $Name . " on " . $Identity . " recovered to " . $Value . " V above hard limit.") });
-        }
+  :foreach Plugin in=$Plugins do={
+    :local PluginVal [ /system/script/get $Plugin ];
+    :if ([ $ValidateSyntax ($PluginVal->"source") ] = true) do={
+      :do {
+        /system/script/run $Plugin;
+      } on-error={
+        $LogPrint error $ScriptName ("Plugin '" . $ScriptVal->"name" . "' failed to run.");
       }
+    } else={
+      $LogPrint error $ScriptName ("Plugin '" . $ScriptVal->"name" . "' failed syntax validation, skipping.");
     }
-    :set ($CheckHealthLast->$Name) $Value;
   }
 
-  :foreach PSU in=[ /system/health/find where name~"^psu.*-state\$" ] do={
-    :local Name  [ /system/health/get $PSU name  ];
-    :local Value [ /system/health/get $PSU value ];
-
-    :if ([ :typeof ($CheckHealthLast->$Name) ] != "nothing") do={
-      :if ($CheckHealthLast->$Name = "ok" && \
-           $Value != "ok") do={
-        $SendNotification2 ({ origin=$ScriptName; \
-          subject=([ $SymbolForNotification "cross-mark" ] . "Health warning: " . $Name); \
-          message=("The power supply unit '" . $Name . "' on " . $Identity . " failed!") });
-      }
-      :if ($CheckHealthLast->$Name != "ok" && \
-           $Value = "ok") do={
-        $SendNotification2 ({ origin=$ScriptName; \
-          subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "Health recovery: " . $Name); \
-          message=("The power supply unit '" . $Name . "' on " . $Identity . " recovered!") });
-      }
-    }
-    :set ($CheckHealthLast->$Name) $Value;
+  :foreach PluginName,Discard in=$CheckHealthPlugins do={
+    ($CheckHealthPlugins->$PluginName) \
+         ("\$CheckHealthPlugins->\"" . $PluginName . "\"");
   }
 
-  :foreach Temperature in=[ /system/health/find where type="C" ] do={
-    :local Name  [ /system/health/get $Temperature name  ];
-    :local Value [ /system/health/get $Temperature value ];
-
-    :if ([ :typeof ($CheckHealthLast->$Name) ] != "nothing") do={
-      :if ([ :typeof ($CheckHealthTemperature->$Name) ] != "num" ) do={
-        $LogPrint info $ScriptName ("No threshold given for " . $Name . ", assuming 50C.");
-        :set ($CheckHealthTemperature->$Name) 50;
-      }
-      :local Validate [ /system/health/get [ find where name=$Name ] value ];
-      :while ($Value != $Validate) do={
-        :set Value $Validate;
-        :set Validate [ /system/health/get [ find where name=$Name ] value ];
-      }
-      :if ($Value > $CheckHealthTemperature->$Name && \
-           $CheckHealthTemperatureNotified->$Name != true) do={
-        $SendNotification2 ({ origin=$ScriptName; \
-          subject=([ $SymbolForNotification "fire" ] . "Health warning: " . $Name); \
-          message=("The " . $Name . " on " . $Identity . " is above threshold: " . \
-            $Value . "\C2\B0" . "C") });
-        :set ($CheckHealthTemperatureNotified->$Name) true;
-      }
-      :if ($Value <= ($CheckHealthTemperature->$Name - $CheckHealthTemperatureDeviation) && \
-           $CheckHealthTemperatureNotified->$Name = true) do={
-        $SendNotification2 ({ origin=$ScriptName; \
-          subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "Health recovery: " . $Name); \
-          message=("The " . $Name . " on " . $Identity . " dropped below threshold: " .  \
-            $Value . "\C2\B0" . "C") });
-        :set ($CheckHealthTemperatureNotified->$Name) false;
-      }
-    }
-    :set ($CheckHealthLast->$Name) $Value;
-  }
+  :set CheckHealthPlugins;
 } on-error={
   :global ExitError; $ExitError $ExitOK [ :jobname ];
 }
diff --git a/doc/check-health.d/notification-08-psu-fail.avif b/doc/check-health.d/notification-08-state-fail.avif
similarity index 100%
rename from doc/check-health.d/notification-08-psu-fail.avif
rename to doc/check-health.d/notification-08-state-fail.avif
diff --git a/doc/check-health.d/notification-09-psu-ok.avif b/doc/check-health.d/notification-09-state-ok.avif
similarity index 100%
rename from doc/check-health.d/notification-09-psu-ok.avif
rename to doc/check-health.d/notification-09-state-ok.avif
diff --git a/doc/check-health.md b/doc/check-health.md
index a9453714..51e71bc3 100644
--- a/doc/check-health.md
+++ b/doc/check-health.md
@@ -17,21 +17,21 @@ Description
 -----------
 
 This script is run from scheduler periodically, sending notification on
-health related events:
+health related events. Monitoring CPU and RAM utilization (available
+processing and memory resources) works on all devices:
 
 * high CPU utilization
 * high RAM utilization (low available RAM)
+
+With additional plugins functionality can be extended, depending on
+sensors available in hardware:
+
 * voltage jumps up or down more than configured threshold
 * voltage drops below hard lower limit
+* fan failed or recovered
 * power supply failed or recovered
 * temperature is above or below threshold
 
-Monitoring CPU and RAM utilization (available processing and memory
-resources) works on all devices. Other than that only sensors available
-in hardware can be checked. See what your hardware supports:
-
-    /system/health/print;
-
 > ⚠️ **Warning**: Note that bad initial state will not trigger an event! For
 > example rebooting a device that is already too hot will not trigger an
 > alert on high temperature.
@@ -59,8 +59,8 @@ in hardware can be checked. See what your hardware supports:
 
 #### PSU state
 
-![check-health notification psu fail](check-health.d/notification-08-psu-fail.avif)  
-![check-health notification psu ok](check-health.d/notification-09-psu-ok.avif)
+![check-health notification state fail](check-health.d/notification-08-state-fail.avif)  
+![check-health notification state ok](check-health.d/notification-09-state-ok.avif)
 
 Requirements and installation
 -----------------------------
@@ -74,6 +74,30 @@ Just install the script and create a scheduler:
 > precision of cpu utilization, escpecially on devices with limited
 > resources. Thus an unusual interval is used here.
 
+### Plugins
+
+Additional plugins are available for sensors available in hardware. First
+check what your hardware supports:
+
+    /system/health/print;
+
+Then install the plugin for *fan* and *power supply unit* *state*:
+
+    $ScriptInstallUpdate check-health,check-health.d/state;
+
+... or *temperature*:
+
+    $ScriptInstallUpdate check-health,check-health.d/temperature;
+
+... or *voltage*:
+
+    $ScriptInstallUpdate check-health,check-health.d/voltage;
+
+You can also combine the commands and install all or a subset of plugins
+in one go:
+
+    $ScriptInstallUpdate check-health,check-health.d/state,check-health.d/temperature,check-health.d/voltage;
+
 Configuration
 -------------
 
diff --git a/global-functions.rsc b/global-functions.rsc
index a2ec8338..8eb6712c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -13,7 +13,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 131;
+:global ExpectedConfigVersion 132;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 7508b43f..c7e566ff 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -56,6 +56,7 @@
   129="Extended 'backup-partition' to support RouterOS copy-over - interactively or before feature update.";
   130="Dropped intermediate certificates, depending on just root certificates now.";
   131="Enhanced certificate download to fallback to mkcert.org, so all (commonly trusted) root certificates are available now.";
+  132="Split off plugins from 'check-health', so the script works on all devices to monitor CPU and RAM. The supported plugins for sensors in hardware are installed automatically.";
 };
 
 # Migration steps to be applied on script updates
@@ -64,4 +65,5 @@
   100=":global ScriptInstallUpdate; :if ([ :len [ /system/script/find where name=\"ssh-keys-import\" source~\"^#!rsc by RouterOS\\r?\\n\" ] ] > 0) do={ /system/script/set name=\"mod/ssh-keys-import\" ssh-keys-import; \$ScriptInstallUpdate; }";
   104=":global CharacterReplace; :global ScriptInstallUpdate; :foreach Script in={ \"capsman-download-packages\"; \"capsman-rolling-upgrade\"; \"hotspot-to-wpa\"; \"hotspot-to-wpa-cleanup\" } do={ /system/script/set name=(\$Script . \".capsman\") [ find where name=\$Script ]; :foreach Scheduler in=[ /system/scheduler/find where on-event~(\$Script . \"([^-.]|\\\$)\") ] do={ /system/scheduler/set \$Scheduler on-event=[ \$CharacterReplace [ get \$Scheduler on-event ] \$Script (\$Script . \".capsman\") ]; }; }; /ip/hotspot/user/profile/set on-login=\"hotspot-to-wpa.capsman\" [ find where on-login=\"hotspot-to-wpa\" ]; \$ScriptInstallUpdate;";
   111=":local Rec [ /ip/dns/static/find where comment~\"^managed by dhcp-to-dns for \" ]; :if ([ :len \$Rec ] > 0) do={ /ip/dns/static/remove \$Rec; /system/script/run dhcp-to-dns; }";
+  132=":if ([ :len [ /system/script/find where name=\"check-health\" ] ] > 0) do={ :local Code \":local Install \\\"check-health\\\"; :if ([ :len [ /system/health/find where type=\\\"\\\" name~\\\"-state\\\\\\\$\\\" ] ] > 0) do={ :set Install (\\\$Install . \\\",check-health.d/state\\\"); }; :if ([ :len [ /system/health/find where type=\\\"C\\\" ] ] > 0) do={ :set Install (\\\$Install . \\\",check-health.d/temperature\\\"); }; :if ([ :len [ /system/health/find where type=\\\"V\\\" ] ] > 0) do={ :set Install (\\\$Install . \\\",check-health.d/voltage\\\"); }; :global ScriptInstallUpdate; \\\$ScriptInstallUpdate \\\$Install;\"; :global ValidateSyntax; :if ([ \$ValidateSyntax \$Code ] = true) do={ :do { [ :parse \$Code ]; } on-error={ }; }; }";
 };

From 7b660d095293e24bd3fedf2a00815eedec84ccf5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 6 Feb 2025 21:24:20 +0100
Subject: [PATCH 480/988] packages-update: move configuration variables up

---
 packages-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index ff47b2a3..ba6d4f79 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -16,6 +16,9 @@
 :do {
   :local ScriptName [ :jobname ];
 
+  :global PackagesUpdateDeferReboot;
+  :global PackagesUpdateBackupFailure;
+
   :global DownloadPackage;
   :global Grep;
   :global LogPrint;
@@ -24,9 +27,6 @@
   :global ScriptLock;
   :global VersionToNum;
 
-  :global PackagesUpdateDeferReboot;
-  :global PackagesUpdateBackupFailure;
-
   :local Schedule do={
     :local ScriptName [ :tostr $1 ];
 

From dafd95d44a18088771e6e0fd9b2ef115ddbcbc18 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 6 Feb 2025 21:26:39 +0100
Subject: [PATCH 481/988] packages-update: disable random delay for backup

---
 packages-update.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/packages-update.rsc b/packages-update.rsc
index ba6d4f79..788edd43 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -16,6 +16,7 @@
 :do {
   :local ScriptName [ :jobname ];
 
+  :global BackupRandomDelay;
   :global PackagesUpdateDeferReboot;
   :global PackagesUpdateBackupFailure;
 
@@ -79,7 +80,9 @@
     :set ($RunOrder->($Store->"order" . "-" . $ScriptVal->"name")) ($ScriptVal->"name");
   }
 
+  :local BackupRandomDelayBefore $BackupRandomDelay;
   :foreach Order,Script in=$RunOrder do={
+    :set BackupRandomDelay 0;
     :set PackagesUpdateBackupFailure false;
     :do {
       $LogPrint info $ScriptName ("Running backup script " . $Script . " before update.");
@@ -87,6 +90,7 @@
     } on-error={
       :set PackagesUpdateBackupFailure true;
     }
+    :set BackupRandomDelay $BackupRandomDelayBefore;
 
     :if ($PackagesUpdateBackupFailure = true) do={
       $LogPrint warning $ScriptName ("Running backup script " . $Script . " before update failed!");

From dbdc3e4718f5b0ec614baa9a9a942b52cbb19ad4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 17:12:30 +0100
Subject: [PATCH 482/988] packages-update: ignore available packages
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This was introduced with RouterOS 7.18beta2 to list and install available
packages. We do not want to install all of them. 😝
---
 packages-update.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index 788edd43..afec2f56 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -130,7 +130,7 @@
     }
   }
 
-  :foreach Package in=[ /system/package/find where !bundle ] do={
+  :foreach Package in=[ /system/package/find where !bundle !available ] do={
     :local PkgName [ /system/package/get $Package name ];
     :if ([ $DownloadPackage $PkgName ($Update->"latest-version") ] = false) do={
       $LogPrint error $ScriptName ("Download for package " . $PkgName . " failed, update aborted.");

From 0fb5fd03230c2054a94d80ca72fc941e21b7f3ff Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 17:36:59 +0100
Subject: [PATCH 483/988] global-functions: $MkDir: create directory
 directly...

... instead of file inside directory. This requires RouterOS 7.15, so
bumping requirement.
---
 README.md            | 2 +-
 global-functions.rsc | 8 +++-----
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 8594f58a..a76d50f7 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@ RouterOS Scripts
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/global-functions.rsc b/global-functions.rsc
index 8eb6712c..48f1676a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch, scheduler
 #
 # global functions
@@ -895,10 +895,8 @@
   }
 
   :do {
-    :local File ($Path . "/file");
-    /file/add name=$File;
-    $WaitForFile $File;
-    /file/remove $File;
+    /file/add type="directory" name=$Path;
+    $WaitForFile $Path;
   } on-error={
     $LogPrint warning $0 ("Making directory '" . $Path . "' failed!");
     :return false;

From 4542c2b19e4b74ee37c02671c05f4025946d8bf7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jan 2025 18:16:57 +0100
Subject: [PATCH 484/988] global-functions: introduce $RmFile

---
 global-functions.rsc | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 48f1676a..e41d3529 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -63,6 +63,7 @@
 :global ProtocolStrip;
 :global RandomDelay;
 :global RequiredRouterOS;
+:global RmFile;
 :global ScriptFromTerminal;
 :global ScriptInstallUpdate;
 :global ScriptLock;
@@ -1004,6 +1005,26 @@
   :return true;
 }
 
+# remove file
+:set RmFile do={
+  :local FileName [ :tostr $1 ];
+
+  :global LogPrint;
+
+  :local File [ /file/find where name=$FileName type=file ];
+  :if ([ :len $File ] = 0) do={
+    :return true;
+  }
+
+  :do {
+    /file/remove $File;
+  } on-error={
+    $LogPrint error $0 ("Removing file '" . $FileName . "' (" . $File . ") failed.");
+    :return false;
+  }
+  :return true;
+}
+
 # check if script is run from terminal
 :set ScriptFromTerminal do={
   :local Script [ :tostr $1 ];

From 727495d9c4f7ff00a9d0c5dc1fd06e22ba3abe39 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jan 2025 18:21:28 +0100
Subject: [PATCH 485/988] global-functions: introduce $RmDir

---
 global-functions.rsc | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index e41d3529..b7a3b6a9 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -63,6 +63,7 @@
 :global ProtocolStrip;
 :global RandomDelay;
 :global RequiredRouterOS;
+:global RmDir;
 :global RmFile;
 :global ScriptFromTerminal;
 :global ScriptInstallUpdate;
@@ -1005,6 +1006,26 @@
   :return true;
 }
 
+# remove directory
+:set RmDir do={
+  :local DirName [ :tostr $1 ];
+
+  :global LogPrint;
+
+  :local Dir [ /file/find where name=$DirName type=directory ];
+  :if ([ :len $Dir ] = 0) do={
+    :return true;
+  }
+
+  :do {
+    /file/remove $Dir;
+  } on-error={
+    $LogPrint error $0 ("Removing directory '" . $DirName . "' (" . $Dir . ") failed.");
+    :return false;
+  }
+  :return true;
+}
+
 # remove file
 :set RmFile do={
   :local FileName [ :tostr $1 ];

From 7233dea5bb9e73a93599baf17077b80758934665 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jan 2025 19:24:38 +0100
Subject: [PATCH 486/988] global-functions: $RmFile: add debug output

---
 global-functions.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index b7a3b6a9..50202f00 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1032,8 +1032,11 @@
 
   :global LogPrint;
 
+  $LogPrint debug $0 ("Removing file: ". $FileName);
+
   :local File [ /file/find where name=$FileName type=file ];
   :if ([ :len $File ] = 0) do={
+    $LogPrint debug $0 ("... which does not exist.");
     :return true;
   }
 

From 49d9fb1ffddfb973bed00aac3a36bf4dd8d6687a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jan 2025 19:24:05 +0100
Subject: [PATCH 487/988] global-functions: $RmDir: add debug output

---
 global-functions.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 50202f00..2799f39a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1012,8 +1012,11 @@
 
   :global LogPrint;
 
+  $LogPrint debug $0 ("Removing directory: ". $DirName);
+
   :local Dir [ /file/find where name=$DirName type=directory ];
   :if ([ :len $Dir ] = 0) do={
+    $LogPrint debug $0 ("... which does not exist.");
     :return true;
   }
 

From 4bfb591fa035a12e80edf8f2550f6237cd343cd9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 17:39:48 +0100
Subject: [PATCH 488/988] bump required RouterOS version for all scripts

---
 BRANCHES.md                            | 2 +-
 CERTIFICATES.md                        | 2 +-
 CONTRIBUTIONS.md                       | 2 +-
 INITIAL-COMMANDS.md                    | 2 +-
 accesslist-duplicates.capsman.rsc      | 2 +-
 accesslist-duplicates.local.rsc        | 2 +-
 accesslist-duplicates.template.rsc     | 2 +-
 accesslist-duplicates.wifi.rsc         | 2 +-
 backup-cloud.rsc                       | 2 +-
 backup-email.rsc                       | 2 +-
 backup-partition.rsc                   | 2 +-
 backup-upload.rsc                      | 2 +-
 capsman-download-packages.capsman.rsc  | 2 +-
 capsman-download-packages.template.rsc | 2 +-
 capsman-download-packages.wifi.rsc     | 2 +-
 capsman-rolling-upgrade.capsman.rsc    | 2 +-
 capsman-rolling-upgrade.template.rsc   | 2 +-
 capsman-rolling-upgrade.wifi.rsc       | 2 +-
 certificate-renew-issued.rsc           | 2 +-
 check-certificates.rsc                 | 2 +-
 check-health.d/state.rsc               | 2 +-
 check-health.d/temperature.rsc         | 2 +-
 check-health.d/voltage.rsc             | 2 +-
 check-health.rsc                       | 2 +-
 check-lte-firmware-upgrade.rsc         | 2 +-
 check-routeros-update.rsc              | 2 +-
 collect-wireless-mac.capsman.rsc       | 2 +-
 collect-wireless-mac.local.rsc         | 2 +-
 collect-wireless-mac.template.rsc      | 2 +-
 collect-wireless-mac.wifi.rsc          | 2 +-
 dhcp-lease-comment.capsman.rsc         | 2 +-
 dhcp-lease-comment.local.rsc           | 2 +-
 dhcp-lease-comment.template.rsc        | 2 +-
 dhcp-lease-comment.wifi.rsc            | 2 +-
 doc/accesslist-duplicates.md           | 2 +-
 doc/backup-cloud.md                    | 2 +-
 doc/backup-email.md                    | 2 +-
 doc/backup-partition.md                | 2 +-
 doc/backup-upload.md                   | 2 +-
 doc/capsman-download-packages.md       | 2 +-
 doc/capsman-rolling-upgrade.md         | 2 +-
 doc/certificate-renew-issued.md        | 2 +-
 doc/check-certificates.md              | 2 +-
 doc/check-health.md                    | 2 +-
 doc/check-lte-firmware-upgrade.md      | 2 +-
 doc/check-routeros-update.md           | 2 +-
 doc/collect-wireless-mac.md            | 2 +-
 doc/dhcp-lease-comment.md              | 2 +-
 doc/firmware-upgrade-reboot.md         | 2 +-
 doc/global-wait.md                     | 2 +-
 doc/gps-track.md                       | 2 +-
 doc/hotspot-to-wpa.md                  | 2 +-
 doc/ip-addr-bridge.md                  | 2 +-
 doc/ipsec-to-dns.md                    | 2 +-
 doc/ipv6-update.md                     | 2 +-
 doc/lease-script.md                    | 2 +-
 doc/leds-mode.md                       | 2 +-
 doc/log-forward.md                     | 2 +-
 doc/mod/bridge-port-to.md              | 2 +-
 doc/mod/bridge-port-vlan.md            | 2 +-
 doc/mod/inspectvar.md                  | 2 +-
 doc/mod/ipcalc.md                      | 2 +-
 doc/mod/notification-email.md          | 2 +-
 doc/mod/notification-matrix.md         | 2 +-
 doc/mod/notification-ntfy.md           | 2 +-
 doc/mod/notification-telegram.md       | 2 +-
 doc/mod/scriptrunonce.md               | 2 +-
 doc/mode-button.md                     | 2 +-
 doc/ospf-to-leds.md                    | 2 +-
 doc/packages-update.md                 | 2 +-
 doc/ppp-on-up.md                       | 2 +-
 doc/sms-action.md                      | 2 +-
 doc/sms-forward.md                     | 2 +-
 doc/super-mario-theme.md               | 2 +-
 doc/unattended-lte-firmware-upgrade.md | 2 +-
 doc/update-gre-address.md              | 2 +-
 doc/update-tunnelbroker.md             | 2 +-
 firmware-upgrade-reboot.rsc            | 2 +-
 global-wait.rsc                        | 2 +-
 gps-track.rsc                          | 2 +-
 hotspot-to-wpa-cleanup.capsman.rsc     | 2 +-
 hotspot-to-wpa-cleanup.template.rsc    | 2 +-
 hotspot-to-wpa-cleanup.wifi.rsc        | 2 +-
 hotspot-to-wpa.capsman.rsc             | 2 +-
 hotspot-to-wpa.template.rsc            | 2 +-
 hotspot-to-wpa.wifi.rsc                | 2 +-
 ipsec-to-dns.rsc                       | 2 +-
 ipv6-update.rsc                        | 2 +-
 lease-script.rsc                       | 2 +-
 log-forward.rsc                        | 2 +-
 mod/bridge-port-to.rsc                 | 2 +-
 mod/bridge-port-vlan.rsc               | 2 +-
 mod/inspectvar.rsc                     | 2 +-
 mod/ipcalc.rsc                         | 2 +-
 mod/notification-email.rsc             | 2 +-
 mod/notification-matrix.rsc            | 2 +-
 mod/notification-ntfy.rsc              | 2 +-
 mod/notification-telegram.rsc          | 2 +-
 mod/scriptrunonce.rsc                  | 2 +-
 mode-button.rsc                        | 2 +-
 ospf-to-leds.rsc                       | 2 +-
 packages-update.rsc                    | 2 +-
 ppp-on-up.rsc                          | 2 +-
 sms-action.rsc                         | 2 +-
 sms-forward.rsc                        | 2 +-
 unattended-lte-firmware-upgrade.rsc    | 2 +-
 update-gre-address.rsc                 | 2 +-
 update-tunnelbroker.rsc                | 2 +-
 108 files changed, 108 insertions(+), 108 deletions(-)

diff --git a/BRANCHES.md b/BRANCHES.md
index 5d94077b..8a0bdadf 100644
--- a/BRANCHES.md
+++ b/BRANCHES.md
@@ -4,7 +4,7 @@ Installing from branches
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/CERTIFICATES.md b/CERTIFICATES.md
index 589d4801..5432d78a 100644
--- a/CERTIFICATES.md
+++ b/CERTIFICATES.md
@@ -4,7 +4,7 @@ Certificate name from browser
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index ef1bd8bf..0b35c40e 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -4,7 +4,7 @@ Past Contributions
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 84a88fee..424ef329 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -4,7 +4,7 @@ Initial commands
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index 0c4eaaf5..27546c8d 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # print duplicate antries in wireless access list
 # https://rsc.eworm.de/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index 353fe1fc..589815d6 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # print duplicate antries in wireless access list
 # https://rsc.eworm.de/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index 4219014f..ccbca3df 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # print duplicate antries in wireless access list
 # https://rsc.eworm.de/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index 3ee53d8c..527ebb4b 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # print duplicate antries in wireless access list
 # https://rsc.eworm.de/doc/accesslist-duplicates.md
diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index efae055f..9d760804 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=40
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # upload backup to MikroTik cloud
 # https://rsc.eworm.de/doc/backup-cloud.md
diff --git a/backup-email.rsc b/backup-email.rsc
index f6ebad0b..d0973011 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=20
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # create and email backup and config file
 # https://rsc.eworm.de/doc/backup-email.md
diff --git a/backup-partition.rsc b/backup-partition.rsc
index bfa7765c..1f0cf2ee 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=70
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, scheduler
 #
 # save configuration to fallback partition
diff --git a/backup-upload.rsc b/backup-upload.rsc
index dc5120f5..533cc550 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=50
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch
 #
 # create and upload backup and config file
diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index fa76ff5f..2726af77 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 912e2795..0a42bb25 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 3a5e7d1e..037409a8 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index abe066e8..791b3dbb 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -5,7 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: capsman-rolling-upgrade.capsman
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # upgrade CAPs one after another
 # https://rsc.eworm.de/doc/capsman-rolling-upgrade.md
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index c1c7ff1e..0b1cc2ba 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -5,7 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: capsman-rolling-upgrade%TEMPL%
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # upgrade CAPs one after another
 # https://rsc.eworm.de/doc/capsman-rolling-upgrade.md
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 44c99db7..4afdee2e 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -5,7 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: capsman-rolling-upgrade.wifi
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # upgrade CAPs one after another
 # https://rsc.eworm.de/doc/capsman-rolling-upgrade.md
diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index 5a4043d2..91a48dea 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # renew locally issued certificates
 # https://rsc.eworm.de/doc/certificate-renew-issued.md
diff --git a/check-certificates.rsc b/check-certificates.rsc
index 34e7537c..25807cba 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch
 #
 # check for certificate validity
diff --git a/check-health.d/state.rsc b/check-health.d/state.rsc
index bcc1fbcc..29919359 100644
--- a/check-health.d/state.rsc
+++ b/check-health.d/state.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # check for RouterOS health state - state plugin
 # https://rsc.eworm.de/doc/check-health.md
diff --git a/check-health.d/temperature.rsc b/check-health.d/temperature.rsc
index 9b847821..a2f632d2 100644
--- a/check-health.d/temperature.rsc
+++ b/check-health.d/temperature.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # check for RouterOS health state - temperature plugin
 # https://rsc.eworm.de/doc/check-health.md
diff --git a/check-health.d/voltage.rsc b/check-health.d/voltage.rsc
index 6394795f..9071c886 100644
--- a/check-health.d/voltage.rsc
+++ b/check-health.d/voltage.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # check for RouterOS health state - voltage plugin
 # https://rsc.eworm.de/doc/check-health.md
diff --git a/check-health.rsc b/check-health.rsc
index 827f5974..f02a2491 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # check for RouterOS health state
 # https://rsc.eworm.de/doc/check-health.md
diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index 562b8fe6..c5b6cb56 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # check for LTE firmware upgrade, send notification
 # https://rsc.eworm.de/doc/check-lte-firmware-upgrade.md
diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 5c9b392f..361be34e 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch, scheduler
 #
 # check for RouterOS update, send notification and/or install
diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index f718e0bc..17e09e3c 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # collect wireless mac adresses in access list
 # https://rsc.eworm.de/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index 00178752..4a38bfa4 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # collect wireless mac adresses in access list
 # https://rsc.eworm.de/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index 527e9851..da901be2 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # collect wireless mac adresses in access list
 # https://rsc.eworm.de/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index 5f9de7d2..cb217ce1 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # collect wireless mac adresses in access list
 # https://rsc.eworm.de/doc/collect-wireless-mac.md
diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 38039637..36b31c85 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update dhcp-server lease comment with infos from access-list
 # https://rsc.eworm.de/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index d5f14613..35dc6f68 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update dhcp-server lease comment with infos from access-list
 # https://rsc.eworm.de/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 2bddc268..47a85542 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update dhcp-server lease comment with infos from access-list
 # https://rsc.eworm.de/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index 515b4384..e0f97851 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update dhcp-server lease comment with infos from access-list
 # https://rsc.eworm.de/doc/dhcp-lease-comment.md
diff --git a/doc/accesslist-duplicates.md b/doc/accesslist-duplicates.md
index a6302f5a..e4d0c7fa 100644
--- a/doc/accesslist-duplicates.md
+++ b/doc/accesslist-duplicates.md
@@ -4,7 +4,7 @@ Find and remove access list duplicates
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-cloud.md b/doc/backup-cloud.md
index d6587609..72869606 100644
--- a/doc/backup-cloud.md
+++ b/doc/backup-cloud.md
@@ -4,7 +4,7 @@ Upload backup to Mikrotik cloud
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-email.md b/doc/backup-email.md
index aedae4d8..7b8bcfec 100644
--- a/doc/backup-email.md
+++ b/doc/backup-email.md
@@ -4,7 +4,7 @@ Send backup via e-mail
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-partition.md b/doc/backup-partition.md
index 9f62967b..9d615a53 100644
--- a/doc/backup-partition.md
+++ b/doc/backup-partition.md
@@ -4,7 +4,7 @@ Save configuration to fallback partition
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-upload.md b/doc/backup-upload.md
index f2858b29..6a5b0e4f 100644
--- a/doc/backup-upload.md
+++ b/doc/backup-upload.md
@@ -4,7 +4,7 @@ Upload backup to server
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/capsman-download-packages.md b/doc/capsman-download-packages.md
index d7199347..57222272 100644
--- a/doc/capsman-download-packages.md
+++ b/doc/capsman-download-packages.md
@@ -4,7 +4,7 @@ Download packages for CAP upgrade from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/capsman-rolling-upgrade.md b/doc/capsman-rolling-upgrade.md
index f366d403..d277db67 100644
--- a/doc/capsman-rolling-upgrade.md
+++ b/doc/capsman-rolling-upgrade.md
@@ -4,7 +4,7 @@ Run rolling CAP upgrades from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/certificate-renew-issued.md b/doc/certificate-renew-issued.md
index 096e07b9..c4615b5e 100644
--- a/doc/certificate-renew-issued.md
+++ b/doc/certificate-renew-issued.md
@@ -4,7 +4,7 @@ Renew locally issued certificates
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-certificates.md b/doc/check-certificates.md
index 4188815b..4c144ba3 100644
--- a/doc/check-certificates.md
+++ b/doc/check-certificates.md
@@ -4,7 +4,7 @@ Renew certificates and notify on expiration
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-health.md b/doc/check-health.md
index 51e71bc3..7cf0c33e 100644
--- a/doc/check-health.md
+++ b/doc/check-health.md
@@ -4,7 +4,7 @@ Notify about health state
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-lte-firmware-upgrade.md b/doc/check-lte-firmware-upgrade.md
index 66b2cf57..3693b712 100644
--- a/doc/check-lte-firmware-upgrade.md
+++ b/doc/check-lte-firmware-upgrade.md
@@ -4,7 +4,7 @@ Notify on LTE firmware upgrade
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index 2e9b8aa2..926b4aaa 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -4,7 +4,7 @@ Notify on RouterOS update
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/collect-wireless-mac.md b/doc/collect-wireless-mac.md
index 84c111d6..01975223 100644
--- a/doc/collect-wireless-mac.md
+++ b/doc/collect-wireless-mac.md
@@ -4,7 +4,7 @@ Collect MAC addresses in wireless access list
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/dhcp-lease-comment.md b/doc/dhcp-lease-comment.md
index 6a4c930a..b02f1993 100644
--- a/doc/dhcp-lease-comment.md
+++ b/doc/dhcp-lease-comment.md
@@ -4,7 +4,7 @@ Comment DHCP leases with info from access list
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/firmware-upgrade-reboot.md b/doc/firmware-upgrade-reboot.md
index 7ab6ac57..54f1da00 100644
--- a/doc/firmware-upgrade-reboot.md
+++ b/doc/firmware-upgrade-reboot.md
@@ -4,7 +4,7 @@ Automatically upgrade firmware and reboot
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/global-wait.md b/doc/global-wait.md
index 6787d209..799cae78 100644
--- a/doc/global-wait.md
+++ b/doc/global-wait.md
@@ -4,7 +4,7 @@ Wait for global functions and modules
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/gps-track.md b/doc/gps-track.md
index 9685899f..5e4878f5 100644
--- a/doc/gps-track.md
+++ b/doc/gps-track.md
@@ -4,7 +4,7 @@ Send GPS position to server
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/hotspot-to-wpa.md b/doc/hotspot-to-wpa.md
index 07d07dc8..a2e97483 100644
--- a/doc/hotspot-to-wpa.md
+++ b/doc/hotspot-to-wpa.md
@@ -4,7 +4,7 @@ Use WPA network with hotspot credentials
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ip-addr-bridge.md b/doc/ip-addr-bridge.md
index ddbcc0a7..f9f98e32 100644
--- a/doc/ip-addr-bridge.md
+++ b/doc/ip-addr-bridge.md
@@ -4,7 +4,7 @@ Manage IP addresses with bridge status
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ipsec-to-dns.md b/doc/ipsec-to-dns.md
index a688e809..123656ca 100644
--- a/doc/ipsec-to-dns.md
+++ b/doc/ipsec-to-dns.md
@@ -4,7 +4,7 @@ Create DNS records for IPSec peers
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ipv6-update.md b/doc/ipv6-update.md
index 42f0fe4c..1f009b15 100644
--- a/doc/ipv6-update.md
+++ b/doc/ipv6-update.md
@@ -4,7 +4,7 @@ Update configuration on IPv6 prefix change
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/lease-script.md b/doc/lease-script.md
index 1b59ff7a..f83c3833 100644
--- a/doc/lease-script.md
+++ b/doc/lease-script.md
@@ -4,7 +4,7 @@ Run other scripts on DHCP lease
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/leds-mode.md b/doc/leds-mode.md
index c01472e2..a194396f 100644
--- a/doc/leds-mode.md
+++ b/doc/leds-mode.md
@@ -4,7 +4,7 @@ Manage LEDs dark mode
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/log-forward.md b/doc/log-forward.md
index 55b15405..25be00a7 100644
--- a/doc/log-forward.md
+++ b/doc/log-forward.md
@@ -4,7 +4,7 @@ Forward log messages via notification
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/bridge-port-to.md b/doc/mod/bridge-port-to.md
index 2ed9dc7d..629c5263 100644
--- a/doc/mod/bridge-port-to.md
+++ b/doc/mod/bridge-port-to.md
@@ -4,7 +4,7 @@ Manage ports in bridge
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/bridge-port-vlan.md b/doc/mod/bridge-port-vlan.md
index ded26039..cf291995 100644
--- a/doc/mod/bridge-port-vlan.md
+++ b/doc/mod/bridge-port-vlan.md
@@ -4,7 +4,7 @@ Manage VLANs on bridge ports
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/inspectvar.md b/doc/mod/inspectvar.md
index 4e2f4c1d..7daba153 100644
--- a/doc/mod/inspectvar.md
+++ b/doc/mod/inspectvar.md
@@ -4,7 +4,7 @@ Inspect variables
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/ipcalc.md b/doc/mod/ipcalc.md
index 9f394293..c07853e5 100644
--- a/doc/mod/ipcalc.md
+++ b/doc/mod/ipcalc.md
@@ -4,7 +4,7 @@ IP address calculation
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-email.md b/doc/mod/notification-email.md
index 0bef4553..34d1c09e 100644
--- a/doc/mod/notification-email.md
+++ b/doc/mod/notification-email.md
@@ -4,7 +4,7 @@ Send notifications via e-mail
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index fbc9b912..89c1b01d 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -4,7 +4,7 @@ Send notifications via Matrix
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-ntfy.md b/doc/mod/notification-ntfy.md
index 04dee355..51756ace 100644
--- a/doc/mod/notification-ntfy.md
+++ b/doc/mod/notification-ntfy.md
@@ -4,7 +4,7 @@ Send notifications via Ntfy
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index f55f936d..b85d09ce 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -4,7 +4,7 @@ Send notifications via Telegram
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/scriptrunonce.md b/doc/mod/scriptrunonce.md
index 0127c6d3..955d12ed 100644
--- a/doc/mod/scriptrunonce.md
+++ b/doc/mod/scriptrunonce.md
@@ -4,7 +4,7 @@ Download script and run it once
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mode-button.md b/doc/mode-button.md
index 7feb19fa..be15bc92 100644
--- a/doc/mode-button.md
+++ b/doc/mode-button.md
@@ -4,7 +4,7 @@ Mode button with multiple presses
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ospf-to-leds.md b/doc/ospf-to-leds.md
index 23248b5b..3694d35c 100644
--- a/doc/ospf-to-leds.md
+++ b/doc/ospf-to-leds.md
@@ -4,7 +4,7 @@ Visualize OSPF state via LEDs
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/packages-update.md b/doc/packages-update.md
index 8b0d4a31..75225fe2 100644
--- a/doc/packages-update.md
+++ b/doc/packages-update.md
@@ -4,7 +4,7 @@ Manage system update
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ppp-on-up.md b/doc/ppp-on-up.md
index 7902f3bb..305afc1d 100644
--- a/doc/ppp-on-up.md
+++ b/doc/ppp-on-up.md
@@ -4,7 +4,7 @@ Run scripts on ppp connection
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/sms-action.md b/doc/sms-action.md
index 5de7f0d7..b696c85e 100644
--- a/doc/sms-action.md
+++ b/doc/sms-action.md
@@ -4,7 +4,7 @@ Act on received SMS
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/sms-forward.md b/doc/sms-forward.md
index 8e7417b8..ccb6482b 100644
--- a/doc/sms-forward.md
+++ b/doc/sms-forward.md
@@ -4,7 +4,7 @@ Forward received SMS
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/super-mario-theme.md b/doc/super-mario-theme.md
index 2ffb25b3..c72f2209 100644
--- a/doc/super-mario-theme.md
+++ b/doc/super-mario-theme.md
@@ -4,7 +4,7 @@ Play Super Mario theme
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/unattended-lte-firmware-upgrade.md b/doc/unattended-lte-firmware-upgrade.md
index e9a888c3..cb96aa15 100644
--- a/doc/unattended-lte-firmware-upgrade.md
+++ b/doc/unattended-lte-firmware-upgrade.md
@@ -4,7 +4,7 @@ Install LTE firmware upgrade
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/update-gre-address.md b/doc/update-gre-address.md
index 7e101c4a..de9f622e 100644
--- a/doc/update-gre-address.md
+++ b/doc/update-gre-address.md
@@ -4,7 +4,7 @@ Update GRE configuration with dynamic addresses
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/update-tunnelbroker.md b/doc/update-tunnelbroker.md
index 126d470b..ee0fe987 100644
--- a/doc/update-tunnelbroker.md
+++ b/doc/update-tunnelbroker.md
@@ -4,7 +4,7 @@ Update tunnelbroker configuration
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.14-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index e3d62def..86a9a8c5 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # install firmware upgrade, and reboot
 # https://rsc.eworm.de/doc/firmware-upgrade-reboot.md
diff --git a/global-wait.rsc b/global-wait.rsc
index bc984622..ca3fc0c4 100644
--- a/global-wait.rsc
+++ b/global-wait.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # wait for global-functions to finish
 # https://rsc.eworm.de/doc/global-wait.md
diff --git a/gps-track.rsc b/gps-track.rsc
index 5e35f8da..dea56d2e 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch
 #
 # track gps data by sending json data to http server
diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index c21ec3ea..033d0e73 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, hotspot
 #
 # manage and clean up private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 1bd877e9..0f8c490e 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, hotspot
 #
 # manage and clean up private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 8e362048..dfec697d 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, hotspot
 #
 # manage and clean up private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index de9f9d9a..3f514750 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, hotspot
 #
 # add private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index 003b12e2..068241d1 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, hotspot
 #
 # add private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index 0d6a7b96..cc5e2fc6 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, hotspot
 #
 # add private WPA passphrase after hotspot login
diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index 91f6b45e..26dab0a2 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, ipsec
 #
 # and add/remove/update DNS entries from IPSec mode-config
diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index 7eb625b2..c6e3d653 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update firewall and dns settings on IPv6 prefix change
 # https://rsc.eworm.de/doc/ipv6-update.md
diff --git a/lease-script.rsc b/lease-script.rsc
index b6ceac96..bf27fda8 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # run scripts on DHCP lease
 # https://rsc.eworm.de/doc/lease-script.md
diff --git a/log-forward.rsc b/log-forward.rsc
index 379fa54e..58ec9564 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # forward log messages via notification
 # https://rsc.eworm.de/doc/log-forward.md
diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index f00e10b1..39a036e5 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # reset bridge ports to default bridge
 # https://rsc.eworm.de/doc/mod/bridge-port-to.md
diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 62e71e38..0eeb9b5f 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # manage VLANs on bridge ports
 # https://rsc.eworm.de/doc/mod/bridge-port-vlan.md
diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index 0f05da72..c8615573 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # inspect variables
 # https://rsc.eworm.de/doc/mod/inspectvar.md
diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index fbed74b5..477cf4a8 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # ip address calculation
 # https://rsc.eworm.de/doc/mod/ipcalc.md
diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 404e74db..7b89d985 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, email, scheduler
 #
 # send notifications via e-mail
diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 9b2b641c..e989ee04 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -4,7 +4,7 @@
 #                         Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch, scheduler
 #
 # send notifications via Matrix
diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 212fde2e..aac6d6c1 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch, scheduler
 #
 # send notifications via Ntfy (ntfy.sh)
diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index c3ef2dd3..23ef942e 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch, scheduler
 #
 # send notifications via Telegram
diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index e5368c45..b158c9ca 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch
 #
 # download script and run it once
diff --git a/mode-button.rsc b/mode-button.rsc
index 4cf5e754..edc5f400 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, scheduler
 #
 # act on multiple mode and reset button presses
diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index 9d822c15..a8662b32 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # visualize ospf instance state via leds
 # https://rsc.eworm.de/doc/ospf-to-leds.md
diff --git a/packages-update.rsc b/packages-update.rsc
index afec2f56..b11596ea 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, scheduler
 #
 # download packages and reboot for installation
diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index 85e96896..e09bd9d5 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # run scripts on ppp up
 # https://rsc.eworm.de/doc/ppp-on-up.md
diff --git a/sms-action.rsc b/sms-action.rsc
index 34d21272..3c8307a8 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # run action on received SMS
 # https://rsc.eworm.de/doc/sms-action.md
diff --git a/sms-forward.rsc b/sms-forward.rsc
index 654fd564..8169022c 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -4,7 +4,7 @@
 #                         Anatoly Bubenkov <bubenkoff@gmail.com>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # forward SMS to e-mail
 # https://rsc.eworm.de/doc/sms-forward.md
diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index 74495d1a..83925fd9 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, scheduler
 #
 # schedule unattended lte firmware upgrade
diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 6b169a00..cddfa92f 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 #
 # update gre interface remote address with dynamic address from
 # ipsec remote peer
diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index a58589b8..45afa6f8 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -5,7 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: ppp-on-up
-# requires RouterOS, version=7.14
+# requires RouterOS, version=7.15
 # requires device-mode, fetch
 #
 # update local address of tunnelbroker interface

From a8e5b5226bc6a11a0ccbca0f3becc85f9f4904e3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Feb 2025 11:04:09 +0100
Subject: [PATCH 489/988] global-functions: $RmFile: fail on wrong type

---
 global-functions.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 2799f39a..ac37deeb 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1037,6 +1037,11 @@
 
   $LogPrint debug $0 ("Removing file: ". $FileName);
 
+  :if ([ :len [ /file/find where name=$FileName type!=file ] ] > 0) do={
+    $LogPrint error $0 ("File '" . $FileName . "' is not a file.");
+    :return false;
+  }
+
   :local File [ /file/find where name=$FileName type=file ];
   :if ([ :len $File ] = 0) do={
     $LogPrint debug $0 ("... which does not exist.");

From 82020ddd73163194eb75aaa6f57d8e41597a7e6f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Feb 2025 11:03:34 +0100
Subject: [PATCH 490/988] global-functions: $RmDir: fail on wrong type

---
 global-functions.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index ac37deeb..cf278eb1 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1014,6 +1014,11 @@
 
   $LogPrint debug $0 ("Removing directory: ". $DirName);
 
+  :if ([ :len [ /file/find where name=$DirName type!=directory ] ] > 0) do={
+    $LogPrint error $0 ("Directory '" . $DirName . "' is not a directory.");
+    :return false;
+  }
+
   :local Dir [ /file/find where name=$DirName type=directory ];
   :if ([ :len $Dir ] = 0) do={
     $LogPrint debug $0 ("... which does not exist.");

From dbdf2952443ada35695925628999db4ddbe80be0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jan 2025 18:33:35 +0100
Subject: [PATCH 491/988] global-functions: $CertificateDownload: use $RmFile

---
 global-functions.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index cf278eb1..782c1a32 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -149,6 +149,7 @@
   :global CleanName;
   :global FetchUserAgentStr;
   :global LogPrint;
+  :global RmFile;
   :global WaitForFile;
 
   $LogPrint info $0 ("Downloading and importing certificate with " . \
@@ -172,7 +173,7 @@
         dst-path=$FileName as-value;
       $WaitForFile $FileName;
       :if ([ /file/get $FileName size ] = 0) do={
-        /file/remove $FileName;
+        $RmFile $FileName;
         :error false;
       }
     } on-error={
@@ -183,7 +184,7 @@
 
   /certificate/import file-name=$FileName passphrase="" as-value;
   :delay 1s;
-  /file/remove [ find where name=$FileName ];
+  $RmFile $FileName;
 
   :if ([ :len [ /certificate/find where common-name=$CommonName ] ] = 0) do={
     /certificate/remove [ find where name~("^" . $FileName . "_[0-9]+\$") ];

From ea8ec6b580071d832df28fd78a9e3c4c07a17bef Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jan 2025 18:35:39 +0100
Subject: [PATCH 492/988] global-functions: $DownloadPackage: use $RmFile

---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 782c1a32..b19ec56b 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -343,6 +343,7 @@
   :global CleanFilePath;
   :global LogPrint;
   :global MkDir;
+  :global RmFile;
   :global WaitForFile;
 
   :if ([ :len $PkgName ] = 0) do={ :return false; }
@@ -386,7 +387,7 @@
       $LogPrint debug $0 ("Downloading package file failed.");
     }
 
-    /file/remove [ find where name=$PkgDest ];
+    $RmFile $PkgDest;
     :set Retry ($Retry - 1);
   }
 

From d19b90df08dd179163c501a08d53eaf15bc53f15 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jan 2025 18:37:01 +0100
Subject: [PATCH 493/988] global-functions: $FetchHuge: use $RmFile

---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index b19ec56b..ab6610e1 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -457,6 +457,7 @@
   :global IfThenElse;
   :global LogPrint;
   :global MkDir;
+  :global RmFile;
   :global WaitForFile;
 
   :set CheckCert [ $IfThenElse ($CheckCert = "false") "no" "yes-without-crl" ];
@@ -473,7 +474,7 @@
       http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) as-value;
   } on-error={
     :if ([ $WaitForFile $FileName 500ms ] = true) do={
-      /file/remove $FileName;
+      $RmFile $FileName;
     }
     $LogPrint debug $0 ("Failed downloading from: " . $Url);
     /file/remove $DirName;

From 4760515add1f753af7596245eb1a6c560ea37031 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jan 2025 18:38:09 +0100
Subject: [PATCH 494/988] global-functions: $FetchHuge: use $RmDir

---
 global-functions.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ab6610e1..e680b60b 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -457,6 +457,7 @@
   :global IfThenElse;
   :global LogPrint;
   :global MkDir;
+  :global RmDir;
   :global RmFile;
   :global WaitForFile;
 
@@ -477,7 +478,7 @@
       $RmFile $FileName;
     }
     $LogPrint debug $0 ("Failed downloading from: " . $Url);
-    /file/remove $DirName;
+    $RmDir $DirName;
     :return false;
   }
   $WaitForFile $FileName;
@@ -493,7 +494,7 @@
       :delay 100ms;
     }
   }
-  /file/remove $DirName;
+  $RmDir $DirName;
   :return $Return;
 }
 

From f5f00b70e325d80db939dcc2aa885b80845566fa Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jan 2025 18:41:58 +0100
Subject: [PATCH 495/988] global-functions: $MkDir: use $RmDir

---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index e680b60b..4b1f63dc 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -857,6 +857,7 @@
 
   :global CleanFilePath;
   :global LogPrint;
+  :global RmDir;
   :global WaitForFile;
 
   :local MkTmpfs do={
@@ -873,7 +874,7 @@
     }
 
     $LogPrint info $0 ("Creating disk of type tmpfs.");
-    /file/remove [ find where name="tmpfs" type="directory" ];
+    $RmDir "tmpfs";
     :do {
       /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/get total-memory ] / 3);
       $WaitForFile "tmpfs";

From d748b69142a8b2b2d4328ef0e07dabe01fdbc01e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 16:13:43 +0100
Subject: [PATCH 496/988] backup-cloud: use $RmDir

---
 backup-cloud.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index 9d760804..c4e23b2a 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -26,6 +26,7 @@
   :global LogPrint;
   :global MkDir;
   :global RandomDelay;
+  :global RmDir;
   :global ScriptFromTerminal;
   :global ScriptLock;
   :global SendNotification2;
@@ -97,7 +98,7 @@
     $LogPrint error $ScriptName ("Failed uploading backup for " . $Identity . " to cloud!");
     :set PackagesUpdateBackupFailure true;
   }
-  /file/remove "tmpfs/backup-cloud";
+  $RmDir "tmpfs/backup-cloud";
 } on-error={
   :global ExitError; $ExitError $ExitOK [ :jobname ];
 }

From 81ba47a07d97a4cc36fc020cf35de7656e2abbb2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 16:10:46 +0100
Subject: [PATCH 497/988] backup-upload: use $RmDir

---
 backup-upload.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 533cc550..7f15a86e 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -35,6 +35,7 @@
   :global LogPrint;
   :global MkDir;
   :global RandomDelay;
+  :global RmDir;
   :global ScriptFromTerminal;
   :global ScriptLock;
   :global SendNotification2;
@@ -170,7 +171,7 @@
   :if ($Failed = 1) do={
     :set PackagesUpdateBackupFailure true;
   }
-  /file/remove $DirName;
+  $RmDir $DirName;
 } on-error={
   :global ExitError; $ExitError $ExitOK [ :jobname ];
 }

From 88ff03136805f40f14bb5d39af370c0ace62c4e7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 16:10:05 +0100
Subject: [PATCH 498/988] backup-upload: use $RmFile

---
 backup-upload.rsc | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 7f15a86e..14c39141 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -36,6 +36,7 @@
   :global MkDir;
   :global RandomDelay;
   :global RmDir;
+  :global RmFile;
   :global ScriptFromTerminal;
   :global ScriptLock;
   :global SendNotification2;
@@ -100,7 +101,7 @@
       :set Failed 1;
     }
 
-    /file/remove ($FilePath . ".backup");
+    $RmFile ($FilePath . ".backup");
   }
 
   # create configuration export
@@ -119,7 +120,7 @@
       :set Failed 1;
     }
 
-    /file/remove ($FilePath . ".rsc");
+    $RmFile ($FilePath . ".rsc");
   }
 
   # global-config-overlay
@@ -140,7 +141,7 @@
       :set Failed 1;
     }
 
-    /file/remove ($FilePath . ".conf");
+    $RmFile ($FilePath . ".conf");
   }
 
   :local FileInfo do={

From 63db96bdccc9c9c1356e71683157383322b40285 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 16:06:33 +0100
Subject: [PATCH 499/988] capsman-download-packages: use $RmFile

---
 capsman-download-packages.capsman.rsc  | 3 ++-
 capsman-download-packages.template.rsc | 3 ++-
 capsman-download-packages.wifi.rsc     | 3 ++-
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 2726af77..4387cb15 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -22,6 +22,7 @@
   :global DownloadPackage;
   :global LogPrint;
   :global MkDir;
+  :global RmFile;
   :global ScriptLock;
   :global WaitFullyConnected;
 
@@ -61,7 +62,7 @@
     :if ([ $DownloadPackage ($File->"package-name") $InstalledVersion \
          ($File->"package-architecture") $PackagePath ] = true) do={
       :set Updated true;
-      /file/remove $Package;
+      $RmFile $Package;
     }
   }
 
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 0a42bb25..744494e5 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -23,6 +23,7 @@
   :global DownloadPackage;
   :global LogPrint;
   :global MkDir;
+  :global RmFile;
   :global ScriptLock;
   :global WaitFullyConnected;
 
@@ -63,7 +64,7 @@
     :if ([ $DownloadPackage ($File->"package-name") $InstalledVersion \
          ($File->"package-architecture") $PackagePath ] = true) do={
       :set Updated true;
-      /file/remove $Package;
+      $RmFile $Package;
     }
   }
 
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 037409a8..a0c5e121 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -22,6 +22,7 @@
   :global DownloadPackage;
   :global LogPrint;
   :global MkDir;
+  :global RmFile;
   :global ScriptLock;
   :global WaitFullyConnected;
 
@@ -61,7 +62,7 @@
     :if ([ $DownloadPackage ($File->"package-name") $InstalledVersion \
          ($File->"package-architecture") $PackagePath ] = true) do={
       :set Updated true;
-      /file/remove $Package;
+      $RmFile $Package;
     }
   }
 

From 6570a84904bcdd6d74090944f0fc94d1b94add90 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 16:08:40 +0100
Subject: [PATCH 500/988] check-certificates: use $RmFile

---
 check-certificates.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 25807cba..09073953 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -44,6 +44,7 @@
     :global EscapeForRegEx;
     :global FetchUserAgentStr;
     :global LogPrint;
+    :global RmFile;
     :global UrlEncode;
     :global WaitForFile;
 
@@ -63,7 +64,7 @@
             :set DecryptionFailed false;
           }
         }
-        /file/remove [ find where name=$CertFileName ];
+        $RmFile $CertFileName;
 
         :if ($DecryptionFailed = true) do={
           $LogPrint warning $ScriptName ("Decryption failed for certificate file '" . $CertFileName . "'.");

From 0fea300feaaaf8f3c87facb99e04126753713c76 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 16:12:51 +0100
Subject: [PATCH 501/988] mod/ssh-keys-import: use $RmDir

---
 mod/ssh-keys-import.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 35aa7ec9..2fae4b13 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -19,6 +19,7 @@
   :global GetRandom20CharAlNum;
   :global LogPrint;
   :global MkDir;
+  :global RmDir;
   :global WaitForFile;
 
   :if ([ :len $Key ] = 0 || [ :len $User ] = 0) do={
@@ -58,10 +59,10 @@
     /user/ssh-keys/import public-key-file=$FileName user=$User;
     $LogPrint info $0 ("Imported ssh public key (" . $KeyVal->2 . ", " . $KeyVal->0 . ", " . \
       "MD5:" . $FingerPrintMD5 . ") for user '" . $User . "'.");
-    /file/remove "tmpfs/ssh-keys-import";
+    $RmDir "tmpfs/ssh-keys-import";
   } on-error={
     $LogPrint warning $0 ("Failed importing key.");
-    /file/remove "tmpfs/ssh-keys-import";
+    $RmDir "tmpfs/ssh-keys-import";
     :return false;
   }
 } on-error={

From b156fc43cfde99935eb78d95c6a5eae35b8f70f1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Feb 2025 16:14:58 +0100
Subject: [PATCH 502/988] telegram-chat: use $RmDir

---
 telegram-chat.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 8f29d8c0..10952a6a 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -37,6 +37,7 @@
   :global MIN;
   :global MkDir;
   :global RandomDelay;
+  :global RmDir;
   :global ScriptLock;
   :global SendTelegram2;
   :global SymbolForNotification;
@@ -154,7 +155,7 @@
                 $State . [ $IfThenElse ([ :len $Content ] > 0) \
                 ([ $SymbolForNotification "memo" ] . "Output:\n" . $Content) \
                 ([ $SymbolForNotification "memo" ] . "No output.") ]) });
-            /file/remove "tmpfs/telegram-chat";
+            $RmDir "tmpfs/telegram-chat";
           } else={
             $LogPrint info $ScriptName ("The command from update " . $UpdateID . " failed syntax validation!");
             $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; replyto=($Message->"message_id"); \

From fc3beac83b8a6fd35a7b3736759f15bb8b71a723 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Feb 2025 08:42:17 +0100
Subject: [PATCH 503/988] log-forward: make empty string a special meaning

---
 global-config.rsc | 10 +++++-----
 log-forward.rsc   |  5 +++++
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index df26ef97..5df7b345 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -119,17 +119,17 @@
 :global FwAddrListTimeOut 1d;
 
 # This defines what log messages to filter or include by topic or message
-# text. Regular expressions are supported. Do *NOT* set an empty string,
-# that will filter or include everything!
+# text. Regular expressions are supported. An empty string has a special
+# meaning not to filter or include anything.
 # These are filters, so excluding messages from forwarding.
 :global LogForwardFilter "(debug|info|packet|raw)";
-:global LogForwardFilterMessage [];
+:global LogForwardFilterMessage "";
 #:global LogForwardFilterMessage "message text";
 #:global LogForwardFilterMessage "(message text|another text|...)";
 # ... and another setting with reverse logic. This includes messages even
 # if filtered above.
-:global LogForwardInclude [];
-:global LogForwardIncludeMessage [];
+:global LogForwardInclude "";
+:global LogForwardIncludeMessage "";
 #:global LogForwardInclude "account";
 #:global LogForwardIncludeMessage "message text";
 
diff --git a/log-forward.rsc b/log-forward.rsc
index 58ec9564..afeb3f29 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -57,6 +57,11 @@
   :local MessageVal;
   :local MessageDups ({});
 
+  :set LogForwardFilter [ $EitherOr $LogForwardFilter [] ];
+  :set LogForwardFilterMessage [ $EitherOr $LogForwardFilterMessage [] ];
+  :set LogForwardInclude [ $EitherOr $LogForwardInclude [] ];
+  :set LogForwardIncludeMessage [ $EitherOr $LogForwardIncludeMessage [] ];
+
   :local LogForwardFilterLogForwardingCached [ $EitherOr [ $LogForwardFilterLogForwarding ] ("\$^") ];
   :foreach Message in=[ /log/find where (!(message="") and \
       !(message~$LogForwardFilterLogForwardingCached) and \

From 2e42f7963c2186512c4fa2cd75de7ab07754f229 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Feb 2025 08:45:25 +0100
Subject: [PATCH 504/988] mod/notification-ntfy: use empty strings as
 default...

... which should be fine now that the credentials are not passed with
fetch's properties, but as properly formatted authentication header.
---
 global-config.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index 5df7b345..b0f0c643 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -56,9 +56,9 @@
 # install the module:
 # $ScriptInstallUpdate mod/notification-ntfy
 :global NtfyServer "ntfy.sh";
-:global NtfyServerUser [];
-:global NtfyServerPass [];
-:global NtfyServerToken [];
+:global NtfyServerUser "";
+:global NtfyServerPass "";
+:global NtfyServerToken "";
 :global NtfyTopic "";
 
 # It is possible to override e-mail, Telegram, Matrix and Ntfy setting

From da280586b5012feb576cd7cd3e911d00ac7bf63e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Feb 2025 14:00:37 +0100
Subject: [PATCH 505/988] doc/log-forward: add a hint on defaults

---
 doc/log-forward.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/doc/log-forward.md b/doc/log-forward.md
index 25be00a7..93f6a7dd 100644
--- a/doc/log-forward.md
+++ b/doc/log-forward.md
@@ -53,6 +53,12 @@ Just install the script:
 Configuration
 -------------
 
+The default configuration should provide reasonable presets, filtering
+*info*, and effectively forwarding *warning* and *error*.
+
+> 💡️ **Hint**: Please try with defaults first, especially if you are not
+> familiar with regular expressions!
+
 The configuration goes to `global-config-overlay`, these are the parameters:
 
 * `LogForwardFilter`: define topics *not* to be forwarded

From 8af67af462369968238afe874a24c26141b0b5c9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Feb 2025 14:08:06 +0100
Subject: [PATCH 506/988] doc/log-forward: mention ntfy

---
 doc/log-forward.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/log-forward.md b/doc/log-forward.md
index 93f6a7dd..3c195694 100644
--- a/doc/log-forward.md
+++ b/doc/log-forward.md
@@ -22,15 +22,15 @@ server (see `/system/logging`). This has some limitation, however:
 * does not work early after boot if network connectivity is not
   yet established, or breaks intermittently
 * lots of messages generate a flood of mails
-* Matrix and Telegram are not supported
+* Matrix, Ntfy and Telegram are not supported
 
 The script works around the limitations, for example it does:
 
 * read from `/log`, including messages from early boot
 * skip multi-repeated messages
 * rate-limit itself to mitigate flooding
-* forward via notification (which includes *e-mail*, *Matrix* and *Telegram*
-  when installed and configured, see below)
+* forward via notification (which includes *e-mail*, *Matrix*, *Ntfy* and
+  *Telegram* when installed and configured, see below)
 
 It is intended to be run periodically from scheduler, then collects new
 log messages and forwards them via notification.

From 4d0b4a1ff4137ae0b5508fb16428ac4da7205410 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Feb 2025 14:30:14 +0100
Subject: [PATCH 507/988] fw-addr-lists: these lists are deprecated and
 discontinued

Any alternatives around?
---
 certs/GlobalSign.pem | 28 ----------------------------
 certs/Makefile       |  2 --
 doc/fw-addr-lists.md |  6 +++---
 global-config.rsc    |  4 ----
 4 files changed, 3 insertions(+), 37 deletions(-)
 delete mode 100644 certs/GlobalSign.pem

diff --git a/certs/GlobalSign.pem b/certs/GlobalSign.pem
deleted file mode 100644
index 47035e48..00000000
--- a/certs/GlobalSign.pem
+++ /dev/null
@@ -1,28 +0,0 @@
-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3
-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3
-# Label: "GlobalSign Root CA - R3"
-# Serial: 4835703278459759426209954
-# MD5 Fingerprint: c5:df:b8:49:ca:05:13:55:ee:2d:ba:1a:c3:3e:b0:28
-# SHA1 Fingerprint: d6:9b:56:11:48:f0:1c:77:c5:45:78:c1:09:26:df:5b:85:69:76:ad
-# SHA256 Fingerprint: cb:b5:22:d7:b7:f1:27:ad:6a:01:13:86:5b:df:1c:d4:10:2e:7d:07:59:af:63:5a:7c:f4:72:0d:c9:63:c5:3b
------BEGIN CERTIFICATE-----
-MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G
-A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp
-Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4
-MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEG
-A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI
-hvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWtiHL8
-RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsT
-gHeMCOFJ0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmm
-KPZpO/bLyCiR5Z2KYVc3rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zd
-QQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjlOCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZ
-XriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2xmmFghcCAwEAAaNCMEAw
-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI/wS3+o
-LkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZU
-RUm7lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMp
-jjM5RcOO5LlXbKr8EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK
-6fBdRoyV3XpYKBovHd7NADdBj+1EbddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQX
-mcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18YIvDQVETI53O9zJrlAGomecs
-Mx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7rkpeDMdmztcpH
-WD9f
------END CERTIFICATE-----
diff --git a/certs/Makefile b/certs/Makefile
index ba25303b..4e252b4a 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -23,12 +23,10 @@ DOMAINS_IPV4 = \
 	8.8.8.8/GTS-Root-R1 \
 	9.9.9.9/DigiCert-Global-Root-G3 \
 	api.mullvad.net/ISRG-Root-X1 \
-	feodotracker.abuse.ch/GlobalSign \
 	ipv4.showipv6.de/ISRG-Root-X1 \
 	ipv4.tunnelbroker.net/Starfield-Root-Certificate-Authority-G2 \
 	mkcert.org/ISRG-Root-X1 \
 	ntfy.sh/ISRG-Root-X1 \
-	sslbl.abuse.ch/GlobalSign \
 	www.dshield.org/ISRG-Root-X1 \
 	www.spamhaus.org/GTS-Root-R4
 DOMAINS_IPV6 = \
diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index f581fd29..b888d4be 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -19,9 +19,9 @@ Description
 This script downloads, imports and updates firewall address-lists. Its main
 purpose is to block attacking ip addresses, spam hosts, command-and-control
 servers and similar malicious entities. The default configuration contains
-lists from [abuse.ch](https://abuse.ch/), [dshield.org](https://dshield.org/)
-and [blocklist.de](https://www.blocklist.de/), and
-lists from [spamhaus.org](https://spamhaus.org/) are prepared.
+lists from [dshield.org](https://dshield.org/) and
+[blocklist.de](https://www.blocklist.de/), and lists from
+[spamhaus.org](https://spamhaus.org/) are prepared.
 
 The address-lists are updated in place, so after initial import you will not
 see situation when the lists are not populated.
diff --git a/global-config.rsc b/global-config.rsc
index b0f0c643..2be47524 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -98,10 +98,6 @@
   "block"={
 #    { url="https://rsc.eworm.de/main/fw-addr-lists.d/block";
 #      cert="ISRG Root X2" };
-    { url="https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt";
-      cert="GlobalSign" };
-    { url="https://sslbl.abuse.ch/blacklist/sslipblacklist.txt";
-      cert="GlobalSign" };
     { url="https://www.dshield.org/block.txt"; cidr="/24";
       cert="ISRG Root X1" };
     { url="https://lists.blocklist.de/lists/strongips.txt";

From e1c561dd91dff9ad7c6bdd1e3496e126a8ac8b2c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Feb 2025 14:56:43 +0100
Subject: [PATCH 508/988] global-functions: $MkDir: add debug output

---
 global-functions.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 4b1f63dc..645ce3cf 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -891,7 +891,10 @@
     :return true;
   }
 
+  $LogPrint debug $0 ("Making directory: " . $Path);
+
   :if ([ :len [ /file/find where name=$Path type="directory" ] ] = 1) do={
+    $LogPrint debug $0 ("... which already exists.");
     :return true;
   }
 

From d41f7585504b592938da5ea0fc68870d1f68c0f5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Feb 2025 15:32:05 +0100
Subject: [PATCH 509/988] introduce DEBUG info

---
 DEBUG.md | 49 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 DEBUG.md

diff --git a/DEBUG.md b/DEBUG.md
new file mode 100644
index 00000000..3d7f0258
--- /dev/null
+++ b/DEBUG.md
@@ -0,0 +1,49 @@
+Debug output and logs
+=====================
+
+[![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
+[![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
+[![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
+
+[⬅️ Go back to main README](README.md)
+
+Sometimes scripts do not behave as expected. In these cases debug output
+or logs can help.
+
+## Debug output
+
+Run this command in a terminal:
+
+    :set PrintDebug true;
+
+You will then see debug output when running the script from terminal.
+
+To revert to default output run:
+
+    :set PrintDebug false;
+
+### Debug output for specific script
+
+Even having debug output for a specific script or function only (or a
+set of) is possible. To enable debug output for `telegram-chat` run:
+
+    :set ($PrintDebugOverride->"telegram-chat") true;
+
+## Debug logs
+
+The debug info can go to system log. To make it show up in `memory` run:
+
+    /system/logging/add topics=script,debug action=memory;
+
+Other actions (`disk`, `email`, `remote` or `support`) can be used as
+well. I do not recommend using `echo` - use [debug output](#debug-output)
+instead.
+
+Disable or remote that setting to restore regular logging.
+
+---
+[⬅️ Go back to main README](README.md)  
+[⬆️ Go back to top](#top)

From c8759381e90408a01dd842e837724b77f2d8c237 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Feb 2025 19:14:42 +0100
Subject: [PATCH 510/988] global-functions: $WaitForFile: check that we can get
 properties
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Looks like RouterOS 7.18beta2 brings more breakage. Having a file
available in listing is just the first step now. We also need to make
sure that the file properties are accessible... 🤪

I have seen this taking several tens of seconds at least... 🤪🤪 So
let's just try until we have properties available, or the file vanishes.

Reported as SUP-179200. 🤞
---
 global-functions.rsc | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 645ce3cf..13dca64c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1669,6 +1669,7 @@
 
   :global CleanFilePath;
   :global EitherOr;
+  :global LogPrintOnce;
   :global MAX;
 
   :set FileName [ $CleanFilePath $FileName ];
@@ -1682,7 +1683,20 @@
     :delay $Delay;
     :set I ($I + 1);
   }
-  :return true;
+
+  :while ([ :len [ /file/find where name=$FileName ] ] > 0) do={
+    :do {
+      /file/get $FileName;
+      :return true;
+    } on-error={
+      $LogPrintOnce warning $0 \
+          ("Hit the infamous file handling breakage (SUP-179200) introduced with RouterOS 7.18beta2...");
+    }
+    :delay $Delay;
+    :set Delay ($Delay * 3 / 2);
+  }
+
+  :return false;
 }
 
 # wait to be fully connected (default route is reachable, time is sync, DNS resolves)

From df631b987d86b3b20cd55de9a005b13703576784 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Feb 2025 12:13:17 +0100
Subject: [PATCH 511/988] fw-addr-lists: add a collective list in default
 configuration

---
 doc/fw-addr-lists.md | 3 ++-
 global-config.rsc    | 4 ++++
 global-functions.rsc | 2 +-
 news-and-changes.rsc | 1 +
 4 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index b888d4be..cb560d74 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -18,7 +18,8 @@ Description
 
 This script downloads, imports and updates firewall address-lists. Its main
 purpose is to block attacking ip addresses, spam hosts, command-and-control
-servers and similar malicious entities. The default configuration contains
+servers and similar malicious entities. The default configuration contains a
+[collective list by GitHub user @stamparm](https://github.com/stamparm/ipsum),
 lists from [dshield.org](https://dshield.org/) and
 [blocklist.de](https://www.blocklist.de/), and lists from
 [spamhaus.org](https://spamhaus.org/) are prepared.
diff --git a/global-config.rsc b/global-config.rsc
index 2be47524..b364a253 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -90,6 +90,7 @@
 :global BackupPartitionCopyBeforeFeatureUpdate false;
 
 # This defines the settings for firewall address-lists (fw-addr-lists).
+# Warning: Mind your device's resources - memory and processing!
 :global FwAddrLists {
 #  "allow"={
 #    { url="https://rsc.eworm.de/main/fw-addr-lists.d/allow";
@@ -98,6 +99,9 @@
   "block"={
 #    { url="https://rsc.eworm.de/main/fw-addr-lists.d/block";
 #      cert="ISRG Root X2" };
+    { url="https://raw.githubusercontent.com/stamparm/ipsum/refs/heads/master/levels/4.txt";
+#     # higher level (decrease the numerical value) for more addresses, and vice versa
+      cert="DigiCert Global Root G2" };
     { url="https://www.dshield.org/block.txt"; cidr="/24";
       cert="ISRG Root X1" };
     { url="https://lists.blocklist.de/lists/strongips.txt";
diff --git a/global-functions.rsc b/global-functions.rsc
index 13dca64c..59963703 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -13,7 +13,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
-:global ExpectedConfigVersion 132;
+:global ExpectedConfigVersion 133;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index c7e566ff..6f9e96ed 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -57,6 +57,7 @@
   130="Dropped intermediate certificates, depending on just root certificates now.";
   131="Enhanced certificate download to fallback to mkcert.org, so all (commonly trusted) root certificates are available now.";
   132="Split off plugins from 'check-health', so the script works on all devices to monitor CPU and RAM. The supported plugins for sensors in hardware are installed automatically.";
+  133="Updated the default configuration for 'fw-addr-lists', deprecated lists were removed, a collective list was added.";
 };
 
 # Migration steps to be applied on script updates

From b7b3b43f3b11a280dbb465a425a5a554c2e8e471 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Feb 2025 13:59:31 +0100
Subject: [PATCH 512/988] mod/scriptrunonce: use $FetchHuge

---
 mod/scriptrunonce.rsc | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index b158c9ca..683e4168 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -4,7 +4,6 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
-# requires device-mode, fetch
 #
 # download script and run it once
 # https://rsc.eworm.de/doc/mod/scriptrunonce.md
@@ -18,6 +17,7 @@
   :global ScriptRunOnceBaseUrl;
   :global ScriptRunOnceUrlSuffix;
 
+  :global FetchHuge;
   :global LogPrint;
   :global ValidateSyntax;
 
@@ -30,11 +30,10 @@
       :set Script ($ScriptRunOnceBaseUrl . $Script . ".rsc" . $ScriptRunOnceUrlSuffix);
     }
 
-    :local Source;
-    :do {    
-      :set Source ([ /tool/fetch check-certificate=yes-without-crl $Script output=user as-value ]->"data");
-    } on-error={
+    :local Source [ $FetchHuge $0 $Script true ];
+    :if ($Source = false) do={
       $LogPrint warning $0 ("Failed fetching script '" . $Script . "'!");
+      :return false;
     }
 
     :if ([ :len $Source ] > 0) do={

From 1c957dbc6d0a35d48f18f2fde0f2061f334feca8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Feb 2025 14:01:10 +0100
Subject: [PATCH 513/988] mod/scriptrunonce: resolve nested conditions

---
 mod/scriptrunonce.rsc | 21 ++++++++++-----------
 1 file changed, 10 insertions(+), 11 deletions(-)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 683e4168..9d990a12 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -36,17 +36,16 @@
       :return false;
     }
 
-    :if ([ :len $Source ] > 0) do={
-      :if ([ $ValidateSyntax $Source ] = true) do={
-        :do {
-          $LogPrint info $0 ("Running script '" . $Script . "' now.");
-          [ :parse $Source ];
-        } on-error={
-          $LogPrint warning $0 ("The script '" . $Script . "' failed to run!");
-        }
-      } else={
-        $LogPrint warning $0 ("The script '" . $Script . "' failed syntax validation!");
-      }
+    :if ([ $ValidateSyntax $Source ] = false) do={
+      $LogPrint warning $0 ("The script '" . $Script . "' failed syntax validation!");
+      :return false;
+    }
+
+    :do {
+      $LogPrint info $0 ("Running script '" . $Script . "' now.");
+      [ :parse $Source ];
+    } on-error={
+      $LogPrint warning $0 ("The script '" . $Script . "' failed to run!");
     }
   }
 } on-error={

From 5715bc7b57ced8f38b394d535028659655a71801 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Feb 2025 14:02:33 +0100
Subject: [PATCH 514/988] mod/scriptrunonce: always give proper return code

---
 mod/scriptrunonce.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 9d990a12..7fcd5b5b 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -46,7 +46,10 @@
       [ :parse $Source ];
     } on-error={
       $LogPrint warning $0 ("The script '" . $Script . "' failed to run!");
+      :return false;
     }
+
+    :return true;
   }
 } on-error={
   :global ExitError; $ExitError false $0;

From 584e507fd18f0a0d97f6e3cbfc4f3f6e0d4854fc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Feb 2025 08:50:49 +0100
Subject: [PATCH 515/988] global-functions: $DeviceInfo: show commit id (if
 available)

---
 global-functions.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 59963703..71e5c66c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -13,6 +13,7 @@
 :local ScriptName [ :jobname ];
 
 # expected configuration version
+:global CommitId "unknown";
 :global ExpectedConfigVersion 133;
 
 # global variables not to be changed by user
@@ -284,6 +285,7 @@
 
 # get readable device info
 :set DeviceInfo do={
+  :global CommitId;
   :global ExpectedConfigVersion;
   :global Identity;
 
@@ -324,6 +326,8 @@
         $RouterBoard->"current-firmware" != $RouterBoard->"upgrade-firmware") \
       ([ $FormatLine "    Firmware" ($RouterBoard->"current-firmware") ] . "\n") ] . \
     "RouterOS-Scripts:\n" . \
+    [ $IfThenElse ($CommitId != "unknown") \
+      ([ $FormatLine "    Commit" [ :pick $CommitId 0 8 ] ] . "\n") ] . \
     [ $FormatLine "    Version" $ExpectedConfigVersion ]);
 }
 

From 0199ea8884d9b45a184717bdbd5dccf829eb527d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Feb 2025 09:07:43 +0100
Subject: [PATCH 516/988] global-functions: $ScriptInstallUpdate: show commit
 id (if available)

---
 global-functions.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 71e5c66c..204f8249 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1105,6 +1105,7 @@
   :local Scripts    [ :toarray $1 ];
   :local NewComment [ :tostr   $2 ];
 
+  :global CommitId;
   :global ExpectedConfigVersion;
   :global Identity;
   :global IDonate;
@@ -1137,6 +1138,7 @@
     }
   }
 
+  :local CommitIdBefore $CommitId;
   :local ExpectedConfigVersionBefore $ExpectedConfigVersion;
   :local ReloadGlobalFunctions false;
   :local ReloadGlobalConfig false;
@@ -1251,6 +1253,10 @@
     }
   }
 
+  :if ($CommitId != "unknown" && $CommitIdBefore != $CommitId) do={
+    $LogPrint info $0 ("Updated to commit id: " . [ :pick $CommitId 0 8 ]);
+  }
+
   :if ($ExpectedConfigVersionBefore > $ExpectedConfigVersion) do={
     $LogPrint warning $0 ("The configuration version decreased from " . \
       $ExpectedConfigVersionBefore . " to " . $ExpectedConfigVersion . \

From dafcc1a0cb8d18b191919c4876fa1db6c3fe2e27 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Feb 2025 17:49:42 +0100
Subject: [PATCH 517/988] global-functions: $RmFile: fix type safeguard
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Ups... 🫣
The type is not just literal 'file' - but what ever type the file is,
like 'backup', 'package', 'script', '.conf file', ...

So let's match those types we do *not* want to remove.

Fixes: https://github.com/eworm-de/routeros-scripts/issues/90
---
 global-functions.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 204f8249..221b1b50 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1054,12 +1054,12 @@
 
   $LogPrint debug $0 ("Removing file: ". $FileName);
 
-  :if ([ :len [ /file/find where name=$FileName type!=file ] ] > 0) do={
+  :if ([ :len [ /file/find where name=$FileName (type=directory or type=disk) ] ] > 0) do={
     $LogPrint error $0 ("File '" . $FileName . "' is not a file.");
     :return false;
   }
 
-  :local File [ /file/find where name=$FileName type=file ];
+  :local File [ /file/find where name=$FileName !(type=directory or type=disk) ];
   :if ([ :len $File ] = 0) do={
     $LogPrint debug $0 ("... which does not exist.");
     :return true;

From 75633872aa8a09a328e2bef07211e182bceb2725 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 17 Feb 2025 11:45:02 +0100
Subject: [PATCH 518/988] global-functions: $DeviceInfo: also show commit info

---
 global-functions.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 221b1b50..c6625c17 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -12,8 +12,9 @@
 
 :local ScriptName [ :jobname ];
 
-# expected configuration version
+# Git commit id & info, expected configuration version
 :global CommitId "unknown";
+:global CommitInfo "unknown";
 :global ExpectedConfigVersion 133;
 
 # global variables not to be changed by user
@@ -286,6 +287,7 @@
 # get readable device info
 :set DeviceInfo do={
   :global CommitId;
+  :global CommitInfo;
   :global ExpectedConfigVersion;
   :global Identity;
 
@@ -327,7 +329,7 @@
       ([ $FormatLine "    Firmware" ($RouterBoard->"current-firmware") ] . "\n") ] . \
     "RouterOS-Scripts:\n" . \
     [ $IfThenElse ($CommitId != "unknown") \
-      ([ $FormatLine "    Commit" [ :pick $CommitId 0 8 ] ] . "\n") ] . \
+      ([ $FormatLine "    Commit" ($CommitInfo . "/" . [ :pick $CommitId 0 8 ]) ] . "\n") ] . \
     [ $FormatLine "    Version" $ExpectedConfigVersion ]);
 }
 

From 2c92c78b4647e43c44da567e98adee69b7857393 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 17 Feb 2025 11:47:26 +0100
Subject: [PATCH 519/988] global-functions: $ScriptInstallUpdate: also show
 commit info

---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index c6625c17..f5fa5cbf 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1108,6 +1108,7 @@
   :local NewComment [ :tostr   $2 ];
 
   :global CommitId;
+  :global CommitInfo;
   :global ExpectedConfigVersion;
   :global Identity;
   :global IDonate;
@@ -1256,7 +1257,7 @@
   }
 
   :if ($CommitId != "unknown" && $CommitIdBefore != $CommitId) do={
-    $LogPrint info $0 ("Updated to commit id: " . [ :pick $CommitId 0 8 ]);
+    $LogPrint info $0 ("Updated to commit: " . $CommitInfo . "/" . [ :pick $CommitId 0 8 ]);
   }
 
   :if ($ExpectedConfigVersionBefore > $ExpectedConfigVersion) do={

From 58da92e36a704a0bd5915451fbace686e8d9456d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 19 Feb 2025 22:21:03 +0100
Subject: [PATCH 520/988] global-functions: $WaitForFile: drop the warning on
 file handling breakage...

... but keep the workaround for now - just to be sure.
---
 global-functions.rsc | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index f5fa5cbf..99e52f80 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1682,7 +1682,6 @@
 
   :global CleanFilePath;
   :global EitherOr;
-  :global LogPrintOnce;
   :global MAX;
 
   :set FileName [ $CleanFilePath $FileName ];
@@ -1701,10 +1700,7 @@
     :do {
       /file/get $FileName;
       :return true;
-    } on-error={
-      $LogPrintOnce warning $0 \
-          ("Hit the infamous file handling breakage (SUP-179200) introduced with RouterOS 7.18beta2...");
-    }
+    } on-error={ }
     :delay $Delay;
     :set Delay ($Delay * 3 / 2);
   }

From cad104879cbc758717f6cbf18f2f1b8946078c19 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 24 Feb 2025 14:49:30 +0100
Subject: [PATCH 521/988] mod/notification-telegram: simplify the queue...

... and pass http-data as a complete sting.
---
 mod/notification-telegram.rsc | 16 +++++++---------
 1 file changed, 7 insertions(+), 9 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 23ef942e..be4a915d 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -22,7 +22,6 @@
 
   :global IsFullyConnected;
   :global LogPrint;
-  :global UrlEncode;
 
   :if ([ $IsFullyConnected ] = false) do={
     $LogPrint debug $0 ("System is not fully connected, not flushing.");
@@ -41,9 +40,7 @@
       :do {
         :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user http-method=post \
           ("https://api.telegram.org/bot" . ($Message->"tokenid") . "/sendMessage") \
-          http-data=("chat_id=" . ($Message->"chatid") . "&disable_notification=" . ($Message->"silent") . \
-          "&reply_to_message_id=" . ($Message->"replyto") . "&disable_web_page_preview=true" . \
-          "&parse_mode=MarkdownV2&text=" . [ $UrlEncode ($Message->"text") ]) as-value ]->"data");
+          http-data=($Message->"http-data") as-value ]->"data");
         :set ($TelegramQueue->$Id);
         :set ($TelegramMessageIDs->[ :tostr ([ :deserialize from=json value=$Data ]->"result"->"message_id") ]) 1;
       } on-error={
@@ -145,6 +142,9 @@
       (($LenSum - [ :len $Text ]) * 100 / $LenSum) . "%_!") "plain" "_" ]);
   }
 
+  :local HTTPData ("chat_id=" . $ChatId . "&disable_notification=" . ($Notification->"silent") . \
+      "&reply_to_message_id=" . ($Notification->"replyto") . "&disable_web_page_preview=true" . \
+      "&parse_mode=MarkdownV2");
   :do {
     :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
       $LogPrint warning $0 ("Downloading required certificate failed.");
@@ -152,9 +152,7 @@
     }
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user http-method=post \
       ("https://api.telegram.org/bot" . $TokenId . "/sendMessage") \
-      http-data=("chat_id=" . $ChatId . "&disable_notification=" . ($Notification->"silent") . \
-      "&reply_to_message_id=" . ($Notification->"replyto") . "&disable_web_page_preview=true" . \
-      "&parse_mode=MarkdownV2&text=" . [ $UrlEncode $Text ]) as-value ]->"data");
+      http-data=($HTTPData . "&text=" . [ $UrlEncode $Text ]) as-value ]->"data");
     :set ($TelegramMessageIDs->[ :tostr ([ :deserialize from=json value=$Data ]->"result"->"message_id") ]) 1;
   } on-error={
     $LogPrint info $0 ("Failed sending Telegram notification! Queuing...");
@@ -165,8 +163,8 @@
     :set Text ($Text . "\n" . [ $SymbolForNotification "alarm-clock" ] . \
       [ $EscapeMD ("This message was queued since _" . [ /system/clock/get date ] . \
       " " . [ /system/clock/get time ] . "_ and may be obsolete.") "plain" "_" ]);
-    :set ($TelegramQueue->[ :len $TelegramQueue ]) { chatid=$ChatId; tokenid=$TokenId;
-      text=$Text; silent=($Notification->"silent"); replyto=($Notification->"replyto") };
+    :set ($TelegramQueue->[ :len $TelegramQueue ]) { tokenid=$TokenId;
+      http-data=($HTTPData . "&text=" . [ $UrlEncode $Text ]) };
     :if ([ :len [ /system/scheduler/find where name="_FlushTelegramQueue" ] ] = 0) do={
       /system/scheduler/add name="_FlushTelegramQueue" interval=1m start-time=startup \
         on-event=(":global FlushTelegramQueue; \$FlushTelegramQueue;");

From a22b62f58803141a3055db046363f4d41b12ea83 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 24 Feb 2025 14:57:26 +0100
Subject: [PATCH 522/988] mod/notification-telegram: support sending to group's
 topic...

... when a group has enabled the "Topics" feature.
---
 doc/mod/notification-telegram.md | 3 +++
 global-config.rsc                | 2 ++
 mod/notification-telegram.rsc    | 8 ++++++--
 3 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index b85d09ce..80437168 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -58,6 +58,9 @@ Sending notifications to a group is possible as well. Add your bot and the
 *GetIDs Bot* to a group, then use the group's id (which starts with a dash)
 for `TelegramChatId`. Then remove *GetIDs Bot* from group.
 
+Groups can enable the `Topics` feature. Use `TelegramThreadId` to send to a
+specific topic in a group.
+
 Usage and invocation
 --------------------
 
diff --git a/global-config.rsc b/global-config.rsc
index b364a253..2524dedc 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -33,6 +33,8 @@
 :global TelegramChatId "";
 #:global TelegramTokenId "123456:ABCDEF-GHI";
 #:global TelegramChatId "12345678";
+# Use this to send notifications to a specific topic in group.
+:global TelegramThreadId "";
 # Using telegram-chat you have to define trusted chat ids (not group ids!)
 # or user names. Groups allow to chat with devices simultaneously.
 #:global TelegramChatIdsTrusted {
diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index be4a915d..d04893f0 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -68,6 +68,8 @@
   :global TelegramChatIdOverride;
   :global TelegramMessageIDs;
   :global TelegramQueue;
+  :global TelegramThreadId;
+  :global TelegramThreadIdOverride;
   :global TelegramTokenId;
   :global TelegramTokenIdOverride;
 
@@ -108,6 +110,8 @@
 
   :local ChatId [ $EitherOr ($Notification->"chatid") \
     [ $EitherOr ($TelegramChatIdOverride->($Notification->"origin")) $TelegramChatId ] ];
+  :local ThreadId [ $EitherOr ($Notification->"threadid") \
+    [ $EitherOr ($TelegramThreadIdOverride->($Notification->"origin")) $TelegramThreadId ] ];
   :local TokenId [ $EitherOr ($TelegramTokenIdOverride->($Notification->"origin")) $TelegramTokenId ];
 
   :if ([ :len $TokenId ] = 0 || [ :len $ChatId ] = 0) do={
@@ -143,8 +147,8 @@
   }
 
   :local HTTPData ("chat_id=" . $ChatId . "&disable_notification=" . ($Notification->"silent") . \
-      "&reply_to_message_id=" . ($Notification->"replyto") . "&disable_web_page_preview=true" . \
-      "&parse_mode=MarkdownV2");
+      "&reply_to_message_id=" . ($Notification->"replyto") . "&message_thread_id=" . $ThreadId . \
+       "&disable_web_page_preview=true&parse_mode=MarkdownV2");
   :do {
     :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
       $LogPrint warning $0 ("Downloading required certificate failed.");

From 757fa60e6f37cc684abec5582d1b6051f6ef8d6d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Feb 2025 10:46:25 +0100
Subject: [PATCH 523/988] telegram-chat: make $IsReply a boolean...

... and check for correct data type.

We need this for a group with topic feature enabled, as that variable is
set there, but is is an array.
---
 telegram-chat.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 10952a6a..eacbbcb9 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -97,7 +97,7 @@
   :foreach Update in=($JSON->"result") do={
     :set UpdateID ($Update->"update_id");
     :local Message ($Update->"message");
-    :local IsReply [ :len ($Message->"reply_to_message") ];
+    :local IsReply ([ :typeof ($Message->"reply_to_message") ] = "string");
     :local IsMyReply ($TelegramMessageIDs->[ :tostr ($Message->"reply_to_message"->"message_id") ]);
     :if (($IsMyReply = 1 || $TelegramChatOffset->0 > 0 || $Uptime > 5m) && $UpdateID >= $TelegramChatOffset->2) do={
       :local Trusted false;
@@ -130,7 +130,8 @@
             " from update " . $UpdateID . "!");
           :set Done true;
         }
-        :if ($Done = false && ($IsMyReply = 1 || ($IsReply = 0 && $TelegramChatActive = true)) && [ :len $Command ] > 0) do={
+        :if ($Done = false && ($IsMyReply = 1 || ($IsReply = false && \
+             $TelegramChatActive = true)) && [ :len $Command ] > 0) do={
           :if ([ $ValidateSyntax $Command ] = true) do={
             :local State "";
             :local File ("tmpfs/telegram-chat/" . [ $GetRandom20CharAlNum 6 ]);

From 7928c5f0543765e27379e39bbaff6bdb19638971 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 24 Feb 2025 15:31:34 +0100
Subject: [PATCH 524/988] telegram-chat: support reply in group's topic

---
 telegram-chat.rsc | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index eacbbcb9..07e38164 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -104,6 +104,7 @@
       :local Chat ($Message->"chat");
       :local From ($Message->"from");
       :local Command ($Message->"text");
+      :local ThreadId [ $IfThenElse ($Message->"is_topic_message") ($Message->"message_thread_id") "" ];
 
       :foreach IdsTrusted in=($TelegramChatId, $TelegramChatIdsTrusted) do={
         :if ($From->"id" = $IdsTrusted || $From->"username" = $IdsTrusted) do={
@@ -115,7 +116,8 @@
         :local Done false;
         :if ($Command = "?") do={
           $LogPrint info $ScriptName ("Sending notice for update " . $UpdateID . ".");
-          $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; replyto=($Message->"message_id"); \
+          $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; \
+            replyto=($Message->"message_id"); threadid=$ThreadId; \
             subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
             message=("Online" . [ $IfThenElse $TelegramChatActive " (and active!)" ] . ", awaiting your commands!") });
           :set Done true;
@@ -150,7 +152,8 @@
               :set State ([ $SymbolForNotification "cross-mark" ] . "The command failed with an error!\n\n");
             }
             :local Content ([ /file/read chunk-size=32768 file=$File as-value ]->"data");
-            $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; replyto=($Message->"message_id"); \
+            $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; \
+              replyto=($Message->"message_id"); threadid=$ThreadId; \
               subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
               message=([ $SymbolForNotification "gear" ] . "Command:\n" . $Command . "\n\n" . \
                 $State . [ $IfThenElse ([ :len $Content ] > 0) \
@@ -159,7 +162,8 @@
             $RmDir "tmpfs/telegram-chat";
           } else={
             $LogPrint info $ScriptName ("The command from update " . $UpdateID . " failed syntax validation!");
-            $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; replyto=($Message->"message_id"); \
+            $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; \
+              replyto=($Message->"message_id"); threadid=$ThreadId; \
               subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
               message=([ $SymbolForNotification "gear" ] . "Command:\n" . $Command . "\n\n" . \
                 [ $SymbolForNotification "cross-mark" ] . "The command failed syntax validation!") });
@@ -171,7 +175,8 @@
           " (ID " . $From->"id" . ") in update " . $UpdateID . "!");
         :if ($Command ~ ("^! *" . [ $EscapeForRegEx $Identity ] . "\$")) do={
           $LogPrint warning $ScriptName $MessageText;
-          $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; replyto=($Message->"message_id"); \
+          $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=false; \
+            replyto=($Message->"message_id"); threadid=$ThreadId; \
             subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
             message=("You are not trusted.") });
         } else={

From e5de9de391283f64763ad16446fa2f6727191306 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Feb 2025 12:19:49 +0100
Subject: [PATCH 525/988] notify on support for Telegram group topics

---
 global-functions.rsc | 2 +-
 news-and-changes.rsc | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 99e52f80..42782bc4 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -15,7 +15,7 @@
 # Git commit id & info, expected configuration version
 :global CommitId "unknown";
 :global CommitInfo "unknown";
-:global ExpectedConfigVersion 133;
+:global ExpectedConfigVersion 134;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 6f9e96ed..a735ff77 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -58,6 +58,7 @@
   131="Enhanced certificate download to fallback to mkcert.org, so all (commonly trusted) root certificates are available now.";
   132="Split off plugins from 'check-health', so the script works on all devices to monitor CPU and RAM. The supported plugins for sensors in hardware are installed automatically.";
   133="Updated the default configuration for 'fw-addr-lists', deprecated lists were removed, a collective list was added.";
+  134="Enhanced 'mod/notification-telegram' and 'telegram-chat' to support topics in groups.";
 };
 
 # Migration steps to be applied on script updates

From c33eb41c9cfb73e7e5b5ec7a3c37aa9e92ebc9cb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 18 Dec 2024 17:50:56 +0100
Subject: [PATCH 526/988] global-functions: $DeviceInfo: add license level,
 re-order

---
 global-functions.rsc | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 42782bc4..b3166dc0 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -309,16 +309,19 @@
       ([ $FormatLine "Location" ($Snmp->"location") ] . "\n") ] . \
     [ $IfThenElse ([ :len ($Snmp->"contact") ] > 0) \
       ([ $FormatLine "Contact" ($Snmp->"contact") ] . "\n") ] . \
-    [ $FormatLine "Board name" ($Resource->"board-name") ] . "\n" . \
-    [ $FormatLine "Architecture" ($Resource->"architecture-name") ] . "\n" . \
+    "Hardware:\n" . \
+    [ $FormatLine "    Board" ($Resource->"board-name") ] . "\n" . \
+    [ $FormatLine "    Arch" ($Resource->"architecture-name") ] . "\n" . \
     [ $IfThenElse ($RouterBoard->"routerboard" = true) \
-      ([ $FormatLine "Model" ($RouterBoard->"model") ] . \
+      ([ $FormatLine "    Model" ($RouterBoard->"model") ] . \
        [ $IfThenElse ([ :len ($RouterBoard->"revision") ] > 0) \
            (" " . $RouterBoard->"revision") ] . "\n" . \
-       [ $FormatLine "Serial number" ($RouterBoard->"serial-number") ] . "\n") ] . \
-    [ $IfThenElse ([ :len ($License->"level") ] > 0) \
-      ([ $FormatLine "License" ($License->"level") ] . "\n") ] . \
+       [ $FormatLine "    Serial" ($RouterBoard->"serial-number") ] . "\n") ] . \
+    [ $IfThenElse ([ :len ($License->"nlevel") ] > 0) \
+      ([ $FormatLine "    License" ("level " . ($License->"nlevel")) ] . "\n") ] . \
     "RouterOS:\n" . \
+    [ $IfThenElse ([ :len ($License->"level") ] > 0) \
+      ([ $FormatLine "    License" ("level " . ($License->"level")) ] . "\n") ] . \
     [ $FormatLine "    Channel" ($Update->"channel") ] . "\n" . \
     [ $FormatLine "    Installed" ($Update->"installed-version") ] . "\n" . \
     [ $IfThenElse ([ :typeof ($Update->"latest-version") ] != "nothing" && \

From 4eafcaa3ace2be0f17618c90c0d320647dfd8e38 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Feb 2025 21:26:52 +0100
Subject: [PATCH 527/988] telegram-chat: say hello when awaiting commands

---
 telegram-chat.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 07e38164..5db4860f 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -119,7 +119,8 @@
           $SendTelegram2 ({ origin=$ScriptName; chatid=($Chat->"id"); silent=true; \
             replyto=($Message->"message_id"); threadid=$ThreadId; \
             subject=([ $SymbolForNotification "speech-balloon" ] . "Telegram Chat"); \
-            message=("Online" . [ $IfThenElse $TelegramChatActive " (and active!)" ] . ", awaiting your commands!") });
+            message=([ $IfThenElse ([ :len ($From->"first_name") ] > 0) ("Hello " . ($From->"first_name") . "!\n\n") ] . \
+              "Online" . [ $IfThenElse $TelegramChatActive " (and active!)" ] . ", awaiting your commands!") });
           :set Done true;
         }
         :if ($Done = false && [ :pick $Command 0 1 ] = "!") do={

From 53b13b295af835658dc4ef6192624b2ae898bab1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Feb 2025 21:33:08 +0100
Subject: [PATCH 528/988] mod/notification-telegram: introduce
 $GetTelegramChatId

---
 .../notification-telegram.d/getchatid.avif    | Bin 0 -> 3896 bytes
 doc/mod/notification-telegram.md              |  24 ++++++++-----
 global-functions.rsc                          |   2 +-
 mod/notification-telegram.rsc                 |  34 ++++++++++++++++++
 news-and-changes.rsc                          |   1 +
 5 files changed, 52 insertions(+), 9 deletions(-)
 create mode 100644 doc/mod/notification-telegram.d/getchatid.avif

diff --git a/doc/mod/notification-telegram.d/getchatid.avif b/doc/mod/notification-telegram.d/getchatid.avif
new file mode 100644
index 0000000000000000000000000000000000000000..779296915de91a9b21e2f05685e34a1539d9c73e
GIT binary patch
literal 3896
zcmbVJc|4Tw7Jp|9Gh>OdZ)4v{hOzJKWG|7Wg+Um*Axp}deNQA*iVO)U43+F6AqrWt
z6pds=B~;9v(eHQf{oKFqz32U$=X}rdoO8a<3jlzKS6EaqHXP>#P=#g#a9*eY9M;R)
z5M>AeAccT)VOUy@DxyA~{`fx-0D^HIVSnSl?V(^?Sipe;qMiyk{~!;VX956VfEJ-D
z>;(WY1XBG24`dGj&~Pd?#Nh%DRyfG;Q=N0P650)HxDv`Z$Uo>{GT%Ql)U;_N&WonB
zLVg_n+@A&jaLB_m)Z<_zZKy9U7#~cvmbhS#AgblWg$AFaTB^`VP!BX!*@AJAxPu4`
z2BTVLY&gm|UW66_I6Q*<@qr%xk<?{a0ERefhzA!OfTiWA0s=q~5I7M604!?(p4fvo
zF*lb3Xl<ygP!$gB0}vXM1ErS#WvTvOn2nkPgXjP{s*R&69Tn5+8EE=%nCmZ0s{?`m
z^hu^-@Lzb1c7ZCegOBo-vH-AIn3<bV2OTU50F)WP7=SS_KpE&^P$(1*hcPm9vM@6-
zG4ru=uyP{#g@us(f`TFviqaxt3gUu-GU~DlN+>iMEiA36tD&r;sDf6eH37llaAqcE
zUKSQ!Wl=#<<^NeI9RLCbuz{###Q-n@M27%TdH`YSp7fvt`9p<9lnz4A0ENLBnWzO#
zY_yl614HQO=^@ld2VJ7(0SJPgT@+==z;PT46${~1j?cRd6E|w;<gy#xkWg{QC%_rG
zd3gEwC8eZgWaZGRYU&!ATE-@(W|*Vq7ANc-PC7a{yLfn>^YZq=`G$s_508k9x{!D|
zDLExIE&WRV)q=unMc0e(lvmuXBve)3d-$lashQZ)`napRr?>BU|G<l}*KfurCf`m?
zFTVe<wEU5@@@aMR>$mS)Kel&vf6{o-c>XPanEeMY1eF&U0-=LIX}mz-2pVw&gkBWI
zz;1XPiVfiqQ;vsm8s*(?=!A=_*llpR<3|~}CD4nKn>1<%%>FxK3I7+fe-ir_uW5jp
z4n+NVbO=Bn_&S*Y{&BaF0e3OOpVM>d<x%{Mjq-2e(8#cgO+$0D){VzUk}LCKMtctZ
z&cC`qB2MNM*Ut<r2CY>|wQdGhlWObE4x{~dGl1#%7j7&IBA?^hq9@EAMf(v}&82eQ
zTMn5iEnHXAIh+X&b~@kx{d+BE!Tk`6B+QBHy1K5vmB@i}ToZvh^Q>)EyC}|p4*d-d
zB6Mc%o+*EpCFVpWxKe6w*j^z1;|uNWeW9pbGi`@Gi!<C#ib01jVlD>mI;4Ag;{fTP
zp(X=}N8)R}x0NnZm*+hTgV;}ZhjRMP^eA4u6XRvtwZ%L%9I`v9<Nl_^+eB1SYJSxl
z=W=+WQtE5iH(5uK95m(;67#aVl`C`~k>&24>atSLoW8#Ds9?|^c66Fl8h92pY@;%y
zCQ!nn?tJQ!zRP24)!Qr*D~!aFWfJd9X%Jn*2f^)H=r}o+Sj5WZ8{i|V%+!7>q$rM6
zAT)t9#<+OpGMR^u%g*6S2*FS9v+Iuga&Lu-a8r9?Ao#S3d}<so*g+0l|Fb>Mf&`T2
z_e)i@jG^lrT_oERws^EJ4pt>vwwiS}f^D~x&HGRtx}ODpMUlUd%k@N`wLHXapN2#T
zf)AM)NVogW-*S4T-=r9X-3-6azmO=Jsm##_qW~u_u$09<Sx24T+`k`u$%Tm7>9@?%
z8)I@z)~A0t@vtBGy6jxxXmiH0THz_z2k~~KuXe4r<<r(DJ~{$gdY>E$g21Vzz|w*m
z07@Z>uv!ei+1e2s8^q0tk4rxBI{9_(<TM;;)fXWJ^J<dGBU;Zy#$V|TnJq^o2(Sy`
z0nMLD!UclV*-T8%ezAS7AJ0rQ1*m;gJ;fsHzs|jCe&fXvky`~JnE->vr`_?Lr`F|{
zZccfR9-i|=z>7}x(UJRXt(HFImkQpL&yT<%Z)7`X+j36#K6%nMV#IbVM<HBWAeJLC
z9I1LZCq+!LTwv<>O!dI58Q$>A>&!4h@B4OElQ`)lay+c&+r5EO<_Mvdfz_yy+K{kg
z$0uiYN(_>tt6jTuHLvF;$=p3ABOVvYry&98Y7*vma=LzA-YDEyNamDyc#53azWyV#
zpmXt=?+2f<LzQPDx*yd%mx`-l`}*`YA7h6cFojJp*UpZ)J}kGUC$do`8+HCRMq%gZ
zOGK4JS93%zaJm`L5Gudj8-hLt#Zmw`PclQHLP~Pyl9y3;6raRz3J`f7`3p3bwl%`|
zAloU7r7r!!uGJJhD%m}{f&PK5NUk9-*Yi;WWa_3(g59Nk0U}NU#%;*2ICjW}lli>#
zs?s3?0x|8WQm4C+phNr#pRURcLkRNiz)EN-NoTWkGwc}Dw#x5<BEhHdgGIuahq^kd
zi)S#Cq%VhP$=3RTls6*v#Bk&vFEn0Uln_%(S4wZlb_`r&_9T5A7=UbMIwDMga7?cY
zTf74r28n-LsJ6*wUjyiUaknS!-3oQ$Pa<Fa)?XN2$)v-<i77m}?Z33O^;=#!-C7Dg
z%_wuHC?Q>@3`|v4$`m`m2-lFr>%28EHmp#dW47vt%qCV!IBpld4P5zj?9LSgy26=0
zwfuWHkj}#bbF>i`UdyvmQ>7!4_xwu&ndRjw<n+Yd&Q%GGHq_@Uas2q*pb#^$R6XRF
zP~WxTc;v;0%r^XlF~e@@<oB_u6Br#?m>9I|S#F??lUeJs5amf-fKhk79bu_c%v@a|
zBXqj&RoYf*C~>RX-l|#IT+Hz-*{x*jhq!q%ET5fGQwljGE2wj7o`fsq=Sdr3(G6jb
zw_10cbCXUdrB_DI2Kwua&(~%rXa>I1_$+HC;0N!;bHL}lw1hfuW{dpr3U)f=1}m?z
zM`dv(<<!wf53YM-I|Ynt)Y?+_WmKxJ>~>VZQ>;w0bILAW+MAfgTKW-H5iB=k1}ap|
z^VGez7o{5}CG4@R`cCui<E?7~4RSIPgdEoCdz#%fHtu0jb8<dqId<GnhWshTj?<NC
zJ+<nkk+IE$a2VO=a2z}QB7U54#cV_GO5Qg@J;=aH?X{^=(h;lD={Gh5`Z)_w^qgne
z@T9ZdJx$a6bV<=IHZwFtD*JRhW9@3U+=Vtj_WmO(@x>7WiQ+SJg`k^tJONRbg%5Y%
z&gbgI6&RR*{LN@CwY`XXJy6%}t;{&6*x$00l<b|Qdd6o%C1q>wlh48|W^F~k&M*4e
zWly<$X|D0fFY?kAukRc#`#$qnEmOORBGU4F;b##bhSol9pYZ&qI#~3|t&4^glOZ;4
zk8I=VBA371=+WLT@SMH&WT(9Dm)9;7Wn&TmxJ`|&QkLEYl{hO}g-iDT%#REa9JbEu
zvVGZIn-O_VJ^I~3a8?#2g_Km2+plMH_0zKM*NRl$)Kot?t`pby8&ABc5%ELlm0s=?
z>ceV|3R~9NONUW1YcXbeGdGb#x3(6K^{F$HW93g9l-tGKjXK$Q=KZF9^m^R$_dCg_
z=$D=~HKt0<BWLe(!q>&DUZ>c%@c?$7N^aeW&FFW%LS^^+XC8chk%n4)B^ssgQ1aTK
z+WP31k`CJ`t2KkM+^~w!r=8jc+62{hwKc~3V=wt8?1FvwQ5c^LF}dw|hLE8x-r7Qb
zC&LmXmqu*V2kRR#;0aej2Ml>~WAw^OP)dYzorsvzv@uV`Ob7fosHLWda7I?JGo0-n
zM?+%0`g`qL?u+|N-BXA4mDsw9e(0X6!&@L(n%ZJV>YprKG3EBtlpJ_A>c$rqJli~M
zPikvKkF?%AFC6C+2&reB(J0fO8Vu8Sn6ugy>NRx*pKqlMjuw``G}`Sw+h@{T$b(s`
zuuMM^;?|e#mcevK8yo*g?`YFkffRgJjB(F(rMTKN<vtCZVJG!;SfZEKS?@Xg8mJLy
zM7v+txrfMXKEJ#n<=%ft%-iL&zz>Ur6FBMIY98J)-+SHLgd)8~6Xo{UO}5R1XmToG
zCnSAix+m}UePrg@%S?)PPV!eF7>~zkEv0RQtB%|kkDnLSx_owZc<v=9@wB04N?|c3
za;GxvE>xz^5uDy1vp@V|&!>XuY$1kV_Pgs#xK<1uu|k3fL?1rsf}dTZkB73xjO3Lq
zH<$tjuhlL{gL|s6LM0i$4D|=xcGg8$gLEw=PnjQQ9XQS}9cBOB&nF%!^3+^a%lq9L
zO8VLjg%&{$BB8DVHugB<FzCT67ZV%||H1S)r@TYecy&LkL07Rvr|HfGl5RT;ZYt^V
zSk6UTGEK%j;Qerhu*Xx@iKt2J@a>r8y?7F$6>P^xE+>@0pd{tUlw9i;)UoigknML3
z@%b$`NsVc1&H!`nD@6u=OU=e-)+RNp$ahbHcfa2A3%u}V@J8em?FHEKZ}d9KMw=kF
zTffMRtn9OciH?ealxRXhhb4u6_h!BMF1|l@%4aORqSKXk4pjGCy+mKajpN2cdRq-&
z2Xf==8mW4hL8_kb4oisQj>>9`R}g40xa%QWd->9)N>7ujKW1;Z=g#13CY3jlgYgW}
z!A>kvbsgQ8vMh)(*YROFG5lO=+}+xF8B00bk())D0w1O2<VRl4T(y3;OVs`}X+6u^
zw2)-;?dR^m9Se)C#p#jGt;!=m8GJ8Ouv+O}w=;}Zm$&@&>1?kh+)7SM!D_jNJpWP?
zr2s$c>Qa4*;GmM*kqhsx>`HuqkME<nh@NxZbG@Karg-c3r|+RV#lqz30H0!qFFX^~
Js%CHF{sGTkXJh~X

literal 0
HcmV?d00001

diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index 80437168..2d00116a 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -38,14 +38,21 @@ create your own bot:
 
 ![create new bot](notification-telegram.d/newbot.avif)
 
-Now open a chat with your bot and start it by clicking the `START` button.
+Set that token from *BotFather* (use your own!) to `TelegramTokenId`, for
+now just temporarily:
 
-Open just another chat with [GetIDs Bot](https://t.me/getidsbot), again start
-with the `START` button. It will send you some information, including the
-`id`, just below `You`.
+    :set TelegramTokenId "5214364459:AAHLwf1o7ybbKDo6pY24Kd2bZ5rjCakDXTc";
+
+Now open a chat with your bot and start it by clicking the `START` button,
+then send your first message. Any text will do. On your device run
+`$GetTelegramChatId` to retrieve the chat id:
+
+    $GetTelegramChatId;
+
+![get chat id](notification-telegram.d/getchatid.avif)
 
 Finally edit `global-config-overlay`, add `TelegramTokenId` with the token
-from *BotFather* and `TelegramChatId` with your id from *GetIDs Bot*. Then
+from *BotFather* and `TelegramChatId` with your retrieved chat id. Then
 reload the configuration.
 
 > ℹ️ **Info**: Copy relevant configuration from
@@ -54,9 +61,10 @@ reload the configuration.
 
 ### Notifications to a group
 
-Sending notifications to a group is possible as well. Add your bot and the
-*GetIDs Bot* to a group, then use the group's id (which starts with a dash)
-for `TelegramChatId`. Then remove *GetIDs Bot* from group.
+Sending notifications to a group is possible as well. Add your bot to a group
+and make it an admin (required for read access!) and send a message and run
+`$GetTelegramChatId` again. Then use that chat id (which starts with a dash)
+for `TelegramChatId`.
 
 Groups can enable the `Topics` feature. Use `TelegramThreadId` to send to a
 specific topic in a group.
diff --git a/global-functions.rsc b/global-functions.rsc
index b3166dc0..43cd7f05 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -15,7 +15,7 @@
 # Git commit id & info, expected configuration version
 :global CommitId "unknown";
 :global CommitInfo "unknown";
-:global ExpectedConfigVersion 134;
+:global ExpectedConfigVersion 135;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index d04893f0..7782fcfd 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -10,6 +10,7 @@
 # https://rsc.eworm.de/doc/mod/notification-telegram.md
 
 :global FlushTelegramQueue;
+:global GetTelegramChatId;
 :global NotificationFunctions;
 :global PurgeTelegramQueue;
 :global SendTelegram;
@@ -58,6 +59,39 @@
   :global ExitError; $ExitError false $0;
 } }
 
+# get the chat id
+:set GetTelegramChatId do={ :do {
+  :global TelegramTokenId;
+
+  :global CertificateAvailable;
+  :global LogPrint;
+
+  :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
+    $LogPrint warning $0 ("Downloading required certificate failed.");
+    :return false;
+  }
+
+  :local Data;
+  :do {
+    :set Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
+       ("https://api.telegram.org/bot" . $TelegramTokenId . "/getUpdates?offset=0" . \
+       "&allowed_updates=%5B%22message%22%5D") as-value ]->"data");
+  } on-error={
+    $LogPrint warning $0 ("Fetching data failed!");
+    :return false;
+  }
+
+  :local JSON [ :deserialize from=json value=$Data ];
+  :foreach Update in=($JSON->"result") do={
+    $LogPrint info $0 ("The chat id is: " . ($Update->"message"->"chat"->"id"));
+    :return true;
+  }
+
+  $LogPrint info $0 ("No message received.");
+} on-error={ 
+  :global ExitError; $ExitError false $0;
+} } 
+
 # send notification via telegram - expects one array argument
 :set ($NotificationFunctions->"telegram") do={
   :local Notification $1;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index a735ff77..459326f3 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -59,6 +59,7 @@
   132="Split off plugins from 'check-health', so the script works on all devices to monitor CPU and RAM. The supported plugins for sensors in hardware are installed automatically.";
   133="Updated the default configuration for 'fw-addr-lists', deprecated lists were removed, a collective list was added.";
   134="Enhanced 'mod/notification-telegram' and 'telegram-chat' to support topics in groups.";
+  135="Introduced helper function '\$GetTelegramChatId' for 'mod/notification-telegram' which helps retrieve information.";
 };
 
 # Migration steps to be applied on script updates

From f6c2225f68fae8494d620dca0fc41b50a0450977 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 26 Feb 2025 13:37:57 +0100
Subject: [PATCH 529/988] check-certificates: catch and ignore import error
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Hmm... 🤨 When was that runtime error introduced? I *think* it
worked before.
---
 check-certificates.rsc | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 09073953..94f23a79 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -59,10 +59,12 @@
 
         :local DecryptionFailed true;
         :foreach PassPhrase in=$CertRenewPass do={
-          :local Result [ /certificate/import file-name=$CertFileName passphrase=$PassPhrase as-value ];
-          :if ($Result->"decryption-failures" = 0) do={
-            :set DecryptionFailed false;
-          }
+          :do {
+            :local Result [ /certificate/import file-name=$CertFileName passphrase=$PassPhrase as-value ];
+            :if ($Result->"decryption-failures" = 0) do={
+              :set DecryptionFailed false;
+            }
+          } on-error={ }
         }
         $RmFile $CertFileName;
 

From a6d4e7e82cc9870c6cfd1e0ee9724eb6129ce5ab Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 26 Feb 2025 18:03:17 +0100
Subject: [PATCH 530/988] check-certificates: drop dot from type...

... and add it in file name.
---
 check-certificates.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 94f23a79..20ac2e2c 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -50,8 +50,8 @@
 
     :local Return false;
 
-    :foreach Type in={ ".pem"; ".p12" } do={
-      :local CertFileName ([ $UrlEncode $FetchName ] . $Type);
+    :foreach Type in={ "pem"; "p12" } do={
+      :local CertFileName ([ $UrlEncode $FetchName ] . "." . $Type);
       :do {
         /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) \
             ($CertRenewUrl . $CertFileName) dst-path=$CertFileName as-value;

From 3d40b4419d47f41edf5059c00c1ab575f49c6da1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 26 Feb 2025 13:40:12 +0100
Subject: [PATCH 531/988] check-certificates: add more debug output

---
 check-certificates.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 20ac2e2c..68620156 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -58,10 +58,12 @@
         $WaitForFile $CertFileName;
 
         :local DecryptionFailed true;
-        :foreach PassPhrase in=$CertRenewPass do={
+        :foreach I,PassPhrase in=$CertRenewPass do={
           :do {
+            $LogPrint debug $ScriptName ("Trying " . $I . ". passphrase... ");
             :local Result [ /certificate/import file-name=$CertFileName passphrase=$PassPhrase as-value ];
             :if ($Result->"decryption-failures" = 0) do={
+              $LogPrint debug $ScriptName ("Success!");
               :set DecryptionFailed false;
             }
           } on-error={ }

From 512c54bd590503af27e754c5c65c34b5307cf9c9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 26 Feb 2025 13:55:09 +0100
Subject: [PATCH 532/988] check-certificates: ... and even more

---
 check-certificates.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 68620156..6dff9bac 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -52,6 +52,9 @@
 
     :foreach Type in={ "pem"; "p12" } do={
       :local CertFileName ([ $UrlEncode $FetchName ] . "." . $Type);
+      $LogPrint debug $ScriptName ("Trying type '" . $Type . "' for '" . $CertName . \
+          "' (file '" . $CertFileName . "')...");
+
       :do {
         /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) \
             ($CertRenewUrl . $CertFileName) dst-path=$CertFileName as-value;

From e833dfcf25175fb1d5c652dcf898c6332ce70404 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 26 Feb 2025 13:51:25 +0100
Subject: [PATCH 533/988] check-certificates: simplify return from function...

... and also break earch on success.
---
 check-certificates.rsc | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 6dff9bac..5065c33d 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -48,8 +48,6 @@
     :global UrlEncode;
     :global WaitForFile;
 
-    :local Return false;
-
     :foreach Type in={ "pem"; "p12" } do={
       :local CertFileName ([ $UrlEncode $FetchName ] . "." . $Type);
       $LogPrint debug $ScriptName ("Trying type '" . $Type . "' for '" . $CertName . \
@@ -84,13 +82,13 @@
           $CertificateNameByCN [ /certificate/get $CertInChain common-name ];
         }
 
-        :set Return true;
+        :return true;
       } on-error={
         $LogPrint debug $ScriptName ("Could not download certificate file '" . $CertFileName . "'.");
       }
     }
 
-    :return $Return;
+    :return false;
   }
 
   :local FormatInfo do={

From 14195c51ca381063789ca58c760d70037328e600 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 26 Feb 2025 18:25:58 +0100
Subject: [PATCH 534/988] check-certificates: try PKCS#12 before PEM...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

... as that is more likely to have a private key.

Is that true? 🤨
---
 check-certificates.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 5065c33d..be8e4dff 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -48,7 +48,7 @@
     :global UrlEncode;
     :global WaitForFile;
 
-    :foreach Type in={ "pem"; "p12" } do={
+    :foreach Type in={ "p12"; "pem" } do={
       :local CertFileName ([ $UrlEncode $FetchName ] . "." . $Type);
       $LogPrint debug $ScriptName ("Trying type '" . $Type . "' for '" . $CertName . \
           "' (file '" . $CertFileName . "')...");

From b11be59b0824efac6df128fde46a529ced14a2d0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 27 Feb 2025 10:44:53 +0100
Subject: [PATCH 535/988] README: quote the certificate file name

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index a76d50f7..fae69869 100644
--- a/README.md
+++ b/README.md
@@ -87,7 +87,7 @@ file to your MikroTik device.
 
 Then we import the certificate.
 
-    /certificate/import file-name=isrg-root-x2.pem passphrase="";
+    /certificate/import file-name="isrg-root-x2.pem" passphrase="";
 
 Do not worry that the command is not shown - that happens because it contains
 a sensitive property, the passphrase.

From e2fe653035ca2217dc56235de780f72dbb790e1d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 26 Feb 2025 20:16:12 +0100
Subject: [PATCH 536/988] mod/notification-telegram: $GetTelegramChatId: use
 last message

---
 mod/notification-telegram.rsc | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 7782fcfd..45286154 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -82,12 +82,15 @@
   }
 
   :local JSON [ :deserialize from=json value=$Data ];
-  :foreach Update in=($JSON->"result") do={
-    $LogPrint info $0 ("The chat id is: " . ($Update->"message"->"chat"->"id"));
-    :return true;
+  :local Count [ :len ($JSON->"result") ];
+
+  :if ($Count = 0) do={
+    $LogPrint info $0 ("No message received.");
+    :return false;
   }
 
-  $LogPrint info $0 ("No message received.");
+  :local Message ($JSON->"result"->($Count - 1)->"message");
+  $LogPrint info $0 ("The chat id is: " . ($Message->"chat"->"id"));
 } on-error={ 
   :global ExitError; $ExitError false $0;
 } } 

From f5189b8bd7ca01fb6e26414960764960a03066c4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 27 Feb 2025 10:45:30 +0100
Subject: [PATCH 537/988] INITIAL-COMMANDS: quote the certificate file name

---
 INITIAL-COMMANDS.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 424ef329..8b64d281 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -19,7 +19,7 @@ Run the complete base installation:
     {
       /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/ISRG-Root-X2.pem" dst-path="isrg-root-x2.pem" as-value;
       :delay 1s;
-      /certificate/import file-name=isrg-root-x2.pem passphrase="";
+      /certificate/import file-name="isrg-root-x2.pem" passphrase="";
       :if ([ :len [ /certificate/find where fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470" ] ] != 1) do={
         :error "Something is wrong with your certificates!";
       };

From 0c4fb42616f8015dd128ec7df1d1afce590d26ed Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 26 Feb 2025 20:18:12 +0100
Subject: [PATCH 538/988] mod/notification-telegram: $GetTelegramChatId: give
 thead id...

... if message was sent to group's topic.
---
 mod/notification-telegram.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 45286154..68e913f6 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -91,6 +91,9 @@
 
   :local Message ($JSON->"result"->($Count - 1)->"message");
   $LogPrint info $0 ("The chat id is: " . ($Message->"chat"->"id"));
+  :if (($Message->"is_topic_message") = true) do={
+    $LogPrint info $0 ("The thread id is: " . ($Message->"message_thread_id"));
+  }
 } on-error={ 
   :global ExitError; $ExitError false $0;
 } } 

From 33c02e06092eded4b3344a6eb22742c9be531fb2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 3 Mar 2025 09:10:54 +0100
Subject: [PATCH 539/988] ipv6-update: ignore if prefix is no longer valid

---
 ipv6-update.rsc | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index c6e3d653..beccde09 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -20,7 +20,9 @@
   :global ScriptLock;
 
   :local NaAddress $"na-address";
+  :local NaValid $"na-valid";
   :local PdPrefix $"pd-prefix";
+  :local PdValid $"pd-valid";
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
     :set ExitOK true;
@@ -39,6 +41,12 @@
     :error false;
   }
 
+  :if ($PdValid != 1) do={
+    $LogPrint info $ScriptName ("The prefix " . $PdPrefix . " is no longer valid. Ignoring.");
+    :set ExitOK true;
+    :error false;
+  }
+
   :local Pool [ /ipv6/pool/get [ find where prefix=$PdPrefix ] name ];
   :if ([ :len [ /ipv6/firewall/address-list/find where comment=("ipv6-pool-" . $Pool) ] ] = 0) do={
     /ipv6/firewall/address-list/add list=("ipv6-pool-" . $Pool) address=:: comment=("ipv6-pool-" . $Pool) dynamic=yes;

From 469f783a92c8e67088d70572157ff4cd7d47fcd8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 3 Mar 2025 09:12:43 +0100
Subject: [PATCH 540/988] ipv6-update: check for availability of both variables

---
 ipv6-update.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index beccde09..94bd1bc4 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -35,7 +35,7 @@
     :error false;
   }
 
-  :if ([ :typeof $PdPrefix ] = "nothing") do={
+  :if ([ :typeof $PdPrefix ] = "nothing" || [ :typeof $PdValid ] = "nothing") do={
     $LogPrint error $ScriptName ("This script is supposed to run from ipv6 dhcp-client.");
     :set ExitOK true;
     :error false;

From 3ccaafd1b38f4335aa28361778aa37db2ca22d5f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Mar 2025 00:28:01 +0100
Subject: [PATCH 541/988] global-functions: $ScriptInstallUpdate: move code
 into block

---
 global-functions.rsc | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 43cd7f05..8fcd56d1 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1163,7 +1163,12 @@
       }
     }
 
-    :if (!($ScriptInfo->"ignore" = true)) do={
+    :do {
+      :if ($ScriptInfo->"ignore" = true) do={
+        $LogPrint debug $0 ("Ignoring script '" . $ScriptVal->"name" . "', as requested.");
+        :error true;
+      }
+
       :do {
         :local BaseUrl [ $EitherOr ($ScriptInfo->"base-url") $ScriptUpdatesBaseUrl ];
         :local UrlSuffix [ $EitherOr ($ScriptInfo->"url-suffix") $ScriptUpdatesUrlSuffix ];
@@ -1182,10 +1187,9 @@
         } else={
           $LogPrint warning $0 ("Failed fetching script '" . $ScriptVal->"name" . "'!");
         }
+        :error false;
       }
-    }
 
-    :do {
       :if ([ :len $SourceNew ] = 0) do={
         $LogPrint debug $0 ("No update for script '" . $ScriptVal->"name" . "'.");
         :error false;

From 0c1d96f89dfb4d209b0848d5ac2d81a640e0f056 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Mar 2025 00:18:43 +0100
Subject: [PATCH 542/988] global-functions: $ScriptInstallUpdate: get and
 compare checksums
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The file 'checksums.json' is generated when deploying to my web
server... This should speed up the update a lot as it reduces downloads
to a minimum. 🎉😁
---
 global-functions.rsc | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 8fcd56d1..8405c92b 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1150,6 +1150,14 @@
   :local ReloadGlobalConfig false;
   :local DeviceMode [ /system/device-mode/get ];
 
+  :local CheckSums ({});
+  :do {
+    :local Url ($ScriptUpdatesBaseUrl . "checksums.json" . $ScriptUpdatesUrlSuffix);
+    $LogPrint debug $0 ("Fetching checksums from url: " . $Url);
+    :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certificate=yes-without-crl \
+      http-header-field=({ [ $FetchUserAgentStr $0 ] }) $Url output=user as-value ]->"data") ];
+  } on-error={ }
+
   :foreach Script in=[ /system/script/find where source~"^#!rsc by RouterOS\r?\n" ] do={
     :local ScriptVal [ /system/script/get $Script ];
     :local ScriptInfo [ $ParseKeyValueStore ($ScriptVal->"comment") ];
@@ -1169,6 +1177,11 @@
         :error true;
       }
 
+      :if ([ :convert transform=md5 to=hex ($ScriptVal->"source") ] = ($CheckSums->($ScriptVal->"name"))) do={
+        $LogPrint debug $0 ("Checksum for script '" . $ScriptVal->"name" . "' matches, ignoring.");
+        :error true;
+      }
+
       :do {
         :local BaseUrl [ $EitherOr ($ScriptInfo->"base-url") $ScriptUpdatesBaseUrl ];
         :local UrlSuffix [ $EitherOr ($ScriptInfo->"url-suffix") $ScriptUpdatesUrlSuffix ];

From 10374afc182cd8b08e07a3d45890518e8b6be73c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Mar 2025 01:37:42 +0100
Subject: [PATCH 543/988] global-functions: $ScriptInstallUpdate: support
 checksums for CRLF scripts

---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 8405c92b..d883aa0a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1177,7 +1177,8 @@
         :error true;
       }
 
-      :if ([ :convert transform=md5 to=hex ($ScriptVal->"source") ] = ($CheckSums->($ScriptVal->"name"))) do={
+      :if ([ :convert transform=md5 to=hex ($ScriptVal->"source") ] = ($CheckSums->($ScriptVal->"name")) || \
+           [ :convert transform=md5 to=hex [ :tolf ($ScriptVal->"source") ] ] = ($CheckSums->($ScriptVal->"name"))) do={
         $LogPrint debug $0 ("Checksum for script '" . $ScriptVal->"name" . "' matches, ignoring.");
         :error true;
       }

From c9de6d85790897a945910316a14db16b0435c41e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Mar 2025 01:39:59 +0100
Subject: [PATCH 544/988] global-functions: $ScriptInstallUpdate: put checksum
 into variable

---
 global-functions.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index d883aa0a..a9fa938c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1177,8 +1177,9 @@
         :error true;
       }
 
-      :if ([ :convert transform=md5 to=hex ($ScriptVal->"source") ] = ($CheckSums->($ScriptVal->"name")) || \
-           [ :convert transform=md5 to=hex [ :tolf ($ScriptVal->"source") ] ] = ($CheckSums->($ScriptVal->"name"))) do={
+      :local CheckSum ($CheckSums->($ScriptVal->"name"));
+      :if ([ :convert transform=md5 to=hex ($ScriptVal->"source") ] = $CheckSum || \
+           [ :convert transform=md5 to=hex [ :tolf ($ScriptVal->"source") ] ] = $CheckSum) do={
         $LogPrint debug $0 ("Checksum for script '" . $ScriptVal->"name" . "' matches, ignoring.");
         :error true;
       }

From b13360e4b86838d95cd8c9a1a4e2ea8d757dbb0f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Mar 2025 01:53:04 +0100
Subject: [PATCH 545/988] global-functions: $ScriptInstallUpdate: simplify
 check

This one should suffice...
---
 global-functions.rsc | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index a9fa938c..4c777a17 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1178,8 +1178,7 @@
       }
 
       :local CheckSum ($CheckSums->($ScriptVal->"name"));
-      :if ([ :convert transform=md5 to=hex ($ScriptVal->"source") ] = $CheckSum || \
-           [ :convert transform=md5 to=hex [ :tolf ($ScriptVal->"source") ] ] = $CheckSum) do={
+      :if ([ :convert transform=md5 to=hex [ :tolf ($ScriptVal->"source") ] ] = $CheckSum) do={
         $LogPrint debug $0 ("Checksum for script '" . $ScriptVal->"name" . "' matches, ignoring.");
         :error true;
       }

From 1b46a5fd9bc69f4d609b28e7ff8d36717a3b9a8f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 5 Mar 2025 08:55:06 +0100
Subject: [PATCH 546/988] global-functions: $ScriptInstallUpdate: checksum only
 for same source

So ignore if script is fetched from different base or with different
suffix.
---
 global-functions.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 4c777a17..da311651 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1178,7 +1178,8 @@
       }
 
       :local CheckSum ($CheckSums->($ScriptVal->"name"));
-      :if ([ :convert transform=md5 to=hex [ :tolf ($ScriptVal->"source") ] ] = $CheckSum) do={
+      :if ([ :len ($ScriptInfo->"base-url") ] = 0 && [ :len ($ScriptInfo->"url-suffix") ] = 0 && \
+           [ :convert transform=md5 to=hex [ :tolf ($ScriptVal->"source") ] ] = $CheckSum) do={
         $LogPrint debug $0 ("Checksum for script '" . $ScriptVal->"name" . "' matches, ignoring.");
         :error true;
       }

From e341e1c30ca4ff8b87bc757cc5c0effbc50a7ea6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 6 Mar 2025 15:02:31 +0100
Subject: [PATCH 547/988] global-functions: introduce $LogPrintVerbose ...

... which is a declared function, but has no code, intentionally. It can be
called as a no-op by default.

If you want this output set the function to be the same as $LogPrint:

    :set LogPrintVerbose $LogPrint;
---
 global-functions.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index da311651..911ff6a4 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -55,6 +55,7 @@
 :global IsTimeSync;
 :global LogPrint;
 :global LogPrintOnce;
+:global LogPrintVerbose;
 :global MAX;
 :global MIN;
 :global MkDir;
@@ -848,6 +849,8 @@
   :return true;
 }
 
+# The function $LogPrintVerbose is declared, but has no code, intentionally.
+
 # get max value
 :set MAX do={
   :if ($1 > $2) do={ :return $1; }

From 6d718ec9877c3ecfc10681e85d050d15ed4d4b80 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 6 Mar 2025 14:38:35 +0100
Subject: [PATCH 548/988] fw-addr-lists: use $LogPrintVerbose ...

... to reduce debug output and speed up execution.
---
 fw-addr-lists.rsc | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index d41dc04e..af8c65d7 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -24,6 +24,7 @@
   :global HumanReadableNum;
   :global LogPrint;
   :global LogPrintOnce;
+  :global LogPrintVerbose;
   :global ScriptLock;
   :global WaitFullyConnected;
 
@@ -120,14 +121,14 @@
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ip/firewall/address-list/get $Entry address ];
       :if ([ :typeof ($IPv4Addresses->$Address) ] = "time") do={
-        $LogPrint debug $ScriptName ("Renewing IPv4 address in list '" . $FwListName . \
+        $LogPrintVerbose debug $ScriptName ("Renewing IPv4 address in list '" . $FwListName . \
             "' with " . ($IPv4Addresses->$Address) . ": " . $Address);
         /ip/firewall/address-list/set $Entry timeout=($IPv4Addresses->$Address);
         :set ($IPv4Addresses->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
-          $LogPrint debug $ScriptName ("Removing IPv4 address from list '" . $FwListName . \
+          $LogPrintVerbose debug $ScriptName ("Removing IPv4 address from list '" . $FwListName . \
               "': " . $Address);
           /ip/firewall/address-list/remove $Entry;
           :set CntRemove ($CntRemove + 1);
@@ -139,14 +140,14 @@
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ipv6/firewall/address-list/get $Entry address ];
       :if ([ :typeof ($IPv6Addresses->$Address) ] = "time") do={
-        $LogPrint debug $ScriptName ("Renewing IPv6 address in list '" . $FwListName . \
+        $LogPrintVerbose debug $ScriptName ("Renewing IPv6 address in list '" . $FwListName . \
             "' with " . ($IPv6Addresses->$Address) . ": " . $Address);
         /ipv6/firewall/address-list/set $Entry timeout=($IPv6Addresses->$Address);
         :set ($IPv6Addresses->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
-          $LogPrint debug $ScriptName ("Removing IPv6 address from list '" . $FwListName . \
+          $LogPrintVerbose debug $ScriptName ("Removing IPv6 address from list '" . $FwListName . \
               "': " . $Address);
           /ipv6/firewall/address-list/remove $Entry;
           :set CntRemove ($CntRemove + 1);
@@ -155,7 +156,7 @@
     }
 
     :foreach Address,Timeout in=$IPv4Addresses do={
-      $LogPrint debug $ScriptName ("Adding IPv4 address to list '" . $FwListName . \
+      $LogPrintVerbose debug $ScriptName ("Adding IPv4 address to list '" . $FwListName . \
           "' with " . $Timeout . ": " . $Address);
       :do {
         /ip/firewall/address-list/add list=$FwListName comment=$ListComment \
@@ -169,7 +170,7 @@
     }
 
     :foreach Address,Timeout in=$IPv6Addresses do={
-      $LogPrint debug $ScriptName ("Adding IPv6 address to list '" . $FwListName . \
+      $LogPrintVerbose debug $ScriptName ("Adding IPv6 address to list '" . $FwListName . \
           "' with " . $Timeout . ": " . $Address);
       :do {
         /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment \

From 7be26a07125b9c946859560bd59323f84feb9494 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 6 Mar 2025 14:54:38 +0100
Subject: [PATCH 549/988] DEBUG: add info on $LogPrintVerbose

---
 DEBUG.md             | 14 ++++++++++++++
 global-functions.rsc |  1 +
 2 files changed, 15 insertions(+)

diff --git a/DEBUG.md b/DEBUG.md
index 3d7f0258..d5e9beb7 100644
--- a/DEBUG.md
+++ b/DEBUG.md
@@ -44,6 +44,20 @@ instead.
 
 Disable or remote that setting to restore regular logging.
 
+## Verbose output
+
+Specific scripts can generate huge amount of output. These do use a function
+`$LogPrintVerbose`, which is declared, but has no code, intentionally.
+
+If you *really* want that output set the function to be the same as
+`$LogPrint`:
+
+    :set LogPrintVerbose $LogPrint;
+
+To revert that change just run:
+
+    :set LogPrintVerbose;
+
 ---
 [⬅️ Go back to main README](README.md)  
 [⬆️ Go back to top](#top)
diff --git a/global-functions.rsc b/global-functions.rsc
index 911ff6a4..8ae7bb8e 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -850,6 +850,7 @@
 }
 
 # The function $LogPrintVerbose is declared, but has no code, intentionally.
+# https://rsc.eworm.de/DEBUG.md#verbose-output
 
 # get max value
 :set MAX do={

From fb343c99e399d679f3e2a22e76c14a5899024319 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 6 Mar 2025 22:59:31 +0100
Subject: [PATCH 550/988] fw-addr-lists: put timeout into variable

---
 fw-addr-lists.rsc | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index af8c65d7..331d2c64 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -120,10 +120,11 @@
     :foreach Entry in=[ /ip/firewall/address-list/find where \
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ip/firewall/address-list/get $Entry address ];
-      :if ([ :typeof ($IPv4Addresses->$Address) ] = "time") do={
+      :local TimeOut ($IPv4Addresses->$Address);
+      :if ([ :typeof $TimeOut ] = "time") do={
         $LogPrintVerbose debug $ScriptName ("Renewing IPv4 address in list '" . $FwListName . \
-            "' with " . ($IPv4Addresses->$Address) . ": " . $Address);
-        /ip/firewall/address-list/set $Entry timeout=($IPv4Addresses->$Address);
+            "' with " . $TimeOut . ": " . $Address);
+        /ip/firewall/address-list/set $Entry timeout=$TimeOut;
         :set ($IPv4Addresses->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
@@ -139,10 +140,11 @@
     :foreach Entry in=[ /ipv6/firewall/address-list/find where \
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ipv6/firewall/address-list/get $Entry address ];
-      :if ([ :typeof ($IPv6Addresses->$Address) ] = "time") do={
+      :local TimeOut ($IPv6Addresses->$Address);
+      :if ([ :typeof $TimeOut ] = "time") do={
         $LogPrintVerbose debug $ScriptName ("Renewing IPv6 address in list '" . $FwListName . \
-            "' with " . ($IPv6Addresses->$Address) . ": " . $Address);
-        /ipv6/firewall/address-list/set $Entry timeout=($IPv6Addresses->$Address);
+            "' with " . $TimeOut . ": " . $Address);
+        /ipv6/firewall/address-list/set $Entry timeout=$TimeOut;
         :set ($IPv6Addresses->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={

From ea6de35699a5b62dfffcc583c1a7181e1a6a688f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 6 Mar 2025 23:00:50 +0100
Subject: [PATCH 551/988] fw-addr-lists: do not clean up

Cleanup is important on renew (so the script does not attempt to re-add),
but we do not care here.
---
 fw-addr-lists.rsc | 2 --
 1 file changed, 2 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 331d2c64..70893e32 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -163,7 +163,6 @@
       :do {
         /ip/firewall/address-list/add list=$FwListName comment=$ListComment \
             address=$Address timeout=$Timeout;
-        :set ($IPv4Addresses->$Address);
         :set CntAdd ($CntAdd + 1);
       } on-error={
         $LogPrint warning $ScriptName ("Failed to add IPv4 address to list '" . $FwListName . \
@@ -177,7 +176,6 @@
       :do {
         /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment \
             address=$Address timeout=$Timeout;
-        :set ($IPv6Addresses->$Address);
         :set CntAdd ($CntAdd + 1);
       } on-error={
         $LogPrint warning $ScriptName ("Failed to add IPv6 address to list '" . $FwListName . \

From 2f55bfaf009d726e1174b50887fdb8f9b4b57573 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Mar 2025 12:21:22 +0100
Subject: [PATCH 552/988] fw-addr-lists: strip cidr for host addresses

This makes sure the addresses match later when we read them from
address-list for renew.
---
 fw-addr-lists.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 70893e32..fc537951 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -101,10 +101,16 @@
         }
         :do {
           :if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$") do={
+            :if ($Address ~ "/32\$") do={
+              :set Address [ :pick $Address 0 ([ :len $Address ] - 3) ];
+            }
             :set ($IPv4Addresses->$Address) $TimeOut;
             :error true;
           }
           :if ($Address ~ "^[0-9a-zA-Z]*:[0-9a-zA-Z:\\.]+(/[0-9]{1,3})?\$") do={
+            :if ($Address ~ "/128\$") do={
+              :set Address [ :pick $Address 0 ([ :len $Address ] - 4) ];
+            }
             :set ($IPv6Addresses->$Address) $TimeOut;
             :error true;
           }

From e148df9e573801803e35d8dfaef277f571952fdc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 6 Mar 2025 23:05:45 +0100
Subject: [PATCH 553/988] fw-addr-lists: put addresses into "branches"...

... effectively adding another layer and some complexity, but:
The addresses are sorted inside the array, and sorting less addresses in
a branch saves a lot of processing power. So this is a lot faster now...
---
 fw-addr-lists.rsc | 65 +++++++++++++++++++++++++++--------------------
 1 file changed, 37 insertions(+), 28 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index fc537951..a97f7ed4 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -100,23 +100,24 @@
           :set Address ([ :pick $Line 0 [ $FindDelim $Line ] ] . ($List->"cidr"));
         }
         :do {
+          :local Branch [ :pick $Address 0 1 ];
           :if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$") do={
             :if ($Address ~ "/32\$") do={
               :set Address [ :pick $Address 0 ([ :len $Address ] - 3) ];
             }
-            :set ($IPv4Addresses->$Address) $TimeOut;
+            :set ($IPv4Addresses->$Branch->$Address) $TimeOut;
             :error true;
           }
           :if ($Address ~ "^[0-9a-zA-Z]*:[0-9a-zA-Z:\\.]+(/[0-9]{1,3})?\$") do={
             :if ($Address ~ "/128\$") do={
               :set Address [ :pick $Address 0 ([ :len $Address ] - 4) ];
             }
-            :set ($IPv6Addresses->$Address) $TimeOut;
+            :set ($IPv6Addresses->$Branch->$Address) $TimeOut;
             :error true;
           }
           :if ($Address ~ "^[\\.a-zA-Z0-9-]+\\.[a-zA-Z]{2,}\$") do={
-            :set ($IPv4Addresses->$Address) $TimeOut;
-            :set ($IPv6Addresses->$Address) $TimeOut;
+            :set ($IPv4Addresses->$Branch->$Address) $TimeOut;
+            :set ($IPv6Addresses->$Branch->$Address) $TimeOut;
             :error true;
           }
         } on-error={ }
@@ -126,12 +127,13 @@
     :foreach Entry in=[ /ip/firewall/address-list/find where \
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ip/firewall/address-list/get $Entry address ];
-      :local TimeOut ($IPv4Addresses->$Address);
+      :local Branch [ :pick $Address 0 1 ];
+      :local TimeOut ($IPv4Addresses->$Branch->$Address);
       :if ([ :typeof $TimeOut ] = "time") do={
         $LogPrintVerbose debug $ScriptName ("Renewing IPv4 address in list '" . $FwListName . \
             "' with " . $TimeOut . ": " . $Address);
         /ip/firewall/address-list/set $Entry timeout=$TimeOut;
-        :set ($IPv4Addresses->$Address);
+        :set ($IPv4Addresses->$Branch->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
@@ -146,12 +148,13 @@
     :foreach Entry in=[ /ipv6/firewall/address-list/find where \
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ipv6/firewall/address-list/get $Entry address ];
-      :local TimeOut ($IPv6Addresses->$Address);
+      :local Branch [ :pick $Address 0 1 ];
+      :local TimeOut ($IPv6Addresses->$Branch->$Address);
       :if ([ :typeof $TimeOut ] = "time") do={
         $LogPrintVerbose debug $ScriptName ("Renewing IPv6 address in list '" . $FwListName . \
             "' with " . $TimeOut . ": " . $Address);
         /ipv6/firewall/address-list/set $Entry timeout=$TimeOut;
-        :set ($IPv6Addresses->$Address);
+        :set ($IPv6Addresses->$Branch->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
@@ -163,29 +166,35 @@
       }
     }
 
-    :foreach Address,Timeout in=$IPv4Addresses do={
-      $LogPrintVerbose debug $ScriptName ("Adding IPv4 address to list '" . $FwListName . \
-          "' with " . $Timeout . ": " . $Address);
-      :do {
-        /ip/firewall/address-list/add list=$FwListName comment=$ListComment \
-            address=$Address timeout=$Timeout;
-        :set CntAdd ($CntAdd + 1);
-      } on-error={
-        $LogPrint warning $ScriptName ("Failed to add IPv4 address to list '" . $FwListName . \
-            "': " . $Address);
+    :foreach BranchName,Branch in=$IPv4Addresses do={
+      $LogPrintVerbose debug $ScriptName ("Handling branch: " . $BranchName);
+      :foreach Address,Timeout in=$Branch do={
+        $LogPrintVerbose debug $ScriptName ("Adding IPv4 address to list '" . $FwListName . \
+            "' with " . $Timeout . ": " . $Address);
+        :do {
+          /ip/firewall/address-list/add list=$FwListName comment=$ListComment \
+              address=$Address timeout=$Timeout;
+          :set CntAdd ($CntAdd + 1);
+        } on-error={
+          $LogPrint warning $ScriptName ("Failed to add IPv4 address to list '" . $FwListName . \
+              "': " . $Address);
+        }
       }
     }
 
-    :foreach Address,Timeout in=$IPv6Addresses do={
-      $LogPrintVerbose debug $ScriptName ("Adding IPv6 address to list '" . $FwListName . \
-          "' with " . $Timeout . ": " . $Address);
-      :do {
-        /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment \
-            address=$Address timeout=$Timeout;
-        :set CntAdd ($CntAdd + 1);
-      } on-error={
-        $LogPrint warning $ScriptName ("Failed to add IPv6 address to list '" . $FwListName . \
-            "': " . $Address);
+    :foreach BranchName,Branch in=$IPv6Addresses do={
+      $LogPrintVerbose debug $ScriptName ("Handling branch: " . $BranchName);
+      :foreach Address,Timeout in=$Branch do={
+        $LogPrintVerbose debug $ScriptName ("Adding IPv6 address to list '" . $FwListName . \
+            "' with " . $Timeout . ": " . $Address);
+        :do {
+          /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment \
+              address=$Address timeout=$Timeout;
+          :set CntAdd ($CntAdd + 1);
+        } on-error={
+          $LogPrint warning $ScriptName ("Failed to add IPv6 address to list '" . $FwListName . \
+              "': " . $Address);
+        }
       }
     }
 

From d71ea804b077d35183df318fb305b213fb961d27 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Mar 2025 20:35:36 +0100
Subject: [PATCH 554/988] fw-addr-lists: two characters for branch

Using one character for IPv4 is ok (1 to 9), but IPv6 global unicase
(2000::/3) results in just two different characters (2 and 3).

So let's use first two characters...
---
 fw-addr-lists.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index a97f7ed4..9ad5b3a7 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -100,7 +100,7 @@
           :set Address ([ :pick $Line 0 [ $FindDelim $Line ] ] . ($List->"cidr"));
         }
         :do {
-          :local Branch [ :pick $Address 0 1 ];
+          :local Branch [ :pick $Address 0 2 ];
           :if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$") do={
             :if ($Address ~ "/32\$") do={
               :set Address [ :pick $Address 0 ([ :len $Address ] - 3) ];
@@ -127,7 +127,7 @@
     :foreach Entry in=[ /ip/firewall/address-list/find where \
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ip/firewall/address-list/get $Entry address ];
-      :local Branch [ :pick $Address 0 1 ];
+      :local Branch [ :pick $Address 0 2 ];
       :local TimeOut ($IPv4Addresses->$Branch->$Address);
       :if ([ :typeof $TimeOut ] = "time") do={
         $LogPrintVerbose debug $ScriptName ("Renewing IPv4 address in list '" . $FwListName . \
@@ -148,7 +148,7 @@
     :foreach Entry in=[ /ipv6/firewall/address-list/find where \
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ipv6/firewall/address-list/get $Entry address ];
-      :local Branch [ :pick $Address 0 1 ];
+      :local Branch [ :pick $Address 0 2 ];
       :local TimeOut ($IPv6Addresses->$Branch->$Address);
       :if ([ :typeof $TimeOut ] = "time") do={
         $LogPrintVerbose debug $ScriptName ("Renewing IPv6 address in list '" . $FwListName . \

From f0e6cbcfe1a0be05f30d37cd495d4dbea0888f07 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 8 Mar 2025 10:09:51 +0100
Subject: [PATCH 555/988] fw-addr-lists: get branch from calculated checksum

The addresses were spread very uneven before.

Let's calculate a checksum, and take the first two characters of that.
The addresses are now spread evenly on 256 branches (0x00 to 0xff).
---
 fw-addr-lists.rsc | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 9ad5b3a7..f0940fef 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -37,6 +37,11 @@
     }
   }
 
+  :local GetBranch do={
+    :global EitherOr;
+    :return [ :pick [ :convert transform=md5 to=hex [ :pick $1 0 [ $EitherOr [ :find $1 "/" ] [ :len $1 ] ] ] ] 0 2 ];
+  }
+
   :if ([ $ScriptLock $ScriptName ] = false) do={
     :set ExitOK true;
     :error false;
@@ -100,7 +105,7 @@
           :set Address ([ :pick $Line 0 [ $FindDelim $Line ] ] . ($List->"cidr"));
         }
         :do {
-          :local Branch [ :pick $Address 0 2 ];
+          :local Branch [ $GetBranch $Address ];
           :if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$") do={
             :if ($Address ~ "/32\$") do={
               :set Address [ :pick $Address 0 ([ :len $Address ] - 3) ];
@@ -127,7 +132,7 @@
     :foreach Entry in=[ /ip/firewall/address-list/find where \
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ip/firewall/address-list/get $Entry address ];
-      :local Branch [ :pick $Address 0 2 ];
+      :local Branch [ $GetBranch $Address ];
       :local TimeOut ($IPv4Addresses->$Branch->$Address);
       :if ([ :typeof $TimeOut ] = "time") do={
         $LogPrintVerbose debug $ScriptName ("Renewing IPv4 address in list '" . $FwListName . \
@@ -148,7 +153,7 @@
     :foreach Entry in=[ /ipv6/firewall/address-list/find where \
         list=$FwListName comment=$ListComment ] do={
       :local Address [ /ipv6/firewall/address-list/get $Entry address ];
-      :local Branch [ :pick $Address 0 2 ];
+      :local Branch [ $GetBranch $Address ];
       :local TimeOut ($IPv6Addresses->$Branch->$Address);
       :if ([ :typeof $TimeOut ] = "time") do={
         $LogPrintVerbose debug $ScriptName ("Renewing IPv6 address in list '" . $FwListName . \

From eb59dd21caf8026748eada3aee137b8e3b6590b7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Mar 2025 17:33:51 +0100
Subject: [PATCH 556/988] check-routeros-update: check perpetual license...

... as these have to be renewed and can expire.
---
 check-routeros-update.rsc | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 361be34e..8d200d2d 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -66,6 +66,27 @@
     :error "A reboot for update is already scheduled.";
   }
 
+  :local License [ /system/license/get ];
+  :if ([ :typeof ($License->"deadline-at") ] = "str") do={
+    :if ([ :len ($License->"next-renewal-at") ] = 0 && ($License->"limited-upgrades") = true) do={
+      $LogPrint warning $ScriptName ("Your license expired on " . ($License->"deadline-at") . "!");
+      $SendNotification2 ({ origin=$ScriptName; \
+        subject=([ $SymbolForNotification "warning-sign" ] . "License expired!"); \
+        message=("Your license expired on " . ($License->"deadline-at") . \
+          ", can no longer update RouterOS on " . $Identity . "...") });
+      :set ExitOK true;
+      :error false;
+    }
+
+    :if ([ :totime ($License->"next-renewal-at") ] + 1w < [ :timestamp ]) do={
+      $LogPrint warning $ScriptName ("Your license will expire on " . ($License->"deadline-at") . "!");
+      $SendNotification2 ({ origin=$ScriptName; \
+        subject=([ $SymbolForNotification "warning-sign" ] . "License about to expire!"); \
+        message=("Your license failed to renew and is about to expire on " . \
+          ($License->"deadline-at") . " on " . $Identity . "...") });
+    }
+  }
+
   $LogPrint debug $ScriptName ("Checking for updates...");
   /system/package/update/check-for-updates without-paging as-value;
   :local Update [ /system/package/update/get ];

From 788400c4586b6a2e61c6e36acd10ab5d20da00c9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Mar 2025 16:29:06 +0100
Subject: [PATCH 557/988] fw-addr-lists: raw.githubusercontent.com requires
 'USERTrust RSA Certification Authority' now

---
 certs/Makefile                                |  2 +-
 .../USERTrust-RSA-Certification-Authority.pem | 41 +++++++++++++++++++
 global-config.rsc                             |  2 +-
 3 files changed, 43 insertions(+), 2 deletions(-)
 create mode 100644 certs/USERTrust-RSA-Certification-Authority.pem

diff --git a/certs/Makefile b/certs/Makefile
index 4e252b4a..3ccad6e2 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -15,7 +15,7 @@ DOMAINS_DUAL = \
 	git.eworm.de/ISRG-Root-X2 \
 	lists.blocklist.de/Certum-Trusted-Network-CA \
 	matrix.org/GTS-Root-R4 \
-	raw.githubusercontent.com/DigiCert-Global-Root-G2 \
+	raw.githubusercontent.com/USERTrust-RSA-Certification-Authority \
 	rsc.eworm.de/ISRG-Root-X2 \
 	upgrade.mikrotik.com/ISRG-Root-X1
 DOMAINS_IPV4 = \
diff --git a/certs/USERTrust-RSA-Certification-Authority.pem b/certs/USERTrust-RSA-Certification-Authority.pem
new file mode 100644
index 00000000..0fbeef63
--- /dev/null
+++ b/certs/USERTrust-RSA-Certification-Authority.pem
@@ -0,0 +1,41 @@
+# Issuer: CN=USERTrust RSA Certification Authority O=The USERTRUST Network
+# Subject: CN=USERTrust RSA Certification Authority O=The USERTRUST Network
+# Label: "USERTrust RSA Certification Authority"
+# Serial: 2645093764781058787591871645665788717
+# MD5 Fingerprint: 1b:fe:69:d1:91:b7:19:33:a3:72:a8:0f:e1:55:e5:b5
+# SHA1 Fingerprint: 2b:8f:1b:57:33:0d:bb:a2:d0:7a:6c:51:f7:0e:e9:0d:da:b9:ad:8e
+# SHA256 Fingerprint: e7:93:c9:b0:2f:d8:aa:13:e2:1c:31:22:8a:cc:b0:81:19:64:3b:74:9c:89:89:64:b1:74:6d:46:c3:d4:cb:d2
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/global-config.rsc b/global-config.rsc
index 2524dedc..fa32b163 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -103,7 +103,7 @@
 #      cert="ISRG Root X2" };
     { url="https://raw.githubusercontent.com/stamparm/ipsum/refs/heads/master/levels/4.txt";
 #     # higher level (decrease the numerical value) for more addresses, and vice versa
-      cert="DigiCert Global Root G2" };
+      cert="USERTrust RSA Certification Authority" };
     { url="https://www.dshield.org/block.txt"; cidr="/24";
       cert="ISRG Root X1" };
     { url="https://lists.blocklist.de/lists/strongips.txt";

From 97b99316b2f96fa9c5d2f539e31aa308e86c99b4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Mar 2025 10:31:11 +0100
Subject: [PATCH 558/988] netwatch-notify: increase timeout...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

... as a timeout of one second expires immediately. 🤨
---
 netwatch-notify.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 8b05c5e3..9a4c9d97 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -61,12 +61,12 @@
     :global GetRandom20CharAlNum;
 
     :local FwAddrList ($ScriptName . "-" . [ $GetRandom20CharAlNum ]);
-    /ip/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=1s;
+    /ip/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=2s;
     :delay 20ms;
     :if ([ :len [ /ip/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
       :return true;
     }
-    /ipv6/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=1s;
+    /ipv6/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=2s;
     :delay 20ms;
     :if ([ :len [ /ipv6/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
       :return true;

From 155542668719f9feaac45fdb786b2e5fc5fd1e71 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Mar 2025 11:18:18 +0100
Subject: [PATCH 559/988] netwatch-notify: increase the timeout even more
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This interacts with the number of addresses in the address-list. Having
a lot of addresses there (for exemple from script 'fw-addr-lists' 😜)
makes the 'find' take longer. We have to make sure that 'find' succeeds
before the address times out.

As this does not hurt... Let's just bump to 10 seconds to be safe.
---
 netwatch-notify.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 9a4c9d97..2a5050ce 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -61,12 +61,12 @@
     :global GetRandom20CharAlNum;
 
     :local FwAddrList ($ScriptName . "-" . [ $GetRandom20CharAlNum ]);
-    /ip/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=2s;
+    /ip/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=10s;
     :delay 20ms;
     :if ([ :len [ /ip/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
       :return true;
     }
-    /ipv6/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=2s;
+    /ipv6/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=10s;
     :delay 20ms;
     :if ([ :len [ /ipv6/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
       :return true;

From b63e0fcb2fc282ac69cbef74b35bd40e8df5a464 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Mar 2025 11:26:22 +0100
Subject: [PATCH 560/988] netwatch-notify: check matching address type only

---
 netwatch-notify.rsc | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 2a5050ce..0b8a8dc5 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -61,15 +61,19 @@
     :global GetRandom20CharAlNum;
 
     :local FwAddrList ($ScriptName . "-" . [ $GetRandom20CharAlNum ]);
-    /ip/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=10s;
-    :delay 20ms;
-    :if ([ :len [ /ip/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
-      :return true;
+    :if ([ :typeof [ :toip $Expected ] ] = "ip") do={
+      /ip/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=10s;
+      :delay 20ms;
+      :if ([ :len [ /ip/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
+        :return true;
+      }
     }
-    /ipv6/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=10s;
-    :delay 20ms;
-    :if ([ :len [ /ipv6/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
-      :return true;
+    :if ([ :typeof [ :toip6 $Expected ] ] = "ip6") do={
+      /ipv6/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=10s;
+      :delay 20ms;
+      :if ([ :len [ /ipv6/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
+        :return true;
+      }
     }
 
     :return false;

From 20bf609c44c2b4111bb387b36b955b8c3243fbf1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Mar 2025 10:51:39 +0100
Subject: [PATCH 561/988] check-routeros-update: fix condition for license
 check

Turns out that `next-renewal-at` is moved forward when renewal failed,
so it never matches the criteria. Just start complaining three weeks
before deadline.
---
 check-routeros-update.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 8d200d2d..78161e4b 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -78,7 +78,7 @@
       :error false;
     }
 
-    :if ([ :totime ($License->"next-renewal-at") ] + 1w < [ :timestamp ]) do={
+    :if ([ :totime ($License->"deadline-at") ] - 3w < [ :timestamp ]) do={
       $LogPrint warning $ScriptName ("Your license will expire on " . ($License->"deadline-at") . "!");
       $SendNotification2 ({ origin=$ScriptName; \
         subject=([ $SymbolForNotification "warning-sign" ] . "License about to expire!"); \

From ce39b79f69f978a8de521643b07b9c19de02b06f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Mar 2025 11:50:38 +0100
Subject: [PATCH 562/988] capsman-download-packages: fix parameter for $RmFile

The function can not handle ids, we have to pass a name instead.
---
 capsman-download-packages.capsman.rsc  | 2 +-
 capsman-download-packages.template.rsc | 2 +-
 capsman-download-packages.wifi.rsc     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 4387cb15..25c43f58 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -62,7 +62,7 @@
     :if ([ $DownloadPackage ($File->"package-name") $InstalledVersion \
          ($File->"package-architecture") $PackagePath ] = true) do={
       :set Updated true;
-      $RmFile $Package;
+      $RmFile ($File->"name");
     }
   }
 
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 744494e5..b2698382 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -64,7 +64,7 @@
     :if ([ $DownloadPackage ($File->"package-name") $InstalledVersion \
          ($File->"package-architecture") $PackagePath ] = true) do={
       :set Updated true;
-      $RmFile $Package;
+      $RmFile ($File->"name");
     }
   }
 
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index a0c5e121..901bb0af 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -62,7 +62,7 @@
     :if ([ $DownloadPackage ($File->"package-name") $InstalledVersion \
          ($File->"package-architecture") $PackagePath ] = true) do={
       :set Updated true;
-      $RmFile $Package;
+      $RmFile ($File->"name");
     }
   }
 

From f8c3659f6a329498b7aea5ff7f4b67ae1ef727df Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 26 Mar 2025 09:19:02 +0100
Subject: [PATCH 563/988] support creating the checksums file

---
 .gitignore           | 3 +++
 Makefile             | 7 +++++--
 contrib/checksums.sh | 9 +++++++++
 3 files changed, 17 insertions(+), 2 deletions(-)
 create mode 100755 contrib/checksums.sh

diff --git a/.gitignore b/.gitignore
index cf89f870..8abdc284 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,5 +9,8 @@
 # html files (as generated from markdown)
 *.html
 
+# checksums file as used by $ScriptInstallUpdate
+checksums.json
+
 # Mac OS X folder settings file
 .DS_Store
diff --git a/Makefile b/Makefile
index d21713c2..89517410 100644
--- a/Makefile
+++ b/Makefile
@@ -9,7 +9,7 @@ WIFI = $(wildcard *.wifi.rsc)
 MARKDOWN = $(wildcard *.md doc/*.md doc/mod/*.md)
 HTML = $(MARKDOWN:.md=.html)
 
-all: $(CAPSMAN) $(LOCAL) $(WIFI) $(HTML)
+all: $(CAPSMAN) $(LOCAL) $(WIFI) $(HTML) checksums.json
 
 %.html: %.md Makefile
 	markdown $< | sed 's/href="\([-_\./[:alnum:]]*\)\.md"/href="\1.html"/g' > $@
@@ -32,5 +32,8 @@ all: $(CAPSMAN) $(LOCAL) $(WIFI) $(HTML)
 		-e '/^# !!/,/^# !!/c # !! Do not edit this file, it is generated from template!' \
 		< $< > $@
 
+checksums.json: contrib/checksums.sh *.rsc */*.rsc
+	contrib/checksums.sh
+
 clean:
-	rm -f $(HTML)
+	rm -f $(HTML) checksums.json
diff --git a/contrib/checksums.sh b/contrib/checksums.sh
new file mode 100755
index 00000000..b472b49f
--- /dev/null
+++ b/contrib/checksums.sh
@@ -0,0 +1,9 @@
+#!/bin/sh
+
+# generate a checksums file as used by $ScriptInstallUpdate
+
+set -e
+
+md5sum $(find -name '*.rsc' | sort) | \
+	sed -e "s| \./||" -e 's|.rsc$||' | \
+	jq --raw-input --null-input '[ inputs | split (" ") | { (.[1]): (.[0]) }] | add' > 'checksums.json'

From 690951469291ae96ead1f88226be78ec7735d098 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Mar 2025 09:48:01 +0100
Subject: [PATCH 564/988] check-routeros-update: send certificate warning just
 once...

... and another one once expired.
---
 check-routeros-update.rsc | 23 +++++++++++++++--------
 1 file changed, 15 insertions(+), 8 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 78161e4b..51df175d 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -22,6 +22,7 @@
   :global SafeUpdateNeighborIdentity;
   :global SafeUpdatePatch;
   :global SafeUpdateUrl;
+  :global SentCertificateNotification;
   :global SentRouterosUpdateNotification;
 
   :global DeviceInfo;
@@ -70,20 +71,26 @@
   :if ([ :typeof ($License->"deadline-at") ] = "str") do={
     :if ([ :len ($License->"next-renewal-at") ] = 0 && ($License->"limited-upgrades") = true) do={
       $LogPrint warning $ScriptName ("Your license expired on " . ($License->"deadline-at") . "!");
-      $SendNotification2 ({ origin=$ScriptName; \
-        subject=([ $SymbolForNotification "warning-sign" ] . "License expired!"); \
-        message=("Your license expired on " . ($License->"deadline-at") . \
-          ", can no longer update RouterOS on " . $Identity . "...") });
+      :if ($SentCertificateNotification != "expired") do={
+        $SendNotification2 ({ origin=$ScriptName; \
+          subject=([ $SymbolForNotification "warning-sign" ] . "License expired!"); \
+          message=("Your license expired on " . ($License->"deadline-at") . \
+            ", can no longer update RouterOS on " . $Identity . "...") });
+        :set SentCertificateNotification "expired";
+      }
       :set ExitOK true;
       :error false;
     }
 
     :if ([ :totime ($License->"deadline-at") ] - 3w < [ :timestamp ]) do={
       $LogPrint warning $ScriptName ("Your license will expire on " . ($License->"deadline-at") . "!");
-      $SendNotification2 ({ origin=$ScriptName; \
-        subject=([ $SymbolForNotification "warning-sign" ] . "License about to expire!"); \
-        message=("Your license failed to renew and is about to expire on " . \
-          ($License->"deadline-at") . " on " . $Identity . "...") });
+      :if ($SentCertificateNotification != "warning") do={
+        $SendNotification2 ({ origin=$ScriptName; \
+          subject=([ $SymbolForNotification "warning-sign" ] . "License about to expire!"); \
+          message=("Your license failed to renew and is about to expire on " . \
+            ($License->"deadline-at") . " on " . $Identity . "...") });
+        :set SentCertificateNotification "warning";
+      }
     }
   }
 

From 16c9ce437ef268780303f627bba08a166e2aef05 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 24 Mar 2025 21:14:12 +0100
Subject: [PATCH 565/988] check-routeros-update: send notification on renewed
 license...

... when a warning has been sent before.
---
 check-routeros-update.rsc | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 51df175d..1a5a930f 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -92,6 +92,16 @@
         :set SentCertificateNotification "warning";
       }
     }
+
+    :if ([ :typeof $SentCertificateNotification ] = "str" && \
+         [ :totime ($License->"deadline-at") ] - 4w > [ :timestamp ]) do={
+      $LogPrint info $ScriptName ("Your license was successfully renewed.");
+      $SendNotification2 ({ origin=$ScriptName; \
+        subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "License renewed"); \
+        message=("Your license was successfully renewed on " . $Identity . \
+          ". It is now valid until " . ($License->"deadline-at") . ".") });
+      :set SentCertificateNotification;
+    }
   }
 
   $LogPrint debug $ScriptName ("Checking for updates...");

From 3c30276e235b6c8105f44db49ba6586d296f264c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Mar 2025 17:54:09 +0100
Subject: [PATCH 566/988] check-routeros-update: split off
 check-perpetual-license...

... and also add documentation, screenshot, etc.
---
 README.md                                     |   1 +
 check-perpetual-license.rsc                   |  78 ++++++++++++++++++
 check-routeros-update.rsc                     |  38 ---------
 .../notification.avif                         | Bin 0 -> 4004 bytes
 doc/check-perpetual-license.md                |  70 ++++++++++++++++
 doc/check-routeros-update.md                  |   1 +
 global-functions.rsc                          |   2 +-
 news-and-changes.rsc                          |   1 +
 8 files changed, 152 insertions(+), 39 deletions(-)
 create mode 100644 check-perpetual-license.rsc
 create mode 100644 doc/check-perpetual-license.d/notification.avif
 create mode 100644 doc/check-perpetual-license.md

diff --git a/README.md b/README.md
index fae69869..ffbc27ed 100644
--- a/README.md
+++ b/README.md
@@ -225,6 +225,7 @@ Available scripts
 * [Renew certificates and notify on expiration](doc/check-certificates.md)
 * [Notify about health state](doc/check-health.md)
 * [Notify on LTE firmware upgrade](doc/check-lte-firmware-upgrade.md)
+* [Check perpetual license on CHR](doc/check-perpetual-license.md)
 * [Notify on RouterOS update](doc/check-routeros-update.md)
 * [Collect MAC addresses in wireless access list](doc/collect-wireless-mac.md)
 * [Use wireless network with daily psk](doc/daily-psk.md)
diff --git a/check-perpetual-license.rsc b/check-perpetual-license.rsc
new file mode 100644
index 00000000..9a3a3c74
--- /dev/null
+++ b/check-perpetual-license.rsc
@@ -0,0 +1,78 @@
+#!rsc by RouterOS
+# RouterOS script: check-perpetual-license
+# Copyright (c) 2025 Christian Hesse <mail@eworm.de>
+# https://rsc.eworm.de/COPYING.md
+#
+# requires RouterOS, version=7.15
+#
+# check perpetual license on CHR
+# https://rsc.eworm.de/doc/check-perpetual-license.md
+
+:global GlobalFunctionsReady;
+:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
+
+:local ExitOK false;
+:do {
+  :local ScriptName [ :jobname ];
+
+  :global Identity;
+  :global SentCertificateNotification;
+
+  :global LogPrint;
+  :global ScriptLock;
+  :global SendNotification2;
+  :global SymbolForNotification;
+  :global WaitFullyConnected;
+
+  :if ([ $ScriptLock $ScriptName ] = false) do={
+    :set ExitOK true;
+    :error false;
+  }
+
+  $WaitFullyConnected;
+
+  :local License [ /system/license/get ];
+  :if ([ :typeof ($License->"deadline-at") ] != "str") do={
+    $LogPrint info $ScriptName ("This device does not have a perpetual license.");
+    :set ExitOK true;
+    :error true;
+  }
+  
+  :if ([ :len ($License->"next-renewal-at") ] = 0 && ($License->"limited-upgrades") = true) do={
+    $LogPrint warning $ScriptName ("Your license expired on " . ($License->"deadline-at") . "!");
+    :if ($SentCertificateNotification != "expired") do={
+      $SendNotification2 ({ origin=$ScriptName; \
+        subject=([ $SymbolForNotification "warning-sign" ] . "License expired!"); \
+        message=("Your license expired on " . ($License->"deadline-at") . \
+          ", can no longer update RouterOS on " . $Identity . "...") });
+      :set SentCertificateNotification "expired";
+    }
+    :set ExitOK true;
+    :error true;
+  }
+
+  :if ([ :totime ($License->"deadline-at") ] - 3w < [ :timestamp ]) do={
+    $LogPrint warning $ScriptName ("Your license will expire on " . ($License->"deadline-at") . "!");
+    :if ($SentCertificateNotification != "warning") do={
+      $SendNotification2 ({ origin=$ScriptName; \
+        subject=([ $SymbolForNotification "warning-sign" ] . "License about to expire!"); \
+        message=("Your license failed to renew and is about to expire on " . \
+          ($License->"deadline-at") . " on " . $Identity . "...") });
+      :set SentCertificateNotification "warning";
+    }
+    :set ExitOK true;
+    :error true;
+  }
+
+  :if ([ :typeof $SentCertificateNotification ] = "str" && \
+       [ :totime ($License->"deadline-at") ] - 4w > [ :timestamp ]) do={
+    $LogPrint info $ScriptName ("Your license was successfully renewed.");
+    $SendNotification2 ({ origin=$ScriptName; \
+      subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "License renewed"); \
+      message=("Your license was successfully renewed on " . $Identity . \
+        ". It is now valid until " . ($License->"deadline-at") . ".") });
+    :set SentCertificateNotification;
+  }
+} on-error={
+  :global ExitError; $ExitError $ExitOK [ :jobname ];
+}
diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 1a5a930f..361be34e 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -22,7 +22,6 @@
   :global SafeUpdateNeighborIdentity;
   :global SafeUpdatePatch;
   :global SafeUpdateUrl;
-  :global SentCertificateNotification;
   :global SentRouterosUpdateNotification;
 
   :global DeviceInfo;
@@ -67,43 +66,6 @@
     :error "A reboot for update is already scheduled.";
   }
 
-  :local License [ /system/license/get ];
-  :if ([ :typeof ($License->"deadline-at") ] = "str") do={
-    :if ([ :len ($License->"next-renewal-at") ] = 0 && ($License->"limited-upgrades") = true) do={
-      $LogPrint warning $ScriptName ("Your license expired on " . ($License->"deadline-at") . "!");
-      :if ($SentCertificateNotification != "expired") do={
-        $SendNotification2 ({ origin=$ScriptName; \
-          subject=([ $SymbolForNotification "warning-sign" ] . "License expired!"); \
-          message=("Your license expired on " . ($License->"deadline-at") . \
-            ", can no longer update RouterOS on " . $Identity . "...") });
-        :set SentCertificateNotification "expired";
-      }
-      :set ExitOK true;
-      :error false;
-    }
-
-    :if ([ :totime ($License->"deadline-at") ] - 3w < [ :timestamp ]) do={
-      $LogPrint warning $ScriptName ("Your license will expire on " . ($License->"deadline-at") . "!");
-      :if ($SentCertificateNotification != "warning") do={
-        $SendNotification2 ({ origin=$ScriptName; \
-          subject=([ $SymbolForNotification "warning-sign" ] . "License about to expire!"); \
-          message=("Your license failed to renew and is about to expire on " . \
-            ($License->"deadline-at") . " on " . $Identity . "...") });
-        :set SentCertificateNotification "warning";
-      }
-    }
-
-    :if ([ :typeof $SentCertificateNotification ] = "str" && \
-         [ :totime ($License->"deadline-at") ] - 4w > [ :timestamp ]) do={
-      $LogPrint info $ScriptName ("Your license was successfully renewed.");
-      $SendNotification2 ({ origin=$ScriptName; \
-        subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "License renewed"); \
-        message=("Your license was successfully renewed on " . $Identity . \
-          ". It is now valid until " . ($License->"deadline-at") . ".") });
-      :set SentCertificateNotification;
-    }
-  }
-
   $LogPrint debug $ScriptName ("Checking for updates...");
   /system/package/update/check-for-updates without-paging as-value;
   :local Update [ /system/package/update/get ];
diff --git a/doc/check-perpetual-license.d/notification.avif b/doc/check-perpetual-license.d/notification.avif
new file mode 100644
index 0000000000000000000000000000000000000000..70ca603d4488773dd8a476ced8c89506407b95ef
GIT binary patch
literal 4004
zcmXv|2RIw-_l;3O&5GIDd(WUXW7n!t)U1dVgos(CV(-xsReOFY9agOxwW2mb5u4Ah
znyu}x-~ajD_j&F)_nh;*_W}R_4rkvNNT@&D8E{*F5dn9WM8KiW1`tWet+a!1@`e8O
zZi~~^(F67W6aYZNVZQ(4|3fMy+!yiRKycgH;2vJEzmo<4Kyds1b^rk#06_KnmJ7h)
zp8qZV&tbV8oCyDhZ!=JT2}yM?53m1rxxtYr<gKm;N5Z^r5d`-^I{gg-0EB-7e>n{j
z9ti)d5RsCS-U0>GUs64c<CXycbTBUulqbw1@b+g)015h5VuT|R(7)bo-5y3vKo~)M
zd(}IHBh>dEfSgR8x9mY82WP>!R2ZwiBO%_i2%bGt{47fuukwgHzx=7AMdpKZnlEZ`
z^M}mKpP7W8tpDS2b4Bi7kI}PVaXbutwF7v}HF;7>em+=1mh}2`^PWV69LUV2UpE)%
z8pzT`TtjRywZT`UEPkj8_A5uZHp-4Rb-CQ=tgkSyj!$2(fP<xxanel)(TMiO68&Qh
zdfTfFI*)XPJC(y3s^lWM2Mqn+URvtbKE>3mmKY~3T7?G*hege_oQ_d){Gk)5(f)_>
zezp&fw!S>{+5X`M0M*YYf!=VB*9Uf%xcdd)J^f@>qf<;PqPaC|`emxDQdK--7*|PZ
zY4FCeSLTIcceND9^npPHeYUev*Xtn$x_V8klLSHVE67~*o1>@?B_LIe*X+*HuxBQ%
z8z)Ts-hN*NIBzbj`jSR$!%eh09&i<mZ%oG9dk*RZ7PuC9N06(Bv?69%rrxaR#f=tN
zTomj*TD);GSI+;9TUlo;LtRXFPk1y5{qZihHVbEVZD{Gz3)}ZCmK0lA2%j<t4jwUP
zEWUG0gh31cjy9}G{;;joK3k{~!RhG{Nuiko^C=-s10MdOQ$r&a?lb<11-Xo`*m31X
zDx{YA*L7g58_!;Sl(84m@RDao#blMUqKeI)Y7=cu6J}#7NPm?utFH-qZcuTB(cD)E
z$4Bixk&t=N%}+J`3=yvK9Y{1kVe{QLbw&RKW8)dJu1O)C<hU)VWtCw@<xqogS5ul9
zNu&Sahm(txerh~g@53BHOCv`m<K?deWTh5NY*Vza5$i$`tqMrK7`yfwcwuA;5;^1D
zbImx3%q9rsGhPU+1G!UA8?fZW7f1h|OVcTd603@5eV)gQj5gIG)QmUsiN;;lyNRVU
zIPPg2T8Q>ua-RC}hA&?p?;;+)yAe`!i@c8X6v+Egw?DomD#<Jd=f`t<j(DJ*@6ozN
zGxqy+RW`GEelzW(gf!ObnEP6wqd<#NIva)7p#g8koub_DMm88Y_mwrOnLnQ-T;}Lx
zoAqi3Q&dte8|W;Z)xD`E2!EbqMrA%S12N7iERSs)o%<@ItQmX0UQz7No9tNzKh>_m
z=J%04jGHmX^VZ`4)m_4<8uz35kQ#2=;$?%2aw_qD`6ZiPVx0vQdp~!C2Iq=&aPkVH
zVp@c;%VEvMzXDRP`*^$Iu_C(V^q7?Hn`$nvQ{SQUZI?SAgBn0QzE2LfcaqK_@m1t0
zr+Xjcg~xWco?WFC6mX%yM&CDwJ%ZEw1M49ERP(X^x`OQ}Mc=CZ*Pt+|1{)zmE%g^y
zP(3YWE`>ERBe7TdvXdh)8pfzOEjrm$W9FlDQo=?kl%J$Iy!*NEQX;-^D!p4~ui+vC
zE8}Q1KGxN0A~i^u){TBmdw0B+&a5!7BA%M-jOWtj8aP`gr=BKn;f6&~+lQWvERz#d
zj(BHe{Uciw^plgn(=h~JOO~TFH({5R<IyzwiT!2UN>5_}CTB71a%zo)nd2Dp_%fv_
z$<VEVq8u;HrsI2lboo=p$b`In(v47uI^d|w{5)c$y6RV)ZgS&^rAx;jp~u%FF!%Pv
zAN(xD!|W9j4Tk(CRTbi`!#z7pXVZ%&tyu0C0m@%g?juO-c{{_t#ATi3p3X>MTGB<$
zF`qd#7=e|ipzgwp5{7_S&XqWoc8<D9Trk1?z?-H;I1D9(K|lURJ-rJkj+rC$2h-rQ
z)D;&W@R9;uf2k{p??Ic@^6cfmTkUzrsM0`a-=;s=Mdzx~7AH)E6yiHIF_W40(x5Mz
z{UqLjt+{x=9%g~gwSK&bZD9F5?|A*f@Tkd^P+bCI_B;KB{00~er}J6c1LdX$uMSq$
zT%8$Lmf5=5-cr&01WvQ(*MqWbII-+*P$8lQce#}#@AuH3j-v!yVxGTvpuF9cNuSTa
z?4f%0k1{Te5c4<<>ItlPdWXJ@!R1m#0+&X=X-WD;=HkcO!YqFcroI8BEW<DYf2OXP
zl^u><=bVQJiU^@7x($z-s!SWoN9cb#=Jm*^r97Ul3ur9uj(O;u>6TH~1PSpK$&Z2X
zy=6Kq9_V_Q7!xXT---T@EragG{k0>eA>&BohzQ9dk9LU49K7tVL%P#0!NK<jzvYUY
z#~B6!2R_s?I1J<ka@wha@|-J%4B*UgRQacUQ1mKoKmlP=;xkBAd*9F}9TBY@&XF->
zHAcHxWT4A^#{m~_a#U<GO4QSj^@|J2VBGhqX<NDo7Xel2v%a?(R{*y%pCtW)IHu7n
zYc%>T@a^I5_War_1?|Da>(ndea?YZ}*af%TRj<D(I~iuWwU~uFA>ttElQfgT3zj?r
z*R*mr2ivn$lMWO7bRFWA3fm5q7E=6J#dF7;FK_jb3loa?Za$6LkJIEIugSPWp`$hW
zoBR;och7;q28eZB_T;~?dGZ9Cpf*ckry-J1Q4D=5dK1e(+VQ?R<>o^CKD%&%?si#B
zr#=CNe=^3#@IpNWEUUfs>aIZ~om%ZHS7mQ93yCQI+Ex<uf%5K2;4omgMYgX>r{Rws
zknO25c<0V^OCHUlE5BqHBIWxF^L^Gy67r1W+)keHKthAG{jXNx<|`6T#vs$DM_qmu
zi4MYIUE*&<g)elNSa9){$v!0<6bsf?PA5p(!9$eoiucRNQ@#-i{ojsR$NLHUB>HO~
z3WK_-DTW%$;Yr23`PBLqae9l~ECo65uLMbc0FH9wd<BW<)wraXTmKkD02l|_Mb7hK
zrWvY2er=vF`HSRb=dWU<i*)Dxv|)q+nq*dgOzg+zjbwq8^}r|Ms`x)WB$FLZS6#AA
zO{1hLxRgEJZ*F$YCD|IqNeR!wXavkAxO&0VVsg0cP95wJ)QR$)d7S>}BjTdIz2c4<
zG|Y1~$G=5ya@E|)CQ;joo)Cuz_@c&t1F6<wl0EJoq5(!$RFXxmfJgTA@Vd_CN1Cy5
ziA?_%3jfY%1RpDM_AD{v@u?e<9e2e$+~}i$FMlrcWPZx-FnfP38Ea=PQN#YTC8Kfa
zxCdTsS9zkW9Fd0*TM3x()8`jq2zV7hqTxlg32ql6w9joNzZu;N=(=EAxFDf#CGHGA
zqgh`W$RCqlbom(Hr*wyZm7q@cdAnmdmUY(d+bq={muxn5hJ@sI`)~tOcUMI|Es?L`
z+NBt?K`yL9Y9rU@aE_hrh_quiD4z&u9tfAhlg&B~ovi5I#Nmrh0W`4PW%bRGb*;CZ
zWRU?&YzK><Dl7yeS*wXe&tGTB+G8Hy^;}RKwWdw_^+}f0t*_7`Jr=7}GEqmF$%C^#
ziow-ma}li-D}!%qGF1yO<`aP&T=UXdf`L5U6%_wea$}Cy)(SaoxY>TNAYVTqI>hiD
zIDLE$o^n;?A0s0#bwgDtUv7a(!1bW`l>UUuG;!Avo&X*2;G7Qh!)7zp!@+BNLs|RQ
zOG?sos)rgfuNJCPW8Y69jUX@7bnkfyLgNMq6K;|=Hk5-}e9Yq`#zn8`eus$~V2!3d
zY(Ah`Ijtt=qYJhMm6p*CNtc7a*oMzi(k-%7K28OvLYES)C2~GX-Vj6>TF`xG@zwhY
zPY96B+}%3=Kw(QdNz>|6+FoN^Rc$Zek`SAq_{9;FlG1pdc&@=&7mf6cMK67*Trz6<
zDBbwSn}Ut@+ZlPC!9u7Tma^b2tBs|N=k&#3BFyW7;||}@H`bBT#`9Xgw;B+at8{|z
z+$8&3QeLQt)I3Xcp%Jh*h;G1ZE?J{ucay7!??-w4fgTWyDd6!m$+`zb^B+31t)dtc
zD5^1tNythSxzdrY?ga6&@;e`wZR2#r^$wP1D_O8GC0I}1+%WMit@u*PBc+p(Li3O#
z8727{Lg&h$;UR`8xBAo1QZ)YbBzbau$Lwb;Z2_V5wO$w1%a_e6?sg>Q07{ZqOZMY~
zWgohRd~Zmj9>qs=G@5{XdKGQgPF`8Z3mW=6swS{5$hZuI5+$#&r7Hxon{X1bzTCAB
zYiTR1i%It5pQM`lb3hN~zChy7kG+>)bG0|C?kDw)6l#QKasx(=vOV!dv;=l~De%(D
z1u(`DDnOgbzc0qhO6vPajr<{WnBmR4UJJA{@APtOC_fJwZy-f;$R~GUC$;orOlRB!
zL%V^25?j-^y&FB7ymQ4k%33Xd{Ftes9n>PjB}C}!t1ZhS(^5;qn5ui9ZDD|9&?M!Q
zb31xFAQ+2XO&K2<Or+t=P0#o#Z`9t;oA)wRt~mWAn|5m%*b-J9Bt_k6(qb`Kh`}{Q
zR%02`^Bv~kgoEXY{?@g1d6x<BW)Z3v>uD+7z5?i<#2)7OI3euU$5-#s&21s_PPy8~
zKjZGHz1glF<1saAQCOJTmlF?aUrJ(7(XlXoC|N7zA*v|$?n(H!Fo*Ke*dnjTU>;q_
zXG<bbyGv9O84tR7X9w}It#|&DIk$<Y-5S|uNyoFsSfdB5F>UTJPP)%jTcb*zGw(Z6
zVLm<doO6^S*`vK@IH%Qh?}izvGsTBGn*yf_v^b$J5zE4>oyyiq+S+dY5t0{@yZZ9#
zB|C?^RrO&aPl@S1q1nBnf2h*VB*1hZzsok6>oCn<x3VEYp*zS1vT_8(TJsqoJ1R!~
ztn0!MSO8^h?-X79&`sO{vKloVq?oOvUu@?p`-ONTdRV2S&mbF1%iGDi>a2G1)Q;}m
z%b~mkiy=`+=&lxyth2W<{1mGD%sWGZqn~WUb2eu7M<vcRC<1koXq8m)Z4SPC$xzR{
z;iYadz_-oX;UVskb#*8VRAj`nGz2i=2iMM=NvDmco1g0_kRi7=ON!2VT|0`=B`Jv#
zmGT0m;*#XiB4m?ml4G=~ymiYrOm{jWHV(%b+2fZW<hss>xsML04lCd9JO`f7p=6l~
uFTg~BM)@t;-^nj$GT^KwS2A~)^GONIsT;umQg#QOlZCQm7Z%VRb^IUVQDuMt

literal 0
HcmV?d00001

diff --git a/doc/check-perpetual-license.md b/doc/check-perpetual-license.md
new file mode 100644
index 00000000..d4440045
--- /dev/null
+++ b/doc/check-perpetual-license.md
@@ -0,0 +1,70 @@
+Check perpetual license on CHR
+==============================
+
+[![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
+[![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
+[![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
+
+[⬅️ Go back to main README](../README.md)
+
+> ℹ️ **Info**: This script can not be used on its own but requires the base
+> installation. See [main README](../README.md) for details.
+
+Description
+-----------
+
+On *Cloud Hosted Router* (*CHR*) the licensing is perpetual: Buy once, use
+forever - but it needs regular renewal. This script checks licensing state
+and sends a notification to warn before expiration.
+
+### Sample notification
+
+![check-perpetual-license notification](check-perpetual-license.d/notification.avif)
+
+Requirements and installation
+-----------------------------
+
+Just install the script:
+
+    $ScriptInstallUpdate check-perpetual-license;
+
+And add a scheduler for automatic update notification:
+
+    /system/scheduler/add interval=1d name=check-perpetual-license on-event="/system/script/run check-perpetual-license;" start-time=startup;
+
+Configuration
+-------------
+
+No extra configuration is required for this script, but notification
+settings are required for
+[e-mail](mod/notification-email.md),
+[matrix](mod/notification-matrix.md),
+[ntfy](mod/notification-ntfy.md) and/or
+[telegram](mod/notification-telegram.md).
+
+Usage and invocation
+--------------------
+
+Be notified when run from scheduler or run it manually:
+
+    /system/script/run check-perpetual-license;
+
+Tips & Tricks
+-------------
+
+The script checks for full connectivity before acting, so scheduling at
+startup is perfectly valid:
+
+    /system/scheduler/add name=check-perpetual-license@startup on-event="/system/script/run check-perpetual-license;" start-time=startup;
+
+See also
+--------
+
+* [Notify on RouterOS update](check-routeros-update.md)
+
+---
+[⬅️ Go back to main README](../README.md)  
+[⬆️ Go back to top](#top)
diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index 926b4aaa..b6c716cb 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -99,6 +99,7 @@ startup is perfectly valid:
 See also
 --------
 
+* [Check perpetual license on CHR](check-perpetual-license.md)
 * [Automatically upgrade firmware and reboot](firmware-upgrade-reboot.md)
 * [Manage system update](packages-update.md)
 
diff --git a/global-functions.rsc b/global-functions.rsc
index 8ae7bb8e..8ade79bf 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -15,7 +15,7 @@
 # Git commit id & info, expected configuration version
 :global CommitId "unknown";
 :global CommitInfo "unknown";
-:global ExpectedConfigVersion 135;
+:global ExpectedConfigVersion 136;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 459326f3..55b41650 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -60,6 +60,7 @@
   133="Updated the default configuration for 'fw-addr-lists', deprecated lists were removed, a collective list was added.";
   134="Enhanced 'mod/notification-telegram' and 'telegram-chat' to support topics in groups.";
   135="Introduced helper function '\$GetTelegramChatId' for 'mod/notification-telegram' which helps retrieve information.";
+  136="Introduced script 'check-perpetual-license' to check for license state on CHR.";
 };
 
 # Migration steps to be applied on script updates

From cdfb086b490cafd685e947433515e43dc5547a62 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 31 Mar 2025 11:19:23 +0200
Subject: [PATCH 567/988] mod/notification-telegram: fix override quirk

IDs for chat and thread can be overridden. Overriding the chat probably
makes the thread invalid - so ignore that then.
---
 mod/notification-telegram.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 68e913f6..5ef353b4 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -151,7 +151,8 @@
   :local ChatId [ $EitherOr ($Notification->"chatid") \
     [ $EitherOr ($TelegramChatIdOverride->($Notification->"origin")) $TelegramChatId ] ];
   :local ThreadId [ $EitherOr ($Notification->"threadid") \
-    [ $EitherOr ($TelegramThreadIdOverride->($Notification->"origin")) $TelegramThreadId ] ];
+    [ $EitherOr ($TelegramThreadIdOverride->($Notification->"origin")) \
+    [ $IfThenElse ([ :len ($TelegramChatIdOverride->($Notification->"origin")) ] = 0) $TelegramThreadId ] ] ];
   :local TokenId [ $EitherOr ($TelegramTokenIdOverride->($Notification->"origin")) $TelegramTokenId ];
 
   :if ([ :len $TokenId ] = 0 || [ :len $ChatId ] = 0) do={

From b560ea4b7d3da75b5f54633eea6a5fb7472d5bd6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 31 Mar 2025 14:30:56 +0200
Subject: [PATCH 568/988] logo: strip some bytes...

... by just re-compressing/re-encoding.
---
 logo.avif | Bin 2001 -> 1744 bytes
 logo.png  | Bin 4428 -> 4406 bytes
 2 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/logo.avif b/logo.avif
index 399a2f5ad184fabd7e8127b1e2f1bd994ac7a6b4..956fea8a115623093ec4aef204d69a1a29b53db4 100644
GIT binary patch
delta 843
zcmV-R1GN0n56}&eBMpXaWprTx00000001G8FdUInClmsK000C}00IC2009610j>Z5
z0MoIKApw5{Ds5z8bP@mx1{fKy-(gTP#sNfR0frRY%c{{n{hP|N?3Uaqj0L}}@qNfO
zUB2aZ8Kr1U{|(j(T$tyh0vOM1q|wTT0X(pK|2Cc9mV0U>am(|lq5{?-y_i?Zr%fu$
zhCDQU=SG}pl+0lejjhL_%w5(HDH(E*okS>|c<+C}P|5$Cf3i?w@OMvy-89`L;#}oM
z#2YLk@1}eq#BCuEpbjI5&bIPhY)ZN!fIW7@!JRM9tZSY=8tl(Zn50AhCeIn}bsHqt
zVjhC`$G`d1oc$}4gYH%lC=vh)2{;+A-(dj_29Pqp2t;H6VTKq`-8AXdR-Lqe?ll_b
zFZZ*n0~`W>ozo$$2fsVSgxpZ#`gr)>n>xw_(#K$B*CM4aHkwEn#JzNubEuV$7=|bA
z+ROhT#2ittG2`z=D|OK4zz~ip#0<R?xeq>=ynf)@69qgTUtc0+U0uVpYVnm_j8zn0
zJjAjZ9#{~&B=BfFlV5^?`+Bg~S3lvt=dZ1bMkPXj%M`I5p6v2f7J3b@(m+zN6G0CG
z{>v?H18V1~@QQG}uh>+c4cY33da3fQ@firsI+uS(o8t{=M<jZIcuSqkHeCgdd^JCJ
z2($CIF??zzC%Os*TW^u?l*F<nN}opSc{v3>tAATH=Lm)TuQA<Lb<xFG;kgixMeiO-
z@@|%YRkmog<n4fOI7TiFPL_mm=2kELq3jzSsm3|Sz534QXMYcA!Q2`cDFyW8kL?n*
zo&9H_j=c}I9?L6sbP%sGToXs9PUoz;J8x(6)CyaIYU0<UC9TkzAy=8aXVvT~&bYL(
zsv&gu%kT<!n%rgy(rKoNpSa)#0cHZy7q6**pY24<X_YZO?IO5bMuGM8oOyTh6q}e9
zIMO37Lb>PYya;@v3#M7IYcTEH*jc21m6D)sW-ivCX~$+cSN*r2BpR|Tb22mj|3DNH
zT_*pR4q1Qq{z@4w3$5CBwN)%tU^mL(%3q*e9|R8b<56<!J4oU$|Kl)a){r37;cg`o
VM6DOIGvR4A@)cZDn}_tT;^2sbkbnRH

delta 1081
zcmV-91jhT&4bcyfBMpshWprTx00000001bFFdPSLX<}h^X=ag3ClmvQ000C_00IC2
z009610kr@C0nxFCApw5|ByD72bP@mx1{fKy-(gTP!~;YC0NqNr!~%rchQ<7C_gm=G
z(E-~6%Iv7n{<N8*t_q|A;W<MT+V+aSJ3{47=Ab1Z5SYt3!@Rrz;wf8lj@AO_$2E|j
zvtDuC$R<Ae{zS@T(t}CH7D|!}^M_fIcit6XcK*B5TV`>wQ^9`(%3tH$y{UL2-whDf
z+PTBdBt(eDqSo^hFgbp(q)#zr2WYWtTbv|w_sz`3(xK`HZ^Wld@#0fDAk(E3KqjJV
zz@p4**S2B5Axq>5d?~(DcWcfn@0Gs-wjg(jH~rSuRt;kgdOR8IFNG#knQ0V1TZ3~i
z{TlO|tkVnTj)H$<o&ax<j7sWX_Ea-;;%U0#61Ov|3rXP(Ev5Ef@(Uo{KP?7~u*f!G
z;afW+2y6+bLgau18>$Qb#lavhGSviyk4IJ-g^UwjH~xR7&7SpHW^fe`YmIBX?2Aqr
zu8_1h^hG$GGy=y`3LIlI`rBGbwh2kd13ji1;2ei$0-$M4jMe@bt5xL|t${H^4RE-Q
zpG%uN7Z!`MfEbi_9^@tGJyxq8x;(wr1VJtc5nJr#OzwsX=}tN(;LpDRJjy5|ddREv
zd?KC`i%f&ZEB@53j<RglFIiC-!V&-q2{;+A-(dj_29PqlvycKZ0)L(et6iDss>3wi
zl_RoNS*Raoq@rbLZm4~lEaA3srZ@-8A(nYyxW!PEbvL)zS>NC;=@2O@pkAzFEw>>R
z#!t2z-sGcGhBZRmWj9_an-~xQN<Rg4K$;zK&Ow4JUV@mpa-uJ(_BG^Rw6e#`FFkD<
z?cq(Ecl7j)n-nXYM}PW-Wq48iE!PwO>%q|fOQuJ>IA2Jewfl0ctt7)TkciXY5*Z#$
zk8~jc#NV#gn;>c9ZkhO(Xx%U9!h%ElLo)Jw;CDbsZYyeFmmdxIYAGz#837LAKx{w{
z0=K5F+bLRn>s#zg)nWKKMmn}b<awIVo_WX$8<d&*L#hsfoPUW15ZIa~Y;6gSXy*Dn
zi*39ge7oU)$YPkfpaii2*^H)j<MyuF#JQEQyAJksKwH*dzgyS%>cWI!ZYkBtH^BNq
zrrSDz_1XfK{W_rx^Krge(1;-v#Q@xCU9FIF>7gC9{6qS+MHKcIz<(aA&ha=2IZ8F9
z#8QUWD}S?<Ie(Zlo-%?n(>cFpN9SU5-vgikk;H8#n@Tx5!|`458gpN4b2BUT#>w7=
z0CWfOO%ucw<r+J}lsm~CxMi!>+c?ki!hG2fhgu3_1Qnfq#WPK_7b_d|_7AftXk0qc
zYNiQDrFZq9_kZ@#=~`%9@4ls-Dt-YZ>XTWJLq|SqWe(SR-hI>BfoA9!n*Y(DvhMy1

diff --git a/logo.png b/logo.png
index d97b75dc7d39e2c9e6ff6339d47711e97d6be1f0..7bec10e5242bbc518dc3d730c44425295b283433 100644
GIT binary patch
delta 4394
zcmV+_5!LR@BDNxsHGdH6Nkl<Zc-rimS!h&O7{?>NG(~-|eJ!oKChq$Z6W5rah)YZg
zf)GT(6?bs~l_DtOMyavnL8veKqDFlYq)ikbLMfV{B4kgO5E24Sntl0te*-t1_?>$*
z4RdG6)Ia<gn7QW;^Zm~GzVDnn2}6;HeCasH@h!)Nj{kD}w}1S9#Bcr6@h^^laGdS<
zi-e#hBAJdKJMNNC`dGxIz;Q+pflqb(n|xBZ`qgntBm)1r<9x?`GR#z0S10S&ub1rX
zY+rBKutDCuc_RUcnEmKDaj3x`=lHEeP~F|#l9`z)TefUb-nw<GWMpJWRaKQ5_x$;D
z*|cesWMyTAynk)mwgJw`$x&k(8X6=uHC5KES>x+Pixx>qNr?ogQpaEa*Wf3IicEw>
zaOcgNCrg$rk)=zQ_Iuf~W&LhxX;I@YUc49zW?EWW$SYQ?2zlkol_786zFm!JYir}0
zK>_fc6%`c{u>NqI6mIapa$G9`=;_m^GH1>lS-f~L5PuYib?erNO~;NM1Ar%ly?ghH
zO{-R|8WaHctgo+^D2NIDO*lFKtpub?moCY|g$n_I6$o;&O}lpOlI6>nV=IVLr%s7Y
z>FMc%0^lC4t*sIzmH5_#P{9pQ$B!Q;=ekxPcJJOTHj(F3Qc|oCc)fb{s@Oz<UA=m>
zF923hUw>azdyG7<;HL!K?J$#B0oV!xKsK#iyA}XgfmpC$fjoQmOl;b`c{2cfA+SoK
zEMlDYaqve(qtB;<Az&B?CJbILU%sryG&eW1I@}_yAONnm)>^ViY19Gi34vBM1}fG&
z+$e}2Jb(Ut04NZ%XU~==PoAhTuV25GxpU{b-G7n-K^p4m=@E<Qjz}>k1O<Xs5+kLX
z03J((RZvhs$77}%T2KIB1;Xr(%)-ojj5RwZ69VtMFu4EAmoLRtZf-6Bd?Bz(Vx))W
z!CF_u@BZ+iOrJiT*=w30xwe5&HNw&@VQWg_o-ba!Fl&y{uG%56N@Ao=$72ETt)O54
zFn_aMhYJD#Ljj=x?Ay1`x^Xihuu5X6ECAdJ3P5slGPxZO9YpvL6o5mA4gtUy0<CWh
z^*sQJf&!3~lq9oe%>saFKM(*27leYqeGCA!wZ@*o4uMq?L;VbZ--7}$ZQ3*dm<|KP
z&{qTZG69@9bB5aB3xQP<L)8M{9|=Gl@qZpTa6pb6If4n0Cy1FdXNFERj~+cbz<c)W
z;aWggArN@3W2WPS2M<bldAYbcfBwAh5e5Jl7eh5CMB}WVtv&z<v}+RtE2X%&SdC+c
zOCk4K4Wtksaf(WD_JzPIiJ|%cfC7IwLeOW-n1K}tQb$u$lNxvB$`v;)St0NY!GBLT
zZ{B2;_(EWn#8OcKP*_+flP6DRHUmI`ATTzaIB`PN1{1>0ojb)(ckkXMRhjz*1%XxK
zq4)uC?b<auA^>0oV&le*Vi7GOtHZNElmC6h(FWH8zzTua>({S~U2z29<jIo&U|-O0
z6U2@kJG>6>s1aTe2A#dHUcF+x+JCUQ>4^95+_@um#Ss8zG61jzgjXxbM#<W;0swFi
z9y|~~y?ghLF$CHQfjaW&(Ic@djsP%|>2$CS#DxnN)R>Nr4)Q!j+6sZ%QC3zaeyXmn
z23A-{7g})yfOc`})TtN<CX7&VzIX4Q8uQ`92R<jzRtRjuIy*bXPmPU@?tiAu3IUL%
zrKMt5oB-(R>I(hPDO08ZK!M=>_wV1Uarf`v=W_tqAlRQ|=~YDFJ&!I}VU?AY;-UBe
z;OtD9<pdfl5CpTmy<LqXEg9{q+PtxI4o9RK0?q%5_V3@%Zkd$mK4<XzN5t?1z!5}V
zUS7XB>>59QJP=%)AP5fEDSy+N8ttlD3H*iS_U+pt=jZ23Z*Q+y#4!lP*jgVBA3kir
zR~nuGPM<#AALvPwCMjD$m}yBBXazy1Bf1&tf$vWI?Af!-c)pM4z|<WBnoYwTfEo0O
z6DMK?B0>-h0J{F%xN$?qj2R;d2?@%;D=I1yyW#|Z6L{qaKrrh8X@3j=>NtGDgb4(C
zQ1e{4rlv*)D$W294A%<8;1B@d1;GSB`^pAR1$o@ak@DT>(el&Sv64G#lzcW~#DLEe
z6BFg!xpVR_H|NruL=?sGw6<m1(UiX5uZ@X`YyAc;jFqMBf;BEoNUX*cEMP}8Du%?6
zxIyBk_`*`_`_XD$z<&z90pSDi36AF<IC#=Kmu1b&O-^WLm@fXmd(Z3M;UCBV15glb
zD?!%^M*Bj$A`PHYsnA&#R||WNg}&uDw9jtnV>nEo8Nj!h87fUr(-jtd-~=dSN9}f-
zh<pkFeV>hu4T7z&uNwf65$V6z*4FSnc}DK{g@9{%wEzgRntw10EJB`PyT-HrMJPmj
zV`H?>U=A3<r-=#rGBrhj@MCU{o-&9FBO|0CM59q6@+knc2XH0`hQqiJ)v^lE3P3ML
zOrFD8PzAtrMUhAZ-|HE=p2=jgC*T6l`bUF<^lE5`-mti3$00y?&o1c0_&5Q=R~G*J
z>@5A9pQpp6C4aij*9HV0gKIXM{sf>$E|-Jwwt$RW-gbr*0IaJ3#nj1xmpcT&T^4_r
zA(Xlh-tsDV$L^-$x^&QWMS2w+EiTgU<z>3$IPyOb#QhHd$HrAnV1U@(-nKRGykdbs
z@Z7~h91!s`JcD0$O;&*bz$%bffK>nhhYJhzi&w#Q6@Ndtxbr`NSS%)i)e8iwWLxvj
z3INxO#bRFo_gQd={(5*ApI8A_0B}PBAff=|^LhURKz<DoH3V&mM8ej*!*ezO(ps<r
zc<49~9KIhW;!7a5u7HT^1`7brUW$+cLJUE;P$+l>aoo27K;XvvUwr{Q?qod>U4+NX
zhxihNb$<*9<_f@(afl)UY7hdTUauR^l}aVV2O9u&6vYnUNhjNZ;4l#$Ghf8lS&#(b
zU;*Ghy9kF*0|Z(KUhih5QYkII0YDu^u>#1k;BYYzTN$ny;>+wmURj|?kb-cnR-?_$
zP2}{RwzaiI9s{Qo)Vsi@A>Wr_OG8r(0PY1sYk$KvaXVUk%>F;Ct8{sEG+1fqX%1b8
zEpht!yc1vz6XD@@MEqkG|IXxO@Cvch9IaN1#@Wvcgdr}(ZXoOF`gk!dJlxJRzJD<k
z3QjBHe-1R`T$M_~!dwmCWB-5D6&wb4v&Rswx~|cT<4qfXH{)!hTCEcHd2yNz9n(xE
zLw}7%gUn&RC0Q<)2{i+@7ja@51s=8&aV?w8>Rvu-1e|&{+R^8^AbY@pcbA2~84lAJ
zgVFaL$HA@{Hu8J*2!5j?ola9c9w!(I$DN(O?cFhJ97hxf@HQz!+K}%NQU`)t7Xf3i
zF)rMv@dq$=<IdPbU>jF97@UyKU~sKipMN4mQ6Ug0pgJ3V#UB=CXLeV2ds>rw@Q`%6
zyWRc&XWqPd^XARZ9dq~m`Sb4d^mMlbTwGjq!Uwl+-|nKfZrzIdpGEkh(1zfd5Q3;>
z)ZgOvm23v<!aN>+KaZ%E*643xX>ldw*i{*KRv-|#V`|V(kq|3n63JvvyLPfDihtC`
zY@JnT1W9UKEKYz7X3Kxc&2)n_X@dZH_3Bj@u^i}qV)j6a2E03W?iAM$6-5l!vj%#Z
zWnE@WeEj&)8bNbO(ly?{f1gEq8}_)fwQW#C8^x*DOgg#H=0A%Q;3nxH5pfe=ym-<1
z8z3|Q^~tby&=V#l1VzVyr-K_m+<%wN7f3icIq8@e_bvo-?b@~O_3PKbN^b$^lznKe
zRCoX5Dw_i>N<fPQxi@TbwhU2#6hvs%2L}gzH?j|E33#ca+n-$H@#Du`L-bgHd#0%b
z(CUT{KX2T)u^0hvl2(bhdGn@tzSbWdBElG85Kb1e&z2z12R`6a6Ty~Auz#r=$N_&F
z1jyKv2D2yuEfUy550D;F5E1ooJPpET19F1u5o|XCo8Y^zqobpiL!o-tMjOLvp8&tV
zefxINF(5ZtkPspQcFa<Rh!n{%<Me;v71{^hHJLX-GXB0u>VpRly1RGp8npF{fbadO
zAygACrF)!0fY<dVo}NjX-+#Ra5h1|uT-3$Apxm6FwALHaBWgt0p&lFD2XBZ7w%m53
zX5{tFn>SoS@7J<h=_Ll`n4T5^{#MMR=t=RK4D#k22#|Z~noARqmJt$0i2%CRVQc`p
z7Q{}vdBTS-OjN0p?JA<!_J+82+4@TYfNJewEcw_xBIDUk2#8%Qh<_LuAIx48b}m|N
z!q4d$6=nBjSZr&{tZ{0z_51nh)2D8R?2G_|QJ;h%BDDTdJ4{}_e92}bAv#Ei*X$+Z
zF>N3gf%K@c)}Mrd)e!)6CItz!)*GakPni{}?^%o&Ek%a!zJLGzr3$V-di2QkTHsS@
zit8jGu2?}rj|dO=?0?zhA}m^4NGP;Hi~*N7#rv=TG&NJB27U-YvShFI5)dD_MugWy
zF(-<Raxq)c3L$NR42JUl8^RfAflm>%&IOqe!1wKuP!KV*3RUVl0J89+W-21YV`}N<
zT-6r%aWX_V*GoWVeRQBVBp^3i9zJ{+531BQF~$4%=L7DjK!4mA_@2Y=nROD7N`(ap
zJt8)68HI;|q&E~U?F{ufB#84D1Qg(xVF!iA*GoW(9#x3g)MxkbHs6_rGAY2kteX54
zCMduUfKUBxS#q5O09ecFkx&p(5U`owZr#AFv~(X!1#VxxKh@DQ2-kq`?;n<-w{8Mx
zjR*uRAk2vXTz|*_@R%Zi@85SrTi{cl5z<&E0a|$KZ`O!Fz`~+Xhjm~;j;hjW5%<<O
zzaaA*A(ZtJkeZu4BKjokgaGp4!v}+P4fp^oWZlo2@R=I$QG>OyXmtc=;euIx5(*+N
zOMrBh!^6XFqVUxLIjZ;W-7C@<Yrxag5@NbWgu80Lf`6YoC4kn5m`gww<UO>9H|X+0
zrt|>z8i*}b`m6{?*MRS<-u~pt6A{!}Y0h|6#-^PUP$fbc`WfOO0T5RfIKGD+mR?c>
z^#J1G(~=v?Gb;8W93LOMRu%YwPm}wDL~9q4%Oq*Zb<$w;_^95ydjd)#<`AGPP2t8y
zlPcnSfq!5zN8rxjn<c>!_1>&K_eC@nfHmNwxwoPOGVOt{!C0zP{NqXqpi>FZx-)p^
z0c&K0kU44~X2)yUcK{3MQ-E)QPrXm?m`%XHS44m_UWx|`8BIdQ$<g}lQDd%J%ZYky
z0s1)bCHT~L`OLd_?`9Qly|^j@&d<-8mHy<eMt{aEQrK;wY4<xKN|srp_PG-HcB?PI
z4*@d@g8!4^-B&?CM5eKYmD((O4k^Ba8JLryAj?^ZB5|(St)Ax0GTDAJ<j*<f>k(kJ
zXe<&rmw?!01zu%DYr%Q&DTKt1%hqnMjEy@4dQRcpG+I5<o$_Q*SN`l$<?El$*!d{W
ze}7a}E8Ik+cvzE_J)Lo)zv2dPuZfmQNk_PAZb@WAn2X5qWS-(0rw%pXtxF4WNEEaB
zx6uI(KXoe?Zlt^*QBA5R?(*<8lfqp4?Ch-DqFhJ7*ZTvSuS5(|U*#mF-@Co+T7HFn
z2>7wv%dX{z;2#o>y1nd54u=l&{Qh%1x_|sL6c~S3J5lwZ+so4Ov~`~FmuBbPUX~Kc
ztY3_ss{M^Aa<`Xl%iog^_jdrjb&GB<+mgR>sQ+ZaR_6@#y==qmeA`C5Jtq9J_l_>@
z?L3Xm-$de~{?YAasvO4E+^RT+TRDeL9Ahs-v7O&C!(CLI1g*ZRaH^QLK}OK9`y>B|
kXZ6gU9R}A0)-HqPfARg9y0U=a)Bpeg07*qoM6N<$f=4knDF6Tf

delta 4397
zcmV+|5z_9qBFrL?HGdHSNkl<Zc-rimS!fkk7{_n%r7h}%?Q3b>HF4jUn7GCSMO<Q1
z5QHEKuDFZKgHi-V+$c4cJP7qgUyM;-1Zfk+hfs<pXb5Camk<&HO`3iAI=_Jl$2n)_
zCc|BF(LemTa5Hzp{eI_L&Y2quA`$u8a*pLYmWwR^WBFhCcz?uq{oC?ymVdIGZTYKE
zv?U^$mY-Pel}~bum=s#h2t`^Vl4|)6`K00Mcgrb}2>h3p^DPfbf~m2wQ8sPbB-z>7
zzTUifv%G!#R-zzc_Os<Lf(C!0<#!T6_4V~hW@e^r-@aY*jvYHBBO^m<Yiq@=7cXAO
z)~#D5D=W+P&VQXdKX6V?j=0s_+$^c7sj`0kdS5SHx>QO_OC^dbv;6HygP&|SnFx#E
zE?l@!mM>o}D^{!+^2(Jfhuq%YE^b}EeAy0WT3VXz)vH(AUbAM6?OnTeiCdkWom>+Z
z0ROYPx>};Fzbq#WH~8OJZjdPG*|TRdfBt+~wrm*?G=C5qH*OS@PM$mo08a=94jd4Z
z)~;O}76A8bYHE@ghz0%KaBBWLiIT2dxgtxJECB%4Kv0uS+PinJtXj1S8$p~sdsa+J
zPfrgEfO~XwbV!U;>f00Sh8snlI(3Sg>sSM^Z{I#Ki8`N>l469w>-Fo`#UvW+x^?S(
z0gyq1gMTrdG4i~EpAzM1hm}kQU?T_snY3ZU1^{3U#Nx$^<@xjHV$!y4+W_DTfh>u!
zh;f=b_@BjM&S!!lU>FE03|_BZy((_CwY8BQPLtLk0Is3I*s>^T^a1P%fl)OMD$#ei
zF%VyP(V|5F&_K+aH&32EeJXCfdGkgVELh-7OMe;&%20oQzZk@HM2S%$XduXvI4NBP
z@I)f4!oor(9<|gkf&u`$L1@#F)0laW&#DuX3W4_>7~KEWt5@PEH#Zjmz7WWgIH^EA
zSnHJttDvAjX3d(#>QzmU9GgIBJ;E?8VPi?+o-bd%RC|syu6jZsOX8#+%M$?by=aOU
z0Do4t<Kcn;KoAfbfP)7Q8aHk#1hOQK$^yV0iGl!-oSaN;$3Z}h6oLle=+UD9@P)wW
z8%O;JfMSV)0FacFBy;D^1%PTl5C9l12n_=FQ2;R3I(r6B2xLhd^(z4Wlqd)QGiS~O
zfa>rdf@gz$FBQP~^XKUez7WWgIH~~v|9?po#1Ze|!-wVg@#B~Pd4iZTXO4ZMdE&&0
z54?Z>ey#<C5dwkdI#xP9a^#3qRaJ?jix)5Y9$^50&&5$~p;(;tv(*Oxfp)BdAX7?8
zO2j30xHNLlY@merh*MOWvo8d)B#s&kNeslp5rRH@_H3+ypmemhwu)QVu3dA=l7A5b
z&k+1{`}S?J#1{ft5>LehKv7YVOq({1)eHa)1c5Q>^y$-DZ%`rZ*|SIdbpQT+N|m}_
z&>)Z{!IVG%Zrr%RL<9h=f!MNTix|X+NOpKOXzIU@INIQP02m?gdh_N@38X{<aOTVz
z0NDEi$0~^3yLWpX-q9nxAcS4LuYX^^=JVQy%_&E`fA8Ks38X{<z)A)HHh}ON1=%PW
zM^*p;?$M)1;-~lT-}4y)ZG=D{dHndX1X3aaU?nr@U=xT-moAB0-QC^Pd788l0==WM
zvQqq1S62tDutyhxlt=&=7iY|vfq|gHu$%LP2M@%pii!&UPN0nt*o5`;^nZw-T3TA1
zO`8z{Aj`_iB#;sXKyPoa{Y9rwpAG;G1n-xZmy25uA3o&o05Cx?KgrUwh`@UuU65fl
zH8m1U2?BtfDXW}7V>bwb+11r0E>V`8Dap8bW9K{^QECV@zbiU)=n%VQyCgc#8G`>J
zVw3{l2qG^p&#`^jHEGf$Ab&VkK@c3S)68h9jH_BE@DrB1ckkNH&(D{EfdMgyV-T9L
zu|FI;cFcw!OrsRQxpU`+0zGx=RLuquYFW}6v<5*hM@%#H1K*wag$oy0@%%rY1JieG
zXn{4_0jNQrGGz+ZKtu?FCjk1-ty{Nb{P^(_3WYQSuei8a0x3}d5Px`=BLP9}2b3`Y
zXvg7`Cr>8OVa;>l`uchqkrE96!EmgB2oC`OUJz6OjIV6qv>;C$Ge&+GH%@+;FhO$1
zj+M{<=iY2~lZc`?9x5#Zqk(>x(iYg5n7GzAaA8E2!h$s}Tp5ikAYn-~Du%?6xIyBk
z_=Tm`?~hjN0#@(_4Sx^76CBS!<s`S$xy-Je&Ph%nGYpIW@7{CHJ@<~!cjSIB7^G6E
zq=0m=vkX9ipqmNmTEVt`A)!bG(CKvOJd3Ledx3?%V;Ho}Vd!%tLSGrckHtl5EiBMA
z7Tsq7h3aTD8j+*96#)7^$z+n?iA3TU08~Wk_jo*x-^nv_e}5tbTvKNYfS{_0u)reZ
zIrbYo>R$x{v=s``HiOw=2w!Gr>D&A~0m854WqQsaF3rpwfso7P$kE&i0PO*s34-G=
zE=1ML0<;3qixHRSa28Ym*oLBXI!*YUIJ%z2Vv$6^D3AIlQ&aTD@27VxZrd;j5I%AU
z`V<ZmAbe-xe}675(eITN+Kt8NE?@HrJO+1g;ILEcRsgEiYBdP2OUS6@b!SKcKsyVt
zn6esP?hpX?S^Q0g&>BN{&$HkIhntRR(#|*(sk2~jb(Q|Et<e<*CI5jW?qKc*fMer!
zYXSj~&1QAYJG)#U5Nvm`kOxG(3XkB|W0zSV05A(A7k^+D0KjfEN`H73+*I-h7IzNj
zegOG=UJ|Pv2&|HI%{wgsTyHj;69GJA!6EwF>1ljo2512w3<-d=0-#>6lY_Y*0P1Uq
zXoVnNC=_(fJ3OZYAgu*0fX9Xb!4do6BEBSI?F>kprndm#?4<}PAjFY`8;yot632ZV
z03>d_|9>?Rz|+I32cnDc82J!ilCYWsyg37KWE`T1fGP+9(C_!jYOPia`9TLjj-pHi
z@a(YKf#7fv9wT4GSF0dN!rlUaKD!8qPYVdN5NzMgDwoT;%^Nt5qBsJmvET?X5L<Oz
zvx+aHe}8?Q(q2l!y<U$}sT68@ThC-NWMep`fPX4T`yA?hF<lv2W&j8;5L$Iyldz+T
zkJ0~cV}q^+gWf7bPtw$dSd7chm*WI$brBw6N5tP}@$b#ed2b<hk~SO;Da>(RAozVg
zx`nD|9OK1R;SqLT@cqkyfOlFEr)g-$nMx@MkML^v0muKnvEXoon=OWL-88MuIBeRS
z?SE#R&br+$VV@VL+0ZeqR4OzW49LmwmSnr#Caf8-y@(UjSm0qh5!b5Ks@luP8Ud%C
zkF}#O@`CIUC*DmK{&plnAqJz~Hw@!{dw1|6#Sw)8{F)p?t|9+N$T=Z+%^@IyA|AYX
z^{(i}n<!aO@uVP_keeWQ-nf57i18o@27mUP3cte#onor1duDrD$vk-M?(EET_xDx3
zdiCnnt76s6LVo5WYE;~~aid(jcCAnoNB7U%J$Ue-ynFX<zXY6~o)+PQOP4N{=*5c{
zqyA?RzAm&OcqW7(Y8mynxP2>|!MZSyhu_a5YNa*$TUc6L2|0FE#+?-i1a40a`hO`B
zVueg1napX|P8LO-+L*1g3XLF1jf>?8kil&EFS(g+kS1*qAdeqEE)mOt-X~@cq-emq
zeED*zL{t<pT+bHhQQy_fn0WQ-l{JFVB}vzK@!~}m>228K&bGEeZQ3YKy=KzMg*N|L
zoB%gTHxdyy@!`XV{sssQK>s1b+JC`7n3NC{?Ez0WZv1dxHeVp&?c2A7d2#PTAm`4V
zD^H$00akhoK&Nd6Y^S>WA6MBNXi)-2NsxQPCTGhK1xQVVR(*7IG;||}ppF3^?QVZ^
zjXQVllo8Qm0q&Wm5<r_9KKwj?{`_JDxJlY1;=+Xs;`v&CbQ2NA0E2L{n16k?26!9b
z13ono95V?vbptuzp9KLj_N2iqO+cFjw$KBlN7O__JseMiu-Sl|pn3$`jlfax-Pg&<
z$(Tc-de=@H!|9L!zdw8SY|$|wH(8SqA_8{IQj>@j$uQ&e{~E}8+;C0iO^}SgFOqum
z=FM{D$`ymQo)Pf9KQ)9}!hfZ7k5dTny57XoGfDHi_aGt!_??ToxEGY0^OLrELwZDu
z2s_kcgNNX4B7!Zq-DouO`t<2jE}{2p*<<M?2IZKZF#`Opm`B}{;x!rM%{dSt_tZ5P
zCm<~&By@=Yy4GQA0J;{$PP%!*haU8dmQJ;+h+^A&g`?`$zli{#T7P@!B_EqdWIWpo
z0kMlU5u3&bv)6>3>sFiab9zQo*?k!nksY_p8mGFg-_O^tUzZuOHv$YsH3>BlT7TCL
zlShvpvDrw7ZY0EO_LA|Kb`Xm|dQ`Xdo7Hz@6#{_Hq#%K|dV}=x-mEb7J?rseRFUDk
zuV25uRl(KUw{N@ND1Z1=nqo&*At0{UMiN4V2fTlOauF7-EhN-BMvMWMH^uv~05mmI
zqX~WpK(b`7j;uyNeBdS#UK7QfDmKc+Y(?9Iv<Wg8%KIM?&cGP>6hR;7f=meD`wmE`
ziP)wJl|8?Jth}h%iU{$TR=PP?bqxGC8U5(yiUefVM>qBcaetj{<kqcQ@t|t$5mUd9
zf4<2b6^QGB?>YLrXI3I0l?peJ5F&PQ8HI;|q&HM9?JV^<B#86Z1dM{8u!BP59a)Wl
z6g_GYv8&JS;cdP%3uRJ(xviS~)h4J0p4N^;e_3)R0syRK4N0hps0rBBZ?|q>R$9A{
z(bk|!y+75_Gk*v-fgkQ4mZ8^?RSBR?A`q~EFed_VAp^iYMF8J_=!TAhPkly6qa&*j
zpoORYW|Ig6EG!CjSO*4VSCvkSxVN$M3o_3ULg~nA1f=F>h^R@}3jyTi%a;c07VrUB
z$a<JH;WI7ZqXz5FK)enCTDV}=kc66utqG8>a(sMTCVvWF9gtnUdi83Z#@Ga&rj`)X
z)e-Kh{R)2Wl>pizVjBW1$a`oHZ_wq1Oz8paH4w*C>9aZ<-2^_G)vmjD?~0(dN^{1m
zGB&M1K!XTn=x2zB1VCI_;P@VPSb9kv)B}izPfH$Eo>9FI;mw;juGIoQ;M3&(Ako@|
z<T6QGa(|sP7(G6!_pU-fO~f1ml%=WN*l1Ekd@m3z<_O#we6u9jRqwU-T#0BZ09(M<
z3+{CZWI6<2gRxYp_{XXQ(5VDy-5I>|fGsjY$Q(5gv*WGoJAeiBX~4I^r{1S`%qHNU
zl?ZUgOZ{LWqeDoS9If9THRft;IZ=;ofZhi_;D1Mbm(M(Z{(M&9*3-2J`0(Kavof6A
zwaA!73cD>d?S4C=WSKQ;pR0lIwfY+T5HP18_}?ksy#@ghnZ_1YTC?mqr1%bIU`~dD
zEN3B##JOg-dYUuKWc$sKKjxILM}XC$UL<lZ0kO#nyvm5yg7e^02#Fn+t=(A}>pBE_
z&NI-v>9u;KJLSosuKd|n<?HXw*!d{WzpJVh?jlk=tjWrr&Nwk#aRa#5L`$WlBiuF5
zNRu%T7k|?M4nLKTT)2_)f<!f`p19A$*Gvj??f38Bmot<f5%A^VfaX=iAoWE~Qu?hN
zWZ&`&>_fm0<skc(@9NX^PRc>{CC4zY3HbI?Ji7c76c~TgI#Kng9As&^H+G)z=Vs^S
zAWMm4*3WvUYJX*lTn=*9^4H|U{T)DW-J%@itZwAb9O^$=uvMIaevq>;J74z^Z;uH-
zAH1Wjy`6ip`MXG5)ZfcNrpj@{)!dng@0D{X;ur_11tz~{hP$XZ30i$s;Z!kggN&eI
n`TvM#^~|0f20sd{ZG+{%@%@>)@_Tfh00000NkvXXu0mjfd3Z1?


From 2cc47f56b95b36eb73ed9bbe3e74f28b4f37dccd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 2 Apr 2025 11:32:24 +0200
Subject: [PATCH 569/988] README: give the script names

---
 README.md | 102 +++++++++++++++++++++++++++---------------------------
 1 file changed, 51 insertions(+), 51 deletions(-)

diff --git a/README.md b/README.md
index ffbc27ed..1f7c8edd 100644
--- a/README.md
+++ b/README.md
@@ -214,61 +214,61 @@ There's much more to explore... Have fun!
 Available scripts
 -----------------
 
-* [Find and remove access list duplicates](doc/accesslist-duplicates.md)
-* [Upload backup to Mikrotik cloud](doc/backup-cloud.md)
-* [Send backup via e-mail](doc/backup-email.md)
-* [Save configuration to fallback partition](doc/backup-partition.md)
-* [Upload backup to server](doc/backup-upload.md)
-* [Download packages for CAP upgrade from CAPsMAN](doc/capsman-download-packages.md)
-* [Run rolling CAP upgrades from CAPsMAN](doc/capsman-rolling-upgrade.md)
-* [Renew locally issued certificates](doc/certificate-renew-issued.md)
-* [Renew certificates and notify on expiration](doc/check-certificates.md)
-* [Notify about health state](doc/check-health.md)
-* [Notify on LTE firmware upgrade](doc/check-lte-firmware-upgrade.md)
-* [Check perpetual license on CHR](doc/check-perpetual-license.md)
-* [Notify on RouterOS update](doc/check-routeros-update.md)
-* [Collect MAC addresses in wireless access list](doc/collect-wireless-mac.md)
-* [Use wireless network with daily psk](doc/daily-psk.md)
-* [Comment DHCP leases with info from access list](doc/dhcp-lease-comment.md)
-* [Create DNS records for DHCP leases](doc/dhcp-to-dns.md)
-* [Automatically upgrade firmware and reboot](doc/firmware-upgrade-reboot.md)
-* [Download, import and update firewall address-lists](doc/fw-addr-lists.md)
-* [Wait for global functions und modules](doc/global-wait.md)
-* [Send GPS position to server](doc/gps-track.md)
-* [Use WPA network with hotspot credentials](doc/hotspot-to-wpa.md)
-* [Create DNS records for IPSec peers](doc/ipsec-to-dns.md)
-* [Update configuration on IPv6 prefix change](doc/ipv6-update.md)
-* [Manage IP addresses with bridge status](doc/ip-addr-bridge.md)
-* [Run other scripts on DHCP lease](doc/lease-script.md)
-* [Manage LEDs dark mode](doc/leds-mode.md)
-* [Forward log messages via notification](doc/log-forward.md)
-* [Mode button with multiple presses](doc/mode-button.md)
-* [Manage DNS and DoH servers from netwatch](doc/netwatch-dns.md)
-* [Notify on host up and down](doc/netwatch-notify.md)
-* [Visualize OSPF state via LEDs](doc/ospf-to-leds.md)
-* [Manage system update](doc/packages-update.md)
-* [Run scripts on ppp connection](doc/ppp-on-up.md)
-* [Act on received SMS](doc/sms-action.md)
-* [Forward received SMS](doc/sms-forward.md)
-* [Play Super Mario theme](doc/super-mario-theme.md)
-* [Chat with your router and send commands via Telegram bot](doc/telegram-chat.md)
-* [Install LTE firmware upgrade](doc/unattended-lte-firmware-upgrade.md)
-* [Update GRE configuration with dynamic addresses](doc/update-gre-address.md)
-* [Update tunnelbroker configuration](doc/update-tunnelbroker.md)
+* [Find and remove access list duplicates](doc/accesslist-duplicates.md) (`accesslist-duplicates`)
+* [Upload backup to Mikrotik cloud](doc/backup-cloud.md) (`backup-cloud`)
+* [Send backup via e-mail](doc/backup-email.md) (`backup-email`)
+* [Save configuration to fallback partition](doc/backup-partition.md) (`backup-partition`)
+* [Upload backup to server](doc/backup-upload.md) (`backup-upload`)
+* [Download packages for CAP upgrade from CAPsMAN](doc/capsman-download-packages.md) (`capsman-download-packages`)
+* [Run rolling CAP upgrades from CAPsMAN](doc/capsman-rolling-upgrade.md) (`capsman-rolling-upgrade`)
+* [Renew locally issued certificates](doc/certificate-renew-issued.md) (`certificate-renew-issued`)
+* [Renew certificates and notify on expiration](doc/check-certificates.md) (`check-certificates`)
+* [Notify about health state](doc/check-health.md) (`check-health`)
+* [Notify on LTE firmware upgrade](doc/check-lte-firmware-upgrade.md) (`check-lte-firmware-upgrade`)
+* [Check perpetual license on CHR](doc/check-perpetual-license.md) (`check-perpetual-license`)
+* [Notify on RouterOS update](doc/check-routeros-update.md) (`check-routeros-update`)
+* [Collect MAC addresses in wireless access list](doc/collect-wireless-mac.md) (`collect-wireless-mac`)
+* [Use wireless network with daily psk](doc/daily-psk.md) (`daily-psk`)
+* [Comment DHCP leases with info from access list](doc/dhcp-lease-comment.md) (`dhcp-lease-comment`)
+* [Create DNS records for DHCP leases](doc/dhcp-to-dns.md) (`dhcp-to-dns`)
+* [Automatically upgrade firmware and reboot](doc/firmware-upgrade-reboot.md) (`firmware-upgrade-reboot`)
+* [Download, import and update firewall address-lists](doc/fw-addr-lists.md) (`fw-addr-lists`)
+* [Wait for global functions und modules](doc/global-wait.md) (`global-wait`)
+* [Send GPS position to server](doc/gps-track.md) (`gps-track`)
+* [Use WPA network with hotspot credentials](doc/hotspot-to-wpa.md) (`hotspot-to-wpa` & `hotspot-to-wpa-cleanup`)
+* [Create DNS records for IPSec peers](doc/ipsec-to-dns.md) (`ipsec-to-dns`)
+* [Update configuration on IPv6 prefix change](doc/ipv6-update.md) (`ipv6-update`)
+* [Manage IP addresses with bridge status](doc/ip-addr-bridge.md) (`ip-addr-bridge`)
+* [Run other scripts on DHCP lease](doc/lease-script.md) (`lease-script`)
+* [Manage LEDs dark mode](doc/leds-mode.md) (`leds-day-mode`, `leds-night-mode` & `leds-toggle-mode`)
+* [Forward log messages via notification](doc/log-forward.md) (`log-forward`)
+* [Mode button with multiple presses](doc/mode-button.md) (`mode-button`)
+* [Manage DNS and DoH servers from netwatch](doc/netwatch-dns.md) (`netwatch-dns`)
+* [Notify on host up and down](doc/netwatch-notify.md) (`netwatch-notify`)
+* [Visualize OSPF state via LEDs](doc/ospf-to-leds.md) (`ospf-to-leds`)
+* [Manage system update](doc/packages-update.md) (`packages-update`)
+* [Run scripts on ppp connection](doc/ppp-on-up.md) (`ppp-on-up`)
+* [Act on received SMS](doc/sms-action.md) (`sms-action`)
+* [Forward received SMS](doc/sms-forward.md) (`sms-forward`)
+* [Play Super Mario theme](doc/super-mario-theme.md) (`super-mario-theme`)
+* [Chat with your router and send commands via Telegram bot](doc/telegram-chat.md) (`telegram-chat`)
+* [Install LTE firmware upgrade](doc/unattended-lte-firmware-upgrade.md) (`unattended-lte-firmware-upgrade`)
+* [Update GRE configuration with dynamic addresses](doc/update-gre-address.md) (`update-gre-address`)
+* [Update tunnelbroker configuration](doc/update-tunnelbroker.md) (`update-tunnelbroker`)
 
 Available modules
 -----------------
 
-* [Manage ports in bridge](doc/mod/bridge-port-to.md)
-* [Manage VLANs on bridge ports](doc/mod/bridge-port-vlan.md)
-* [Inspect variables](doc/mod/inspectvar.md)
-* [IP address calculation](doc/mod/ipcalc.md)
-* [Send notifications via e-mail](doc/mod/notification-email.md)
-* [Send notifications via Matrix](doc/mod/notification-matrix.md)
-* [Send notifications via Ntfy](doc/mod/notification-ntfy.md)
-* [Send notifications via Telegram](doc/mod/notification-telegram.md)
-* [Download script and run it once](doc/mod/scriptrunonce.md)
-* [Import ssh keys for public key authentication](doc/mod/ssh-keys-import.md)
+* [Manage ports in bridge](doc/mod/bridge-port-to.md) (`mod/bridge-port-to`)
+* [Manage VLANs on bridge ports](doc/mod/bridge-port-vlan.md) (`mod/bridge-port-vlan`)
+* [Inspect variables](doc/mod/inspectvar.md) (`mod/inspectvar`)
+* [IP address calculation](doc/mod/ipcalc.md) (`mod/ipcalc`)
+* [Send notifications via e-mail](doc/mod/notification-email.md) (`mod/notification-email`)
+* [Send notifications via Matrix](doc/mod/notification-matrix.md) (`mod/notification-matrix`)
+* [Send notifications via Ntfy](doc/mod/notification-ntfy.md) (`mod/notification-ntfy`)
+* [Send notifications via Telegram](doc/mod/notification-telegram.md) (`mod/notification-telegram`)
+* [Download script and run it once](doc/mod/scriptrunonce.md) (`mod/scriptrunonce`)
+* [Import ssh keys for public key authentication](doc/mod/ssh-keys-import.md) (`mod/ssh-keys-import`)
 
 Installing custom scripts & modules
 -----------------------------------

From 27987a0d7cf54343aa15ee9dd23f7006b323bf2a Mon Sep 17 00:00:00 2001
From: Ilya Kulakov <kulakov.ilya@gmail.com>
Date: Mon, 7 Apr 2025 11:27:22 +0200
Subject: [PATCH 570/988] global-functions: $ScriptLock: fix second parameter

This broke with 1e8918fdaa5a30393e2004d1f5e4dff458936b67...

Fixes: https://github.com/eworm-de/routeros-scripts/issues/95
---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 8ade79bf..d6661223 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1388,7 +1388,7 @@
 # lock script against multiple invocation
 :set ScriptLock do={
   :local Script   [ :tostr $1 ];
-  :local WaitMax ([ :tonum $3 ] * 10);
+  :local WaitMax ([ :tonum $2 ] * 10);
 
   :global GetRandom20CharAlNum;
   :global IfThenElse;

From 67e7b11aa7def03e69ff9135653039eed220c619 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 8 Apr 2025 09:13:20 +0200
Subject: [PATCH 571/988] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index 0b35c40e..55d2205b 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -21,6 +21,7 @@ for details!
 * [Ben Harris](mailto:mail@bharr.is) (@bharrisau)
 * [Daniel Ziegenberg](mailto:daniel@ziegenberg.at) (@ziegenberg)
 * [Ignacio Serrano](mailto:ignic@ignic.com) (@ignic)
+* [Ilya Kulakov](mailto:kulakov.ilya@gmail.com) (@Kentzo)
 * [Michael Gisbers](mailto:michael@gisbers.de) (@mgisbers)
 * [Miquel Bonastre](mailto:mbonastre@yahoo.com) (@mbonastre)
 * @netravnen

From 314ba5796d05591ec4781b72222b95c9c8590928 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 8 Apr 2025 09:41:25 +0200
Subject: [PATCH 572/988] global-functions: $ScriptLock: increase interval with
 wait time

Inspired by: https://github.com/eworm-de/routeros-scripts/issues/95#issuecomment-2773513467
---
 global-functions.rsc | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index d6661223..d488c0f5 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1387,8 +1387,8 @@
 
 # lock script against multiple invocation
 :set ScriptLock do={
-  :local Script   [ :tostr $1 ];
-  :local WaitMax ([ :tonum $2 ] * 10);
+  :local Script  [ :tostr  $1 ];
+  :local WaitMax [ :totime $2 ];
 
   :global GetRandom20CharAlNum;
   :global IfThenElse;
@@ -1477,6 +1477,10 @@
     :set ($ScriptLockOrder->$Script) ({});
   }
 
+  :if ([ :typeof $WaitMax ] = "nil" ) do={
+    :set WaitMax 0s;
+  }
+
   :if ([ :len [ /system/script/find where name=$Script ] ] = 0) do={
     $LogPrint error $0 ("A script named '" . $Script . "' does not exist!");
     :error false;
@@ -1496,12 +1500,13 @@
   :local MyTicket [ $GetRandom20CharAlNum 6 ];
   $AddTicket $Script $MyTicket;
 
-  :local WaitCount 0;
-  :while ($WaitMax > $WaitCount && \
+  :local WaitInterval ($WaitMax / 20);
+  :local WaitTime $WaitMax;
+  :while ($WaitTime > 0 && \
       ([ $IsFirstTicket $Script $MyTicket ] = false || \
       [ $TicketCount $Script ] < [ $JobCount $Script ])) do={
-    :set WaitCount ($WaitCount + 1);
-    :delay 100ms;
+    :set WaitTime ($WaitTime - $WaitInterval);
+    :delay $WaitInterval;
   }
 
   :if ([ $IsFirstTicket $Script $MyTicket ] = true && \
@@ -1513,7 +1518,7 @@
 
   $RemoveTicket $Script $MyTicket;
   $LogPrint debug $0 ("Script '" . $Script . "' started more than once" . \
-    [ $IfThenElse ($WaitCount > 0) " and timed out waiting for lock" "" ] . "...");
+    [ $IfThenElse ($WaitTime < $WaitMax) " and timed out waiting for lock" "" ] . "...");
   :return false;
 }
 

From 019e10e1903e261ed1629a1db6ff2d64257916aa Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 7 Apr 2025 13:44:53 +0200
Subject: [PATCH 573/988] global-functions: $CertificateDownload: no infinite
 loop

We can not call $CertificateAvailable here, as that will most likely
cause an infinite loop. After all that's the certificate mkcert.org is
using. And it *is* available in this repository.
---
 global-functions.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index d488c0f5..30374aa3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -167,8 +167,8 @@
     $LogPrint warning $0 ("Failed downloading certificate with CommonName '" . $CommonName . \
       "' from repository! Trying fallback to mkcert.org...");
     :do {
-      :if ([ $CertificateAvailable "ISRG Root X1" ] = false) do={
-        $LogPrint error $0 ("Downloading required certificate failed.");
+      :if ([ :len [ /certificate/find where common-name="ISRG Root X1" ] ] = 0) do={
+        $LogPrint error $0 ("Required certificate is not available.");
         :return false;
       }
       /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $0 ] }) \

From e36613608c18bc4bcbc11e2d8da47f6c8c53c454 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 7 Apr 2025 14:14:00 +0200
Subject: [PATCH 574/988] global-functions: $CertificateNameByCN: support
 matching by fingerprint and name

---
 global-functions.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 30374aa3..f73ea14f 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -203,11 +203,12 @@
 
 # name a certificate by its common-name
 :set CertificateNameByCN do={
-  :local CommonName [ :tostr $1 ];
+  :local Match [ :tostr $1 ];
 
   :global CleanName;
 
-  :local Cert [ /certificate/find where common-name=$CommonName ];
+  :local Cert [ /certificate/find where (common-name=$Match or fingerprint=$Match or name=$Match) ];
+  :local CommonName [ /certificate/get $Cert common-name ];
   /certificate/set $Cert name=[ $CleanName $CommonName ];
 }
 

From 44fa91f5c47ec739a7f74aa2861ab58cc42bed39 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 7 Apr 2025 15:05:27 +0200
Subject: [PATCH 575/988] global-functions: $CertificateNameByCN: pick the
 first match only

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index f73ea14f..7b1c2143 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -207,7 +207,7 @@
 
   :global CleanName;
 
-  :local Cert [ /certificate/find where (common-name=$Match or fingerprint=$Match or name=$Match) ];
+  :local Cert ([ /certificate/find where (common-name=$Match or fingerprint=$Match or name=$Match) ]->0);
   :local CommonName [ /certificate/get $Cert common-name ];
   /certificate/set $Cert name=[ $CleanName $CommonName ];
 }

From c823ff87ed32beeea6e0a49d194178db9944693d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 8 Apr 2025 14:42:51 +0200
Subject: [PATCH 576/988] global-functions: $CertificateNameByCN: return false
 without match...

... and return true on success.
---
 global-functions.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 7b1c2143..d0145676 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -208,8 +208,12 @@
   :global CleanName;
 
   :local Cert ([ /certificate/find where (common-name=$Match or fingerprint=$Match or name=$Match) ]->0);
+  :if ([ :len $Cert ] = 0) do={
+    :return false;
+  }
   :local CommonName [ /certificate/get $Cert common-name ];
   /certificate/set $Cert name=[ $CleanName $CommonName ];
+  :return true;
 }
 
 # multiply given character(s)

From d4b5e1f5e7acb59bc365c6598749d1ec15c8cd36 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 10 Apr 2025 11:07:59 +0200
Subject: [PATCH 577/988] global-functions: $CertificateNameByCN: warn with no
 match

---
 global-functions.rsc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index d0145676..70269c80 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -206,9 +206,11 @@
   :local Match [ :tostr $1 ];
 
   :global CleanName;
+  :global LogPrint;
 
   :local Cert ([ /certificate/find where (common-name=$Match or fingerprint=$Match or name=$Match) ]->0);
   :if ([ :len $Cert ] = 0) do={
+    $LogPrint warning $0 ("No matching certificate found.");
     :return false;
   }
   :local CommonName [ /certificate/get $Cert common-name ];

From 75163f0d3cbd9daf6ff7977f60403beff1b9e76a Mon Sep 17 00:00:00 2001
From: Miquel Bonastre <mbonastre@yahoo.com>
Date: Mon, 7 Apr 2025 13:51:56 +0200
Subject: [PATCH 578/988] INITIAL-COMMANDS: support installation from custom
 server

Closes: https://github.com/eworm-de/routeros-scripts/pull/96

Co-authored-by: Christian Hesse <mail@eworm.de>
---
 INITIAL-COMMANDS.md | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 8b64d281..002e51af 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -17,23 +17,27 @@ Initial commands
 Run the complete base installation:
 
     {
-      /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/ISRG-Root-X2.pem" dst-path="isrg-root-x2.pem" as-value;
+      :local BaseUrl "https://git.eworm.de/cgit/routeros-scripts/plain/";
+      :local CertFileName "ISRG-Root-X2.pem";
+      :local CertFingerprint "69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
+
+      /tool/fetch ($BaseUrl . "certs/" . $CertFileName) dst-path=$CertFileName as-value;
       :delay 1s;
-      /certificate/import file-name="isrg-root-x2.pem" passphrase="";
-      :if ([ :len [ /certificate/find where fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470" ] ] != 1) do={
+      /certificate/import file-name=$CertFileName passphrase="";
+      :if ([ :len [ /certificate/find where fingerprint=$CertFingerprint ] ] != 1) do={
         :error "Something is wrong with your certificates!";
       };
       :delay 1s;
       /system/script/set name=("global-config-overlay-" . [ /system/clock/get date ] . "-" . [ /system/clock/get time ]) [ find where name="global-config-overlay" ];
       :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={
         /system/script/remove [ find where name=$Script ];
-        /system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ("https://git.eworm.de/cgit/routeros-scripts/plain/" . $Script . ".rsc") output=user as-value]->"data");
+        /system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ($BaseUrl . $Script . ".rsc") output=user as-value]->"data");
       };
       /system/script { run global-config; run global-functions; };
       /system/scheduler/remove [ find where name="global-scripts" ];
       /system/scheduler/add name="global-scripts" start-time=startup on-event="/system/script { run global-config; run global-functions; }";
       :global CertificateNameByCN;
-      $CertificateNameByCN "ISRG Root X2";
+      $CertificateNameByCN $CertFingerprint;
     };
 
 Then continue setup with

From 390e3653d714472f038814194239ad362c24baa9 Mon Sep 17 00:00:00 2001
From: Miquel Bonastre <mbonastre@yahoo.com>
Date: Mon, 7 Apr 2025 16:16:19 +0200
Subject: [PATCH 579/988] INITIAL-COMMANDS: add status output

Co-authored-by: Christian Hesse <mail@eworm.de>
---
 INITIAL-COMMANDS.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 002e51af..65b313b5 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -21,6 +21,7 @@ Run the complete base installation:
       :local CertFileName "ISRG-Root-X2.pem";
       :local CertFingerprint "69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
 
+      :put "Importing certificate...";
       /tool/fetch ($BaseUrl . "certs/" . $CertFileName) dst-path=$CertFileName as-value;
       :delay 1s;
       /certificate/import file-name=$CertFileName passphrase="";
@@ -28,14 +29,19 @@ Run the complete base installation:
         :error "Something is wrong with your certificates!";
       };
       :delay 1s;
+      :put "Renaming global-config-overlay, if exists...";
       /system/script/set name=("global-config-overlay-" . [ /system/clock/get date ] . "-" . [ /system/clock/get time ]) [ find where name="global-config-overlay" ];
       :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={
+        :put "Installing $Script...";
         /system/script/remove [ find where name=$Script ];
         /system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ($BaseUrl . $Script . ".rsc") output=user as-value]->"data");
       };
+      :put "Loading configuration and functions...";
       /system/script { run global-config; run global-functions; };
+      :put "Scheduling to load configuration and functions...";
       /system/scheduler/remove [ find where name="global-scripts" ];
       /system/scheduler/add name="global-scripts" start-time=startup on-event="/system/script { run global-config; run global-functions; }";
+      :put "Renaming certificate by its common-name...";
       :global CertificateNameByCN;
       $CertificateNameByCN $CertFingerprint;
     };

From d80f43a1c86760565d0e0a662ceb0de63636c61a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 11 Apr 2025 08:07:17 +0200
Subject: [PATCH 580/988] INITIAL-COMMANDS: fix typos

---
 INITIAL-COMMANDS.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 65b313b5..79773bd9 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -10,7 +10,7 @@ Initial commands
 
 [⬅️ Go back to main README](README.md)
 
-> ⚠️ **Warning**: These command are inteneded for initial setup. If you are
+> ⚠️ **Warning**: These commands are intended for initial setup. If you are
 > not aware of the procedure please follow
 > [the long way in detail](README.md#the-long-way-in-detail).
 

From 29bcd191ee7b4487cb9c909e6c7778767c6283f8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 17 Apr 2025 10:44:05 +0200
Subject: [PATCH 581/988] global-functions: $ScriptInstallUpdate: support
 downloading certificate...

... for individual scripts. Just add it in comment with
"certificate=...". This also works on installtion:

$ScriptInstallUpdate new-script "base-url=..., certificate=...";

Closes: https://github.com/eworm-de/routeros-scripts/pull/97
---
 global-functions.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 70269c80..72c36cdc 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1195,6 +1195,12 @@
         :error true;
       }
 
+      :if ([ :len ($ScriptInfo->"certificate") ] > 0) do={
+        :if ([ $CertificateAvailable ($ScriptInfo->"certificate") ] = false) do={
+          $LogPrint warning $0 ("Downloading certificate failed, trying without.");
+        }
+      }
+
       :do {
         :local BaseUrl [ $EitherOr ($ScriptInfo->"base-url") $ScriptUpdatesBaseUrl ];
         :local UrlSuffix [ $EitherOr ($ScriptInfo->"url-suffix") $ScriptUpdatesUrlSuffix ];

From b78df91b23a4e108ef0268c3c604191581d104ae Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 17 Apr 2025 22:22:05 +0200
Subject: [PATCH 582/988] README: and another hint on RouterOS version

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 1f7c8edd..e8e1b686 100644
--- a/README.md
+++ b/README.md
@@ -122,6 +122,9 @@ And finally load configuration and functions and add the scheduler.
 
 ![screenshot: run and schedule scripts](README.d/05-run-and-schedule-scripts.avif)
 
+> 💡️ **Hint**: You see complaints regarding syntax errors? Most likely the
+> RouterOS on your device is too old. Check for updates!
+
 ### Scheduled automatic updates
 
 The last step is optional: Add this scheduler **only** if you want the

From 405c329f39d402911ad5040f893a952df6407813 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:07:11 +0200
Subject: [PATCH 583/988] README: mark all external links

---
 README.md | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/README.md b/README.md
index e8e1b686..dcf9c283 100644
--- a/README.md
+++ b/README.md
@@ -10,9 +10,9 @@ RouterOS Scripts
 
 ![RouterOS Scripts Logo](logo.svg)
 
-[RouterOS](https://mikrotik.com/software) is the operating system developed
-by [MikroTik](https://mikrotik.com/aboutus) for networking tasks. This
-repository holds a number of [scripts](https://wiki.mikrotik.com/wiki/Manual:Scripting)
+[RouterOS ↗️](https://mikrotik.com/software) is the operating system developed
+by [MikroTik ↗️](https://mikrotik.com/aboutus) for networking tasks. This
+repository holds a number of [scripts ↗️](https://wiki.mikrotik.com/wiki/Manual:Scripting)
 to manage RouterOS devices or extend their functionality.
 
 *Use at your own risk*, pay attention to
@@ -35,7 +35,7 @@ Specific scripts may require even newer RouterOS version.
 > running RouterOS v6 switch to `routeros-v6` branch!
 
 Starting with RouterOS 7.17 the
-[device-mode](https://help.mikrotik.com/docs/spaces/ROS/pages/93749258/Device-mode)
+[device-mode ↗️](https://help.mikrotik.com/docs/spaces/ROS/pages/93749258/Device-mode)
 has been extended to give more fine-grained control over what features are
 available. You need to enable `scheduler` and `fetch` at least, specific
 scripts may require additional features.
@@ -61,9 +61,9 @@ First time users should take the long way below.
 ### Live presentation
 
 Want to see it in action? I've had a presentation [Repository based
-RouterOS script distribution](https://www.youtube.com/watch?v=B9neG3oAhcY)
+RouterOS script distribution ↗️](https://www.youtube.com/watch?v=B9neG3oAhcY)
 including demonstation recorded live at [MUM Europe
-2019](https://mum.mikrotik.com/2019/EU/) in Vienna.
+2019 ↗️](https://mum.mikrotik.com/2019/EU/) in Vienna.
 
 > ⚠️ **Warning**: Some details changed. So see the presentation, then follow
 > the steps below for up-to-date commands.
@@ -83,7 +83,7 @@ Note that the commands above do *not* verify server certificate, so if you
 want to be safe download with your workstations's browser and transfer the
 file to your MikroTik device.
 
-* [ISRG Root X2](https://letsencrypt.org/certs/isrg-root-x2.pem)
+* [ISRG Root X2 ↗️](https://letsencrypt.org/certs/isrg-root-x2.pem)
 
 Then we import the certificate.
 
@@ -194,7 +194,7 @@ Scheduler and events
 --------------------
 
 Most scripts are designed to run regularly from
-[scheduler](https://wiki.mikrotik.com/wiki/Manual:System/Scheduler). We just
+[scheduler ↗️](https://wiki.mikrotik.com/wiki/Manual:System/Scheduler). We just
 added `check-routeros-update`, so let's run it daily to make sure not to
 miss an update.
 
@@ -328,7 +328,7 @@ Possibly a scheduler and other configuration has to be removed as well.
 Contact
 -------
 
-We have a Telegram Group [RouterOS-Scripts](https://t.me/routeros_scripts)!
+We have a Telegram Group [RouterOS-Scripts ↗️](https://t.me/routeros_scripts)!
 
 [![RouterOS Scripts Telegram Group](README.d/telegram-group.avif)](https://t.me/routeros_scripts)
 
@@ -352,7 +352,7 @@ at github.
 This project is developed in private spare time and usage is free of charge
 for you. If you like the scripts and think this is of value for you or your
 business please consider to
-[donate with PayPal](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J).
+[donate with PayPal ↗️](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J).
 
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=for-the-badge)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 

From 158230070fbfae7a83b881b7bcd6f1651de45e54 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:14:02 +0200
Subject: [PATCH 584/988] BRANCHES: mark all external links

---
 BRANCHES.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/BRANCHES.md b/BRANCHES.md
index 8a0bdadf..dc4f4ac4 100644
--- a/BRANCHES.md
+++ b/BRANCHES.md
@@ -13,7 +13,7 @@ Installing from branches
 > ⚠️ **Warning**: Living on the edge? Great, read on!
 > If not: Please use the `main` branch and leave this page!
 
-These scripts are developed in a [git](https://git-scm.com/) repository.
+These scripts are developed in a [git ↗️](https://git-scm.com/) repository.
 Development and experimental branches are used to provide early access
 for specific changes. You can install scripts from these branches
 for testing.

From 8328400e8724006ce68a401d8297cbd8f4f30a7e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:14:53 +0200
Subject: [PATCH 585/988] CERTIFICATES: mark all external links

---
 CERTIFICATES.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/CERTIFICATES.md b/CERTIFICATES.md
index 5432d78a..8ead4527 100644
--- a/CERTIFICATES.md
+++ b/CERTIFICATES.md
@@ -21,7 +21,7 @@ first step of [installation](README.md#the-long-way-in-detail) is importing
 the certificate.
 
 The scripts can install additional certificates when required. This happens
-from this repository if available, or from [mkcert.org](https://mkcert.org)
+from this repository if available, or from [mkcert.org ↗️](https://mkcert.org)
 as a fallback.
 
 Get the certificate's CommonName
@@ -29,7 +29,7 @@ Get the certificate's CommonName
 
 But how to determine what certificate may be required? Often easiest way
 is to use a desktop browser to get that information. This demonstration uses
-[Mozilla Firefox](https://www.mozilla.org/firefox/).
+[Mozilla Firefox ↗️](https://www.mozilla.org/firefox/).
 
 Let's assume we want to make sure the certificate for
 [git.eworm.de](https://git.eworm.de/) is available. Open that page in the

From a1437a4c8315f2640925323cdea7fb620b7bbf5f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:13:00 +0200
Subject: [PATCH 586/988] CONTRIBUTIONS: mark all external links

---
 CONTRIBUTIONS.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index 55d2205b..0b894531 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -31,7 +31,7 @@ for details!
 ## Donations
 
 Add yourself to the list,
-[donate with PayPal](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)!
+[donate with PayPal ↗️](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)!
 
 * Abdul Mannan Abbasi
 * Andrea Ruffini Perico

From b12f8a39745cb54318b5d55bf65a1d8cfff81b02 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:17:58 +0200
Subject: [PATCH 587/988] doc/backup-cloud: mark all external links

---
 doc/backup-cloud.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/backup-cloud.md b/doc/backup-cloud.md
index 72869606..740af537 100644
--- a/doc/backup-cloud.md
+++ b/doc/backup-cloud.md
@@ -17,7 +17,7 @@ Description
 -----------
 
 This script uploads
-[binary backup to Mikrotik cloud](https://wiki.mikrotik.com/wiki/Manual:IP/Cloud#Backup).
+[binary backup to Mikrotik cloud ↗️](https://wiki.mikrotik.com/wiki/Manual:IP/Cloud#Backup).
 
 > ⚠️ **Warning**: The used command can hit errors that a script can with
 > workaround only. A notification *should* be sent anyway. But it can result

From 4118f53aae9c87dcc90dff6c800a8baf5d04785d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:18:09 +0200
Subject: [PATCH 588/988] doc/backup-partition: mark all external links

---
 doc/backup-partition.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/backup-partition.md b/doc/backup-partition.md
index 9d615a53..50b8a094 100644
--- a/doc/backup-partition.md
+++ b/doc/backup-partition.md
@@ -17,7 +17,7 @@ Description
 -----------
 
 This script saves the current configuration to fallback
-[partition](https://wiki.mikrotik.com/wiki/Manual:Partitions).
+[partition ↗️](https://wiki.mikrotik.com/wiki/Manual:Partitions).
 It can also copy-over the RouterOS installation when run interactively
 or just before a feature update.
 

From 34eac64f3378387f402151d1a017fc00e81b7c61 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:18:26 +0200
Subject: [PATCH 589/988] doc/check-routeros-update: mark all external links

---
 doc/check-routeros-update.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index b6c716cb..ea9bcbec 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -30,8 +30,8 @@ automatically is supported.
 > ⚠️ **Warning**: Installing updates is important from a security point
 > of view. At the same time it can be source of serve breakage. So test
 > versions in lab and read
-> [changelog](https://mikrotik.com/download/changelogs/) and
-> [forum](https://forum.mikrotik.com/viewforum.php?f=21) before deploying
+> [changelog ↗️](https://mikrotik.com/download/changelogs/) and
+> [forum ↗️](https://forum.mikrotik.com/viewforum.php?f=21) before deploying
 > to your production environment! Automatic updates should be handled
 > with care!
 

From 3788a3e2861c7a3f48f221771977c133204a7f32 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:18:40 +0200
Subject: [PATCH 590/988] doc/fw-addr-lists: mark all external links

---
 doc/fw-addr-lists.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index cb560d74..d09383bf 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -19,10 +19,10 @@ Description
 This script downloads, imports and updates firewall address-lists. Its main
 purpose is to block attacking ip addresses, spam hosts, command-and-control
 servers and similar malicious entities. The default configuration contains a
-[collective list by GitHub user @stamparm](https://github.com/stamparm/ipsum),
-lists from [dshield.org](https://dshield.org/) and
-[blocklist.de](https://www.blocklist.de/), and lists from
-[spamhaus.org](https://spamhaus.org/) are prepared.
+[collective list by GitHub user @stamparm ↗️](https://github.com/stamparm/ipsum),
+lists from [dshield.org ↗️](https://dshield.org/) and
+[blocklist.de ↗️](https://www.blocklist.de/), and lists from
+[spamhaus.org ↗️](https://spamhaus.org/) are prepared.
 
 The address-lists are updated in place, so after initial import you will not
 see situation when the lists are not populated.

From 2fa044972cc2e38e404b0e76035609c51174c0d3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:18:50 +0200
Subject: [PATCH 591/988] doc/log-forward: mark all external links

---
 doc/log-forward.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/log-forward.md b/doc/log-forward.md
index 3c195694..9ead1652 100644
--- a/doc/log-forward.md
+++ b/doc/log-forward.md
@@ -72,7 +72,7 @@ The configuration goes to `global-config-overlay`, these are the parameters:
 > your local `global-config-overlay` and modify it to your specific needs.
 
 These patterns are matched as
-[regular expressions](https://wiki.mikrotik.com/wiki/Manual:Regular_Expressions).
+[regular expressions ↗️](https://wiki.mikrotik.com/wiki/Manual:Regular_Expressions).
 To forward **all** (ignoring severity) log messages with topics `account`
 (which includes user logins) and `dhcp` you need something like:
 

From 0eaefcdc72ba217990fce4bf17460337697305a9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:23:12 +0200
Subject: [PATCH 592/988] doc/mod/notification-email: mark all external links

---
 doc/mod/notification-email.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/mod/notification-email.md b/doc/mod/notification-email.md
index 34d1c09e..dabadf31 100644
--- a/doc/mod/notification-email.md
+++ b/doc/mod/notification-email.md
@@ -32,7 +32,7 @@ Configuration
 -------------
 
 Set up your device's
-[e-mail settings](https://wiki.mikrotik.com/wiki/Manual:Tools/email).
+[e-mail settings ↗️](https://wiki.mikrotik.com/wiki/Manual:Tools/email).
 Also make sure the device has correct time configured, best is to set up
 the ntp client.
 

From 183b16d83c1a182ba35d21453687a27106d94883 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:23:31 +0200
Subject: [PATCH 593/988] doc/mod/notification-matrix: mark all external links

---
 doc/mod/notification-matrix.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index 89c1b01d..da725cff 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -17,7 +17,7 @@ Description
 -----------
 
 This module adds support for sending notifications via
-[Matrix](https://matrix.org/) via client server api. A queue is used to
+[Matrix ↗️](https://matrix.org/) via client server api. A queue is used to
 make sure notifications are not lost on failure but sent later.
 
 Requirements and installation

From c69b13c87961dbfced0002e85b98a32fe6b7fc84 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:23:41 +0200
Subject: [PATCH 594/988] doc/mod/notification-notify: mark all external links

---
 doc/mod/notification-ntfy.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/mod/notification-ntfy.md b/doc/mod/notification-ntfy.md
index 51756ace..ef5dd58c 100644
--- a/doc/mod/notification-ntfy.md
+++ b/doc/mod/notification-ntfy.md
@@ -17,7 +17,7 @@ Description
 -----------
 
 This module adds support for sending notifications via
-[Ntfy](https://ntfy.sh/). A queue is used to make sure
+[Ntfy ↗️](https://ntfy.sh/). A queue is used to make sure
 notifications are not lost on failure but sent later.
 
 Requirements and installation
@@ -28,7 +28,7 @@ Just install the module:
     $ScriptInstallUpdate mod/notification-ntfy;
 
 Also install the Ntfy app on your mobile device or use the
-[web app](https://ntfy.sh/app) in a browser of your choice.
+[web app ↗️](https://ntfy.sh/app) in a browser of your choice.
 
 Configuration
 -------------

From 3822887ba2d157101caf3529a5234d3974ef472e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 24 Apr 2025 23:23:49 +0200
Subject: [PATCH 595/988] doc/mod/notification-telegram: mark all external
 links

---
 doc/mod/notification-telegram.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index 2d00116a..6b10fed5 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -17,7 +17,7 @@ Description
 -----------
 
 This module adds support for sending notifications via
-[Telegram](https://telegram.org/) via bot api. A queue is used to make sure
+[Telegram ↗️](https://telegram.org/) via bot api. A queue is used to make sure
 notifications are not lost on failure but sent later.
 
 Requirements and installation
@@ -33,7 +33,7 @@ and create an account.
 Configuration
 -------------
 
-Open Telegram, then start a chat with [BotFather](https://t.me/BotFather) and
+Open Telegram, then start a chat with [BotFather ↗️](https://t.me/BotFather) and
 create your own bot:
 
 ![create new bot](notification-telegram.d/newbot.avif)
@@ -102,7 +102,7 @@ Tips & Tricks
 ### Set a profile photo
 
 You can use a profile photo for your bot to make it recognizable. Open the
-chat with [BotFather](https://t.me/BotFather) and set it there.
+chat with [BotFather ↗️](https://t.me/BotFather) and set it there.
 
 ![set profile photo](notification-telegram.d/setuserpic.avif)
 

From fe649181180986935a049b489322b10327ba0697 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 28 Apr 2025 10:48:36 +0200
Subject: [PATCH 596/988] README: add disclaimer on external links

---
 README.md | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index dcf9c283..1d2d64fb 100644
--- a/README.md
+++ b/README.md
@@ -16,7 +16,8 @@ repository holds a number of [scripts ↗️](https://wiki.mikrotik.com/wiki/Man
 to manage RouterOS devices or extend their functionality.
 
 *Use at your own risk*, pay attention to
-[license and warranty](#license-and-warranty)!
+[license and warranty](#license-and-warranty), and
+[disclaimer on external links](#disclaimer-on-external-links)!
 
 Requirements
 ------------
@@ -371,6 +372,21 @@ but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 [GNU General Public License](COPYING.md) for more details.
 
+Disclaimer on external links
+----------------------------
+
+Our website contains links to the websites of third parties ("external
+links"). As the content of these websites is not under our control, we
+cannot assume any liability for such external content. In all cases, the
+provider of information of the linked websites is liable for the content
+and accuracy of the information provided. At the point in time when the
+links were placed, no infringements of the law were recognisable to us.
+As soon as an infringement of the law becomes known to us, we will
+immediately remove the link in question.
+
+> 💡️ **Hint**: All external links are marked with an arrow pointing
+> diagonally in an up-right (or north-east) direction (↗️).
+
 Upstream
 --------
 

From 0717ebfbd500517231a6da31091a1f4d59bedd00 Mon Sep 17 00:00:00 2001
From: Leonardo David Monteiro <leo@cub3.xyz>
Date: Tue, 4 Mar 2025 17:21:00 +0100
Subject: [PATCH 597/988] introduce mod/notification-gotify...

... for sending notifications via Gotify (https://gotify.net).

Closes: https://github.com/eworm-de/routeros-scripts/pull/92

Co-authored-by: Christian Hesse <mail@eworm.de>
---
 CERTIFICATES.md                             |   1 +
 README.md                                   |   1 +
 doc/backup-cloud.md                         |   1 +
 doc/backup-upload.md                        |   1 +
 doc/check-certificates.md                   |   1 +
 doc/check-health.md                         |   1 +
 doc/check-lte-firmware-upgrade.md           |   1 +
 doc/check-perpetual-license.md              |   1 +
 doc/check-routeros-update.md                |   1 +
 doc/collect-wireless-mac.md                 |   1 +
 doc/daily-psk.md                            |   1 +
 doc/log-forward.md                          |   7 +-
 doc/mod/notification-email.md               |   1 +
 doc/mod/notification-gotify.d/appsetup.avif | Bin 0 -> 18099 bytes
 doc/mod/notification-gotify.md              |  97 ++++++++++++++
 doc/mod/notification-matrix.md              |   1 +
 doc/mod/notification-ntfy.md                |   1 +
 doc/mod/notification-telegram.md            |   1 +
 doc/netwatch-notify.md                      |   1 +
 doc/sms-forward.md                          |   1 +
 global-config.rsc                           |   6 +
 global-functions.rsc                        |   2 +-
 mod/notification-gotify.rsc                 | 139 ++++++++++++++++++++
 news-and-changes.rsc                        |   1 +
 24 files changed, 265 insertions(+), 4 deletions(-)
 create mode 100644 doc/mod/notification-gotify.d/appsetup.avif
 create mode 100644 doc/mod/notification-gotify.md
 create mode 100644 mod/notification-gotify.rsc

diff --git a/CERTIFICATES.md b/CERTIFICATES.md
index 8ead4527..69d6c185 100644
--- a/CERTIFICATES.md
+++ b/CERTIFICATES.md
@@ -74,6 +74,7 @@ See also
 
 * [Download, import and update firewall address-lists](doc/fw-addr-lists.md)
 * [Manage DNS and DoH servers from netwatch](doc/netwatch-dns.md)
+* [Send notifications via Gotify](doc/mod/notification-gotify.md)
 * [Send notifications via Matrix](doc/mod/notification-matrix.md)
 * [Send notifications via Ntfy](doc/mod/notification-ntfy.md)
 
diff --git a/README.md b/README.md
index 1d2d64fb..2a8b2cef 100644
--- a/README.md
+++ b/README.md
@@ -268,6 +268,7 @@ Available modules
 * [Inspect variables](doc/mod/inspectvar.md) (`mod/inspectvar`)
 * [IP address calculation](doc/mod/ipcalc.md) (`mod/ipcalc`)
 * [Send notifications via e-mail](doc/mod/notification-email.md) (`mod/notification-email`)
+* [Send notifications via Gotify](doc/mod/notification-gotify.md) (`mod/notification-gotify`)
 * [Send notifications via Matrix](doc/mod/notification-matrix.md) (`mod/notification-matrix`)
 * [Send notifications via Ntfy](doc/mod/notification-ntfy.md) (`mod/notification-ntfy`)
 * [Send notifications via Telegram](doc/mod/notification-telegram.md) (`mod/notification-telegram`)
diff --git a/doc/backup-cloud.md b/doc/backup-cloud.md
index 740af537..7d55d748 100644
--- a/doc/backup-cloud.md
+++ b/doc/backup-cloud.md
@@ -49,6 +49,7 @@ The configuration goes to `global-config-overlay`, these are the parameters:
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/backup-upload.md b/doc/backup-upload.md
index 6a5b0e4f..b4012c8b 100644
--- a/doc/backup-upload.md
+++ b/doc/backup-upload.md
@@ -55,6 +55,7 @@ The configuration goes to `global-config-overlay`, these are the parameters:
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/check-certificates.md b/doc/check-certificates.md
index 4c144ba3..a9426dba 100644
--- a/doc/check-certificates.md
+++ b/doc/check-certificates.md
@@ -51,6 +51,7 @@ subject alternative name (aka *Subject Alt Name* or *SAN*) can be used.
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/check-health.md b/doc/check-health.md
index 7cf0c33e..33847e36 100644
--- a/doc/check-health.md
+++ b/doc/check-health.md
@@ -113,6 +113,7 @@ The configuration goes to `global-config-overlay`, these are the parameters:
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/check-lte-firmware-upgrade.md b/doc/check-lte-firmware-upgrade.md
index 3693b712..a84e2ac2 100644
--- a/doc/check-lte-firmware-upgrade.md
+++ b/doc/check-lte-firmware-upgrade.md
@@ -44,6 +44,7 @@ Configuration
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md) and/or
 [telegram](mod/notification-telegram.md).
 
diff --git a/doc/check-perpetual-license.md b/doc/check-perpetual-license.md
index d4440045..0335fb54 100644
--- a/doc/check-perpetual-license.md
+++ b/doc/check-perpetual-license.md
@@ -41,6 +41,7 @@ Configuration
 No extra configuration is required for this script, but notification
 settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index ea9bcbec..a45e0751 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -73,6 +73,7 @@ The configuration goes to `global-config-overlay`, these are the parameters:
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/collect-wireless-mac.md b/doc/collect-wireless-mac.md
index 01975223..2378fed8 100644
--- a/doc/collect-wireless-mac.md
+++ b/doc/collect-wireless-mac.md
@@ -54,6 +54,7 @@ entries are to be added.
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/daily-psk.md b/doc/daily-psk.md
index 4a3de64e..118d768c 100644
--- a/doc/daily-psk.md
+++ b/doc/daily-psk.md
@@ -79,6 +79,7 @@ For legacy local interface:
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [trix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/log-forward.md b/doc/log-forward.md
index 9ead1652..f6086c85 100644
--- a/doc/log-forward.md
+++ b/doc/log-forward.md
@@ -22,15 +22,15 @@ server (see `/system/logging`). This has some limitation, however:
 * does not work early after boot if network connectivity is not
   yet established, or breaks intermittently
 * lots of messages generate a flood of mails
-* Matrix, Ntfy and Telegram are not supported
+* Gotify, Matrix, Ntfy and Telegram are not supported
 
 The script works around the limitations, for example it does:
 
 * read from `/log`, including messages from early boot
 * skip multi-repeated messages
 * rate-limit itself to mitigate flooding
-* forward via notification (which includes *e-mail*, *Matrix*, *Ntfy* and
-  *Telegram* when installed and configured, see below)
+* forward via notification (which includes *e-mail*, *Gotify*, *Matrix*,
+  *Ntfy* and *Telegram* when installed and configured, see below)
 
 It is intended to be run periodically from scheduler, then collects new
 log messages and forwards them via notification.
@@ -80,6 +80,7 @@ To forward **all** (ignoring severity) log messages with topics `account`
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/mod/notification-email.md b/doc/mod/notification-email.md
index dabadf31..127bf964 100644
--- a/doc/mod/notification-email.md
+++ b/doc/mod/notification-email.md
@@ -79,6 +79,7 @@ function available:
 See also
 --------
 
+* [Send notifications via Gotify](notification-gotify.md)
 * [Send notifications via Matrix](notification-matrix.md)
 * [Send notifications via Ntfy](notification-ntfy.md)
 * [Send notifications via Telegram](notification-telegram.md)
diff --git a/doc/mod/notification-gotify.d/appsetup.avif b/doc/mod/notification-gotify.d/appsetup.avif
new file mode 100644
index 0000000000000000000000000000000000000000..58f57a807cd9c4853bf819336af8dc65f2eddd48
GIT binary patch
literal 18099
zcmce+V{~QF(>Hiy+qP}n?%1|%+qP}n?AT5^>^SMz>LhRa|2)q-vu4eQnfWkvSKX@G
zRlBNw`|NYixn~^!06=Kw;^|=MW@!farhn4b(u~R0($Gv!h)D<l0HU=ubus+s`z9g_
z6C0=hQUL%5OJkS+(f>!nJ6O8d{>K3N{-(9Gu{Zu_i2?w?fPW+3jF12TaFBf4|FM8n
z004O2Z(YdJ((XSk{Ktd+ZJ7QG`8UJRjgd*j-p2kvm9hS}=i4pjVQKb{{{>=OI+^}g
zg71vRCeFtHDfzFcm8FA|!?%>NbTGF6mZ+A_4yNDon?NVND}1*AKy<M5u>3ay0tpHE
zEnp4Zm_!0e|BV1pjO}fl?2K(ZzMFvqfCqdJVOToY8vgTr6A%Ch6bLvN^t&B%TNA_o
ztcjEqHQ-;G?^eDU3h)U4{fFc~{2l(^^4tDzUE<pZ3<LrI`IZ6S4Dzl2iwFP5|0f;o
zzx97{K*0Z%C+u4X{%^er?%Vh#$p3u4*1vuO5T(VX#J>yur%?dlYZD*>fCLAJ00)DF
zfPjF4f`o=eg@c8GfyF{bK|saBCcwwT#>FKhrKcbyrX|6}rR1QZWn^MyWhJ2C;^SoI
zrDtJf{+9#@3JMAq1{M<z4wIP(mx%fQHGK^LkRSmPK;K}A0l-K=AV@%8!vKQsKEZ(g
zL;nTkA5aibFmMP+C}^1PfL6qRD+K}!3IYZO`n~8tzTbWTC=wVl5t9%&ilQL|u_G#T
zU}7O8iE!f}n$p4zDT|R)5EL{z1|}9Z894<d6*VgxI|nBhw}_~ixP+vXw6cn-n!1Lj
zma&PcnYo3fm9vYho4bdnS8zyZSa?KaR8n$EYFc_mW>!&gNoiSmMP*e}b4zPmdq-#2
z(9hwK(XsJ~$;GARmDRQNUmJV-2Zu+;C#PqBZtw0N9-p3HUf=%V`iJv>=)aKtUvMFP
z;{pZ+1p$TlhYJYU{U2~7P%t7UaAYAx2t!8{V&*_dRN=(J#z80&7Nr|BBc}yubW+wm
zvfF>q{)6oQ8L*)LPssi^u>S+s1^^ZW==<P-AOQpbLrX2s%XQe4+drzVNQ1ls=e-lP
z6g|{#+OJE)$Z#7cNa39vU$Bppe`stvVWIV^NBKWh<2TJL;mP@uHX_<@SHy`ytYF`s
zs>i$1^%<$h0B`2UdAU@WFOjzg&$>t38{m-s9q}*oOU))PKapINTx8+cq3C6~Z1fU1
zk~6Y=%)%hK&?u_@Xk(E0Tk&qA7yqjIVHJN*<RsH*6jkvS!W7fsKbiSaZTq?VaWAo2
z@daRh|Cyv4y{t-bscrxC1-Q-<XtnL%`~vh@ysZ!%>wA39^olC}pBYcJ?eG52GXz@2
zf2XeDrQ8@4Rs8=a{&S`63t<2GT70hJpXs|dK|h*X+mi0iv^flvB)-vEeS3;g@5xqq
zm!#3y!E-x4KFYnu%VvQZR3<3lKsBZrn$c(}gI^M7rAMAGRan74dU+M;Yz!htn$T3o
z(s<`N*WRkT%uD87zO}j8^0YX?Wzdb)03GL?K$F7V15ugqAx2}(#5KiR<10C%uuAj=
z5I}q-Fm}5a>u74X%+tVA$AWz2&2brPl@bWAyF3mfPeL}MMGYG8>GcZKIeBXBugOp4
zYOUDCDamYH;^HhmNBjchM{p4s7wg0AFoQF15|Sch&WcOo=am(<FVNeuLD4QsibiBl
zq4P){ltJ_w<Qk!@lnR7WpEHrzsi!K)21fBWBD}r?Cq8l5w#Zahtn7O@%qoN3h_g&Q
z?U$ziY;V+R{mF}i!3Fesu!%Mcrw5dSCGK1CxfZ;tFd1JX`~?^m8h^(_%_HcJmuy>(
zNx-bbB`)yKK*=#N{z%>_#YgWS$2V=5<(`T$>rAc{HAYI$DByybh1iq&sE2qi{af)i
zEO4?9FR{McHh)!@cZs&I)@s`XPLZ6%Iq+24K5tKN3?B;#3XYSH1q$-vpKCzhiVTc)
ztn)aARr1{h<~BXIOZj7jKlk^hvfVjT))*p9la!YPQjFw1$;%r}ZShW-Us5CEpT6_7
zp5y6d(vVOKcw{CR%5xo`1_mJ=CEN@$4)Ar9ShYO6E;#g!%ND!2S*abacO$%~K)(q@
z^1U<W<a{qqoH61~aTEVj4qniHi_`+Dy`>|ToS%?5%k&{9^xqp#)RFZy+gS|)!Zz}v
zzNod`V`r2rGuy$9Hx6=aDaoHfx|_V!luBuX6bnB_+;igc%DUvnEE&FVFSAsRn<l%Y
zXNqNrlwU&?hYJFWAy1&omquWOotsvVe!0N-2{LGCK?2p>Dj7Qsa|}0mqtD`kIbU^2
zu0wRe7}+3b^UasDMu$LpU0V*4I&JxgE>AEbehoF>bOHYQB}1}fba%UP4)>`5)`viv
z(U(T)ZcRFB&9(J?iXZ5164&j3^KDfZAmsjxaW3DqXwL>CQ=M(mK4ybDF(<$@FmOGe
zU%<Lq-_fttU-FXmEYYrQfed12!a&_(7?X)3N&0Y5#<V;SO1IZ*$YHm1420o~%nk4P
zfpDbIc{5vUOB-Q}ufTB4>d*K`;-NOO$DKutd(aftX0cgV{-A;Va`^97`^>{rRnp6v
zVuz_^?Zx5xrxAE;L+#ebmGgC83XsAllCOdAU28FQomXOV==Q+%i0BUf%Ce+<zQEOO
z_t7lN(z#as!HjAKN2(Q;kSeDeNf37$*ZEE{KgaTIt6{6?MOAFz8lU!Z^2<Cp+IH$p
z$T3WX78PK2^`V0LskUmaMh_-CBvyw|A=z;pZ^B55_mR9}9!L!J$NwFJox?F*-;fyh
zw9OYf=dZTJhqwYfr69151l}G+<d^#ffOPi-H&fGFtpuX&4u$I-9YlcP6%<c>tCvb)
zX+k_}{kodbPn^hZQr|npq+o!B@bw+n`g_@YXuM9Kn^2MjR-Pds`fFu<G~LHBFaXFJ
zp*FC2y;S~tblnpp!v|at5O`jzd2>)l&y9Mfo<0nopmMZDVzCY|m@imoJB_CClc@)@
zZaHS{CAYly!t)cXmpBG!bc18kLz%<P-GKqaS;r&dK|xP${i$C7rQb)sa+D`&xUWjg
z=5<RkOPaqjnsFNslXtSk9I{~YOR?UR6b1iBBI<sOye<D2AQP5Bnvrt--Y+tipA{b#
zK>XwVyR5#6{(V-Xlp_Fjbb}mln-5BM16*_iU&!i&@f+D>afj2vl=rB${1NWdVJ8WS
z1kr%7kNFe6&laHBe={xKiN63oD=~^ufKXa&!4ZzOh2+2-X!~Cf&#{(gZ=s{vJaTp_
zEc8nqCdPzc07hzC3C-^11JMp7FeMEe!Jbc4px7s|@89-|=#P6fCUHvO{$CjH$MH=J
z&ode$m<7;Z02BS|EY+qRhtiBUpsai}qscpKm_%O89Uub6@#6rNkqkbpermW3Jk5UU
zGl{5H#P_zr-9UWqlfPEAPu<=Xo39-BiaLjvg7AL*C;hbmqiEzwP4@(ND3DT$^?|YJ
zt#`Gy{AxYRz>(&va1sY<c*p$P%4@dw^LO#K{3)g+Na&2Q#Q?^>QKsCPcpasW_@nL4
z#wE^L88~TQ&c;w<+hLB`&OtzcKRKJLk3uC)x8GqJQQYYrC%~T!6=*h_5gvx|FXewN
z(|dQNy<OhEjc0t!Zv&SRp(sH8Kk!x4?A;87BNqG3hhG4#?`tJCV7@4d67b&)+`G1=
zUu)yRBc_jNowi{;Z77v-<-jZm!t19R|L<^W>0z!2G`4cq#}Jze4;EA41Y+_&oeScn
z?0`0Mvsb&r9SysqGrkUCrI@be8^(ooTJ{K3X`e||%2=FRt@A`;0Zw4mD<B|1Z%16-
z!sBgDmh5Y7S`?c3Hh4{A-cv!0IdzNic+|NVB3mn4mdd64NwiWlCK0(*4}l$%z!m%+
zfKqX7X```WyAe^nvU)$lE3Zu7QA_G|pbMasAW4ztqw+7Gv)w-Ge7rov0%-A26hY&g
zkp*W#s1C|&#n{um?V+-?-8Dv;$J#9O?RsYYR``8=eoB!YEmt<lL~1gEFP>n&{Qw~h
zt)nLnWa^WE>^w_yRA;lrz823V?t*j=Qa!MpTqi|Ds2~iY4r(R|7gkL<M060U&I&8%
zFPSvcSc9Fpqi3FpNxpKR1h(wqs}?GyFQ-e1HXA@9A}Ks|%sEJWjn}H6wZ{^nD>;$`
zMZy||XZkyKOl`^LE3V7s@=AYXEjCI_5yy>C@KEKwi@CM_HV^s*__bE@TXW0&vy<b+
zJAO9);(aMbbIW<@S#Iv^hi8(%Z$CFjKLLy5wIB*x?0%tJOAaL#>8Jxl{i#27z5LFh
zv9s~HTmf(tWdRiOj(U((Dhsa1_jEQqPM#`eaD&>|NdyS|mJL9wWx4KdBwP&~Lwf9>
zSIh~nAF7UJdt0JsJ9^V_Xj_=;sGJzw@Y7)ic@nW#icw#2`|_tt)3(lRAX%O!niqtV
zU;(7n%4n{urM0ayuQ=zGkVU(Lri71|_lj1te}(QJcR6Qo7C9z>o!x)~03?7f6rhC-
z_U_@^+KBlMJ#mCF$J3V|>zw3Y>;D{UA8W0si`L@kwEOFlBExWlse6rc&QJsSKTd#!
zq8KXRzZppH{EA_<%J}?y$o5$v7sq$*<o|coc<a-pMNyF8>lZQr8k&omTud$mloeZ$
zImu4e1bFSU7;yXqXywLlnhnQ^&f=m6k&g6uQ8~?W_?4E3#IC|Ie6a*e#9kVHqM*s-
z`6II4Nao4b7crv$8f#ee;{E6s*;8kVKIcyzN$rsxVrTk4m1xZ{9&Ovnewb3WXt0Kv
zLim{JW$}Ic!%#`YXdm&KKVW}M-{5urkjkM^oO3lCVeFU^y{A(LW6pbRMvhVNBx7}`
zc>-djfXlw5#ZIEiHlDI$uq#?IFGJ$;roP3XT7<1$?0OF5yBHM<cqYUc@uYF#@hp-)
zDvPnQrK6<H8$?>wC@4PB@b|5{BW|!1#Y9!<ghGTIG1Ryk0;NAEH}YY=pyLU^wVls@
zkLy>G&Q1bfhy`7}ZszuxDrNU$#ItpGNx#82d|C_`nH3ZCDSlpux4>%IdQTD5eZc18
z+a)!P^4#O7p+@PezeC+DK8r?xSd!hIBId#!IJu{qN<&Ji^tF%wooUMG-K=l6$*3ma
zB7YKuodmgTHwNdFeI@UyD5kxi=_<97MQ+H1lXIOXI50U|z#4Qo^qW$spTc3gwJ(o8
z4Ku4@)<WN)|J@MJ8IIRF6L>OqN>L3~`G*wkCWUMue&^9c=NH|+a~`m3`^yn1yP!tZ
zm7qRQh(nnz8Eec$`C)<=dqbpZ^}-g|*JWTkW;L?cpgM`~5dt5pzCY%1%4{0Un-@*Q
zUl${4Chr|JGB3Jcr_;&G#H7-`=e_PD7OT2)KLBj*I#0e8=Kdy=BtqRe1~)DVlshE{
zI(ceKawRL_OcssX_KD}>nhKK2os2*Y%_dh{7wqzLZT|2;fkUW8KC(jo@SvF@eOw~r
z)X@-9AqnEfmG7qfTWdw&GI3X3F))m;2Y%AVENt6eAausMeEqLsEg8wrZlpO0GU^X%
zRkt1&#qxq;<QwH+_m5A*&Id$8Z?tVEB!xrupU}k6W*@)9nkhBSDTHpF;zaYdoYSlk
z%7V?1+!#RVj(H(|gch$g{nqgu!;W|e94!9PpWJT3YVQ^|{uR(SbX7h4Sc{I89)alL
zO0fnCEI@0Mtf-V6CCd~|Wv!(yuuL6N?8W42&@G-c4$50sh2uDF4aS1$)+Pq~w=uJd
za-89!X{(fUny<ti6GL{JJ>;|65nQ`pX$vVj+g+W#&oh`gfo*px!x<0}mAHiXL1E=Q
zQPrQ&h}=oR^3iSnWz8EXu)>2F;>fa0E_m-+wD%znpV^`7b~IMMqHWLXmi~vd+@CJ#
z=n-J|#T_x!7sc|7yj<==?YmteH~{G+oD)`Lm5++I^-}K%Q;SDL#{k_&_wlkwn2mZ9
zy3vpp+0(UFChURK!k)}npx<2o0$$R&#|TWEDwUIx-|Y!-JQD|GQ#mkc(CGz1uF^TO
z2#F|wI4jEUW9SQv_^Bo*4j^*te=aDX;DWeiUN;)eU*^h^(5iks2z;RscldV?fMD1&
zTxF2??*I0(8*Wh9b#5`6oD2Ls9jQWgcxzbayUUfVkWi(LK8X+eqfAYWz5G?%Z(_|j
z(W5a9BrFTurqA*#kbRD5K`=E~*Je1&phH3YvXbmTp<CBuGSpTk8d6cwJsy~Vl!Huw
zZoHSxBWIN=!PdORhEBvh1JzwWsOs9oOXGN;>qWeU-7LxL;i3`7HB4rmElqN;)cwv+
zGpJ1;og0Zo0uBtwR`CR;-$@TbQs;23!gl+p7yoi<Lnv~_x}le$SM`ui!MpcFyg)jv
z0o%j`aqJ@;>fWUISM`o8O7>EDxi#;SyRRrL%uSfnaJ@IHqxq}`iI{2;VZlx=d3>=4
zw|h?@6ABgsc6wlhD<i9$q9aH0l62q+<hqV{l<c-9^9!1)l4bSMd`9qbQnb7nO5|Cq
z5`_<6(8-E0Dg^km^6V+hMR_6gkJb|JDE(&v)jz$4MeZl)+sNZ%3+YUM^+%KsA4{ED
zD`Z-uL1(Uk)r@DQU!=6eHIk#>-D9vWhr&>Qx2Yd4wVcv#pkS`CSV=yJ_Mpow)pD(w
zchj}q{Bp4H){3iX8q)Q<XJC1CNh$oBZ?X^#Y!KocsceNg6h0D<pF4jO-SsFwDqQQ5
zR&#pU&o&ez@DZtHit?`FCad|DaUEV<a%|J(9k<A1V5|zsw(St6z<4oOp9bvTMa*uK
zS&Bas;<|~E3FrH)(|bnb8t2WhuD&*0$E=(bvQ(sr5#QP4xW*-XhO9nStR&z!FEV7H
zO-gKDf)qMK10PK%RF-#&U+f#*N1qS6&#e$vE<;f$^NTzyYs$8tt{YEmVoCy*-|KT1
z#XrAjcLg()V*qKQUm!!a-BXN5J19KIxqLuTS5sk>iILOfInIDcID0;0KeIv^F1djy
zuF`%QxJe-A)s^zY2AYMCq3f}m04K7&b>+0lnH)k(4ldiIImiStvf#%!!c|9Um#v&L
z`?H5c=T47=Q^5u{o`fqyXR0QE1lR&1O6OQ^B%o<2S6!M`V^nJs5Qk}^M1l@HKtH})
z6a!0qr{EX4ezh>6RG3gYdVi{3)|EoA{EojFtAthFEe9pm;ZoA_Yq%<^io8CNP=CB^
zpMv8Ei`U`Z0%L@=e}m7!FfB(^Umd&88_mSTD0mdHxkst}VN8&tb}9{Mk;C9A42g%o
z_L5roLg<~iIUU-W?9WuYnd!ob=)|iK31U`u0S<aZ@(8L3?(xj5f$}3+lEx!E$ZlC+
zUA{62Yb01DRmp7ECc#%fvIFxJ2BsqDa6+gAETQTkMpSx5@Si=&5}t6uWgOH$)C|Jr
zmUO^-^n8ys7uj#K`w>gt)7mLa?&PhST?+wAC}a<}dr1|7=MCFXWOkC$bi!4fNLlbJ
zS4X>mWAI~zcCbGfNH=W>D0WRj*kWj=0&9|nru#fFb(i2WI%;6DRjrY}N+fs+M+>ta
znMz4Tzbqj4C59@_QeB=&8nQRtb`7ZN8wuj(i{B<f{*05-#4+R~C57`=eO65ZrN^hm
z!hK{^94=4ti1s#u#RM|Qug;{p%t!(QRUI~SBaORb-oZ)K*#Br%14&5qRwU4MBDY<u
zvWf)d#k(ndQUM<@h2ewNT`m39rw&pQ<#Tj4qmo+2t-g=!1Gx1qi%K&As(kvxC=-~3
zOr=<u=zIybqt2g63p^HMOUK85!`m&=T-Y5?<?Fn`wJiWoSHAKW3u1hmIi}E}h9IQj
z>xt_GUWQSgbx^(PMyVp05H*=Sw{X1H@M9oLNssch*kRkFj2etkSl@O=arK&o^e6M^
zqtoDesPT<a{Hk$UMP>73bIppj-UX1%g3{i&Q?4thZpk&Ku|cms7X#E^H6>N*#y_7R
zl`Z>5bTn<d<gG<m!36Ps@`1Q)Ng*>@t-Q_7sIk<NXTgK}^wueK5jDp|hFBSf34%=$
zlPF&2hqOMfSg$tP3F0k}q18<N3G5h=+!5oW(tI@8;Rynk3m?33wrtSrFN!w_?=8@&
z7nMk$<iHA*?Ls*$?e4F-6D61<mrKSD=0zTRr=))T=j-OcZdZ?#giRigZ=dFG@F>3I
ziu@w|5ncY*!x93~1eo!4L`sf_A5naWrvV2`vP-mIOH;CzR;mh1gCY2YOzi~@@Cu;|
zJ59aUx1uK$0qg?E1X2({_%+_#IMI&`;xvu1$COLJnG2Tt^gsIp$eI9sw+zb`g_K^@
zO!dE^b#YAoHiC(Ec)3MEX(r_QBHku5)Ha6K`$=#uRkJ}$^rjc`S0?PzpA3Tc$MGN&
z^0XnXpRkDKL*_Ny7l@y1!Azwo`qeSoqVL3zmShs+Uk(M$VB33SOp`i_KeKWdpa#8%
zBJpuXz%TROZyBVDQf%I^#Aj^8uD$4#=*Ha)$o}F_5S}&$3H};QL>W>N719HS{E34m
z027`<G-|G><-O%`KTZD_`G$v4q#p2Bq_o2W=2+hAZB!{xi@j_jTrpG?g4zafe;b3o
zxqE*O%N`E(13&E`w#ExInTYme!Kr=wcr}@q7K@&-4W$d-A_Eaek@ntDR4clsd#@5l
z^tVFZvXUO-oLc(~A@aWP%frvh`WExx6DC#T=CGd=<kDLwQMph2?%@&pdIGS}LUK9X
z1SyV(q6?={5u8hDX~U$QNi#(7WN7$F{Zp>Gyga~bxrc1eyveVVq-@-M<`O&fGrT*5
z-NX-xP*<r6E5%#L(%`o0Nu1OpGg-^M#Y!{7q>zLP?&Q$9FIC&xU<{>`jgzc390vPQ
zX9b25l%V=4fWK$;jYI183T134q<!`(Z4H^fPnaF*iz*6(EbU=p=r^^0o#(f#TI<&k
zgq0ZQtXIkiR0fKyG8m?JX^FlF2P3c4NOokP={3T}T$Ykr`eILT$x$FrHSNmuy5C_3
z!*~X?H4?b_f9d8fd&o&>2VGFTOTbwsJ%<$NfkM?dY?2!AC>9sJQn;gjWc^;<t)9F)
z3iN!amwHotLi!>+T+6Ov1KildN?r*>*X=tuqjkQXueWi@V?6$7-b~%SjIoD@TiR&`
zx0g+AoW*U}(E6>K<#}cr@~bQgfKxT}NC{B0pku?pV4-e%m(cCR=Ie1q=z5SJdc#x#
zT0@R-^PcswAZ+bZ@rs<@m5HTY*oZ<iv&{3B&?hPU-QqLgKERE5xRSga8#Z%^1Qw#e
z=mz)crQj*4WCehQ-=~rZWC~yT{u3GvhEIeWSiWXjX^t+sckjrqOW4?+czTqrTl(WL
zB{GBsfLQKWO?wFba{}%PJdgTZZ7<4Z$j`}dn);}V+DVVUJMt;lJ6ElS>eT$GZuh>b
zH6kY^(~`w)p(uz$4P3^-^M|gp<DCXghM-Z%NH(`(cH08&qnH<!@1eUF%TvWxN}KV0
zXa@qQhiJ5=*<~8la~Kw|f&D%>Q_L9U0ko9S_TGtPsbNX3=gk_8TN@ccg+Uyh?xZ(x
zF*Z?YI~>^=5JjkkKA2n+f|#wp3k%u?a^z1o$!D#2E;B9;YI;Vq&ja(v@0-Vy_NvR6
zw?iE-d+1oNz)#{ZyLXBatSX{>)yV}+Fnor~iNK?SB%(ghrdJnK;>=Wr6?2I=@4;w<
z@nG?&*PmC2&U?Cfe3c_Y?b-HOB8j^0toNE7mlX+heH+UfVj-*R%zYtvT5Fz0W?o5s
z>$+)hESy$_nqm0$RF)(G5klw=)l#$!Uv66XaA#E0l4~|}c#4ZwKI)^SieQF+*$0hR
zY|`Tbl%C(h9p2avP^%hl{_JhvGG*eNH$I||`RTSbNJBor+L;mNsgz!}tBfd$5?_+L
zEz2JDvEvmWJvm`LGvGqEm)j|MVoy0%CIr@vKm%+7RMas$hGa?qUXPoUxjdKOvX;Ig
z4b-BmI1-<N5|?o7A-!HhTlM2Z>!%Jf<V00Xqd0}~cOxmL!^0Pu=;tAS_yeHk$QZA(
zi{h2|ap@D=iH^0BBfFq<w0)|<d^w+@?dSrlIW6TlQxxylHSX~gAcm>=o)P^bH}Uz(
zKb5?8f(m839t=8$Fk$>3#Jy`z;_`u)yf=|@25JaRa_t1JvW)lEByVCD$0wbTPp4!n
zR?pLmj_HcyUA_#1?wIN`^XL>Kn)9%Dp99VGU)zWUfqCw;Dl&_3dw-)Wr~Jf@iCo$J
zYlyheOkfz<VzAyPve(u*>;YmaVVz5t4JBVvSW&pD1;_l0Tm@4@-k@v|LF;cWupHgK
zi5E%eJzWjQr)whCS5<1u<mmMWQ)Cakt+QZ*!n1m`MedT!XVcht_q$nurdvch6L0LU
z8GQ@#1(1Dw7Ulbi>WptYpBFw%zu+syQH#y<?zl9SK9%%<-(D4xW#UNp9^;#de@8~d
zN_q%Jz%t0(I|}=A$$kG*nZPeTLAMv9_+MmNmHL|mdR3>(J97+Ld;Ly99J4vPYy4L}
z>*C0Q2hSu-IBEem(XBG|XEw#2Rz~SEx&CEP<w$2GSZsV|L9a9<0d8v0wZ${g-E2^a
z205h7Kp4;NrNXgr-gDD@m~#~u^XoUVuQ`Cf;}wT`PQ%*;m<luSIrm+g9Ho!BlpuUC
z67<0f7?nA@nQXGY7@Dv$jOtCrf9z=r@6n`LHj*MfHVZhO9Hwg)!;(`X?}ot;)+HJd
zZKdiejZPwFoqtMwYExSATg+A!WG+smFfF4y_gjOBSs*-gz9hkN6~f%iN)ny+4r@Q2
z%G$s!<iW+*Vq}tdZ(&elv>yH>zks4SR2tCgRL*sZTd>p=JiU7%J66EBYmo#(%HtJu
zc0zSZt2+#VOyG*`Au^=5zt8EVUmc)3p2sEJ6A~j`0@3P`vjTr{DODh4xpe8j#HxM?
zL}>Gi_(8`<nt)7hYH%FHP{_c4P~m$J5yas`PXC8&PW}gE#EKeqI3_zl?)hwQ#Y84s
zp%;RoYE%yJc-7xYVOEGEReY`V;F|@MU&HAiS1c}O7X|~O0vELsmH36A8}?kK;oGMx
z*NDI8de{ILZ48%5iR;ob_Lbx|(i+}Pfh^y$-rLm3ihDwUDqKoAkT72pOBJgZ$!aZK
zaBGioKJR23SG~X%StJBrm`j6#uvYPdF|ru#LCJ<zhl=7t`8+kWNh1QlYioHo1&P{l
zsq*&-tx_gymq(q7r+xi=yU78<`N`RkrxFUCtK}#1>av%Fxhb+MXX+2TzuM-&U8ebA
z+wlE0EUZf=aW22ru_o<X)NnG7EH>ClF-w2dl61W9z!cmf%XThntKD3O=qp#4rnaAS
zlh74M{N8P?Q46dhGaPg8J|`=623X<ty`0EJQ)*1YT->nml`aEz+=d((DVhu6vC#)^
z20zp&Q#1`lf`igUdYX*~q~Fa>Eo&G!771pZFR<lkShs(vLW1p**_lv3-;$i^%smI`
zL6y{`AB25U1iEqv_yq=_*r?01EULx{y)h2smjR7My-f5BMNaDkUx~LIsX?QN4y#nX
zoO{9YEdC+(O*JInn66gL^wo-7CXDkRT#mx^k$;LjF3U)<$Vnp3nChB3d$wn{j(K-T
z!{ji^$1Y3Z-^W|@m1*Ka1WuL&6%e5An>o`+F4Qz<BHCpmuaInA@Yj`LbFs3{aHu)5
zN`=9Xx$wD>@1i(dC*m+skoMO-sG|n8=LkaJQNmF&aKEGmzf=CZ1<q>g-_<eSH#moZ
zC%&{aG^XJ|KPeMj2@$u<-5DQw>`pdFQ^djD_8MRCghOSx3<X)9j{!;!6PcG(QrG0Q
z5)mpXMDmB<SxYu?Hzc+T!eo?q7{5_MP{dwJfX^Vm_5ww28)2VIA2Uu|gwJn06W?ng
zs(%i4xF&#muP{CZ?r!rVc$IBPQ6EY;7(qmTbsk3a6@<3jd<}I_OerLid8|$@d1EBZ
zpM##^NSt1+4lX>9N+QJ-`dNOQ*VMcyglkeIsows!%!OFJ1I%WY1`Kwx5-Si*T|n7W
zUVhNRkLdI_Qiabx&HVknT%hzs*-CiZS6+r!{8aSih4Qv^Fw(Ox_jdWq3ls`iN&L=*
zC^vK+bqY-pq@V`ZA6*0$S<;ILX(SD=`B>VYYaa~jK{iwZ(=>4SFEQ%kxv6);Ix2Z;
zR0=hPjk+$1#W_hEdg_B)Ek3JPd|FOWEJx_a&#oN<QQhp=X@Qu>-AjXHZNY-A?{m$g
z%79>S^?errrWn?5Te|MqJg+jo+b%<H9K|#!zOpYHJhuYSg(4{A(J(zq?4mgJ$E(^f
zhSZISjWkA~-1Oz{-x3{}%khd+<l99yoy=9zrMHc(fhU4ny>QlcX{>hR*baX0r?Zu$
z>2H=ScMbPkSP4ek0VS619>y(02@3OdxE`)X^**d-<O9a*r26+;WcEbu^HGSt$SpVI
zaQKX=As@uGZyq8Y`nKtKn!*o&d|p*vIkWzWq@?b7wde)y6Q9TMwz(K&qLlhzyWl|b
zDalslv6SQYUN+B1yM{mzdRikFhraY*0S5T&t<<-7PDV4<Dt3(QHA8!+n}8nF<sU%9
zo9=MH3sr}KRLU~&MQ<Ci;?P4H)n8JebwQF)ym+F!MvKBLDS7d+?CY>wSrng{6THI|
z+<B)NaHN@+$)ZeqUp^y)oCFO}@(x@@bk4aH8bUQJ?$|euAw~!R&g@IUhV~F4v-cNd
z69L3i394a9Uq*dPih_T-J#hp6481@ye-!ez8kP8t^p1|t$Io)r=M8n^r{*=21W$H`
zE_*V+6-A!!cB&HrIVz%*YU5%0lfu(xGVpZi5*cRS8+7Wzb-p@u^NveCt!OK+Es)!~
zXMi?g(4XxQRQWOu-w7o>!WLt0!&vF%umI`t9&fVZTBj$TB$xw(=_j5tIP0p4-DjQ&
zTVkcD0r#rG)}6lMd#?J2;0c3~eCWufyPtZfuv3(tu}Z~J@9d>YVayb;BaYs%(dzDJ
zsJfN(ru(C?<dpPC3hf})?66B){E|WO-L4VQB1b{=Ib8ML4%%`JCykXV5ACD4qUD#a
z)vzqgjOUes<0YN$x6=AqIoep84)eTKJw7>>t%rpaaCU+cs|y8gAz~_g2!?K5u$^Q0
z!zMF}y4Fc=N50kAw9m1M;wS(t3{hXHSVAZatFs!ksNakeiV8lQgcFEP0u;5;RMdJ*
z6s1rYCtpeixBr@ABT`QJ?leOSwO50hL*icSr{OTs{TbOEbaCj<!;Mo>mz+?qVhhaM
zB^D_=n4z^RK9vEA$WSB0bM^Ww^3eEAvkkZdeyaJmAV*Mqu67SUPG<>`EJ>b|aXlbY
zCD1enjA0rj-KH`y0bchz@^F;#HMh&lcWYuRvf~vL*f|+gNZ)E*`nm(3o`D@NItHny
zRw0eN6D=`Fl+KFeN2EWWOVw^)naht^+jce1d%Un6m9R4gmM0^hFY34kbslCH=`$kk
ztIH~RbWyTU&G^H7iAabWrW_#s=BA0tHM^!1YwMgxToM~LX?rk9)QkKKe3_hmexqk=
zxLFjJG-`2-7n*+%r+FyjaY-7w1KCW*|1y~b%ya)m0&J~kM(<=Iti4ZzYxF*GSBr(7
z4^X$>NTx%|tbpPV>acf<?>O*vyte~M6lo+bqMf&~>UyC5eCT8x8Dt=Qsv(8jb9Twb
z*#D?Qiq$XYg=#EaB}n_Jj;wKvEY|DeYW+hfE~5T-G{|8A7O>Ob-<)UXhZ5YQjzekn
z$|2@O87%TfUL`|+<sz&&&kAs+d7_c->{F$fd17?ry|j~-?Z=a^ea)CqOr@hq3iUEU
zSZP%W;a?@bAb-1&UY=XvW{7X;^q{p)BvFo5T!q7{*R0qxAr1x40#AC$i*%DwWZshV
z^47}aF<FZpoRVYV%{QE7Y5Y}MqjdcJ{l?MM++U@zzMTW@(*qbgOr!CJXXD7co4H0h
zYw`rCHf#7U$E>N+S`EiKMJ%gd4z|AuMie@oem0roU3MXt0<jqGLs3kN)?$mqBOeUP
z0q@RUoo*jK)XhoP$ld1O*S4h?{J3lNDw$dP`nrHP#&EAv476_YvFtkUwO4StQp0%_
zeHXjy+ALMDM-~83%p?x;1Pkjf!sLN(<n>7vyl;$0a?K<j@dVx|jZLr#6gX_6g<z$w
zmVPkoP34S*9>Ej}wqFO~-_k08S?*?LZ)s^eLB*5*ts=Tr;0JEn`zfQzCg2{PL!npI
zxu+O`W4aE<BIgm94Yl~7z0rLK%wC{4Hh3l}^SBWmBffBhoKKQ<Hw#}_eZ;|<F-;dD
zvJ~M~MydIPTn4}K@E$nr8br*RFRy#h;yjyj;h&KLl_HG!uwxvX8W@-Wd8jj~0;FSV
zL9_NGMGe^s86W}uCeAmEBA9%}eH-10cX-fS9)lVRN01nn>cuwk<FTm)EaHH|z}(4!
z?35IRv_3jUr4P2+6w&i)IL}pJ{)CVLmn0y55EvcRC<5LQm`?B)xdWmS3`GOF%}(y0
zw>gm!00*l2y>oe($@?8dq3t{(V+-Mc<|`!fZX2~JV{&US%e@rhi?RY<QI@lC=WY{8
zFOkZh-qdS$A~+GMSDYw1qFOJ78gzc=LBQ58>|f`?h_oq&fW$i^9fjhDlIV75T7DoR
zRpgq2Bty)QG-e&LH$RapkfAG}E4}W7P){R`wOdjT#UCOrz<6Z9$^C3lQi#sN`sshC
zmNkJd+njoI9%oFHQ{Jmr3le$C=H?bb`QS}GeEA)$LN|+yjhVoLy;GFr11pY3rmVFE
z++Z=c5dj|A&Iq7pXzCu!K%+4tl(`?BdlvhvP(#<n%*bUPirzY;3uVbU{F<yKcyk0e
z39N)$r?Q<$JX0+V=WnXu82obz$7$`KGTo7nZGZGRAHu>PWM23GdS~8wAUADAnUJZ#
z`;+eb_lx@EOafKAigZF%L5aPVVwoFXi(=bSh?SgR1_;N&30XNZ9#g%gs==)Bl6-La
zG#M^7FEG_sd|q>4wTLikac!DhRc8nHn3n$)1)6E_R&V2#d0_RtKPJ`p-6$6s8VSj=
zj>&TZDYeL;g383{DT6_%qk8iDTN>y%rGqdRbwxcl)q&OU123P?TZ#QGwlx|2XmS#W
zJQR!&*j{WFi063ftm{OQvM`$4=49ZDt+mTd2l7Y~?xG&|$Luq7Iz00mZ#9$)V5kky
z$!moJY%CdttPe?U13Y_N3DsfK)dNqgRO8WAZA0i#)GB3IF&8hplsWvj*cN;*2Ly{7
z5+s*tneZ{9#69VW2-NJ;o4;LHLK_c(#x%L*6b-+#z`5aMIs-n)0&OtJc@$d_WTYIW
z!2FT#xmbFW+OXmkn6%pYL_u;W5o^^rzkdRJD+Y#kw!Rw3<&eBwdB-J{om9J10|=g=
zT~nV9_@z)O`3aCMx{51aaUTVTI$_M;KfH3UV$#DuYKy1WKh1OAAwErbyn`MrMCz~~
z=H3}<-;P2+gplsb)22goKXlD9_^YuNn+iNTSIROOX$%xOrG&c@CsCs9u>!UGX)uE;
zdxTS;;e|~5W}F;(NdM4#4f&^!*}Y-EHl*$i=j;@BZeV(eX)>Mo9>vkYqXpZm>L%Zn
zhrlL%OqU(oY<(5N#$B^6M_w{m59GRFpaId%+QlkzrS>PXQbX@ufzDZg4pk5+)Yn-S
zdM+r8u<=hQ+mRgN9s&WMNOR)hFtQSR3-f`>K7EB*Z7&4srusyJ;nrHD&;@OYa=xb8
zxQrBWGdc0)ay-h(PzXx6PuW1AqY$f{JhengVo4u%9eq!lJ#B<zeX`>2DgctbE9#Tz
zaJ&>;Ho*!|DaH#(76leT;UO85sb!lo2#itf=uK`!UBEfalE>bc=c@b9EzjT>l7v@a
zAKXu0jjSJ1dm%q#O;$AR11?ihiMO_aIe0!<a}t3PMk5SgAja|A<0`P$JVnT+bahYR
z`~a<}#>W<Jodc>fQm^-M>vXtZ3txsfnKQWNR(_mM@7wQ>!8jkQqXBx1y)P?=tg($b
z`qC$+1iJl<3dZT)urJia`~%U;gcVh1M{@RN8&+&PMk@|%H9`1+zcK-Bu849-nA3B#
zEb)|>Q>)w5Un|u`b-e}YKor7eqQGsYd$P^L1w8!{K-YviNvFlUTiZNTodzG|P2Tb4
zd87*o>{OfuRtc|u<X>cDWca7S*?PC!gy{RXT}}XypMUr6XPw``_>xE?fNiH5$sCom
z;z;H^2VqhyI#^IvucVEI6V<l9stk#6;1S$(v<2#LL-{3dMiQ?5#{#DA2bg6(+Vj&`
zhuIc8Rj4>vwvVz#n2|MEum<!{&sE`k*a*g!I-A7bgo3ipnL(s?6`HzDTrnF{{L4m&
zy(C*Ie1&Rxz3bj+wuhm?8sbQmmSFn2TUw&0X7GQ?&CJ!AVbA5b6Hwi@fPQKe%~AG6
zXN<hf5YJqx=3UT}Xf)bvgyQV!P6{nXrq8x`eK{RL;iYN8F*c7+`EJcQA4(O{(kmpB
zzhFJnxZ_WfAgS6yx|Zg;3m07M`Z*QsW6j=K7$%x0Cy}9$B$tbbA(c8C5+1$`?0n*%
zA`!eF<%5DfrKte|Ryb5S?A;PRG$yi&HIHEqho3`c)WXE2p6TxOF`s_TK<p7jaAYAB
ze2Rwb+ue5)$ZK8fWVfigv^U{j)iH1VoN$KQ%ve#@OdxQZfs~RL^SQp;lO;~!86$c5
zko$p`raUAdz>Y=rLTAvAeUqxE%h$sWAF1y9wRt+8F53>mOVa3W4;ay8JWXcj>ba{`
zUB<d4(X#AIN7?%Ao}gH9zkWo7E>?veYC0gkm)$6O`vsNSjgQM$u+MDFJdgos&?;-Q
z(kA9lI$Pd0ZYPkws^&4c!VcRnXo2?G7whr3MXmg5uQ(;_iMfbf04kqGVf4*1aEnK8
zx?XyD<qbJ%bY2Z{I9kKWm3T>_t701^*Zpahty-QrRqps<=fQxq{=>ArRr32RX0?n>
zgmyoo`(q;N1@QuGpl~RIc>BTYBZrUa)19^2dW_%03Nio#jd1o0XWv#iTUr6lWs91u
z(8`F2bIDHO{OI-b559G9cteQrQiX2{?Gk-^sxepRw%^icQ>nU?@P=-(*bXMZCBbqD
z|7!d>#ZCP>h^zEL9RXer$};!L?SYyF!o@QYz`y%E51kT)gem3gw4`*2-egKA6o`d-
zVg4tbtlYekeo+ObE!C3{-IsPpFNS{X`$@|rGR#7rwE#*C>C0)#ZfYgv7ra<-0AFs`
zPJlDG`?bsO2qmFv_7BJih4r`MhUN3rn$N35nzlpsJ<iCuhR#X4+!p1wbui@lZLYdd
z4D&_Aa0wHofHaw-WzqcK5z<rc)BE(Zbt{<U{SC<`d)u8$LmE?F92Kg}NtuB6cotri
zylG_hVRVVDD;VzWfOF-OY53`FSnp>+yCC?~>{gcjU|;RY=2O-HG+u0;jg-imA^u&Y
z3Nv94`R%Us*hxr|*7nocSvn|95o%VaS5k9sZt0`L=T&ysg)-_M7++Dn(<S*SEo;%f
zJHIYB@wyrGWSmfN?&nAknXM`DD&l%pGS^ng#_lMj?BIlAKA@4NM(Es5c_U&1NpDU~
zboX$U)}fI*!)7G=$;cIX9q}#7QuNj(tAGPv9Oxr2pXJWO3s+UYIWdhyUa<X7tMk)&
zaefl^wg@4tmYk77eL7cQ{q>co{KM|(Gl&Wv?87bG<u!W)U$LsJiYL07Iak}*m(2yU
zss`_B%L^Pb8cKT(X<C?49q~@+*}o&fG_0o)pGpD`Jtnz?GB*&A{UXB8zh<qMSv;y>
zh4IqKqOJ(?N_Zp0I*lqOhh?~l8;JF@L*A7}YRWAle)05Q#?w=icOcUMS@b9?6GhSC
z*_Scja~1tkWHr$?y!o)l&%9vkk(ATi4}uN?BaNj=#r}RMNxKqoRIh62^wOu)kLE#J
z_@GQ&aD?=@47xA!Cw4k88ess)YUqKG&))~<8P<|!f=9)aa*go8{<D@&b@BSCEE;<c
zf!iWICKostkv>aI$x*=q&iwHvM3_X^C<{>L=>BzEdYUCN!2Jb$5;fnU;Mz1`qab`R
ze!xeM;QXs^p#%IY??~$s$>c9;b|0Tqa2Z=wwVtm!?{PW3m;)p<t|nA9Z9fg<IG(~W
zqTQbWpA{8eHhP6dWn-}>obAn{N;5=mN~Y!V6M~ty_l>#>v|5IgJ9m-?meT+{!WKT&
z$J)T0R)W=WZ|q9pnj2*9^^1c1Kqx#nw|NMq=;tCY4GD!oW;AIWKJCONPw<3*Rc$XF
zhq~73=jV-#ENMW=yfmR_Q;||$nylJE%h>h^(m49Oer|99pNj&l1>?qsSX9pFo=PdI
z@gs)j>EZ1-=_zMV(!v!n2yg7g^!uUtDi#3hy^uIq(j<|Gyn_?+h%S7k1<n_EHPZBV
zsrCMYC?{rp|K%U&iFVrp#@J3{Y402|H@I|Phq0T$OY_c;%YjSTpU;5CBt2S)M!r@Z
zic(5rkQ9Zal?Kj8Be&}-8${|Rz-19+Inf=OJe;a#<_}wabJiLn2t|86p!BVTiYt4@
zRF}e28FP0gB{?v1uG^KUmTAZE?P65oS7(KE3RZUZNM(MN-yL2kh*;ETHuA(+6~D+w
zXe`_bXOLb>zMdZ!jR+)E3vkqrfxwm%L2B^N`$tggo6|<cAoao;BxD5Km#PQ$fDe{8
z*0)sm2P+>`ok?=gY`U1Fq<tgs;y&zls~duLOqi5W>0N$Smfg>h*=6R>fys$r*~BlQ
zo*)qUhn)S&BOkud?FMb%By2H1JKE$(D_c*>@{La!hQXY`3r^Krcd?%ftQq?4`}riH
z%4q@CMIx2a!P^<f9?kQocP8lwx)E(1Tucp7q^+d(w3c541Ce8toK6shH=)1m#KKf)
z=W*n$^j#FooflPgF}u*rM>lpKF%!W@GwP2wN2r@)z8JCOV0*Vl$0lc;yn0dAF~U8!
zX4~8$Qz}Tmlh6Rt%lpAgL9H2))|z|Gu+VZYL-Fk7ivwP6By6ux>qwP}BL%zTZ}`(}
zWW&^hM2?B!A^aobh^KQKJIp6X-R`XXiyz~q@_P?F2kf+<c^qKoit79TkygA8xbne4
zjaODrw8erSVx)L%KmoI>R6f+LFp7SeW|EjE%|BB&x`e1GQ83QA;y%uA0+2>4XJesc
z#%XrWpW;WPy0Z|3Q~!hlp;JdEx^LKtMkXT8IZ&xhAMma+0afK%VQ+vt9(!z{A_hQ$
z!^H95P!0VQQ5XtS0m8e3hZXK~sVAo-<~bcG@!DP*MZ@H&<L-b78MsN>+a&*~w(Xo-
zh8q}>w<cebpdfPQEEEn!)ZfrCi~-5mofzYOH8SkOF;c0A>`oNUG?)lk=l9leG$(;Z
zm6B@J08WuEoJZF!aw-0YXdS>yH*9K7Lu;)VoA97w11j{j*;_>_Uwp?uqsDy6k6*}L
zA$a!pr=-#$nU6u3Xtt&})Dfp8-wM`3yHg6MrDm3m?>^n-e40|c88R*<>nv;)GuSwk
z6O<p#%6J$L7xmt?=i;CCj+X$+Ep0*(9So|n$NO_!yvf0}WtGX&)-iG@cs=gL-<${Y
zc3<@ABtl97cfUr!$~?cG$d6L80ue$?lAZ_V9nu!V+mf-2Jdomd%9j}G_*kKOOX^)s
zxyewUcyBH@sfCPK;meVYEM<-R%}5^Id}o$bBD&|Ztd7{kl{l};23HQP1ESDT31_UT
z19LyY<Ml8wwr|j0@pdmbfnR+ZG9y2WH8{Bp)@~7jMWq?XA6O}p4pzr_b4!}}C*JZ8
zVC@D83&&^Jk~GxG^X@AwuUxw<AX67=McPhnGk6y%Em@+EH0)I0?SV2YCE2rnb+v6^
ze+b`|(aYJ-j)bEBu~dFM)DZePW7e);{)uN`>+==hhblTg^$c^ef~_#&^F>kh7MFvH
zZT>TT-D*!%NYS@%j9$+Y^cU#};sb(J@R0alHz5EnSHW+a5D=4}JIU1+A-HTnoo-&1
zK=fFN)it!~i)exttByB|kmDR6dC=KrIQ0;`2VLx;RUF}h{rwC^{Ajr(Y?K?4f#>Db
zJv2|xaj@(U(I3?6!Im%S5L;1UL=>FZS*%^8YrnZZ3veX=<^qu;n*%b3y0kUHdT-(@
zl?w!!+?&S6jMtz=D=krJF?4M`@`KQ9iB%nt{a1?T882<|N-=GJZdvO;Ux5I!;y$fj
zYg*-(vX>!Znf|&P=`wzC>UTTUH`{MRE6!0|S2rB4)RHC+j0qPu{W)4MektEikV8kK
z?g^uw$-0LYM+J16mCZt|@yF2f+e9$p16g7Z7xX<L9GJ{f`Uh}RP{gQLUuUnAq<XoA
z$0Ml9`3Q3BH9A#%xF?SfN|lx#nchPl$bz<}B|7rZx!#;%JgTljgc4m8<x0uW&w*z^
z*4som^Y4+<LnWC(GINATfd0^|#z`1#|E;^MwpviZ*$R4VQV73|Nxn6-(?trVjBJ$M
z{(D$TRa*Z3CE0CJxI%n*G0;(keB>T*208oHj3s890F(e(G3%$+gdR)|sp%pcHK&2N
zICT&*#~QL++HT{KJbh6WBaGQTwC94n?Bl(%U3>2)L24*MYTl_IQw44V_ABFk%-WfC
zo85%HS@4>DmyqdCD3tH&I*La(&%^y9aiQ*7)fOmWHVm0QZ+VZKLZ&0<-D09(HQEz(
zoE<=24yVXgH!sK~j+1?VZl7P+VM+wfcx;@%vuViA&jleAG0TtA)RbVcjKF}4wg_TB
zz^bNTLGD9V5zJek{osvy|J=gB-{+A*m=t94x$1UHL*8bI+4Rdd;8-1#bJSq;Zm%aL
zf{>eut{ySn3LkmwK-8)vF>VaiXu`T^K50-E4&2vVFKbSPRXZ&`K=b2f(?S3(z&vHY
zGi~twZm^i;Z03}hA6Oa=%-yV7A7`%EGP3C=xDTUGSqxco$44I@W^Sk-WAAG#s;VLH
z^fO@Vq1E@8P&V^KeQIdG?IxZ#LW{yQu#;h^1}dBBCc)+sDBy6=Jv>9zK6aIl7X2CM
z3ZL~PW|_1c!sm@!RWdK-eJ%@DezK|TlJSFVxW(iJaXfi3gqA3I%`&Xp#`B<ma!{XH
z8@sNlwhE$;GXS^wCUtCbXV#bY0xkAb>V(UiA{%Tal@h%~jj^$uBVu&`CNDk<W)kW-
z<0O~tnU9I)b*&024$o{cfO*DC>GhHIgb^2xzc!5EnGiu_V4#~xVv*0<>Bv0wJj2)1
zEug)CvZzy{9E8ov8?;tHXrqWc)*x6Go(>ABg|)?xyYxd~r?*Sq?Pg4~8OE5xh3oN^
z(_A2Zr%>Q<$N{1CW<-Wr&<Xx_+26uj6aJRA+QsFTZ_irW_iuM{r*Q%3l<al%A%|w$
zc}74Jk3Do0bPEv*UmzeX&D-<)RpKc(S3u|!Ezy1HJ84k6oBi{m?HM@)YK4+TF@sd-
z^{<$L94jKk%*JuJv$avaN>ULN6I7Y~!SeJA9recEisq(+Q$CtL)-`UbN7ju#dTz&_
z=VA-E)ukH(zsd)hYv{UeZqkK`AC_&%rT%+{0<N5$4>aDQFH&-HQS2%tiq)zh$#0g5
zO&_LjJuHa*PrT<dH}k_G{Cj^_bhyYDxyc5ooU;us+Doe77H{l(Uc>AcuN%1uu#cAF
z)xd98<&|*2>A>&f0(H}peTXJ-RN|T3W<o^s8C|i%HwclVJwaE{qiAhq!-q1tOq3$1
zE<Hj#vCLfp{d$}&9PhLR;)0Op-qzSd83Uz><Bl`Sz0+P{{T4Mn1pIWUld@{n$b>Gm
z0{Xk%tz6?|0$fgU?50)nc@>=hY=dDtMka!OG$#`eC5~QE37)|@oKNLV_Tgwzz>@EI
z-}9_mYKjjl{yciX$=$BE&-fD8^<<X37JR)RljLn|cpzCWDO(aC5B3$4EpLyp*Z(?y
zBBN>qY7u)R8o|`f-&jgKrkK;3=|NM;AES4I{$BwR1n&E|!HTUYQ{IuyMU}>+U)!e_
z*T(2?O}(~aLr~+LrG=Sy5%cRf4Z7eJ%No_!VTnS_s@54eo5;#$FMxZ!o8f6;9$7Or
z?D^k=!lx&T(YYUzkO87>aS;&I3J(lQ>^t+f{d?;z_x`Jhbzgj-Jf54VG78q;OpT_e
zlPHYPLBD>$q*W6z(uU)*E!8<ydlklZw=qiR40@-^=blGqfTFfS9|k{{7<0`k&_#;R
zk%F0uSU9qjr%z5}NUP2rdBkzV0s(!Y7HP`_2?X6=x=4A3d2lSGbB`gDYppEc6)eK0
z9P}^^vdCes%*0)V7FpNse$F2if$BEO-u%8SlS4pAz&Z(khi1Bhf-YELJf-UR!O_~@
zz3-t+FoQTefSn$;ylj%KEnRMEZ}cizn!Y(-LulRukOuhceKPnT$Ct(4yMTk$D_5Kp
zcH>BVk00;J@TOC-;-%k?QEg`F$v@grmMoB<&<8TF(yLL$%SxAMjEX^>doct6{ZDs~
zfQ3zhE4q9Oc@g700UX5W`z#TZMG!2DnFYN1w6Xl9XtZN%t2yY`sGeFp;kFi?k8tY|
zEt)G`SApvrG`DTrzI&@Cps=8Mp}3JcUs>2P!C~kA+k<}P=L2Vxcv`*7J2>JOM{YaK
zF?>nUT4M|0rY;d%Es&L=`1NaM?Ve8!E^l5S)QHYJE;^#ZNp-*$plc2l!AQ%CLnMQ4
z+HR9i;%U?wCE!B>3{DOa?wK9?n@%_EMKrF)m`P8%r-oQy+({<}mXK>pnyByE949>-
zJ9>`!MIY*RS>(ynAf8X-$+V<B7-n{7<k|?w5ObvFl)+E77MUKC`DmC0ZgUQjpSlFb
z(sBx%XdK5!TX*0*tt>Kv`K(r=I6{-S%Eqz9AzWkdEVXsDcHUuj4vEIMOn)Htwxk0x
zQYv+Wi+bWPzz~5BX=%Vzh9gE!<AGJ^RhJ7ZX20`u030Rn8If4A@BO^Oh&xR#k-wP<
z_DJ*=H1rz~@6V7b$)sP7(eao^BcZfa*OJy8)SaEB!O#XxFjKnoK8Ypx29@+NOXu-m
zs6S;&2PR%`PNoi&*(4r)56?1gQbq*4zoAr3qH?)=1Wlp%tFWcK7K^!RMa2>OhaCES
z|Nq9>-Tk}||N9>5qV-Bd`L(~ajQ^BbG^w-JV5`sHpnhj634)kI;djfTPbaALO?FCL
zNWm8>kof!_yqqI-F!YXaiz4flxK}o3mOpjQ76`EsM=f!^|NmgD@B)f5w^f!i_p+zp
zY=;weKv`cA$(=G$5V;}WUb`O$|L+F=FR@I-R205g7}|73U&`2JpvzHD_`OVzNHKiz
nwkf&)CSNX+G}Gaa0-Kerzlq%kWO}B^EpJt%Yxe^s0CiYEKREb0

literal 0
HcmV?d00001

diff --git a/doc/mod/notification-gotify.md b/doc/mod/notification-gotify.md
new file mode 100644
index 00000000..6fce6293
--- /dev/null
+++ b/doc/mod/notification-gotify.md
@@ -0,0 +1,97 @@
+Send notifications via Gotify
+===========================
+
+[![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
+[![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
+[![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
+
+[⬅️ Go back to main README](../../README.md)
+
+> ℹ️️ **Info**: This module can not be used on its own but requires the base
+> installation. See [main README](../../README.md) for details.
+
+Description
+-----------
+
+This module adds support for sending notifications via
+[Gotify ↗️](https://gotify.net/). A queue is used to make sure
+notifications are not lost on failure but sent later.
+
+Requirements and installation
+-----------------------------
+
+Just install the module:
+
+    $ScriptInstallUpdate mod/notification-gotify;
+
+Also deploy the [Gotify server ↗️](https://github.com/gotify/server) and
+optionally install a Gotify client on your mobile device.
+
+Configuration
+-------------
+
+Follow the [Installation ↗️](https://gotify.net/docs/install) instructions
+and the [First Login ↗️](https://gotify.net/docs/first-login) setup. Once
+you have a user and account you can start creating apps. Each app is an
+independent notification feed for a device or application.
+
+![Create new app](notification-gotify.d/appsetup.avif)
+ 
+On creation apps are assigned a *Token* for authentification, you will need
+that in configuration.
+
+Edit `global-config-overlay`, add `GotifyServer` with your server address
+(just the address, no protocol - `https://` is assumed) and `GotifyToken`
+with the *Token* from your configured app on the Gotify server. Then reload
+the configuration.
+
+> ℹ️ **Info**: Copy relevant configuration from
+> [`global-config`](../../global-config.rsc) (the one without `-overlay`) to
+> your local `global-config-overlay` and modify it to your specific needs.
+
+For a custom service installing an additional certificate may be required.
+You may want to install that certificate manually, after finding the
+[certificate name from browser](../../CERTIFICATES.md).
+
+Usage and invocation
+--------------------
+
+There's nothing special to do. Every script or function sending a notification
+will now send it to your Gotify application feed.
+
+But of course you can use the function to send notifications directly. Give
+it a try:
+
+    $SendGotify "Subject..." "Body...";
+
+Alternatively this sends a notification with all available and configured
+methods:
+
+    $SendNotification "Subject..." "Body...";
+
+To use the functions in your own scripts you have to declare them first.
+Place this before you call them:
+
+    :global SendGotify;
+    :global SendNotification;
+
+In case there is a situation when the queue needs to be purged there is a
+function available:
+
+    $PurgeGotifyQueue;
+
+See also
+--------
+
+* [Certificate name from browser](../../CERTIFICATES.md)
+* [Send notifications via e-mail](notification-email.md)
+* [Send notifications via Matrix](notification-matrix.md)
+* [Send notifications via Ntfy](notification-ntfy.md)
+* [Send notifications via Telegram](notification-telegram.md)
+
+---
+[⬅️ Go back to main README](../../README.md)  
+[⬆️ Go back to top](#top)
diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index da725cff..da6d6dea 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -131,6 +131,7 @@ See also
 
 * [Certificate name from browser](../../CERTIFICATES.md)
 * [Send notifications via e-mail](notification-email.md)
+* [Send notifications via Gotify](notification-gotify.md)
 * [Send notifications via Ntfy](notification-ntfy.md)
 * [Send notifications via Telegram](notification-telegram.md)
 
diff --git a/doc/mod/notification-ntfy.md b/doc/mod/notification-ntfy.md
index ef5dd58c..993501d9 100644
--- a/doc/mod/notification-ntfy.md
+++ b/doc/mod/notification-ntfy.md
@@ -90,6 +90,7 @@ See also
 
 * [Certificate name from browser](../../CERTIFICATES.md)
 * [Send notifications via e-mail](notification-email.md)
+* [Send notifications via Gotify](notification-gotify.md)
 * [Send notifications via Matrix](notification-matrix.md)
 * [Send notifications via Telegram](notification-telegram.md)
 
diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index 6b10fed5..804104fa 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -115,6 +115,7 @@ See also
 
 * [Chat with your router and send commands via Telegram bot](../telegram-chat.md)
 * [Send notifications via e-mail](notification-email.md)
+* [Send notifications via Gotify](notification-gotify.md)
 * [Send notifications via Matrix](notification-matrix.md)
 * [Send notifications via Ntfy](notification-ntfy.md)
 
diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index 81adfe9d..91c568fc 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -47,6 +47,7 @@ The hosts to be checked have to be added to netwatch with specific comment:
 
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/doc/sms-forward.md b/doc/sms-forward.md
index ccb6482b..0c1317d3 100644
--- a/doc/sms-forward.md
+++ b/doc/sms-forward.md
@@ -56,6 +56,7 @@ The configuration goes to `global-config-overlay`, this is the only parameter:
 
 Notification settings are required for
 [e-mail](mod/notification-email.md),
+[gotify](mod/notification-gotify.md),
 [matrix](mod/notification-matrix.md),
 [ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
diff --git a/global-config.rsc b/global-config.rsc
index fa32b163..42a457a5 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -63,6 +63,12 @@
 :global NtfyServerToken "";
 :global NtfyTopic "";
 
+# You can send Gotify notifications. Configure these settings and
+# install the module:
+# $ScriptInstallUpdate mod/notification-gotify
+:global GotifyServer "";
+:global GotifyToken "";
+
 # It is possible to override e-mail, Telegram, Matrix and Ntfy setting
 # for every script. This is done in arrays, where 'Override' is appended
 # to the variable name, like this:
diff --git a/global-functions.rsc b/global-functions.rsc
index 72c36cdc..71aa7de3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -15,7 +15,7 @@
 # Git commit id & info, expected configuration version
 :global CommitId "unknown";
 :global CommitInfo "unknown";
-:global ExpectedConfigVersion 136;
+:global ExpectedConfigVersion 137;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/mod/notification-gotify.rsc b/mod/notification-gotify.rsc
new file mode 100644
index 00000000..70709189
--- /dev/null
+++ b/mod/notification-gotify.rsc
@@ -0,0 +1,139 @@
+#!rsc by RouterOS
+# RouterOS script: mod/notification-gotify
+# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+#                         Leonardo David Monteiro <leo@cub3.xyz>
+# https://rsc.eworm.de/COPYING.md
+#
+# requires RouterOS, version=7.15
+# requires device-mode, fetch, scheduler
+#
+# send notifications via Gotify (gotify.net)
+# https://rsc.eworm.de/doc/mod/notification-gotify.md
+
+:global FlushGotifyQueue;
+:global NotificationFunctions;
+:global PurgeGotifyQueue;
+:global SendGotify;
+:global SendGotify2;
+
+# flush Gotify queue
+:set FlushGotifyQueue do={ :do {
+  :global GotifyQueue;
+
+  :global IsFullyConnected;
+  :global LogPrint;
+
+  :if ([ $IsFullyConnected ] = false) do={
+    $LogPrint debug $0 ("System is not fully connected, not flushing.");
+    :return false;
+  }
+
+  :local AllDone true;
+  :local QueueLen [ :len $GotifyQueue ];
+
+  :if ([ :len [ /system/scheduler/find where name="_FlushGotifyQueue" ] ] > 0 && $QueueLen = 0) do={
+    $LogPrint warning $0 ("Flushing Gotify messages from scheduler, but queue is empty.");
+  }
+
+  :foreach Id,Message in=$GotifyQueue do={
+    :if ([ :typeof $Message ] = "array" ) do={
+      :do {
+        /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
+          http-header-field=($Message->"headers") http-data=[ :serialize to=json ($Message->"message") ] \
+          ($Message->"url") as-value;
+        :set ($GotifyQueue->$Id);
+      } on-error={
+        $LogPrint debug $0 ("Sending queued Gotify message failed.");
+        :set AllDone false;
+      }
+    }
+  }
+
+  :if ($AllDone = true && $QueueLen = [ :len $GotifyQueue ]) do={
+    /system/scheduler/remove [ find where name="_FlushGotifyQueue" ];
+    :set GotifyQueue;
+  }
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
+
+# send notification via Gotify - expects one array argument
+:set ($NotificationFunctions->"gotify") do={
+  :local Notification $1;
+
+  :global Identity;
+  :global IdentityExtra;
+  :global GotifyQueue;
+  :global GotifyServer;
+  :global GotifyServerOverride;
+  :global GotifyToken;
+  :global GotifyTokenOverride;
+
+  :global EitherOr;
+  :global FetchUserAgentStr;
+  :global IfThenElse;
+  :global LogPrint;
+  :global SymbolForNotification;
+
+  :local Server [ $EitherOr ($GotifyServerOverride->($Notification->"origin")) $GotifyServer ];
+  :local Token [ $EitherOr ($GotifyTokenOverride->($Notification->"origin")) $GotifyToken ];
+
+  :if ([ :len $Token ] = 0) do={
+    :return false;
+  }
+
+  :local Url ("https://" . $Server . "/message");
+  :local Headers ({ [ $FetchUserAgentStr ($Notification->"origin") ]; \
+    ("X-Gotify-Key: " . $Token); "Content-Type: application/json" });
+  :local Message ({
+    "title"=("[" . $IdentityExtra . $Identity . "] " . ($Notification->"subject")); \
+    "message"=(($Notification->"message") . "\n" . [ $IfThenElse ([ :len ($Notification->"link") ] > 0) \
+      ("\n" . [ $SymbolForNotification "link" ] . ($Notification->"link")) ]); \
+    "priority"=[ :tonum [ $IfThenElse ($Notification->"silent") 2 5 ] ] });
+
+  :do {
+    /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
+      http-header-field=$Headers http-data=[ :serialize to=json $Message ] $Url as-value;
+  } on-error={
+    $LogPrint info $0 ("Failed sending Gotify notification! Queuing...");
+
+    :if ([ :typeof $GotifyQueue ] = "nothing") do={
+      :set GotifyQueue ({});
+    }
+    :set ($Message->"message") (($Notification->"message") . "\n" . \
+      [ $SymbolForNotification "alarm-clock" ] . "This message was queued since " . \
+      [ /system/clock/get date ] . " " . [ /system/clock/get time ] . " and may be obsolete.");
+    :set ($GotifyQueue->[ :len $GotifyQueue ]) \
+      { url=$Url; headers=$Headers; message=$Message };
+    :if ([ :len [ /system/scheduler/find where name="_FlushGotifyQueue" ] ] = 0) do={
+      /system/scheduler/add name="_FlushGotifyQueue" interval=1m start-time=startup \
+        on-event=(":global FlushGotifyQueue; \$FlushGotifyQueue;");
+    }
+  }
+}
+
+# purge the Gotify queue
+:set PurgeGotifyQueue do={
+  :global GotifyQueue;
+
+  /system/scheduler/remove [ find where name="_FlushGotifyQueue" ];
+  :set GotifyQueue;
+}
+
+# send notification via Gotify - expects at least two string arguments
+:set SendGotify do={ :do {
+  :global SendGotify2;
+
+  $SendGotify2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
+} on-error={
+  :global ExitError; $ExitError false $0;
+} }
+
+# send notification via Gotify - expects one array argument
+:set SendGotify2 do={
+  :local Notification $1;
+
+  :global NotificationFunctions;
+
+  ($NotificationFunctions->"gotify") ("\$NotificationFunctions->\"gotify\"") $Notification;
+}
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index 55b41650..a9a29049 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -61,6 +61,7 @@
   134="Enhanced 'mod/notification-telegram' and 'telegram-chat' to support topics in groups.";
   135="Introduced helper function '\$GetTelegramChatId' for 'mod/notification-telegram' which helps retrieve information.";
   136="Introduced script 'check-perpetual-license' to check for license state on CHR.";
+  137="Added support to send notifications via Gotify (gotify.net).";
 };
 
 # Migration steps to be applied on script updates

From 07541a3cbcacdc53c7108fabb17deb73e5c93bef Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 26 Apr 2025 01:18:40 +0200
Subject: [PATCH 598/988] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index 0b894531..5bf5d089 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -22,6 +22,7 @@ for details!
 * [Daniel Ziegenberg](mailto:daniel@ziegenberg.at) (@ziegenberg)
 * [Ignacio Serrano](mailto:ignic@ignic.com) (@ignic)
 * [Ilya Kulakov](mailto:kulakov.ilya@gmail.com) (@Kentzo)
+* [Leonardo David Monteiro](mailto:leo@cub3.xyz) (@leosfsm)
 * [Michael Gisbers](mailto:michael@gisbers.de) (@mgisbers)
 * [Miquel Bonastre](mailto:mbonastre@yahoo.com) (@mbonastre)
 * @netravnen

From fa83c76be17c6a6bb1472c7e1e7dacf20178397f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 26 Apr 2025 00:54:46 +0200
Subject: [PATCH 599/988] doc/check-lte-firmware-upgrade: add missing reference
 for ntfy

---
 doc/check-lte-firmware-upgrade.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/doc/check-lte-firmware-upgrade.md b/doc/check-lte-firmware-upgrade.md
index a84e2ac2..a0c441e3 100644
--- a/doc/check-lte-firmware-upgrade.md
+++ b/doc/check-lte-firmware-upgrade.md
@@ -45,7 +45,8 @@ Configuration
 Also notification settings are required for
 [e-mail](mod/notification-email.md),
 [gotify](mod/notification-gotify.md),
-[matrix](mod/notification-matrix.md) and/or
+[matrix](mod/notification-matrix.md),
+[ntfy](mod/notification-ntfy.md) and/or
 [telegram](mod/notification-telegram.md).
 
 See also

From 154fb438002c0103eef88a207f0f86b417a86dda Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 3 May 2025 22:01:47 +0200
Subject: [PATCH 600/988] mod/notification-ntfy: drop unused variable

---
 mod/notification-ntfy.rsc | 1 -
 1 file changed, 1 deletion(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index aac6d6c1..2748c5b6 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -18,7 +18,6 @@
 # flush ntfy queue
 :set FlushNtfyQueue do={ :do {
   :global NtfyQueue;
-  :global NtfyMessageIDs;
 
   :global IsFullyConnected;
   :global LogPrint;

From ccfe1a781edc2990575cca57d49582e7e046d960 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:25:28 +0200
Subject: [PATCH 601/988] check-routeros-update: log and print info with
 scheduler

---
 check-routeros-update.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 361be34e..1b68d5af 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -62,8 +62,9 @@
   $WaitFullyConnected;
 
   :if ([ :len [ /system/scheduler/find where name="_RebootForUpdate" ] ] > 0) do={
+    $LogPrint info $ScriptName ("A reboot for update is already scheduled.");
     :set ExitOK true;
-    :error "A reboot for update is already scheduled.";
+    :error false;
   }
 
   $LogPrint debug $ScriptName ("Checking for updates...");

From 90f61d3d75bccb8f8892dc7190ec325ccc7d940f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:17:26 +0200
Subject: [PATCH 602/988] global-functions: $ExitError: support to pass in
 error message

---
 global-functions.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 71aa7de3..17b36741 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -452,13 +452,15 @@
 :set ExitError do={
   :local ExitOK [ :tostr $1 ];
   :local Name   [ :tostr $2 ];
+  :local Error  [ :tostr $3 ];
 
   :global IfThenElse;
   :global LogPrint; 
 
   :if ($ExitOK = "false") do={
     $LogPrint error $Name ([ $IfThenElse ([ :pick $Name 0 1 ] = "\$") \
-        "Function" "Script" ] . " '" . $Name . "' exited with error.");
+        "Function" "Script" ] . " '" . $Name . "' exited with error" . \
+        [ $IfThenElse (!($Error ~ "^(|true|false)\$")) (": " . $Error) "." ]);
   }
 }
 

From 41bf9677db821c1d2c2479dc4f6f8b8740f3bdbe Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:49:49 +0200
Subject: [PATCH 603/988] global-functions: use :onerror for outer block

---
 global-functions.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 17b36741..29e6d06b 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1119,7 +1119,7 @@
 }
 
 # install new scripts, update existing scripts
-:set ScriptInstallUpdate do={ :do {
+:set ScriptInstallUpdate do={ :onerror Err {
   :local Scripts    [ :toarray $1 ];
   :local NewComment [ :tostr   $2 ];
 
@@ -1396,8 +1396,8 @@
     :set GlobalConfigChanges;
     :set GlobalConfigMigration;
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # lock script against multiple invocation
@@ -1538,12 +1538,12 @@
 }
 
 # send notification via NotificationFunctions - expects at least two string arguments
-:set SendNotification do={ :do {
+:set SendNotification do={ :onerror Err {
   :global SendNotification2;
 
   $SendNotification2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # send notification via NotificationFunctions - expects one array argument

From b9faeb86b98cc1667f0591dfd34ca43dbd6a718b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 604/988] accesslist-duplicates: use :onerror for outer block

---
 accesslist-duplicates.capsman.rsc  | 6 +++---
 accesslist-duplicates.local.rsc    | 6 +++---
 accesslist-duplicates.template.rsc | 6 +++---
 accesslist-duplicates.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index 27546c8d..c0967541 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -14,7 +14,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
@@ -32,6 +32,6 @@
     }
     :set ($Seen->$Mac) 1;
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index 589815d6..6f2d1205 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -14,7 +14,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
@@ -32,6 +32,6 @@
     }
     :set ($Seen->$Mac) 1;
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index ccbca3df..b08f2adb 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
@@ -41,6 +41,6 @@
     }
     :set ($Seen->$Mac) 1;
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index 527ebb4b..ccd04f5d 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -14,7 +14,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
@@ -32,6 +32,6 @@
     }
     :set ($Seen->$Mac) 1;
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 02a205b14ecec27f535b0453c012e27a03c2a6ed Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 605/988] backup-cloud: use :onerror for outer block

---
 backup-cloud.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index c4e23b2a..bc09aac2 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global BackupRandomDelay;
@@ -99,6 +99,6 @@
     :set PackagesUpdateBackupFailure true;
   }
   $RmDir "tmpfs/backup-cloud";
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 953daca8ac06c01050057f1e14e2020a58116f50 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 606/988] backup-email: use :onerror for outer block

---
 backup-email.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-email.rsc b/backup-email.rsc
index d0973011..95f25109 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global BackupPassword;
@@ -135,6 +135,6 @@
     :delay 1s;
     :set I ($I + 1);
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 34c052c5f14da6d9a68861f26b383594ee61bcb4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 607/988] backup-partition: use :onerror for outer block

---
 backup-partition.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 1f0cf2ee..42f77904 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -14,7 +14,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global BackupPartitionCopyBeforeFeatureUpdate;
@@ -121,6 +121,6 @@
     :set ExitOK true;
     :error false;
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 0a9acab0405fc5ec5081e6f423c04e26c1847cac Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 608/988] backup-upload: use :onerror for outer block

---
 backup-upload.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 14c39141..945659a0 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -14,7 +14,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global BackupPassword;
@@ -173,6 +173,6 @@
     :set PackagesUpdateBackupFailure true;
   }
   $RmDir $DirName;
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From e0ba2c8282be0af1a1f43a5ebd51fb5848c955b9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 609/988] capsman-download-packages: use :onerror for outer
 block

---
 capsman-download-packages.capsman.rsc  | 6 +++---
 capsman-download-packages.template.rsc | 6 +++---
 capsman-download-packages.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 25c43f58..688f7041 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global CleanFilePath;
@@ -87,6 +87,6 @@
       /caps-man/remote-cap/upgrade [ find where version!=$InstalledVersion ];
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index b2698382..12506ead 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -16,7 +16,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global CleanFilePath;
@@ -98,6 +98,6 @@
       /interface/wifi/capsman/remote-cap/upgrade [ find where version!=$InstalledVersion ];
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 901bb0af..78238ef3 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global CleanFilePath;
@@ -89,6 +89,6 @@
       /interface/wifi/capsman/remote-cap/upgrade [ find where version!=$InstalledVersion ];
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 54a3012e89a4b377a1f5f1ac9435b7d3a8912ec1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 610/988] capsman-rolling-upgrade: use :onerror for outer block

---
 capsman-rolling-upgrade.capsman.rsc  | 6 +++---
 capsman-rolling-upgrade.template.rsc | 6 +++---
 capsman-rolling-upgrade.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index 791b3dbb..813b8e59 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -16,7 +16,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -45,6 +45,6 @@
       :delay ($Delay . "s");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index 0b1cc2ba..355926da 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -17,7 +17,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -53,6 +53,6 @@
       :delay ($Delay . "s");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 4afdee2e..3d5c801f 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -16,7 +16,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -46,6 +46,6 @@
       :delay ($Delay . "s");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 009516dbd4525126d688b26e189fa7f3be893f93 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 611/988] certificate-renew-issued: use :onerror for outer
 block

---
 certificate-renew-issued.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index 91a48dea..dc724b00 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global CertIssuedExportPass;
@@ -47,6 +47,6 @@
       $LogPrint info $ScriptName ("Issued a new certificate for '" . $CertVal->"common-name" . "'.");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From e44a5384b7e21e0013746a1d06762d969d5b45d7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 612/988] check-certificates: use :onerror for outer block

---
 check-certificates.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index be8e4dff..75a006eb 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global CertRenewTime;
@@ -237,6 +237,6 @@
           ", it is invalid after " . ($CertVal->"invalid-after") . ".");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 051a1d95e5e1f5e90e79d505ef4bf542344cd64d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 613/988] check-health: use :onerror for outer block

---
 check-health.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-health.rsc b/check-health.rsc
index f02a2491..75710a07 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global CheckHealthCPUUtilization;
@@ -105,6 +105,6 @@
   }
 
   :set CheckHealthPlugins;
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From b959f2d941a87bd24e3495ca3d30a765200f8698 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 614/988] check-lte-firmware-upgrade: use :onerror for outer
 block

---
 check-lte-firmware-upgrade.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index c5b6cb56..f0b173fa 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global SentLteFirmwareUpgradeNotification;
@@ -102,6 +102,6 @@
   :foreach Interface in=[ /interface/lte/find ] do={
     $CheckInterface $ScriptName $Interface;
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From f5c33a9cfb367cf80b2bf34a924f95d6e124c454 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 615/988] check-perpetual-license: use :onerror for outer block

---
 check-perpetual-license.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-perpetual-license.rsc b/check-perpetual-license.rsc
index 9a3a3c74..7caa69aa 100644
--- a/check-perpetual-license.rsc
+++ b/check-perpetual-license.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Identity;
@@ -73,6 +73,6 @@
         ". It is now valid until " . ($License->"deadline-at") . ".") });
     :set SentCertificateNotification;
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 472dc9289dd1bf9309c17341bd996149ef0837d8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 616/988] check-routeros-update: use :onerror for outer block

---
 check-routeros-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 1b68d5af..ee7e5dac 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Identity;
@@ -214,6 +214,6 @@
       " is available for downgrade.");
     :set SentRouterosUpdateNotification ($Update->"latest-version");
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 7d8e9fda29f219471d8d68e1feb70e01e8d7e8dc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 617/988] collect-wireless-mac: use :onerror for outer block

---
 collect-wireless-mac.capsman.rsc  | 6 +++---
 collect-wireless-mac.local.rsc    | 6 +++---
 collect-wireless-mac.template.rsc | 6 +++---
 collect-wireless-mac.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index 17e09e3c..5cec9b90 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Identity;
@@ -95,6 +95,6 @@
       $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index 4a38bfa4..db75d69b 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Identity;
@@ -96,6 +96,6 @@
       $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index da901be2..144a8be1 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -16,7 +16,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Identity;
@@ -113,6 +113,6 @@
       $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index cb217ce1..74f3ec6d 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Identity;
@@ -95,6 +95,6 @@
       $LogPrint debug $ScriptName ("No mac address available... Ignoring.");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 55e07a8a4223850c94e24706fcf929c2328415d2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 618/988] daily-psk: use :onerror for outer block

---
 daily-psk.capsman.rsc  | 6 +++---
 daily-psk.local.rsc    | 6 +++---
 daily-psk.template.rsc | 6 +++---
 daily-psk.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 56729315..e4e7b8b1 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
@@ -91,6 +91,6 @@
       }
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 9dea4692..efea9b50 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
@@ -90,6 +90,6 @@
       }
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 8202eeba..5944c743 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -16,7 +16,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
@@ -106,6 +106,6 @@
       }
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 3de3c5b6..050e9c27 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
@@ -91,6 +91,6 @@
       }
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 5dc6b712e187af1e84b75d7e497ad7f50ca1bad7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 619/988] dhcp-lease-comment: use :onerror for outer block

---
 dhcp-lease-comment.capsman.rsc  | 6 +++---
 dhcp-lease-comment.local.rsc    | 6 +++---
 dhcp-lease-comment.template.rsc | 6 +++---
 dhcp-lease-comment.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 36b31c85..92495c91 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -38,6 +38,6 @@
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index 35dc6f68..07802bc2 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -38,6 +38,6 @@
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 47a85542..814e1d7c 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -16,7 +16,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -43,6 +43,6 @@
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index e0f97851..92fb6b00 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -38,6 +38,6 @@
       /ip/dhcp-server/lease/set comment=$NewComment $Lease;
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 8ed83a311d3b9140b01c2dd5064f59ad4bcc3955 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 620/988] dhcp-to-dns: use :onerror for outer block

---
 dhcp-to-dns.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index 9b940984..b032071f 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Domain;
@@ -125,6 +125,6 @@
       $LogPrint debug $ScriptName ("No address available... Ignoring.");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From d99380443b1607389d107bf0fbc4182168a4d8b0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 621/988] firmware-upgrade-reboot: use :onerror for outer block

---
 firmware-upgrade-reboot.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index 86a9a8c5..9c3ba76b 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -55,6 +55,6 @@
 
   $LogPrint info $ScriptName ("Firmware upgrade successful, rebooting.");
   /system/reboot;
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 0e93d8ca665100a0db14b4191c494af51a238a35 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 622/988] fw-addr-lists: use :onerror for outer block

---
 fw-addr-lists.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index f0940fef..0fd79c1b 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global FwAddrLists;
@@ -209,6 +209,6 @@
         " - renewed: " . [ $HumanReadableNum $CntRenew 1000 ] . \
         " - removed: " . [ $HumanReadableNum $CntRemove 1000 ]);
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From d609da00416f95eb74e9742dbc0a981a5b9a41b5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 623/988] gps-track: use :onerror for outer block

---
 gps-track.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gps-track.rsc b/gps-track.rsc
index dea56d2e..bd280c9b 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global GpsTrackUrl;
@@ -48,6 +48,6 @@
   } else={
     $LogPrint debug $ScriptName ("GPS data not valid.");
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 143b8a8ddc2b30940333b95e09d23574076e48cb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 624/988] hotspot-to-wpa-cleanup: use :onerror for outer block

---
 hotspot-to-wpa-cleanup.capsman.rsc  | 6 +++---
 hotspot-to-wpa-cleanup.template.rsc | 6 +++---
 hotspot-to-wpa-cleanup.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 033d0e73..6cd1bfbc 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -16,7 +16,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
@@ -75,6 +75,6 @@
       /ip/dhcp-server/lease/remove $Lease;
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 0f8c490e..18d6beae 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -17,7 +17,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
@@ -82,6 +82,6 @@
       /ip/dhcp-server/lease/remove $Lease;
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index dfec697d..6348f74f 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -16,7 +16,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
@@ -75,6 +75,6 @@
       /ip/dhcp-server/lease/remove $Lease;
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 9ae733a1678577a96ba00a79de347a18c8cec319 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 625/988] hotspot-to-wpa: use :onerror for outer block

---
 hotspot-to-wpa.capsman.rsc  | 6 +++---
 hotspot-to-wpa.template.rsc | 6 +++---
 hotspot-to-wpa.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index 3f514750..54724cff 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
@@ -100,6 +100,6 @@
 
   :delay 2s;
   /caps-man/access-list/set $Entry action=accept;
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index 068241d1..6764af9f 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -16,7 +16,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
@@ -120,6 +120,6 @@
   :delay 2s;
   /caps-man/access-list/set $Entry action=accept;
   /interface/wifi/access-list/set $Entry action=accept;
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index cc5e2fc6..e74081ae 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
@@ -97,6 +97,6 @@
 
   :delay 2s;
   /interface/wifi/access-list/set $Entry action=accept;
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 1075b6b24e8875ced9da78f0a9c112283e345f21 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 626/988] ipsec-to-dns: use :onerror for outer block

---
 ipsec-to-dns.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index 26dab0a2..a2739328 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Domain;
@@ -79,6 +79,6 @@
       /ip/dns/static/add name=$Fqdn address=($PeerVal->"dynamic-address") ttl=$Ttl comment=$Comment place-before=$PlaceBefore;
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 39ab19b272160f85df034a5f71d4d5dd5748e962 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 627/988] ipv6-update: use :onerror for outer block

---
 ipv6-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index 94bd1bc4..633919d3 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -102,6 +102,6 @@
       }
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From da9313801774c2f5d7c02d1b5bd3ac001e0be20f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 628/988] lease-script: use :onerror for outer block

---
 lease-script.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lease-script.rsc b/lease-script.rsc
index bf27fda8..309337c7 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Grep;
@@ -60,6 +60,6 @@
       $LogPrint warning $ScriptName ("Running script '" . $Script . "' failed!");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From c643069b3e77cca143f3f58ad10fe69c9eda69e2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 629/988] log-forward: use :onerror for outer block

---
 log-forward.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/log-forward.rsc b/log-forward.rsc
index afeb3f29..0ce420f2 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Identity;
@@ -108,6 +108,6 @@
 
   :local LogAll [ /log/find ];
   :set LogForwardLast ($LogAll->([ :len $LogAll ] - 1) );
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 9acf9781cbe85c23b76bd82d1843b7fc9fa16913 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 630/988] accesslist-duplicates: fail if global functions do
 not become ready

---
 accesslist-duplicates.capsman.rsc  | 6 +++---
 accesslist-duplicates.local.rsc    | 6 +++---
 accesslist-duplicates.template.rsc | 6 +++---
 accesslist-duplicates.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index c0967541..545b24ea 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -10,11 +10,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index 6f2d1205..ac2c7fe3 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -10,11 +10,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index b08f2adb..89559918 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -11,11 +11,11 @@
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index ccd04f5d..331de751 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -10,11 +10,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :local Seen ({});

From 7d4e4ec273342ce0738102ce123deb673b199d3f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 631/988] backup-cloud: fail if global functions do not become
 ready

---
 backup-cloud.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index bc09aac2..f0861f09 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -9,11 +9,11 @@
 # upload backup to MikroTik cloud
 # https://rsc.eworm.de/doc/backup-cloud.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupRandomDelay;

From 64ec962bb6de5cef73a2c0da378f4e49a73e6e8e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 632/988] backup-email: fail if global functions do not become
 ready

---
 backup-email.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-email.rsc b/backup-email.rsc
index 95f25109..da2ee02d 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -9,11 +9,11 @@
 # create and email backup and config file
 # https://rsc.eworm.de/doc/backup-email.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupPassword;

From bf1b3e3c5e7943309fbb1b036babd628b827dc63 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 633/988] backup-partition: fail if global functions do not
 become ready

---
 backup-partition.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index 42f77904..f99a66c1 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -10,11 +10,11 @@
 # save configuration to fallback partition
 # https://rsc.eworm.de/doc/backup-partition.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupPartitionCopyBeforeFeatureUpdate;

From 9423d8019a5aa7a78f9fea16b228af112848f1f3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 634/988] backup-upload: fail if global functions do not become
 ready

---
 backup-upload.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 945659a0..9373b4c1 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -10,11 +10,11 @@
 # create and upload backup and config file
 # https://rsc.eworm.de/doc/backup-upload.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupPassword;

From 33393798b1a7eb5756b1da6b89d72daff05eea96 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 635/988] capsman-download-packages: fail if global functions
 do not become ready

---
 capsman-download-packages.capsman.rsc  | 6 +++---
 capsman-download-packages.template.rsc | 6 +++---
 capsman-download-packages.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 688f7041..ee826386 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CleanFilePath;
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 12506ead..91a9167c 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -12,11 +12,11 @@
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CleanFilePath;
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 78238ef3..cb6cb6f4 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CleanFilePath;

From de5aab12ae2e3d8db965925941746d202813650a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 636/988] capsman-rolling-upgrade: fail if global functions do
 not become ready

---
 capsman-rolling-upgrade.capsman.rsc  | 6 +++---
 capsman-rolling-upgrade.template.rsc | 6 +++---
 capsman-rolling-upgrade.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index 813b8e59..20978802 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -12,11 +12,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index 355926da..75de088f 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -13,11 +13,11 @@
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 3d5c801f..e6c6facb 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -12,11 +12,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From b4188ab1a2356c0ce5f70f449a185900decc86ea Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 637/988] certificate-renew-issued: fail if global functions do
 not become ready

---
 certificate-renew-issued.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index dc724b00..3fd60208 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -8,11 +8,11 @@
 # renew locally issued certificates
 # https://rsc.eworm.de/doc/certificate-renew-issued.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CertIssuedExportPass;

From 9b811e1ed25c9fc6c47eb4ef4d31036e3b7e3d0a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 638/988] check-certificates: fail if global functions do not
 become ready

---
 check-certificates.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 75a006eb..505ec4b0 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -9,11 +9,11 @@
 # check for certificate validity
 # https://rsc.eworm.de/doc/check-certificates.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CertRenewTime;

From 96cbb32a4f073e11f264e4a641cb304de49fb435 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 639/988] check-health: fail if global functions do not become
 ready

---
 check-health.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-health.rsc b/check-health.rsc
index 75710a07..40ce101d 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -8,11 +8,11 @@
 # check for RouterOS health state
 # https://rsc.eworm.de/doc/check-health.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CheckHealthCPUUtilization;

From 8f1ac6fa17afd96afb82de31f0e997b73f40d883 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 640/988] check-lte-firmware-upgrade: fail if global functions
 do not become ready

---
 check-lte-firmware-upgrade.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index f0b173fa..6030e4d4 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -8,11 +8,11 @@
 # check for LTE firmware upgrade, send notification
 # https://rsc.eworm.de/doc/check-lte-firmware-upgrade.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global SentLteFirmwareUpgradeNotification;

From 08d78224a000751409cd715c4219aae3e2ac9eba Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 641/988] check-perpetual-license: fail if global functions do
 not become ready

---
 check-perpetual-license.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-perpetual-license.rsc b/check-perpetual-license.rsc
index 7caa69aa..d46f0b49 100644
--- a/check-perpetual-license.rsc
+++ b/check-perpetual-license.rsc
@@ -8,11 +8,11 @@
 # check perpetual license on CHR
 # https://rsc.eworm.de/doc/check-perpetual-license.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From 69b2af4bd7ac5f63860532c36d762953adf87d90 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 10:46:44 +0200
Subject: [PATCH 642/988] check-routeros-update: fail if global functions do
 not become ready

---
 check-routeros-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index ee7e5dac..932256ad 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -9,11 +9,11 @@
 # check for RouterOS update, send notification and/or install
 # https://rsc.eworm.de/doc/check-routeros-update.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From 2712bcb44db3e323faf2ddc18ddd228fcdbf215a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 643/988] collect-wireless-mac: fail if global functions do not
 become ready

---
 collect-wireless-mac.capsman.rsc  | 6 +++---
 collect-wireless-mac.local.rsc    | 6 +++---
 collect-wireless-mac.template.rsc | 6 +++---
 collect-wireless-mac.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index 5cec9b90..fa6198a0 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index db75d69b..4082bbbe 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index 144a8be1..51671562 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -12,11 +12,11 @@
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index 74f3ec6d..af0dd8b2 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From 8418d58ff0703d18db0e513bd71484dc93c9e821 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 644/988] daily-psk: fail if global functions do not become
 ready

---
 daily-psk.capsman.rsc  | 6 +++---
 daily-psk.local.rsc    | 6 +++---
 daily-psk.template.rsc | 6 +++---
 daily-psk.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index e4e7b8b1..a1b01fc8 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index efea9b50..6ba6ce2f 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 5944c743..43ce3331 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -12,11 +12,11 @@
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 050e9c27..7e1714dc 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;

From ff03f49724cdcba8774de481779b5f7e7993dc36 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 645/988] mode-button: use :onerror for outer block

---
 mode-button.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index edc5f400..83897ba7 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global ModeButton;
@@ -26,7 +26,7 @@
 
   :if ([ :len $Scheduler ] = 0) do={
     $LogPrint info $ScriptName ("Creating scheduler _ModeButtonScheduler, counting presses...");
-    :global ModeButtonScheduler do={ :do {
+    :global ModeButtonScheduler do={ :onerror Err {
       :local FuncName $0;
 
       :global ModeButton;
@@ -82,8 +82,8 @@
       } else={
         $LogPrint info $FuncName ("No action defined for " . $Count . " mode-button presses.");
       }
-    } on-error={
-      :global ExitError; $ExitError false $0;
+    } do={
+      :global ExitError; $ExitError false $0 $Err;
     } }
     /system/scheduler/add name="_ModeButtonScheduler" \
         on-event=":global ModeButtonScheduler; \$ModeButtonScheduler;" interval=3s;
@@ -91,6 +91,6 @@
     $LogPrint debug $ScriptName ("Updating scheduler _ModeButtonScheduler...");
     /system/scheduler/set $Scheduler start-time=[ /system/clock/get time ];
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From a556f4c39858223e75e60228f9618aaaf0cc0af7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 646/988] dhcp-lease-comment: fail if global functions do not
 become ready

---
 dhcp-lease-comment.capsman.rsc  | 6 +++---
 dhcp-lease-comment.local.rsc    | 6 +++---
 dhcp-lease-comment.template.rsc | 6 +++---
 dhcp-lease-comment.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 92495c91..724682b1 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index 07802bc2..0a5f3b56 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 814e1d7c..71307b70 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -12,11 +12,11 @@
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index 92fb6b00..1f29f0b4 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From 2d41ad718d785545c165ef4bcf4603abdbeec020 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 647/988] netwatch-dns: use :onerror for outer block

---
 netwatch-dns.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 467d6362..1d2d86b2 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global CertificateAvailable;
@@ -145,6 +145,6 @@
       }
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From a308d4269e5d20f3787c524a427e8acf55e7a1d2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 648/988] dhcp-to-dns: fail if global functions do not become
 ready

---
 dhcp-to-dns.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index b032071f..e66704b1 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -9,11 +9,11 @@
 # check DHCP leases and add/remove/update DNS entries
 # https://rsc.eworm.de/doc/dhcp-to-dns.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Domain;

From 0df4170a2e634591327088988f685f0c35d82569 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 649/988] netwatch-notify: use :onerror for outer block

---
 netwatch-notify.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 0b8a8dc5..d256689a 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global NetwatchNotify;
@@ -224,6 +224,6 @@
         "since"=($Metric->"since") };
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 4d1349125da065caaa0f3a572629c875eeb01d96 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 650/988] firmware-upgrade-reboot: fail if global functions do
 not become ready

---
 firmware-upgrade-reboot.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index 9c3ba76b..d5774db1 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -8,11 +8,11 @@
 # install firmware upgrade, and reboot
 # https://rsc.eworm.de/doc/firmware-upgrade-reboot.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From c720eadd2c42286653ac8984d6e7c255b2ad97a8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 651/988] ospf-to-leds: use :onerror for outer block

---
 ospf-to-leds.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index a8662b32..e2f4dcf6 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -44,6 +44,6 @@
       /system/leds/set type=off [ find where leds=$LED ];
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 4b92181f2eefcc416c3281fc376c42e33712eb55 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 652/988] fw-addr-lists: fail if global functions do not become
 ready

---
 fw-addr-lists.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 0fd79c1b..1a892dac 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -8,11 +8,11 @@
 # download, import and update firewall address-lists
 # https://rsc.eworm.de/doc/fw-addr-lists.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global FwAddrLists;

From 9a5a2aec4fc08685725e3d0ef2b98459cfd433e3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 653/988] packages-update: use :onerror for outer block

---
 packages-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index b11596ea..dce7cca4 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global BackupRandomDelay;
@@ -163,6 +163,6 @@
   $LogPrint info $ScriptName ("Rebooting for update.");
   :delay 1s;
   /system/reboot;
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 925e7f869e59b1c544062bdd6693f2a286a5504e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 654/988] gps-track: fail if global functions do not become
 ready

---
 gps-track.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gps-track.rsc b/gps-track.rsc
index bd280c9b..d66bf009 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -9,11 +9,11 @@
 # track gps data by sending json data to http server
 # https://rsc.eworm.de/doc/gps-track.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global GpsTrackUrl;

From aeccd36f16a13ebe01a48a9b522b503adf599c6e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 655/988] ppp-on-up: use :onerror for outer block

---
 ppp-on-up.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index e09bd9d5..ffe3079c 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
@@ -39,6 +39,6 @@
       $LogPrint warning $ScriptName ("Running script '" . $ScriptName . "' failed!");
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 76778f04319819eec8e2285f3a88703e4290cbde Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 656/988] hotspot-to-wpa-cleanup: fail if global functions do
 not become ready

---
 hotspot-to-wpa-cleanup.capsman.rsc  | 6 +++---
 hotspot-to-wpa-cleanup.template.rsc | 6 +++---
 hotspot-to-wpa-cleanup.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 6cd1bfbc..fd0e5545 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -12,11 +12,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 18d6beae..11f359cc 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -13,11 +13,11 @@
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 6348f74f..7f0ebae8 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -12,11 +12,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;

From 3eec13b8b58d57c04d957e13d016c9e587a5de68 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 657/988] sms-action: use :onerror for outer block

---
 sms-action.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sms-action.rsc b/sms-action.rsc
index 3c8307a8..d5bd5531 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -12,7 +12,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global SmsAction;
@@ -36,6 +36,6 @@
   } else={
     $LogPrint warning $ScriptName ("The code for action '" . $Action . "' failed syntax validation!");
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 057bbb8481f57cde2917aa358b36f6793f3bff85 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 658/988] hotspot-to-wpa: fail if global functions do not
 become ready

---
 hotspot-to-wpa.capsman.rsc  | 6 +++---
 hotspot-to-wpa.template.rsc | 6 +++---
 hotspot-to-wpa.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index 54724cff..a9a14075 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index 6764af9f..84a43bcc 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -12,11 +12,11 @@
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index e74081ae..5c5afdab 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -11,11 +11,11 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;

From aae9b4d4e39c36ceeef1d0e1125c8bce9255bdac Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 659/988] sms-forward: use :onerror for outer block

---
 sms-forward.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index 8169022c..ddaa3a8c 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Identity;
@@ -96,6 +96,6 @@
       }
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From bcdb74f31d9f4006ff55f83900a85e310f14c372 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 13:52:57 +0200
Subject: [PATCH 660/988] global-config: introduce a state variable

---
 global-config.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/global-config.rsc b/global-config.rsc
index 42a457a5..c0577ff6 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -6,6 +6,9 @@
 # global configuration
 # https://rsc.eworm.de/
 
+# Warning: Do *NOT* copy this line to overlay!
+:global GlobalConfigReady false;
+
 # Set this to 'true' to disable news and change notifications.
 :global NoNewsAndChangesNotification false;
 
@@ -275,3 +278,6 @@
         [ /system/script/get $Script name ] . " failed!");
   }
 }
+
+# signal we are ready
+:set GlobalConfigReady true;

From 83cf003f62877f34abb112ed5105b391ea11f4e6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 661/988] ipsec-to-dns: fail if global functions do not become
 ready

---
 ipsec-to-dns.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index a2739328..fb7b55c1 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -9,11 +9,11 @@
 # and add/remove/update DNS entries from IPSec mode-config
 # https://rsc.eworm.de/doc/ipsec-to-dns.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Domain;

From 3ad8cafc7a01ced329b4b1af6cafd87a282e71df Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 662/988] telegram-chat: use :onerror for outer block

---
 telegram-chat.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 5db4860f..155bb023 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global Identity;
@@ -190,6 +190,6 @@
   }
   :set TelegramChatOffset ([ :pick $TelegramChatOffset 1 3 ], \
     [ $IfThenElse ($UpdateID >= $TelegramChatOffset->2) ($UpdateID + 1) ($TelegramChatOffset->2) ]);
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 60c5e84401ddb1490bd43daf796e4ba86ca22327 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:36 +0200
Subject: [PATCH 663/988] accesslist-duplicates: check for global config to be
 ready

---
 accesslist-duplicates.capsman.rsc  | 6 +++---
 accesslist-duplicates.local.rsc    | 6 +++---
 accesslist-duplicates.template.rsc | 6 +++---
 accesslist-duplicates.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index 545b24ea..5e6cf0a0 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -12,9 +12,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index ac2c7fe3..a6b4f417 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -12,9 +12,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index 89559918..e51198d8 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :local Seen ({});
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index 331de751..cadacb6b 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -12,9 +12,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :local Seen ({});

From 41b705aa5a2158a7da7c51da4c95db96d7363d9c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 664/988] ipv6-update: fail if global functions do not become
 ready

---
 ipv6-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index 633919d3..24167c01 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -8,11 +8,11 @@
 # update firewall and dns settings on IPv6 prefix change
 # https://rsc.eworm.de/doc/ipv6-update.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From fe3d9f841822d210d13af90025415015e89743a8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 665/988] update-gre-address: use :onerror for outer block

---
 update-gre-address.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index cddfa92f..2570f80a 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -13,7 +13,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global CharacterReplace;
@@ -41,6 +41,6 @@
       }
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From d57916fc267e9fdeb9c878f578c2b7d3736fbac6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:36 +0200
Subject: [PATCH 666/988] backup-cloud: check for global config to be ready

---
 backup-cloud.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index f0861f09..e41db275 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupRandomDelay;

From 829fce789b6d0bd5de192c8491e1b54a5fe9ba35 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 667/988] lease-script: fail if global functions do not become
 ready

---
 lease-script.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lease-script.rsc b/lease-script.rsc
index 309337c7..501e0470 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -8,11 +8,11 @@
 # run scripts on DHCP lease
 # https://rsc.eworm.de/doc/lease-script.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Grep;

From d2af793683cdfa7e187da10cf8baf5c99e9c7fe1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:44:23 +0200
Subject: [PATCH 668/988] update-tunnelbroker: use :onerror for outer block

---
 update-tunnelbroker.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 45afa6f8..10adef0b 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -15,7 +15,7 @@
 :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 
 :local ExitOK false;
-:do {
+:onerror Err {
   :local ScriptName [ :jobname ];
 
   :global CertificateAvailable;
@@ -69,6 +69,6 @@
       /interface/6to4/set $Interface local-address=$PublicAddress;
     }
   }
-} on-error={
-  :global ExitError; $ExitError $ExitOK [ :jobname ];
+} do={
+  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From 37a6d4cc438b2b3481d8904aa0ec4dcde9a96ce8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:36 +0200
Subject: [PATCH 669/988] backup-email: check for global config to be ready

---
 backup-email.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-email.rsc b/backup-email.rsc
index da2ee02d..632d2e60 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupPassword;

From a6ab95ccef4bc3255b7d45f66f86865337459f67 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 670/988] log-forward: fail if global functions do not become
 ready

---
 log-forward.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/log-forward.rsc b/log-forward.rsc
index 0ce420f2..3774dac7 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -8,11 +8,11 @@
 # forward log messages via notification
 # https://rsc.eworm.de/doc/log-forward.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From 02986eb77a2f6e2b8a0f008ca21ed49dd6195e24 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 671/988] mod/bridge-port-to: use :onerror for outer block

---
 mod/bridge-port-to.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index 39a036e5..93eedcef 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -10,7 +10,7 @@
 
 :global BridgePortTo;
 
-:set BridgePortTo do={ :do {
+:set BridgePortTo do={ :onerror Err {
   :local BridgePortTo [ :tostr $1 ];
 
   :global IfThenElse;
@@ -65,6 +65,6 @@
     $LogPrint info $0 ("Re-enabling interfaces...");
     /interface/ethernet/enable $InterfaceReEnable;
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }

From 200167fa38037a02d63c249639027614f101118f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:36 +0200
Subject: [PATCH 672/988] backup-partition: check for global config to be ready

---
 backup-partition.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index f99a66c1..c2221d2c 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -12,9 +12,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupPartitionCopyBeforeFeatureUpdate;

From 63606ad25cec7d1345c3b3a9158472328f02444c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 673/988] mode-button: fail if global functions do not become
 ready

---
 mode-button.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index 83897ba7..e5c836f0 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -9,11 +9,11 @@
 # act on multiple mode and reset button presses
 # https://rsc.eworm.de/doc/mode-button.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global ModeButton;

From d5141f43e5e812e387eadb7b6f505f136032c48f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 674/988] mod/bridge-port-vlan: use :onerror for outer block

---
 mod/bridge-port-vlan.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 0eeb9b5f..6deee994 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -10,7 +10,7 @@
 
 :global BridgePortVlan;
 
-:global BridgePortVlan do={ :do {
+:global BridgePortVlan do={ :onerror Err {
   :local ConfigTo [ :tostr $1 ];
 
   :global IfThenElse;
@@ -74,6 +74,6 @@
     $LogPrint info $0 ("Re-enabling interfaces...");
     /interface/ethernet/enable $InterfaceReEnable;
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }

From 27fc07e9406ae6a37f642213d5da3d23b92e63f2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:36 +0200
Subject: [PATCH 675/988] backup-upload: check for global config to be ready

---
 backup-upload.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 9373b4c1..11ced4ca 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -12,9 +12,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupPassword;

From 2374be9a2192a1bcf43aa487facc1c17da34e08d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 676/988] netwatch-dns: fail if global functions do not become
 ready

---
 netwatch-dns.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 1d2d86b2..5a928f0a 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -9,11 +9,11 @@
 # monitor and manage dns/doh with netwatch
 # https://rsc.eworm.de/doc/netwatch-dns.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CertificateAvailable;

From 9b558ff8a1bc57f3197e71d73b468e820577d4f7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 677/988] mod/inspectvar: use :onerror for outer block

---
 mod/inspectvar.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index c8615573..89c02860 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -12,12 +12,12 @@
 :global InspectVarReturn;
 
 # inspect variable and print on terminal
-:set InspectVar do={ :do {
+:set InspectVar do={ :onerror Err {
   :global InspectVarReturn;
 
   :put [ :tocrlf [ $InspectVarReturn $1 ] ];
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # inspect variable and return formatted string

From 12037ff6e618d84bead0252d9fee36617e9e7ee6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:36 +0200
Subject: [PATCH 678/988] capsman-download-packages: check for global config to
 be ready

---
 capsman-download-packages.capsman.rsc  | 6 +++---
 capsman-download-packages.template.rsc | 6 +++---
 capsman-download-packages.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index ee826386..cab1e4c3 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CleanFilePath;
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 91a9167c..ea411201 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -14,9 +14,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CleanFilePath;
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index cb6cb6f4..a8103569 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CleanFilePath;

From 446aa3d7ffff5f9b70be2bfafdcef2ec88f3742c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 679/988] netwatch-notify: fail if global functions do not
 become ready

---
 netwatch-notify.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index d256689a..0c483305 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -8,11 +8,11 @@
 # monitor netwatch and send notifications
 # https://rsc.eworm.de/doc/netwatch-notify.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global NetwatchNotify;

From 8cddc63767010072417d405cc4460febb8e9978d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 680/988] mod/ipcalc: use :onerror for outer block

---
 mod/ipcalc.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index 477cf4a8..eacff6d9 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -12,7 +12,7 @@
 :global IPCalcReturn;
 
 # print netmask, network, min host, max host and broadcast
-:set IPCalc do={ :do {
+:set IPCalc do={ :onerror Err {
   :local Input [ :tostr $1 ];
 
   :global FormatLine;
@@ -27,8 +27,8 @@
     [ $FormatLine "HostMin" ($Values->"hostmin") ] . "\n" . \
     [ $FormatLine "HostMax" ($Values->"hostmax") ] . "\n" . \
     [ $FormatLine "Broadcast" ($Values->"broadcast") ]) ];
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # calculate and return netmask, network, min host, max host and broadcast

From 40b19a179d0b7b87cfc2bf2fd9a92c0a20f95532 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:36 +0200
Subject: [PATCH 681/988] capsman-rolling-upgrade: check for global config to
 be ready

---
 capsman-rolling-upgrade.capsman.rsc  | 6 +++---
 capsman-rolling-upgrade.template.rsc | 6 +++---
 capsman-rolling-upgrade.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index 20978802..0d4114a3 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -14,9 +14,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index 75de088f..690d73d8 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -15,9 +15,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index e6c6facb..8e32ab20 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -14,9 +14,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From ff812dd1928657dbae9df59e2d19d6f6fe33fb1f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 682/988] ospf-to-leds: fail if global functions do not become
 ready

---
 ospf-to-leds.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index e2f4dcf6..cdc06e55 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -8,11 +8,11 @@
 # visualize ospf instance state via leds
 # https://rsc.eworm.de/doc/ospf-to-leds.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From 862830b341716250daba288091b36d64926dccdb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 683/988] mod/notification-email: use :onerror for outer block

---
 mod/notification-email.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 7b89d985..c0f9d860 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -35,7 +35,7 @@
 }
 
 # flush e-mail queue
-:set FlushEmailQueue do={ :do {
+:set FlushEmailQueue do={ :onerror Err {
   :global EmailQueue;
 
   :global EitherOr;
@@ -135,8 +135,8 @@
 
   /system/scheduler/set interval=(($SchedVal->"run-count") . "m") \
       comment="Waiting for retry..." $Scheduler;
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # generate filter for log-forward
@@ -248,12 +248,12 @@
 }
 
 # send notification via e-mail - expects at least two string arguments
-:set SendEMail do={ :do {
+:set SendEMail do={ :onerror Err {
   :global SendEMail2;
 
   $SendEMail2 ({ origin=$0; subject=$1; message=$2; link=$3 });
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # send notification via e-mail - expects one array argument

From ef1a402c4e61be10824ef441811d6f8a03ed35a7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 684/988] certificate-renew-issued: check for global config to
 be ready

---
 certificate-renew-issued.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index 3fd60208..14917e4c 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CertIssuedExportPass;

From 4358dabb19d45e3bee816d6f9bc76dad21a3c10c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 685/988] packages-update: fail if global functions do not
 become ready

---
 packages-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index dce7cca4..81a6d132 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -9,11 +9,11 @@
 # download packages and reboot for installation
 # https://rsc.eworm.de/doc/packages-update.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupRandomDelay;

From 9d845d40f00250e1b3107c175aa2f1a77ffb3a63 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 686/988] mod/notification-gotify: use :onerror for outer block

---
 mod/notification-gotify.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/mod/notification-gotify.rsc b/mod/notification-gotify.rsc
index 70709189..3ae4cdd3 100644
--- a/mod/notification-gotify.rsc
+++ b/mod/notification-gotify.rsc
@@ -17,7 +17,7 @@
 :global SendGotify2;
 
 # flush Gotify queue
-:set FlushGotifyQueue do={ :do {
+:set FlushGotifyQueue do={ :onerror Err {
   :global GotifyQueue;
 
   :global IsFullyConnected;
@@ -53,8 +53,8 @@
     /system/scheduler/remove [ find where name="_FlushGotifyQueue" ];
     :set GotifyQueue;
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # send notification via Gotify - expects one array argument
@@ -121,12 +121,12 @@
 }
 
 # send notification via Gotify - expects at least two string arguments
-:set SendGotify do={ :do {
+:set SendGotify do={ :onerror Err {
   :global SendGotify2;
 
   $SendGotify2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # send notification via Gotify - expects one array argument

From 4954a886958a7e3e0b9c05dcd9e8d4135f0d5a04 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 687/988] check-certificates: check for global config to be
 ready

---
 check-certificates.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 505ec4b0..c10e33ba 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CertRenewTime;

From 7b624faaa108201522cb792fcf776c39e30a0839 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 688/988] ppp-on-up: fail if global functions do not become
 ready

---
 ppp-on-up.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index ffe3079c..ef08c9d8 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -8,11 +8,11 @@
 # run scripts on ppp up
 # https://rsc.eworm.de/doc/ppp-on-up.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From d865deb8a8710d98453adf221e72fdfd0a71dc33 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 689/988] mod/notification-matrix: use :onerror for outer block

---
 mod/notification-matrix.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index e989ee04..c8cf887c 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -19,7 +19,7 @@
 :global SetupMatrixJoinRoom;
 
 # flush Matrix queue
-:set FlushMatrixQueue do={ :do {
+:set FlushMatrixQueue do={ :onerror Err {
   :global MatrixQueue;
 
   :global IsFullyConnected;
@@ -58,8 +58,8 @@
     /system/scheduler/remove [ find where name="_FlushMatrixQueue" ];
     :set MatrixQueue;
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # send notification via Matrix - expects one array argument
@@ -167,12 +167,12 @@
 }
 
 # send notification via Matrix - expects at least two string arguments
-:set SendMatrix do={ :do {
+:set SendMatrix do={ :onerror Err {
   :global SendMatrix2;
 
   $SendMatrix2 ({ origin=$0; subject=$1; message=$2; link=$3 });
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # send notification via Matrix - expects one array argument

From 1936dcb563c47b4ca4847912077f5f609d1360ad Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 690/988] check-health: check for global config to be ready

---
 check-health.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-health.rsc b/check-health.rsc
index 40ce101d..1b92d1e4 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CheckHealthCPUUtilization;

From 0ef8888412f2f9ad8fe8ffc714b3dfb30802f55e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 691/988] sms-action: fail if global functions do not become
 ready

---
 sms-action.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sms-action.rsc b/sms-action.rsc
index d5bd5531..0f02bcec 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -8,11 +8,11 @@
 # run action on received SMS
 # https://rsc.eworm.de/doc/sms-action.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global SmsAction;

From e3a15cc6b803453290d2cc8e2415c207473aa2a1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 692/988] mod/notification-ntfy: use :onerror for outer block

---
 mod/notification-ntfy.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 2748c5b6..8e5688e8 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -16,7 +16,7 @@
 :global SendNtfy2;
 
 # flush ntfy queue
-:set FlushNtfyQueue do={ :do {
+:set FlushNtfyQueue do={ :onerror Err {
   :global NtfyQueue;
 
   :global IsFullyConnected;
@@ -52,8 +52,8 @@
     /system/scheduler/remove [ find where name="_FlushNtfyQueue" ];
     :set NtfyQueue;
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # send notification via ntfy - expects one array argument
@@ -143,12 +143,12 @@
 }
 
 # send notification via ntfy - expects at least two string arguments
-:set SendNtfy do={ :do {
+:set SendNtfy do={ :onerror Err {
   :global SendNtfy2;
 
   $SendNtfy2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # send notification via ntfy - expects one array argument

From 506acb748b9e6670323b68fb46b90e5d16ddff15 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 693/988] check-lte-firmware-upgrade: check for global config
 to be ready

---
 check-lte-firmware-upgrade.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index 6030e4d4..1a5e08ce 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global SentLteFirmwareUpgradeNotification;

From 24ea16cf91dae10a654e77911dbb53b213a6fd4f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 694/988] sms-forward: fail if global functions do not become
 ready

---
 sms-forward.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index ddaa3a8c..9c3e4a55 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -9,11 +9,11 @@
 # forward SMS to e-mail
 # https://rsc.eworm.de/doc/sms-forward.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From f7ba78702f92bec374b59066e57772d76f97358f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 695/988] mod/notification-telegram: use :onerror for outer
 block

---
 mod/notification-telegram.rsc | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 5ef353b4..51c8dbf7 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -17,7 +17,7 @@
 :global SendTelegram2;
 
 # flush telegram queue
-:set FlushTelegramQueue do={ :do {
+:set FlushTelegramQueue do={ :onerror Err {
   :global TelegramQueue;
   :global TelegramMessageIDs;
 
@@ -55,12 +55,12 @@
     /system/scheduler/remove [ find where name="_FlushTelegramQueue" ];
     :set TelegramQueue;
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # get the chat id
-:set GetTelegramChatId do={ :do {
+:set GetTelegramChatId do={ :onerror Err {
   :global TelegramTokenId;
 
   :global CertificateAvailable;
@@ -94,8 +94,8 @@
   :if (($Message->"is_topic_message") = true) do={
     $LogPrint info $0 ("The thread id is: " . ($Message->"message_thread_id"));
   }
-} on-error={ 
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } } 
 
 # send notification via telegram - expects one array argument
@@ -226,12 +226,12 @@
 }
 
 # send notification via telegram - expects at least two string arguments
-:set SendTelegram do={ :do {
+:set SendTelegram do={ :onerror Err {
   :global SendTelegram2;
 
   $SendTelegram2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # send notification via telegram - expects one array argument

From 78463f469b02768c1197db9c2cc35c46581c7fcc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 696/988] check-perpetual-license: check for global config to
 be ready

---
 check-perpetual-license.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-perpetual-license.rsc b/check-perpetual-license.rsc
index d46f0b49..c2f0dff0 100644
--- a/check-perpetual-license.rsc
+++ b/check-perpetual-license.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From 35bce7c5eb775e7d9d0e774344918383d17b9009 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 697/988] telegram-chat: fail if global functions do not become
 ready

---
 telegram-chat.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 155bb023..f62034c1 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -9,11 +9,11 @@
 # use Telegram to chat with your Router and send commands
 # https://rsc.eworm.de/doc/telegram-chat.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From 5958851bd7e3b034dda25f670e0019247c4d73a0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 698/988] mod/scriptrunonce: use :onerror for outer block

---
 mod/scriptrunonce.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 7fcd5b5b..3797c155 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -11,7 +11,7 @@
 :global ScriptRunOnce;
 
 # fetch and run script(s) once
-:set ScriptRunOnce do={ :do {
+:set ScriptRunOnce do={ :onerror Err {
   :local Scripts [ :toarray $1 ];
 
   :global ScriptRunOnceBaseUrl;
@@ -51,6 +51,6 @@
 
     :return true;
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }

From 59c66de69065989d8f3b6032c156d484299f2032 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 699/988] check-routeros-update: check for global config to be
 ready

---
 check-routeros-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 932256ad..34d06475 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From 87edd0bd29f3825fd638760f20343f5afe890ae3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 700/988] update-gre-address: fail if global functions do not
 become ready

---
 update-gre-address.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 2570f80a..8d98eaa7 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -9,11 +9,11 @@
 # ipsec remote peer
 # https://rsc.eworm.de/doc/update-gre-address.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CharacterReplace;

From af40ae82edaccbf6d1995f8ad1a5250f57f950db Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 09:45:14 +0200
Subject: [PATCH 701/988] mod/ssh-keys-import: use :onerror for outer block

---
 mod/ssh-keys-import.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 2fae4b13..9a6cd398 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -12,7 +12,7 @@
 :global SSHKeysImportFile;
 
 # import single key passed as string
-:set SSHKeysImport do={ :do {
+:set SSHKeysImport do={ :onerror Err {
   :local Key  [ :tostr $1 ];
   :local User [ :tostr $2 ];
 
@@ -65,12 +65,12 @@
     $RmDir "tmpfs/ssh-keys-import";
     :return false;
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }
 
 # import keys from a file
-:set SSHKeysImportFile do={ :do {
+:set SSHKeysImportFile do={ :onerror Err {
   :local FileName [ :tostr $1 ];
   :local User     [ :tostr $2 ];
 
@@ -109,6 +109,6 @@
       $LogPrint warning $0 ("SSH key of type '" . $KeyVal->0 . "' is not supported.");
     }
   }
-} on-error={
-  :global ExitError; $ExitError false $0;
+} do={
+  :global ExitError; $ExitError false $0 $Err;
 } }

From 286ed96cc34efa929093bb72e64d102b458ae60e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 702/988] collect-wireless-mac: check for global config to be
 ready

---
 collect-wireless-mac.capsman.rsc  | 6 +++---
 collect-wireless-mac.local.rsc    | 6 +++---
 collect-wireless-mac.template.rsc | 6 +++---
 collect-wireless-mac.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index fa6198a0..06b8d844 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index 4082bbbe..6716582d 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index 51671562..53e6b0a8 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -14,9 +14,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index af0dd8b2..43ac8519 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From 6040f70b19a06dc0d9817f3240b1bb13c34d453c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 11:15:15 +0200
Subject: [PATCH 703/988] update-tunnelbroker: fail if global functions do not
 become ready

---
 update-tunnelbroker.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 10adef0b..2deb5b22 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -11,11 +11,11 @@
 # update local address of tunnelbroker interface
 # https://rsc.eworm.de/doc/update-tunnelbroker.md
 
-:global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
-
 :local ExitOK false;
 :onerror Err {
+  :global GlobalFunctionsReady;
+  :retry { :if ($GlobalFunctionsReady != true) \
+      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CertificateAvailable;

From b19c448f7839aea73830fb0f3bb7314f98ce2f2c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 704/988] daily-psk: check for global config to be ready

---
 daily-psk.capsman.rsc  | 6 +++---
 daily-psk.local.rsc    | 6 +++---
 daily-psk.template.rsc | 6 +++---
 daily-psk.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index a1b01fc8..3ecd6b66 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 6ba6ce2f..d496350c 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 43ce3331..5a1df2f1 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -14,9 +14,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index 7e1714dc..c441e581 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global DailyPskMatchComment;

From ad6ad5bfccfec0bfbb83848ddf6784ef12e1e770 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 705/988] dhcp-lease-comment: check for global config to be
 ready

---
 dhcp-lease-comment.capsman.rsc  | 6 +++---
 dhcp-lease-comment.local.rsc    | 6 +++---
 dhcp-lease-comment.template.rsc | 6 +++---
 dhcp-lease-comment.wifi.rsc     | 6 +++---
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 724682b1..3615bb9b 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index 0a5f3b56..9da53336 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 71307b70..62cace12 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -14,9 +14,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index 1f29f0b4..667708cd 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From 857993cf90b0bb432c18292816734f55ed2867cf Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 706/988] dhcp-to-dns: check for global config to be ready

---
 dhcp-to-dns.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index e66704b1..a9c91e1c 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Domain;

From a68763c4dd4ca4e93dcd0edd98cd25bc8ac5d734 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 707/988] firmware-upgrade-reboot: check for global config to
 be ready

---
 firmware-upgrade-reboot.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index d5774db1..e3ca55b3 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From 9e70bca30b792785034422db15bf158d94e666e6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 708/988] fw-addr-lists: check for global config to be ready

---
 fw-addr-lists.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 1a892dac..4ee3c344 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global FwAddrLists;

From 148892694fe43d6382ec368e450634342965882a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 709/988] gps-track: check for global config to be ready

---
 gps-track.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gps-track.rsc b/gps-track.rsc
index d66bf009..4cc50663 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global GpsTrackUrl;

From 713e63da87d57d77961ddf606b4438a4c2b7ecd7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 710/988] hotspot-to-wpa-cleanup: check for global config to be
 ready

---
 hotspot-to-wpa-cleanup.capsman.rsc  | 6 +++---
 hotspot-to-wpa-cleanup.template.rsc | 6 +++---
 hotspot-to-wpa-cleanup.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index fd0e5545..e4ac9678 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -14,9 +14,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 11f359cc..d51e1d03 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -15,9 +15,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 7f0ebae8..8bb2631b 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -14,9 +14,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;

From 6a9fced721e9ed54b451aeecc2e68f761663dfb6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 711/988] hotspot-to-wpa: check for global config to be ready

---
 hotspot-to-wpa.capsman.rsc  | 6 +++---
 hotspot-to-wpa.template.rsc | 6 +++---
 hotspot-to-wpa.wifi.rsc     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index a9a14075..8977cee1 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index 84a43bcc..c5d977d1 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -14,9 +14,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index 5c5afdab..6a97e460 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global EitherOr;

From ce29fcf49ed381ebd910f74193ce3be7cac1def9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 712/988] ipsec-to-dns: check for global config to be ready

---
 ipsec-to-dns.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index fb7b55c1..1b5ed133 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Domain;

From 59f9a1187f769dc57d778a77264ae69591ac594b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 713/988] ipv6-update: check for global config to be ready

---
 ipv6-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index 24167c01..580a426c 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From 10bd9a1cb5b3d556abcc5732d894e3bcc797e94b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 714/988] lease-script: check for global config to be ready

---
 lease-script.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lease-script.rsc b/lease-script.rsc
index 501e0470..b166ee3b 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Grep;

From 160effd91b66459dd9a2ecaf5ecc442a33f135c5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 715/988] log-forward: check for global config to be ready

---
 log-forward.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/log-forward.rsc b/log-forward.rsc
index 3774dac7..be7eff7b 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From bc1c238158a18f5fc7122a5110f21d29e72540cb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 716/988] mode-button: check for global config to be ready

---
 mode-button.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index e5c836f0..c6422f0b 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global ModeButton;

From 2d39dbdf7c363ba5657dee6c94f9763bbaab3e86 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 717/988] netwatch-dns: check for global config to be ready

---
 netwatch-dns.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 5a928f0a..3da14987 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CertificateAvailable;

From 5b40380cd2dfe6b3fcd0828460851c41e1d1b416 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 718/988] netwatch-notify: check for global config to be ready

---
 netwatch-notify.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 0c483305..fb8e8d5e 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global NetwatchNotify;

From aaecd1b457f5e5779276c7217d1c5429536d5534 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 719/988] ospf-to-leds: check for global config to be ready

---
 ospf-to-leds.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index cdc06e55..26f8aa37 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From 38ec392a5fd462a803f4e04219a0d4acbf98bc63 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 720/988] packages-update: check for global config to be ready

---
 packages-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index 81a6d132..4fde131b 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global BackupRandomDelay;

From 194698f53f27bebc9ee349597c764b58cd4475b0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 721/988] ppp-on-up: check for global config to be ready

---
 ppp-on-up.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index ef08c9d8..f16d73f3 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global LogPrint;

From 6270ac45d8ed241cfe31e345cccc097cb33bd02b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 722/988] sms-action: check for global config to be ready

---
 sms-action.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sms-action.rsc b/sms-action.rsc
index 0f02bcec..47e19223 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -10,9 +10,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global SmsAction;

From 15248ffd39b982a176d87c39db6c3f789102a29f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 723/988] sms-forward: check for global config to be ready

---
 sms-forward.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index 9c3e4a55..8ca5ae43 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From 9b5419b939cadc751076c68a2b6bb8434a828444 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 724/988] telegram-chat: check for global config to be ready

---
 telegram-chat.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index f62034c1..b1f7f99e 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global Identity;

From b4d80d3b178e376568a3e7bbcb5dce29c631e383 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 725/988] update-gre-address: check for global config to be
 ready

---
 update-gre-address.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 8d98eaa7..dd7d63e4 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -11,9 +11,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CharacterReplace;

From f2dbb9eff34aa43fd2be41f9a6a36da06e07dbb0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:08:37 +0200
Subject: [PATCH 726/988] update-tunnelbroker: check for global config to be
 ready

---
 update-tunnelbroker.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 2deb5b22..8e5e1d0f 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -13,9 +13,9 @@
 
 :local ExitOK false;
 :onerror Err {
-  :global GlobalFunctionsReady;
-  :retry { :if ($GlobalFunctionsReady != true) \
-      do={ :error ("Global functions not ready."); }; } delay=500ms max=50;
+  :global GlobalConfigReady; :global GlobalFunctionsReady;
+  :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
+      do={ :error ("Global config and/or functions not ready."); }; } delay=500ms max=50;
   :local ScriptName [ :jobname ];
 
   :global CertificateAvailable;

From 0f58cecc0f2f114d5520db5d283fcd7d243c1bc1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:09:50 +0200
Subject: [PATCH 727/988] global-wait: check for global config to be ready

---
 global-wait.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-wait.rsc b/global-wait.rsc
index ca3fc0c4..23b56298 100644
--- a/global-wait.rsc
+++ b/global-wait.rsc
@@ -8,5 +8,6 @@
 # wait for global-functions to finish
 # https://rsc.eworm.de/doc/global-wait.md
 
+:global GlobalConfigReady;
 :global GlobalFunctionsReady;
-:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
+:while ($GlobalConfigReady != true || $GlobalFunctionsReady != true) do={ :delay 500ms; }

From 4561b17dbff272b1b5671155ee1838dba2f24062 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 13:57:05 +0200
Subject: [PATCH 728/988] global-config: add another comment with visual hint

---
 global-config.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/global-config.rsc b/global-config.rsc
index c0577ff6..2d7d43d2 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -8,6 +8,9 @@
 
 # Warning: Do *NOT* copy this line to overlay!
 :global GlobalConfigReady false;
+#   ||   ... but
+#  \||/   start
+#   \/    here!
 
 # Set this to 'true' to disable news and change notifications.
 :global NoNewsAndChangesNotification false;

From 661aad522b09bf4aba5b0be4877669e0a826b4a6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 14:05:47 +0200
Subject: [PATCH 729/988] global-config: add another visual hint

---
 global-config.rsc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/global-config.rsc b/global-config.rsc
index 2d7d43d2..589a58a4 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -270,8 +270,11 @@
   "cert2-cn"="4n0th3r-s3cr3t";
 };
 
+#    /\       Warning: Do *NOT* copy
+#   /\7\    the code below to overlay!
+#  /_()_\      Things *will* break!
+#
 # load custom settings from overlay and snippets
-# Warning: Do *NOT* copy this code to overlay!
 :foreach Script in=([ /system/script/find where name="global-config-overlay" ], \
                     [ /system/script/find where name~"^global-config-overlay.d/" ]) do={
   :do {

From f095b581e74b5c5a8110c801243b2ec039499120 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 May 2025 19:42:12 +0200
Subject: [PATCH 730/988] global-functions: $ScriptInstallUpdate: set config
 and functions not ready...

... before reload. This should fix some corner cases where scripts ran
with broken configuration or functions.

Also do reload both - configuration and functions - to simplify the
function.
---
 global-functions.rsc | 37 ++++++++++++++++---------------------
 1 file changed, 16 insertions(+), 21 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 29e6d06b..6e3d7120 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1126,6 +1126,8 @@
   :global CommitId;
   :global CommitInfo;
   :global ExpectedConfigVersion;
+  :global GlobalConfigReady;
+  :global GlobalFunctionsReady;
   :global Identity;
   :global IDonate;
   :global NoNewsAndChangesNotification;
@@ -1159,8 +1161,7 @@
 
   :local CommitIdBefore $CommitId;
   :local ExpectedConfigVersionBefore $ExpectedConfigVersion;
-  :local ReloadGlobalFunctions false;
-  :local ReloadGlobalConfig false;
+  :local ReloadGlobal false;
   :local DeviceMode [ /system/device-mode/get ];
 
   :local CheckSums ({});
@@ -1269,31 +1270,25 @@
       $LogPrint info $0 ("Updating script: " . $ScriptVal->"name");
       /system/script/set owner=($ScriptVal->"name") \
           source=[ $IfThenElse ($ScriptUpdatesCRLF = true) $SourceCRLF $SourceNew ] $Script;
-      :if ($ScriptVal->"name" = "global-config") do={
-        :set ReloadGlobalConfig true;
-      }
-      :if ($ScriptVal->"name" = "global-functions" || $ScriptVal->"name" ~ ("^mod/.")) do={
-        :set ReloadGlobalFunctions true;
+      :if ($ScriptVal->"name" = "global-config" || \
+           $ScriptVal->"name" = "global-functions" || \
+           $ScriptVal->"name" ~ ("^mod/.")) do={
+        :set ReloadGlobal true;
       }
     } on-error={ }
   }
 
-  :if ($ReloadGlobalFunctions = true) do={
-    $LogPrint info $0 ("Reloading global functions.");
-    :do {
-      /system/script/run global-functions;
-    } on-error={
-      $LogPrint error $0 ("Reloading global functions failed!");
-    }
-  }
+  :if ($ReloadGlobal = true) do={
+    $LogPrint info $0 ("Reloading global configuration and functions.");
+    :set GlobalConfigReady false;
+    :set GlobalFunctionsReady false;
+    :delay 1s;
 
-  :if ($ReloadGlobalConfig = true) do={
-    $LogPrint info $0 ("Reloading global configuration.");
-    :do {
+    :onerror Err {
       /system/script/run global-config;
-    } on-error={
-      $LogPrint error $0 ("Reloading global configuration failed!" . \
-        " Syntax error or missing overlay?");
+      /system/script/run global-functions;
+    } do={
+      $LogPrint error $0 ("Reloading global configuration and functions failed! " . $Err);
     }
   }
 

From 90857805622a97ac3b150da60579952bf2ba0185 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 7 May 2025 11:45:55 +0200
Subject: [PATCH 731/988] sms-forward: delay after removal...

... to give the SIM card some time to succeed. Removing several messages
one after another fails without this.
---
 sms-forward.rsc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index 8ca5ae43..4798a8ac 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -62,6 +62,7 @@
           ($SmsVal->"message")~("^:cmd " . $Settings->"secret" . " script ")) do={
         $LogPrint debug $ScriptName ("Removing SMS, which started a script.");
         /tool/sms/inbox/remove $Sms;
+        :delay 50ms;
       } else={
         :set Messages ($Messages . "\n\nOn " . $SmsVal->"timestamp" . \
             " type " . $SmsVal->"type" . ":\n" . $SmsVal->"message");
@@ -93,6 +94,7 @@
           " by " . $Identity . " from " . $Phone . ":" . $Messages) });
       :foreach Sms in=$Delete do={
         /tool/sms/inbox/remove $Sms;
+        :delay 50ms;
       }
     }
   }

From 01f3cb91e796fba77bc7ec810d98a31fe2a33843 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 7 May 2025 14:31:37 +0200
Subject: [PATCH 732/988] sms-forward: add error handling on message removal

---
 sms-forward.rsc | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index 4798a8ac..a564056a 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -61,8 +61,12 @@
       :if ($Phone = $Settings->"allowed-number" && \
           ($SmsVal->"message")~("^:cmd " . $Settings->"secret" . " script ")) do={
         $LogPrint debug $ScriptName ("Removing SMS, which started a script.");
-        /tool/sms/inbox/remove $Sms;
-        :delay 50ms;
+        :onerror Err {
+          /tool/sms/inbox/remove $Sms;
+          :delay 50ms;
+        } do={
+          $LogPrint warning $ScriptName ("Failed to remove message: " . $Err);
+        }
       } else={
         :set Messages ($Messages . "\n\nOn " . $SmsVal->"timestamp" . \
             " type " . $SmsVal->"type" . ":\n" . $SmsVal->"message");
@@ -93,8 +97,12 @@
         message=("Received " . [ $IfThenElse ($Count = 1) "this message" ("these " . $Count . " messages") ] . \
           " by " . $Identity . " from " . $Phone . ":" . $Messages) });
       :foreach Sms in=$Delete do={
-        /tool/sms/inbox/remove $Sms;
-        :delay 50ms;
+        :onerror Err {
+          /tool/sms/inbox/remove $Sms;
+          :delay 50ms;
+        } do={
+          $LogPrint warning $ScriptName ("Failed to remove message: " . $Err);
+        }
       }
     }
   }

From 6691e2e765c7dbfa3e639bea2331bbbf0b83ed4f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 21 May 2025 21:51:16 +0200
Subject: [PATCH 733/988] global-functions: $DownloadPackage: reverse failure
 logic...

... and do not retry.
---
 global-functions.rsc | 29 +++++++++++++----------------
 1 file changed, 13 insertions(+), 16 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 6e3d7120..1dd77083 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -391,25 +391,22 @@
   :local Url ("https://upgrade.mikrotik.com/routeros/" . $PkgVer . "/" . $PkgFile);
   $LogPrint info $0 ("Downloading package file '" . $PkgName . "'...");
   $LogPrint debug $0 ("... from url: " . $Url);
-  :local Retry 3;
-  :while ($Retry > 0) do={
-    :do {
-      /tool/fetch check-certificate=yes-without-crl $Url dst-path=$PkgDest;
-      $WaitForFile $PkgDest;
 
-      :if ([ /file/get [ find where name=$PkgDest ] type ] = "package") do={
-        :return true;
-      }
-    } on-error={
-      $LogPrint debug $0 ("Downloading package file failed.");
-    }
-
-    $RmFile $PkgDest;
-    :set Retry ($Retry - 1);
+  :do {
+    /tool/fetch check-certificate=yes-without-crl $Url dst-path=$PkgDest;
+    $WaitForFile $PkgDest;
+  } on-error={
+    $LogPrint warning $0 ("Downloading package file '" . $PkgName . "' failed.");
+    :return false;
   }
 
-  $LogPrint warning $0 ("Downloading package file '" . $PkgName . "' failed.");
-  :return false;
+  :if ([ /file/get [ find where name=$PkgDest ] type ] != "package") do={
+    $LogPrint warning $0 ("Downloaded file is not a package, removing.");
+    $RmFile $PkgDest;
+    :return false;
+  }
+
+  :return true;
 }
 
 # return either first (if "true") or second

From c3fce370660b8c128f579d2a419c657395748c2e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 7 May 2025 17:59:20 +0200
Subject: [PATCH 734/988] backup-partition: :do ... on-error=... -> :onerror
 ... do=...

---
 backup-partition.rsc | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/backup-partition.rsc b/backup-partition.rsc
index c2221d2c..ae7ad030 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -32,14 +32,15 @@
 
     :global LogPrint;
 
-    :do {
+    :onerror Err {
       /partitions/copy-to $FallbackTo;
       $LogPrint info $ScriptName ("Copied RouterOS to partition '" . $FallbackToName . "'.");
-      :return true;
-    } on-error={
-      $LogPrint error $ScriptName ("Failed copying RouterOS to partition '" . $FallbackToName . "'!");
+    } do={
+      $LogPrint error $ScriptName ("Failed copying RouterOS to partition '" . \
+          $FallbackToName . "': " . $Err);
       :return false;
     }
+    :return true;
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={
@@ -107,16 +108,17 @@
     }
   }
 
-  :do {
+  :onerror Err {
     /system/scheduler/add start-time=startup name="running-from-backup-partition" \
         on-event=(":log warning (\"Running from partition '\" . " . \
         "[ /partitions/get [ find where running ] name ] . \"'!\")");
     /partitions/save-config-to $FallbackTo;
     /system/scheduler/remove "running-from-backup-partition";
     $LogPrint info $ScriptName ("Saved configuration to partition '" . $FallbackToName . "'.");
-  } on-error={
+  } do={
     /system/scheduler/remove [ find where name="running-from-backup-partition" ];
-    $LogPrint error $ScriptName ("Failed saving configuration to partition '" . $FallbackToName . "'!");
+    $LogPrint error $ScriptName ("Failed saving configuration to partition '" . \
+        $FallbackToName . "': " . $Err);
     :set PackagesUpdateBackupFailure true;
     :set ExitOK true;
     :error false;

From dc2296d5004b806aa5c5812c0e1a7ff4016be005 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 7 May 2025 18:03:30 +0200
Subject: [PATCH 735/988] backup-upload: :do ... on-error=... -> :onerror ...
 do=...

---
 backup-upload.rsc | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/backup-upload.rsc b/backup-upload.rsc
index 11ced4ca..e6b9f92f 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -90,13 +90,13 @@
     /system/backup/save encryption=aes-sha256 name=$FilePath password=$BackupPassword;
     $WaitForFile ($FilePath . ".backup");
 
-    :do {
+    :onerror Err {
       /tool/fetch upload=yes url=($BackupUploadUrl . "/" . $FileName . ".backup") \
           user=$BackupUploadUser password=$BackupUploadPass src-path=($FilePath . ".backup");
       :set BackupFile [ /file/get ($FilePath . ".backup") ];
       :set ($BackupFile->"name") ($FileName . ".backup");
-    } on-error={
-      $LogPrint error $ScriptName ("Uploading backup file failed!");
+    } do={
+      $LogPrint error $ScriptName ("Uploading backup file failed: " . $Err);
       :set BackupFile "failed";
       :set Failed 1;
     }
@@ -109,13 +109,13 @@
     /export terse show-sensitive file=$FilePath;
     $WaitForFile ($FilePath . ".rsc");
 
-    :do {
+    :onerror Err {
       /tool/fetch upload=yes url=($BackupUploadUrl . "/" . $FileName . ".rsc") \
           user=$BackupUploadUser password=$BackupUploadPass src-path=($FilePath . ".rsc");
       :set ExportFile [ /file/get ($FilePath . ".rsc") ];
       :set ($ExportFile->"name") ($FileName . ".rsc");
-    } on-error={
-      $LogPrint error $ScriptName ("Uploading configuration export failed!");
+    } do={
+      $LogPrint error $ScriptName ("Uploading configuration export failed: " . $Err);
       :set ExportFile "failed";
       :set Failed 1;
     }
@@ -130,13 +130,13 @@
         file=($FilePath . ".conf\00");
     $WaitForFile ($FilePath . ".conf");
 
-    :do {
+    :onerror Err {
       /tool/fetch upload=yes url=($BackupUploadUrl . "/" . $FileName . ".conf") \
           user=$BackupUploadUser password=$BackupUploadPass src-path=($FilePath . ".conf");
       :set ConfigFile [ /file/get ($FilePath . ".conf") ];
       :set ($ConfigFile->"name") ($FileName . ".conf");
-    } on-error={
-      $LogPrint error $ScriptName ("Uploading global-config-overlay failed!");
+    } do={
+      $LogPrint error $ScriptName ("Uploading global-config-overlay failed: " . $Err);
       :set ConfigFile "failed";
       :set Failed 1;
     }

From 187aeba78bebef1d1f47524c690ad260adffcadd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:04:15 +0200
Subject: [PATCH 736/988] check-health: :do ... on-error=... -> :onerror ...
 do=...

---
 check-health.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-health.rsc b/check-health.rsc
index 1b92d1e4..4cb99408 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -89,10 +89,10 @@
   :foreach Plugin in=$Plugins do={
     :local PluginVal [ /system/script/get $Plugin ];
     :if ([ $ValidateSyntax ($PluginVal->"source") ] = true) do={
-      :do {
+      :onerror Err {
         /system/script/run $Plugin;
-      } on-error={
-        $LogPrint error $ScriptName ("Plugin '" . $ScriptVal->"name" . "' failed to run.");
+      } do={
+        $LogPrint error $ScriptName ("Plugin '" . $ScriptVal->"name" . "' failed to run: " . $Err);
       }
     } else={
       $LogPrint error $ScriptName ("Plugin '" . $ScriptVal->"name" . "' failed syntax validation, skipping.");

From 1925d2847c6d9b48364e24153fcbfb10cd9e758d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:05:41 +0200
Subject: [PATCH 737/988] check-lte-firmware-upgrade: :do ... on-error=... ->
 :onerror ... do=...

---
 check-lte-firmware-upgrade.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index 1a5e08ce..9f4b6562 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -45,12 +45,12 @@
     :local IntName [ /interface/lte/get $Interface name ];
     :local Firmware;
     :local Info;
-    :do {
+    :onerror Err {
       :set Firmware [ /interface/lte/firmware-upgrade $Interface as-value ];
       :set Info [ /interface/lte/monitor $Interface once as-value ];
-    } on-error={
+    } do={
       $LogPrint debug $ScriptName ("Could not get latest LTE firmware version for interface " . \
-        $IntName . ".");
+        $IntName . ": " . $Err);
       :return false;
     }
 

From 79f681b80115b2f663feda478294717bb021c7ba Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:06:25 +0200
Subject: [PATCH 738/988] check-routeros-update: :do ... on-error=... ->
 :onerror ... do=...

---
 check-routeros-update.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 34d06475..e28a0190 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -141,13 +141,13 @@
 
     :if ([ :len $SafeUpdateUrl ] > 0) do={
       :local Result;
-      :do {
+      :onerror Err {
         :set Result [ /tool/fetch check-certificate=yes-without-crl \
             ($SafeUpdateUrl . $Update->"channel" . "?installed=" . $Update->"installed-version" . \
             "&latest=" . $Update->"latest-version") http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) \
             output=user as-value ];
-      } on-error={
-        $LogPrint warning $ScriptName ("Failed receiving safe version for " . $Update->"channel" . ".");
+      } do={
+        $LogPrint warning $ScriptName ("Failed receiving safe version for " . $Update->"channel" . ": " . $Err);
       }
       :if ($Result->"status" = "finished" && $Result->"data" = $Update->"latest-version") do={
         $LogPrint info $ScriptName ("Version " . $Update->"latest-version" . " is considered safe, updating...");

From 142b0760b0e8daa205cc1fc8f471716e219ece82 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:17:46 +0200
Subject: [PATCH 739/988] fw-addr-lists: :do ... on-error=... -> :onerror ...
 do=...

---
 fw-addr-lists.rsc | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 4ee3c344..659fb2f9 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -176,13 +176,13 @@
       :foreach Address,Timeout in=$Branch do={
         $LogPrintVerbose debug $ScriptName ("Adding IPv4 address to list '" . $FwListName . \
             "' with " . $Timeout . ": " . $Address);
-        :do {
+        :onerror Err {
           /ip/firewall/address-list/add list=$FwListName comment=$ListComment \
               address=$Address timeout=$Timeout;
           :set CntAdd ($CntAdd + 1);
-        } on-error={
-          $LogPrint warning $ScriptName ("Failed to add IPv4 address to list '" . $FwListName . \
-              "': " . $Address);
+        } do={
+          $LogPrint warning $ScriptName ("Failed to add IPv4 address " . $Address . \
+              " to list '" . $FwListName . "': " . $Err);
         }
       }
     }
@@ -192,13 +192,13 @@
       :foreach Address,Timeout in=$Branch do={
         $LogPrintVerbose debug $ScriptName ("Adding IPv6 address to list '" . $FwListName . \
             "' with " . $Timeout . ": " . $Address);
-        :do {
+        :onerror Err {
           /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment \
               address=$Address timeout=$Timeout;
           :set CntAdd ($CntAdd + 1);
-        } on-error={
-          $LogPrint warning $ScriptName ("Failed to add IPv6 address to list '" . $FwListName . \
-              "': " . $Address);
+        } do={
+          $LogPrint warning $ScriptName ("Failed to add IPv6 address " . $Address . \
+              " to list '" . $FwListName . "': " . $Err);
         }
       }
     }

From b807fc9e90b105c2057631c23f5685d18b811951 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:21:03 +0200
Subject: [PATCH 740/988] fw-addr-lists: adopt changes in wording...

... to match the changes from previous commit.
---
 fw-addr-lists.rsc | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 659fb2f9..5a03875d 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -135,15 +135,15 @@
       :local Branch [ $GetBranch $Address ];
       :local TimeOut ($IPv4Addresses->$Branch->$Address);
       :if ([ :typeof $TimeOut ] = "time") do={
-        $LogPrintVerbose debug $ScriptName ("Renewing IPv4 address in list '" . $FwListName . \
-            "' with " . $TimeOut . ": " . $Address);
+        $LogPrintVerbose debug $ScriptName ("Renewing IPv4 address " . $Address . \
+            " in list '" . $FwListName . "' with " . $TimeOut . ".");
         /ip/firewall/address-list/set $Entry timeout=$TimeOut;
         :set ($IPv4Addresses->$Branch->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
-          $LogPrintVerbose debug $ScriptName ("Removing IPv4 address from list '" . $FwListName . \
-              "': " . $Address);
+          $LogPrintVerbose debug $ScriptName ("Removing IPv4 address " . $Address . \
+              " from list '" . $FwListName . ".");
           /ip/firewall/address-list/remove $Entry;
           :set CntRemove ($CntRemove + 1);
         }
@@ -156,15 +156,15 @@
       :local Branch [ $GetBranch $Address ];
       :local TimeOut ($IPv6Addresses->$Branch->$Address);
       :if ([ :typeof $TimeOut ] = "time") do={
-        $LogPrintVerbose debug $ScriptName ("Renewing IPv6 address in list '" . $FwListName . \
-            "' with " . $TimeOut . ": " . $Address);
+        $LogPrintVerbose debug $ScriptName ("Renewing IPv6 address " . $Address . \
+            " in list '" . $FwListName . "' with " . $TimeOut . ".");
         /ipv6/firewall/address-list/set $Entry timeout=$TimeOut;
         :set ($IPv6Addresses->$Branch->$Address);
         :set CntRenew ($CntRenew + 1);
       } else={
         :if ($Failure = false) do={
-          $LogPrintVerbose debug $ScriptName ("Removing IPv6 address from list '" . $FwListName . \
-              "': " . $Address);
+          $LogPrintVerbose debug $ScriptName ("Removing IPv6 address " . $Address . \
+              " from list '" . $FwListName .".");
           /ipv6/firewall/address-list/remove $Entry;
           :set CntRemove ($CntRemove + 1);
         }
@@ -174,8 +174,8 @@
     :foreach BranchName,Branch in=$IPv4Addresses do={
       $LogPrintVerbose debug $ScriptName ("Handling branch: " . $BranchName);
       :foreach Address,Timeout in=$Branch do={
-        $LogPrintVerbose debug $ScriptName ("Adding IPv4 address to list '" . $FwListName . \
-            "' with " . $Timeout . ": " . $Address);
+        $LogPrintVerbose debug $ScriptName ("Adding IPv4 address " . $Address . \
+            " to list '" . $FwListName . "' with " . $Timeout . ".");
         :onerror Err {
           /ip/firewall/address-list/add list=$FwListName comment=$ListComment \
               address=$Address timeout=$Timeout;
@@ -190,8 +190,8 @@
     :foreach BranchName,Branch in=$IPv6Addresses do={
       $LogPrintVerbose debug $ScriptName ("Handling branch: " . $BranchName);
       :foreach Address,Timeout in=$Branch do={
-        $LogPrintVerbose debug $ScriptName ("Adding IPv6 address to list '" . $FwListName . \
-            "' with " . $Timeout . ": " . $Address);
+        $LogPrintVerbose debug $ScriptName ("Adding IPv6 address " . $Address . \
+            " to list '" . $FwListName . "' with " . $Timeout . ".");
         :onerror Err {
           /ipv6/firewall/address-list/add list=$FwListName comment=$ListComment \
               address=$Address timeout=$Timeout;

From a9e7bb0a05c4b4a2744039ce7369760c5cbc0c9f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:22:02 +0200
Subject: [PATCH 741/988] global-config: :do ... on-error=... -> :onerror ...
 do=...

---
 global-config.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index 589a58a4..86d528aa 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -277,11 +277,11 @@
 # load custom settings from overlay and snippets
 :foreach Script in=([ /system/script/find where name="global-config-overlay" ], \
                     [ /system/script/find where name~"^global-config-overlay.d/" ]) do={
-  :do {
+  :onerror Err {
     /system/script/run $Script;
-  } on-error={
+  } do={
     :log error ("Loading configuration from overlay or snippet " . \
-        [ /system/script/get $Script name ] . " failed!");
+        [ /system/script/get $Script name ] . " failed: " . $Err);
   }
 }
 

From 5b89f3e425c0703c804dda76ef22efe22b438cc3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 21 May 2025 21:53:34 +0200
Subject: [PATCH 742/988] global-functions: $DownloadPackage: :do ...
 on-error=... -> :onerror ... do=...

---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 1dd77083..fc33f5aa 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -392,11 +392,11 @@
   $LogPrint info $0 ("Downloading package file '" . $PkgName . "'...");
   $LogPrint debug $0 ("... from url: " . $Url);
 
-  :do {
+  :onerror Err {
     /tool/fetch check-certificate=yes-without-crl $Url dst-path=$PkgDest;
     $WaitForFile $PkgDest;
-  } on-error={
-    $LogPrint warning $0 ("Downloading package file '" . $PkgName . "' failed.");
+  } do={
+    $LogPrint warning $0 ("Downloading package file '" . $PkgName . "' failed: " . $Err);
     :return false;
   }
 

From a6b36dde7bbd9bd4308588cbe0b10ae04399b8e6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:24:56 +0200
Subject: [PATCH 743/988] global-functions: $FetchHuge: :do ... on-error=... ->
 :onerror ... do=...

---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index fc33f5aa..3b7ff7cf 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -486,14 +486,14 @@
   }
 
   :local FileName ($DirName . "/" . [ $CleanName $0 ] . "-" . [ $GetRandom20CharAlNum ]);
-  :do {
+  :onerror Err {
     /tool/fetch check-certificate=$CheckCert $Url dst-path=$FileName \
       http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) as-value;
-  } on-error={
+  } do={
     :if ([ $WaitForFile $FileName 500ms ] = true) do={
       $RmFile $FileName;
     }
-    $LogPrint debug $0 ("Failed downloading from: " . $Url);
+    $LogPrint debug $0 ("Failed downloading from " . $Url . " - " . $Err);
     $RmDir $DirName;
     :return false;
   }

From 7a1fef78a26bfa913c4aaa5702b2d4178e663118 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:26:53 +0200
Subject: [PATCH 744/988] global-functions: $GetMacVendor: :do ... on-error=...
 -> :onerror ... do=...

---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 3b7ff7cf..35dd0e0f 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -586,12 +586,12 @@
         ("https://api.macvendors.com/" . [ :pick $Mac 0 8 ]) output=user as-value ]->"data");
     :return $Vendor;
   } on-error={
-    :do {
+    :onerror Err {
       /tool/fetch check-certificate=yes-without-crl ("https://api.macvendors.com/") \
         output=none as-value;
       $LogPrint debug $0 ("The mac vendor is not known in database.");
-    } on-error={
-      $LogPrint warning $0 ("Failed getting mac vendor.");
+    } do={
+      $LogPrint warning $0 ("Failed getting mac vendor: " . $Err);
     }
     :return "unknown vendor";
   }

From 09f9826760316c35cb229bde4d065c89290c6076 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:27:50 +0200
Subject: [PATCH 745/988] global-functions: $MkDir: :do ... on-error=... ->
 :onerror ... do=...

---
 global-functions.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 35dd0e0f..271e3a25 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -894,11 +894,11 @@
 
     $LogPrint info $0 ("Creating disk of type tmpfs.");
     $RmDir "tmpfs";
-    :do {
+    :onerror Err {
       /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/get total-memory ] / 3);
       $WaitForFile "tmpfs";
-    } on-error={
-      $LogPrint warning $0 ("Creating disk of type tmpfs failed!");
+    } do={
+      $LogPrint warning $0 ("Creating disk of type tmpfs failed: " . $Err);
       :return false;
     }
     :return true;
@@ -923,11 +923,11 @@
     }
   }
 
-  :do {
+  :onerror Err {
     /file/add type="directory" name=$Path;
     $WaitForFile $Path;
-  } on-error={
-    $LogPrint warning $0 ("Making directory '" . $Path . "' failed!");
+  } do={
+    $LogPrint warning $0 ("Making directory '" . $Path . "' failed: " . $Err);
     :return false;
   }
 

From 86a8919ed2f87d75b2150b09ec5f237dc93f046e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:29:22 +0200
Subject: [PATCH 746/988] global-functions: $RmDir: :do ... on-error=... ->
 :onerror ... do=...

---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 271e3a25..f0256fc6 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1052,10 +1052,10 @@
     :return true;
   }
 
-  :do {
+  :onerror Err {
     /file/remove $Dir;
-  } on-error={
-    $LogPrint error $0 ("Removing directory '" . $DirName . "' (" . $Dir . ") failed.");
+  } do={
+    $LogPrint error $0 ("Removing directory '" . $DirName . "' (" . $Dir . ") failed: " . $Err);
     :return false;
   }
   :return true;

From 2317013121f8b3a53dd588f0fa5020b61ba7da53 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:30:08 +0200
Subject: [PATCH 747/988] global-functions: $RmFile: :do ... on-error=... ->
 :onerror ... do=...

---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index f0256fc6..c8832911 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1080,10 +1080,10 @@
     :return true;
   }
 
-  :do {
+  :onerror Err {
     /file/remove $File;
-  } on-error={
-    $LogPrint error $0 ("Removing file '" . $FileName . "' (" . $File . ") failed.");
+  } do={
+    $LogPrint error $0 ("Removing file '" . $FileName . "' (" . $File . ") failed: " . $Err);
     :return false;
   }
   :return true;

From 12926b7c429f93a2579b134deef245793195744b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:33:39 +0200
Subject: [PATCH 748/988] global-functions: $ScriptInstallUpdate: :do ...
 on-error=... -> :onerror ... do=...

---
 global-functions.rsc | 28 +++++++++++++---------------
 1 file changed, 13 insertions(+), 15 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index c8832911..1bbc77e4 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1201,7 +1201,7 @@
         }
       }
 
-      :do {
+      :onerror Err {
         :local BaseUrl [ $EitherOr ($ScriptInfo->"base-url") $ScriptUpdatesBaseUrl ];
         :local UrlSuffix [ $EitherOr ($ScriptInfo->"url-suffix") $ScriptUpdatesUrlSuffix ];
         :local Url ($BaseUrl . $ScriptVal->"name" . ".rsc" . $UrlSuffix);
@@ -1211,13 +1211,11 @@
         :if ($Result->"status" = "finished") do={
           :set SourceNew [ :tolf ($Result->"data") ];
         }
-      } on-error={
+      } do={
+        $LogPrint warning $0 ("Failed fetching script '" . $ScriptVal->"name" . . "': " . $Err);
         :if ($ScriptVal->"source" = "#!rsc by RouterOS\n") do={
-          $LogPrint warning $0 ("Failed fetching script '" . $ScriptVal->"name" . \
-            "', removing dummy. Typo on installation?");
+          $LogPrint warning $0 ("Removing dummy. Typo on installation?");
           /system/script/remove $Script;
-        } else={
-          $LogPrint warning $0 ("Failed fetching script '" . $ScriptVal->"name" . "'!");
         }
         :error false;
       }
@@ -1304,7 +1302,7 @@
     :global GlobalConfigMigration;
     :local ChangeLogCode;
 
-    :do {
+    :onerror Err {
       :local Url ($ScriptUpdatesBaseUrl . "news-and-changes.rsc" . $ScriptUpdatesUrlSuffix);
       $LogPrint debug $0 ("Fetching news, changes and migration: " . $Url);
       :local Result [ /tool/fetch check-certificate=yes-without-crl \
@@ -1312,16 +1310,16 @@
       :if ($Result->"status" = "finished") do={
         :set ChangeLogCode ($Result->"data");
       }
-    } on-error={
-      $LogPrint warning $0 ("Failed fetching news, changes and migration!");
+    } do={
+      $LogPrint warning $0 ("Failed fetching news, changes and migration: " . $Err);
     }
 
     :if ([ :len $ChangeLogCode ] > 0) do={
       :if ([ $ValidateSyntax $ChangeLogCode ] = true) do={
-        :do {
+        :onerror Err {
           [ :parse $ChangeLogCode ];
-        } on-error={
-          $LogPrint warning $0 ("The changelog failed to run!");
+        } do={
+          $LogPrint warning $0 ("The changelog failed to run: " . $Err);
         }
       } else={
         $LogPrint warning $0 ("The changelog failed syntax validation!");
@@ -1343,10 +1341,10 @@
           }
 
           $LogPrint info $0 ("Applying migration for change " . $I . ": " . $Migration);
-          :do {
+          :onerror Err {
             [ :parse $Migration ];
-          } on-error={
-            $LogPrint warning $0 ("Migration code for change " . $I . " failed to run!");
+          } do={
+            $LogPrint warning $0 ("Migration code for change " . $I . " failed to run: " . $Err);
           }
         } on-error={ }
       }

From f5c4378676ef1e791738106723071c3dd6fe65ca Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:37:18 +0200
Subject: [PATCH 749/988] global-functions: $ValidateSyntax: :do ...
 on-error=... -> :onerror ... do=...

---
 global-functions.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 1bbc77e4..11ab6770 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1652,9 +1652,9 @@
 :set ValidateSyntax do={
   :local Code [ :tostr $1 ];
 
-  :do {
+  :onerror Err {
     [ :parse (":local Validate do={\n" . $Code . "\n}") ];
-  } on-error={
+  } do={
     :return false;
   }
   :return true;

From 8b1b73c936c0a0172383a521f7bc5fb70d9d2f14 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:39:17 +0200
Subject: [PATCH 750/988] global-functions: $ValidateSyntax: add debug output

---
 global-functions.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 11ab6770..51b47b55 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1652,9 +1652,12 @@
 :set ValidateSyntax do={
   :local Code [ :tostr $1 ];
 
+  :global LogPrint;
+
   :onerror Err {
     [ :parse (":local Validate do={\n" . $Code . "\n}") ];
   } do={
+    $LogPrint debug $0 ("Valdation failed: " . $Err);
     :return false;
   }
   :return true;

From 5c599beae1c539ef4b657a6d8cb32195b4bfa174 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:40:41 +0200
Subject: [PATCH 751/988] global-functions: :do ... on-error=... -> :onerror
 ... do=...

---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 51b47b55..8331e4a7 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1771,10 +1771,10 @@
 :foreach Script in=[ /system/script/find where name ~ "^mod/." ] do={
   :local ScriptVal [ /system/script/get $Script ];
   :if ([ $ValidateSyntax ($ScriptVal->"source") ] = true) do={
-    :do {
+    :onerror Err {
       /system/script/run $Script;
-    } on-error={
-      $LogPrint error $0 ("Module '" . $ScriptVal->"name" . "' failed to run.");
+    } do={
+      $LogPrint error $0 ("Module '" . $ScriptVal->"name" . "' failed to run: " . $Err);
     }
   } else={
     $LogPrint error $0 ("Module '" . $ScriptVal->"name" . "' failed syntax validation, skipping.");

From d5f9ecebfbda885c4600ff99ee2713a5827e0398 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:41:57 +0200
Subject: [PATCH 752/988] gps-track: :do ... on-error=... -> :onerror ...
 do=...

---
 gps-track.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gps-track.rsc b/gps-track.rsc
index 4cc50663..6a090bfe 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -34,7 +34,7 @@
   :local Gps [ /system/gps/monitor once as-value ];
 
   :if ($Gps->"valid" = true) do={
-    :do {
+    :onerror Err {
       /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
         http-header-field=({ [ $FetchUserAgentStr $ScriptName ]; "Content-Type: application/json" }) \
         http-data=[ :serialize to=json { "identity"=$Identity; \
@@ -42,8 +42,8 @@
       $LogPrint debug $ScriptName ("Sending GPS data in " . $CoordinateFormat . " format: " . \
         "lat: " . ($Gps->"latitude") . " " . \
         "lon: " . ($Gps->"longitude"));
-    } on-error={
-      $LogPrint warning $ScriptName ("Failed sending GPS data!");
+    } do={
+      $LogPrint warning $ScriptName ("Failed sending GPS data: " . $Err);
     }
   } else={
     $LogPrint debug $ScriptName ("GPS data not valid.");

From c1e6348bb9ffaaa9e43dafab039ec261614e0711 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:42:48 +0200
Subject: [PATCH 753/988] lease-script: :do ... on-error=... -> :onerror ...
 do=...

---
 lease-script.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lease-script.rsc b/lease-script.rsc
index b166ee3b..ab449568 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -53,11 +53,11 @@
   }
 
   :foreach Order,Script in=$RunOrder do={
-    :do {
+    :onerror Err {
       $LogPrint debug $ScriptName ("Running script with order " . $Order . ": " . $Script);
       /system/script/run $Script;
-    } on-error={
-      $LogPrint warning $ScriptName ("Running script '" . $Script . "' failed!");
+    } do={
+      $LogPrint warning $ScriptName ("Running script '" . $Script . "' failed: " . $Err);
     }
   }
 } do={

From 5badafe109c6514a83b2935aa3543054eb20ddc3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:54:51 +0200
Subject: [PATCH 754/988] mod/notification-telegram: :do ... on-error=... ->
 :onerror ... do=...

---
 mod/notification-telegram.rsc | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 51c8dbf7..0832b07e 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -38,14 +38,14 @@
 
   :foreach Id,Message in=$TelegramQueue do={
     :if ([ :typeof $Message ] = "array" ) do={
-      :do {
+      :onerror Err {
         :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user http-method=post \
           ("https://api.telegram.org/bot" . ($Message->"tokenid") . "/sendMessage") \
           http-data=($Message->"http-data") as-value ]->"data");
         :set ($TelegramQueue->$Id);
         :set ($TelegramMessageIDs->[ :tostr ([ :deserialize from=json value=$Data ]->"result"->"message_id") ]) 1;
-      } on-error={
-        $LogPrint debug $0 ("Sending queued Telegram message failed.");
+      } do={
+        $LogPrint debug $0 ("Sending queued Telegram message failed: " . $Err);
         :set AllDone false;
       }
     }
@@ -72,12 +72,12 @@
   }
 
   :local Data;
-  :do {
+  :onerror Err {
     :set Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
        ("https://api.telegram.org/bot" . $TelegramTokenId . "/getUpdates?offset=0" . \
        "&allowed_updates=%5B%22message%22%5D") as-value ]->"data");
-  } on-error={
-    $LogPrint warning $0 ("Fetching data failed!");
+  } do={
+    $LogPrint warning $0 ("Fetching data failed: " . $Err);
     :return false;
   }
 
@@ -190,7 +190,7 @@
   :local HTTPData ("chat_id=" . $ChatId . "&disable_notification=" . ($Notification->"silent") . \
       "&reply_to_message_id=" . ($Notification->"replyto") . "&message_thread_id=" . $ThreadId . \
        "&disable_web_page_preview=true&parse_mode=MarkdownV2");
-  :do {
+  :onerror Err {
     :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
       $LogPrint warning $0 ("Downloading required certificate failed.");
       :error false;
@@ -199,8 +199,8 @@
       ("https://api.telegram.org/bot" . $TokenId . "/sendMessage") \
       http-data=($HTTPData . "&text=" . [ $UrlEncode $Text ]) as-value ]->"data");
     :set ($TelegramMessageIDs->[ :tostr ([ :deserialize from=json value=$Data ]->"result"->"message_id") ]) 1;
-  } on-error={
-    $LogPrint info $0 ("Failed sending Telegram notification! Queuing...");
+  } do={
+    $LogPrint info $0 ("Failed sending Telegram notification: " . $Err . " - Queuing...");
 
     :if ([ :typeof $TelegramQueue ] = "nothing") do={
       :set TelegramQueue ({});

From 2a7fd7ea53d62cc9897643250bb04022f1377ae3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:55:55 +0200
Subject: [PATCH 755/988] mod/notification-ntfy: :do ... on-error=... ->
 :onerror ... do=...

---
 mod/notification-ntfy.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 8e5688e8..71140209 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -36,13 +36,13 @@
 
   :foreach Id,Message in=$NtfyQueue do={
     :if ([ :typeof $Message ] = "array" ) do={
-      :do {
+      :onerror Err {
         /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
           http-header-field=($Message->"headers") http-data=($Message->"text") \
           ($Message->"url") as-value;
         :set ($NtfyQueue->$Id);
-      } on-error={
-        $LogPrint debug $0 ("Sending queued Ntfy message failed.");
+      } do={
+        $LogPrint debug $0 ("Sending queued Ntfy message failed: " . $Err);
         :set AllDone false;
       }
     }
@@ -107,7 +107,7 @@
     :set Text ($Text . "\n" . [ $SymbolForNotification "link" ] . ($Notification->"link"));
   }
 
-  :do {
+  :onerror Err {
     :if ($Server = "ntfy.sh") do={
       :if ([ $CertificateAvailable "ISRG Root X1" ] = false) do={
         $LogPrint warning $0 ("Downloading required certificate failed.");
@@ -116,8 +116,8 @@
     }
     /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
       http-header-field=$Headers http-data=$Text $Url as-value;
-  } on-error={
-    $LogPrint info $0 ("Failed sending ntfy notification! Queuing...");
+  } do={
+    $LogPrint info $0 ("Failed sending ntfy notification: " . $Err . " - Queuing...");
 
     :if ([ :typeof $NtfyQueue ] = "nothing") do={
       :set NtfyQueue ({});

From 3f092d34774ac500faec0870e89a048a26a5bbf0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:57:31 +0200
Subject: [PATCH 756/988] mod/notification-matrix: :do ... on-error=... ->
 :onerror ... do=...

---
 mod/notification-matrix.rsc | 42 ++++++++++++++++++-------------------
 1 file changed, 21 insertions(+), 21 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index c8cf887c..e9b42a0d 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -39,7 +39,7 @@
 
   :foreach Id,Message in=$MatrixQueue do={
     :if ([ :typeof $Message ] = "array" ) do={
-      :do {
+      :onerror Err {
         /tool/fetch check-certificate=yes-without-crl output=none \
             http-header-field=($Message->"headers") http-method=post \
             http-data=[ :serialize to=json { "msgtype"="m.text"; "body"=($Message->"plain");
@@ -47,8 +47,8 @@
             ("https://" . $Message->"homeserver" . "/_matrix/client/r0/rooms/" . $Message->"room" . \
             "/send/m.room.message?access_token=" . $Message->"accesstoken") as-value;
         :set ($MatrixQueue->$Id);
-      } on-error={
-        $LogPrint debug $0 ("Sending queued Matrix message failed.");
+      } do={
+        $LogPrint debug $0 ("Sending queued Matrix message failed: " . $Err);
         :set AllDone false;
       }
     }
@@ -129,15 +129,15 @@
       [ $PrepareText $Label ] . "</a>");
   }
 
-  :do {
+  :onerror Err {
     /tool/fetch check-certificate=yes-without-crl output=none \
         http-header-field=$Headers http-method=post \
         http-data=[ :serialize to=json { "msgtype"="m.text"; "body"=$Plain;
         "format"="org.matrix.custom.html"; "formatted_body"=$Formatted } ] \
         ("https://" . $HomeServer . "/_matrix/client/r0/rooms/" . $Room . \
         "/send/m.room.message?access_token=" . $AccessToken) as-value;
-  } on-error={
-    $LogPrint info $0 ("Failed sending Matrix notification! Queuing...");
+  } do={
+    $LogPrint info $0 ("Failed sending Matrix notification: " . $Err . " - Queuing...");
 
     :if ([ :typeof $MatrixQueue ] = "nothing") do={
       :set MatrixQueue ({});
@@ -196,14 +196,14 @@
   :global MatrixHomeServer;
 
   :local Domain [ :pick $User ([ :find $User ":" ] + 1) [ :len $User] ];
-  :do {
+  :onerror Err {
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
         http-header-field=({ [ $FetchUserAgentStr $0 ] }) \
         ("https://" . $Domain . "/.well-known/matrix/client") as-value ]->"data");
     :set MatrixHomeServer ([ :deserialize from=json value=$Data ]->"m.homeserver"->"base_url");
     $LogPrint debug $0 ("Home server is: " . $MatrixHomeServer);
-  } on-error={
-    $LogPrint error $0 ("Failed getting home server!");
+  } do={
+    $LogPrint error $0 ("Failed getting home server: " . $Err);
     :return false;
   }
 
@@ -211,27 +211,27 @@
     :set MatrixHomeServer [ :pick $MatrixHomeServer 8 [ :len $MatrixHomeServer ] ];
   }
 
-  :do {
+  :onerror Err {
     :local Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
         http-header-field=({ [ $FetchUserAgentStr $0 ] }) http-method=post \
         http-data=[ :serialize to=json { "type"="m.login.password"; "user"=$User; "password"=$Pass } ] \
         ("https://" . $MatrixHomeServer . "/_matrix/client/r0/login") as-value ]->"data");
     :set MatrixAccessToken ([ :deserialize from=json value=$Data ]->"access_token");
     $LogPrint debug $0 ("Access token is: " . $MatrixAccessToken);
-  } on-error={
-    $LogPrint error $0 ("Failed logging in (and getting access token)!");
+  } do={
+    $LogPrint error $0 ("Failed logging in (and getting access token): " . $Err);
     :return false;
   }
 
-  :do {
+  :onerror Err {
     /system/script/remove [ find where name="global-config-overlay.d/mod/notification-matrix" ];
     /system/script/add name="global-config-overlay.d/mod/notification-matrix" source=( \
       "# configuration snippet: mod/notification-matrix\n\n" . \
       ":global MatrixHomeServer \"" . $MatrixHomeServer . "\";\n" . \
       ":global MatrixAccessToken \"" . $MatrixAccessToken . "\";\n");
     $LogPrint info $0 ("Added configuration snippet. Now create and join a room, please!");
-  } on-error={
-    $LogPrint error $0 ("Failed adding configuration snippet!");
+  } do={
+    $LogPrint error $0 ("Failed adding configuration snippet: " . $Err);
     :return false;
   }
 }
@@ -248,24 +248,24 @@
   :global MatrixHomeServer;
   :global MatrixRoom;
 
-  :do {
+  :onerror Err {
     /tool/fetch check-certificate=yes-without-crl output=none \
         http-header-field=({ [ $FetchUserAgentStr $0 ] }) http-method=post http-data="" \
         ("https://" . $MatrixHomeServer . "/_matrix/client/r0/rooms/" . [ $UrlEncode $MatrixRoom ] . \
         "/join?access_token=" . [ $UrlEncode $MatrixAccessToken ]) as-value;
     $LogPrint debug $0 ("Joined the room.");
-  } on-error={
-    $LogPrint error $0 ("Failed joining the room!");
+  } do={
+    $LogPrint error $0 ("Failed joining the room: " . $Err);
     :return false;
   }
 
-  :do {
+  :onerror Err {
     :local Snippet [ /system/script/find where name="global-config-overlay.d/mod/notification-matrix" ];
     /system/script/set $Snippet source=([ get $Snippet source ] . \
       ":global MatrixRoom \"" . $MatrixRoom . "\";\n");
     $LogPrint info $0 ("Appended configuration to configuration snippet. Please review!");
-  } on-error={
-    $LogPrint error $0 ("Failed appending configuration to snippet!");
+  } do={
+    $LogPrint error $0 ("Failed appending configuration to snippet: " . $Err);
     :return false;
   }
 }

From e01873301f7a92fc0109d8afce845a175f414504 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:58:53 +0200
Subject: [PATCH 757/988] mod/notification-gotify: :do ... on-error=... ->
 :onerror ... do=...

---
 mod/notification-gotify.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/mod/notification-gotify.rsc b/mod/notification-gotify.rsc
index 3ae4cdd3..d8eafbe0 100644
--- a/mod/notification-gotify.rsc
+++ b/mod/notification-gotify.rsc
@@ -37,13 +37,13 @@
 
   :foreach Id,Message in=$GotifyQueue do={
     :if ([ :typeof $Message ] = "array" ) do={
-      :do {
+      :onerror Err {
         /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
           http-header-field=($Message->"headers") http-data=[ :serialize to=json ($Message->"message") ] \
           ($Message->"url") as-value;
         :set ($GotifyQueue->$Id);
-      } on-error={
-        $LogPrint debug $0 ("Sending queued Gotify message failed.");
+      } do={
+        $LogPrint debug $0 ("Sending queued Gotify message failed: " . $Err);
         :set AllDone false;
       }
     }
@@ -91,11 +91,11 @@
       ("\n" . [ $SymbolForNotification "link" ] . ($Notification->"link")) ]); \
     "priority"=[ :tonum [ $IfThenElse ($Notification->"silent") 2 5 ] ] });
 
-  :do {
+  :onerror Err {
     /tool/fetch check-certificate=yes-without-crl output=none http-method=post \
       http-header-field=$Headers http-data=[ :serialize to=json $Message ] $Url as-value;
-  } on-error={
-    $LogPrint info $0 ("Failed sending Gotify notification! Queuing...");
+  } do={
+    $LogPrint info $0 ("Failed sending Gotify notification: " . $Err . " - Queuing...");
 
     :if ([ :typeof $GotifyQueue ] = "nothing") do={
       :set GotifyQueue ({});

From 314e68e4cd3d097d510cb0bef25fec838421b689 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 09:45:59 +0200
Subject: [PATCH 758/988] mode-button: :do ... on-error=... -> :onerror ...
 do=...

---
 mode-button.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index c6422f0b..d82f8995 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -69,11 +69,11 @@
             :delay 200ms;
           }
 
-          :do {
+          :onerror Err {
             [ :parse $Code ];
-          } on-error={
+          } do={
             $LogPrint warning $FuncName \
-                ("The code for " . $Count . " mode-button presses failed with runtime error!");
+                ("The code for " . $Count . " mode-button presses failed with runtime error: " . $Err);
           }
         } else={
           $LogPrint warning $FuncName \

From 9ae21c00bdbbda52fea6c2cc32248d714617f1f8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 10:02:15 +0200
Subject: [PATCH 759/988] mod/scriptrunonce: :do ... on-error=... -> :onerror
 ... do=...

---
 mod/scriptrunonce.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 3797c155..1d6aaf1f 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -41,11 +41,11 @@
       :return false;
     }
 
-    :do {
+    :onerror Err {
       $LogPrint info $0 ("Running script '" . $Script . "' now.");
       [ :parse $Source ];
-    } on-error={
-      $LogPrint warning $0 ("The script '" . $Script . "' failed to run!");
+    } do={
+      $LogPrint warning $0 ("The script '" . $Script . "' failed to run: " . $Err);
       :return false;
     }
 

From 9cd4ed08a475b93fbf11266dc5a0804afd58e195 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 10:05:12 +0200
Subject: [PATCH 760/988] mod/ssh-keys-import: :do ... on-error=... -> :onerror
 ... do=...

---
 mod/ssh-keys-import.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 9a6cd398..176c1b46 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -55,13 +55,13 @@
   /file/add name=$FileName contents=($Key . ", md5=" . $FingerPrintMD5);
   $WaitForFile $FileName;
 
-  :do {
+  :onerror Err {
     /user/ssh-keys/import public-key-file=$FileName user=$User;
     $LogPrint info $0 ("Imported ssh public key (" . $KeyVal->2 . ", " . $KeyVal->0 . ", " . \
       "MD5:" . $FingerPrintMD5 . ") for user '" . $User . "'.");
     $RmDir "tmpfs/ssh-keys-import";
-  } on-error={
-    $LogPrint warning $0 ("Failed importing key.");
+  } do={
+    $LogPrint warning $0 ("Failed importing key: " . $Err);
     $RmDir "tmpfs/ssh-keys-import";
     :return false;
   }

From c757064eb9537321b7cad69db6e05ddc9c576583 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 10:05:39 +0200
Subject: [PATCH 761/988] =?UTF-8?q?mod/ssh-keys-import:=20:do=20...=20on-e?=
 =?UTF-8?q?rror=3D...=20->=20...=20well...=20-=20fix=20condition=20?=
 =?UTF-8?q?=F0=9F=A5=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 mod/ssh-keys-import.rsc | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 176c1b46..94675255 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -94,9 +94,7 @@
   :foreach KeyVal in=[ :deserialize $Keys delimiter=" " from=dsv options=dsv.plain ] do={
     :local Continue false;
     :if ($KeyVal->0 = "ssh-ed25519" || $KeyVal->0 = "ssh-rsa") do={
-      :do {
-        $SSHKeysImport ($KeyVal->0 . " " . $KeyVal->1 . " " . $KeyVal->2) $User;
-      } on-error={
+      :if ([ $SSHKeysImport ($KeyVal->0 . " " . $KeyVal->1 . " " . $KeyVal->2) $User ] = false) do={
         $LogPrint warning $0 ("Failed importing key for user '" . $User . "'.");
       }
       :set Continue true;

From a523f9793861d8927388f18bb5f2319bbe04c0b8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 10:07:30 +0200
Subject: [PATCH 762/988] netwatch-dns: :do ... on-error=... -> :onerror ...
 do=...

---
 netwatch-dns.rsc | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 3da14987..4fa076af 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -118,15 +118,15 @@
     }
 
     :local Data false;
-    :do {
+    :onerror Err {
       :set Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
         http-header-field=({ "accept: application/dns-message" }) \
         url=(($DohServer->"doh-url") . "?dns=" . [ :convert to=base64 ([ :rndstr length=2 ] . \
         "\01\00" . "\00\01" . "\00\00" . "\00\00" . "\00\00" . "\09doh-check\05eworm\02de\00" . \
         "\00\10" . "\00\01") ]) as-value ]->"data");
-    } on-error={
-      $LogPrint warning $ScriptName ("Request to DoH server failed (network or certificate issue): " . \
-        ($DohServer->"doh-url"));
+    } do={
+      $LogPrint warning $ScriptName ("Request to DoH server " . ($DohServer->"doh-url") . \
+          " failed: " . $Err);
     }
 
     :if ($Data != false) do={

From fefe59751f1487fbdd4feace39c32445bd97547c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 10:09:59 +0200
Subject: [PATCH 763/988] netwatch-notify: :do ... on-error=... -> :onerror ...
 do=...

---
 netwatch-notify.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index fb8e8d5e..00f03cde 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -38,10 +38,10 @@
     :global ValidateSyntax;
 
     :if ([ $ValidateSyntax $Hook ] = true) do={
-      :do {
+      onerror Err {
         [ :parse $Hook ];
-      } on-error={
-        $LogPrint warning $ScriptName ("The " . $State . "-hook for " . $Type . " '" . $Name . "' failed to run.");
+      } do={
+        $LogPrint warning $ScriptName ("The " . $State . "-hook for " . $Type . " '" . $Name . "' failed to run: " . $Err);
         :return ("The hook failed to run.");
       }
     } else={
@@ -107,7 +107,7 @@
 
       :if ([ :typeof ($HostInfo->"resolve") ] = "str") do={
         :if ([ $IsDNSResolving ] = true) do={
-          :do {
+          :onerror Err {
             :local Resolve [ :resolve type=[ $IfThenElse ([ :typeof ($HostVal->"host") ] = "ip") \
                 "ipv4" "ipv6" ] ($HostInfo->"resolve") ];
             :if ($Resolve != $HostVal->"host") do={
@@ -121,13 +121,13 @@
                 :set ($HostVal->"status") "unknown";
               }
             }
-          } on-error={
+          } do={
             :set ($Metric->"resolve-failcnt") ($Metric->"resolve-failcnt" + 1);
             :if ($Metric->"resolve-failcnt" = 3) do={
               $LogPrint [ $IfThenElse ($HostInfo->"no-resolve-fail" != true) warning debug ] \
                   $ScriptName ("Resolving name '" . $HostInfo->"resolve" . [ $IfThenElse \
                   ($HostInfo->"resolve" != $HostInfo->"name") ("' for " . $Type . " '" . \
-                  $HostInfo->"name") "" ] . "' failed.");
+                  $HostInfo->"name") "" ] . "' failed: " . $Err);
             }
           }
         }

From d0adf9974e75668fc16e736ce2dc29a1477b10b8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 10:12:08 +0200
Subject: [PATCH 764/988] sms-forward: :do ... on-error=... -> :onerror ...
 do=...

---
 sms-forward.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index a564056a..feb640e5 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -74,12 +74,12 @@
           :if ($Phone~($Hook->"allowed-number") && ($SmsVal->"message")~($Hook->"match")) do={
             :if ([ $ValidateSyntax ($Hook->"command") ] = true) do={
               $LogPrint info $ScriptName ("Running hook '" . $Hook->"match" . "': " . $Hook->"command");
-              :do {
+              :onerror Err {
                 :local Command [ :parse ($Hook->"command") ];
                 $Command Phone=$Phone Message=($SmsVal->"message");
                 :set Messages ($Messages . "\n\nRan hook '" . $Hook->"match" . "':\n" . $Hook->"command");
-              } on-error={
-                $LogPrint warning $ScriptName ("The code for hook '" . $Hook->"match" . "' failed to run!");
+              } do={
+                $LogPrint warning $ScriptName ("The code for hook '" . $Hook->"match" . "' failed to run: " . $Err);
               }
             } else={
               $LogPrint warning $ScriptName ("The code for hook '" . $Hook->"match" . "' failed syntax validation!");

From f22d46da96dfe0c421172d30ee1baf9976205329 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 10:13:05 +0200
Subject: [PATCH 765/988] telegram-chat: :do ... on-error=... -> :onerror ...
 do=...

---
 telegram-chat.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index b1f7f99e..5bfa31c8 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -70,14 +70,14 @@
   :local Data false;
   :for I from=1 to=4 do={
     :if ($Data = false) do={
-      :do {
+      :onerror Err {
         :set Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
           ("https://api.telegram.org/bot" . $TelegramTokenId . "/getUpdates?offset=" . \
           $TelegramChatOffset->0 . "&allowed_updates=%5B%22message%22%5D") as-value ]->"data");
         :set TelegramRandomDelay [ $MAX 0 ($TelegramRandomDelay - 1) ];
-      } on-error={
+      } do={
         :if ($I < 4) do={
-          $LogPrint debug $ScriptName ("Fetch failed, " . $I . ". try.");
+          $LogPrint debug $ScriptName ("Fetch failed, " . $I . ". try: " . $Err);
           :set TelegramRandomDelay [ $MIN 15 ($TelegramRandomDelay + 5) ];
           :delay (($I * $I) . "s");
         }

From 10ac81634877858717a3d99fee418edc9887b377 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 10:14:24 +0200
Subject: [PATCH 766/988] unattended-lte-firmware-upgrade: :do ... on-error=...
 -> :onerror ... do=...

---
 unattended-lte-firmware-upgrade.rsc | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index 83925fd9..237c2d83 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -12,10 +12,10 @@
 :foreach Interface in=[ /interface/lte/find where running ] do={
   :local Firmware;
   :local IntName [ /interface/lte/get $Interface name ];
-  :do {
+  :onerror Err {
     :set Firmware [ /interface/lte/firmware-upgrade $Interface as-value ];
-  } on-error={
-    :log debug ("Could not get latest LTE firmware version for interface " . $IntName . ".");
+  } do={
+    :log debug ("Could not get latest LTE firmware version for interface " . $IntName . ": " . $Err);
   }
 
   :if ([ :typeof $Firmware ] = "array") do={
@@ -27,7 +27,7 @@
         :set LTEFirmwareUpgrade;
 
         /system/scheduler/remove ($1 . "-firmware-upgrade");
-        :do {
+        :onerror Err {
           /interface/lte/firmware-upgrade $1 upgrade=yes;
           :log info ("LTE firmware upgrade on '" . $1 . "' finished, waiting for reset.");
           :delay 240s;
@@ -36,8 +36,8 @@
                ($Firmware->"installed") != ($Firmware->"latest")) do={
             :log warning ("LTE firmware versions still differ. Upgrade failed anyway?");
           }
-        } on-error={
-          :log error ("LTE firmware upgrade on '" . $1 . "' failed.");
+        } do={
+          :log error ("LTE firmware upgrade on '" . $1 . "' failed: " . $Err);
         }
       }
 

From 205bcce6f9d49518f1e1999154d96b0e0bb6d1ed Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 10:15:35 +0200
Subject: [PATCH 767/988] update-tunnelbroker: :do ... on-error=... -> :onerror
 ... do=...

---
 update-tunnelbroker.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 8e5e1d0f..9057e1e4 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -41,12 +41,12 @@
 
     :for I from=2 to=0 do={
       :if ($Data = false) do={
-        :do {
+        :onerror Err {
           :set Data ([ /tool/fetch check-certificate=yes-without-crl \
             ("https://ipv4.tunnelbroker.net/nic/update?hostname=" . $Comment->"id") \
             user=($Comment->"user") password=($Comment->"pass") output=user as-value ]->"data");
-        } on-error={
-          $LogPrint debug $ScriptName ("Failed downloading, " . $I . " retries pending.");
+        } do={
+          $LogPrint debug $ScriptName ("Failed downloading: " . $Err . " - " . $I . " retries pending.");
           :delay 2s;
         }
       }

From 3521995dbc1173e722819efca1908cd0df251b1d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 11:07:39 +0200
Subject: [PATCH 768/988] mod/inspectvar: use $CharacterMultiply

---
 mod/inspectvar.rsc | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index 89c02860..b864d9a8 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -33,11 +33,9 @@
     :local Value  [ :tostr $2 ];
     :local Level  [ :tonum $3 ];
 
-    :local Indent "";
-    :for I from=1 to=$Level step=1 do={
-      :set Indent ($Indent . "  ");
-    }
-    :return ($Indent . "-" . $Prefix . "-> " . $Value);
+    :global CharacterMultiply;
+
+    :return ([ $CharacterMultiply " " $Level ] . "-" . $Prefix . "-> " . $Value);
   }
 
   :local TypeOf [ :typeof $Input ];

From 187735f35f7b361b1cc6d45f703d5c121681254c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 11:12:02 +0200
Subject: [PATCH 769/988] mod/inspectvar: print the length for strings

---
 mod/inspectvar.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index b864d9a8..84c40d8f 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -39,6 +39,7 @@
   }
 
   :local TypeOf [ :typeof $Input ];
+  :local Len    [ :len $Input ];
   :local Return [ $IndentReturn "type" $TypeOf $Level ];
 
   :if ($TypeOf = "array") do={
@@ -48,6 +49,10 @@
         [ $InspectVarReturn $Value ($Level + 2) ]);
     }
   } else={
+    :if ($TypeOf = "str") do={
+      :set $Return ($Return . "\n" . \
+         [ $IndentReturn "len" $Len $Level ]);
+    }
     :if ($TypeOf != "nothing") do={
       :set $Return ($Return . "\n" . \
         [ $IndentReturn "value" [ $IfThenElse ([ :len $Input ] > 80) \

From 36f155ce621abe427d126a6ee3a3363bff15b2bb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 11:15:21 +0200
Subject: [PATCH 770/988] mod/inspectvar: remove CR, replace LF

---
 mod/inspectvar.rsc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index 84c40d8f..b32480f3 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -25,6 +25,7 @@
   :local Input $1;
   :local Level (0 + [ :tonum $2 ]);
 
+  :global CharacterReplace;
   :global IfThenElse;
   :global InspectVarReturn;
 
@@ -52,6 +53,7 @@
     :if ($TypeOf = "str") do={
       :set $Return ($Return . "\n" . \
          [ $IndentReturn "len" $Len $Level ]);
+      :set Input [ $CharacterReplace [ $CharacterReplace $Input ("\r") "" ] ("\n") " " ];
     }
     :if ($TypeOf != "nothing") do={
       :set $Return ($Return . "\n" . \

From bd3cc3bbd49934f42fe9f6c6820501c7cc9d33ba Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 13:35:49 +0200
Subject: [PATCH 771/988] mod/inspectvar: replace only when matching

---
 mod/inspectvar.rsc | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index b32480f3..fc1b366f 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -53,7 +53,12 @@
     :if ($TypeOf = "str") do={
       :set $Return ($Return . "\n" . \
          [ $IndentReturn "len" $Len $Level ]);
-      :set Input [ $CharacterReplace [ $CharacterReplace $Input ("\r") "" ] ("\n") " " ];
+      :if ([ :typeof [ :find $Input ("\r") ] ] = "num") do={
+        :set Input [ $CharacterReplace $Input ("\r") "" ];
+      }
+      :if ([ :typeof [ :find $Input ("\n") ] ] = "num") do={
+        :set Input [ $CharacterReplace $Input ("\n") " " ];
+      }
     }
     :if ($TypeOf != "nothing") do={
       :set $Return ($Return . "\n" . \

From ff218e4ce5032b2ead7f33f53382bda98f6e5e2e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 11:21:59 +0200
Subject: [PATCH 772/988] mod/notification-email: add error handling when
 sending mail

---
 mod/notification-email.rsc | 57 +++++++++++++++++++++-----------------
 1 file changed, 31 insertions(+), 26 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index c0f9d860..e05a8131 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -89,35 +89,40 @@
 
   :foreach Id,Message in=$EmailQueue do={
     :if ([ :typeof $Message ] = "array" ) do={
-      :local Attach ({});
       :while ([ /tool/e-mail/get last-status ] = "in-progress") do={ :delay 1s; }
-      :foreach File in=[ :toarray [ $EitherOr ($Message->"attach") "" ] ] do={
-        :if ([ :len [ /file/find where name=$File ] ] = 1) do={
-          :set Attach ($Attach, $File);
-        } else={
-          $LogPrint warning $0 ("File '" . $File . "' does not exist, can not attach.");
-        }
-      }
-      /tool/e-mail/send from=[ $EMailGenerateFrom ] to=($Message->"to") cc=($Message->"cc") \
-        subject=($Message->"subject") body=($Message->"body") file=$Attach;
-      :local Wait true;
-      :do {
-        :delay 1s;
-        :local Status [ /tool/e-mail/get last-status ];
-        :if ($Status = "succeeded") do={
-          :set ($EmailQueue->$Id);
-          :set Wait false;
-          :if (($Message->"remove-attach") = true) do={
-            :foreach File in=$Attach do={
-              /file/remove $File;
-            }
+      :onerror Err {
+        :local Attach ({});
+        :foreach File in=[ :toarray [ $EitherOr ($Message->"attach") "" ] ] do={
+          :if ([ :len [ /file/find where name=$File ] ] = 1) do={
+            :set Attach ($Attach, $File);
+          } else={
+            $LogPrint warning $0 ("File '" . $File . "' does not exist, can not attach.");
           }
         }
-        :if ($Status = "failed") do={
-          :set AllDone false;
-          :set Wait false;
-        }
-      } while=($Wait = true);
+        /tool/e-mail/send from=[ $EMailGenerateFrom ] to=($Message->"to") cc=($Message->"cc") \
+          subject=($Message->"subject") body=($Message->"body") file=$Attach;
+        :local Wait true;
+        :do {
+          :delay 1s;
+          :local Status [ /tool/e-mail/get last-status ];
+          :if ($Status = "succeeded") do={
+            :set ($EmailQueue->$Id);
+            :set Wait false;
+            :if (($Message->"remove-attach") = true) do={
+              :foreach File in=$Attach do={
+                /file/remove $File;
+              }
+            }
+          }
+          :if ($Status = "failed") do={
+            :set AllDone false;
+            :set Wait false;
+          }
+        } while=($Wait = true);
+      } do={
+        $LogPrint warning $0 ("Sending queued mail failed: " . $Err);
+        :set AllDone false;
+      }
     }
   }
 

From 74dc809b98759cb337fbaf6b1fa98bb0137dadc0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 13:29:01 +0200
Subject: [PATCH 773/988] mod/notification-email: properly truncate the body

Truned out that the size limit for e-mail message/body is anywhere just
below 64kB... So truncate  at about 62.000 bytes.
---
 mod/notification-email.rsc | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index e05a8131..c799c874 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -181,6 +181,7 @@
   :global IfThenElse;
   :global NotificationEMailSignature;
   :global NotificationEMailSubject;
+  :global SymbolForNotification;
 
   :local To [ $EitherOr ($EmailGeneralToOverride->($Notification->"origin")) $EmailGeneralTo ];
   :local Cc [ $EitherOr ($EmailGeneralCcOverride->($Notification->"origin")) $EmailGeneralCc ];
@@ -193,13 +194,22 @@
   :if ([ :typeof $EmailQueue ] = "nothing") do={
       :set EmailQueue ({});
   }
+  :local Truncated false;
+  :local Body ($Notification->"message");
+  :if ([ :len $Body ] > 62000) do={
+    :set Body ([ :pick $Body 0 62000 ] . "...");
+    :set Truncated true;
+  }
   :local Signature [ $EitherOr [ $NotificationEMailSignature ] [ /system/note/get note ] ];
+  :set Body ($Body . "\n" . \
+      [ $IfThenElse ([ :len ($Notification->"link") ] > 0) ("\n" . ($Notification->"link")) ] . \
+      [ $IfThenElse ($Truncated = true) ("\n" . [ $SymbolForNotification "scissors" ] . \
+          "The message was too long and has been truncated!") ] . \
+      [ $IfThenElse ([ :len $Signature ] > 0) ("\n-- \n" . $Signature) "" ]);
   :set ($EmailQueue->[ :len $EmailQueue ]) {
     to=$To; cc=$Cc;
     subject=[ $NotificationEMailSubject ($Notification->"subject") ];
-    body=(($Notification->"message") . \
-      [ $IfThenElse ([ :len ($Notification->"link") ] > 0) ("\n\n" . ($Notification->"link")) "" ] . \
-      [ $IfThenElse ([ :len $Signature ] > 0) ("\n-- \n" . $Signature) "" ]); \
+    body=$Body; \
     attach=($Notification->"attach"); remove-attach=($Notification->"remove-attach") };
   :if ([ :len [ /system/scheduler/find where name="_FlushEmailQueue" ] ] = 0) do={
     /system/scheduler/add name="_FlushEmailQueue" interval=1s start-time=startup \

From 2a956874777c83748f4a2afea4e9ee1382928230 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 8 May 2025 14:54:42 +0200
Subject: [PATCH 774/988] mod/notification-email: add the link symbol

---
 mod/notification-email.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index c799c874..52937668 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -202,7 +202,8 @@
   }
   :local Signature [ $EitherOr [ $NotificationEMailSignature ] [ /system/note/get note ] ];
   :set Body ($Body . "\n" . \
-      [ $IfThenElse ([ :len ($Notification->"link") ] > 0) ("\n" . ($Notification->"link")) ] . \
+      [ $IfThenElse ([ :len ($Notification->"link") ] > 0) \
+          ("\n" . [ $SymbolForNotification "link" ] . ($Notification->"link")) ] . \
       [ $IfThenElse ($Truncated = true) ("\n" . [ $SymbolForNotification "scissors" ] . \
           "The message was too long and has been truncated!") ] . \
       [ $IfThenElse ([ :len $Signature ] > 0) ("\n-- \n" . $Signature) "" ]);

From ce129ee4418a09d4b1987e3d94818a561d9fd384 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 11 May 2025 22:02:18 +0200
Subject: [PATCH 775/988] fw-addr-lists: for IPv6 the CIDR is always expected

---
 fw-addr-lists.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 5a03875d..efd37db7 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -114,8 +114,8 @@
             :error true;
           }
           :if ($Address ~ "^[0-9a-zA-Z]*:[0-9a-zA-Z:\\.]+(/[0-9]{1,3})?\$") do={
-            :if ($Address ~ "/128\$") do={
-              :set Address [ :pick $Address 0 ([ :len $Address ] - 4) ];
+            :if ([ :typeof [ :find $Address "/" ] ] = "nil") do={
+              :set Address ($Address . "/128");
             }
             :set ($IPv6Addresses->$Branch->$Address) $TimeOut;
             :error true;

From e78c71948dfa847fd21820dffacd3c6e7165d832 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 12 May 2025 16:50:06 +0200
Subject: [PATCH 776/988] mod/notification-telegram: fix indention

---
 mod/notification-telegram.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 0832b07e..2eb90e12 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -189,7 +189,7 @@
 
   :local HTTPData ("chat_id=" . $ChatId . "&disable_notification=" . ($Notification->"silent") . \
       "&reply_to_message_id=" . ($Notification->"replyto") . "&message_thread_id=" . $ThreadId . \
-       "&disable_web_page_preview=true&parse_mode=MarkdownV2");
+      "&disable_web_page_preview=true&parse_mode=MarkdownV2");
   :onerror Err {
     :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
       $LogPrint warning $0 ("Downloading required certificate failed.");

From 1b5dd1e1d3555f347bd6ff587659ac8b8ec5c73e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 12 May 2025 16:53:55 +0200
Subject: [PATCH 777/988] telegram-chat: support trusted group chat ids

But be warned: Adding a person to a trusted group will give
her/him administrative control over the device(s) - without
changes on the device itself!

On the other hand... Removing permissions is easily done by removing
a person from a group.

Closes: https://github.com/eworm-de/routeros-scripts/issues/101
---
 telegram-chat.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 5bfa31c8..50fc0cce 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -107,7 +107,9 @@
       :local ThreadId [ $IfThenElse ($Message->"is_topic_message") ($Message->"message_thread_id") "" ];
 
       :foreach IdsTrusted in=($TelegramChatId, $TelegramChatIdsTrusted) do={
-        :if ($From->"id" = $IdsTrusted || $From->"username" = $IdsTrusted) do={
+        :if ($From->"id" = $IdsTrusted || \
+             $From->"username" = $IdsTrusted || \
+             $Chat->"id" = $IdsTrusted) do={
           :set Trusted true;
         }
       }

From f1396b83aa7f506fe653184016cd970728eb9407 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 13 May 2025 09:52:12 +0200
Subject: [PATCH 778/988] telegram-chat: support debug output for updates in
 JSON

---
 telegram-chat.rsc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 50fc0cce..277c40fc 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -33,6 +33,7 @@
   :global GetRandom20CharAlNum;
   :global IfThenElse;
   :global LogPrint;
+  :global LogPrintVerbose;
   :global MAX;
   :global MIN;
   :global MkDir;
@@ -96,6 +97,8 @@
   :local Uptime [ /system/resource/get uptime ];
   :foreach Update in=($JSON->"result") do={
     :set UpdateID ($Update->"update_id");
+    $LogPrintVerbose debug $ScriptName ("Update " . $UpdateID . ": " . [ :serialize to=json $Update ]);
+
     :local Message ($Update->"message");
     :local IsReply ([ :typeof ($Message->"reply_to_message") ] = "string");
     :local IsMyReply ($TelegramMessageIDs->[ :tostr ($Message->"reply_to_message"->"message_id") ]);

From 64fe923c5aea4e6b8cd549a39f8e76c1e9814391 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 13 May 2025 10:02:03 +0200
Subject: [PATCH 779/988] DEBUG: fix typo

---
 DEBUG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/DEBUG.md b/DEBUG.md
index d5e9beb7..66bf728a 100644
--- a/DEBUG.md
+++ b/DEBUG.md
@@ -42,7 +42,7 @@ Other actions (`disk`, `email`, `remote` or `support`) can be used as
 well. I do not recommend using `echo` - use [debug output](#debug-output)
 instead.
 
-Disable or remote that setting to restore regular logging.
+Disable or remove that setting to restore regular logging.
 
 ## Verbose output
 

From 86ad41f6b612ef3b904e053b2dbf2f12d3260842 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 23 May 2025 09:06:02 +0200
Subject: [PATCH 780/988] fix the trust state for certificates

RouterOS 7.19 is suffering an issue with certificate store, where the
trust state is not available correctly. This effects certificates
imported a long time ago, with RouterOS 7.4 or older.

Fixing trust state for all certificates by re-setting the trust state...

(Reported as SUP-188791...)
---
 global-functions.rsc | 2 +-
 news-and-changes.rsc | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 8331e4a7..ef849e0d 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -15,7 +15,7 @@
 # Git commit id & info, expected configuration version
 :global CommitId "unknown";
 :global CommitInfo "unknown";
-:global ExpectedConfigVersion 137;
+:global ExpectedConfigVersion 138;
 
 # global variables not to be changed by user
 :global GlobalFunctionsReady false;
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index a9a29049..dbfb1b9b 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -62,6 +62,7 @@
   135="Introduced helper function '\$GetTelegramChatId' for 'mod/notification-telegram' which helps retrieve information.";
   136="Introduced script 'check-perpetual-license' to check for license state on CHR.";
   137="Added support to send notifications via Gotify (gotify.net).";
+  138="RouterOS 7.19 is suffering an issue with certificate store. Fixing trust state for all certificates...";
 };
 
 # Migration steps to be applied on script updates
@@ -71,4 +72,5 @@
   104=":global CharacterReplace; :global ScriptInstallUpdate; :foreach Script in={ \"capsman-download-packages\"; \"capsman-rolling-upgrade\"; \"hotspot-to-wpa\"; \"hotspot-to-wpa-cleanup\" } do={ /system/script/set name=(\$Script . \".capsman\") [ find where name=\$Script ]; :foreach Scheduler in=[ /system/scheduler/find where on-event~(\$Script . \"([^-.]|\\\$)\") ] do={ /system/scheduler/set \$Scheduler on-event=[ \$CharacterReplace [ get \$Scheduler on-event ] \$Script (\$Script . \".capsman\") ]; }; }; /ip/hotspot/user/profile/set on-login=\"hotspot-to-wpa.capsman\" [ find where on-login=\"hotspot-to-wpa\" ]; \$ScriptInstallUpdate;";
   111=":local Rec [ /ip/dns/static/find where comment~\"^managed by dhcp-to-dns for \" ]; :if ([ :len \$Rec ] > 0) do={ /ip/dns/static/remove \$Rec; /system/script/run dhcp-to-dns; }";
   132=":if ([ :len [ /system/script/find where name=\"check-health\" ] ] > 0) do={ :local Code \":local Install \\\"check-health\\\"; :if ([ :len [ /system/health/find where type=\\\"\\\" name~\\\"-state\\\\\\\$\\\" ] ] > 0) do={ :set Install (\\\$Install . \\\",check-health.d/state\\\"); }; :if ([ :len [ /system/health/find where type=\\\"C\\\" ] ] > 0) do={ :set Install (\\\$Install . \\\",check-health.d/temperature\\\"); }; :if ([ :len [ /system/health/find where type=\\\"V\\\" ] ] > 0) do={ :set Install (\\\$Install . \\\",check-health.d/voltage\\\"); }; :global ScriptInstallUpdate; \\\$ScriptInstallUpdate \\\$Install;\"; :global ValidateSyntax; :if ([ \$ValidateSyntax \$Code ] = true) do={ :do { [ :parse \$Code ]; } on-error={ }; }; }";
+  138="/certificate/set trusted=yes [ find where trusted=yes ];";
 };

From 4bd7d44cd2b9252d7389f049c367e57c642551d5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 23 May 2025 11:16:40 +0200
Subject: [PATCH 781/988] global-functions: $ScriptInstallUpdate: fix syntax
 error

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ef849e0d..55dbdee9 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1212,7 +1212,7 @@
           :set SourceNew [ :tolf ($Result->"data") ];
         }
       } do={
-        $LogPrint warning $0 ("Failed fetching script '" . $ScriptVal->"name" . . "': " . $Err);
+        $LogPrint warning $0 ("Failed fetching script '" . $ScriptVal->"name" . "': " . $Err);
         :if ($ScriptVal->"source" = "#!rsc by RouterOS\n") do={
           $LogPrint warning $0 ("Removing dummy. Typo on installation?");
           /system/script/remove $Script;

From c50acd697a75d9e1dd3d336405d4bdc1567546ee Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 23 May 2025 17:36:56 +0200
Subject: [PATCH 782/988] telegram-chat: fix detection of replies

---
 telegram-chat.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 277c40fc..98624792 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -100,7 +100,7 @@
     $LogPrintVerbose debug $ScriptName ("Update " . $UpdateID . ": " . [ :serialize to=json $Update ]);
 
     :local Message ($Update->"message");
-    :local IsReply ([ :typeof ($Message->"reply_to_message") ] = "string");
+    :local IsReply ([ :typeof ($Message->"reply_to_message") ] = "array");
     :local IsMyReply ($TelegramMessageIDs->[ :tostr ($Message->"reply_to_message"->"message_id") ]);
     :if (($IsMyReply = 1 || $TelegramChatOffset->0 > 0 || $Uptime > 5m) && $UpdateID >= $TelegramChatOffset->2) do={
       :local Trusted false;

From 6a49c483b679d7dc68b7b12617be24508c3fa5b4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 23 May 2025 17:38:22 +0200
Subject: [PATCH 783/988] telegram-chat: rename variable...

... to better describe the use.
---
 telegram-chat.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 98624792..fdd08838 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -100,7 +100,7 @@
     $LogPrintVerbose debug $ScriptName ("Update " . $UpdateID . ": " . [ :serialize to=json $Update ]);
 
     :local Message ($Update->"message");
-    :local IsReply ([ :typeof ($Message->"reply_to_message") ] = "array");
+    :local IsAnyReply ([ :typeof ($Message->"reply_to_message") ] = "array");
     :local IsMyReply ($TelegramMessageIDs->[ :tostr ($Message->"reply_to_message"->"message_id") ]);
     :if (($IsMyReply = 1 || $TelegramChatOffset->0 > 0 || $Uptime > 5m) && $UpdateID >= $TelegramChatOffset->2) do={
       :local Trusted false;
@@ -138,7 +138,7 @@
             " from update " . $UpdateID . "!");
           :set Done true;
         }
-        :if ($Done = false && ($IsMyReply = 1 || ($IsReply = false && \
+        :if ($Done = false && ($IsMyReply = 1 || ($IsAnyReply = false && \
              $TelegramChatActive = true)) && [ :len $Command ] > 0) do={
           :if ([ $ValidateSyntax $Command ] = true) do={
             :local State "";

From 3d3b270748b43362d0ec51a1e52f300e6770b469 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 28 May 2025 14:07:57 +0200
Subject: [PATCH 784/988] README: give a hint on builtin certificate store

I guess this should become the default any time in future...
---
 README.md | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 2a8b2cef..bc098408 100644
--- a/README.md
+++ b/README.md
@@ -72,7 +72,14 @@ including demonstation recorded live at [MUM Europe
 ### The long way in detail
 
 The update script does server certificate verification, so first step is to
-download the certificates. If you intend to download the scripts from a
+download the certificates.
+
+> 💡️ **Hint**: RouterOS 7.19 comes with a builtin certificate store. You
+> can skip the steps regarding certificate download and import if you set
+> the trust for these builtin trust anchors:
+> `/certificate/settings/set builtin-trust-anchors=trusted;`
+
+If you intend to download the scripts from a
 different location (for example from github.com) install the corresponding
 certificate chain.
 

From d59c4aee26788f3c5088c32a3bd54f0562b4d2b4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 28 May 2025 14:16:57 +0200
Subject: [PATCH 785/988] README: add a paragraph and link to jump

---
 README.md | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index bc098408..243e1fc5 100644
--- a/README.md
+++ b/README.md
@@ -75,8 +75,9 @@ The update script does server certificate verification, so first step is to
 download the certificates.
 
 > 💡️ **Hint**: RouterOS 7.19 comes with a builtin certificate store. You
-> can skip the steps regarding certificate download and import if you set
-> the trust for these builtin trust anchors:
+> can skip the steps regarding certificate download and import and jump
+> to [installation of scripts](#installation-of-scripts) if you set the
+> trust for these builtin trust anchors:
 > `/certificate/settings/set builtin-trust-anchors=trusted;`
 
 If you intend to download the scripts from a
@@ -113,6 +114,8 @@ is shown.
 
 Always make sure there are no certificates installed you do not know or want!
 
+#### Installation of scripts
+
 All following commands will verify the server certificate. For validity the
 certificate's lifetime is checked with local time, so make sure the device's
 date and time is set correctly!

From bf684a7197f9ad07e23415de5779a366af7dd71b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 28 May 2025 15:08:26 +0200
Subject: [PATCH 786/988] global-functions: $CertificateAvailable: try to use
 builtin certificates

The builtin certificates were introduced with RouterOS 7.19, so requires
this hacky :parse workaround.
---
 global-functions.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 55dbdee9..759b2744 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -119,6 +119,11 @@
     :return false;
   }
 
+  :if (([ /certificate/settings/get ]->"builtin-trust-anchors") = "trusted" && \
+       [[ :parse (":return [ :len [ /certificate/builtin/find where common-name=\"" . $CommonName . "\" ] ]") ]] > 0) do={
+    :return true;
+  }
+
   :if ([ :len [ /certificate/find where common-name=$CommonName ] ] = 0) do={
     $LogPrint info $0 ("Certificate with CommonName '" . $CommonName . "' not available.");
     :if ([ $CertificateDownload $CommonName ] = false) do={

From d69b39957278a9393762ec1653895eeb69483e9e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 28 May 2025 16:38:50 +0200
Subject: [PATCH 787/988] INITIAL-COMMANDS: use builtin certificates if
 possible

---
 INITIAL-COMMANDS.md | 26 ++++++++++++++++----------
 1 file changed, 16 insertions(+), 10 deletions(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 79773bd9..40f609b9 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -18,17 +18,21 @@ Run the complete base installation:
 
     {
       :local BaseUrl "https://git.eworm.de/cgit/routeros-scripts/plain/";
+      :local CertCommonName "ISRG Root X2";
       :local CertFileName "ISRG-Root-X2.pem";
       :local CertFingerprint "69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
 
-      :put "Importing certificate...";
-      /tool/fetch ($BaseUrl . "certs/" . $CertFileName) dst-path=$CertFileName as-value;
-      :delay 1s;
-      /certificate/import file-name=$CertFileName passphrase="";
-      :if ([ :len [ /certificate/find where fingerprint=$CertFingerprint ] ] != 1) do={
-        :error "Something is wrong with your certificates!";
+      :if (!(([ /certificate/settings/get ]->"builtin-trust-anchors") = "trusted" && \
+           [[ :parse (":return [ :len [ /certificate/builtin/find where common-name=\"" . $CertCommonName . "\" ] ]") ]] > 0)) do={
+        :put "Importing certificate...";
+        /tool/fetch ($BaseUrl . "certs/" . $CertFileName) dst-path=$CertFileName as-value;
+        :delay 1s;
+        /certificate/import file-name=$CertFileName passphrase="";
+        :if ([ :len [ /certificate/find where fingerprint=$CertFingerprint ] ] != 1) do={
+          :error "Something is wrong with your certificates!";
+        };
+        :delay 1s;
       };
-      :delay 1s;
       :put "Renaming global-config-overlay, if exists...";
       /system/script/set name=("global-config-overlay-" . [ /system/clock/get date ] . "-" . [ /system/clock/get time ]) [ find where name="global-config-overlay" ];
       :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={
@@ -41,9 +45,11 @@ Run the complete base installation:
       :put "Scheduling to load configuration and functions...";
       /system/scheduler/remove [ find where name="global-scripts" ];
       /system/scheduler/add name="global-scripts" start-time=startup on-event="/system/script { run global-config; run global-functions; }";
-      :put "Renaming certificate by its common-name...";
-      :global CertificateNameByCN;
-      $CertificateNameByCN $CertFingerprint;
+      :if ([ :len [ /certificate/find where fingerprint=$CertFingerprint ] ] > 0) do={
+        :put "Renaming certificate by its common-name...";
+        :global CertificateNameByCN;
+        $CertificateNameByCN $CertFingerprint;
+      };
     };
 
 Then continue setup with

From b70e6e79843f7c1bbc0031dd74cdf8005d3da4ff Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 2 Jun 2025 21:53:23 +0200
Subject: [PATCH 788/988] global-functions: introduce $FileGet

---
 global-functions.rsc | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 759b2744..3a2d20a5 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -38,6 +38,7 @@
 :global ExitError;
 :global FetchHuge;
 :global FetchUserAgentStr;
+:global FileGet;
 :global FormatLine;
 :global FormatMultiLines;
 :global GetMacVendor;
@@ -529,6 +530,18 @@
     $Resource->"architecture-name" . " " . $Caller . "/Fetch (https://rsc.eworm.de/)");
 }
 
+# get file properties in array, or false on error
+:set FileGet do={
+  :local FileName [ :tostr $1 ];
+
+  :local FileVal false;
+  :do {
+    :set FileVal [ /file/get $FileName ];
+  } on-error={ }
+
+  :return $FileVal;
+}
+
 # format a line for output
 :set FormatLine do={
   :local Key    [ :tostr $1 ];

From 1e4f168735663cc09395980b5fa24a25f6403347 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 20:42:25 +0200
Subject: [PATCH 789/988] global-functions: $MkDir: use $FileGet ...

... to work around restrictions in new file handling.
---
 global-functions.rsc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 3a2d20a5..3b2ab95d 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -893,6 +893,7 @@
   :local Path [ :tostr $1 ];
 
   :global CleanFilePath;
+  :global FileGet;
   :global LogPrint;
   :global RmDir;
   :global WaitForFile;
@@ -930,7 +931,8 @@
 
   $LogPrint debug $0 ("Making directory: " . $Path);
 
-  :if ([ :len [ /file/find where name=$Path type="directory" ] ] = 1) do={
+  :local PathVal [ $FileGet $Path ];
+  :if ($PathVal->"type" = "directory") do={
     $LogPrint debug $0 ("... which already exists.");
     :return true;
   }

From d993495e44563f841f7fed19fcf3162a6cb7b971 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 21:38:26 +0200
Subject: [PATCH 790/988] global-functions: $RmDir: use $FileGet ...

... to work around restrictions in new file handling.
---
 global-functions.rsc | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 3b2ab95d..2d0cd391 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1057,25 +1057,26 @@
 :set RmDir do={
   :local DirName [ :tostr $1 ];
 
+  :global FileGet;
   :global LogPrint;
 
   $LogPrint debug $0 ("Removing directory: ". $DirName);
 
-  :if ([ :len [ /file/find where name=$DirName type!=directory ] ] > 0) do={
-    $LogPrint error $0 ("Directory '" . $DirName . "' is not a directory.");
-    :return false;
-  }
-
-  :local Dir [ /file/find where name=$DirName type=directory ];
-  :if ([ :len $Dir ] = 0) do={
+  :local DirVal [ $FileGet $DirName ];
+  :if ($DirVal = false) do={
     $LogPrint debug $0 ("... which does not exist.");
     :return true;
   }
 
+  :if ($DirVal->"type" != "directory") do={
+    $LogPrint error $0 ("Directory '" . $DirName . "' is not a directory.");
+    :return false;
+  }
+
   :onerror Err {
-    /file/remove $Dir;
+    /file/remove $DirName;
   } do={
-    $LogPrint error $0 ("Removing directory '" . $DirName . "' (" . $Dir . ") failed: " . $Err);
+    $LogPrint error $0 ("Removing directory '" . $DirName . "' failed: " . $Err);
     :return false;
   }
   :return true;

From fb8e616846ab8decb10a8b792b5307a01195110d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 21:41:34 +0200
Subject: [PATCH 791/988] global-functions: $RmFile: use $FileGet ...

... to work around restrictions in new file handling.
---
 global-functions.rsc | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 2d0cd391..985deba4 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1086,25 +1086,26 @@
 :set RmFile do={
   :local FileName [ :tostr $1 ];
 
+  :global FileGet;
   :global LogPrint;
 
   $LogPrint debug $0 ("Removing file: ". $FileName);
 
-  :if ([ :len [ /file/find where name=$FileName (type=directory or type=disk) ] ] > 0) do={
-    $LogPrint error $0 ("File '" . $FileName . "' is not a file.");
-    :return false;
-  }
-
-  :local File [ /file/find where name=$FileName !(type=directory or type=disk) ];
-  :if ([ :len $File ] = 0) do={
+  :local FileVal [ $FileGet $FileName ];
+  :if ($FileVal = false) do={
     $LogPrint debug $0 ("... which does not exist.");
     :return true;
   }
 
+  :if ($FileVal->"type" = "directory" || $FileVal->"type" = "disk") do={
+    $LogPrint error $0 ("File '" . $FileName . "' is not a file.");
+    :return false;
+  }
+
   :onerror Err {
-    /file/remove $File;
+    /file/remove $FileName;
   } do={
-    $LogPrint error $0 ("Removing file '" . $FileName . "' (" . $File . ") failed: " . $Err);
+    $LogPrint error $0 ("Removing file '" . $FileName . "' failed: " . $Err);
     :return false;
   }
   :return true;

From e08bb2192dfd22b25652553f28304818a3602331 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 20:48:05 +0200
Subject: [PATCH 792/988] global-functions: $WaitForFile: drop the workaround

This was fixed in RouterOS 7.18rc1, so should be ok to remove now.
---
 global-functions.rsc | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 985deba4..3a621697 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1757,15 +1757,6 @@
     :set I ($I + 1);
   }
 
-  :while ([ :len [ /file/find where name=$FileName ] ] > 0) do={
-    :do {
-      /file/get $FileName;
-      :return true;
-    } on-error={ }
-    :delay $Delay;
-    :set Delay ($Delay * 3 / 2);
-  }
-
   :return false;
 }
 

From 0e00a228d67d77fadc80eee2df04c2cec25b8db8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 21:25:20 +0200
Subject: [PATCH 793/988] global-functions: $WaitForFile: use :retry for
 simplification, ...

... and to work around restrictions in new file handling.
---
 global-functions.rsc | 14 ++++++--------
 1 file changed, 6 insertions(+), 8 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 3a621697..fa5d2be9 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1746,16 +1746,14 @@
   :global MAX;
 
   :set FileName [ $CleanFilePath $FileName ];
-  :local I 1;
   :local Delay ([ $MAX [ $EitherOr $WaitTime 2s ] 100ms ] / 10);
 
-  :while ([ :len [ /file/find where name=$FileName ] ] = 0) do={
-    :if ($I >= 10) do={
-      :return false;
-    }
-    :delay $Delay;
-    :set I ($I + 1);
-  }
+  :do {
+    :retry {
+      /file/get $FileName;
+      :return true;
+    } delay=$Delay max=10;
+  } on-error={ }
 
   :return false;
 }

From cb984a5e527a12aaa2336cfd66f180302755f066 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 20:34:07 +0200
Subject: [PATCH 794/988] global-functions: introduce $FileExists

---
 global-functions.rsc | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index fa5d2be9..ddddc409 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -38,6 +38,7 @@
 :global ExitError;
 :global FetchHuge;
 :global FetchUserAgentStr;
+:global FileExists;
 :global FileGet;
 :global FormatLine;
 :global FormatMultiLines;
@@ -530,6 +531,29 @@
     $Resource->"architecture-name" . " " . $Caller . "/Fetch (https://rsc.eworm.de/)");
 }
 
+# check for existence of file, optionally with type
+:set FileExists do={
+  :local FileName [ :tostr $1 ];
+  :local Type     [ :tostr $2 ];
+
+  :global FileGet;
+
+  :local FileVal [ $FileGet $FileName ];
+  :if ($FileVal = false) do={
+    :return false;
+  }
+
+  :if ([ :len ($FileVal->"size") ] = 0) do={
+    :return false;
+  }
+
+  :if ([ :len $Type ] = 0 || $FileVal->"type" = $Type) do={
+    :return true;
+  }
+
+  :return false;
+}
+
 # get file properties in array, or false on error
 :set FileGet do={
   :local FileName [ :tostr $1 ];

From 8353a8547f45a18e167b8ffd3779d8bd469dd1c7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 20:44:49 +0200
Subject: [PATCH 795/988] global-functions: $DownloadPackage: use $FileExists
 ...

... to work around restrictions in new file handling.
---
 global-functions.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ddddc409..50426b69 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -365,6 +365,7 @@
 
   :global CertificateAvailable;
   :global CleanFilePath;
+  :global FileExists;
   :global LogPrint;
   :global MkDir;
   :global RmFile;
@@ -385,7 +386,7 @@
     :return false;
   }
 
-  :if ([ :len [ /file/find where name=$PkgDest type="package" ] ] > 0) do={
+  :if ([ $FileExists $PkgDest "package" ] = true) do={
     $LogPrint info $0 ("Package file " . $PkgName . " already exists.");
     :return true;
   }
@@ -407,7 +408,7 @@
     :return false;
   }
 
-  :if ([ /file/get [ find where name=$PkgDest ] type ] != "package") do={
+  :if ([ $FileExists $PkgDest "package" ] = false) do={
     $LogPrint warning $0 ("Downloaded file is not a package, removing.");
     $RmFile $PkgDest;
     :return false;

From a2f837be591e4e64f2634e1d2e57352989326e98 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 22:39:18 +0200
Subject: [PATCH 796/988] backup-email: use :retry and $FileExists ...

... to work around restrictions in new file handling.
---
 backup-email.rsc | 21 +++++++++++----------
 1 file changed, 11 insertions(+), 10 deletions(-)

diff --git a/backup-email.rsc b/backup-email.rsc
index 632d2e60..cff6fd83 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -27,6 +27,7 @@
 
   :global CleanName;
   :global DeviceInfo;
+  :global FileExists;
   :global FormatLine;
   :global LogPrint;
   :global MkDir;
@@ -124,16 +125,16 @@
     attach=$Attach; remove-attach=true });
 
   # wait for the mail to be sent
-  :local I 0;
-  :while ([ :len [ /file/find where name ~ ($FilePath . "\\.(backup|rsc)\$") ] ] > 0) do={
-    :if ($I >= 120) do={
-      $LogPrint warning $ScriptName ("Files are still available, sending e-mail failed.");
-      :set PackagesUpdateBackupFailure true;
-      :set ExitOK true;
-      :error false;
-    }
-    :delay 1s;
-    :set I ($I + 1);
+  :do {
+    :retry {
+      :if ([ $FileExists ($FilePath . ".backup") "backup" ] = true || \
+           [ $FileExists ($FilePath . ".rsc") "script" ] = true) do={
+        :error "Files are still available.";
+      }
+    } delay=1s max=120;
+  } on-error={
+    $LogPrint warning $ScriptName ("Files are still available, sending e-mail failed.");
+    :set PackagesUpdateBackupFailure true;
   }
 } do={
   :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;

From 43bac7c33c50e164ff7ac56029519d510bc08973 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 2 Jun 2025 23:52:29 +0200
Subject: [PATCH 797/988] backup-email: check for .conf file

---
 backup-email.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/backup-email.rsc b/backup-email.rsc
index cff6fd83..cc621055 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -127,7 +127,8 @@
   # wait for the mail to be sent
   :do {
     :retry {
-      :if ([ $FileExists ($FilePath . ".backup") "backup" ] = true || \
+      :if ([ $FileExists ($FilePath . ".conf") ".conf file" ] = true || \
+           [ $FileExists ($FilePath . ".backup") "backup" ] = true || \
            [ $FileExists ($FilePath . ".rsc") "script" ] = true) do={
         :error "Files are still available.";
       }

From daee05dbd7c03aa7ce977ba7856234026185c4a1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 2 Jun 2025 23:49:50 +0200
Subject: [PATCH 798/988] backup-email: add a comment why files are not removed

---
 backup-email.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backup-email.rsc b/backup-email.rsc
index cc621055..8015beaa 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -137,6 +137,7 @@
     $LogPrint warning $ScriptName ("Files are still available, sending e-mail failed.");
     :set PackagesUpdateBackupFailure true;
   }
+  # do not remove the files here, as the mail is still queued!
 } do={
   :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From e3284ca77081642d2105d6a6773fa6767188dbec Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 22:46:03 +0200
Subject: [PATCH 799/988] mod/notification-email: use $FileExists ...

... to work around restrictions in new file handling.
---
 mod/notification-email.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 52937668..75e11b9d 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -40,6 +40,7 @@
 
   :global EitherOr;
   :global EMailGenerateFrom;
+  :global FileExists;
   :global IsDNSResolving;
   :global IsTimeSync;
   :global LogPrint;
@@ -93,7 +94,7 @@
       :onerror Err {
         :local Attach ({});
         :foreach File in=[ :toarray [ $EitherOr ($Message->"attach") "" ] ] do={
-          :if ([ :len [ /file/find where name=$File ] ] = 1) do={
+          :if ([ $FileExists $File ] = true) do={
             :set Attach ($Attach, $File);
           } else={
             $LogPrint warning $0 ("File '" . $File . "' does not exist, can not attach.");

From 2d81984aed8894200e4f8c6c72596b8b05bdbb93 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 22:46:16 +0200
Subject: [PATCH 800/988] mod/notification-email: use $RmFile

---
 mod/notification-email.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 75e11b9d..ad9762a3 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -44,6 +44,7 @@
   :global IsDNSResolving;
   :global IsTimeSync;
   :global LogPrint;
+  :global RmFile;
 
   :local AllDone true;
   :local QueueLen [ :len $EmailQueue ];
@@ -111,7 +112,7 @@
             :set Wait false;
             :if (($Message->"remove-attach") = true) do={
               :foreach File in=$Attach do={
-                /file/remove $File;
+                $RmFile $File;
               }
             }
           }

From 80aed200fd7400e4a4958ba314912488780be635 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 22:48:57 +0200
Subject: [PATCH 801/988] mod/ssh-keys-import: use $FileExists ...

... to work around restrictions in new file handling.
---
 mod/ssh-keys-import.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 94675255..7bdc95da 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -75,6 +75,7 @@
   :local User     [ :tostr $2 ];
 
   :global EitherOr;
+  :global FileExists;
   :global LogPrint;
   :global ParseKeyValueStore;
   :global SSHKeysImport;
@@ -84,8 +85,7 @@
     :return false;
   }
 
-  :local File [ /file/find where name=$FileName ];
-  :if ([ :len $File ] = 0) do={
+  :if ([ $FileExists $FileName ] = true) do={
     $LogPrint warning $0 ("File '" . $FileName . "' does not exist.");
     :return false;
   }

From 30b80e903dbf80510fbb05f21c598ecf6c1834d7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 22:41:03 +0200
Subject: [PATCH 802/988] telegram-chat: use $FileExists ...

... to work around restrictions in new file handling.
---
 telegram-chat.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index fdd08838..7f7b7a79 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -30,6 +30,7 @@
   :global CertificateAvailable;
   :global EitherOr;
   :global EscapeForRegEx;
+  :global FileExists;
   :global GetRandom20CharAlNum;
   :global IfThenElse;
   :global LogPrint;
@@ -154,7 +155,7 @@
             :if ([ $WaitForFile ($File . ".done") [ $EitherOr $TelegramChatRunTime 20s ] ] = false) do={
               :set State ([ $SymbolForNotification "warning-sign" ] . "The command did not finish, still running in background.\n\n");
             }
-            :if ([ :len [ /file/find where name=($File . ".failed") ] ] > 0) do={
+            :if ([ $FileExists ($File . ".failed") ] = true) do={
               :set State ([ $SymbolForNotification "cross-mark" ] . "The command failed with an error!\n\n");
             }
             :local Content ([ /file/read chunk-size=32768 file=$File as-value ]->"data");

From 5b15c82bb11f9da1b6858504dc1e0de401e91c8f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 2 Jun 2025 22:16:43 +0200
Subject: [PATCH 803/988] capsman-download-packages: use $FileGet ...

... to work around restrictions in new file handling.
---
 capsman-download-packages.capsman.rsc  | 3 ++-
 capsman-download-packages.template.rsc | 3 ++-
 capsman-download-packages.wifi.rsc     | 3 ++-
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index cab1e4c3..e296e159 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -20,6 +20,7 @@
 
   :global CleanFilePath;
   :global DownloadPackage;
+  :global FileGet;
   :global LogPrint;
   :global MkDir;
   :global RmFile;
@@ -42,7 +43,7 @@
     :error false;
   }
 
-  :if ([ :len [ /file/find where name=$PackagePath type="directory" ] ] = 0) do={
+  :if ([ $FileGet $PackagePath ] = false) do={
     :if ([ $MkDir $PackagePath ] = false) do={
       $LogPrint warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
         $PackagePath . ") failed!");
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index ea411201..4040d4d0 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -21,6 +21,7 @@
 
   :global CleanFilePath;
   :global DownloadPackage;
+  :global FileGet;
   :global LogPrint;
   :global MkDir;
   :global RmFile;
@@ -44,7 +45,7 @@
     :error false;
   }
 
-  :if ([ :len [ /file/find where name=$PackagePath type="directory" ] ] = 0) do={
+  :if ([ $FileGet $PackagePath ] = false) do={
     :if ([ $MkDir $PackagePath ] = false) do={
       $LogPrint warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
         $PackagePath . ") failed!");
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index a8103569..809fe8e7 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -20,6 +20,7 @@
 
   :global CleanFilePath;
   :global DownloadPackage;
+  :global FileGet;
   :global LogPrint;
   :global MkDir;
   :global RmFile;
@@ -42,7 +43,7 @@
     :error false;
   }
 
-  :if ([ :len [ /file/find where name=$PackagePath type="directory" ] ] = 0) do={
+  :if ([ $FileGet $PackagePath ] = false) do={
     :if ([ $MkDir $PackagePath ] = false) do={
       $LogPrint warning $ScriptName ("Creating directory at CAPsMAN package path (" . \
         $PackagePath . ") failed!");

From 15fd522d3db507cc7c22af9cd59ff85d41a5be6f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 30 May 2025 23:22:59 +0200
Subject: [PATCH 804/988] capsman-download-packages: adopt new functionality
 from file menu

---
 capsman-download-packages.capsman.rsc  | 8 ++++----
 capsman-download-packages.template.rsc | 8 ++++----
 capsman-download-packages.wifi.rsc     | 8 ++++----
 doc/capsman-download-packages.md       | 2 +-
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index e296e159..aaebf5c0 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.15
+# requires RouterOS, version=7.18
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
@@ -54,8 +54,8 @@
       "). Please place your packages!");
   }
 
-  :foreach Package in=[ /file/find where type=package \
-        package-version!=$InstalledVersion name~("^" . $PackagePath) ] do={
+  :foreach Package in=[ /file/find recursive where path=$PackagePath \
+        type="package" package-version!=$InstalledVersion ] do={
     :local File [ /file/get $Package ];
     :if ($File->"package-architecture" = "mips") do={
       :set ($File->"package-architecture") "mipsbe";
@@ -67,7 +67,7 @@
     }
   }
 
-  :if ([ :len [ /file/find where type=package name~("^" . $PackagePath) ] ] = 0) do={
+  :if ([ :len [ /file/find recursive where path=$PackagePath type="package" ] ] = 0) do={
     $LogPrint info $ScriptName ("No packages available, downloading default set.");
     :foreach Arch in={ "arm"; "mipsbe" } do={
       :foreach Package in={ "routeros"; "wireless" } do={
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 4040d4d0..ebbba709 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.15
+# requires RouterOS, version=7.18
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
@@ -56,8 +56,8 @@
       "). Please place your packages!");
   }
 
-  :foreach Package in=[ /file/find where type=package \
-        package-version!=$InstalledVersion name~("^" . $PackagePath) ] do={
+  :foreach Package in=[ /file/find recursive where path=$PackagePath \
+        type="package" package-version!=$InstalledVersion ] do={
     :local File [ /file/get $Package ];
     :if ($File->"package-architecture" = "mips") do={
       :set ($File->"package-architecture") "mipsbe";
@@ -69,7 +69,7 @@
     }
   }
 
-  :if ([ :len [ /file/find where type=package name~("^" . $PackagePath) ] ] = 0) do={
+  :if ([ :len [ /file/find recursive where path=$PackagePath type="package" ] ] = 0) do={
     $LogPrint info $ScriptName ("No packages available, downloading default set.");
 # NOT /interface/wifi/ #
     :foreach Arch in={ "arm"; "mipsbe" } do={
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 809fe8e7..7de0431f 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.15
+# requires RouterOS, version=7.18
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
@@ -54,8 +54,8 @@
       "). Please place your packages!");
   }
 
-  :foreach Package in=[ /file/find where type=package \
-        package-version!=$InstalledVersion name~("^" . $PackagePath) ] do={
+  :foreach Package in=[ /file/find recursive where path=$PackagePath \
+        type="package" package-version!=$InstalledVersion ] do={
     :local File [ /file/get $Package ];
     :if ($File->"package-architecture" = "mips") do={
       :set ($File->"package-architecture") "mipsbe";
@@ -67,7 +67,7 @@
     }
   }
 
-  :if ([ :len [ /file/find where type=package name~("^" . $PackagePath) ] ] = 0) do={
+  :if ([ :len [ /file/find recursive where path=$PackagePath type="package" ] ] = 0) do={
     $LogPrint info $ScriptName ("No packages available, downloading default set.");
     :foreach Arch in={ "arm"; "arm64" } do={
       :local Packages { "arm"={ "routeros"; "wifi-qcom"; "wifi-qcom-ac" };
diff --git a/doc/capsman-download-packages.md b/doc/capsman-download-packages.md
index 57222272..4daad494 100644
--- a/doc/capsman-download-packages.md
+++ b/doc/capsman-download-packages.md
@@ -4,7 +4,7 @@ Download packages for CAP upgrade from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.18-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 

From c3d3d61f92d4d3e219373045dbd3b982af18a824 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 2 Jun 2025 15:58:00 +0200
Subject: [PATCH 805/988] packages-update: support deferred reboot with longer
 interval

---
 doc/packages-update.md |  4 ++--
 packages-update.rsc    | 11 ++++++++---
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/doc/packages-update.md b/doc/packages-update.md
index 75225fe2..a0a17956 100644
--- a/doc/packages-update.md
+++ b/doc/packages-update.md
@@ -46,8 +46,8 @@ Configuration
 
 The configuration goes to `global-config-overlay`, this is the only parameter:
 
-* `PackagesUpdateDeferReboot`: defer the reboot for night (between 3 AM
-  and 5 AM)
+* `PackagesUpdateDeferReboot`: defer the reboot for night (between 3 AM and
+  5 AM), use a numerical value in days suffixed with a `d` to defer further
 
 By modifying the scheduler's `start-time` you can force the reboot at
 different time.
diff --git a/packages-update.rsc b/packages-update.rsc
index 4fde131b..43f67494 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -31,19 +31,24 @@
   :local Schedule do={
     :local ScriptName [ :tostr $1 ];
 
+    :global PackagesUpdateDeferReboot;
+
     :global GetRandomNumber;
+    :global IfThenElse;
     :global LogPrint;
 
     :global RebootForUpdate do={
       /system/reboot;
     }
 
+    :local Interval [ $IfThenElse ($PackagesUpdateDeferReboot >= 1d) $PackagesUpdateDeferReboot 1d ];
     :local StartTime [ :tostr [ :totime (10800 + [ $GetRandomNumber 7200 ]) ] ];
-    /system/scheduler/add name="_RebootForUpdate" start-time=$StartTime interval=1d \
+    /system/scheduler/add name="_RebootForUpdate" start-time=$StartTime interval=$Interval \
         on-event=("/system/scheduler/remove \"_RebootForUpdate\"; " . \
         ":global RebootForUpdate; \$RebootForUpdate;");
     $LogPrint info $ScriptName ("Scheduled reboot for update at " . $StartTime . \
-        " local time (" . [ /system/clock/get time-zone-name ] . ").");
+        " local time (" . [ /system/clock/get time-zone-name ] . ")" . \
+        [ $IfThenElse ($Interval > 1d) (" deferred by " . $Interval) ] . ".");
     :return true;
   }
 
@@ -153,7 +158,7 @@
       :error true;
     }
   } else={
-    :if ($PackagesUpdateDeferReboot = true) do={
+    :if ($PackagesUpdateDeferReboot = true || $PackagesUpdateDeferReboot >= 1d) do={
       $Schedule $ScriptName;
       :set ExitOK true;
       :error true;

From 1f4bf9ee63c57a711652954d6d408b221a6503e5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 2 Jun 2025 16:12:28 +0200
Subject: [PATCH 806/988] check-routeros-update: remove a stale scheduler

---
 check-routeros-update.rsc | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index e28a0190..8b80ddeb 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -28,6 +28,7 @@
   :global EscapeForRegEx;
   :global FetchUserAgentStr;
   :global LogPrint;
+  :global RebootForUpdate;
   :global ScriptFromTerminal;
   :global ScriptLock;
   :global SendNotification2;
@@ -62,9 +63,14 @@
   $WaitFullyConnected;
 
   :if ([ :len [ /system/scheduler/find where name="_RebootForUpdate" ] ] > 0) do={
-    $LogPrint info $ScriptName ("A reboot for update is already scheduled.");
-    :set ExitOK true;
-    :error false;
+    :if ([ :typeof $RebootForUpdate ] = "nothing") do={
+      $LogPrint info $ScriptName ("Found a stale scheduler for reboot, removing.");
+      /system/scheduler/remove "_RebootForUpdate";
+    } else={
+      $LogPrint info $ScriptName ("A reboot for update is already scheduled.");
+      :set ExitOK true;
+      :error false;
+    }
   }
 
   $LogPrint debug $ScriptName ("Checking for updates...");

From 0de6d006ae1773b38bef60845c6c343bc20f5da6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 2 Jun 2025 21:37:59 +0200
Subject: [PATCH 807/988] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index 5bf5d089..00861c18 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -35,6 +35,7 @@ Add yourself to the list,
 [donate with PayPal ↗️](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)!
 
 * Abdul Mannan Abbasi
+* Alex Maier
 * Andrea Ruffini Perico
 * Andrew Cox
 * Christoph Boss (@Kampfwurst)

From 595b4aea9d43f6eef3aa3dad7a198431a7e3cf9a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 10 Jun 2025 22:54:40 +0200
Subject: [PATCH 808/988] capsman-download-packages: revert changes for "new
 functionality"
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

(Though we keep the quoting for type.)

Well, turned out this functionality is for `/file/print` only,
but does not work with `/file/find`. 🫣🥴

This reverts commit 15fd522d3db507cc7c22af9cd59ff85d41a5be6f.
---
 capsman-download-packages.capsman.rsc  | 8 ++++----
 capsman-download-packages.template.rsc | 8 ++++----
 capsman-download-packages.wifi.rsc     | 8 ++++----
 doc/capsman-download-packages.md       | 2 +-
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index aaebf5c0..2ea16674 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.18
+# requires RouterOS, version=7.15
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
@@ -54,8 +54,8 @@
       "). Please place your packages!");
   }
 
-  :foreach Package in=[ /file/find recursive where path=$PackagePath \
-        type="package" package-version!=$InstalledVersion ] do={
+  :foreach Package in=[ /file/find where type="package" \
+        package-version!=$InstalledVersion name~("^" . $PackagePath) ] do={
     :local File [ /file/get $Package ];
     :if ($File->"package-architecture" = "mips") do={
       :set ($File->"package-architecture") "mipsbe";
@@ -67,7 +67,7 @@
     }
   }
 
-  :if ([ :len [ /file/find recursive where path=$PackagePath type="package" ] ] = 0) do={
+  :if ([ :len [ /file/find where type="package" name~("^" . $PackagePath) ] ] = 0) do={
     $LogPrint info $ScriptName ("No packages available, downloading default set.");
     :foreach Arch in={ "arm"; "mipsbe" } do={
       :foreach Package in={ "routeros"; "wireless" } do={
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index ebbba709..f95212a4 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.18
+# requires RouterOS, version=7.15
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
@@ -56,8 +56,8 @@
       "). Please place your packages!");
   }
 
-  :foreach Package in=[ /file/find recursive where path=$PackagePath \
-        type="package" package-version!=$InstalledVersion ] do={
+  :foreach Package in=[ /file/find where type="package" \
+        package-version!=$InstalledVersion name~("^" . $PackagePath) ] do={
     :local File [ /file/get $Package ];
     :if ($File->"package-architecture" = "mips") do={
       :set ($File->"package-architecture") "mipsbe";
@@ -69,7 +69,7 @@
     }
   }
 
-  :if ([ :len [ /file/find recursive where path=$PackagePath type="package" ] ] = 0) do={
+  :if ([ :len [ /file/find where type="package" name~("^" . $PackagePath) ] ] = 0) do={
     $LogPrint info $ScriptName ("No packages available, downloading default set.");
 # NOT /interface/wifi/ #
     :foreach Arch in={ "arm"; "mipsbe" } do={
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 7de0431f..03fd9e73 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.18
+# requires RouterOS, version=7.15
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
@@ -54,8 +54,8 @@
       "). Please place your packages!");
   }
 
-  :foreach Package in=[ /file/find recursive where path=$PackagePath \
-        type="package" package-version!=$InstalledVersion ] do={
+  :foreach Package in=[ /file/find where type="package" \
+        package-version!=$InstalledVersion name~("^" . $PackagePath) ] do={
     :local File [ /file/get $Package ];
     :if ($File->"package-architecture" = "mips") do={
       :set ($File->"package-architecture") "mipsbe";
@@ -67,7 +67,7 @@
     }
   }
 
-  :if ([ :len [ /file/find recursive where path=$PackagePath type="package" ] ] = 0) do={
+  :if ([ :len [ /file/find where type="package" name~("^" . $PackagePath) ] ] = 0) do={
     $LogPrint info $ScriptName ("No packages available, downloading default set.");
     :foreach Arch in={ "arm"; "arm64" } do={
       :local Packages { "arm"={ "routeros"; "wifi-qcom"; "wifi-qcom-ac" };
diff --git a/doc/capsman-download-packages.md b/doc/capsman-download-packages.md
index 4daad494..57222272 100644
--- a/doc/capsman-download-packages.md
+++ b/doc/capsman-download-packages.md
@@ -4,7 +4,7 @@ Download packages for CAP upgrade from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.18-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 

From e2d3f0f073f1cd923892f4ac9af0d20dfb5902ff Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 11 Jun 2025 12:26:49 +0200
Subject: [PATCH 809/988] fw-addr-lists: delay on possible scripting subsystem
 crash

This happens in :convert when a list is way too large.

Let's use $LogPrintOnce here. If the scripting subsystem really crashes
the message will be purged from $LogPrintOnceMessages anyway (as all
global variables are lost).
---
 fw-addr-lists.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index efd37db7..0c45f7ea 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -48,6 +48,12 @@
   }
   $WaitFullyConnected;
 
+  :if ([ :len [ /log/find where topics=({"script"; "warning"}) \
+      message=("\$LogPrintOnce: The message is already in log, scripting subsystem may have crashed before!") ] ] > 0) do={
+    $LogPrintOnce warning $ScriptName ("Scripting subsystem may have crashed, possibly caused by us. Delaying!");
+    :delay 5m;
+  }
+
   :local ListComment ("managed by " . $ScriptName);
 
   :foreach FwListName,FwList in=$FwAddrLists do={

From de2a90d8413b832d3bb01337ef14d1866d23d981 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 11 Jun 2025 15:51:16 +0200
Subject: [PATCH 810/988] doc/fw-addr-lists: add a warning on possible
 subsystem crash

---
 doc/fw-addr-lists.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index d09383bf..46b80c29 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -32,7 +32,10 @@ certificate is checked.
 
 > ⚠️ **Warning**: The script does not limit the size of a list, but keep in
 > mind that huge lists can exhaust your device's resources (RAM and CPU),
-> and may take a long time to process.
+> and may take a long time to process.  
+> Even crashes for the complete scripting (and CLI) subsystem are possible.
+> This should be logged accordingly with warnings when global functions are
+> reloaded from scheduler.
 
 Requirements and installation
 -----------------------------

From 95f8af6234ab56c9a831d0f37f338d7b8b3e0cbe Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 20 Jun 2025 23:47:47 +0200
Subject: [PATCH 811/988] packages-update: convert to time before comparing...

... to avoid:

    packages-update: Script 'packages-update' exited with error: Script Error: cannot compare if truth value is more than or equal to ip address
---
 packages-update.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index 43f67494..d3140f29 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -41,7 +41,8 @@
       /system/reboot;
     }
 
-    :local Interval [ $IfThenElse ($PackagesUpdateDeferReboot >= 1d) $PackagesUpdateDeferReboot 1d ];
+    :local Interval [ $IfThenElse ([ :totime $PackagesUpdateDeferReboot ] >= 1d) \
+        $PackagesUpdateDeferReboot 1d ];
     :local StartTime [ :tostr [ :totime (10800 + [ $GetRandomNumber 7200 ]) ] ];
     /system/scheduler/add name="_RebootForUpdate" start-time=$StartTime interval=$Interval \
         on-event=("/system/scheduler/remove \"_RebootForUpdate\"; " . \
@@ -158,7 +159,7 @@
       :error true;
     }
   } else={
-    :if ($PackagesUpdateDeferReboot = true || $PackagesUpdateDeferReboot >= 1d) do={
+    :if ($PackagesUpdateDeferReboot = true || [ :totime $PackagesUpdateDeferReboot ] >= 1d) do={
       $Schedule $ScriptName;
       :set ExitOK true;
       :error true;

From 64158498504635d98adac896f480d71d9bf8a2a9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 21 Jun 2025 23:09:24 +0200
Subject: [PATCH 812/988] global-functions: $WaitForFile: (mostly) revert
 changes

This (mostly) reverts commits 0e00a228d67d77fadc80eee2df04c2cec25b8db8
and e08bb2192dfd22b25652553f28304818a3602331.

This is required for RouterOS 7.20beta4. That fixed recursive find for
files, and (again, or still?) suffers timing (and thus racing) issues
getting file properties.

This breaks RouterOS 7.20beta2 again, so that specific version is not
supported. Just update...
---
 global-functions.rsc | 20 ++++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 50426b69..fd89f0f3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1771,14 +1771,26 @@
   :global MAX;
 
   :set FileName [ $CleanFilePath $FileName ];
-  :local Delay ([ $MAX [ $EitherOr $WaitTime 2s ] 100ms ] / 10);
+  :local Delay ([ $MAX [ $EitherOr $WaitTime 2s ] 100ms ] / 9);
 
   :do {
-    :retry {
+    :retry { 
+      :if ([ :len [ /file/find where name=$FileName ] ] = 0) do={
+        :error false;
+      }
+    } delay=$Delay max=10;
+  } on-error={
+    :return false;
+  }
+
+  :while ([ :len [ /file/find where name=$FileName ] ] > 0) do={
+    :do {
       /file/get $FileName;
       :return true;
-    } delay=$Delay max=10;
-  } on-error={ }
+    } on-error={ }
+    :delay $Delay;
+    :set Delay ($Delay * 3 / 2);
+  }
 
   :return false;
 }

From 1307b8587e57deaf95146820b7f32bb9a713892d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 22 Jun 2025 00:15:17 +0200
Subject: [PATCH 813/988] global-functions: $FileGet: mitigate race with file
 properties

RouterOS is suffering a race condition, where a file exists, but its
properties are not (yet) available. This is handled in $WaitForFile.

This passes an interval of zero to $WaitForFile, as does not wait for
the file to exist, but wants to avoid the race only.
---
 global-functions.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index fd89f0f3..829cbf27 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -559,6 +559,12 @@
 :set FileGet do={
   :local FileName [ :tostr $1 ];
 
+  :global WaitForFile;
+
+  :if ([ $WaitForFile $FileName 0s ] = false) do={
+    :return false;
+  }
+
   :local FileVal false;
   :do {
     :set FileVal [ /file/get $FileName ];

From d46574b4fe5ea3f72ce804bd5fb38a5408f9cd94 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 25 Jun 2025 10:30:26 +0200
Subject: [PATCH 814/988] netwatch-dns: retry doh server...

... for more resilience on bad connectivity or saturated link.
---
 netwatch-dns.rsc | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 4fa076af..2df26b03 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -119,11 +119,13 @@
 
     :local Data false;
     :onerror Err {
-      :set Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
-        http-header-field=({ "accept: application/dns-message" }) \
-        url=(($DohServer->"doh-url") . "?dns=" . [ :convert to=base64 ([ :rndstr length=2 ] . \
-        "\01\00" . "\00\01" . "\00\00" . "\00\00" . "\00\00" . "\09doh-check\05eworm\02de\00" . \
-        "\00\10" . "\00\01") ]) as-value ]->"data");
+      :retry {
+        :set Data ([ /tool/fetch check-certificate=yes-without-crl output=user \
+          http-header-field=({ "accept: application/dns-message" }) \
+          url=(($DohServer->"doh-url") . "?dns=" . [ :convert to=base64 ([ :rndstr length=2 ] . \
+          "\01\00" . "\00\01" . "\00\00" . "\00\00" . "\00\00" . "\09doh-check\05eworm\02de\00" . \
+          "\00\10" . "\00\01") ]) as-value ]->"data");
+        } delay=1s max=3;
     } do={
       $LogPrint warning $ScriptName ("Request to DoH server " . ($DohServer->"doh-url") . \
           " failed: " . $Err);

From b068f86995c63278c91f9e92831f075fab5af2f1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 25 Jun 2025 10:47:12 +0200
Subject: [PATCH 815/988] netwatch-dns: fix indention

---
 netwatch-dns.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 2df26b03..9e2f9bcf 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -125,7 +125,7 @@
           url=(($DohServer->"doh-url") . "?dns=" . [ :convert to=base64 ([ :rndstr length=2 ] . \
           "\01\00" . "\00\01" . "\00\00" . "\00\00" . "\00\00" . "\09doh-check\05eworm\02de\00" . \
           "\00\10" . "\00\01") ]) as-value ]->"data");
-        } delay=1s max=3;
+      } delay=1s max=3;
     } do={
       $LogPrint warning $ScriptName ("Request to DoH server " . ($DohServer->"doh-url") . \
           " failed: " . $Err);

From 89175e511fc965721fc19d88819c0fef13e383dc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 7 Jul 2025 18:38:21 +0200
Subject: [PATCH 816/988] accesslist-duplicates: print without paging

---
 accesslist-duplicates.capsman.rsc  | 2 +-
 accesslist-duplicates.local.rsc    | 2 +-
 accesslist-duplicates.template.rsc | 6 +++---
 accesslist-duplicates.wifi.rsc     | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index 5e6cf0a0..1da03661 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -22,7 +22,7 @@
   :foreach AccList in=[ /caps-man/access-list/find where mac-address!="00:00:00:00:00:00" ] do={
     :local Mac [ /caps-man/access-list/get $AccList mac-address ];
     :if ($Seen->$Mac = 1) do={
-      /caps-man/access-list/print where mac-address=$Mac;
+      /caps-man/access-list/print without-paging where mac-address=$Mac;
       :local Remove [ :tonum [ /terminal/ask prompt="\nNumeric id to remove, any key to skip!" ] ];
 
       :if ([ :typeof $Remove ] = "num") do={
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index a6b4f417..03a97241 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -22,7 +22,7 @@
   :foreach AccList in=[ /interface/wireless/access-list/find where mac-address!="00:00:00:00:00:00" ] do={
     :local Mac [ /interface/wireless/access-list/get $AccList mac-address ];
     :if ($Seen->$Mac = 1) do={
-      /interface/wireless/access-list/print where mac-address=$Mac;
+      /interface/wireless/access-list/print without-paging where mac-address=$Mac;
       :local Remove [ :tonum [ /terminal/ask prompt="\nNumeric id to remove, any key to skip!" ] ];
 
       :if ([ :typeof $Remove ] = "num") do={
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index e51198d8..bf231475 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -27,9 +27,9 @@
     :local Mac [ /interface/wifi/access-list/get $AccList mac-address ];
     :local Mac [ /interface/wireless/access-list/get $AccList mac-address ];
     :if ($Seen->$Mac = 1) do={
-      /caps-man/access-list/print where mac-address=$Mac;
-      /interface/wifi/access-list/print where mac-address=$Mac;
-      /interface/wireless/access-list/print where mac-address=$Mac;
+      /caps-man/access-list/print without-paging where mac-address=$Mac;
+      /interface/wifi/access-list/print without-paging where mac-address=$Mac;
+      /interface/wireless/access-list/print without-paging where mac-address=$Mac;
       :local Remove [ :tonum [ /terminal/ask prompt="\nNumeric id to remove, any key to skip!" ] ];
 
       :if ([ :typeof $Remove ] = "num") do={
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index cadacb6b..528a73ce 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -22,7 +22,7 @@
   :foreach AccList in=[ /interface/wifi/access-list/find where mac-address!="00:00:00:00:00:00" ] do={
     :local Mac [ /interface/wifi/access-list/get $AccList mac-address ];
     :if ($Seen->$Mac = 1) do={
-      /interface/wifi/access-list/print where mac-address=$Mac;
+      /interface/wifi/access-list/print without-paging where mac-address=$Mac;
       :local Remove [ :tonum [ /terminal/ask prompt="\nNumeric id to remove, any key to skip!" ] ];
 
       :if ([ :typeof $Remove ] = "num") do={

From 4c2c7e817a03202d8202bc4902f12990b0b06028 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 21 Jul 2025 10:47:19 +0200
Subject: [PATCH 817/988] netwatch-notify: give the number of failures...

... to indicated this happened several times.
---
 netwatch-notify.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 00f03cde..12f27214 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -127,7 +127,7 @@
               $LogPrint [ $IfThenElse ($HostInfo->"no-resolve-fail" != true) warning debug ] \
                   $ScriptName ("Resolving name '" . $HostInfo->"resolve" . [ $IfThenElse \
                   ($HostInfo->"resolve" != $HostInfo->"name") ("' for " . $Type . " '" . \
-                  $HostInfo->"name") "" ] . "' failed: " . $Err);
+                  $HostInfo->"name") "" ] . "' failed third time: " . $Err);
             }
           }
         }

From 721e786f68cccfa789874545889169212b37bf11 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 21 Jul 2025 10:52:22 +0200
Subject: [PATCH 818/988] netwatch-notify: increase the address-list timeout
 even further

---
 netwatch-notify.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 12f27214..1fcc2034 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -62,14 +62,14 @@
 
     :local FwAddrList ($ScriptName . "-" . [ $GetRandom20CharAlNum ]);
     :if ([ :typeof [ :toip $Expected ] ] = "ip") do={
-      /ip/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=10s;
+      /ip/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=30s;
       :delay 20ms;
       :if ([ :len [ /ip/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
         :return true;
       }
     }
     :if ([ :typeof [ :toip6 $Expected ] ] = "ip6") do={
-      /ipv6/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=10s;
+      /ipv6/firewall/address-list/add address=$Name list=$FwAddrList dynamic=yes timeout=30s;
       :delay 20ms;
       :if ([ :len [ /ipv6/firewall/address-list/find where list=$FwAddrList address=$Expected ] ] > 0) do={
         :return true;

From a856d309df956db8bd93647a1998c95afe38da02 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 28 Jul 2025 16:47:27 +0200
Subject: [PATCH 819/988] global-functions: $SymbolByUnicodeName: allow to add
 more symbols...

... for example from a module. Add a script `mod/symbols-extra` with
something like:

    :global SymbolsExtra;

    :set ($SymbolsExtra->"rocket") "\F0\9F\9A\80";
---
 global-functions.rsc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 829cbf27..40c38174 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1608,7 +1608,9 @@
 
   :global LogPrintOnce;
 
-  :local Symbols {
+  :global SymbolsExtra;
+
+  :local Symbols ({
     "abacus"="\F0\9F\A7\AE";
     "alarm-clock"="\E2\8F\B0";
     "arrow-down"="\E2\AC\87";
@@ -1643,7 +1645,7 @@
     "star"="\E2\AD\90";
     "warning-sign"="\E2\9A\A0";
     "white-heavy-check-mark"="\E2\9C\85"
-  }
+  }, $SymbolsExtra);
 
   :if ([ :len ($Symbols->$Name) ] = 0) do={
     $LogPrintOnce warning $0 ("No symbol available for name '" . $Name . "'!");

From fe080c0d3de677da9ac7a6831429e51c373a7b30 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 16 Aug 2025 23:06:56 +0200
Subject: [PATCH 820/988] global-functions: $CertificateAvailable: properly
 handle duplicate CN
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

There are CA certificates with identical CommonName out there... 🤪
Let's handle these.

    [admin@MikroTik] > /certificate/print proplist=common-name,skid where common-name="GlobalSign";
    Flags: T - TRUSTED
    Columns: COMMON-NAME, SKID
    #   COMMON-NAME  SKID
    0 T GlobalSign   8FF04B7FA82E4524AE4D50FA639A8BDEE2DD1BBC
    1 T GlobalSign   3DE629489BEA07CA21444A26DE6EDED283D09F59
    2 T GlobalSign   AE6C05A39313E2A2E7E2D71CD6C7F07FC86753A0
    3 T GlobalSign   54B07BAD45B8E2407FFB0A6EFBBE33C93CA384D5
---
 global-functions.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 40c38174..10d1b412 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -133,6 +133,11 @@
     }
   }
 
+  :if ([ :len [ /certificate/find where common-name=$CommonName ] ] > 1) do={
+    $LogPrint info $0 ("There are " . $CertCount . " Certificates with CommonName '" . $CommonName . "'. Should be ok.");
+    :return true;
+  }
+
   :local CertVal [ /certificate/get [ find where common-name=$CommonName ] ];
   :while (($CertVal->"akid") != "" && ($CertVal->"akid") != ($CertVal->"skid")) do={
     :if ([ :len [ /certificate/find where skid=($CertVal->"akid") ] ] = 0) do={

From 386ea2419f29c5948ff79bbb19adee8336612f40 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 25 Aug 2025 11:03:47 +0200
Subject: [PATCH 821/988] check-health: fix variable name

---
 check-health.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/check-health.rsc b/check-health.rsc
index 4cb99408..8cffbfc8 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -92,10 +92,10 @@
       :onerror Err {
         /system/script/run $Plugin;
       } do={
-        $LogPrint error $ScriptName ("Plugin '" . $ScriptVal->"name" . "' failed to run: " . $Err);
+        $LogPrint error $ScriptName ("Plugin '" . $PluginVal->"name" . "' failed to run: " . $Err);
       }
     } else={
-      $LogPrint error $ScriptName ("Plugin '" . $ScriptVal->"name" . "' failed syntax validation, skipping.");
+      $LogPrint error $ScriptName ("Plugin '" . $PluginVal->"name" . "' failed syntax validation, skipping.");
     }
   }
 

From 2fed8f967b9c60d8a5742aadb0004d18dccf466c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 23 Aug 2025 23:20:51 +0200
Subject: [PATCH 822/988] check-health: pass script name to plugin

---
 check-health.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-health.rsc b/check-health.rsc
index 8cffbfc8..760636db 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -101,7 +101,7 @@
 
   :foreach PluginName,Discard in=$CheckHealthPlugins do={
     ($CheckHealthPlugins->$PluginName) \
-         ("\$CheckHealthPlugins->\"" . $PluginName . "\"");
+        ("\$CheckHealthPlugins->\"" . $PluginName . "\"") $ScriptName;
   }
 
   :set CheckHealthPlugins;

From 907358cb857b9cc32171191e851e1de7894e225d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 23 Aug 2025 23:24:13 +0200
Subject: [PATCH 823/988] check-health.d/state: use script name for origin in
 notification

---
 check-health.d/state.rsc | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/check-health.d/state.rsc b/check-health.d/state.rsc
index 29919359..5e4cbb82 100644
--- a/check-health.d/state.rsc
+++ b/check-health.d/state.rsc
@@ -11,7 +11,8 @@
 :global CheckHealthPlugins;
 
 :set ($CheckHealthPlugins->[ :jobname ]) do={
-  :local FuncName [ :tostr $0 ];
+  :local FuncName   [ :tostr $0 ];
+  :local ScriptName [ :tostr $1 ];
 
   :global CheckHealthLast;
   :global Identity;
@@ -32,13 +33,13 @@
     :if ([ :typeof ($CheckHealthLast->$Name) ] != "nothing") do={
       :if ($CheckHealthLast->$Name = "ok" && \
            $Value != "ok") do={
-        $SendNotification2 ({ origin=$FuncName; \
+        $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification "cross-mark" ] . "Health warning: " . $Name); \
           message=("The device '" . $Name . "' on " . $Identity . " failed!") });
       }
       :if ($CheckHealthLast->$Name != "ok" && \
            $Value = "ok") do={
-        $SendNotification2 ({ origin=$FuncName; \
+        $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "Health recovery: " . $Name); \
           message=("The device '" . $Name . "' on " . $Identity . " recovered!") });
       }

From 62ca30b5d35d9f8c74ff8a8f4f05f4a2e8301a6f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 23 Aug 2025 23:24:29 +0200
Subject: [PATCH 824/988] check-health.d/temperature: use script name for
 origin in notification

---
 check-health.d/temperature.rsc | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/check-health.d/temperature.rsc b/check-health.d/temperature.rsc
index a2f632d2..9f3f1a5e 100644
--- a/check-health.d/temperature.rsc
+++ b/check-health.d/temperature.rsc
@@ -11,7 +11,8 @@
 :global CheckHealthPlugins;
 
 :set ($CheckHealthPlugins->[ :jobname ]) do={
-  :local FuncName [ :tostr $0 ];
+  :local FuncName   [ :tostr $0 ];
+  :local ScriptName [ :tostr $1 ];
 
   :global CheckHealthLast;
   :global CheckHealthTemperature;
@@ -54,7 +55,7 @@
       }
       :if ($Value > $CheckHealthTemperature->$Name && \
            $CheckHealthTemperatureNotified->$Name != true) do={
-        $SendNotification2 ({ origin=$FuncName; \
+        $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification "fire" ] . "Health warning: " . $Name); \
           message=("The " . $Name . " on " . $Identity . " is above threshold: " . \
             $Value . "\C2\B0" . "C") });
@@ -62,7 +63,7 @@
       }
       :if ($Value <= ($CheckHealthTemperature->$Name - $CheckHealthTemperatureDeviation) && \
            $CheckHealthTemperatureNotified->$Name = true) do={
-        $SendNotification2 ({ origin=$FuncName; \
+        $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "Health recovery: " . $Name); \
           message=("The " . $Name . " on " . $Identity . " dropped below threshold: " .  \
             $Value . "\C2\B0" . "C") });

From 22e6383e86cc345618aafc6401e9943696b3100b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 23 Aug 2025 23:24:46 +0200
Subject: [PATCH 825/988] check-health.d/voltage: use script name for origin in
 notification

---
 check-health.d/voltage.rsc | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/check-health.d/voltage.rsc b/check-health.d/voltage.rsc
index 9071c886..5891fb4f 100644
--- a/check-health.d/voltage.rsc
+++ b/check-health.d/voltage.rsc
@@ -11,7 +11,8 @@
 :global CheckHealthPlugins;
 
 :set ($CheckHealthPlugins->[ :jobname ]) do={
-  :local FuncName [ :tostr $0 ];
+  :local FuncName   [ :tostr $0 ];
+  :local ScriptName [ :tostr $1 ];
 
   :global CheckHealthLast;
   :global CheckHealthVoltageLow;
@@ -39,7 +40,7 @@
 
       :if ($NumLast * (100 + $CheckHealthVoltagePercent) < $NumCurr * 100 || \
            $NumLast * 100 > $NumCurr * (100 + $CheckHealthVoltagePercent)) do={
-        $SendNotification2 ({ origin=$FuncName; \
+        $SendNotification2 ({ origin=$ScriptName; \
           subject=([ $SymbolForNotification ("high-voltage-sign,chart-" . [ $IfThenElse ($NumLast < \
             $NumCurr) "in" "de" ] . "creasing") ] . "Health warning: " . $Name); \
           message=("The " . $Name . " on " . $Identity . " jumped more than " . $CheckHealthVoltagePercent . "%.\n\n" . \
@@ -47,12 +48,12 @@
             [ $FormatLine "new value" ($Value . " V") 12 ]) });
       } else={ 
         :if ($NumCurr <= $CheckHealthVoltageLow && $NumLast > $CheckHealthVoltageLow) do={ 
-          $SendNotification2 ({ origin=$FuncName; \
+          $SendNotification2 ({ origin=$ScriptName; \
             subject=([ $SymbolForNotification "high-voltage-sign,chart-decreasing" ] . "Health warning: Low " . $Name); \ 
             message=("The " . $Name . " on " . $Identity . " dropped to " . $Value . " V below hard limit.") }); 
         } 
         :if ($NumCurr > $CheckHealthVoltageLow && $NumLast <= $CheckHealthVoltageLow) do={ 
-          $SendNotification2 ({ origin=$FuncName; \
+          $SendNotification2 ({ origin=$ScriptName; \
             subject=([ $SymbolForNotification "high-voltage-sign,chart-increasing" ] . "Health recovery: Low " . $Name); \ 
             message=("The " . $Name . " on " . $Identity . " recovered to " . $Value . " V above hard limit.") }); 
         }

From 6b0c9ab17d2e7e3693cebf281e5300d1e4de3446 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 15 Sep 2025 13:10:12 +0200
Subject: [PATCH 826/988] packages-update: exit early if scheduler exists

---
 packages-update.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/packages-update.rsc b/packages-update.rsc
index d3140f29..cfe5222e 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -41,6 +41,11 @@
       /system/reboot;
     }
 
+    :if ([ /system/scheduler/find where name="_RebootForUpdate" ] > 0) do={
+      $LogPrint warning $ScriptName ("Scheduler for reboot already exists.");
+      :return false;
+    }
+
     :local Interval [ $IfThenElse ([ :totime $PackagesUpdateDeferReboot ] >= 1d) \
         $PackagesUpdateDeferReboot 1d ];
     :local StartTime [ :tostr [ :totime (10800 + [ $GetRandomNumber 7200 ]) ] ];

From 2773fef9d80fe8f7e2abdec767da5c5dcb64ddaf Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 19 Sep 2025 17:20:37 +0200
Subject: [PATCH 827/988] global-functions: $WaitForFile: try less expensive
 operation

Checking a specific file is less expensive operation than finding one,
especially when on hardware with huge storage and lots of files (like
RDS). We have to keep the find command in the latter loop, though.
---
 global-functions.rsc | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 10d1b412..98bc306c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1787,14 +1787,11 @@
   :local Delay ([ $MAX [ $EitherOr $WaitTime 2s ] 100ms ] / 9);
 
   :do {
-    :retry { 
-      :if ([ :len [ /file/find where name=$FileName ] ] = 0) do={
-        :error false;
-      }
+    :retry {
+      /file/get $FileName;
+      :return true;
     } delay=$Delay max=10;
-  } on-error={
-    :return false;
-  }
+  } on-error={ }
 
   :while ([ :len [ /file/find where name=$FileName ] ] > 0) do={
     :do {

From 2c715096b994811fbc914f68412db91f5bd62618 Mon Sep 17 00:00:00 2001
From: Miquel Bonastre <mbonastre@yahoo.com>
Date: Wed, 24 Sep 2025 15:17:36 +0200
Subject: [PATCH 828/988] mod/ssh-keys-import: $SSHKeysImportFile: fix file
 exists condition...

... which broke in commit 80aed200fd7400e4a4958ba314912488780be635.
---
 mod/ssh-keys-import.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 7bdc95da..dd32fd6b 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -85,7 +85,7 @@
     :return false;
   }
 
-  :if ([ $FileExists $FileName ] = true) do={
+  :if ([ $FileExists $FileName ] = false) do={
     $LogPrint warning $0 ("File '" . $FileName . "' does not exist.");
     :return false;
   }

From 14b51d96b0b9fd80e0364407f377c26e8e0222ec Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 16 Sep 2025 12:01:32 +0200
Subject: [PATCH 829/988] generate valid HTML, including head & style

---
 Makefile                    |  4 ++--
 contrib/html.sh             |  9 +++++++++
 contrib/html.sh.d/head.html | 15 +++++++++++++++
 3 files changed, 26 insertions(+), 2 deletions(-)
 create mode 100755 contrib/html.sh
 create mode 100644 contrib/html.sh.d/head.html

diff --git a/Makefile b/Makefile
index 89517410..0265a51a 100644
--- a/Makefile
+++ b/Makefile
@@ -11,8 +11,8 @@ HTML = $(MARKDOWN:.md=.html)
 
 all: $(CAPSMAN) $(LOCAL) $(WIFI) $(HTML) checksums.json
 
-%.html: %.md Makefile
-	markdown $< | sed 's/href="\([-_\./[:alnum:]]*\)\.md"/href="\1.html"/g' > $@
+%.html: %.md contrib/html.sh contrib/html.sh.d/head.html
+	contrib/html.sh $< > $@
 
 %.capsman.rsc: %.template.rsc Makefile
 	sed -e '/\/interface\/wifi\//d' -e '/\/interface\/wireless\//d' -e 's|%TEMPL%|.capsman|' \
diff --git a/contrib/html.sh b/contrib/html.sh
new file mode 100755
index 00000000..bbd8ba86
--- /dev/null
+++ b/contrib/html.sh
@@ -0,0 +1,9 @@
+#!/bin/sh
+
+set -e
+
+sed "s|__TITLE__|$(head -n1 "${1}")|" < "${0}.d/head.html"
+markdown -f toc,idanchor "${1}" | sed \
+	-e 's/href="\([-_\./[:alnum:]]*\)\.md"/href="\1.html"/g' \
+	-e '/<h[1234] /s| id="\(.*\)">| id="\L\1">|'
+printf '</body></html>'
diff --git a/contrib/html.sh.d/head.html b/contrib/html.sh.d/head.html
new file mode 100644
index 00000000..1b1dd03a
--- /dev/null
+++ b/contrib/html.sh.d/head.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html><html lang="en">
+<head><title>RouterOS Scripts :: __TITLE__</title>
+<meta http-equiv="content-type" content="text/html; charset=UTF-8">
+<style>
+  body { font-family: sans-serif; }
+  h2 { border-bottom: 1px solid #ccc; color: #000; }
+  a { text-decoration: none; }
+  a:hover { text-decoration: underline; }
+  blockquote { border-left: 4px solid #ccc; padding: 0 10px; color: #777; }
+  code { margin: 0 2px; padding: 2px 5px; border: 1px solid #ccc; background-color: #f8f8f8; border-radius: 3px; }
+  pre { background-color: #f8f8f8; border: 1px solid #ccc; overflow: auto; padding: 6px 10px; border-radius: 3px; }
+  pre code { margin: 0; padding: 0; border: 0; }
+</style>
+<link rel="icon" href="/logo.png" type="image/png">
+</head><body>

From a931cb61a033949a9cc6a1b62bc1e267774b04a6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 30 Sep 2025 10:02:20 +0200
Subject: [PATCH 830/988] packages-update: fix condition when checking for
 scheduler

This broke with commit 6b0c9ab17d2e7e3693cebf281e5300d1e4de3446...
---
 packages-update.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages-update.rsc b/packages-update.rsc
index cfe5222e..379e818e 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -41,7 +41,7 @@
       /system/reboot;
     }
 
-    :if ([ /system/scheduler/find where name="_RebootForUpdate" ] > 0) do={
+    :if ([ :len [ /system/scheduler/find where name="_RebootForUpdate" ] ] > 0) do={
       $LogPrint warning $ScriptName ("Scheduler for reboot already exists.");
       :return false;
     }

From 48d0f1f0b94fe6538bec54559e6e1f1609877039 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 2 Oct 2025 11:51:08 +0200
Subject: [PATCH 831/988] fw-addr-lists: check last character of line for JSON

This is not a proof, but a line also ending with a curly bracket
has higher probability of being valid JSON.

Better safe than sorry... We are suffering a CVE in RouterOS:
https://www.cve.org/CVERecord?id=CVE-2025-10948
---
 fw-addr-lists.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 0c45f7ea..d56d40f0 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -103,7 +103,7 @@
       :foreach Line in=[ :deserialize $Data delimiter="\n" from=dsv options=dsv.plain ] do={
         :set Line ($Line->0);
         :local Address;
-        :if ([ :pick $Line 0 1 ] = "{") do={
+        :if ([ :pick $Line 0 1 ] = "{" && [ :pick $Line ([ :len $Line ] - 1) ] = "}") do={
           :do {
             :set Address [ :tostr ([ :deserialize from=json $Line ]->"cidr") ];
           } on-error={ }

From 5ffa85f8bfb5ed11c3f3886e3b8cd7b5346b6efa Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 7 Oct 2025 16:02:53 +0200
Subject: [PATCH 832/988] mod/ssh-keys-import: handle new parameter

With RouterOS 7.21beta2 the user SSH keys "key-owner" field was
renamed to "info".

Either of both is displayed in red by syntax highlighting, but it
works anyway.
---
 doc/mod/ssh-keys-import.md | 5 +++--
 mod/ssh-keys-import.rsc    | 4 +++-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/doc/mod/ssh-keys-import.md b/doc/mod/ssh-keys-import.md
index 344f4bc2..49276d04 100644
--- a/doc/mod/ssh-keys-import.md
+++ b/doc/mod/ssh-keys-import.md
@@ -38,8 +38,9 @@ import that key:
     $SSHKeysImport "ssh-rsa AAAAB3Nza...QYZk8= user" admin;
 
 The third part of the key (`user` in this example) is inherited as
-`key-owner` in RouterOS. Also the `MD5` fingerprint is recorded, this helps
-to audit and verify the available keys.
+`key-owner` in RouterOS (or `info` starting with RouterOS 7.21beta2). Also
+the `MD5` fingerprint is recorded, this helps to audit and verify the
+available keys.
 
 > ℹ️️ **Info**: Use `ssh-keygen` to show a fingerprint of an existing public
 > key file: `ssh-keygen -l -E md5 -f ~/.ssh/id_ed25519.pub`
diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index dd32fd6b..8bea64ee 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -40,7 +40,9 @@
 
   :local FingerPrintMD5 [ :convert from=base64 transform=md5 to=hex ($KeyVal->1) ];
 
-  :if ([ :len [ /user/ssh-keys/find where user=$User key-owner~("\\bmd5=" . $FingerPrintMD5 . "\\b") ] ] > 0) do={
+  :local RegEx ("\\bmd5=" . $FingerPrintMD5 . "\\b");
+  :if ([ :len [ /user/ssh-keys/find where user=$User \
+       (key-owner~$RegEx or info~$RegEx) ] ] > 0) do={
     $LogPrint warning $0 ("The ssh public key (MD5:" . $FingerPrintMD5 . \
       ") is already available for user '" . $User . "'.");
     :return false;

From 9ceed0926a749c51ebc050d80cd33100ecdbcc5a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 8 Oct 2025 16:02:20 +0200
Subject: [PATCH 833/988] fw-addr-lists: do not use IPv6 net addresses smaller
 /64

This should reduce the number of addresses in list by aggregating them,
and also fix addresses with host part set (like 2001:470:1:fb5::2a0/64,
which should be 2001:470:1:fb5::/64 really).

The latter caused new warnings with RouterOS 7.21beta2.
---
 fw-addr-lists.rsc | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index d56d40f0..2b5fd0cf 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -25,6 +25,7 @@
   :global LogPrint;
   :global LogPrintOnce;
   :global LogPrintVerbose;
+  :global MIN;
   :global ScriptLock;
   :global WaitFullyConnected;
 
@@ -120,9 +121,14 @@
             :error true;
           }
           :if ($Address ~ "^[0-9a-zA-Z]*:[0-9a-zA-Z:\\.]+(/[0-9]{1,3})?\$") do={
-            :if ([ :typeof [ :find $Address "/" ] ] = "nil") do={
-              :set Address ($Address . "/128");
+            :local Net $Address;
+            :local Cidr 64;
+            :local Slash [ :find $Address "/" ];
+            :if ([ :typeof $Slash ] = "num") do={
+              :set Net [ :toip6 [ :pick $Address 0 $Slash ] ]
+              :set Cidr [ $MIN [ :pick $Address ($Slash + 1) [ :len $Address ] ] 64 ];
             }
+            :set Address (([ :toip6 $Net ] & ffff:ffff:ffff:ffff::) . "/" . $Cidr);
             :set ($IPv6Addresses->$Branch->$Address) $TimeOut;
             :error true;
           }

From 35b556f0b20f79e2beb5d99c25159b3255124833 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 8 Oct 2025 16:23:15 +0200
Subject: [PATCH 834/988] fw-addr-lists: calculate branch after
 post-processing...
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

... as branch will likely change, and we want to avoid duplicates. 😉
---
 fw-addr-lists.rsc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 2b5fd0cf..cd136f95 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -112,11 +112,12 @@
           :set Address ([ :pick $Line 0 [ $FindDelim $Line ] ] . ($List->"cidr"));
         }
         :do {
-          :local Branch [ $GetBranch $Address ];
+          :local Branch;
           :if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$") do={
             :if ($Address ~ "/32\$") do={
               :set Address [ :pick $Address 0 ([ :len $Address ] - 3) ];
             }
+            :set Branch [ $GetBranch $Address ];
             :set ($IPv4Addresses->$Branch->$Address) $TimeOut;
             :error true;
           }
@@ -129,10 +130,12 @@
               :set Cidr [ $MIN [ :pick $Address ($Slash + 1) [ :len $Address ] ] 64 ];
             }
             :set Address (([ :toip6 $Net ] & ffff:ffff:ffff:ffff::) . "/" . $Cidr);
+            :set Branch [ $GetBranch $Address ];
             :set ($IPv6Addresses->$Branch->$Address) $TimeOut;
             :error true;
           }
           :if ($Address ~ "^[\\.a-zA-Z0-9-]+\\.[a-zA-Z]{2,}\$") do={
+            :set Branch [ $GetBranch $Address ];
             :set ($IPv4Addresses->$Branch->$Address) $TimeOut;
             :set ($IPv6Addresses->$Branch->$Address) $TimeOut;
             :error true;

From c81618b57166cbc066aa476a31a32cee421314a8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 9 Oct 2025 09:22:39 +0200
Subject: [PATCH 835/988] log-forward: always use memo symbol...

... and add warning sign on top.
---
 log-forward.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/log-forward.rsc b/log-forward.rsc
index be7eff7b..3d7d0547 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -95,7 +95,7 @@
     :set LogForwardRateLimit ($LogForwardRateLimit + 10);
 
     $SendNotification2 ({ origin=$ScriptName; \
-      subject=([ $SymbolForNotification [ $IfThenElse ($Warning = true) "warning-sign" "memo" ] ] . \
+      subject=([ $SymbolForNotification ("memo" . [ $IfThenElse ($Warning = true) ",warning-sign" ]) ] . \
         "Log Forwarding"); \
       message=("The log on " . $Identity . " contains " . [ $IfThenElse ($Count = 1) "this message" \
         ("these " . $Count . " messages") ] . " after " . [ /system/resource/get uptime ] . " uptime." . \

From 6630d35eea6510834287a7004e55718f49a6232f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 13 Oct 2025 12:06:01 +0200
Subject: [PATCH 836/988] mod/notification-telegram: $FlushTelegramQueue: check
 for cert, again

Chances are that messages have been queued before system was fully up or
connected. Thus the certificate may be missing, and it should be checked
again for on flush.
---
 mod/notification-telegram.rsc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 2eb90e12..ff9b4da2 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -21,6 +21,7 @@
   :global TelegramQueue;
   :global TelegramMessageIDs;
 
+  :global CertificateAvailable;
   :global IsFullyConnected;
   :global LogPrint;
 
@@ -29,6 +30,11 @@
     :return false;
   }
 
+  :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
+    $LogPrint warning $0 ("Downloading required certificate failed.");
+    :return false;
+  }
+
   :local AllDone true;
   :local QueueLen [ :len $TelegramQueue ];
 

From 025b492783ad5a3dd084a6ecf4465878c970970c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 16 Oct 2025 10:27:27 +0200
Subject: [PATCH 837/988] global-functions: remove trailing space

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 98bc306c..55b52922 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -465,7 +465,7 @@
   :local Error  [ :tostr $3 ];
 
   :global IfThenElse;
-  :global LogPrint; 
+  :global LogPrint;
 
   :if ($ExitOK = "false") do={
     $LogPrint error $Name ([ $IfThenElse ([ :pick $Name 0 1 ] = "\$") \

From def540c965c40c28cce5ceef00e25132f5ab2d3f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 16 Oct 2025 10:26:50 +0200
Subject: [PATCH 838/988] global-functions: introduce $NetMask4

---
 global-functions.rsc | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 55b52922..5c98a206 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -61,6 +61,7 @@
 :global MAX;
 :global MIN;
 :global MkDir;
+:global NetMask4;
 :global NotificationFunctions;
 :global ParseDate;
 :global ParseKeyValueStore;
@@ -990,6 +991,13 @@
   :return true;
 }
 
+# return an IPv4 netmask for CIDR
+:set NetMask4 do={
+  :local CIDR [ :tonum $1 ];
+
+  :return ((255.255.255.255 << (32 - $CIDR)) & 255.255.255.255);
+}
+
 # prepare NotificationFunctions array
 :if ([ :typeof $NotificationFunctions ] != "array") do={
   :set NotificationFunctions ({});

From 9fa11cb79a2d0e23ff73b1317fdff123636fca10 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 16 Oct 2025 10:42:23 +0200
Subject: [PATCH 839/988] mod/ipcalc: use $NetMask4

---
 mod/ipcalc.rsc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index eacff6d9..fecf6f26 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -34,9 +34,12 @@
 # calculate and return netmask, network, min host, max host and broadcast
 :set IPCalcReturn do={
   :local Input [ :tostr $1 ];
+
+  :global NetMask4;
+
   :local Address [ :toip [ :pick $Input 0 [ :find $Input "/" ] ] ];
   :local Bits [ :tonum [ :pick $Input ([ :find $Input "/" ] + 1) [ :len $Input ] ] ];
-  :local Mask ((255.255.255.255 << (32 - $Bits)) & 255.255.255.255);
+  :local Mask [ $NetMask4 $Bits ];
 
   :local Return {
     "address"=$Address;

From 47309e5c03e32e05ed9435ed05f9549dfddd338f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 16 Oct 2025 13:02:28 +0200
Subject: [PATCH 840/988] fw-addr-lists: normalize IPv4 addresses

---
 fw-addr-lists.rsc | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index cd136f95..26e041aa 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -22,10 +22,12 @@
   :global EitherOr;
   :global FetchHuge;
   :global HumanReadableNum;
+  :global IfThenElse;
   :global LogPrint;
   :global LogPrintOnce;
   :global LogPrintVerbose;
   :global MIN;
+  :global NetMask4;
   :global ScriptLock;
   :global WaitFullyConnected;
 
@@ -114,8 +116,13 @@
         :do {
           :local Branch;
           :if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$") do={
-            :if ($Address ~ "/32\$") do={
-              :set Address [ :pick $Address 0 ([ :len $Address ] - 3) ];
+            :local Net $Address;
+            :local CIDR 32;
+            :local Slash [ :find $Address "/" ];
+            :if ([ :typeof $Slash ] = "num") do={
+              :set Net [ :toip [ :pick $Address 0 $Slash ] ]
+              :set CIDR [ :pick $Address ($Slash + 1) [ :len $Address ] ];
+              :set Address [ :tostr (([ :toip $Net ] & [ $NetMask4 $CIDR ]) . [ $IfThenElse ($CIDR < 32) ("/" . $CIDR) ]) ];
             }
             :set Branch [ $GetBranch $Address ];
             :set ($IPv4Addresses->$Branch->$Address) $TimeOut;

From 6ad6f9aa08d558ff2e8ff3010fe5daec3c600c4a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 16 Oct 2025 10:30:20 +0200
Subject: [PATCH 841/988] global-functions: introduce $NetMask6

RouterOS does not support bit shifting on IPv6 data types, so we have to
split the problem:

 * each 16 bit block is calculated separately, as number
 * the complete netmask is assembled in a loop, as string
 * the final string is casted to correct data type
---
 global-functions.rsc | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 5c98a206..ffa52776 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -62,6 +62,7 @@
 :global MIN;
 :global MkDir;
 :global NetMask4;
+:global NetMask6;
 :global NotificationFunctions;
 :global ParseDate;
 :global ParseKeyValueStore;
@@ -998,6 +999,24 @@
   :return ((255.255.255.255 << (32 - $CIDR)) & 255.255.255.255);
 }
 
+# return an IPv6 netmask for CIDR
+:set NetMask6 do={
+  :local FuncName $0;
+  :local CIDR [ :tostr $1 ];
+
+  :global IfThenElse;
+  :global MAX;
+  :global MIN;
+
+  :local Mask "";
+  :for I from=0 to=7 do={
+    :set Mask ($Mask . \
+      [ :convert from=num to=hex (0xffff - (0xffff >> [ :tonum [ $MIN [ $MAX ($CIDR - (16 * $I)) 0 ] 16 ] ])) ] . \
+      [ $IfThenElse ($I < 7) ":" ]);
+  }
+  :return [ :toip6 $Mask ];
+}
+
 # prepare NotificationFunctions array
 :if ([ :typeof $NotificationFunctions ] != "array") do={
   :set NotificationFunctions ({});

From d7a6eb1d0083c1d788e8febedaea67464361d271 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 16 Oct 2025 15:13:14 +0200
Subject: [PATCH 842/988] global-functions: $NetMask6: implement simple caching

The calculation is quite complex for something that needs to be done
frequently, for example by `fw-addr-lists`. The number of possible
netmasks is limited, so let's cache the results that were calculated
already.
---
 global-functions.rsc | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ffa52776..5ede6546 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1008,13 +1008,25 @@
   :global MAX;
   :global MIN;
 
+  :global NetMask6Cache;
+
+  :if ([ :typeof ($NetMask6Cache->$CIDR) ] = "ip6") do={
+    :return ($NetMask6Cache->$CIDR);
+  }
+
+  :if ([ :typeof $NetMask6Cache ] = "nothing") do={
+    :set NetMask6Cache ({});
+  }
+
   :local Mask "";
   :for I from=0 to=7 do={
     :set Mask ($Mask . \
       [ :convert from=num to=hex (0xffff - (0xffff >> [ :tonum [ $MIN [ $MAX ($CIDR - (16 * $I)) 0 ] 16 ] ])) ] . \
       [ $IfThenElse ($I < 7) ":" ]);
   }
-  :return [ :toip6 $Mask ];
+  :set Mask [ :toip6 $Mask ];
+  :set ($NetMask6Cache->$CIDR) $Mask;
+  :return $Mask;
 }
 
 # prepare NotificationFunctions array

From ea05b69f7cfb1506e24117020a115af2d1b19c4a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 16 Oct 2025 13:02:14 +0200
Subject: [PATCH 843/988] fw-addr-lists: use $NetMask6

---
 fw-addr-lists.rsc | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 26e041aa..c85cc8bf 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -26,8 +26,8 @@
   :global LogPrint;
   :global LogPrintOnce;
   :global LogPrintVerbose;
-  :global MIN;
   :global NetMask4;
+  :global NetMask6;
   :global ScriptLock;
   :global WaitFullyConnected;
 
@@ -130,13 +130,13 @@
           }
           :if ($Address ~ "^[0-9a-zA-Z]*:[0-9a-zA-Z:\\.]+(/[0-9]{1,3})?\$") do={
             :local Net $Address;
-            :local Cidr 64;
+            :local CIDR 128;
             :local Slash [ :find $Address "/" ];
             :if ([ :typeof $Slash ] = "num") do={
               :set Net [ :toip6 [ :pick $Address 0 $Slash ] ]
-              :set Cidr [ $MIN [ :pick $Address ($Slash + 1) [ :len $Address ] ] 64 ];
+              :set CIDR [ :pick $Address ($Slash + 1) [ :len $Address ] ];
             }
-            :set Address (([ :toip6 $Net ] & ffff:ffff:ffff:ffff::) . "/" . $Cidr);
+            :set Address (([ :toip6 $Net ] & [ $NetMask6 $CIDR ]) . "/" . $CIDR);
             :set Branch [ $GetBranch $Address ];
             :set ($IPv6Addresses->$Branch->$Address) $TimeOut;
             :error true;

From b80b872e557e2513c7e9ee4c6f119e3ad56d4116 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 16 Oct 2025 17:31:15 +0200
Subject: [PATCH 844/988] mod/ipcalc: support IPv6

Well, some of these values do not make a lot of sense for IPv6...
Something to be cleaned up later.
---
 mod/ipcalc.rsc | 23 +++++++++++++++++------
 1 file changed, 17 insertions(+), 6 deletions(-)

diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index fecf6f26..d65d4724 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -36,21 +36,32 @@
   :local Input [ :tostr $1 ];
 
   :global NetMask4;
+  :global NetMask6;
 
-  :local Address [ :toip [ :pick $Input 0 [ :find $Input "/" ] ] ];
+  :local Address [ :pick $Input 0 [ :find $Input "/" ] ];
   :local Bits [ :tonum [ :pick $Input ([ :find $Input "/" ] + 1) [ :len $Input ] ] ];
-  :local Mask [ $NetMask4 $Bits ];
+  :local Mask;
+  :local One;
+  :if ([ :typeof [ :toip $Address ] ] = "ip") do={
+    :set Address [ :toip $Address ];
+    :set Mask [ $NetMask4 $Bits ];
+    :set One 0.0.0.1;
+  } else={
+    :set Address [ :toip6 $Address ];
+    :set Mask [ $NetMask6 $Bits ];
+    :set One ::1;
+  }
 
-  :local Return {
+  :local Return ({
     "address"=$Address;
     "netmask"=$Mask;
     "networkaddress"=($Address & $Mask);
     "networkbits"=$Bits;
     "network"=(($Address & $Mask) . "/" . $Bits);
-    "hostmin"=(($Address & $Mask) | 0.0.0.1);
-    "hostmax"=(($Address | ~$Mask) ^ 0.0.0.1);
+    "hostmin"=(($Address & $Mask) | $One);
+    "hostmax"=(($Address | ~$Mask) ^ $One);
     "broadcast"=($Address | ~$Mask);
-  }
+  });
 
   :return $Return;
 }

From 20987221d978c657fe453eefd1d8c284e93b6372 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 24 Oct 2025 16:16:18 +0200
Subject: [PATCH 845/988] mod/notification-email: ignore errors (for now...)

Errors are returned since RouterOS 7.21beta2.

We keep the current logic for now, as we want to support older
RouterOS versions. This is something to be reworked later...
---
 mod/notification-email.rsc | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index ad9762a3..7c3a6ffb 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -101,8 +101,11 @@
             $LogPrint warning $0 ("File '" . $File . "' does not exist, can not attach.");
           }
         }
-        /tool/e-mail/send from=[ $EMailGenerateFrom ] to=($Message->"to") cc=($Message->"cc") \
-          subject=($Message->"subject") body=($Message->"body") file=$Attach;
+        :do {
+          /tool/e-mail/send from=[ $EMailGenerateFrom ] to=($Message->"to") \
+              cc=($Message->"cc") subject=($Message->"subject") \
+              body=($Message->"body") file=$Attach;
+        } on-error={ }
         :local Wait true;
         :do {
           :delay 1s;

From c88953e44d9b922988e7d5638743e165a5196765 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Nov 2025 22:07:23 +0100
Subject: [PATCH 846/988] README: fix typo
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

We had it there since 39d1027d697c09ec709a1b847a185ccff3b00540... 😜
---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 243e1fc5..b0d26bdf 100644
--- a/README.md
+++ b/README.md
@@ -63,7 +63,7 @@ First time users should take the long way below.
 
 Want to see it in action? I've had a presentation [Repository based
 RouterOS script distribution ↗️](https://www.youtube.com/watch?v=B9neG3oAhcY)
-including demonstation recorded live at [MUM Europe
+including demonstration recorded live at [MUM Europe
 2019 ↗️](https://mum.mikrotik.com/2019/EU/) in Vienna.
 
 > ⚠️ **Warning**: Some details changed. So see the presentation, then follow

From d100cac9ed37e4b79c587daf7c2bdba45c5c2ee7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 11:20:29 +0100
Subject: [PATCH 847/988] README: add a line break before command

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index b0d26bdf..529bb4c4 100644
--- a/README.md
+++ b/README.md
@@ -77,7 +77,7 @@ download the certificates.
 > 💡️ **Hint**: RouterOS 7.19 comes with a builtin certificate store. You
 > can skip the steps regarding certificate download and import and jump
 > to [installation of scripts](#installation-of-scripts) if you set the
-> trust for these builtin trust anchors:
+> trust for these builtin trust anchors:  
 > `/certificate/settings/set builtin-trust-anchors=trusted;`
 
 If you intend to download the scripts from a
@@ -173,7 +173,7 @@ This last step is required when ever you make changes to your configuration.
 
 > ℹ️ **Info**: It is recommended to edit the configuration using the command
 > line interface. If using Winbox on Windows OS, the line endings may be
-> missing. To fix this run:
+> missing. To fix this run:  
 > `/system/script/set source=[ :tocrlf [ get global-config-overlay source ] ] global-config-overlay;`
 
 Updating scripts

From 335266f2470593dfae33d6871abad7d2fe7297d2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 19 Nov 2025 16:18:10 +0100
Subject: [PATCH 848/988] README: update the screenshot for script update...

... to match commit 2c92c78b4647e43c44da567e98adee69b7857393.
---
 README.d/09-update-scripts.avif | Bin 1733 -> 1928 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/README.d/09-update-scripts.avif b/README.d/09-update-scripts.avif
index f549fef5bd7a33f883044d25f3fcac68134b130f..a31d60b3a0066d1ee68abbf79fd48aa6d77ffdd0 100644
GIT binary patch
delta 1713
zcmV;i22T0K4TukrBMs|qWprTx00000001G8FdUInC<PM$00woDfJ*^Xk<3Vc27PU0
zVRRAz3I;eOvN~)MGUyCUWCGnZLt@_EzK<lAQzo@^sH>8xE-&Zo<|INwv6(ybU%0^3
zb0?ti3SXdk_npul)a_WcV0@=&CW16!tzwi09(!RygblMl_G}C;e_nJSnY?&x%;kFG
z@?0<D93(|oG<Yl2ytih9Pr<u?aU_5(?zBTCQhToEaHe0urwI4yUN734xmaRq-hq1>
zPNP@HvM~BI%i(9&6?4?JC!J@&&4l8WAL<p?f5afxEnC`YjBV=umr}=wF4>Q{PiIbV
z5D`7MueTOr+PMnNUN(aLSL1XF6)l&#TcVTzdoA8}?Rmn(eXgVv_!@(MW+<p}3aut8
zuORDx74obfu_VF%sFiw6jkrXvM)*VOkc=@DDR+44ryrjLDZQHh4|eJUP6P&>vWxqy
z`Bjp!+FMI%Xm^uOqxZMSeQd#MWlQM$0~7Vv4aUO0nW-=Ax9ALa^>i~#$g0*8nrJrk
zQ#q%p?mFq=a5^<P_Q`O64QH*e4<dK|0z!|X_hl%cUh^%0d0`5?JQL!;nwWo)lg;Al
z6X%oY13`xN-jtrxcN2i#W6pq4S9~a~9q+&8(T(`>{psCL(X6PBVjh1_@V8;3FLdZg
zOQIgHwrE`AhS<3+mxJmU&3Q}wluu1^&uCxNWIbAWpd4syC6wfUhttOTy`Gp>47H-A
z2>a}Ok-;ptFJN}*ra{8C0Hfy2g*@bDS5S7p7C$}2tA*lw5u900W#cmiesFh>VMbiF
z7w##Dr_uK@YD(@CoCL?`_QT{ZR7PHzt*bKiOKYH^`?Ai$F%W?XUaZ+m!8=-v4%}fZ
zDA^!gWN+E=OfE2g=JmJTy?2UE40v@<i#(z83Cpvh#~<2B(O`Zx7IfT@%M}@J`#o1k
zTMyiErvOP6*Ds)zY6d=r+Ld)W5Mi81zJd1>YzIGE^d4Ht%GJ+a7(KD)JsLoD;&q&+
zF@ZJQ7FnKikGfIh;@?~=r5@VHi|VoHg8l3*Z=Z)Ho)+tWk@n=k<bpXFJUL41>6b`H
zWf5K_4a33IfJT8D2m@%=@mytOlB+gxg<>RNdvD8w7rh!{P$<nD*AZWeNQTIC2*nrS
z``&r+&w@q6$RW6Dyi(dNw!lv!&b>1=Y#ptVblh`MR#|DB<LKG!V_6UZ2`wX|d%4Ex
z)JmB<|0Di?=(fR&yf>+>iK;JKZmc_dXW*BF(xp8)z;}?znRU)jBXhpIv%o&f#Szt}
zwdtG69iRrTcjYnMVvmMfhnKeUraz9b0$JSgM;?-goiY=eYh7ml3*%JaH}%>3wTs|k
zPPLj-#&la+jec%hLKq7Ey(|a-#HT(FbkPP~p?UOwg*q*twC;$T#Z)Ly<~$nUV<D{t
zqy+jlE<4)Q*W`i?U<eZnIcv|NYu6;$bN-u0GIRZFI!oOe^=>Sb$CW^n7l%gvkq)c%
zxV|ePe^ez&peb#~5Px)wY`>7fgdo&sX7N=ZpFqqR)nUa%s6F<BDAh-7ANxb6STxvW
zsUg^Z%=WskutvEQP*@`LCBo$d5h%e0TZ)DfWn!h?yOBel?>$Php~U;dgMKO(06sl6
zzpVP9rd3UBzottgRY--gZtY+*MFbIkpBE3sP-fB8*=wF3|M{{Jbj(JS!tM_OQr^SY
zY2bbw<}(;I>wsJ8%C4>!Ra>GvSggGusQvVR;B8%u#r}sE{ftu1p>l~^90rgU5aN(L
z$Tvr<r;k`%6V&Yr!iQ%wpC;`3dR1uu{9z~3_a{B&!Lh#`^UVlHM@?9>Q>;9BA_{`V
z;&~E)33@rnu$n>c6IC9kdC}KDIPS<(Ug}Y2Gk0jyZ3ATV2j`k>kx2^H6gu{wQsMW1
z7n`hxT4Z8{>55!qH}5Gl$1)bzcI_^#N!Gb~vL}4*PHy4+6zLDQ^LDQaY#GL=5_`^|
zO1hfEc0cGhN)9zLgC5!8XvWyO787TP>yV;(UcnXp;idS|;(b%-CJt@yVyZ14hIhu`
z^9|ANf5)JSaj&sUDj=&i-p7$p;{fu1XihrDCG&ZJGUi+#`RxP40E+o^#Df-b2FkZ&
zkt6dZ)$Vh1lq~Ke*5$Gv-FuH{Pp4@(|38~TCw@RipjqMuw%0`;{~qGrsj>V$_D^vz
zZ-V;7utAldlJ|WHS!wd1+G6ycc9McG^PD#H#<w<6>-T*<j!Nv~<Qb7pb$GJ~X(|)(
He=zj;<1Sf$

delta 1517
zcmV<J1rqv*55*0TBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-00pa&c}oFA
zk;O=V1+#5rVRRAz3JEwRvN&uYA)wMSn+rr_0AYq0P~9}?)9W)IuiiXyh}LlV9;wwG
z84y~XaX>#$Z~YcF{#-CAuWqy`f`9F(pD^73=`1y+$YTp%sf`4lV%8IV0bqmeuSL*(
zbv2(uZy-X3lvR{v%D>kp6ltDInF1x0Y0bue4s76Ff!Un0LkZ7RoR`b2oL;X5iS2Y8
zXN)vegfHfqrqKeF0BX&33CVm;R^@=y5oFPK6Jo|^;o$A^V+2DwwAg40CXJSCq}wb;
znrhSeSrRJ|F6t^k`+Tkj)~8#IHfY-mg($+Z?0#cY^|~C6dhl7W3^k5MO1RS6qG}U=
zo%XtJniI^14`v%KPPmTs>$iFk_md35#4^I4Y&Ms&2Uv&BGzm$2iSFF5ySzN1JOu!C
zuFnm!f<};WHG3chKKN-a>Cb$L%)&*B{*CNtT`d;S)d0Pj;s=`0T2qzwg7VRBltp&3
z2J4piH<x1JPy1HzpXTV*Z=I@L28l#}%`j8uWoIF0)r1{BVdO;>e$A|aJzEBoC1Yy6
z(GQmNrc5S?T;J-3bo^prCgQ9C&iVO;71E+$yh|S$(Bn~PlH#5Hv5dXlrbtR8pyow%
zV?s5VKsPIwadn3saPpowdRv#so4`pm9%Y+`-xd#tAjYyFa}`x&;7qNxI>T^(FRLla
z8{?f>>GRmIak8d`9UU0mb~aTc73u~FD%@YBSK_wH4xhuZykz_q$%<Yo4&{Ao%h^2(
zeS+7PdgjGwuwi{)X<FIcOxlqz1iV0D*?XBV#L+vsoOb)R5Ss|}+t&a%CCK(|ENM6B
z+hFV9{s#3}po1<rncJlC|9y9VQ%pj!V0jgV1p4K6=!}}g4E|vK?@!l)%4GUON^y)Z
zA=#(!$yQFz+9yj1p^wM664u#&c1*lc7RKe~CPGRMd-CJ`up(>=89==m|Hg#Hr`UM7
zOt7<8AMMpNv6Af4GR$GlzM><O(&#Xj-c*X?y~{VKj@-^AmMmIu*X7iIxTpnJ?ReC=
z{T!p7Q8g4FlQ;78vFf{=9mI>KB9=71j8;%Y1X0#qMyDqi!Z|v!KNey+1&7$04D+wg
zW}+Ni(1pStc|a|d!HJUe&31S331dgwO9*CKe{?Q{r&toe^0S5J2yhm+Ek~zO+;fG?
zu?2z0ti>n|kt8H}oQI%)-Q`20>rHd3YDPhCeQZhvuTxo!y_S9N6oz^vVod@uU41{Z
zP!_CzO9ZPhiJ}fr-Ke4{Y{OlRJHHo>2CA*MzVR&USoL)SyS&(gb5{l{IAXb)J3j~}
z7W9P}4$83B<+dMWlG0tB&+s5s`9o*sUE?5+oApSY4ZZ(_4({)N0r#1kSkavJo~LNG
zdeC3wfLL_JVZ7i?W^eP^WjZac+4jB=3kc5>c~F82uP*l@0*8UJ$n0Ey*jU{Q&>hW6
z?;qrH#gLp<)X6K^#xTwJ#nN`GA3~A*jaVGOB5<`4F71`ZAOo0@KrRMp10$JKH;v#=
zWulDDZn6#9`jgXtZoyyWdskGesCUz8f=U-IWrYgo;F#DCB5)FjLdP_Hu(M^A%o4Cz
z<Ew|O;g)EDyPm_IL(K3pC9v<Q-0a-WU^@Y`Lw$=0$SC5D24tCAyL^We7=*FC2idnV
zT;k3#24{yt@dIiUuY!BZu)ze)@@>Xp36W`*^?TgqTvO?Pt7ixF%gF_Z^B>#?@3clg
z7W2y_G$=5o=Zc~LpjE-CX#UL~4rmf>XV3eV&8?9<Q){H#xkf;0)t5S|?l``vWHb6l
zolGKzFC!*-MW3+PhBxiyx^w!3X4YO=ju~Gw01@4?&7A`npc<OYm~20+HLS@sQ#-ri
zb7k{qc*1i$pt8|53IY+R3X7ud4xaZo7O0Z9{!66v-{>~e3+Y!-q-YA@fPJGGrKYe*
T^8jiU8*(U{VZwl~v4`?B()a82


From 1a1399d3026918d2b9f89f13878fe2a66855d06b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 11:20:47 +0100
Subject: [PATCH 849/988] README: support new builtin-trust-store...

... which was introduced with RouterOS 7.21beta7.
---
 README.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 529bb4c4..b77538dd 100644
--- a/README.md
+++ b/README.md
@@ -78,7 +78,10 @@ download the certificates.
 > can skip the steps regarding certificate download and import and jump
 > to [installation of scripts](#installation-of-scripts) if you set the
 > trust for these builtin trust anchors:  
-> `/certificate/settings/set builtin-trust-anchors=trusted;`
+> `/certificate/settings/set builtin-trust-anchors=trusted;`  
+> With RouterOS 7.21 the functionality was changed. Set this at minimum,
+> but make sure not to drop other targets:  
+> `/certificate/settings/set builtin-trust-store=fetch;`
 
 If you intend to download the scripts from a
 different location (for example from github.com) install the corresponding

From fbfeea30426ac9be62bdaf7392fbfc51d4143ae3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 11:38:31 +0100
Subject: [PATCH 850/988] INITIAL-COMMANDS: support new builtin-trust-store...

... which was introduced with RouterOS 7.21beta7.
---
 INITIAL-COMMANDS.md | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 40f609b9..6e70b66a 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -22,8 +22,11 @@ Run the complete base installation:
       :local CertFileName "ISRG-Root-X2.pem";
       :local CertFingerprint "69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
 
-      :if (!(([ /certificate/settings/get ]->"builtin-trust-anchors") = "trusted" && \
-           [[ :parse (":return [ :len [ /certificate/builtin/find where common-name=\"" . $CertCommonName . "\" ] ]") ]] > 0)) do={
+      :local CertSettings [ /certificate/settings/get ];
+      :if (!((($CertSettings->"builtin-trust-anchors") = "trusted" || \
+              ($CertSettings->"builtin-trust-store") ~ "fetch" || \
+              ($CertSettings->"builtin-trust-store") = "all") && \
+             [[ :parse (":return [ :len [ /certificate/builtin/find where common-name=\"" . $CertCommonName . "\" ] ]") ]] > 0)) do={
         :put "Importing certificate...";
         /tool/fetch ($BaseUrl . "certs/" . $CertFileName) dst-path=$CertFileName as-value;
         :delay 1s;

From db0a5bf33ce5ff585f568affbea3d399466159de Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 11:47:55 +0100
Subject: [PATCH 851/988] global-functions: $CertificateAvailable: support new
 builtin-trust-store...

... which was introduced with RouterOS 7.21beta7.
---
 global-functions.rsc | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index eb837aa1..9f92b07a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -106,11 +106,15 @@
 # check and download required certificate
 :set CertificateAvailable do={
   :local CommonName [ :tostr $1 ];
+  :local UseFor     [ :tostr $2 ];
 
   :global CertificateDownload;
+  :global EitherOr;
   :global LogPrint;
   :global ParseKeyValueStore;
 
+  :set UseFor [ $EitherOr $UseFor "undefined" ];
+
   :if ([ /system/resource/get free-hdd-space ] < 8388608 && \
        [ /certificate/settings/get crl-download ] = true && \
        [ /certificate/settings/get crl-store ] = "system") do={
@@ -123,7 +127,10 @@
     :return false;
   }
 
-  :if (([ /certificate/settings/get ]->"builtin-trust-anchors") = "trusted" && \
+  :local CertSettings [ /certificate/settings/get ];
+  :if ((($CertSettings->"builtin-trust-anchors") = "trusted" || \
+        ($CertSettings->"builtin-trust-store") ~ $UseFor || \
+        ($CertSettings->"builtin-trust-store") = "all") && \
        [[ :parse (":return [ :len [ /certificate/builtin/find where common-name=\"" . $CommonName . "\" ] ]") ]] > 0) do={
     :return true;
   }

From 8eb397f79fafa90b078abe880dd3b2958ae95dad Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 11:59:28 +0100
Subject: [PATCH 852/988] global-functions: $DownloadPackage: define
 certificate use

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 9f92b07a..412777c8 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -404,7 +404,7 @@
     :return true;
   }
 
-  :if ([ $CertificateAvailable "ISRG Root X1" ] = false) do={
+  :if ([ $CertificateAvailable "ISRG Root X1" "fetch" ] = false) do={
     $LogPrint error $0 ("Downloading required certificate failed.");
     :return false;
   }

From f3e6e152bce0d2563f864a2d0652899c22c53918 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:01:11 +0100
Subject: [PATCH 853/988] global-functions: $GetMacVendor: define certificate
 use

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 412777c8..d4c37a20 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -640,7 +640,7 @@
   }
 
   :do {
-    :if ([ $CertificateAvailable "GTS Root R4" ] = false) do={
+    :if ([ $CertificateAvailable "GTS Root R4" "fetch" ] = false) do={
       $LogPrint warning $0 ("Downloading required certificate failed.");
       :error false;
     }

From b5a026966736f8c530e902d222dbf8dc4eea9cfd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:01:57 +0100
Subject: [PATCH 854/988] global-functions: $ScriptInstallUpdate: define
 certificate use

---
 global-functions.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index d4c37a20..48aaf7fb 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1248,7 +1248,7 @@
   :global SymbolForNotification;
   :global ValidateSyntax;
 
-  :if ([ $CertificateAvailable "ISRG Root X2" ] = false) do={
+  :if ([ $CertificateAvailable "ISRG Root X2" "fetch" ] = false) do={
     $LogPrint warning $0 ("Downloading certificate failed, trying without.");
   }
 
@@ -1299,7 +1299,7 @@
       }
 
       :if ([ :len ($ScriptInfo->"certificate") ] > 0) do={
-        :if ([ $CertificateAvailable ($ScriptInfo->"certificate") ] = false) do={
+        :if ([ $CertificateAvailable ($ScriptInfo->"certificate") "fetch" ] = false) do={
           $LogPrint warning $0 ("Downloading certificate failed, trying without.");
         }
       }

From 876505c36dd2cafb9ce151a3051b1631fe09b3a1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:05:10 +0100
Subject: [PATCH 855/988] check-certificates: define certificate use

---
 check-certificates.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index f2d5c1f3..3300bee8 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -189,7 +189,7 @@
           fingerprint!=[ :tostr ($CertVal->"fingerprint") ] expires-after>$CertRenewTime ];
         :local CertNewVal [ /certificate/get $CertNew ];
 
-        :if ([ $CertificateAvailable ([ $ParseKeyValueStore ($CertNewVal->"issuer") ]->"CN") ] = false) do={
+        :if ([ $CertificateAvailable ([ $ParseKeyValueStore ($CertNewVal->"issuer") ]->"CN") "fetch" ] = false) do={
           $LogPrint warning $ScriptName ("The certificate chain is not available!");
         }
 

From 677b5b8069194fdd5c1c2ddbbcd4da2c5eb0c52b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 18 Nov 2025 16:50:09 +0100
Subject: [PATCH 856/988] doc/mod/ssh-keys-import: create code block with
 indention

---
 doc/mod/ssh-keys-import.md | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/doc/mod/ssh-keys-import.md b/doc/mod/ssh-keys-import.md
index 49276d04..abf4d392 100644
--- a/doc/mod/ssh-keys-import.md
+++ b/doc/mod/ssh-keys-import.md
@@ -51,12 +51,10 @@ The functions `$SSHKeysImportFile` can read an `authorized_keys`-style file
 and import all the keys. The user given to the function can be overwritting
 from comments in the file. Create a file `keys.pub` with this content:
 
-```
-ssh-ed25519 AAAAC3Nza...3OcN8A user@client
-ssh-rsa AAAAB3Nza...ozyts= worker@station
-# user=example
-ssh-rsa AAAAB3Nza...GXQVk= person@host
-```
+    ssh-ed25519 AAAAC3Nza...3OcN8A user@client
+    ssh-rsa AAAAB3Nza...ozyts= worker@station
+    # user=example
+    ssh-rsa AAAAB3Nza...GXQVk= person@host
 
 Then import it with:
 

From 87787eefe3425b29e5fffe0c636adffc04208de6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:06:03 +0100
Subject: [PATCH 857/988] fw-addr-lists: define certificate use

---
 fw-addr-lists.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index c85cc8bf..e5a71aa6 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -74,7 +74,7 @@
 
       :if ([ :len ($List->"cert") ] > 0) do={
         :set CheckCertificate true;
-        :if ([ $CertificateAvailable ($List->"cert") ] = false) do={
+        :if ([ $CertificateAvailable ($List->"cert") "fetch" ] = false) do={
           $LogPrint warning $ScriptName ("Downloading required certificate (" . $FwListName . \
               " / " . $List->"url" . ") failed, trying anyway.");
         }

From affb9b3baf44fe84089a5b4059b93b336f29b21c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 18 Nov 2025 16:52:21 +0100
Subject: [PATCH 858/988] doc/mode-button: create code block with indention

---
 doc/mode-button.md | 20 +++++++++-----------
 1 file changed, 9 insertions(+), 11 deletions(-)

diff --git a/doc/mode-button.md b/doc/mode-button.md
index be15bc92..af95ddb6 100644
--- a/doc/mode-button.md
+++ b/doc/mode-button.md
@@ -26,17 +26,15 @@ can configure the reset button to act the same, see
 
 Copy this code to terminal to check:
 
-```
-:if ([ :len [ /system/routerboard/mode-button/print as-value ] ] > 0) do={
-  :put "Mode button is supported.";
-} else={
-  :if ([ :len [ /system/routerboard/reset-button/print as-value ] ] > 0) do={
-    :put "Mode button is not supported, but reset button is.";
-  } else={
-    :put "Neither mode button nor reset button is supported.";
-  }
-}
-```
+    :if ([ :len [ /system/routerboard/mode-button/print as-value ] ] > 0) do={
+      :put "Mode button is supported.";
+    } else={
+      :if ([ :len [ /system/routerboard/reset-button/print as-value ] ] > 0) do={
+        :put "Mode button is not supported, but reset button is.";
+      } else={
+        :put "Neither mode button nor reset button is supported.";
+      }
+    }
 
 Requirements and installation
 -----------------------------

From 8ff34a2408b920dcdb59b2ea48d70148496553e2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:10:22 +0100
Subject: [PATCH 859/988] mod/notification-ntfy: define certificate use

---
 mod/notification-ntfy.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index 71140209..dd10812e 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -109,7 +109,7 @@
 
   :onerror Err {
     :if ($Server = "ntfy.sh") do={
-      :if ([ $CertificateAvailable "ISRG Root X1" ] = false) do={
+      :if ([ $CertificateAvailable "ISRG Root X1" "fetch" ] = false) do={
         $LogPrint warning $0 ("Downloading required certificate failed.");
         :error false;
       }

From 090f25a82d862eaa5db86a18f9d570084e20e2b5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:04:13 +0100
Subject: [PATCH 860/988] check-certificates: add missing semicolon

---
 check-certificates.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index c10e33ba..f2d5c1f3 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -21,7 +21,7 @@
   :global CertWarnTime;
   :global Identity;
 
-  :global CertificateAvailable
+  :global CertificateAvailable;
   :global EscapeForRegEx;
   :global IfThenElse;
   :global LogPrint;

From f0910a44723feccbf5fb25340985cd654f310cd1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:09:43 +0100
Subject: [PATCH 861/988] mod/notification-telegram: define certificate use

---
 mod/notification-telegram.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index ff9b4da2..b1996a32 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -30,7 +30,7 @@
     :return false;
   }
 
-  :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
+  :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" "fetch" ] = false) do={
     $LogPrint warning $0 ("Downloading required certificate failed.");
     :return false;
   }
@@ -72,7 +72,7 @@
   :global CertificateAvailable;
   :global LogPrint;
 
-  :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
+  :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" "fetch" ] = false) do={
     $LogPrint warning $0 ("Downloading required certificate failed.");
     :return false;
   }
@@ -197,7 +197,7 @@
       "&reply_to_message_id=" . ($Notification->"replyto") . "&message_thread_id=" . $ThreadId . \
       "&disable_web_page_preview=true&parse_mode=MarkdownV2");
   :onerror Err {
-    :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
+    :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" "fetch" ] = false) do={
       $LogPrint warning $0 ("Downloading required certificate failed.");
       :error false;
     }

From 83b164d5115931209452940b2350dcd8077b139a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 11:58:23 +0100
Subject: [PATCH 862/988] global-functions: $CertificateDownload: drop unused
 function

---
 global-functions.rsc | 1 -
 1 file changed, 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 5ede6546..3089d2e2 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -161,7 +161,6 @@
   :global ScriptUpdatesBaseUrl;
   :global ScriptUpdatesUrlSuffix;
 
-  :global CertificateAvailable;
   :global CertificateNameByCN;
   :global CleanName;
   :global FetchUserAgentStr;

From 7772fbb22d6eb9118075c87230a43cf9b4926da5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:07:22 +0100
Subject: [PATCH 863/988] netwatch-dns: define certificate use

---
 netwatch-dns.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 9e2f9bcf..eee5f854 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -112,7 +112,7 @@
 
   :foreach DohServer in=$DohServers do={
     :if ([ :len ($DohServer->"doh-cert") ] > 0) do={
-      :if ([ $CertificateAvailable ($DohServer->"doh-cert") ] = false) do={
+      :if ([ $CertificateAvailable ($DohServer->"doh-cert") "dns" ] = false) do={
         $LogPrint warning $ScriptName ("Downloading certificate failed, trying without.");
       }
     }

From 7d701483d333cec77c4b7cc6ce2bb4a8fc2eb81c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 30 Oct 2025 11:07:38 +0100
Subject: [PATCH 864/988] contrib/checksums: output to stdout...

... and let the Makefile redirect.
---
 Makefile             | 2 +-
 contrib/checksums.sh | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 0265a51a..d8f23876 100644
--- a/Makefile
+++ b/Makefile
@@ -33,7 +33,7 @@ all: $(CAPSMAN) $(LOCAL) $(WIFI) $(HTML) checksums.json
 		< $< > $@
 
 checksums.json: contrib/checksums.sh *.rsc */*.rsc
-	contrib/checksums.sh
+	contrib/checksums.sh > $@
 
 clean:
 	rm -f $(HTML) checksums.json
diff --git a/contrib/checksums.sh b/contrib/checksums.sh
index b472b49f..ab4e9738 100755
--- a/contrib/checksums.sh
+++ b/contrib/checksums.sh
@@ -6,4 +6,4 @@ set -e
 
 md5sum $(find -name '*.rsc' | sort) | \
 	sed -e "s| \./||" -e 's|.rsc$||' | \
-	jq --raw-input --null-input '[ inputs | split (" ") | { (.[1]): (.[0]) }] | add' > 'checksums.json'
+	jq --raw-input --null-input '[ inputs | split (" ") | { (.[1]): (.[0]) }] | add'

From 5ccb0d07b120f1fd7af738d5eed3b20345e2c971 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:10:58 +0100
Subject: [PATCH 865/988] telegram-chat: define certificate use

---
 telegram-chat.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 7f7b7a79..54872fb9 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -61,7 +61,7 @@
     :set TelegramRandomDelay 0;
   }
 
-  :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" ] = false) do={
+  :if ([ $CertificateAvailable "Go Daddy Root Certificate Authority - G2" "fetch" ] = false) do={
     $LogPrint warning $ScriptName ("Downloading required certificate failed.");
     :set ExitOK true;
     :error false;

From 20885c4620ec95e46d914fdbb4b63378e72c25d9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 2 Nov 2025 09:19:16 +0100
Subject: [PATCH 866/988] global-functions: $ScriptInstallUpdate: give hint on
 ignore

Fixes: https://github.com/eworm-de/routeros-scripts/issues/112
---
 global-functions.rsc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 3089d2e2..b5fc0eb0 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1313,6 +1313,11 @@
           $LogPrint warning $0 ("Removing dummy. Typo on installation?");
           /system/script/remove $Script;
         }
+        :if ([ :len ($ScriptInfo->"base-url") ] = 0 && [ :len ($ScriptInfo->"url-suffix") ] = 0 && \
+             [ :len $CheckSum ] = 0) do={
+          $LogPrintOnce warning $0 \
+              ("Added the script manually? Skip updates with 'ignore=true' in comment.");
+        }
         :error false;
       }
 

From 335bfc0a88e0a79e3ae03ee72a81edda9f5d0c32 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:03:33 +0100
Subject: [PATCH 867/988] update-tunnelbroker: define certificate use

---
 update-tunnelbroker.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 9057e1e4..5372f4c2 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -28,7 +28,7 @@
     :error false;
   }
 
-  :if ([ $CertificateAvailable "Starfield Root Certificate Authority - G2" ] = false) do={
+  :if ([ $CertificateAvailable "Starfield Root Certificate Authority - G2" "fetch" ] = false) do={
     $LogPrint error $ScriptName ("Downloading required certificate failed.");
     :set ExitOK true;
     :error false;

From 298a43a871b28bcdc057310dbc5b7819944e4bb2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Nov 2025 00:00:03 +0100
Subject: [PATCH 868/988] global-functions: $ScriptInstallUpdate: either or...

... but not both.
---
 global-functions.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index b5fc0eb0..2379f9b9 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1312,6 +1312,7 @@
         :if ($ScriptVal->"source" = "#!rsc by RouterOS\n") do={
           $LogPrint warning $0 ("Removing dummy. Typo on installation?");
           /system/script/remove $Script;
+          :error false;
         }
         :if ([ :len ($ScriptInfo->"base-url") ] = 0 && [ :len ($ScriptInfo->"url-suffix") ] = 0 && \
              [ :len $CheckSum ] = 0) do={

From 737a872a5f768eea07b1b74439580e3ce98752cd Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:11:38 +0100
Subject: [PATCH 869/988] CERTIFICATES: define certificate use

---
 CERTIFICATES.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CERTIFICATES.md b/CERTIFICATES.md
index 69d6c185..0e0a8671 100644
--- a/CERTIFICATES.md
+++ b/CERTIFICATES.md
@@ -61,7 +61,7 @@ Import a certificate by CommonName
 Running the function `$CertificateAvailable` with that name as parameter
 makes sure the certificate is available in the device's store:
 
-    $CertificateAvailable "ISRG Root X2";
+    $CertificateAvailable "ISRG Root X2" "fetch";
 
 If the certificate is actually available already nothing happens, and there
 is no output. Otherwise the certificate is downloaded and imported.

From d002d1c0c04e90cd73e1b821e944c56321bfa1d8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 3 Nov 2025 09:17:25 +0100
Subject: [PATCH 870/988] global-functions: $ScriptInstallUpdate: extra actions
 on 'not found' only

---
 global-functions.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 2379f9b9..eb837aa1 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1309,6 +1309,10 @@
         }
       } do={
         $LogPrint warning $0 ("Failed fetching script '" . $ScriptVal->"name" . "': " . $Err);
+        :if ($Err != "Fetch failed with status 404") do={
+          :error false;
+        }
+
         :if ($ScriptVal->"source" = "#!rsc by RouterOS\n") do={
           $LogPrint warning $0 ("Removing dummy. Typo on installation?");
           /system/script/remove $Script;

From cc5aea22b357cebb54741be1d71a99f0b28d8c3f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 12:08:49 +0100
Subject: [PATCH 871/988] doc/mod/notification-matrix: define certificate use

---
 doc/mod/notification-matrix.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index da6d6dea..ad4cf4f9 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -49,7 +49,7 @@ your server in device's certificate store.
 The example below is for `matrix.org`, which uses a trust chain from *Google
 Trust Services*. Run this to import the required certificate:
 
-    $CertificateAvailable "GTS Root R4";
+    $CertificateAvailable "GTS Root R4" "fetch";
 
 Replace the CA certificate name with what ever is needed for your server.
 You may want to find the

From 8f6a38f2994a36742c6d200d74d4548bd9c2e356 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 17 Nov 2025 09:56:49 +0100
Subject: [PATCH 872/988] mod/notification-email: remove schedule with find...

... as a race condition could occur and the scheduler is already gone.
---
 mod/notification-email.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 7c3a6ffb..668dabac 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -132,7 +132,7 @@
   }
 
   :if ($AllDone = true && $QueueLen = [ :len $EmailQueue ]) do={
-    /system/scheduler/remove $Scheduler;
+    /system/scheduler/remove [ find where name="_FlushEmailQueue" ];
     :set EmailQueue;
     :return true;
   }

From c6cc8b9a51c0f399c36823b33a6d282344f16416 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 22:19:44 +0100
Subject: [PATCH 873/988] README: move the QR code

---
 README.md                                    |   2 +-
 README.d/upstream.png => general/qr-code.png | Bin
 2 files changed, 1 insertion(+), 1 deletion(-)
 rename README.d/upstream.png => general/qr-code.png (100%)

diff --git a/README.md b/README.md
index b77538dd..36408ec6 100644
--- a/README.md
+++ b/README.md
@@ -404,7 +404,7 @@ immediately remove the link in question.
 Upstream
 --------
 
-[![upstream](README.d/upstream.png)](https://rsc.eworm.de/)
+[![upstream](general/qr-code.png)](https://rsc.eworm.de/)
 
 URL:
 [GitHub.com](https://github.com/eworm-de/routeros-scripts#routeros-scripts)
diff --git a/README.d/upstream.png b/general/qr-code.png
similarity index 100%
rename from README.d/upstream.png
rename to general/qr-code.png

From a2250a00e61edda3dadf7b253dc606713e036f56 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 23:19:15 +0100
Subject: [PATCH 874/988] README: add the upstream url verbatim

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index 36408ec6..3c69017a 100644
--- a/README.md
+++ b/README.md
@@ -404,6 +404,8 @@ immediately remove the link in question.
 Upstream
 --------
 
+[rsc.eworm.de](https://rsc.eworm.de/)
+
 [![upstream](general/qr-code.png)](https://rsc.eworm.de/)
 
 URL:

From 97b4a41f238cbf6cb5417efa53a4ba7084356da1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Nov 2025 13:37:51 +0100
Subject: [PATCH 875/988] contrib/html: add empty lines...

... for easier rebasing.
---
 contrib/html.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/contrib/html.sh b/contrib/html.sh
index bbd8ba86..6942ecfb 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -3,7 +3,9 @@
 set -e
 
 sed "s|__TITLE__|$(head -n1 "${1}")|" < "${0}.d/head.html"
+
 markdown -f toc,idanchor "${1}" | sed \
 	-e 's/href="\([-_\./[:alnum:]]*\)\.md"/href="\1.html"/g' \
 	-e '/<h[1234] /s| id="\(.*\)">| id="\L\1">|'
+
 printf '</body></html>'

From d610bf3582664a1a8fb5943b53f388a046ce8e33 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Oct 2025 14:31:17 +0100
Subject: [PATCH 876/988] contrib/{logo-color,notification}: use a single style

---
 contrib/logo-color.d/style.css                | 5 -----
 contrib/logo-color.html                       | 2 +-
 contrib/notification.html                     | 4 ++--
 {contrib/notification.d => general}/style.css | 3 ++-
 4 files changed, 5 insertions(+), 9 deletions(-)
 delete mode 100644 contrib/logo-color.d/style.css
 rename {contrib/notification.d => general}/style.css (93%)

diff --git a/contrib/logo-color.d/style.css b/contrib/logo-color.d/style.css
deleted file mode 100644
index eb2ec6a1..00000000
--- a/contrib/logo-color.d/style.css
+++ /dev/null
@@ -1,5 +0,0 @@
-body {
-  font-family: fira-sans, sans-serif;
-  font-size: 10pt;
-  background-color: transparent;
-}
diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index 17942cea..507445bb 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -3,7 +3,7 @@
 <head>
 <meta charset="UTF-8">
 <title>RouterOS-Scripts Logo Color Changer</title>
-<link rel="stylesheet" type="text/css" href="logo-color.d/style.css">
+<link rel="stylesheet" type="text/css" href="../general/style.css">
 <script src="logo-color.d/script.js"></script>
 </head>
 <body>
diff --git a/contrib/notification.html b/contrib/notification.html
index 78750362..b7d6764d 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -3,8 +3,8 @@
 <head>
 <meta charset="UTF-8">
 <title>RouterOS-Scripts Notification Generator</title>
-<link rel="stylesheet" type="text/css" href="notification.d/style.css">
-<script src="notification.d/script.js"></script> 
+<link rel="stylesheet" type="text/css" href="../general/style.css">
+<script src="notification.d/script.js"></script>
 </head>
 <body>
 
diff --git a/contrib/notification.d/style.css b/general/style.css
similarity index 93%
rename from contrib/notification.d/style.css
rename to general/style.css
index 648ea23c..66d44f1c 100644
--- a/contrib/notification.d/style.css
+++ b/general/style.css
@@ -1,7 +1,8 @@
+/* stylesheet for RouterOS Scripts */
 body {
+  background-color: transparent;
   font-family: fira-sans, sans-serif;
   font-size: 10pt;
-  background-color: transparent;
 }
 div.notification {
   position: relative;

From a2d6671cf0db887dd25a122ccbf88d0709c6fb02 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Oct 2025 14:46:01 +0100
Subject: [PATCH 877/988] contrib/html: include stylesheet via link

---
 Makefile                    |  2 +-
 contrib/html.sh             |  7 ++++++-
 contrib/html.sh.d/head.html | 11 +----------
 general/style.css           | 32 ++++++++++++++++++++++++++++++++
 4 files changed, 40 insertions(+), 12 deletions(-)

diff --git a/Makefile b/Makefile
index d8f23876..b799535e 100644
--- a/Makefile
+++ b/Makefile
@@ -11,7 +11,7 @@ HTML = $(MARKDOWN:.md=.html)
 
 all: $(CAPSMAN) $(LOCAL) $(WIFI) $(HTML) checksums.json
 
-%.html: %.md contrib/html.sh contrib/html.sh.d/head.html
+%.html: %.md general/style.css contrib/html.sh contrib/html.sh.d/head.html
 	contrib/html.sh $< > $@
 
 %.capsman.rsc: %.template.rsc Makefile
diff --git a/contrib/html.sh b/contrib/html.sh
index 6942ecfb..6a32b5d7 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -2,7 +2,12 @@
 
 set -e
 
-sed "s|__TITLE__|$(head -n1 "${1}")|" < "${0}.d/head.html"
+RELTO="$(dirname "${1}")"
+
+sed \
+	-e "s|__TITLE__|$(head -n1 "${1}")|" \
+	-e "s|__STYLE__|$(realpath --relative-to="${RELTO}" general/style.css)|" \
+	< "${0}.d/head.html"
 
 markdown -f toc,idanchor "${1}" | sed \
 	-e 's/href="\([-_\./[:alnum:]]*\)\.md"/href="\1.html"/g' \
diff --git a/contrib/html.sh.d/head.html b/contrib/html.sh.d/head.html
index 1b1dd03a..50653ae6 100644
--- a/contrib/html.sh.d/head.html
+++ b/contrib/html.sh.d/head.html
@@ -1,15 +1,6 @@
 <!DOCTYPE html><html lang="en">
 <head><title>RouterOS Scripts :: __TITLE__</title>
 <meta http-equiv="content-type" content="text/html; charset=UTF-8">
-<style>
-  body { font-family: sans-serif; }
-  h2 { border-bottom: 1px solid #ccc; color: #000; }
-  a { text-decoration: none; }
-  a:hover { text-decoration: underline; }
-  blockquote { border-left: 4px solid #ccc; padding: 0 10px; color: #777; }
-  code { margin: 0 2px; padding: 2px 5px; border: 1px solid #ccc; background-color: #f8f8f8; border-radius: 3px; }
-  pre { background-color: #f8f8f8; border: 1px solid #ccc; overflow: auto; padding: 6px 10px; border-radius: 3px; }
-  pre code { margin: 0; padding: 0; border: 0; }
-</style>
+<link rel="stylesheet" type="text/css" href="__STYLE__">
 <link rel="icon" href="/logo.png" type="image/png">
 </head><body>
diff --git a/general/style.css b/general/style.css
index 66d44f1c..be67afae 100644
--- a/general/style.css
+++ b/general/style.css
@@ -4,6 +4,28 @@ body {
   font-family: fira-sans, sans-serif;
   font-size: 10pt;
 }
+h2 {
+  border-bottom: 1px solid #ccc;
+  color: #000;
+}
+a {
+  text-decoration: none;
+}
+a:hover {
+  text-decoration: underline;
+}
+blockquote {
+  border-left: 4px solid #ccc;
+  padding: 0 10px;
+  color: #777;
+}
+code {
+  margin: 0 2px;
+  padding: 2px 5px;
+  border: 1px solid #ccc;
+  background-color: #f8f8f8;
+  border-radius: 3px;
+}
 div.notification {
   position: relative;
   float: right;
@@ -31,6 +53,16 @@ p.hint {
 pre {
   font-family: fira-mono, monospace;
   white-space: pre-wrap;
+  background-color: #f8f8f8;
+  border: 1px solid #ccc;
+  overflow: auto;
+  padding: 6px 10px;
+  border-radius: 3px;
+}
+pre code {
+  margin: 0;
+  padding: 0;
+  border: 0;
 }
 span.link {
   color: #863600;

From fae8dbd8ea2c9e5a38634c2db97dcfcb7e3f9693 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Nov 2025 12:51:34 +0100
Subject: [PATCH 878/988] contrib/html: add a margin on left and right...

... for windows in landscape (wider than high). Also make the
notification float right for landscape only.
---
 general/style.css | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/general/style.css b/general/style.css
index be67afae..a9ede5e2 100644
--- a/general/style.css
+++ b/general/style.css
@@ -28,7 +28,7 @@ code {
 }
 div.notification {
   position: relative;
-  float: right;
+  float: none;
   width: 600px;
   border: 3px outset #6c5d53;
   /* border-radius: 5px; */
@@ -67,3 +67,12 @@ pre code {
 span.link {
   color: #863600;
 }
+@media only screen and (orientation: landscape) {
+  body {
+    margin-left: 10vw;
+    margin-right: 10vw;
+  }
+  div.notification {
+    float: right;
+  }
+}

From 2d6fdc355e7b5f97fb421c00e5ccc78dd51fbe7a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 10 Nov 2025 11:30:49 +0100
Subject: [PATCH 879/988] contrib/html: increase default line height

---
 general/style.css | 1 +
 1 file changed, 1 insertion(+)

diff --git a/general/style.css b/general/style.css
index a9ede5e2..ad25c7c6 100644
--- a/general/style.css
+++ b/general/style.css
@@ -3,6 +3,7 @@ body {
   background-color: transparent;
   font-family: fira-sans, sans-serif;
   font-size: 10pt;
+  line-height: 1.6;
 }
 h2 {
   border-bottom: 1px solid #ccc;

From a0399216fcf21797284bd281546ac6b47ef7b037 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Oct 2025 14:55:00 +0100
Subject: [PATCH 880/988] contrib/html: link the logo with relative path

---
 contrib/html.sh             | 1 +
 contrib/html.sh.d/head.html | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/contrib/html.sh b/contrib/html.sh
index 6a32b5d7..d4a1a904 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -7,6 +7,7 @@ RELTO="$(dirname "${1}")"
 sed \
 	-e "s|__TITLE__|$(head -n1 "${1}")|" \
 	-e "s|__STYLE__|$(realpath --relative-to="${RELTO}" general/style.css)|" \
+	-e "s|__LOGO__|$(realpath --relative-to="${RELTO}" logo.png)|" \
 	< "${0}.d/head.html"
 
 markdown -f toc,idanchor "${1}" | sed \
diff --git a/contrib/html.sh.d/head.html b/contrib/html.sh.d/head.html
index 50653ae6..779e246c 100644
--- a/contrib/html.sh.d/head.html
+++ b/contrib/html.sh.d/head.html
@@ -2,5 +2,5 @@
 <head><title>RouterOS Scripts :: __TITLE__</title>
 <meta http-equiv="content-type" content="text/html; charset=UTF-8">
 <link rel="stylesheet" type="text/css" href="__STYLE__">
-<link rel="icon" href="/logo.png" type="image/png">
+<link rel="icon" type="image/png" href="__LOGO__">
 </head><body>

From 2e0787afd12178c363aff9346a7f331fe7d1b4e4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Nov 2025 22:34:00 +0100
Subject: [PATCH 881/988] contrib/html: properly handle anchors

---
 contrib/html.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/html.sh b/contrib/html.sh
index d4a1a904..603e6068 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -11,7 +11,7 @@ sed \
 	< "${0}.d/head.html"
 
 markdown -f toc,idanchor "${1}" | sed \
-	-e 's/href="\([-_\./[:alnum:]]*\)\.md"/href="\1.html"/g' \
+	-e 's/href="\([-_\./[:alnum:]]*\)\.md\(#[-[:alnum:]]*\)\?"/href="\1.html\2"/g' \
 	-e '/<h[1234] /s| id="\(.*\)">| id="\L\1">|'
 
 printf '</body></html>'

From cbb282746fc3af91c8c872753a217c912ba307e6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 23:16:04 +0100
Subject: [PATCH 882/988] README: add a sub-section for code hosting

---
 README.md | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 3c69017a..59c695e7 100644
--- a/README.md
+++ b/README.md
@@ -408,12 +408,11 @@ Upstream
 
 [![upstream](general/qr-code.png)](https://rsc.eworm.de/)
 
-URL:
-[GitHub.com](https://github.com/eworm-de/routeros-scripts#routeros-scripts)
+### Code hosting
 
-Mirror:
-[eworm.de](https://git.eworm.de/cgit/routeros-scripts/about/)
-[GitLab.com](https://gitlab.com/eworm-de/routeros-scripts#routeros-scripts)
+* [git.eworm.de](https://git.eworm.de/cgit/routeros-scripts/about/)
+* [GitHub.com](https://github.com/eworm-de/routeros-scripts#routeros-scripts)
+* [GitLab.com](https://gitlab.com/eworm-de/routeros-scripts#routeros-scripts)
 
 ---
 [⬆️ Go back to top](#top)

From 719b662b76a3ad85455c1113d6f9c57f40f3300e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Nov 2025 22:57:17 +0100
Subject: [PATCH 883/988] contrib/html: drop ampersand, comma, dash,
 exclamation mark, ...

... parentesis & tick mark from id/anchor
---
 contrib/html.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/contrib/html.sh b/contrib/html.sh
index 603e6068..b1d25115 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -12,6 +12,7 @@ sed \
 
 markdown -f toc,idanchor "${1}" | sed \
 	-e 's/href="\([-_\./[:alnum:]]*\)\.md\(#[-[:alnum:]]*\)\?"/href="\1.html\2"/g' \
-	-e '/<h[1234] /s| id="\(.*\)">| id="\L\1">|'
+	-e '/<h[1234] /s| id="\(.*\)">| id="\L\1">|' \
+	-e '/<h[1234] /s|-2[1789cd]-||g' -e '/<h[1234] /s|--26-amp-3b-||g'
 
 printf '</body></html>'

From ceb6f2353ea92ddf50ccb6ffa11707e71dc7b61c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Oct 2025 15:19:32 +0100
Subject: [PATCH 884/988] contrib/*: unify html code

---
 contrib/html.sh.d/head.html      |  4 ++--
 contrib/logo-color.html          | 17 +++++++----------
 contrib/notification.html        | 17 +++++++----------
 doc/mod/notification-telegram.md |  2 +-
 4 files changed, 17 insertions(+), 23 deletions(-)

diff --git a/contrib/html.sh.d/head.html b/contrib/html.sh.d/head.html
index 779e246c..0ce3ff73 100644
--- a/contrib/html.sh.d/head.html
+++ b/contrib/html.sh.d/head.html
@@ -1,6 +1,6 @@
 <!DOCTYPE html><html lang="en">
-<head><title>RouterOS Scripts :: __TITLE__</title>
-<meta http-equiv="content-type" content="text/html; charset=UTF-8">
+<head><meta http-equiv="content-type" content="text/html; charset=UTF-8">
+<title>RouterOS Scripts :: __TITLE__</title>
 <link rel="stylesheet" type="text/css" href="__STYLE__">
 <link rel="icon" type="image/png" href="__LOGO__">
 </head><body>
diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index 507445bb..eb00492c 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -1,14 +1,12 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<title>RouterOS-Scripts Logo Color Changer</title>
+<!DOCTYPE html><html lang="en">
+<head><meta http-equiv="content-type" content="text/html; charset=UTF-8">
+<title>RouterOS Scripts :: Logo Color Changer</title>
 <link rel="stylesheet" type="text/css" href="../general/style.css">
+<link rel="icon" type="image/png" href="../logo.png">
 <script src="logo-color.d/script.js"></script>
-</head>
-<body>
+</head><body>
 
-<h1>RouterOS-Scripts Logo Color Changer</h1>
+<h1>Logo Color Changer</h1>
 
 <p>You want the logo for your own notifications? But you joined the
 <a href="https://t.me/routeros_scripts">Telegram Group</a> and want
@@ -36,5 +34,4 @@ for other browsers may differ.)</p>
 <a href="../../about/doc/mod/notification-telegram.md#set-a-profile-photo">Set
 a profile photo</a> for your Telegram bot.</p>
 
-</body>
-</html>
+</body></html>
diff --git a/contrib/notification.html b/contrib/notification.html
index b7d6764d..472ce48a 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -1,14 +1,12 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<title>RouterOS-Scripts Notification Generator</title>
+<!DOCTYPE html><html lang="en">
+<head><meta http-equiv="content-type" content="text/html; charset=UTF-8">
+<title>RouterOS Scripts :: Notification Generator</title>
 <link rel="stylesheet" type="text/css" href="../general/style.css">
+<link rel="icon" type="image/png" href="../logo.png">
 <script src="notification.d/script.js"></script>
-</head>
-<body>
+</head><body>
 
-<h1>RouterOS-Scripts Notification Generator</h1>
+<h1>Notification Generator</h1>
 
 <div class="notification">
   <img src="../logo.svg" alt="logo" class="logo" width=48 height=48>
@@ -31,5 +29,4 @@
 <p>Then right-click, click "<i>Take Screenshot</i>" and finally select the
 notification and download it.</p>
 
-</body>
-</html>
+</body></html>
diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index 804104fa..7d5092d3 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -107,7 +107,7 @@ chat with [BotFather ↗️](https://t.me/BotFather) and set it there.
 ![set profile photo](notification-telegram.d/setuserpic.avif)
 
 Have a look at my
-[RouterOS-Scripts Logo Color Changer](https://git.eworm.de/cgit/routeros-scripts/plain/contrib/logo-color.html)
+[Logo Color Changer](https://git.eworm.de/cgit/routeros-scripts/plain/contrib/logo-color.html)
 to create a colored version of this scripts' logo.
 
 See also

From 8faf4ab7cf9ad6313b1fe7903b9325c17827cfdc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Oct 2025 15:35:14 +0100
Subject: [PATCH 885/988] contrib/{logo-color,notification}: add navigation
 structure

---
 contrib/logo-color.html   | 6 ++++++
 contrib/notification.html | 6 ++++++
 2 files changed, 12 insertions(+)

diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index eb00492c..8ee1ba95 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -8,6 +8,8 @@
 
 <h1>Logo Color Changer</h1>
 
+<p><a href="../README.md">⬅️ Go back to main README</a></p>
+
 <p>You want the logo for your own notifications? But you joined the
 <a href="https://t.me/routeros_scripts">Telegram Group</a> and want
 something that differentiates? Color it!</p>
@@ -34,4 +36,8 @@ for other browsers may differ.)</p>
 <a href="../../about/doc/mod/notification-telegram.md#set-a-profile-photo">Set
 a profile photo</a> for your Telegram bot.</p>
 
+<hr />
+
+<p><a href="../README.md">⬅️ Go back to main README</a><br/>
+<a href="#top">⬆️ Go back to top</a></p>
 </body></html>
diff --git a/contrib/notification.html b/contrib/notification.html
index 472ce48a..3bc86fcb 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -8,6 +8,8 @@
 
 <h1>Notification Generator</h1>
 
+<p><a href="../README.md">⬅️ Go back to main README</a></p>
+
 <div class="notification">
   <img src="../logo.svg" alt="logo" class="logo" width=48 height=48>
   <div class="content">
@@ -29,4 +31,8 @@
 <p>Then right-click, click "<i>Take Screenshot</i>" and finally select the
 notification and download it.</p>
 
+<hr />
+
+<p><a href="../README.md">⬅️ Go back to main README</a><br/>
+<a href="#top">⬆️ Go back to top</a></p>
 </body></html>

From eb89f8359b4e8c387144330a435841430e85feab Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Oct 2025 16:06:42 +0100
Subject: [PATCH 886/988] contrib/notification: update date format

---
 contrib/notification.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/contrib/notification.html b/contrib/notification.html
index 3bc86fcb..c86450cf 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -16,7 +16,7 @@
   <p id="heading" class="heading">[<span id="hostname">MikroTik</span>] <span id="subject">ℹ️  Subject</span></p>
   <pre id="message">Message</pre>
   <p id="link" class="hint">🔗 <span id="link-text" class="link">https://eworm.de/</span></p>
-  <p id="queued" class="hint">⏰ This message was queued since <span id="queued-since">oct/18/2022 18:30:48</span> and may be obsolete.</p>
+  <p id="queued" class="hint">⏰ This message was queued since <span id="queued-since">2025-10-29 16:06:18</span> and may be obsolete.</p>
   <p id="cut" class="hint">✂️ The message was too long and has been truncated, cut off <span id="cut-percent">13</span>%!</p>
   </div>
 </div>
@@ -25,7 +25,7 @@
 <p>Subject: <input type="text" size=50 value="ℹ️  Subject" onchange="update(this, 'subject')"></p>
 <p>Message: <textarea id="w3review" name="w3review" rows="4" cols="50" onchange="update(this, 'message')">Message</textarea></p>
 <p><input type="checkbox" onclick="visible(this, 'link')"> Show link: <input type="text" value="https://eworm.de/" onchange="update(this, 'link-text')"></p>
-<p><input type="checkbox" onclick="visible(this, 'queued')"> Queued since <input type="text" value="oct/18/2022 18:30:48" onchange="update(this, 'queued-since')"></p>
+<p><input type="checkbox" onclick="visible(this, 'queued')"> Queued since <input type="text" value="2025-10-29 16:06:18" onchange="update(this, 'queued-since')"></p>
 <p><input type="checkbox" onclick="visible(this, 'cut')"> Cut-off with <input type="number" min=1 max=99 value=13 onchange="update(this, 'cut-percent')"> percent</p>
 
 <p>Then right-click, click "<i>Take Screenshot</i>" and finally select the

From 8d68f24095c8aeb0b14720d048a8493c996cf4e6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Oct 2025 16:11:23 +0100
Subject: [PATCH 887/988] contrib/notification: format the values italic

---
 contrib/notification.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/contrib/notification.html b/contrib/notification.html
index c86450cf..a4d04864 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -16,8 +16,8 @@
   <p id="heading" class="heading">[<span id="hostname">MikroTik</span>] <span id="subject">ℹ️  Subject</span></p>
   <pre id="message">Message</pre>
   <p id="link" class="hint">🔗 <span id="link-text" class="link">https://eworm.de/</span></p>
-  <p id="queued" class="hint">⏰ This message was queued since <span id="queued-since">2025-10-29 16:06:18</span> and may be obsolete.</p>
-  <p id="cut" class="hint">✂️ The message was too long and has been truncated, cut off <span id="cut-percent">13</span>%!</p>
+  <p id="queued" class="hint">⏰ This message was queued since <i><span id="queued-since">2025-10-29 16:06:18</span></i> and may be obsolete.</p>
+  <p id="cut" class="hint">✂️ The message was too long and has been truncated, cut off <i><span id="cut-percent">13</span>%</i>!</p>
   </div>
 </div>
 

From 5986894749a5de9c589f2269ab9ecac174f304f7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 16:25:01 +0100
Subject: [PATCH 888/988] doc/mod/notification-telegram: use relative reference
 in link

This may break, depending on site.
---
 doc/mod/notification-telegram.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index 7d5092d3..bdf1331b 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -106,8 +106,7 @@ chat with [BotFather ↗️](https://t.me/BotFather) and set it there.
 
 ![set profile photo](notification-telegram.d/setuserpic.avif)
 
-Have a look at my
-[Logo Color Changer](https://git.eworm.de/cgit/routeros-scripts/plain/contrib/logo-color.html)
+Have a look at my [Logo Color Changer](../../contrib/logo-color.html)
 to create a colored version of this scripts' logo.
 
 See also

From 036c6ef68266d599747dfe59eab5f96c5fa4a388 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 16:27:59 +0100
Subject: [PATCH 889/988] contrib/logo-color: use relative reference in link

... without extra path elements.

This may break, depending on site.
---
 contrib/logo-color.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index 8ee1ba95..9962e999 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -33,7 +33,7 @@ logo and download it.</p>
 for other browsers may differ.)</p>
 
 <p>See how to
-<a href="../../about/doc/mod/notification-telegram.md#set-a-profile-photo">Set
+<a href="../doc/mod/notification-telegram.md#set-a-profile-photo">Set
 a profile photo</a> for your Telegram bot.</p>
 
 <hr />

From 148d40e18d5bd7f2309b06428c2ca85a0f5cb793 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 16:26:05 +0100
Subject: [PATCH 890/988] contrib: introduce Makefile...

... and update references in links.
---
 contrib/Makefile | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 contrib/Makefile

diff --git a/contrib/Makefile b/contrib/Makefile
new file mode 100644
index 00000000..aae31786
--- /dev/null
+++ b/contrib/Makefile
@@ -0,0 +1,10 @@
+# Makefile
+
+HTML	:= $(wildcard *.html)
+
+.PHONY: all docs
+
+all: docs
+
+docs: $(HTML)
+	sed -i '/href=/s|\.md|\.html|' $(HTML)

From 607a608502c4f38a51c4679d6162c15a52332bab Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 23:40:27 +0100
Subject: [PATCH 891/988] doc/mod/notification-telegram: hint on possibly
 broken link

---
 doc/mod/notification-telegram.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index bdf1331b..f464ff0f 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -109,6 +109,10 @@ chat with [BotFather ↗️](https://t.me/BotFather) and set it there.
 Have a look at my [Logo Color Changer](../../contrib/logo-color.html)
 to create a colored version of this scripts' logo.
 
+> 💡️ **Hint**: The above link may be broken on code hosting sites.
+> Use [Logo Color Changer](https://rsc.eworm.de/main/contrib/logo-color.html)
+> instead.
+
 See also
 --------
 

From 1ce3160933ee70a3cc6264139247f6b668ae0b3b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 23:59:08 +0100
Subject: [PATCH 892/988] contrib/html: hide the hint on broken link

---
 contrib/html.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/contrib/html.sh b/contrib/html.sh
index b1d25115..09064ba8 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -13,6 +13,7 @@ sed \
 markdown -f toc,idanchor "${1}" | sed \
 	-e 's/href="\([-_\./[:alnum:]]*\)\.md\(#[-[:alnum:]]*\)\?"/href="\1.html\2"/g' \
 	-e '/<h[1234] /s| id="\(.*\)">| id="\L\1">|' \
-	-e '/<h[1234] /s|-2[1789cd]-||g' -e '/<h[1234] /s|--26-amp-3b-||g'
+	-e '/<h[1234] /s|-2[1789cd]-||g' -e '/<h[1234] /s|--26-amp-3b-||g' \
+	-e '/The above link may be broken on code hosting sites/s|blockquote|blockquote style="display: none;"|'
 
 printf '</body></html>'

From cbb0aba1b1ea8b40cec99643de2cfb6f6a933bc9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 23:51:05 +0100
Subject: [PATCH 893/988] contrib/logo-color: hint on possibly broken site

---
 contrib/logo-color.html | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index 9962e999..f05f4bb6 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -10,6 +10,11 @@
 
 <p><a href="../README.md">⬅️ Go back to main README</a></p>
 
+<blockquote style="/*! display */"><p>💡️ <strong>Hint</strong>: This site or links
+on it may be broken on code hosting sites. Use
+<a href="https://rsc.eworm.de/main/contrib/logo-color.html">Logo Color Changer</a>
+instead.</p></blockquote>
+
 <p>You want the logo for your own notifications? But you joined the
 <a href="https://t.me/routeros_scripts">Telegram Group</a> and want
 something that differentiates? Color it!</p>

From b16c2f5b90170a81c30f5b98666264b020e3ac7f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 23:52:58 +0100
Subject: [PATCH 894/988] contrib/notification: hint on possibly broken site

---
 contrib/notification.html | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/contrib/notification.html b/contrib/notification.html
index a4d04864..3ff87541 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -10,6 +10,11 @@
 
 <p><a href="../README.md">⬅️ Go back to main README</a></p>
 
+<blockquote style="/*! display */"><p>💡️ <strong>Hint</strong>: This site or links
+on it may be broken on code hosting sites. Use
+<a href="https://rsc.eworm.de/main/contrib/notification.html">Notification Generator</a>
+instead.</p></blockquote>
+
 <div class="notification">
   <img src="../logo.svg" alt="logo" class="logo" width=48 height=48>
   <div class="content">

From 165d7c60d4d156484cc106b4271ade78ab97a026 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 22:08:11 +0100
Subject: [PATCH 895/988] contrib/html: add a head with eworm, QR code and
 caption

---
 contrib/html.sh             |   2 ++
 contrib/html.sh.d/head.html |   9 +++++++++
 general/eworm-meadow.avif   | Bin 0 -> 3922 bytes
 general/style.css           |  12 ++++++++++++
 4 files changed, 23 insertions(+)
 create mode 100644 general/eworm-meadow.avif

diff --git a/contrib/html.sh b/contrib/html.sh
index 09064ba8..0b89724a 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -8,6 +8,8 @@ sed \
 	-e "s|__TITLE__|$(head -n1 "${1}")|" \
 	-e "s|__STYLE__|$(realpath --relative-to="${RELTO}" general/style.css)|" \
 	-e "s|__LOGO__|$(realpath --relative-to="${RELTO}" logo.png)|" \
+	-e "s|__EWORM__|$(realpath --relative-to="${RELTO}" general/eworm-meadow.avif)|" \
+	-e "s|__QR_CODE__|$(realpath --relative-to="${RELTO}" general/qr-code.png)|" \
 	< "${0}.d/head.html"
 
 markdown -f toc,idanchor "${1}" | sed \
diff --git a/contrib/html.sh.d/head.html b/contrib/html.sh.d/head.html
index 0ce3ff73..da541579 100644
--- a/contrib/html.sh.d/head.html
+++ b/contrib/html.sh.d/head.html
@@ -4,3 +4,12 @@
 <link rel="stylesheet" type="text/css" href="__STYLE__">
 <link rel="icon" type="image/png" href="__LOGO__">
 </head><body>
+
+<table><tr>
+  <td><img src="__EWORM__" alt="eworm on meadow" /></td>
+  <td><img src="__QR_CODE__" alt="QR code: rsc.eworm.de" /></td>
+  <td class="head"><span class="top">RouterOS Scripts</span><br />
+    <span class="bottom">a collection of scripts for MikroTik RouterOS</span></td>
+</tr></table>
+<hr />
+
diff --git a/general/eworm-meadow.avif b/general/eworm-meadow.avif
new file mode 100644
index 0000000000000000000000000000000000000000..f592d59b86c9d178954a09bfb30dd7b6268a3a0b
GIT binary patch
literal 3922
zcmYLF1y~c@_ufWLN>a*6w}Nyy=?*0&MaGyg*kHhzgtWvEBqfy;KR`x_bSW(iK?w<o
zfg+6xs4(F_{QlqbJI{0Pd(L^^bI-X4000Qw#Rg+wIOJUb#m*3oyeo%B!tR=D%V`4u
zz+^N63p?W|CgJIh^8eQb05C{6_CNm&QAoG{o?*ryvFN`XkaAx}qI}_Jksbg50-R+i
z2XqPmFj`aMzY*{i1xzTu4if3}capyhFC{>nNzN)@xT|uyz9`?n1N@Jn&}WP`3gZbo
zQ}QDH5&ymb05HP>gHV5ao^|a(V*D`_e2T=teJRL+48R~LcxJBue^@ZcAmmws3JeBQ
zfDwk1(~T0KcmM!9+!y8V14ji>reOlmMp9CgkNztM{!a|JcqUe*wAMXy0{wl|(HMls
z-%Cdwj)Y^>1A+sv2y}otMT0~kVgAADu>Z!tgv6l#{)19VSr#=A6hjRFQ3Gk>=l}qw
zGPFAk%LbsQ<>skbgjvXUfb=YY)Ex6Ds>JnOG(jX2vRlS4s+b$y;%F=eYJoEH2hfR^
z-U!MaFr9OdW1}IMHN93=ZZ<=cz7wSLrmKc|43RD8_yW~rD=v+gJ$)U7low0UD@}o3
z@f);9@r57Lw~;!N53>O7+Sj#n)w->Cy@|U7hd1wE1Ktw-jbxY)B4~i=Ya90oX|%6#
znw?R#QLI_w?A!dCG^Mmo)d@m0<zwWo%9j4)Ma!%fWm8(PrSuh9#|$b+o>1q_t4zw7
zHwl0Ch!In<zk}W=7zR0^A=gs)ULMRd(7M9xeN5LgbUthPle0&jyJ$~*`f(cFurMQH
z3Qv6kEL3&-EF`sLw_MYRY^GDp3f!4S&Ih{z4<fRK?N`j>h<EAvWI``ks&QHm%D9=y
z>5rS=1839jp?GK4uG|1>n6l&B_b8h@r+T(YAQNq>d=EEkDlm>4ru9ju0MR@Fgivc1
zRrRu4lD4g;ryLh!OHU?Ppkm$1W*H-?FCMHe^YdtCS)m0xR13xk)@FN6@?P$}uJPe~
zFugBBe$TJe1am1?T~_UNl2LfH_<?Q&Y8Ge65$>$jP`46h>fHA+XxX|Oe-FMGpYe!h
zW{BLb910$sCR{6EB@5qtwFwpsviWMrQcd5Q+rk~F=WqgkJuN~=_*y6u#Wf)xf5G{D
z-|V|F?RX_!54e~1Wc{14!<yHsnTzj=G?7692Pr#L4;znb)z63MY)&^TgG6SwnwJM>
zk1u84%3UUyAJ=zp3hqY@a`AZ7(@la-sq3Wpq)Wp|Iy9Aqo?j}Vt|!&wOz0na68O=^
zET<E{i-u-1#YW`V!=x8;R`a=O%a1)I8}b`a5=%Bj8)=3=`Mxgh);|qlZ4YhP<>AZ6
zVn_6M$bJc-K_(-Q-6Gia2Wj1>7t*d1y5y6hRrF-5o?&cx$&#3>*9tv5k8f*QwMX$i
z>=B7~^)%F~!&LGjlHN<rAd<hGzklV`wIogOOW`N@2iE-pMHi2|5zj=e=w9xa#P05P
zd;V}+ai{U=5!O^4AE|P2WRgyv`EE;~FJE-c)w_CIJg<MN!U06ud)`^l!a|R#u2i~h
zw2Uq0PIeW1P#2wH(ADAHxMy_8Wnr7U^^;FaB6$)yHow1BdPCR~FE5HbH3q+Fb#e0x
zv&mWQc)C=YT`scT0u90C2kKwExSFV8T%h}~`}|#Vg#(ArOv$VsFT|eh3f6U5Z%^==
zXYv003DXLnk4X+{`J%^--;cKsJ<pGuU{Lt5{M%}`$*ra)5*1(T!lgat9gt3h#>}NN
z=X~biO#KG(pvg;e%hvWu0(RNm?gNEGljdeDCLd?+nf0b0@kD7y5HQVhc&9WsJbGvX
zM$7n!hb1v%U#ZwSlgj0lMSiTu^XUt+>E;GEnFqBu5lv=p_hx7a&Zxks0<>`7U9x^=
zdO29nMuT~&@r(WV!i<}Lo}Iy(MFcKyFZfG;a(DyBhdp-RG5j4G$0GFoB5YP!8E2Du
z_vEnhC*9>Z9pIeTst~tbK_@g$t(v;eQc$*8_vwjud{dt4+^grdYYGtOOxpmB^TVDG
zua#N0<r_B<S29u~Kd<DJ)bG?K4hZo{W7Hfz#dHj8cA~5JLRyY2W4?}SfCRqfJJ4SH
zMPtCLkL?!$_)nU88#97_)K=l9?v|StDCSP?nN<f*W4kP{wxYvekj{6~{g-MNrDb%h
zytE?ot#oC4TJhiUR4qG}1wWknZ_vBRI<ZUPGKstnDk;EYk4;4O(sg|9^%Hki;q}if
zmI8COY=8LjUi6To`$%oI%Fl<pAo|6e=Po@=&E2V0=~eItd3^|C2$ZP{Bb1NC&h~wr
zct`KI&a8stQ14~e(d|-_Sm+c+?5?DpoYL05_^tJ|auVCqZkNN^{`wE!LBa#=ibwuF
zh)J}~!DT<wDoB#Ngi|*iQ%GTSXTlBiJZbS|gN<R_@u|ol@y_6B4MK`8P<~H{f7^iR
z(xUPK19CFcIEz+j7LxfhsS%Mz=wye2`gObyMRE2iZp!8<r+1nxiUKv-%08VdSjOKL
z#>JOKy**5nO_0al^n38UP~${d?Fq4E>$_O^*PF8DRw+`yTO~t5&WwVyw5FRMO`e^E
z3%*~bkH865@dhfn7ql?}+P2amC?+t;+q>}2QU+GD)hXs)+~=^vTNNR+Q3KsB#%e6p
zm<#aBwexODQ1jLGz=E#M1#|hBl9ZcsHO$)bV8!*`$9V>w0c5$^g7UT3^hNwa8_Y*|
z`jjR9`khx*i?me!Tg3CZFR#}|Pk>&v8C8wH>nPVTXz$EUF6c<-A30sIqnmJG_bg0+
z_>C6DkWbhB(v=I}i#~G@VU#mAel@qYF~0h;;75xP8<pTD+M~<`%o`u=B4bs-O#LKw
zJkm&TON=2>YSndxcng>z6EbIHUyGJ1*qo@fjjAP+CM~Xot;!zciZ2XHEJ|8g|FKkY
zrGBGU_8KZ}BEXURezrx8qgr)HVE><8g=xPL{aG_xoby;htE{zxo%$O0epkjS%P%We
zcvvgQ@thVR=*#NrpdsK*^Y>XEA%VA&$$WR$QX6}iyrkv=?rg*eiur?}pz%bNEYBw-
zh~b=Iub%|*=7eZzr}p^0_z9>&@tr@<SvB|}AB!6QDK9(r+95jK`SFl_%B{qdN6YIG
zT@DA;{nQZAatx&7?dlYlrE%H;cKnWL?E8Wb(Du8$@4_UZTod$)du{H-ibGN81rUSD
ztcg1(X6mi`C^K7&lD5_@PpLLGu>tWchsFy>T;|~})#>|zq8SoAvXeFZ&Y<)CD@A?Q
zDMC2Lu>-$hwQa^tI3cSpzBz=&B_4kS@MhUy#~&$mAJ|i=by!F1Q{Tpc3CN)bFZvz&
z0id+V+S%LfxzaTuHf20h)zRkYZ(+EB^!;k+m(gappe3#}?i=FE)v(JABF<*F0vjR8
z%qq-l<c9lH?MzP6&n<@bB8dT13=QWvB_BCP4AUpp)ar2*?G6h~ZVg*R|BR?rK?K?v
zR9MWCp87K1S@l(^s(O1PhN?nj43&|+NjK29Z7cYjX1OfVUa^QgD$KYg{e#qT!;=Oq
zUbOzTw+M!+$sHP`3nw`G9aU;Jj}BlDE<+m~-pr>?zn#Bug|RB~0b>WpzE0r1sKzxN
ztwdfaaoWsLci6AgDg2v|(>n7scI&}8^7a!ty_r9>$TrioWj?S)L!R<7>sU##2Ms?&
zH8T)!wddJzb>{T=V11iTO$1xNcHM6{(^ah%R82VHT?zhk@z13gdCwZV?F~_W3z<N#
zn2DC+X{>KpIAq0WiI;;(oK!K466YqwXqtpEU;!#@ta2V+R{O=6c1dLwy9}M0g?N`y
zDK6-Yc4RmDkd-r9pBePkc7>W;W_wF@mbNU1*w5E15wmbYTjt0ce49PP*EKg+_Rr&F
zMH}Xw>jeyTtl^vq9mk<*%jh5K$hfNZQXd9TRO9#hIvQ{WVt~aaIxjd;<)pAcK~knA
z=YSMjHzrv!A)UEXtN2e<qSrPlft8SwM@8<`fVOn3<UL|>BPPKmD@2`N{Nvk%5EBEC
z_ZTdxyA=!r2;HF$1L1oa`8^-AnguJ3OnRe#F~<qCeP7ekFUZ)(CVcA2o~7Evs*{-=
zdes-5O<AQPx|K-4$9w8aDo*F5_jQC!5}SSEqPB-dg3C&x365(!l8Oo%&Ec>%I_Z1$
zo6v!ue8s!Ua}GhNzjIeL`xp31?WnBSIip`q_a0r70va&zjqHeAeEgxg$LWW7Dp*vv
zM8~ptlrggE@t>d$8GGE#4OT_Z_evkiAIhgW5AZsD;PMey5-6$Q&mISVXOx`eZdUkk
z?L@VHvUB@>@=~9`_C=4!@GVI=|JeNiA%#7LO73NnSQ0?|TpKx3Vtqa}ncpjsVCp3L
z?6^NkVnde>?fJ9;V&xxebh!TxzF(?Bh`Bc1dT_Nerw!t2aDz^%fBL?kB)Dlat#9CF
zDKgSt*j0}7QTCMFm$%+(I~k@&H9%j)l+LEIqVv^RdCJsza5rJaf2cJQXc=Bait?H}
z{24V>TZ?16u1Xa`?(@nwZ9vDrchh}~SFe`;Bk)nrFF(0LzCT}2nGoVsyYW+deaD^8
zbz%GAMu}nm)gtqpp_n$62u}GI^xLk*TQ^#?7?vP!6iPO`@M)7IsVJ|*UnAF_7P-C9
zUZk%m6Lu`!_iA(H%{~_tcwFYc)AH;3=a^?lY=!4P*^pglrGG*DgvBL88}i2Hg7P2i
zMe7;A+dUM#3{R;P;tEAPVY$Asdc2SE_n3*nCm$ZjnZH9cnvJL)hzwog<Z=8q9)IXq
zi%JnEgfxHmT3ndR@zzt~uQj<?-{9%3ymy;eoxkM<H0=-~zUETmX&y7=5A~X>Rv5`9
zeBOB4NH4sT8JE;((C)+rPtM`GLi4*X>YL=ZIiMdORWUKm&vmrh^=imbGg&0(v4(hP
z?AMdUZ~ah_c_u-lR`-otGNY+kO<(=ZGx~zPJb7e4Zb;x5e1^Lp1u9+mUC)=FmWK?R
zlFTrvD8CPwy#SGP5t8<e$-_aCA6a%u5wOsFAWU6f4$sT2X)#>+;MFhxu4cOEb_-Eh
Ol=-JRBU@RH*#86W_XlVI

literal 0
HcmV?d00001

diff --git a/general/style.css b/general/style.css
index ad25c7c6..018ccc49 100644
--- a/general/style.css
+++ b/general/style.css
@@ -68,6 +68,18 @@ pre code {
 span.link {
   color: #863600;
 }
+td.head {
+  line-height: 1.2;
+  padding: 0 2em;
+}
+td.head .top {
+  font-size: 250%;
+  font-weight: bold;
+}
+td.head .bottom {
+  font-size: 125%;
+  color: #555;
+}
 @media only screen and (orientation: landscape) {
   body {
     margin-left: 10vw;

From 7b45bb5b46a9cc63d3f32f45610ba010c485b304 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 23:56:16 +0100
Subject: [PATCH 896/988] contrib/Makefile: hide the hint on broken site

---
 contrib/Makefile | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/contrib/Makefile b/contrib/Makefile
index aae31786..cdb9f4cd 100644
--- a/contrib/Makefile
+++ b/contrib/Makefile
@@ -7,4 +7,7 @@ HTML	:= $(wildcard *.html)
 all: docs
 
 docs: $(HTML)
-	sed -i '/href=/s|\.md|\.html|' $(HTML)
+	sed -i \
+		-e '/href=/s|\.md|\.html|' \
+		-e '/blockquote/s|/\*! display \*/|display: none;|' \
+		 $(HTML)

From 75692abf4794b6950cb42288dbf2e104a2e797fe Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 23:26:37 +0100
Subject: [PATCH 897/988] contrib/logo-color: add a head with eworm, QR code
 and caption

---
 contrib/logo-color.html | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index f05f4bb6..3aca3248 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -6,6 +6,14 @@
 <script src="logo-color.d/script.js"></script>
 </head><body>
 
+<table><tr>
+  <td><img src="../general/eworm-meadow.avif" alt="eworm on meadow" /></td>
+  <td><img src="../general/qr-code.png" alt="QR code: rsc.eworm.de" /></td>
+  <td class="head"><span class="top">RouterOS Scripts</span><br />
+    <span class="bottom">a collection of scripts for MikroTik RouterOS</span></td>
+</tr></table>
+<hr />
+
 <h1>Logo Color Changer</h1>
 
 <p><a href="../README.md">⬅️ Go back to main README</a></p>

From b4e6cc5b590ede01c67726cce5bef12e6aca9420 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 23:27:09 +0100
Subject: [PATCH 898/988] contrib/notification: add a head with eworm, QR code
 and caption

---
 contrib/notification.html | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/contrib/notification.html b/contrib/notification.html
index 3ff87541..902d328f 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -6,6 +6,14 @@
 <script src="notification.d/script.js"></script>
 </head><body>
 
+<table><tr>
+  <td><img src="../general/eworm-meadow.avif" alt="eworm on meadow" /></td>
+  <td><img src="../general/qr-code.png" alt="QR code: rsc.eworm.de" /></td>
+  <td class="head"><span class="top">RouterOS Scripts</span><br />
+    <span class="bottom">a collection of scripts for MikroTik RouterOS</span></td>
+</tr></table>
+<hr />
+
 <h1>Notification Generator</h1>
 
 <p><a href="../README.md">⬅️ Go back to main README</a></p>

From d1fa3facfdbf09ff09fc572b79dd8099e069415a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 6 Nov 2025 17:32:37 +0100
Subject: [PATCH 899/988] Makefile: clean up and add phony targets

---
 Makefile | 25 ++++++++++++++++---------
 1 file changed, 16 insertions(+), 9 deletions(-)

diff --git a/Makefile b/Makefile
index b799535e..f841ca2b 100644
--- a/Makefile
+++ b/Makefile
@@ -2,18 +2,28 @@
 #  template scripts -> final scripts
 #  markdown files -> html files
 
-CAPSMAN = $(wildcard *.capsman.rsc)
-LOCAL = $(wildcard *.local.rsc)
-WIFI = $(wildcard *.wifi.rsc)
+ALL_RSC		:= $(wildcard *.rsc */*.rsc)
+GEN_RSC		:= $(wildcard *.capsman.rsc *.local.rsc *.wifi.rsc)
 
-MARKDOWN = $(wildcard *.md doc/*.md doc/mod/*.md)
-HTML = $(MARKDOWN:.md=.html)
+MARKDOWN	:= $(wildcard *.md doc/*.md doc/mod/*.md)
+HTML		:= $(MARKDOWN:.md=.html)
 
-all: $(CAPSMAN) $(LOCAL) $(WIFI) $(HTML) checksums.json
+.PHONY: all checksums docs rsc clean
+
+all: checksums docs rsc
+
+checksums: checksums.json
+
+checksums.json: contrib/checksums.sh $(ALL_RSC)
+	contrib/checksums.sh > $@
+
+docs: $(HTML)
 
 %.html: %.md general/style.css contrib/html.sh contrib/html.sh.d/head.html
 	contrib/html.sh $< > $@
 
+rsc: $(GEN_RSC)
+
 %.capsman.rsc: %.template.rsc Makefile
 	sed -e '/\/interface\/wifi\//d' -e '/\/interface\/wireless\//d' -e 's|%TEMPL%|.capsman|' \
 		-e '/^# NOT \/caps-man\/ #$$/,/^# NOT \/caps-man\/ #$$/d' \
@@ -32,8 +42,5 @@ all: $(CAPSMAN) $(LOCAL) $(WIFI) $(HTML) checksums.json
 		-e '/^# !!/,/^# !!/c # !! Do not edit this file, it is generated from template!' \
 		< $< > $@
 
-checksums.json: contrib/checksums.sh *.rsc */*.rsc
-	contrib/checksums.sh > $@
-
 clean:
 	rm -f $(HTML) checksums.json

From edd51ca71905851f4a202ac3129391a8c0615047 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Nov 2025 17:22:30 +0100
Subject: [PATCH 900/988] contrib/html: add a footer with date and version info

---
 Makefile                    | 6 +++++-
 contrib/html.sh             | 5 ++++-
 contrib/html.sh.d/foot.html | 4 ++++
 general/style.css           | 4 ++++
 4 files changed, 17 insertions(+), 2 deletions(-)
 create mode 100644 contrib/html.sh.d/foot.html

diff --git a/Makefile b/Makefile
index f841ca2b..ecb25bc9 100644
--- a/Makefile
+++ b/Makefile
@@ -8,6 +8,10 @@ GEN_RSC		:= $(wildcard *.capsman.rsc *.local.rsc *.wifi.rsc)
 MARKDOWN	:= $(wildcard *.md doc/*.md doc/mod/*.md)
 HTML		:= $(MARKDOWN:.md=.html)
 
+DATE		?= $(shell date --rfc-email)
+VERSION		?= $(shell git symbolic-ref --short HEAD 2>/dev/null)/$(shell git rev-list --count HEAD 2>/dev/null)/$(shell git rev-parse --short=8 HEAD 2>/dev/null)
+export DATE VERSION
+
 .PHONY: all checksums docs rsc clean
 
 all: checksums docs rsc
@@ -19,7 +23,7 @@ checksums.json: contrib/checksums.sh $(ALL_RSC)
 
 docs: $(HTML)
 
-%.html: %.md general/style.css contrib/html.sh contrib/html.sh.d/head.html
+%.html: %.md general/style.css contrib/html.sh contrib/html.sh.d/head.html contrib/html.sh.d/foot.html
 	contrib/html.sh $< > $@
 
 rsc: $(GEN_RSC)
diff --git a/contrib/html.sh b/contrib/html.sh
index 0b89724a..2fe9ef77 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -18,4 +18,7 @@ markdown -f toc,idanchor "${1}" | sed \
 	-e '/<h[1234] /s|-2[1789cd]-||g' -e '/<h[1234] /s|--26-amp-3b-||g' \
 	-e '/The above link may be broken on code hosting sites/s|blockquote|blockquote style="display: none;"|'
 
-printf '</body></html>'
+sed \
+	-e "s|__DATE__|${DATE:-$(date --rfc-email)}|" \
+	-e "s|__VERSION__|${VERSION:-unknown}|" \
+	< "${0}.d/foot.html"
diff --git a/contrib/html.sh.d/foot.html b/contrib/html.sh.d/foot.html
new file mode 100644
index 00000000..106c2bd0
--- /dev/null
+++ b/contrib/html.sh.d/foot.html
@@ -0,0 +1,4 @@
+
+<p class="foot">RouterOS Scripts documentation generated on <i>__DATE__</i> for <i>__VERSION__</i></p>
+
+</body></html>
diff --git a/general/style.css b/general/style.css
index 018ccc49..73b09214 100644
--- a/general/style.css
+++ b/general/style.css
@@ -43,6 +43,10 @@ img.logo {
   float: left;
   border-radius: 50%;
 }
+p.foot {
+  color: #777;
+  text-align: center;
+}
 p.heading {
   margin: 0px;
   font-weight: bold;

From 82587ec589b7c9f6a1639d05f002ad18c8540192 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 11:21:51 +0100
Subject: [PATCH 901/988] contrib/html: add copyright notice in footer

---
 contrib/html.sh.d/foot.html | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/contrib/html.sh.d/foot.html b/contrib/html.sh.d/foot.html
index 106c2bd0..d3041520 100644
--- a/contrib/html.sh.d/foot.html
+++ b/contrib/html.sh.d/foot.html
@@ -1,4 +1,5 @@
 
-<p class="foot">RouterOS Scripts documentation generated on <i>__DATE__</i> for <i>__VERSION__</i></p>
+<p class="foot">RouterOS Scripts documentation generated on <i>__DATE__</i> for <i>__VERSION__</i><br />
+Copyright &copy; 2013-2025 Christian Hesse &lt;mail@eworm.de&gt;</p>
 
 </body></html>

From f3afee3e4b29068847d1713fe6c1689620ce4d8d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Nov 2025 23:03:58 +0100
Subject: [PATCH 902/988] fw-addr-lists.d/{allow,block}: use short url
 rsc.eworm.de

---
 fw-addr-lists.d/allow | 2 +-
 fw-addr-lists.d/block | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/fw-addr-lists.d/allow b/fw-addr-lists.d/allow
index 8b59ed7c..f0239cde 100644
--- a/fw-addr-lists.d/allow
+++ b/fw-addr-lists.d/allow
@@ -1,3 +1,3 @@
 # an ip address list for use with fw-addr-lists script
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/fw-addr-lists.md
+# https://rsc.eworm.de/doc/fw-addr-lists.md
 git.eworm.de
diff --git a/fw-addr-lists.d/block b/fw-addr-lists.d/block
index 5e9fef29..86a6c626 100644
--- a/fw-addr-lists.d/block
+++ b/fw-addr-lists.d/block
@@ -1,5 +1,5 @@
 # an ip address list for use with fw-addr-lists script
-# https://git.eworm.de/cgit/routeros-scripts/about/doc/fw-addr-lists.md
+# https://rsc.eworm.de/doc/fw-addr-lists.md
 
 # example.net
 93.184.216.34

From d12be8f1ac000af5126c223f22b96b56916fc682 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 7 Nov 2025 23:05:56 +0100
Subject: [PATCH 903/988] fw-addr-lists.d/allow: use rsc.eworm.de in the list

---
 fw-addr-lists.d/allow | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fw-addr-lists.d/allow b/fw-addr-lists.d/allow
index f0239cde..8c4ca3c7 100644
--- a/fw-addr-lists.d/allow
+++ b/fw-addr-lists.d/allow
@@ -1,3 +1,3 @@
 # an ip address list for use with fw-addr-lists script
 # https://rsc.eworm.de/doc/fw-addr-lists.md
-git.eworm.de
+rsc.eworm.de

From 4935c81bd9fe73dba6f55d2acdc8ad23c19d8875 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Nov 2025 18:18:36 +0100
Subject: [PATCH 904/988] contrib/template-capsman: split off from Makefile

---
 Makefile                    |  7 ++-----
 contrib/template-capsman.sh | 11 +++++++++++
 2 files changed, 13 insertions(+), 5 deletions(-)
 create mode 100755 contrib/template-capsman.sh

diff --git a/Makefile b/Makefile
index ecb25bc9..14aab088 100644
--- a/Makefile
+++ b/Makefile
@@ -28,11 +28,8 @@ docs: $(HTML)
 
 rsc: $(GEN_RSC)
 
-%.capsman.rsc: %.template.rsc Makefile
-	sed -e '/\/interface\/wifi\//d' -e '/\/interface\/wireless\//d' -e 's|%TEMPL%|.capsman|' \
-		-e '/^# NOT \/caps-man\/ #$$/,/^# NOT \/caps-man\/ #$$/d' \
-		-e '/^# !!/,/^# !!/c # !! Do not edit this file, it is generated from template!' \
-		< $< > $@
+%.capsman.rsc: %.template.rsc contrib/template-capsman.sh
+	contrib/template-capsman.sh $< > $@
 
 %.local.rsc: %.template.rsc Makefile
 	sed -e '/\/caps-man\//d' -e '/\/interface\/wifi\//d' -e 's|%TEMPL%|.local|' \
diff --git a/contrib/template-capsman.sh b/contrib/template-capsman.sh
new file mode 100755
index 00000000..5771b53c
--- /dev/null
+++ b/contrib/template-capsman.sh
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+set -e
+
+sed \
+	-e '/\/interface\/wifi\//d' \
+	-e '/\/interface\/wireless\//d' \
+	-e 's|%TEMPL%|.capsman|' \
+	-e '/^# NOT \/caps-man\/ #$/,/^# NOT \/caps-man\/ #$/d' \
+	-e '/^# !!/,/^# !!/c # !! Do not edit this file, it is generated from template!' \
+	< "${1}"

From c6451c87f1cfb3f707822fb481f09b869f4ba84f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 22:53:31 +0100
Subject: [PATCH 905/988] general/style: make the blockquote darker

---
 general/style.css | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/general/style.css b/general/style.css
index 73b09214..ea9b1118 100644
--- a/general/style.css
+++ b/general/style.css
@@ -18,7 +18,7 @@ a:hover {
 blockquote {
   border-left: 4px solid #ccc;
   padding: 0 10px;
-  color: #777;
+  color: #555;
 }
 code {
   margin: 0 2px;

From 05f08381190c560aca16895197910be08a53db23 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Nov 2025 00:23:02 +0100
Subject: [PATCH 906/988] README: install from rsc.eworm.de

---
 README.d/01-download-certs.avif             | Bin 4890 -> 1869 bytes
 README.d/04-import-scripts.avif             | Bin 3782 -> 3932 bytes
 README.d/07-edit-global-config-overlay.avif | Bin 5103 -> 5161 bytes
 README.md                                   |   4 ++--
 global-config-overlay.rsc                   |   2 +-
 5 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.d/01-download-certs.avif b/README.d/01-download-certs.avif
index d41ca0595fa2f6b2ca1eaf3a94e34244d46e017a..0532ec3addc1b174c13c5edd6acc1294dbf36666 100644
GIT binary patch
delta 1661
zcmV-@27>vTCe03zA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951PIsgCwC~0YKW&i*H0004zoE?$uAOUof4FO0K
z210FQVRRAz3I;eOvOa7QGOY}g^$RtBL|6#1b&HYFjFYC(!0>-)rji-=!-Q@n5k3Zp
zyeuGwg#{R*exc~4Gyp;#k7XSny>>gR(TEAqPqF4i`<W7eAxL?(T^~EJiFB0IN^-q+
zsa*|%q6q#5$s)d}+J-;s#Fi-Bjmh1im%=FCO(h%nRh`!=EF0V0^iD>e@yt?xJrO?4
z>aqPOrapm5lM_^AY=_alGZfl@L?pP4g;qffC=Q+5H4}Rr=RR@in0gfyOS%zYdeXw<
zm2gM+X@9S9ZqoE|%c^^JWO}5=K)5ui7g?l<oG}!RmO}A;j4_C4rLDcA(`|Kt23hCi
z3|Wd96MQ6KxqziHfN_1oJX<<{W=;EWNZCp$dqz?Du98fSWzYj>sdx*>EQ|3l7@rC0
zUgHPX?}ki-Tm_Wbbjd&S?35u%01l$)!=)69$-HICX!aER_~GZEnVxnNc`u<Xh^^A*
zZWEq)C4E%}+NCtzwa0>ItwMtt;#H}<$D!+KT5r{J1U)XNU~MsPbi(9+cNvl$;iZ6Q
zd15qjgD3u-`C-GLxbDt|%E}+GrETXE+;0oZ++_&-KIN&Ub(~miTI<N1WLN(|^%VA=
zGJI$*iH(kwl<=;IPa?{Xh^eb|+W_RvZ9oNES<~5r@^M%n23yh$6!t{Rk1~Z*Cd~Z>
zNz~|ahATg1Ij!6>FoKVNyv4cvAvG<L3vrhbG~!f-q5nlM{!$Ixb#fg}Ku^*Mnv)he
zUndhJ*0Jq=b(nYFKaRB{-R>AlvD#huHpo)Tjfpc%Rs1aUH}4YG{N;nf?<AW_1JDVM
z;I$@U2%(e)`5SFG01eQ}<0XBjArZcUROF?At_$DG*8ec+yf8t3PZh*nf78Fm=%Z-p
zW3pOC4QjHYI)N!LtrmaO?rTEZw(I3^dsYnw!Y;|BCtp2^wMBOko^4M|x-Sf7`KMRh
zBp6;F62itt^At8$rGVUH?0oC+Q%AFG`6u}T0hm>gE71>wpqnDg&T}1*Jdm#W<Y6qu
zejxFQ^Ybg(odx@UVMznMtzCh7YY-Z@7JnVB$tUl#o7!!>c<Xc!otT<cP5tQMN5d2v
zfb}`G#YOaWkdxr8V4=BLhx96<e$>6Z-&>`HPBAqvIbm?I%goj0K82or+t(s>WbVen
zZ?obmV876fZ`9Wr9g_dz?y5AAk7=NUK0qL3aWCC%DOx^%#JebeHH)#PGF_)b@^2kb
zp2x3W)nQ6+WI$?mpY@`}|1dD&pV`6bXabMUdBv5DXZ;H5WUQ3Ch4E>LH<CliGm8Qg
zQJkCItJ|r$iHk3m(nd{#U`vzsbdK)Tz_CYSf*>9O({%Lw%^snMo#J0&ZF@KD5p(gy
zr*iW3{CtdmKumSND8iLqL<&fF`HB7_(20?#C4ncLf3O6U(Y*WFOSd}70G@Zebvh1)
z+gN@4-oGfY|Mh;(tB8)Bt_a*~bdx5_kO+LTNmxHCGi}XydAP%K<<XaCy_H<eI(jgS
zKE8WbOINH+rzxDS#AKqN2DpDrcfqucF>n#=q_1#)RjoF<(|FD+?)u30CX3sIcPr>Z
z$(Tl2sKjNzzWyt$TUpe7y61Os2_GYl(J6u1GZ4#9@cryh^8a-F<<=CNl|9I`UW8W%
zCV{aclEmf^rVl2qW`1_v;>FfI^hgFH*GpIo%;yxRDQ&5QpyyT?f~IuWiN~=uu(0vZ
z3a9jc!Auf_0~{641PEcV$Dr_b-4-d)h*O;4Pyw<DJ)r!cUM$m18L3{@%QhAUk$g2$
zQ)kkn^yJ;+Wg_%BkpNWDKQ@l--}@y_`lKEDJm5pj=#k5T*xDzB_^V&5z4zh^pu#|)
zkuP$|vf#91f#>Ll7kDry&272@2A|x!^%VMlx(o+0WGE90OnEt)+4yl!7{3M{*F$uv
zk0|%wk-n&7TPB+;RR+B9pfb&Z<{K;aX6Rk}5$$~6^Am30Y?rWzv1#q7q<;Z6Kcnk(
z!O@#;H$~pVjZbFgBagd1!&oxGc8Z|rY=(*a#Pu;?mE?RdI+tb#+7F)C1qs4+4o~s~
Hp<y8~DXA%{

literal 4890
zcmbVJXIPWlvi?E>3B4DQPLLu9gwT=RB1N$vRe?|p5IT_{MS77M5Jgc$1ws)iA|Oo=
zB=jalM5QAr5;|hxB<#J<z0du1&Ykah*Sxc4zFG6G1pt7Edl25w8HaHPC`R>IjJqNh
z<Lqvsr>F-2ASJ9@kTW$$F{x{=-T{A60Pw@0gZ|-E?~QT!rwxlACJ1|!15s94jJGeE
z8W{or4M5$YfN>E3pvsi^C<56707Ei`>tQfHN0S_7_$h%KwS@YIGfqL#z}MUNXn<q?
z&QQ`uAsBZmsD=EP0Jpyy000ZxH4uGtB=t~Fj9-8s#hYRL(7qJUg$eX?qj-ve;glto
z0yaNP2<B)927^&NlQT}yAWDR~18|~!y#svE-XWA>m;t(*lr3J2AJ&<gqZkMPK|nMy
z5CCBB!n!&iT@4B)15n#gMxlTn_ya(wN{&D&|JzgIzqt%0M*{)_V2Zy<0hq$6^>kGH
zFV6ipr`CaJ{^}D?;WU49fPoTF40iM#P9DwxY-fy7#*~AO1_gk_4}bvxqoae;(ZZlm
zC_O!lfr*QmiII`%7zZaSmmt5ekRZQ+fC&7Qq==ZTxPX9^s<f<vA`*!dmQ+8jhR`~t
zghWuAfavMznHZV)n3?$yq5`6b|Jn{;1MDzB21F4n2GFpB!0e#I4nUYPCoSm6{*po!
z3Wm_qL1FX^jFf^}HtJ1*X&_))S_tLRLE)4<0AZ))5LMKp<Fs;yiurRPqB09$;`&u>
z+~<eMa3z<3XnF=7UcO`e5+@|3q-BuGDynMg8U}_&#wMnyGZ!vivc7C%Yln7qbN9H0
z@eB+K#$6A=hsMOl#U~^tB@?o;Z|B^(n|tr^lc$A6#l(`*>Y5j|FYD?XUbVmJ=zQBn
z>h2jCeK$5fG5LOKc5Z%QacTL>%Ie1E*7nZs-u{mRsxGR|f9x-1|3?=)MHdYO0){}T
zx<EA7slwSIw4#c19C}tzXMavHL==omKeM2!jb2>oJek`iV3>gij+~X)ph`PZ_MZuh
z{(mX^x3K@wH3cw%L6pY>vjaN7X67!vcE9+SJ4|1hB5?|(IAbse=tq(pZaFJ+zkR*X
zlmOc{Yn5#==?OTE9|*;**g`M2NLLQtZsVJ5S{B*eLmHHR`q1u@>{4p)Kf`fWsP#;o
zMz<YlCP%3Jepcu~&7<+BqwC7gHRM@QUY;%=79X$uXcO0wo`MRG6T6*}<0@tz#aiWc
z2*n(jwPSB0xt{ixQ_LHIu*scgNkKOx(|fM+>hj^^O@!>q04^e+jgt5*Ie8H1WQaV8
zUl{&%)w}A$i$Px&F%NIWF7?$muI=w?0?BucQJ>7e7W3R*Y@KnEE3aIwaX18=9c4Ls
z6P>&QbRFl#GbaSX&w4gs3cKLsw-1lMvkTaWdZogE5(%uIp$VKwUp6W#*^PdwYL}kz
zD(L11GxkecHa*F<cL^-KOMsuQ)`oqi={RwGC}e~-Sw~ji<n|`^WcpsEf>P$*S!eqa
zr1=+PpS9L3b)sxx>qAW&B+73(nj|h6FDdH>mGB?bg@#7SKD0&)r3RkpQs`dn=mXON
z6(+|7@~=c{7mf5x^<3+Gp85<Ot;>{|d2IQbEFgJpfvw4(pxyLgKmYuw)<+$S#xzZv
z3JF(&RK_vTR0Etzh%GYDWeg+XC11Z<d}%Z~`b;m$Ld~Q|`5phj-F2p<C@>L~{oQ(6
zDIV-uNt(}p=5Xs0xx78_`qK<>uPllq8{Uxaxu9dj@MoF~HHaa4@g6*zX>6%i8sK%`
zy|gmujczDaPBv5x^tA71b8u*`%}zRAU}~+`+WYYZkGk*OsHUj5^iVD9ys78$7vEeL
zy7x?z#BZY?R$3<O%?n*z<W3L_9K7Igo2$bIb4Ob+sv`15xsOk5EdGk^=C9|?`Sa?l
z&4EL|Js0lf$F@v(qlY|xDzNU}+-ljx{c1D~3;%9;<FdRF5OfexIO}C^cGoAU>{iab
z^F3V*R%%m^zLVOZ@Zf%pp1t<1?w5bM32H+!3f7RDB@^g?jwDv~pKq4h=Ndevz-1ci
z3H==bkuDYDIL)v^&>OhdpxR7XhT^-JulJIOA>J#c@ZkmCS%)gr)gHMmET4Q{K*M_5
zPDMmAu;R0$!(__+Xc*3+Ov2kfb%GdHxm~gb1hC*bx+nFm<l&a6XWMw|iTu-7tYuBG
ztvW(KDngTiFZVByw=a)Z+pRD!z@v&d2z?hpuW5Vo9(**>hkEDQ9RlrDea`$2)%I?D
zuX0#ApioF1c<F4(g*AsxF3_k+X-Kf#8<l&58cWC@Q2K?qUZ$BWQTIW3C|SmREKI~|
zj$e+HxKKQ}B`vC}S?8K|JZ1jg!k0%ZrKc~nTlhWqFBm`zpCT>DoQYS1$1i-FVg)Zj
z_U4-S?<Ba^#>of8b3DeLc%QuRBc)@ZYOv>ZfYRnp7x%!hu3-HAxo{S~+~?aT@oui(
z<<`S-Opc^BbrGOPGe0L`Lq1`k3LS)mX%BLl*O)92nL1&RQ+^TX{QHulh5p;;pf<sg
z^sx6?26r7adKi^BVgfQ?j=z%zeI~`Zd2T<y_VS(s+2PAj^QftvdRV3i*ay(;K8>F_
z1hgg;DKGs}HG=bHO`I?CXIXcj$Bi;R@`pjIM&av%ItOngFE!QHzX~3mQLu?-veIUh
z7g&7tFz^%6>P&aq8o$PgLYAyj6TI?0$MUem>6=QEo2;A9x;CyPe!>fJzF<A+;h!z|
zBqeIo|FyWdVBkbnxAmV?kJ;YTQ|@EI(pcZHA@NJ8cfIE&<FqzE{$y~`@G_g+vEew-
zf!ST5=N^g)x_=1Z*p!6th_B19q<Bb7Wz?sQZ`il*RyH@6lTXj}CHU(tRvkablx{Bn
zQLRg?S}fn7X0&3yYJ=qoqvCCJEJ{oqcNtrfepiaL2RxK{TN3^h<>tQ-QfK|(fdnJC
zsqm}=xB(9Z>#XCtM7XrHN0>d%v16*vyuDThHosN*yFi8b!_s)I6gT7a`($z2!RDyt
zSOrTaQ)W4K$+Rv;I@cZYygMb@ROr4@pq=1ArochtRj=#2Yw%kO7GM&;b3>B*>xJK=
zgRR_I#ML_Yxz#CVyUn@oZmX8-Vn*HKBJ)}VykI||y=+@sU)2<gIrnsr6CXXJVoMj8
zW{h8thE^_Xtj|3FWZt%L*JVgUOb3Yl>F3yf9{k+u58yfny&#|bVvaQaNAP8x8xBjF
z5#Z~=lC0iZ;s+w_7Kx8<GD!XBP=&@R^ROd+7`djYgWYa|hSXNoUpwb{+%q8;6(7q$
zbY_d7BONxn<~v=iF6LoN6|zsNUqM)J9|F<7o)H}Hkk3rMA$qa!4_bYOi}eFaLqf%)
z6P3#PSg|>nToKNqjuR;bct;n|le&H*1rebe7p2NaZtu94oZ0g=C>aUkJ@v$EPFkYb
z)OFYefe^z-p9klGGt(Q^CyKdyFJGEPE!{HM;O{#5xVb{$BpV+#qNTQHjEl?42>5Ri
zdH9|KV4zo%*i=(tV;jOC3R%ouX+9ziTt0njNr&ILaH2MdSVky0CBOV_39heSm3snt
zru(BB9kU|uQ0@z6$IY%x{Oz_POSWvY{SLSwBebX;I=4OJwBnVes8+=+<G3IUztKr^
z4c)X>lKRS4jwgw(sJhIke<))rugdxTz{nE<k9tduMb0za<eqQk>O0iNhy^6NR=9-E
zlT_cAN8>j!Cu@H~PdK6Vc}$<Ist-N7?<3Dcv6{)Bju5d<>An@7qJgZ)hUwrM*qYr?
zZ`i<VOx)R^!mwEIJ5;7eucU}b63;JbIi5Aki{HIodYYMwisr4Y>zLMHzFaG6F)v~<
z8$*IpAdRoTCF+tzLg`*s8R_2g2@fR4R3A2!xs)gesNh5m-&q|_BWMSW_CNCq$FDXX
z*Om+4*uP??U{0=dk|*)I7froO{iN5HO|VWizIodRuD4q74e(dd*dzc3TYHbzJzwaa
z@36>yg||`^p8sublNynYQoXKsKIG#Pg7bO3$t@2(onNExC(6Qt^@nm4;681By-lLF
zSf}HNs->*vOs;UZSqTHOF++s(>UHPBY9F1h0G6p~fd~6Z5dbvyP%<o}B3jh>Gf?R^
zads(b5&x`%)!s(JxK~grQs1WD#`g2Eg?ML?5ms$l>p6rHT1D=SAl$X((Vb)~UfY&(
zO{R_$Nc;YN=d+h9ZxUP}up8B6mQ2Qq_xZke#75NX1Mdr^gy4+i7*%b$CRb#(oVpnW
z`F=)+%5-ovPDoWpfQmrE{nO1W!JBLC@4@x1>4R}6)p#3l6^@;jiAd|hJHm!Ce{vJ#
zx9KYH4iz5;UR*wL%0#NKpJ%ZD+vWOdZgy50I<#MBXv3G(<&W9FH;SabGX@+}mt3LO
z1A!XLWy+_<Mn3RW$Na8M2~^cTult12L{QJ?Q-9A%`4zjUX9kLoooSHQNA9sCfp#su
zvr!hsv4C2h7=g=HW<xK@%hWkpJ9k^F)%G;UQtfze*PpQu@1wJI;vR85Fn1~^GjDOC
z%xEMR+BN8JfcDw;W^mzA+f!p$?6A;xWZ$(90$S^WhLvq$k9jhgLxod6BZ`8zr@j@k
zGZ*5c4;=~@Nc~R9>^GEz@^(KpMtyx<Xv4qWm4k+2iq!}+7xDMM>5uZqz{0g%wUx4`
zt3NX%!=&SH5D={od%p<k#-$&gHSUA&ckSq*KKltZd=C)qj$&H5B-y6PDXKJnN;9x}
z079d64F526?6~0W#Cfj-&Q%|f9&TU$s{b#s-7SWL<TVEyiCY0XNybm2Q7R3pA|(dm
zUzevoKIO}umfZRjZ2GI`*0AchP5$>{ZY9Dy|F4eI&A^n@Oj(!&LNpIEbVpdcBqK7c
z;=TdtfKcz<(Zq9BE#50lJ|BM`rZ1j>XpXG96#S5Zt+GCQO)f1($KxscuHJbzWhZd^
z%e?8YmnKZtcMrDQ2-~|7sIIkBp+lp}(rLdMt#`{WcrXgAZcG0fSzQuW9V;%A^!d~|
zNyN@;t>ikq@w{6wz#&nxq(0DKw;8BgUBcg~_P&aN8<HJzVbeOi`j1SZ-?_T>+^04d
zRBM*T)`+YqPWq}espDyc_4?7-9rw2QrGoT6@S7J=HBv1Y``abwOjXEVUHX$l(aIm_
zzqLG(IOTUT$885_3w~no3SDT;ij7RNs?5G(Y9}<;3=J`(WB(>Po_Mk4^rJ-5W|aTA
z;l$QBwZ(!n<QC<Js7VPSp>nyKZN?ctnsCMs(vrV^*G*Rm%o0ne0n6~la5FsKk;(=1
zADg*&cxb__PYBz?6=%(7jYb|#6-GVnZOx7$@mTHlL$yC@wIBDhqG5G`xUZ|c<a*rL
zVc^Kq)iR*(KO=Ct#I(Az?Q56w)OVg6(&2K1mcv6}2pd|eiM6#&X|!aj_St=r;CV=N
zqD?N84vH|m|A<%c*Q5#?N2G>up`#`KM^`QP6remnc+4ml5-&X6_w*ZpUxiE-MR>~e
z+0$~6<BBipKBApE%TFifXuBL^l}77WZh6iB9Y^RdQs<Pwk3NkX-17>Fj9$MHvzy_h
zG#1~-iY=u$=|-|4&i33A|6I4MY>v)EPp~G(m0o=E4cs5LmHocYkRZ;V1qGH7%-%$K
z_Zu{S!jxlE#%gjw9hnGW(XG#k+g2tKm9jq3>Y;flvnu&jufD1(&E}wzoIrn4(rQ|Q
z4GhC~*P&G;@IYna+5Ny)Lk0Jh#G1%3?pZwX2M1A>&~rJ{Vl-!_!CUr~y*`bZ#-NgA
zj4rodbWcZ?MQx(OhG4--n#GFO;$C$@usYqc)EW-%=VaN38G^#n7mVY}n?if0n2vR#
zBi-qkUek8!8fuYYg!kqacGkn1Ys2p&E;0~$jIZ5Y<$t3i-ll@6BG#HmpD@ubHR7F(
p_2C_^sKuVMBaUCyJluEV+_acsRqi6adZKL|bTF(SOYFI<@Go;`I~)K2

diff --git a/README.d/04-import-scripts.avif b/README.d/04-import-scripts.avif
index 53439e4e5f832c7cd7e8a424f1b70e471ac8e31a..a5cfa7bf46733ae385e5cb9c8cc55364724c0b2d 100644
GIT binary patch
delta 3727
zcmV;A4sh|t9o!y}BMs|qWprTx00000001G8FdUInC<PM$01io!fRuj@QEg;lbP@mx
z1~?_MIBXI!yc|qq0^Kx2V&2}qk0h5<Cbe{^tCFcMFX!y$Btk;5nLG1exWH5BRQPxX
z=;E#xr+$0!+FezaI%+79A#CCR@|uHxx@<N-TR{)52TVz~7awmZQ;U#|3#BSw$MlaI
z15xnEAZ%#n(-RTilwyAw<i?t3JU>sK!z;7&1alY*<Jbs#bW0t;MQN7wR_-qZ%2msk
z`>+pu6C{+|52Dn7C%ogDJ*-v<Qg6mAA&nbZi<AiI^XOAw*h(JwdLu4*;wdkqSA1;y
z@cN2BCY>DTqBdZ2d=m{Ma6{R^cxw-HTeQH+S-Mqv5o1a&9e95?TurSsG<1fz#^Rq$
z1v4O@u+#p%*=|QNB{O32sNQE$v0knT#VFjctaT33qH3rapMhKa7>&`2bBWE7dc`yr
zHaZv*s%Frgwx9>^_5bvGWtGFVVzgv45<;=JyCxQV;y=ahFG^<AOeGoYa#ieY9@FVY
z=Go{rAb|fDD|>$$?31FC1S}IR=P;-<V9g|(etNQ=WgD#>6zEmn&=DX|eyC`gs=IF!
zH&!S?2qw3Bi<D8}8yJC8;7O`|xJ3QxQ!8a8fy_2k2wf-hf1)t&osy+<&?Mk6?q&J?
z+_dT_gj9PT|9Rb(qD~T7X$~t~no>1h8z?sk=e3hQzTJQDZwjn=5Vn;}7uu^*V^{Kj
zbyvSM6+7gj(s4e!Ndj!ihBX1mKBxa8sMXS4K&h?s$QF@PjI<4Mr>`}GN}THL*fAJC
z;bra39N!EM{(_e(uG6n&x0F4nfeWoZ1I7jbi0uH*No&S!iW3Ph(gEiz3UIBu-p2!@
z)Q@X*8Fhc)A?_e+TG2YazH7kXPBa#>n_(8<VdJ^ZrxYdeL17=dqV~2YgqH@>SQ<*h
zSilNpfQ?G%X#p(W;SzS!g;y<#G#Lx66b>8ISXy-48ZoW<$cx}f)))JGnxbj#bqDf_
zwz@j=XBPw)e=3R=<PB0i^luhP(a!y6G#@+P_t1ZdwQLfSiKCB56x@HFso$E}PSwM^
zM^NL85#QE5`4La6Cy^o8&L7S{VHPa__eF`BGhm-)Wb=oIv#vtH4@Nzwdc0R6kTA(&
ztt`!KQIuEh2w;)T*4mZ!!p|RO-=!nP>*FMbvfIGznai{BNJg#al__38l=qyZ66gkS
zflhzKC_r4vTkNFe&opA48dO#&+fm&yoH3TU?r>38ZGPQBj*Hg63*_<X6W?l*(ReOn
zR^46XyFwXT|D4(7lpHeHJx-kGd<S1`M?wy`2Gp98E12L|bo@@v8`3ttm|8{R@o(-O
z7sTHvtOmw;-xA-xh1<?wb{YaqjdvuQpYngx(<-Rc>lL)Uqa^x}_1et&-J(S=Xyu0j
zfMylt<EJ-NnJ59-P|{C^4uyk)Syz&i_@0bYWJ{~=Q@TE4LT-R*HB{FRTkA;$#XBZC
z{ON)xI?p}6wxDYKG%8EqX((__{zyhAOG%SHeXTQhn2&Bm;!9^j^gXfEDluUO>rQ_i
z+WXa|a`t|!<N9tlWnM@3oU`RSG$sCsa5cU>GatD7{{67Kvok<YrdtdP{xkk)J%gAp
zycuQ+9b<gAW{cO<o;FahJI9}nIhkXR!X&NpUlS`hli;QrbcK_n#7;>Eoo6-n476ao
zMGgJUk6^#0Js+^?hfsxqK;wr90qcL?5L(CaM*5yQMJ^8bD?xTnm92VgDY>w@D+jl6
zb{hsQZAH8OzdJ$31U{ck90oDOlxPZB&K+NdYF?Zr#;lAjZ($V<CtjQoLLol!=u5rc
zZ0*^1o-!QEyFXLUYxS)z^XVDyuZYK=CjX(W!5@l^zf7`1FK<uA)*s(|s%w9kLx04M
zwFNsi5VYLIkg;zRXSZT^XZ?=Y$*tghYkse9C7+yrQmMFKe3g7%xJ(M5AYYL2PN3WM
z{7unRdGfKNaDq?s?6;teo>A*;E%8kj{DTB#+qg0Kl>iE#|4qS6ZNHhA`cL!@52YD#
zeW0&XPgz=;UEw|bzIqO|K_Y*;*%?C~r5;=e-vFrOX^eU<_%0C?2L(wo4Ges<Dd`~=
z%|la#OJAG(EG7DNlJd0&clRM5S9wZQG*jBM0^r&S*r(<MYZ9_a>wV7ao?ED0HQFd2
zvIvZ;M`~e}6)x96XxB486!n5-{`F=p>_`VTS<(x#HrlZFTAH1Bu?l~9P0cGOHRD8X
zYpnE!i~yO-m!Hh9b2v|kfEsF?N<Y0b?!dt0m~vSHI1i$_Pgv>Pn%1{B7xHEddj!M5
zClUmayVpQ`^{SDUlq&=8aMf}w2lkXk+^Nk?IsOQImDkk<<B#t?biY2Uv7)FaVcKc|
zlw<0lh@|9~B13P{)ck)<l%8Ilb+gNgrkZ=22&}6-XUTyP)F8(*XZ<ZdHBL>-dWu0@
zBs6O6|2Mjj!Q04AJ7wEv7XlDqg`@gYTD$y>E$Exvdn_+mgML29?!e~G0UX{Eu6GR(
zBa@$-65*8lc*-??FcSWvu1bZ^cpvS(6%^J({2DQV!1qNgYbSr7>(s$B{`fO~<bD|4
z3xfx}dq-1NjmO_XgnFxj@Tg9N=4&#GdmC+cASaCkMc}nyT9z|mT>Ire*e=N73Xz~2
zHxwSbr;ntQ+NYx6b};L%fRs#X<aBI2#mDy4?4#XatzA~N_ZV!O7%n*78a*zi!o6)q
zJTIMZ$|QA4&d7g%_#?c9_zJB3pZ@fcQ;NF(MTpZpTmrJrz$0NR`@v9qlGxx4urUt~
zXT-e>;ME^{hek`CfbR|Pw&2Zx%2Uu?6Yx?+r@}xH0eLE$TCc}3E*m3IxckmdG<b>q
zG6b%uG?^vF-Y@s|$L;UwkQj@Ce2n;DI<!^!DZJZYEEs>@i4o&tHc_7iRV&~j6RMd|
z-e-4S{{%CTomo7z<CBTO^fVKr_NKj9M9|(%ekHq=?CgT+(Wu@}Y41$G%?suTLBF>L
z3Zc(hJpJE1;ALGgX@$qG$RD<udNk-TRb?meo|?u@<`%U?oyjgtjczLA^X~){cK4-E
z*k5Q!ru%=Dvq_<mai%dR3?2((_(>q~<ap2N(`fLXro5PY1236I>vvr5CptgrEe4@f
zWRC*SxZ~#2Ar#-Ks~!^ECi?OP=z1fLLaLng*O2RtJY0N3Koj%OCGV>!{~&L&W2+X-
zx{bHg*%d{P%CwFaIJqzce2D#Pt)k0IIiiO67+ilQoax>+Z|Rl18-#P)WK3B++K-*E
z5cF6MMx=}Xpj6J0q*)d~=nxYrLlUM-A<ro_U<<iqn)szz9;$kO4BNv)mH5;>-m8ai
zE~olXV4CS<P5{t(ZKkPlPqi|ENUs8*6)PVIlSjC5rd2|POqZ>(gZA_c?s~M(8$KOj
zv{rvwIBYKa{HArbgpMkE8DYxoe#UhR^-}AlA>h7=EdEZkcPb;CRpk@0W`lL(>7JAE
zeeVhn-{T#9+6X^0Yh$Bp1XoRo13PzyP8*orsx=pA{4@sEXKozMk%_6S?(&Ni1ZtNa
zrS}0*#;3%nGLudJjtpXwK?fcjpTw#SgC~EzE&VkyMC)DOy06(_>+6(f|6aa#J<x(_
zV}3^-8_K;?;Bt%b2p<QqM&+_c`~#zZ<lIm-7$RZ+@kXCE>oJ~!Vt1<fKmY&df8wqX
z=dnRb^9=YE8Hge$x&53Sr+z9ul=J}*c0!e%&;Dj<{e*el%`IM1$9Vc8wcSC3)VqHR
zTYL+X>Vks)r>!M!_Hp$Jz9pa&9wLcQu4)`S>~rbRt@PZ2iur@&Aqo4?hvQWD;ZRtY
z+~xwYQmz;a{t-nJH5i-@(N)L0hH{9IH*crfT6S8{x=J197BXb}lriPT-G;vpu<~5^
zI!S&$q(Rb{!4l@$5z}4@|LO_=id=u+Z{`;#ZLvL#*=1p$_96?L7;)E^1F59fVkgdM
zfht&MM7>iLoQ|kRdmVjzA{WcRb6gtE9l-)iAVj}7iGn6^#8ktm7S_+&caR2R6Lt&J
zfn~IGh(q6$S$IHA2l_RgljF$#qO}Bb^6oSkq=FtYLuo3s&fv$x0DURe;o^T9<0lfd
z=KHY5fmRz6P1ccAn|o@E0h0!P*&??2{bv@RAi}QK2-cA9Z7M%gYB3uD0&v&G;p@JD
zU~ZbJ^u}zYN`G*{YD|L<q2#7mvTM#6XW{?>n>_*I*sNhD8=&IoY(SKAB0$uC?(F!P
zY_*%d%~ihE(m&DPujQ;R9&LXScI*$Pf?^b4*TLp3fzNz-Xm9dOP4wn_R*7pt9fh#r
zuY+*Pe_T|^l%cEeiCbt0cx1^a)8DM!U%?py$CtB4#?&rN&d=Q^-g2}(RUQ6Xsq&ah
zOq2J=Y9af8L6ZI1-&n01N$B_be>)JR$=G>SCtVzAWghZjQ48^i#6o}AndG0xSSa|I
zlOVEKe4%dpa50uY2xRY&gk5)mJA7V@%jARqmCE-!x9hBlSDgju(j44MH>QNl({C2W
zbF;Pfbam6?qO1dDL*i2mahp5Y>wn+Y_ZXZe9Ydo<kPUigM=bnlt;TJ{0v`P;u^q9-
zIXG9!iM+8sv@e3gEz*C3?oiI{cki8eMvRP)!H;FP-8UM2b;e-MT3IVV>p=XaJwc6m
zwSn;E2|<FnOt|<u)9(xfrV-2T1v=_?o4lj~4XN91<LJ}J%C>;J1Y&Jz7gKb<&+}FJ
zLa~Q;LA9B^mQBQwJXbqz{ksVUwEeZcLU2cE>SsIY@sR7bWS46e%Cx8(11HxWbd+@Y
z$c?iI;`xsD4n<i<M|E?H(^fle8Q08g=MFW*yoT;tG6te-3sQk+N*ow)wxB(~lX1j-
t1^wg~x2G)zp979Zj|_a7t4%e_cY)j4H6%tT&G*kJt9`eCNj=C`_WTw5JHP+{

delta 3577
zcmV<V4F>Yu9>yJzBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01d2>d6a(*
zv~6TzbP@mx2{<LPIBXyxpwcp&8%$&Z-84gD-rl~X*q|Tc?&JZ_@q#h8jZXtx?txUy
zmfhFn)eP|dEkt}WwIy=wZ6qtegg0)QQPA+U6Ml6!QdBB?1l099)N7p9C0bm$986|g
z&5N!9a~e9!^FGRe0HM9=c$^Zcot}T$ZM+M<s5KOR)UYM>)CdFeM)iUW=;wPjgLhS!
z%HDi5=7Bb}3ZWDSdL7U%n1Re(p29te4VvmM+450Q^-nx$&}i(=$Ktq_py6zYvUO?C
zTdbk?If5e+X6+_1t?Xd1wGXJdHS>$|!93@>Cktv=oq8)eZM%uTo~g{dloNlPhkU3m
zKIhJTI@c-|R!KRN4u_(3-MZ(+@y^hjlN$#x(_dbXocO0@@4jF~uEoA}5j7RrMxgHT
zFs6YZh7rUX4LhMvey#Bed!H*!7->Jl{;PpW3v>gg<>jz&nX4Mb!&=LEM7tL~BY#vs
zh~?&rgR80(ko^z7m$1u4w=I81O6Pt96*GkM6Z+{V{rxfJe*mMMN}_Om`+3t2n(_VH
zN91P8Wi<%!oW`kNIB-jmMnqLreLf|qF!pyZ0S0}!j+ItYu<z^7ZDno9>?+YOW0u7t
zBM4_FAJMMH(q<&w%|Ne1;Zklm3P;Q8O?0df^)#<#SnTJ}x}N^5NlkxC1x6Gv+Y_$}
zsBzIgDFb$8-)F0e61_vHvY^(<368|7@xE=hkMK323N=1qe^4l?_tUg_fp1`M@*xMM
zCKbk$%p{3GPrcE8%&PQEH`HY%?P?lG@oU6CZC_g85w#Mm54~~@!G!Y7gYIq(B;XEg
z?93d?R~)lV#|_YQe;I$pGrLbp9<yz#1*)9?{RUX}>9Q4WqrkVu_p^n6tK{s-HUcUd
zIR2;&BgRLe^YQJJ+5qE3S$G|d!c#n=y>KHB=+ll+70FLCj1Oov(gs&;2nF;XMYRf{
z#GFl_qI=l!<^d%ap*kl}gO&%@?T7%juV^23e~^^a3H3Ou1p<HG6@U_iEGY1xo)NB&
zjCUCpT2+jHcHVc<3i}wtD}Q(|%OHK#gZ9^w9Z%Mk&ttNcHyTp(7j!z$n+5!&ZZWDT
zRQd{xWDUiGUN;*LR9o2eiRI3^lW;?=MS6YMj_&-IH}jkB?S)7H@9-D)=*L$iBz-5j
zCESk3JZ^7gwZeZDwp-?ZrVJ$&WA%jwla5bxuIg87MD{l`GQ3}OF6W@5TM*p&fcGjl
z@l}e|a~B(nN7dO;CCEi&x1TKuVr3g~ieuu|{6fS<XVV!Q<~d_*yWp;B_L#%#2ME-;
zF<1YEts#ORO~WY_#$~m*T47KdtlR|uG|_T!U1nHv0mOeaEGP_$*rjBoc>fpN$AWIs
z3#g@I_FYL!grI}rKij-9F-Ll;E4bwhw|_%oJucaiTFC*&NsQkO?UX2Xc^e9Mr@~j=
zl5nN$)1Xd#AXrvlpwfn&{{PAiHt&2muKe=$kDTHcb>yNq&64`YQMvKbz8Uy8<jC9z
zhdiBpn~Hz$SCly|aUWdwyMU1L;ATs(kmQKvQgk(<#e3}tJ@#hiHgIl%HKSMPH%rPJ
z4chdsB03RjMX-!v-+eGVL4lE)lTA(nTo=K8gQzKNE#4?ndUr!W$e<HquS+x81MZ@$
z(lXgX{7b@hS$E=!^Rb_NPVc!6E@h>>a^S9Sg6MxTx3JuLTP`yEf}NQJz|67pAoT^-
z+Dc4QI>VK6+b<IUhr!)}E6TX_Lf2ert?rrP#i=n58N~8ymQUtiqsP8GWOmqsT!B<j
zY!C7PRvhnp%8eI#Zv@!#ms^eMS?O9cwL6sVEk#$ngJ;nJtVyI+wU7Lm+qiQ_L(dT<
zA+LWju#8S%KI{ZueRxNl9t4U|8sG+2_^p4Z1KdT<oa++!Kb%c+A0Mqb%y4(0IT9+!
z*6kfyQYT)~a9Ks@sE);5S_uw9Lq_nlLpX#>z4sbv+u&*NeJ*F|0(<0z&jKg31r3_F
z3af}>g~ZjsfB09yo4kdkikOTHR035PkXnCPkLg87#B11`m`_dOEThbP;?bbhkxnU`
z0t~(h?NgY@cd{W}i7c9oew3AjJ}GASyhvc|ueXYlb_IAP%=HMzJ2HxqrAb%CVPXyE
zY6yAN_U^1O=Tc7zFQ7XBtxHDDV<XkcO9uDnCsSNn+?c!p#bsF-uMCU=lo#E-pk{w*
z8Y|!~sV(;h%@?n+t}HAxpe~tlV>rH5xNLEb7xTI=!7%BFNmM|V;1rk={Xxsf85fq$
zf@HLyOulklf~FfN4N8P->^5vowEEk4zaJ=GW+3Q6I5$x-x<e`(O4J1+3CL2q+HDA6
zhc>T6T%D#4!D$K{pZQHjsKLU{@8W-mqX9F?hB>k)u@bY3+RM5ld+4w)gMnZFR}nU4
zs9kzkGuAs`Ko1yIwS}41jcI0n6#Bt3um4Q*N<nbZ#jv~WnoVrNWb0Q)AYbBC!{YaS
zH`FVVu@qGT=eheD1m(~*Pg`?FIYi@94IxeCOi%$J;Rf>qk*98l*5)m364QT}Oj}uK
zC)Q6e3}}}~^Q=gSk0qsWY;nT%Z37|6<g>{G`?p|~Q$%R%-$j9(Vvm|lihPKc=7Gjg
zAb)8yV@$5fHHc8{#m7*rR0c?XW*m;d-YT9(Yt$W)124J=K$H7W6bG1wh&_fS9s`zP
zFVPWz)_U>|GmfFD%)m^ZT%3RZ-aVtQTD$v6L4LQJxO1h)KO$n<ocmKrQ`wyJNZq@2
zT?Tr<)u!#X2eS|sL-Bycr<3f!t`!v6lZ>wF!6cPpYYb~|zfeQ&$$lm2ym)azvkG~}
z5L>^cQcm4lCN)mq^aGvSDq$YPAU|Mfbx>?gM36ocHP&i7L)Z}Yh0=d8Ah11_k<ZY?
zy}<($6+Xo>wW=DB8Dt^YJh}voAV_$q)5s%XbeXpU%&4HN39tj~NP2qJiWfqISzqX(
zeSItx@-|z7@V9&>dI{MwHxQBuXYH|g!y|;-1L+dM!mL(Nrs*WkhtF`VSD1c|uWDPw
zZhNk5jO~IkNM{ZJ2oHaqx3XRtGV^sKI(x-Ugb)7mpWJw8^%)K+5=6*#-@OO?!JxPp
zk^sRevw)B19i_@t;;9AqVHBmO+gg4Jp7(P;^EcrIP+h*DP$D6+p>k$pMgi#|QbX#>
zF<$ycN)O2d8Gg@Uhw5>dD1(?7+$yfCULnyF8xcu`aunvdgpGgieEf}5TFLqK#mqZK
z8jFj+PrYPeaf}fKm?0Nr2R1yNIbulZ(?K-zjoxEx>d$>L$bw1-dzNEXWORwi<MY?$
zcgXdqZ4@!jS0+EQtJ>*}orG$Z!>+am$Sb?N2&4bpxz1^SO!U=<g53~7dAj*_-07PK
zflJ1_-CZzriIsm-?Us)$DXf}89}%&nGV$-FA^@na9=T4VZG|{!<;Cjb+AGb74Dk89
z`jgQ`3v4J60miAF_*E0ss4zoD@9bw8`#RbveCuR+mqd};HeK5P1H_^Wth}02G~bQM
zEXfi1{CkAA_x)!+6@*^rGMeaJq~soyKOApT&Tmo`nSy@<8Q^j&Bz@yp;v0NwdI;Q_
z_6@M&-{?tj#?00$g&n#<zenl*#jkiuk>FIKrfNz$|L*gJPfav3&;tYutDpK89%woe
ziq^h)>tq&xT%5bb@w-Uuo?zShgke~+)*#Kr-TbbuJ@S)gHc~$NXu)M9XXlvWsZ#fY
z%Y$=Fug-ru>b}<fr>-W-_^9`&w|MW8C#RT<dhs1w5<mhdMz8>XlxsN_FNsvZX1%l0
zEPqic8aCWChAgTgHJ^f{rAGFx74TL=ag|HnWw4y{<c^swOjIUV;%@s{Y%Guv7}j{i
zE){IUCt9BsA#hAb<=!{4JD>%Tgsw-O@WtbbV`F~>;4{lfRuw1i9}=S>#4G%rMacA-
z>;!lnJ1~`+Ewr<tw{;S7O}8!v*v@ohxarFp`-1HU^C?m8d)SUH#X#ybKRzd<Nk^pz
zxsQcF_iodV+5{#Kwdm62l=02bSx(WE@*ARfruc4sv@A7;7Wh8Fs{4W5h-~D9PL1(S
zqw#;k4zXmbVhGK0cOc3+@Hvh2CyIoV*wEnph3q|+B^+w;bQjBWa)G6Mi{RUS(j%`_
z{)Q(Alt;g-v+z=4s_HyJJfZxZ<3Y>J!fv5>3AEDXiwXMVH;|)jzA-3JyH-xL-|c8`
zjKR?+202}|C{WZn4rJ$?g3wGe;+xhNoN<32;ouMxJaHWnv?De0-I-fyPh;PZh1ac2
zo`blP-{^=cF2EZSyUuW6t^GnAQ<_PNDyufZ$s?KjW9no?j`n#6#u&K9?`GnwIaf-3
zOCdTGK9~vM@=|-zG834cND&e(ka~;_X-lF~poi1N;40;Oa=9eFKMc|cBcFQOZ_R)5
z==JSOi$ryeN%pZYU-IvwB+o(!23oX^uI&~f5IX2N&;+cW_)$pfj{8Kj_$T7u%RjPd
zxTcCa&m?d%v@bt;M>6_b&|<eGr&&-rNGB|&csq@baQRY1kK)WwSj&NvHLjXIn&F$U
z5MjBK0?zXe#MX6$4O%87_n$wsLZ(ey5EygC;60u+IEKM&cTm$?l~QLZN~`C@>2Axa
zfWv~`+&5h*C_=@UwfD)^=L(;r+9BHNjc;i`@UQ|s&?SYjVY-lzpe_@XSG;j@oC)lA

diff --git a/README.d/07-edit-global-config-overlay.avif b/README.d/07-edit-global-config-overlay.avif
index f87fda88e60281d3b0c4a2cb301025832c2bf8de..5b9c0a6952a9a5a411ebb70e607a26d3f19bf942 100644
GIT binary patch
delta 4703
zcmV-l5}@txC#fiqBMs|qWprTx00000001G8FdUInC<PM$023CGfJy=Z1d+^06cZk8
zWMOm?015{<W->S%1b{M#CbKF55dnY4p87LBF+a$1|2o;SG&zlZS6lBadKQ<}T8y-Q
zFoK{SKAy1MC3S2w_I(ss+vS{kG)0I}Hv_WVM-DSaYk*fY=P+^JEkEphK9i`F<M%Ef
ziH7R%&aCyZn1ThqQ$({m_jom>UdiJREFb_6XF;py6wlhMr?Tgth7>$2{mXxJ;Flqa
z!K11%Wc}Zh*W?ON)$H=~a%CUzO@66-E(Hc0gn8-!$)A#)3Ml#~C2Qu<wA%st3^J7^
zoQDtpz>n!xuzDPQVa`D3)+da1dVnIfi&qJ^0`Jd!BGjGHA-;mNZw@8FI8APU(B*dG
ztxm{sLa$)v2(N|TbIBMC^+SJyhd5VDp_n49B-<&*SwBKbd!X=5$nHGbvQ!tmT14sw
zG8d;$WPb+~=I1+naD;M8v@pQ^lr)t6)Z$ufN$VS8YvYHU&@V5{Zfno77NU3VApo7z
zMt7?Jm(ZZ?5j|P8`0S!#af{rFTts6>0;L>BlrS$MNCT~D^HqO)8GnCHfig<;vu^9%
zA~P4${m9hNY0#}p*B6<#fVS9L8kv!7!H<(u(A8JOSOU3i;hDSM3X_FbiFc)VzSIx5
zjjiGePPTb&bwl^ro9@@|mDC9xG1~Mc@apP~7IiAX<P5;TRGMvY&ujhO1C%9~Xna`|
zI5iN{SH;Ju8o3F)DZYR4UZv__VZZO8t~DV^cr>Wu&3f{lWv9J8!T-u?z*2y7DKLXM
zI{m)U4cj!wQnb?lz!%gz2BS}shNiwu3z(UjER!QaUG<=F%lc_gY)<p}K?&VT$B)ag
zs=%mV40nJeTGvy}9uN-VpraJh*xVPOU22kZ`5S|P!7zz@O}Kx4l>4j}K1GPU)It&r
zU9Mp`G|aE|k8kF$2nKQL5n4!FnU1f(ZfMzC0Jwu|*m}@-n$v<t7ZOjZvTF>f-Vc-e
zMQKFZbP^NE1u#o+Lc=V@XNuKa%P}TfKnzPFO_D~dYaDjr?C|T~dz(m5o;!0ZYZ7#r
zx=nS62Cj@h6>5KG|E>k%lB(CN1akuc!j9HU(-kX{sbmaiJWQtU*}g!8t9}s|#7w5j
zNcXC3UNBl&?;>;tKBgSHi!YRslj$0*Fs=HZV22-vl=hQMieIqNFRL#l=E;V~Tpy)v
z{WazdK}m6iwVR=qhTS#|8KIH?qE2N-+u=eQImRXign)myTu5V-phQ`9s?byWR5`ee
zn9?-piDIW?a+L_c>V0z1s{%<b`lGezHx1H-^QVVR3{!<~>Ft@sK$lOw`i;j8FYDD`
zZ<4ZMh)eP;Y+|hP_E1Ts)8>4~z52DWuBXqU@9JILS1^>pP#!>sh(?nf4v{}wK)O2v
zW_RPVGk<@ZwW&&b!7eXG)Lb^N&Zp6$5-0D^qvAcaeIK+kHNBMg2xKhJY$}ovBJpO(
z(Gxq4Yc2!dusyZuC%rTej__dg&Yee%5Lmz_A0q1*BOW7#LhYFICK;;4s-C^B@wl(+
zJO50HZr1-4aY9%=toJ=5$Bsy~s+H7Ve6Ue!1C4*IHO0EvNJK$bd4UVal10;c$WaH&
z`~67H?Tu$2ZWax_b101hNx3E({t2`qhNd5KKgvOlWEVVF?q^P$d3%;#ZQwLbbATI9
z6R`Fm#gyv9Q0UsbLm2cm;I2rm-T3?Vrw>XQuZ<T4r}SD0S9&g5Uu4L97P$V1M~O!*
z1+;%kz+-E0E;L=%AeJtg#GG-lsMJ*5O)eyS4aN#%VUo&<XSopz5ESQ)YNA<ay}tGn
z-=p8|MBNUEdpyQKc@k#?SiP5mSjP~Hj}znq*L@fUA{_froV+yM%#1`UU$|L5D;?HY
zh0;l?#95IZ;B5HqaU3czAo1MJqy@P}I7)xPp9jpJ9k63TvNA|x2~h89XtC-#H=Yjz
z&~sf4GPNOv&<Vq_I<3_>^ge};7%`;fn3wowUE5pU{qx{nK*#aL4;fwzb{e63z_>br
zgejV9Dkm9hZ62ayc;ap0oh5*d?+jMxnsWaMyxKPSmqlgcO9u0eU8)@EX(%}xs_=g*
z3vtHZ_t~U{@YPOtwoFIB>pv;zdL1CM5dvWrUf_H!ZH&tG#zW?%;co$FNBHOskpqEh
zs)IJ|7rk^b=rizu@w}AKb3Kbvu2EBU!h4V^NN`hgX-S%ayH6%lx-KbMC+RDrzILB2
zO!9mLx#VUoL-<?<7Ct$vbroo&UkQH?*i>Z%s(^FTVm5Q81$@B3;vz(W_fb;3;^`An
zX`~2AvYfVhV~n`0=(<UBto$C}W-l3NZFm(vBC>H1m^SU?fdX6fmKWVsTiKDBoU*+$
zWzLBm)~{iu>H7yMhQ2UVP8CMH<HfhaC)glTJH2Iy-{Na9RC_bwDgEDh@<@MY#l7Yc
zA19%3{ddI*7TgUlZe(kzsEP0Ds-M@$NY;akTz!HSnm6{Rpk(PzmK;$ft*2(ApL=@)
zyW8mLVCxJpB_=TFt2Cs}N-%O9CPl8&wJDfP-K$-dM_49p%Uwl6F<9rKZ}vhMEM>QX
ze)$o-^|Lqs{O@z&SYYs`Fu{Mei-JOjZr*X>Rk)!66`7ZqJjw}!*mV;R(SWj#;s>Ny
zl&M?vx`(-X@|Hf+fCi$IgIA~XVoFF`AF;Z4vGn`^0Nt8`4oX3(<{B8XiX3Aatvwz9
z#Mma`+^2+m7>YAL+{1ya+6=KI$2T6UdQ~l6PP3dbcBFP+S9Q=K%r$>~?OPQ9{eQFA
zgZfn`g*}N(?vrO~u6jrey}G~jax?>BwC{2zIPFnxTkk_BToLdyE_9d;*LnP?zHbV_
zozX6(Ivv7jqQ&*^BJ(6odO~$IGz>McSzp7Gx(ki};fF`}y6Ti*?7H$4yr(Jy9|x7l
zF{6Isf<(z4)p#r32aJCgJrgs)iZF{CtVe?H?!cW(M_z_mKF=Lh-J(XxNiGdo{Qy(V
zT8s*hP_Faqd7u>;bKe|;4C_Hz3p>|8l6<ts{ZX;5htiNy{pEeR7jNL8pW@@E4^BK;
zJgt!VL9PlwHia=P6W8!Ck^8V7xA2tDCM>4@btr;{5H{+$J&AwRC9{~gcDl#Rm%(!#
z5Q1-;N2gv7?5U16&E?jF3#uKj6lxiTz$FTcdM=naJ(4?E9*JrlExTb;BIN$a`})+O
zN#WPPpidmZX25T7YuW;zbB>E(PFzyn>cF!{f8jIiw@)zu-NY3hOHV%BuG>_59XL>`
z(CuWT9z7u9)FppZF;ussKB>D%PlG!R>hYRw0P3Bs@DEy{CfId(Q5c3bU!4Ai$LNrO
zx9mzkd20Z&j9*G4#K&|L`BDV}XE344mKy-vLuR_(FfXJ7`*eb*v_*fk+d#__d$U8h
zr6GdG02%F{TQWjEMRu%d+vUKXuC?dbTUw+Na}6Gq30;5Y2MaC9B;jw0SEVUO4c1)w
z17!;ny0RIbFs$_~lFC2dO+2X6SlhehIw&aVbA17O?2{FyqLZ8$T=n{(9wE4tK}VOy
z>okhGq`HghWY*2pd)@~(xOj?YuCVApGiu|+b!gf#w-f5l!tfLS`1l~<2pL?$-5*`r
zGncXawdj9-k$QiPLxPSpC+uYTya$9ViQ`e(4Wo4cYftZFHg1F_1r%;fA35p6EAR|r
z)m&EL^Ws=AzZ|HmKvwK=fqkiUYoD6S8<fjQo9<X*oolhmVw;MmBU=oHmh5tfcMyK-
zQUDEOy!SQUwxUeYSg>XM_`*WfRP@$*tmx-3CZK;adP&|D@c&3TzqnV!;n>R!Kt!DW
z3nj0tpVDx&k99^8{tR)7{Kpx%>n*JUzPU%kVEH4Vb78~zKI5c29GxT6FSXrNq60;b
zRNA%07Hq0G|0^-tb>Wb(*69G8YaFz2osvo?>T+Vgg@h1UQLikBO{0$_SbRf}W_>*K
z_QZcXp;F?KINx_+rr9)8uWU_WqRU9<p{E&(_hIi34lI$G0;{U9tUsfHXxdOEIgs86
zWq_!dkVc8uryFB#Al=F+)(uTh<U<|@-0VhB`cL8~EbU%YU#s${k$)9eFy>{Xt;kvy
z{6SnI*v}<POeh83&*qXeuF4!d{Ek>JB~5=SaX2$3G+tpIl9c(uUD4!zlkeru1!56s
zgQ=S%!G?O-bl9R`rbMlo=}=@gVaJbDs|{8hjb6wKk(m=W$3k-<F#-@g7RL?ZSbXd~
zMqMO4pi1zcLMWvXEE-&lqR5tWg&weZl1gkeOewLBM7_cPPf&)sprf<w7kD|i_9B1J
zGo-K;v98bip}j1FiAE3sr-enC(X361b)X6lg_)&+jnlEpHp2P0J7zht<4=aO)=scU
zC;Z-VCKc)EfzZ;ibD&sfOS8CKzZNRLi$Pk-Bx+hpXihHJn(?vQ{)gMS!$fDOLwuI2
zQN|gVnx7~{4L7OBVcsk5uMHhd10jFON4Q5Qcum+76$$B(d&(Pjj@aW(?(k1b-YE>#
zDhCIru*s<Qt40qs=>MbXGJ^y9ZWw(+20egdRM$FwMp~hY#_;e4H6vxxU~WyqrV$L=
zoLo`HBZPINsxo$63}GTDze?+DU|I59Iy1Zl!Hu&u$th(ViWph)!6gUe2Sb1G4|5#X
zHbh2FdYl3>Tv<eH5I8F=F2*%+EygY=b*Jss2!0k11TcSSuL1d*G!$Fg^5o`*_j;;g
zy#`^&p40LmHn$i2s85dgA5j(!C`ZrWo^Vd3Ol+79G9IpL`QU{Yr*Se;A>u^WyVP*Z
zA}<>`PU$tOqq6&E6U6$Z6n%fr6tYnvJ6?GptHEP|a_DBT1!4_n<!*$(-jmNAEx<g5
z?R0$Pwtgq20{)V6fy`EUc3Wv`Z;n<~d>OJix0;J~&04SmU?J8*``<-nYbcv+T#wdW
zloq6XEQtXQH2~`)o~%%W4N$yN9{)#6xg(!j<qET3LW(qW^5vq@+1`IIJP#TwSv9!*
zSs0MJfY|_S<Y^FlMhaIIG`?$il(=0<bbni*j@G9`a2_6dyf#!Bsx~#(%&LHI8ezfi
zJxO@&l@1zA3P|77?<})5$u5L(0zk*jr&9|7QDQf48anD0W@DeRxK0+pGA%D&@7HFh
z@J;FhEh2riR_q#B_Y!})w{9(tZUY%(dQ%-@sitawM0+Ak1n3G<tWthAlh7lc=)S(5
zMwaZIKymp@xR@Y<aa3Sgf^i0_1iO&#eg+Z=I$@#g)mH%YhUZkPu`IYKt094w^1_0m
z?@aCZAmj8gOyPZ4j!78ZtZ{@(N}zlD!$k=>yIalpnByf*Y%70M51`eVUWQ!x*1mHG
zJ>mJ0C0%W9f`>=iY%P5eELyg4ecuc`Kp9L8%ui%#*4o5b_03NoCIQ-%WaoWLZCxt0
zlHT5}SN=Uhg}zj`zon)az9d~_5}2w|Ows{`G;q&_324QCiWGW3Y~V!$88&QdHyL@b
z>+pXaYPvq-4~TzBobS58nC%oNA!KNGT;L76*B3t?xTfxjBHy?g&BcqW+-e+k6xD1T
zI!J}H62teOLyP^@){Gpjv`C6bz9}Beuj*!f{ZY|P5-B6S%lZjD3Qg99nANQi8odAv
z_E891s7<!%1yH0CVv^*~e~GN-$s;#0ZGHVc8hXfr1YCc@^Y@@*)pV%p$0zX{(z_N4
zoEcbAlut~7o?U`2t4({4V#H@fs26d}3izNFVl*$ku~g+Bp@#x9**l1Jcbc6Gsk^n~
znsXM<C6&b}T@o3sqD0jEZ-<|^srzkm-)<(>&;E63rfR0-R4VPD)i{$4#q8OUsZndo
zD(-{)uMU447;$ycaI|K0n{p7wN@%M5jE5<cC4c6wl{sH&#Sf=JZ5d?Z?3GKz34oO7
zdnwy*KS~aXwp^yCR^{nduI35-Q0x@??k)?$Rp0Aek#ch+Vvf@+=XICGBT!?Xkuqlv
zJk%wYv`N?7ZYD3PCR*|v!RX^*`K6?gh%plcN0fixRFzjtAvONUM6>z#Z(%Pt!F(NJ
z(<pf@uEXz{%01D+OKP)lWyvIrdoqokv9+5qHycNFG+(C(a9&@t0@IHRgVq-NG!Yz3
z0+ll5YtgAm>O|N^Vt^RZkK9E)HU`zRD3Q4&k?zYwLGEEJoae9FrzuukW5DWyl{-cI
h3a%SFG|3~{cVe#j)*M2ms~X$XUvA-X>WWX7%`lh&@R$Gq

delta 4645
zcmV+=658#lDDNkbBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-020-ac}fBR
z^pV9#782cUWMOm?0162>W%55Z5D?I5GQ}mcApsEqe_}w^LDBHim9|tiOf4)kUN8SY
zRr@Qh0lFeKKDkz=F93E;m-uML&>I0}o4v??D4z9b?Qs3WVsD~+UA;er$q58mq0bYX
z^>GQD)YLYNZd#mpyQF2t60s{+8Y@T@In*-}l$rJ5`bVU0f33S>+Q}Yryg^ag!N^9z
zyp<g<e^neNwht+ElBMvpqx}mTybE`VxHK>jgX#1hrDtU$zmkkcy|N6#;9Fi{{#ikj
zpeQ7+AAs^06Euq?c9te7af%ewp8X7wcpPYRNO(BDtGGE*l*9yFf+!jX{aObg?Cf^l
z=$-*myS0@_Q?yX5-O%8lrZJ7mtDvDRaix)gfA5$pnHQ@2CCndmQ1r@giDi}z>YVe$
zZQ`7r&j8uwShJ;+4!{=^lLFfI#Il~$No~GYB-e^_bE+n<7-rJsSM3|`E(oP+t^f%|
zpbJ{lX>klzth|vSA2k!7coB(I0vZ{Z{d|_-{SX3oXNkSBH0eM}F^q@c?QVG)5?%KR
zf9EDF(b^p)eY*PLm<EI+XlV;@s0d{$cQPZ<^q$9qh<py+`9F2U1b5uwL7?>8_LBl;
zcEMsQ8=3EFc=eTEStdb_@kL#<ljk7R?cN^ikvP{bndIn{&b(fctZ}Hq{Ol$RZ*FXp
z^R|=q*|3fm>dblOCTfgD<KF$#r3G|ne{Q}p&bHHXV<U=#Bz~ww583%4Cb7BXah3l)
zK!?d=sSrZJ><zKX@mn5SSe3$hs%z6$kC|EdZoC{0);f>bQt|3*BJ1Wft=9?0Ly%8@
zczpBwg<H9N*!fB*#%>16w<?j^btu<h%Zc{^A<TdW<*Q@xtPJj{{*AR}8CC6Af9rbw
zyK*Bs-S-kR*^R5s$oi6fENLN`!wpWjjycjem~{A3$uF)KC42Q4GQ_8VUOV+M2$d5C
z^q(^G3EVa!kt%{=ZtiFV*JoE&SLm(PbEMx8H7z%tW8lV0nEzznT8QRaN9l$r+i1M(
zf2lw>%Anj(BeV;Qs38|5NAzRNf6@Yy^Jd4YY?<F0o4ELgM2B_|N;92HA9R2s$*YZ|
zy*NF(m=AhhJ{mVgYwsH7EC!v^dtVpqwR2%sHJ#Mnzhl9%I-`~VT#?X?mBtG6u3B%7
znDZr6w*8K~RS*MvKlH~eV-dbI9jQc*iZGeEl96X2Hca4x1Px&uurD@_e^hJHFw+Np
zzaeIEAY3Q}cE`E*+Oo!^@A>aZ(zKrB0J_<H&VZ;+)IyZ&L8FougbKX%jda}Bp6JMv
z!Z%y_?tI_R9VZ9*QXj3c4C^FfH>BMnX+WuAI2_oyi5H&Cl-Z&6-gMMY<og*lnL1;T
z3CMZ_L0FR@Va!pLCg*jyf0N^Q&6nt2MfA-H($0{y7C}&mb8CX8Jw`gGp_B|BX(XVA
zKX<*r2))YbHZs{6KkSGZZmU~{1!>EVflFwUhTFXkTZ_@QsvXA<=H4(<I$S9-Xe|fY
z^mxh3-oh@WbkfD8-2!1Mogq@BUe<-m;7g%?@y-`_Lhwggn$rzJe}->+ikZDAPC~7`
zhh9xO-<qx5_3qWQvcNd4JI60qxpShn6K99pSdtu5#TJ52E^xPtp0vK|;#D1hJ<?R^
zn211B7E5J0P)36g&uw51kSSbk*IA1;VWqtVS!47K20XJI{G@=?>ZD{;p|sxG05yV=
zM8Ti?V{uy2Z}0nYf3w!-ZH29H@c`N&C=inzz#q?Y%YLm#BkhfFa-i{L98#~?x?)nz
z(TS|R=(!<lZtVk}MESzzC|fPax{kNP%?~XRaMW<*wy=hwX`2qfy(!uxeP}>%iG)^e
z0mbTiP%9MARReLdh&HQe7waylTk|hl*k$fF&&rya(4a;Ue_}%f=2Dacm8rEfFxAB(
zganX);!Ia!13beUT{~zc|2&zrB>nnzrGf7a;se&V*mD_(1qi}K)g`uFK_Lvf;^A%(
z9<A%{u8I=mnr<FBe)^`*Aj6IN;G>e7*DD*Fl3YC3j1O*BSJ;w5oD8C)tS!B&|J5+E
z!b1KSmtjKjfB4VY_?EoepFdPx$t=$%`9?@8h^u>Wjan4BQo)y|Aq?*2Fu5CgDOST_
zta=mqF?zZ`hzSGsD>scxw;UW;^<S+JJkC{NW|IN35T4@@8RdL)bakS<B7!RnxM!R%
zk8+%RiEl0JZ;<TD&MX>w3S9jbY1K=~-gnUqo$mzpf4g?|+gymubv&O&ebtJ_VIs4a
z45%H7=U2S=icPwp*dM0gPX;iBy{NR}Ge?!nT&(vxNsma9PCJ4W6bQEWBN1g>N~Go-
ztQH$M9<|$O;YM-DbHPLRV$2#cI8{?*Zh_up<6|ivH)S$Dz(zL<x#HFn)$)J3d~2P+
z5J(hFf3_TEV$HPt0EIS#X*;hhuL&x&b8Y|~=lhNB{<aAi*h)CkeCW=)cAMeT$=7Z-
z6u*G)Z&Sm*%$W5~A18oy#ug9AznU{2nWOy_*u2!q|J$+gMZ`zVjymEeU-I_Ggh%OW
zaq0irFs+*pQube`nu)M2uv9XI$oLbk8}#raf8ujYKQ1Rk`|E9D)YfmIT1V8s#FXD>
zsI;p-JYp-hITb{gZ(?TwcFj(M`gp43b~zpHWtg0|G48UgF4ECkF#`cB!E)-%{e2;~
zt=bRM{<;#{x9XS*9Eiyvle>VvJH0lflk}JRyb~2-jMqxSLkeWqMfuaCd_RB$@2(B~
ze^!hawTA%!1no}>I<^YAOqst5*>gq`uPC`oBBt;EJKXi0r6>hwPeFg9@~)b)^N1t2
zo(Ep=>xxPzkhUZ6R^jnx8~4rBC&RPU<5-8P1BI({&`b}fRtRGt07(ur1^@uBp^w~a
zv68n*C49?3{Y6kF-6X6QHm^a_A1jH0e-cg4kRY)U#iMXv&?P7YsvY+UxiCnAy@TOx
z2HB4q84`<3l19BH&@D*ZKoOBNo(X{(U_=VVP(mLxR36LPz*|40cFoLi49x>8v+xvM
z^!3oMT*~&blPB@-<EKO9h#5M_>)@)$q%JufU%r)fr8%?wI~W`*ul!i$!D!q~e{_x3
zrF^oWX1&Oh7~oN89*75wUT<}DSHrBMB2?7jh9~!NLu`yO0v?QeWkD}kwrxW}Ude;*
z4fkW(Z@EOa0B#p83po|AkzHyYZ+csal6teX-T6x$^<!~uf7(e}4osWL!g#ZEcH2md
z!?`uyWy$iOE?`it$6t}7rWMHae`fDH4MSlnU)MCXswhMi5O`l0UmyvyJu1tX`pI<&
zXHg$uATmkdwFwz&ddRc&u-bR}mnI!Vl2&9sApHPIs<g09Y6^IP{nhainW!$PNh0EU
zopPvho8&BDrD$52ks$TbrFM7xC<*pnJCNPX*_?$5Xib(8m0Q1<{1Kwme>k6tpI<sA
zvN`gLa{F<`^A+MX$aVLd9Ai>LN5>pVsV#SKbckGW&3+h1tAU?_#EG;2mvU9s6Tk^m
zuiB<#*y@HPRKK6^&j-bvp!D387bE>@P3(H*-CKV}+v%isEmHj9OI^Z=YQAxMvS}QB
zxkkusElO}*8R638ySXBbe@OUgS<iJh@8e2}Z&lPyF$=gud2nqqg<%UhUxPcU7x0K^
zR>czK>zXA%)(+UqR1mSugrWc`3q{0-JuzhQNwnJ5oJHNymrau}Nf|@B??SZ(Y}WTW
zcN}vg1N0>6LK2>o`^_d@#~WAYcmc?iJK!li?zYW(dz7q8m;MF*f6BF+<gi!3teQqu
zR)&l^{#H)%-zi{4;QTf^jXvq{aCB;aiKKq-r~9!1^sJAHa*{EgqL)=TLO~;3PB-&C
zuQpe8@eA8}01upaImjGnEsDW`)yFSZCt05;D;aSG=II9?dzYrIsdjV}l=oZye4l%2
zh!MODvZkYwF+{iCe-KE^^L4z9(fZg68_r>=*&SL%HLzh5U4@`jWCkhKJ7D*t)VS;z
z66GKqmiYVAH+L^@A(Bzp$@zB+CnT|$G>H|!to)U3-2%9~C)+^)&4)2e(+iVQQAz|A
zr#+P|mg&)uX$b=Qt>yVUKs{qeIh~}P^9N1exF^fZJOm<0f9rXDK3(3m5bSVk#4k`z
z^>G3!ATrcv1{@_<KIoR4|LF&8C~5NcgHtMiaFS83CqbQ8^>P?$nA6wAz=~|>PJ%Z1
z$i=>KierO!A8p?7<PEPIPuuf)T)56ds<Luwxc!Y+gVQAamJes>i(-x6Rl5!N8g4hc
ztFp$6Yr$&Se@@Mn&he|dB0bFuj+@8<rg%yU1pPH-byaR=F2pS>q*H=!Z-4N|InJ+C
zF4RmV$(=AL476+9-aDh2k~Ku8%1~b*$22W!WNsnsXqs`7eOJgfVE{TTj;2qSUf7M=
zexbi%*3E2LO8jod;&KXDh!Z-~!Hz(d{XBuqvURWAe}&X5CB_(PP7|G4FufjL@nHKw
z`Zb&2y87IwPw}3D4%T2FQK0BeyG>^vC;l~$SR^AxNf>a1dOgoYP{<2vLu|}=wdQ^D
z(lVhynU!NrhSc6x>s8ZBc`rP6j}V=}8vv&Bi>!G?i}bHxu6+#QYRLlnOPW~jJMJl%
z(h!eFe_QAZZt;sZaa?Q4PBRyvr)!JxcDM=A9X{IbE_I^zy7bXeuZhNgu55hoC_n&k
zS`$wZ9XH5Tgmyq1f?<f=u}+zAo5Hp{MT)&F9Th3>BpFkJhKubh*7cGP9BWW;!NBrm
z6Io)N@mp<%o6!R-Se<qq=UHIOIaCE22ozjIe+NC?v3prPx?lg&_Qbn6<VDh8fKnwd
zymNE?HN_KX=9hf_8FNV3ihm4`cT*yCH_$L1$cvYXqj3i}AD!a5OwG}F(2g|I=Sj{q
zp5O;>Dmj)Cs>9MZC*>Q`VDtNCt~zzO@#sTxvBH=7=zrpSb;6N8F`#Y4jjdb}7y|@)
zf9U$xj96f})M`wu%j5~k`ufz>1QL^EhdX3e`KP>hZ{mw@^JOxFf?K8=xD<{_B0%rv
zEw)g#qx$&muA$pk*cQJ_cp6@U=%cRGbwrazIv`b#s;=Qf8<^I^-M>qXdvmnwT5Y+O
zSimMikATyc6qh9*MXQEUi(9K6CU(=qe-yxW|CYleQRPACxe`)BdjmFu@)HG78Ty+c
z^0DdOls{*wZ<k#+wzwvN)tfT>E9!LC{@lq${ej<OnsX=ARswGo_9N;*4HgmNy-}z1
zAByBTR2?`jR4Kp3DbCMz5m!5A_~zNrSSsIu`Ny-iy~+FeG{>3`hOBumg68xzf2fe+
zf&ONg8V+Nem9v~aOJh}fz?!)2*u}k(E)EYQDZmlguCQ~e*q6Mg|1Bnr)Z3w8`dgX|
z1&NG|iqsTFeoPuxm91KMQxyuz5d~1Rwcg?YEjYxfTOX4YZ_tskochHMZR|=qF86P6
z)}O5k?7iFJ*3a71nT0p9m%~5Ke~OR2ZFl>v8hjyLjl<{mVcW;fRMS;CQ0~R9Lq)qU
z6-SSNk~~LXBPVI3yM^7Pk|3J7X#>ln0p6UND1~`qO8QX-CEaFOgiN|LSo9x8ez{ln
zm!M_dVtz{oejO~v4*aB)Co1o}@0(@s(a}y;%Lr12j`%Emx4?)?)MQtLf8QOBa(#mT
zaL<4jTU|}Q^9;!;Umz{DVEwPE7IfN<i2X|pmJ+bB=p6M-va}C;(vyQQ+G4E>{EJAd
zD=#JhxZ5A6wtG25s)0~VbjgOCoHfLL2I9HDYQL1tR<2l*2f&NFYne=5$lt5iIxRiw
zB@Z<9ABUos`IalR&IoeTf2Qx6y_`DP-`Kv55m9ai0a44!KyVosIJmRvzJP?Wyp<^2
zCvFI(V+Z`4hn+^*7>udv&ki&adZraC8Wy$1mFj0aF-w}#fs8AA=K?q7mZQQ^RbxN=
zh6(78YORZ=E!7x-=AS9P-GW`T8urIZOm+ZXb1yY2WW_A6mSb#7S2^<7j;}uRK2vDn
zQasIzcl`$PX=N%)NiO3LY8Yol@BXkvi(KKNX_8GuF$k~ei{FKZ8qMwx3uq14qAyr4
b-ISb_DgD!KOtbL*N&uA}Yt=~bR1)#28+8JP

diff --git a/README.md b/README.md
index 59c695e7..f33c2a29 100644
--- a/README.md
+++ b/README.md
@@ -87,7 +87,7 @@ If you intend to download the scripts from a
 different location (for example from github.com) install the corresponding
 certificate chain.
 
-    /tool/fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/ISRG-Root-X2.pem" dst-path="isrg-root-x2.pem";
+    /tool/fetch "https://rsc.eworm.de/main/certs/ISRG-Root-X2.pem" dst-path="isrg-root-x2.pem";
 
 ![screenshot: download certs](README.d/01-download-certs.avif)
 
@@ -125,7 +125,7 @@ date and time is set correctly!
 
 Now let's download the main scripts and add them in configuration on the fly.
 
-    :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={ /system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ("https://git.eworm.de/cgit/routeros-scripts/plain/" . $Script . ".rsc") output=user as-value]->"data"); };
+    :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={ /system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ("https://rsc.eworm.de/main/" . $Script . ".rsc") output=user as-value]->"data"); };
 
 ![screenshot: import scripts](README.d/04-import-scripts.avif)
 
diff --git a/global-config-overlay.rsc b/global-config-overlay.rsc
index 9afacebd..88bb4d99 100644
--- a/global-config-overlay.rsc
+++ b/global-config-overlay.rsc
@@ -6,7 +6,7 @@
 # https://rsc.eworm.de/#editing-configuration
 
 # Copy relevant configuration from global-config, paste and modify it here.
-# https://rsc.eworm.de/global-config.rsc
+# https://rsc.eworm.de/main/global-config.rsc
 
 
 # End of global-config-overlay

From 54612e333fe72a7fb329f11cf543e87cec80479e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Nov 2025 18:21:39 +0100
Subject: [PATCH 907/988] contrib/template-local: split off from Makefile

---
 Makefile                  |  7 ++-----
 contrib/template-local.sh | 11 +++++++++++
 2 files changed, 13 insertions(+), 5 deletions(-)
 create mode 100755 contrib/template-local.sh

diff --git a/Makefile b/Makefile
index 14aab088..b90002d9 100644
--- a/Makefile
+++ b/Makefile
@@ -31,11 +31,8 @@ rsc: $(GEN_RSC)
 %.capsman.rsc: %.template.rsc contrib/template-capsman.sh
 	contrib/template-capsman.sh $< > $@
 
-%.local.rsc: %.template.rsc Makefile
-	sed -e '/\/caps-man\//d' -e '/\/interface\/wifi\//d' -e 's|%TEMPL%|.local|' \
-		-e '/^# NOT \/interface\/wireless\/ #$$/,/^# NOT \/interface\/wireless\/ #$$/d' \
-		-e '/^# !!/,/^# !!/c # !! Do not edit this file, it is generated from template!' \
-		< $< > $@
+%.local.rsc: %.template.rsc contrib/template-local.sh
+	contrib/template-local.sh $< > $@
 
 %.wifi.rsc: %.template.rsc Makefile
 	sed -e '/\/caps-man\//d' -e '/\/interface\/wireless\//d' -e 's|%TEMPL%|.wifi|' \
diff --git a/contrib/template-local.sh b/contrib/template-local.sh
new file mode 100755
index 00000000..bc5b3272
--- /dev/null
+++ b/contrib/template-local.sh
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+set -e
+
+sed \
+	-e '/\/caps-man\//d' \
+	-e '/\/interface\/wifi\//d' \
+	-e 's|%TEMPL%|.local|' \
+	-e '/^# NOT \/interface\/wireless\/ #$/,/^# NOT \/interface\/wireless\/ #$/d' \
+	-e '/^# !!/,/^# !!/c # !! Do not edit this file, it is generated from template!' \
+	< "${1}"

From 0b7528db99cbb6aa943ddc83498ced13bb0dc013 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 11 Nov 2025 17:07:01 +0100
Subject: [PATCH 908/988] contrib/logo-color: place screenshots below each
 other...

... not side by side.
---
 contrib/logo-color.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index 3aca3248..2c4cef6f 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -37,9 +37,9 @@ something that differentiates? Color it!</p>
 <p>Then right-click, click "<i>Take Screenshot</i>" and finally select the
 logo and download it.</p>
 
-<p><img src="logo-color.d/browser-01.avif" width=533 height=482 alt="Screenshot Browser 01">
-<img src="logo-color.d/browser-02.avif" width=533 height=482 alt="Screenshot Browser 02">
-<img src="logo-color.d/browser-03.avif" width=533 height=482 alt="Screenshot Browser 03"></p>
+<p><img src="logo-color.d/browser-01.avif" width=533 height=482 alt="Screenshot Browser 01"></p>
+<p><img src="logo-color.d/browser-02.avif" width=533 height=482 alt="Screenshot Browser 02"></p>
+<p><img src="logo-color.d/browser-03.avif" width=533 height=482 alt="Screenshot Browser 03"></p>
 
 <p>(This example is with
 <a href="https://www.mozilla.org/de/firefox/new/">Firefox</a>. The workflow

From af5f01a9738ec449d4cb28b1f5718c456f1c9a10 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Nov 2025 00:23:37 +0100
Subject: [PATCH 909/988] INITIAL-COMMANDS: install from rsc.eworm.de

---
 INITIAL-COMMANDS.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 6e70b66a..787c11e6 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -17,7 +17,7 @@ Initial commands
 Run the complete base installation:
 
     {
-      :local BaseUrl "https://git.eworm.de/cgit/routeros-scripts/plain/";
+      :local BaseUrl "https://rsc.eworm.de/main/";
       :local CertCommonName "ISRG Root X2";
       :local CertFileName "ISRG-Root-X2.pem";
       :local CertFingerprint "69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";

From aeca778284ede7b0c1cc3e64c13f93d502a06b9c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Nov 2025 18:22:35 +0100
Subject: [PATCH 910/988] contrib/template-wifi: split off from Makefile

---
 Makefile                 |  7 ++-----
 contrib/template-wifi.sh | 11 +++++++++++
 2 files changed, 13 insertions(+), 5 deletions(-)
 create mode 100755 contrib/template-wifi.sh

diff --git a/Makefile b/Makefile
index b90002d9..fa4cdcb2 100644
--- a/Makefile
+++ b/Makefile
@@ -34,11 +34,8 @@ rsc: $(GEN_RSC)
 %.local.rsc: %.template.rsc contrib/template-local.sh
 	contrib/template-local.sh $< > $@
 
-%.wifi.rsc: %.template.rsc Makefile
-	sed -e '/\/caps-man\//d' -e '/\/interface\/wireless\//d' -e 's|%TEMPL%|.wifi|' \
-		-e '/^# NOT \/interface\/wifi\/ #$$/,/^# NOT \/interface\/wifi\/ #$$/d' \
-		-e '/^# !!/,/^# !!/c # !! Do not edit this file, it is generated from template!' \
-		< $< > $@
+%.wifi.rsc: %.template.rsc contrib/template-wifi.sh
+	contrib/template-wifi.sh $< > $@
 
 clean:
 	rm -f $(HTML) checksums.json
diff --git a/contrib/template-wifi.sh b/contrib/template-wifi.sh
new file mode 100755
index 00000000..5e297d9e
--- /dev/null
+++ b/contrib/template-wifi.sh
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+set -e
+
+sed \
+	-e '/\/caps-man\//d' \
+	-e '/\/interface\/wireless\//d' \
+	-e 's|%TEMPL%|.wifi|' \
+	-e '/^# NOT \/interface\/wifi\/ #$/,/^# NOT \/interface\/wifi\/ #$/d' \
+	-e '/^# !!/,/^# !!/c # !! Do not edit this file, it is generated from template!' \
+	< "${1}"

From ce37544baeb55390e65eceee1c6571e4cea26b41 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Nov 2025 12:18:38 +0100
Subject: [PATCH 911/988] contrib/logo-color: drop width & height properties
 for images

---
 contrib/logo-color.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index 2c4cef6f..55169641 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -37,9 +37,9 @@ something that differentiates? Color it!</p>
 <p>Then right-click, click "<i>Take Screenshot</i>" and finally select the
 logo and download it.</p>
 
-<p><img src="logo-color.d/browser-01.avif" width=533 height=482 alt="Screenshot Browser 01"></p>
-<p><img src="logo-color.d/browser-02.avif" width=533 height=482 alt="Screenshot Browser 02"></p>
-<p><img src="logo-color.d/browser-03.avif" width=533 height=482 alt="Screenshot Browser 03"></p>
+<p><img src="logo-color.d/browser-01.avif" alt="Screenshot Browser 01"></p>
+<p><img src="logo-color.d/browser-02.avif" alt="Screenshot Browser 02"></p>
+<p><img src="logo-color.d/browser-03.avif" alt="Screenshot Browser 03"></p>
 
 <p>(This example is with
 <a href="https://www.mozilla.org/de/firefox/new/">Firefox</a>. The workflow

From fa9c4be576d2de88bf5c95b713abb8b1e03f6480 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 12 Nov 2025 00:25:18 +0100
Subject: [PATCH 912/988] doc/mod/scriptrunonce: get script from rsc.eworm.de

---
 doc/mod/scriptrunonce.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/mod/scriptrunonce.md b/doc/mod/scriptrunonce.md
index 955d12ed..1fbb697f 100644
--- a/doc/mod/scriptrunonce.md
+++ b/doc/mod/scriptrunonce.md
@@ -48,7 +48,7 @@ Usage and invocation
 The function `$ScriptRunOnce` expects an URL (or name if
 `ScriptRunOnceBaseUrl` is given) pointing to a script as parameter.
 
-    $ScriptRunOnce https://git.eworm.de/cgit/routeros-scripts/plain/doc/mod/scriptrunonce.d/hello-world.rsc;
+    $ScriptRunOnce https://rsc.eworm.de/main/doc/mod/scriptrunonce.d/hello-world.rsc;
 
 ![ScriptRunOnce](scriptrunonce.d/scriptrunonce.avif)
 

From 93eb218589cbaa0c567b0acbeb463d75543ed826 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Nov 2025 15:30:30 +0100
Subject: [PATCH 913/988] global-functions: $FetchUserAgentStr: add commit info
 in user agent string

---
 global-functions.rsc | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 48aaf7fb..dccb8b6e 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -539,10 +539,16 @@
 :set FetchUserAgentStr do={
   :local Caller [ :tostr $1 ];
 
+  :global CommitId;
+  :global CommitInfo;
+
+  :global IfThenElse;
+
   :local Resource [ /system/resource/get ];
 
-  :return ("User-Agent: Mikrotik/" . $Resource->"version" . " " . \
-    $Resource->"architecture-name" . " " . $Caller . "/Fetch (https://rsc.eworm.de/)");
+  :return ("User-Agent: Mikrotik/" . $Resource->"version" . " " . $Resource->"architecture-name" . \
+    " " . $Caller . "/Fetch (https://rsc.eworm.de/" . [ $IfThenElse ($CommitId != "unknown") \
+    ("; " . $CommitInfo . "/" . [ :pick $CommitId 0 8 ]) ] . ")");
 }
 
 # check for existence of file, optionally with type

From b285f2c5d291513f11e8a8f6fd26b316c2cfc8ae Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Nov 2025 19:48:02 +0100
Subject: [PATCH 914/988] global-functions: add and fix global scheduler
 automatically...

... and also adjust README and INITIAL-COMMANDS.
---
 INITIAL-COMMANDS.md                       |   3 ---
 README.d/05-run-and-schedule-scripts.avif | Bin 1946 -> 0 bytes
 README.d/05-run-scripts.avif              | Bin 0 -> 1801 bytes
 README.md                                 |   6 +++---
 global-functions.rsc                      |   9 +++++++++
 5 files changed, 12 insertions(+), 6 deletions(-)
 delete mode 100644 README.d/05-run-and-schedule-scripts.avif
 create mode 100644 README.d/05-run-scripts.avif

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 787c11e6..374f7165 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -45,9 +45,6 @@ Run the complete base installation:
       };
       :put "Loading configuration and functions...";
       /system/script { run global-config; run global-functions; };
-      :put "Scheduling to load configuration and functions...";
-      /system/scheduler/remove [ find where name="global-scripts" ];
-      /system/scheduler/add name="global-scripts" start-time=startup on-event="/system/script { run global-config; run global-functions; }";
       :if ([ :len [ /certificate/find where fingerprint=$CertFingerprint ] ] > 0) do={
         :put "Renaming certificate by its common-name...";
         :global CertificateNameByCN;
diff --git a/README.d/05-run-and-schedule-scripts.avif b/README.d/05-run-and-schedule-scripts.avif
deleted file mode 100644
index 37e1173f13037180a42ff7451fdd8bac7728211f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1946
zcmXv|2{_by7ao$eCd(wt7ly$|Vk}v&XplV_jHon&(ccX7Czq5k;o7$l*H)IS4IzY#
zE&DbZMAqzkK1tM9zTrOi{GQ+Yp7XxvIp;ti5D9{hKZx@M2oPo*u?Ijvc>p+qg+5B3
zDeZW;`rwW{W+3mmki7p%ArKI7_W3tIViJJ=cMKE+d_0al7AA@TB(n2SWdMP&Fy9eE
zSVSNY_F!g?1OU(D-N%jyvv6f)%10H>R|$nClgP&_-2u=WWa?%B=uBoZ47d-v9yLNB
zClE|fWqw`|cmNzLoSd9YK85o|p(zqa3Piw}O!D@0COu$IKK;+?a{%apJ2sCGV`E_r
zVPjqu;o*Yw;fHW@X-IqPjOn5E^Od(xnRl^Gh7=&M-=B?nuB=++KIK!*zj-nuZ`T(R
zb?!7L)>2A*Bhmb_+KJlDU!)ArQ;6sdjl?MLjWVMlQ?a)qYD*%M@XzRZeHo!~sMR$?
zJ^Dw5vuDC5lUYDoRuXx)rccKJmTg1(08KAPUSEG~yCNY%aVTl#`0jsWOEkPW%rJB)
zqo#89{MixivjrR-$t3F53?h=Fibus;smz;&)c?Yxb|cV1+)hIat2lL6I(K>%%3skG
zrTy|0sp9ovJo{?wT#?gs$553HT`9d7lOoI;F-_CT8zD(J*SNi(?7AqE&`+nzgu-4o
z&PFh@GxA%Dv=x(tC+(?JFGk-u`$2OToZitfTWzar@^!{sVMs-kbWN-bUYSfUYzKLe
z+;dTZv=H2Ko7(J3hJRL&+3V5y;y-z|2k!DHwxP7?RC4qNS^7T5NB=hy)pd`IHv|vI
zf|FwFPe5+b3bLCTdieYTUi{UoZZxjd0Poj&<v2!}Kp|SkP3%+eIeu#zEzt8UA!<JV
zqFyufgi*fp_Cpre`^IYUWHO=Kc3!D_k7(HgeWz<|!`S;&#4ltJi<L9UWqt9;y+`cE
zJ$stkIRS&!PV$YAViCJMRiUb-Uryx+zJj<D(Tq*p{bw-S9wnLhHOGy+9mBewD!Id9
zZ-_aSWdR?@c#=|9V=woELYAGE_7lb|RvyYzZih$Cy{kQ4fDW{MpYQ1V@T+MtVaBb$
zBc<?nZJ@zhpH>;i%3EK19;2(Kie5|V8;|{^X8EPZmvedw-&?VkI`Ct*t{9KR_iOI$
zxBqBqc$sr5I8!S?Mr3NaY!1i<GA0D<97*MG_0kX~YFOao`Ns*p%IV9-Yt`ymw>fg6
z<%Xvf4MUyc&tH8edBz{^V@kA~r2GuDQKIQqb9ou+oY_n(nX~EDeAQ7gqkAH3YT1qL
zohG=IK{+smMFwDO*Fq+w@5sAq`pp)Fw%+=4OvfhVtnB_0NFZM2CL*3~^R`$D#U|=O
z8?8*{!B0`8DTKc<CfEIBh4)^Cc~wv~{R?awakGG)4ds)>!deUBVQ6OQPt%~$>nko|
zpRYyyPc&ygdzG#vVPQANS1SZ<`Q?@$r8h-(TT<XU2w6Qq(m;V33`V<^5SP<E<6MOk
zw!aC@c`_Wq-?1s9y#4~SrY=|!Wxgm|@E~@eSJuejTb4qcbG0$cIVE~PmPFJj-HMl0
zG1K`>zbOK}H;{n$vv80LxMSyZvyEpd?YVo!o2R{>Ex$%ym{+5B)H+Jw<qPfgYi+(2
z2;Lp(eR6eBea3dE(zxm3@*;`_rn+4Fi+y1+neO&d;T@0VXne!Y>G5EV;37#Iqu#1!
zvdN9auvJfG`{v}9!@kT9keUB(S=AevjkkqK!$PDkz%gxdpkX~5^;h201&r4F_Btv~
z+YERyu*ep>)&sv<7h!=PZi*BX8b}?-#fXbEE4@uO|KJqt4$t06_zfEz2-ihyHEfqE
z#~6erZ?>y^V{IF3ety=KG#MO?H}jUbLi9of?Nap;yBvpmoEXBX5FH1Y^_y$o;gnv7
zCCSe@(`mt17>*#klDGvQ5!2l)4f47Po46<wnpeD1N{zbG^5YS9zfNwrUy2+$KSC2!
z#KdrZGQ%JZ^f;%o45hIi@+)76wgzmMv2lvA?xLc^f(iMX>6v!I5)sssh2fp$br%@k
zYT^M~2tlx@E2gs-kEiz$7aQVqvrz|xh28Nhp(L_up&cWIL%(f7whMdd_n@u|^^bgA
zM&boC>sdzHA+?yazT{)xr<1(7bA8}qP&uj^$%0A{ksq{gM{bak&<v?v-mm+fS^U&x
zS~piWzGWX~Yf3=p{O3DxJ|3S_`wbp<J1<`t{S$3Xxs)WkzO(5dnn{fFk-5Di<JBqW
z4$DJ)mkZIi(YPNqALjR*OPO{x7v(bECfS?;ZL1JSTrV0q_(SA=0J|2C_&jGlwPa79
z;v4A0KJm9~bAxF(cCbE1n>9-{{^f?7_&VFc^>x)WdiIJ}K(QIFzv*=i78)ovVJ&{|
zaziB_X8q}Gyc~~l<T6xRX&x9)OVqGKEo=*v^l)tckPNPKYYlDG=M^0&a^7WZGCU4{
zrpKL5Qr-~ABW9=aHgc=naVj)u<m#86+542*#N~>tAl$01F`kyBbYoy$Qs!Vy3d|ZA
JV`^E{{(m}8biDuo

diff --git a/README.d/05-run-scripts.avif b/README.d/05-run-scripts.avif
new file mode 100644
index 0000000000000000000000000000000000000000..e3b8b8b424f0502cc08fc7932742e97aa50ce7f5
GIT binary patch
literal 1801
zcmXw02{hZ;7Y-t$mWq9-oz9?^A~Cha+Of2jv8$yLOZ#gQ(jX17WYDHn6=K?A>{^tm
zMxs=Vt+m%yTQStw1{I2GX!$eYf9AgP?)TmAyXW0|&I5r!%3)D4I3xiG199URu|SwU
z7C?qMS?ODGr8R756!O^PhRXF24F3NV1i}HqQUCG(@H7sH!k!d7+^h&-B7%=ATM&qc
zdyX@RM*;-m=Ww|O0EC|mJ#pl?MJVraGq(pxIInLLfr&VobpycRaa{cpfD4Y`q9hQB
z3q5WGf%w$93C6up96$t46afJNE(#+F`Zm8RA1fe<;0O#pJQzddzAOTQkhzi!fWsn>
zJ#KIp1M~1EgSlHBVndKo;vhlDg|m3G33Y>2q08Oi>EtqX@8$CN;ytqxuaWA|m4u!p
zLes+#NA#u4W$Epyxa`we<R8#)_kKvG_zJ@BQDKb@gY>qjc-B=lv7myTFQ>JS$~7x5
zd-Q3#-~IHVi7)bUi%6%`@PVBxdm-VOO2-AtiVP}gmzh>4Z}dXLR*pC=hIpACIeBe&
zNLqtdtR~&}_%SYk-_t^AY4ZFd79**~jw+iQcMr=$|81=eEhNmL>BJ*!{Ow9S)-<h`
zVHP^9bk0@(*7>+t!cOQKXHpJ=_+Ap?|4~|gB=t%^<6P@S+yH6eg)?;&{3dp_1%}qG
zd_OkrCF&R1n2~xl?VJ<xbb(2!Vr7-N5I^FIO82jjTs%f2I$$Ae0;J+mW>p`rbU|Yj
zh(5KVdcR&K^%3Su$yu#bPMoF+H3L{jT7vZs1|eg4MLVB|&Bv9psvXFWeGKu7{p7L~
zw`eBH^G@}5_&0m@578XhBFl7f0|_N<py4WK7GBycsQv9G)wF-dKOyYV16bZ@d`rTt
znM|1*OfN(*#=*6+*)&c3twFCqs-6p^qqhGip8?_>a=Aq8*9msJY0GA_XU4NRcp@}H
zZ_{{{?>!Vm=tbNL`gy1!`FE7Vw!%<Pt#Kwcyn}LA*h)aoqE3z6&1@JP55c2uty5_K
zkQJVxCQ$NfQU-K^nSA^3kV%@)*Jgv-_BG;jEaETO@v7_4cR4ru@|+&(i+YnB%JiRQ
zv$Kf5^<;xY+vcYdNC7>qu+S8zc?-6Sc0E#|n}7aC^jb_Ynr2^YZC#v`IPKr}Ptk^|
z?Y<J!_Z4r5m+orctV^R{>xu}wc_V1oZ$=#FJEbOhMoaFduTAu7MwigV=pS2=6CQnm
z&Q41!ipn+kKrzde@u0s8>ZQ&qJ~g&8C=kAH5~u#n+N*GaBhJxYT54hGJ@qA;2K?#V
zAgmn`cPF`=y0=!=Z1hw4yWL2J`^OAsMeuBq-Z}Q>tEe-J0<L_B?EM30je+-O2%29t
z+(War<cUwF7xNLMigec!hF?y=9~gd+b1{}_cY+%=4~fE(M|KT=_K~J+H^qN+`{PS-
z8a;<U-&C8^P`LlquvE-l)TdLoO26cnD=tRNm_xwnm%}3T_r<J<r+P;j@xgpm-j}?!
zGLj<Zh67$*3TzvQ{f5dNb{Rh)S^VKhA>33c^dfJ0RnTi{EPAo;CE4Y9d#-+yJTKDD
z3(eZ?Y=}`xXB{crznIg{-s~U+R~s>yr~bE(s9el^J=P|tRqC<5H+Gv>=qTN~Za@&z
z1Ibxw*R{{{y&YRd`m(fMr@cdxfJzzJ+tPf-n8Q5T_4%6;V+38k7hA~>Ovh*_>HeVl
zmk0cf2z%vgR*n?s{B*bk&|VgQCeX*cyAp5FAe-)qyg{r>XDBAgl4ew?3Xnlw$n?#9
zduy}YZbNO3|G5<0i0i$!Wld$mNS91&=ktwJ#ugqel)k6~FNK+)2Z!htn~84=)4Cc_
z_jPgcEM}~5AHJ7A>edW>Tk5uU?q@e*@Jnzp!!ZTJt^%7(Z(Rp#JGY$$1nD(K<OAYv
zoUKk`95XX%t7^ZxQ|Ek>YiHNel9?bC=0rg<oDVL-XO?%`obj)6<V~AU?iRPcS^JIW
zUCha<N!60C^(SKXkBm)xN~O{LTTgNgG17IK-nhI_=u_|>h23|m9G+V(`24{D{rZw@
zwrEUHvf`2GV$rbJ5MgI0N`d<6aVYzVB)p5{2(?{ks1X0Gbhlad>)Mo;7|X6dE9KN*
zffQ=PMCG<+_6MSG&Xk_G;p=rP2yfEdh~_(Wwk6H55Z<<PsNe8~I29x<`RA5IW-`jA
z#s1KpVkc}bZ~6Lm%$&7c6Bu7opsYo8VEwL{HyU^2+5_<*o%PoJX4-d%8j)OD1(d<Z
zI$T*#bX0WSds7gr1kM*oBk&(I`I@WlPIz^#Y$Z+eb$fPvdY%ub7lx}QPMV8Uk0$j>
f0rP^B=6p`ZLaprrjEG=8GH{uaQqby)Bxw8#n%yM%

literal 0
HcmV?d00001

diff --git a/README.md b/README.md
index f33c2a29..e3165a3b 100644
--- a/README.md
+++ b/README.md
@@ -129,12 +129,12 @@ Now let's download the main scripts and add them in configuration on the fly.
 
 ![screenshot: import scripts](README.d/04-import-scripts.avif)
 
-And finally load configuration and functions and add the scheduler.
+And finally run configuration and functions. This will also add the
+scheduler for loading at system startup automatically.
 
     /system/script { run global-config; run global-functions; };
-    /system/scheduler/add name="global-scripts" start-time=startup on-event="/system/script { run global-config; run global-functions; }";
 
-![screenshot: run and schedule scripts](README.d/05-run-and-schedule-scripts.avif)
+![screenshot: run scripts](README.d/05-run-scripts.avif)
 
 > 💡️ **Hint**: You see complaints regarding syntax errors? Most likely the
 > RouterOS on your device is too old. Check for updates!
diff --git a/global-functions.rsc b/global-functions.rsc
index dccb8b6e..db9eac6b 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1900,6 +1900,15 @@
   }
 }
 
+# add (and fix) global scripts scheduler
+:local OnEvent "/system/script { run global-config; run global-functions; }";
+:if ([ :len [ /system/scheduler/find where name="global-scripts" ] ] = 0) do={
+  /system/scheduler/add name="global-scripts" start-time=startup;
+}
+:if ([ /system/scheduler/get "global-scripts" on-event ] != $OnEvent) do={
+  /system/scheduler/set "global-scripts" on-event=$OnEvent;
+}
+
 # Log success
 :local Resource [ /system/resource/get ];
 $LogPrintOnce info $ScriptName ("Loaded on " . $Resource->"board-name" . \

From 638258000beb96722056f5a52b9b7fad2ba59180 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 13 Nov 2025 19:34:10 +0100
Subject: [PATCH 915/988] contrib/commitinfo: support updating the commit info

---
 Makefile              | 6 +++++-
 contrib/commitinfo.sh | 6 ++++++
 2 files changed, 11 insertions(+), 1 deletion(-)
 create mode 100755 contrib/commitinfo.sh

diff --git a/Makefile b/Makefile
index fa4cdcb2..2e3ba0d7 100644
--- a/Makefile
+++ b/Makefile
@@ -12,7 +12,7 @@ DATE		?= $(shell date --rfc-email)
 VERSION		?= $(shell git symbolic-ref --short HEAD 2>/dev/null)/$(shell git rev-list --count HEAD 2>/dev/null)/$(shell git rev-parse --short=8 HEAD 2>/dev/null)
 export DATE VERSION
 
-.PHONY: all checksums docs rsc clean
+.PHONY: all checksums commitinfo docs rsc clean
 
 all: checksums docs rsc
 
@@ -21,6 +21,10 @@ checksums: checksums.json
 checksums.json: contrib/checksums.sh $(ALL_RSC)
 	contrib/checksums.sh > $@
 
+commitinfo: global-functions.rsc
+	contrib/commitinfo.sh $< > $<~
+	mv $<~ $<
+
 docs: $(HTML)
 
 %.html: %.md general/style.css contrib/html.sh contrib/html.sh.d/head.html contrib/html.sh.d/foot.html
diff --git a/contrib/commitinfo.sh b/contrib/commitinfo.sh
new file mode 100755
index 00000000..21faf9fc
--- /dev/null
+++ b/contrib/commitinfo.sh
@@ -0,0 +1,6 @@
+#!/bin/sh
+
+sed \
+	-e "/^:global CommitId/c :global CommitId \"${COMMITID:-unknown}\";" \
+	-e "/^:global CommitInfo/c :global CommitInfo \"${COMMITINFO:-unknown}\";" \
+	< "${1}"

From 903a3f44a0b14cee3fb150aeea5c8f807b8626a2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 17 Nov 2025 09:31:36 +0100
Subject: [PATCH 916/988] contrib/html: support click on code block to copy to
 clipboard

---
 contrib/html.sh             | 2 ++
 contrib/html.sh.d/head.html | 1 +
 general/clipboard.js        | 4 ++++
 3 files changed, 7 insertions(+)
 create mode 100644 general/clipboard.js

diff --git a/contrib/html.sh b/contrib/html.sh
index 2fe9ef77..39589dac 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -10,12 +10,14 @@ sed \
 	-e "s|__LOGO__|$(realpath --relative-to="${RELTO}" logo.png)|" \
 	-e "s|__EWORM__|$(realpath --relative-to="${RELTO}" general/eworm-meadow.avif)|" \
 	-e "s|__QR_CODE__|$(realpath --relative-to="${RELTO}" general/qr-code.png)|" \
+	-e "s|__CLIPBOARD__|$(realpath --relative-to="${RELTO}" general/clipboard.js)|" \
 	< "${0}.d/head.html"
 
 markdown -f toc,idanchor "${1}" | sed \
 	-e 's/href="\([-_\./[:alnum:]]*\)\.md\(#[-[:alnum:]]*\)\?"/href="\1.html\2"/g' \
 	-e '/<h[1234] /s| id="\(.*\)">| id="\L\1">|' \
 	-e '/<h[1234] /s|-2[1789cd]-||g' -e '/<h[1234] /s|--26-amp-3b-||g' \
+	-e '/^<pre>/s|pre|pre onclick="CopyToClipboard(this)"|g' \
 	-e '/The above link may be broken on code hosting sites/s|blockquote|blockquote style="display: none;"|'
 
 sed \
diff --git a/contrib/html.sh.d/head.html b/contrib/html.sh.d/head.html
index da541579..861a87b8 100644
--- a/contrib/html.sh.d/head.html
+++ b/contrib/html.sh.d/head.html
@@ -3,6 +3,7 @@
 <title>RouterOS Scripts :: __TITLE__</title>
 <link rel="stylesheet" type="text/css" href="__STYLE__">
 <link rel="icon" type="image/png" href="__LOGO__">
+<script type="text/javascript" src="__CLIPBOARD__"></script>
 </head><body>
 
 <table><tr>
diff --git a/general/clipboard.js b/general/clipboard.js
new file mode 100644
index 00000000..fceff85e
--- /dev/null
+++ b/general/clipboard.js
@@ -0,0 +1,4 @@
+/* copy code to clipboard */
+function CopyToClipboard(element) {
+  navigator.clipboard.writeText(element.firstElementChild.innerHTML);
+}

From a61fbfb75ce42f5341ceb0bcbb521793c6f7f514 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 17 Nov 2025 09:53:30 +0100
Subject: [PATCH 917/988] =?UTF-8?q?general/style:=20add=20a=20"?=
 =?UTF-8?q?=F0=9F=93=8B=20Copy!"=20hint=20to=20code=20blocks?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 general/style.css | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/general/style.css b/general/style.css
index ea9b1118..191c0f65 100644
--- a/general/style.css
+++ b/general/style.css
@@ -69,6 +69,12 @@ pre code {
   padding: 0;
   border: 0;
 }
+pre::before {
+  content: "📋 Copy!";
+  float: right;
+  border: 1px solid #ccc;
+  border-radius: 3px;
+}
 span.link {
   color: #863600;
 }

From 4f778cb1c608e384bf75de267bdf9b7ea1facf00 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 19 Nov 2025 16:38:27 +0100
Subject: [PATCH 918/988] general/clipboard: add a visual feedback

---
 general/clipboard.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/general/clipboard.js b/general/clipboard.js
index fceff85e..30c31346 100644
--- a/general/clipboard.js
+++ b/general/clipboard.js
@@ -1,4 +1,8 @@
 /* copy code to clipboard */
 function CopyToClipboard(element) {
+  element.style.filter = 'invert(1)';
   navigator.clipboard.writeText(element.firstElementChild.innerHTML);
+  setTimeout(function() {
+    element.style.filter = 'invert(0)';
+  }, 100);
 }

From ed9dee3c5f4c45da17d67fb685436d563c929ff0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 17 Nov 2025 11:03:02 +0100
Subject: [PATCH 919/988] contrib/html: simplify handling of relative paths

---
 contrib/html.sh             |  7 ++-----
 contrib/html.sh.d/head.html | 10 +++++-----
 2 files changed, 7 insertions(+), 10 deletions(-)

diff --git a/contrib/html.sh b/contrib/html.sh
index 39589dac..098ba467 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -6,11 +6,8 @@ RELTO="$(dirname "${1}")"
 
 sed \
 	-e "s|__TITLE__|$(head -n1 "${1}")|" \
-	-e "s|__STYLE__|$(realpath --relative-to="${RELTO}" general/style.css)|" \
-	-e "s|__LOGO__|$(realpath --relative-to="${RELTO}" logo.png)|" \
-	-e "s|__EWORM__|$(realpath --relative-to="${RELTO}" general/eworm-meadow.avif)|" \
-	-e "s|__QR_CODE__|$(realpath --relative-to="${RELTO}" general/qr-code.png)|" \
-	-e "s|__CLIPBOARD__|$(realpath --relative-to="${RELTO}" general/clipboard.js)|" \
+	-e "s|__GENERAL__|$(realpath --relative-to="${RELTO}" general/)|" \
+	-e "s|__ROOT__|$(realpath --relative-to="${RELTO}" ./)|" \
 	< "${0}.d/head.html"
 
 markdown -f toc,idanchor "${1}" | sed \
diff --git a/contrib/html.sh.d/head.html b/contrib/html.sh.d/head.html
index 861a87b8..656a63c0 100644
--- a/contrib/html.sh.d/head.html
+++ b/contrib/html.sh.d/head.html
@@ -1,14 +1,14 @@
 <!DOCTYPE html><html lang="en">
 <head><meta http-equiv="content-type" content="text/html; charset=UTF-8">
 <title>RouterOS Scripts :: __TITLE__</title>
-<link rel="stylesheet" type="text/css" href="__STYLE__">
-<link rel="icon" type="image/png" href="__LOGO__">
-<script type="text/javascript" src="__CLIPBOARD__"></script>
+<link rel="stylesheet" type="text/css" href="__GENERAL__/style.css">
+<link rel="icon" type="image/png" href="__ROOT__/logo.png">
+<script type="text/javascript" src="__GENERAL__/clipboard.js"></script>
 </head><body>
 
 <table><tr>
-  <td><img src="__EWORM__" alt="eworm on meadow" /></td>
-  <td><img src="__QR_CODE__" alt="QR code: rsc.eworm.de" /></td>
+  <td><img src="__GENERAL__/eworm-meadow.avif" alt="eworm on meadow" /></td>
+  <td><img src="__GENERAL__/qr-code.png" alt="QR code: rsc.eworm.de" /></td>
   <td class="head"><span class="top">RouterOS Scripts</span><br />
     <span class="bottom">a collection of scripts for MikroTik RouterOS</span></td>
 </tr></table>

From e10455fb18ee82480fc5e115a658c356f1e806ae Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 17 Nov 2025 13:17:17 +0100
Subject: [PATCH 920/988] contrib/static-html: split off from Makefile

---
 contrib/Makefile          | 7 ++-----
 contrib/logo-color.html   | 2 +-
 contrib/notification.html | 2 +-
 contrib/static-html.sh    | 8 ++++++++
 4 files changed, 12 insertions(+), 7 deletions(-)
 create mode 100755 contrib/static-html.sh

diff --git a/contrib/Makefile b/contrib/Makefile
index cdb9f4cd..f7043785 100644
--- a/contrib/Makefile
+++ b/contrib/Makefile
@@ -6,8 +6,5 @@ HTML	:= $(wildcard *.html)
 
 all: docs
 
-docs: $(HTML)
-	sed -i \
-		-e '/href=/s|\.md|\.html|' \
-		-e '/blockquote/s|/\*! display \*/|display: none;|' \
-		 $(HTML)
+docs: static-html.sh $(HTML)
+	./static-html.sh $(HTML)
diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index 55169641..a45ea93e 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -18,7 +18,7 @@
 
 <p><a href="../README.md">⬅️ Go back to main README</a></p>
 
-<blockquote style="/*! display */"><p>💡️ <strong>Hint</strong>: This site or links
+<blockquote style="/* display */"><p>💡️ <strong>Hint</strong>: This site or links
 on it may be broken on code hosting sites. Use
 <a href="https://rsc.eworm.de/main/contrib/logo-color.html">Logo Color Changer</a>
 instead.</p></blockquote>
diff --git a/contrib/notification.html b/contrib/notification.html
index 902d328f..a618f229 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -18,7 +18,7 @@
 
 <p><a href="../README.md">⬅️ Go back to main README</a></p>
 
-<blockquote style="/*! display */"><p>💡️ <strong>Hint</strong>: This site or links
+<blockquote style="/* display */"><p>💡️ <strong>Hint</strong>: This site or links
 on it may be broken on code hosting sites. Use
 <a href="https://rsc.eworm.de/main/contrib/notification.html">Notification Generator</a>
 instead.</p></blockquote>
diff --git a/contrib/static-html.sh b/contrib/static-html.sh
new file mode 100755
index 00000000..2c6f595c
--- /dev/null
+++ b/contrib/static-html.sh
@@ -0,0 +1,8 @@
+#!/bin/sh
+
+set -e
+
+sed -i \
+	-e '/href=/s|\.md|\.html|' \
+	-e '/blockquote/s|/\* display \*/|display: none;|' \
+	"${@}"

From a64e9bed80fbe7c2da5be5034732ca1b87ca06fa Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 18 Nov 2025 18:53:29 +0100
Subject: [PATCH 921/988] contrib/static-html: find static html files by
 comment

---
 contrib/Makefile          | 2 +-
 contrib/logo-color.html   | 1 +
 contrib/notification.html | 1 +
 3 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/contrib/Makefile b/contrib/Makefile
index f7043785..9417af34 100644
--- a/contrib/Makefile
+++ b/contrib/Makefile
@@ -1,6 +1,6 @@
 # Makefile
 
-HTML	:= $(wildcard *.html)
+HTML	:= $(shell grep -xl '<!-- static html //-->' *.html)
 
 .PHONY: all docs
 
diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index a45ea93e..1d67b4ec 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -1,4 +1,5 @@
 <!DOCTYPE html><html lang="en">
+<!-- static html //-->
 <head><meta http-equiv="content-type" content="text/html; charset=UTF-8">
 <title>RouterOS Scripts :: Logo Color Changer</title>
 <link rel="stylesheet" type="text/css" href="../general/style.css">
diff --git a/contrib/notification.html b/contrib/notification.html
index a618f229..248565db 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -1,4 +1,5 @@
 <!DOCTYPE html><html lang="en">
+<!-- static html //-->
 <head><meta http-equiv="content-type" content="text/html; charset=UTF-8">
 <title>RouterOS Scripts :: Notification Generator</title>
 <link rel="stylesheet" type="text/css" href="../general/style.css">

From e0b12a9050eeb1c231ace3b5b5186b34514e563d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 18 Nov 2025 19:01:39 +0100
Subject: [PATCH 922/988] contrib/static-html: add badges

---
 contrib/Makefile          | 5 ++++-
 contrib/badges.md         | 6 ++++++
 contrib/logo-color.html   | 2 ++
 contrib/notification.html | 2 ++
 contrib/static-html.sh    | 2 ++
 5 files changed, 16 insertions(+), 1 deletion(-)
 create mode 100644 contrib/badges.md

diff --git a/contrib/Makefile b/contrib/Makefile
index 9417af34..ef0e41dc 100644
--- a/contrib/Makefile
+++ b/contrib/Makefile
@@ -6,5 +6,8 @@ HTML	:= $(shell grep -xl '<!-- static html //-->' *.html)
 
 all: docs
 
-docs: static-html.sh $(HTML)
+badges.html: badges.md
+	markdown $< > $@
+
+docs: static-html.sh $(HTML) badges.html
 	./static-html.sh $(HTML)
diff --git a/contrib/badges.md b/contrib/badges.md
new file mode 100644
index 00000000..24bd2055
--- /dev/null
+++ b/contrib/badges.md
@@ -0,0 +1,6 @@
+[![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
+[![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
+[![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index 1d67b4ec..84365a64 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -17,6 +17,8 @@
 
 <h1>Logo Color Changer</h1>
 
+<!-- badges here //-->
+
 <p><a href="../README.md">⬅️ Go back to main README</a></p>
 
 <blockquote style="/* display */"><p>💡️ <strong>Hint</strong>: This site or links
diff --git a/contrib/notification.html b/contrib/notification.html
index 248565db..a0580bd3 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -17,6 +17,8 @@
 
 <h1>Notification Generator</h1>
 
+<!-- badges here //-->
+
 <p><a href="../README.md">⬅️ Go back to main README</a></p>
 
 <blockquote style="/* display */"><p>💡️ <strong>Hint</strong>: This site or links
diff --git a/contrib/static-html.sh b/contrib/static-html.sh
index 2c6f595c..7acf1041 100755
--- a/contrib/static-html.sh
+++ b/contrib/static-html.sh
@@ -5,4 +5,6 @@ set -e
 sed -i \
 	-e '/href=/s|\.md|\.html|' \
 	-e '/blockquote/s|/\* display \*/|display: none;|' \
+	-e '/<!-- badges here \/\/-->/r badges.html' \
+	-e '/<!-- badges here \/\/-->/d' \
 	"${@}"

From 70675a9feea715d9e3618f80011d948f222ac35a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 18 Nov 2025 19:18:43 +0100
Subject: [PATCH 923/988] contrib/Makefile: add target clean

---
 contrib/Makefile | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/contrib/Makefile b/contrib/Makefile
index ef0e41dc..e755a1d5 100644
--- a/contrib/Makefile
+++ b/contrib/Makefile
@@ -2,7 +2,7 @@
 
 HTML	:= $(shell grep -xl '<!-- static html //-->' *.html)
 
-.PHONY: all docs
+.PHONY: all docs clean
 
 all: docs
 
@@ -11,3 +11,7 @@ badges.html: badges.md
 
 docs: static-html.sh $(HTML) badges.html
 	./static-html.sh $(HTML)
+
+clean:
+	rm -f badges.html
+	git checkout HEAD -- $(HTML)

From b97a434a9c0c59d9d2b0cc8e3856f243f52de8eb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 19 Nov 2025 08:21:36 +0100
Subject: [PATCH 924/988] Makefile: also clean contrib

---
 Makefile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Makefile b/Makefile
index 2e3ba0d7..5db0a303 100644
--- a/Makefile
+++ b/Makefile
@@ -43,3 +43,4 @@ rsc: $(GEN_RSC)
 
 clean:
 	rm -f $(HTML) checksums.json
+	make -C contrib/ clean

From 725eb834f439d3c7051a819caaa4eebcdedce06d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 10:58:37 +0100
Subject: [PATCH 925/988] README: link the long way in detail

---
 README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index e3165a3b..8ae5b421 100644
--- a/README.md
+++ b/README.md
@@ -57,7 +57,8 @@ Initial setup
 If you know how things work just copy and paste the
 [initial commands](INITIAL-COMMANDS.md). Remember to edit and rerun
 `global-config-overlay`!
-First time users should take the long way below.
+First time users should take [the long way in detail](#the-long-way-in-detail)
+below.
 
 ### Live presentation
 

From 30743c0e87e385b5310d304bcc0ba46f02f05a11 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 11:03:33 +0100
Subject: [PATCH 926/988] README: mention broken installation for initial
 commands

---
 README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 8ae5b421..bdb06e1f 100644
--- a/README.md
+++ b/README.md
@@ -55,7 +55,8 @@ Initial setup
 ### Get me ready!
 
 If you know how things work just copy and paste the
-[initial commands](INITIAL-COMMANDS.md). Remember to edit and rerun
+[initial commands](INITIAL-COMMANDS.md). These also support fixing an
+existing but broken installation. Remember to edit and rerun
 `global-config-overlay`!
 First time users should take [the long way in detail](#the-long-way-in-detail)
 below.

From 2feaaf36b2725dbdd3dcbfb43538c23a175267da Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 11:05:27 +0100
Subject: [PATCH 927/988] README: highlight the long way for first time users
 with hint

---
 README.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index bdb06e1f..39404a9f 100644
--- a/README.md
+++ b/README.md
@@ -58,8 +58,9 @@ If you know how things work just copy and paste the
 [initial commands](INITIAL-COMMANDS.md). These also support fixing an
 existing but broken installation. Remember to edit and rerun
 `global-config-overlay`!
-First time users should take [the long way in detail](#the-long-way-in-detail)
-below.
+
+> 💡️ **Hint**: First time users should take
+> [the long way in detail](#the-long-way-in-detail) below.
 
 ### Live presentation
 

From fa64e8906bfa1f3f9bfdfcbc235fabef7076cf3b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 11:53:27 +0100
Subject: [PATCH 928/988] contrib/logo-color: add the copyright notice in
 footer

---
 contrib/logo-color.html | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index 84365a64..e5bfb71e 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -56,4 +56,7 @@ a profile photo</a> for your Telegram bot.</p>
 
 <p><a href="../README.md">⬅️ Go back to main README</a><br/>
 <a href="#top">⬆️ Go back to top</a></p>
+
+<p class="foot">Copyright &copy; 2013-2025 Christian Hesse &lt;mail@eworm.de&gt;</p>
+
 </body></html>

From 8a904dadf4cebe4a018b6c52140faba222ed5b80 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 11:53:55 +0100
Subject: [PATCH 929/988] contrib/notification: add the copyright notice in
 footer

---
 contrib/notification.html | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/contrib/notification.html b/contrib/notification.html
index a0580bd3..7a6ada74 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -51,4 +51,7 @@ notification and download it.</p>
 
 <p><a href="../README.md">⬅️ Go back to main README</a><br/>
 <a href="#top">⬆️ Go back to top</a></p>
+
+<p class="foot">Copyright &copy; 2013-2025 Christian Hesse &lt;mail@eworm.de&gt;</p>
+
 </body></html>

From b65f3512d058a8349bf7ce4e6458271e4a9b1029 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 14:01:39 +0100
Subject: [PATCH 930/988] README: add scheduler with start-time=startup

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 39404a9f..0aedfcf2 100644
--- a/README.md
+++ b/README.md
@@ -225,7 +225,7 @@ cleanup add a scheduler entry.
 
     $ScriptInstallUpdate dhcp-to-dns,lease-script;
     /ip/dhcp-server/set lease-script=lease-script [ find ];
-    /system/scheduler/add name="dhcp-to-dns" interval=5m on-event="/system/script/run dhcp-to-dns;";
+    /system/scheduler/add name="dhcp-to-dns" interval=5m start-time=startup on-event="/system/script/run dhcp-to-dns;";
 
 ![screenshot: setup lease script](README.d/12-setup-lease-script.avif)
 

From 295fa3144a43542cb980794ce359a50de5c5b667 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 13:34:05 +0100
Subject: [PATCH 931/988] README: update screenshots, with terminal window

Started xterm with:

    xterm -xrm 'XTerm.vt100.allowTitleOps: false' -T 'Terminal: rsc.eworm.de'
---
 README.d/01-download-certs.avif             | Bin 1869 -> 2761 bytes
 README.d/02-import-certs.avif               | Bin 3605 -> 2021 bytes
 README.d/03-check-certs.avif                | Bin 8047 -> 5079 bytes
 README.d/04-import-scripts.avif             | Bin 3932 -> 4805 bytes
 README.d/05-run-scripts.avif                | Bin 1801 -> 2388 bytes
 README.d/06-schedule-update.avif            | Bin 2200 -> 3129 bytes
 README.d/07-edit-global-config-overlay.avif | Bin 5161 -> 6174 bytes
 README.d/08-apply-configuration.avif        | Bin 2437 -> 1842 bytes
 README.d/09-update-scripts.avif             | Bin 1928 -> 2641 bytes
 README.d/10-install-scripts.avif            | Bin 2423 -> 3017 bytes
 README.d/11-schedule-script.avif            | Bin 4113 -> 2991 bytes
 README.d/12-setup-lease-script.avif         | Bin 7642 -> 4230 bytes
 README.d/13-install-custom-script.avif      | Bin 4589 -> 2879 bytes
 README.d/14-remove-script.avif              | Bin 1093 -> 1854 bytes
 14 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/README.d/01-download-certs.avif b/README.d/01-download-certs.avif
index 0532ec3addc1b174c13c5edd6acc1294dbf36666..f2afeb545aa1e191f3e9382963bcdc172c40603e 100644
GIT binary patch
delta 2533
zcmV<B2^#jz4#^decLE8vk$Fc2C;$KemXXCse+j;AWMOm?015^;CGvSz2{Ne@Ok@Js
zZY%XFc_7d0#pkGB6Em!S#a)~lh14365SH6M=h720dESb9CGQ_O$MRdJabg8ZZIB&6
zBe+Hv9?KXR;8?SOFIyy6fE=1lo575B5bXVsT@CROl8W9X8t$^5Sk|pOCdehw0nmr7
zfAT@?>Vx^@fxj@{ETUPP`QrCg6)u3-=t(%-Q8j7*2ZI~%36X)iBbR8z$VDIPK*vbO
z^x?IMK^v@alj9!mVu}?c6+Mc+Vu{}rAvhsDZ_k<re{(<TlZ0<jYmEEqMDGw1oVpQ)
zaRyD1DY3rJ45!yAEgMndox{j46B%tde}Q_1u9!#P;#w78wyz9Uwv-w|GuVpx<CAAf
zAYC5BTQT)}Ya;#0Iv=(>0ftIrid8S)SsjSUakEpzlRW^>C@@dZbY%E6<>9@0h15HL
znGDstbi^J)dO*6pX#N^c3kg$&*X0ic(;O;0AA@yxlJC2kC1cu9exj6Jx$IIAfBqPH
zy9jg~WdVYY<R)3~dgzVr6?O~eQwKWW54Qm&yPaE`suauo7;^{`=ivfN19{6_U}>^(
zZF#P@*_44;awdAaA%kjY`(CEwDcq#|Q1!$7+t-M<toTA@O`r{>F$wc2gf;Xm1W0Pq
zWHxCm@CatL|J^qYB*)sAlY71Zf0`p7D2`x*+FA<g``sgT-NX!q+InN<9VC7a%|0WZ
zfe>@JzGnLC6n}$Krp8|Qo&hM_=%GKli<lt~#+Q!uRPlJbMX34_QM)yu<^1oC%29(c
zotbjIwL#HjxFRp%({7OWN`rd}7qDA9zjzXvu<a&-Zcbj=C_0yHCDGF{e`x2dJGtnA
znVihChXu5Zc0zYi#rN5d*gseFo8nMv*j%QpOFHy=SRQy9Xb4ET+AB-ZCf4GOj`Y83
zypp?^!8MQN{HXX$(*uG}sqa&oT~iK{RT~4=4-?F;zU3l*h&U}HU&oPgb<#a@$eaMS
z%3)1unE;DTmjwFa_+dfYf6PbKO_`ek<XMGFe3Ygw&5qr5Ep`5rNKCfqKD_3lfIHcq
zoJUAA1h8>vx1U#(%)O_w-3s|=fQhCqFs!Q+VG>null`-lFp9CaW~N!)0MXW*oQIyF
zAXddw{VTJM6{>8?<=$LJcJuWxL+AB`!jKR2KzT%Js(e~Apyq>ze_7ZYYHZ#38w+{u
z=(OsqgYx|#6FS)lJ%RzQ*v7=!AJ*X)uMGC*{jUNA+(uvUR}rtV30~i)0#D*B@}A`y
zkyFRiR9Aw>tgDrML{qXVBh$h^>qbZO?|-8AexTWl6bXhxICnPG7)wtIBh8Q8D)&4s
z+qeX-^~cG)U3fK(fB(qDi~o7NqlN<;ydaKn6`2MviU&lR4H|N-a^E)}z9URUYV$?D
z&Gdkw5S@~R8IVLei)f0~)zq-jy?Yq@PGgaa>^-M;Z#bD7SWfK-HuO|Bx|H)RFjDun
zE*%=Mx&euC`!)55Q>l71M(U9}5Q<Gq=^Ppor7M+S4W&;ge`fO)+H@}t9sZifAWtKB
zDN2~-3$_NCf!F@V@YqOH)52BeT62~7_~}2v81g}XbC#VW!sg!q8`D}!VI!DDq5VIO
z6wWff)|aSv-E`JZa>;0q58$|qI(`B5x{iQmJ&XD1OD(`BYJ`Pkir7ACNLLc%DE5Sj
zIA>pYl7D3=f1Y?ZAvc8%J0o7Je&q)lhG^vLzD>sDs@~TiEv;YRBc=)^>OOJzb-a~4
zf{#hlH-V)H-8Y@odk6gZeGcm}-mdQp$4C}eQSXf^(8w!=PMD->6K$EK%Xf&u1Bl}}
zM?0#n$bTxXNl3ww8|I8SC8o9r45n>ej?)jBAFq`Ce^~)ABBinoQA`+U;z_e;2Rg}B
z%DB%m0^YYD|BCM8U<H*i2ha$JfuR{us*wnpmQZxZC6{-wkEodx84p2$nV|%kcHU$)
z>%7NB#fsX(bm<*u)To`U|E*;S=*prm#gbX63O*i8(O|?c0{e$3+HF6^ZY3Vj3&|P;
zGCDJqe+~)Em}x1{9I*+?UF472%#9yiJ3#%^8Z1f|M`1g1bKyhn_>jxQHM3T;TRkR2
zE5$Oge>@u$N>b4$)U&Y~3=<!NufI|}DXV)5=&w;JEPmS+8tFMz)wVa4?1EC?iqfdn
z6WMdTG};mY>k1WmR8b2lTk6o8jBEK?^{?Avf7xlHqIgRV>#=|`YfC4ct&MV2_fPKV
z@f3NlHW>=5L1V6+681X%=*5XG7I|vN8j-Lx%SVF>s;%m#Y~As}Wi5o6yQqES`fz-7
z8b4m;(LzUj88bmL^ziZRDW)^5iMHOz#&-=63k;%)B<>TL^OZL2r<{YKT#i2XOmpeS
ze-%^PNW#=|ETtX1;x;5#Z3*;s=)OGvoHW_?G$}8bQIeAa@oFv)n;p}Paf+P;>Kqr&
ze}&CodX0aDy&{F&12w}`ou^}ERltLR9I<4FvS4!&(~0*8cMk;n875S7gWev!#_H}s
zDHw~U2EwpeVyDD}evGnxC%7?RrN-NCf4Q`clDtGe;3bW)&m4E}hdy9VAfM@fyn3hR
za{&VHYP1WPWIkVHi^NsCs)~(Tyg9v`Uc8Z$=HsTbezkM7A?4qGSY^7uT!atA<XHA;
zXX;$g{HJP!D>QzE9q22VjzTF}61mL;7uRY&ii?;1_8xbKkU;3^rvDk`BD*Z2e^c;N
zr=%QUEi!Q=GM3<eRN$mazx9JAgm#(_n7%-}MzWrMK5R7R13l1PguQgRd-LrKp<6i^
z`a&psDDAQyvs`jJT$B_Q`G*&pv`^zbj@44s;p6=}?D5)J#ZO(TTt`gkvud5gHmLwi
z-Of2_2^rOr3VhLXyjJ81EXVu3e_BgHR<NiWUu<ii1l^8{iN8qy3>Y9WlGV?UHY}HA
zr%Og9%T|I4Z_ahT{DaeK(lu!%vs}Q+r04g1#O<gBkZ&RP@>tG}@fTSQm`a;=ST(7p
z|F5!Nc?PM8>AfBQ@f8_{vM-*!iku1ZNIe-^LT3sA=QsxHZ<=+G%%MFOe<@E;cQ0*I
zPa$Q)o$Y<}&r~MLQq;lwW@ePn^_H?{uQ5nM8K({xNP<E5t@mRO`B`Tk_Lb_f`KF9j
zR#*#8!tY*^!!t%278x81k@oNA`>TTHUG$O7{CG>_toau)1TWwgsqTu!!g!+>MI-3b
zQX)|l&DiY)nI{3nXc>YtPsBA9ru?;i|3kUR(?oHwOuAmeYXjSlC2O|5n<w@_WoPHq
vgLqEG6^tN88^4*`svbKpsAV!(-E0hp&gN*WyV4DD)4q2tvVzn)uidOk%-G^>

delta 1634
zcmV-o2A%oI70nKicLD}Fk$Fc2Bme*abdkkKe+EKrWMOm?015^;C9*zj5;Cm}Ok@Jx
zG(%$E-oB3{ms2LSbf~M6sV*<)?B*mwLa~`9G)l?cI0g+d7toos4PElbk$IKDrbJi>
zv2}})(TtO((ZKM3Xr_`G_rrv4B@sRbh`cNyhJ^(fqJE+1r8EFS9*<=mAH8-vtI>!F
zf6z~{=0y9M5`ZB{d9__1JFtm#l+;Rcy>_Wx4T7Qw{sze+zNp%UKkCGmDBO+7-JzGl
zDBeva8~9b7*D5R<+uZa{MxOD^Qauqq%<8fID5gGvNs|*)WNe4gzB3fsfJ7v?jfGZ0
z3@8qr+cgt=9Opi9>6m&I6id1hV0zNRf8&*KNBC)fuW)YC^l{6odv;`cq{cwFG^rO^
zq=}p{6pofc@qLUjh-js)y`$4@b$|w0=j04oiWw7pBw)FKr7?hUeZo9jI%ZA#a7fuo
zDSJjy`L2>oj%CmTXQ_A#$SjNTFc_Z+>0aXp*YAc*gj@xb*>uT2^X!x%NdOL_f9S)d
z6pP8cWy)yw6#V$%=b)LMb`yCop)824(&laxo_QsGRR-FnG~Knwf@iHlgBjvgsl3Ob
z>uFkV)pG<rE~j8^F>iFj<aZg89pR;bXL({Ya)T%So%vzIpt$bNhRVtxu%&J16WnhL
z%iLuM{66KWrFEQGY+CEcoMc!3e?j#W_MS3)XfBD3j+B(}u82<}%8!Vtt907{<jrkB
z1zTCu*@N<NSRV#k(hL;#M9Ysdg;OTX{RK(X=yHZDKV><s+%hnNkG#dX{2?_hkqdE`
z5j5gdhN1sOFaA;u+;wstPC!r637V4@IbSCeB-XL*es!34-an4DBi-&8e@e01UHCT0
zQp=5rGfY+dEc7?;64w0XgTn75n@R)F369{kCSeGnlm_`5Z8!i8(8}W_eWoE1zJgTb
zrGTyr-^<qjFzLK7K~ELLU4PTR$LOPI=wq^4Mh$ARqB?;oFs&AU)b49S+qUcFaC=q_
z2Es1Mr6*rKinT>|5uR;Ne@wbB3}*SKSKK5RULO*|#zylLHdm#9++*x~>+n-Yvuyb%
z`2qo$Rgf#u4}+kaBFoNm9gsYbuKDC)EX95x@rm>EE83j}`(a4~y{%n=dTS6Gw-$dL
zt;r|vvzyv&ym;$$5S^HsRZacq;YY(18i4gVwZ%pBb&!+btze<Ke_4n0Dx!YWy}aLB
zrG-v0H7_|~aIwqG)#g5ho_*WbB6Vc$#=&p1;woUj(2Z}@*BKp>|KjedG?9;KpoBg^
zAY^eb-EApaKE%5ye>ID-rZQcpL-KDOP@c!HU)5nsZ)8AfcAxd4#s4rc;h)*T>1YCv
z&UwX^jc5G|>SU~xf4hb8X^A(IL&-CX0u)i4o87D1skw=ZFP73qO@m-dllF9u?$yAt
zM`D5?9s<*J^!&{pp@^O0Ut(>0H|!B}@x`Zd^7Z_Dj6h6vzbL|$UPKB=c=?I`BG8GE
zs3n0XoPV$cl+nEV*-N)N$pD^rymdMbhTB+u{NBGPu>bXbf6l9jj-9Ru+-r1`Cd-fr
ze6mScKPxkB&3JjZ!*k`)muJ0|T+KRqFpNIFdsj<WtW2jVoUX)VqM!!2e@u75w2d)v
z5$vR|a8<1~y3=^hEAINp_a=+mgm)|GLdlp$S*XNizrOw}tXo;seY)p&aS0zIj?pQB
z*)tH!Pw@The^2uNbo}Mk6q}Vj$h2OBR|h76u_BVh<`AY2Caq?EcHQE|);;t{1|!!?
zSPabP6sIX|sf3{CRv3b&bk~W;u{E%;@y`mU^ubILgaaHE&jbizvB#kBcHI^!(TG!=
z;7|dw2|b|vpk6G~O&O_P*2^{)29bO<Qd4Krqx9t6f8%8$^f{3LRM9^+j_u$3B~JRJ
z9r`@rL(J%r%YoS1Cx!T{U#q?M;tQa{K%kK?a>=sbv}1wi=!X}0FelAzx&j8D+`IJ@
z`nn7UGGr(d3ru-An%VeqPZ+-j9@j&3sgEf4-;utkV_PPhD^&)(@Srlyg6115_Gai^
z`w{JYOyBbpZr^N|u!yl~?Wm-G0X9FQ>vX}<n{GEn-ouSgX67T0yFJ5LGQoC=py+Id
giTuR%F<_PCd@wqfW(V32p4bHm!gUT$@}XfNFh3MG$p8QV

diff --git a/README.d/02-import-certs.avif b/README.d/02-import-certs.avif
index bf7d5771a7cd38463b8c97f0630609ac093bb63f..b31343cd16dfb2ab519b877ec601f8673354b251 100644
GIT binary patch
delta 1866
zcmV-Q2etT>9OVy?A`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951P(f|MeC~0YKW&i*H0004zoE?$u90e!<005?w
z4FO1h2HI_8VRRAz3I;eO@_JSYGQ|x{WCGZ3EA=XQAkXW?=cr#3Gpv5aU7Q+))Ebcx
zmfJq((i1Xy-imuA?;knG@>{2IVg*WVkR3oHxJDNq%NQBpShIjHTO?P29GXp=!Hjkg
z?ER2k4e=3@irys}?y{a()~!1x$R*GIaF2F>{V!CWUXNHh-u^}J?CgQ%DYk$d;V1gd
zpvMgvo0%a;+x*`L1QxyV9Qm}HU(v~5pk|=r!1-#46>cz16<?<lh1kvCQO^|M5`yxe
zJa68W!I31YKqG`VcXZe}M|ZOvv;)1aN`rhGDZAx^DxKSEjR!1>Nls_TGEEXGaeOm>
z3RsO;lBA3ceKJS&De2K~t6A4fU`({OJ$IDkmpp}|@X42w+Nn}Z>YQqzfcFjri$|>l
zv3;!Y^ejT7EKzhz^v!i>Tzitj8CPgWq0V!s8uJ77d`?B+uIT_pvb&FdL$rCM$ws>i
zUN8(gh&(=cAjJx?xVFIQ;_jlc{SYmGJ-aO!Frwe;X*g5W&{t&RK!+mhU)GK&nYku}
zhj}@i{U1_)PV4Dpu1lFPCfoF8l`;TN&fl8&;6xCxQh(Fo0u%N%kAnR4nXeGWlr_L;
zFMhm_l6JW%p%M+g?tU}yUv<j#!?6zblw9<*6=$I06iQiHYDC)p-wY(KvRAc#ca|><
zh?Z+>@d-7i=U``kE<r9udqJzUv+B9wFn;%2Z1fhYl~r$l9C}C2oHWYUsAj^iN=3Tl
zOm13{#!LFFpYQ=EdSiU*G%qCA!0}+}6=xL==~<Bm9V4V;zur;yXcY1j771WO3z5wn
z+E1rT1_|3Zg@Z?qw%7ASUu*e)Byhb!j1`0}QpIc#Mn@<W>M9X&qHkeyP4ssScFyqR
z@E4pBmdQnGX>|CmawU@p6hVAuL1jzjeL8kjLCR*=Mm?29z<+S9=iyDR%!pxgFO2`u
zv``#yw5WMu9=8sjh>}6kR*K}L9yvF4OO_eM*Z17I#j1(Vd0M7@d~D!<i}5h54=BGp
z7A-?EIgxPbYX1m}GAJ*^?usM6cW~H>Y*>_5lX{HfVGH_bE_qB8Du2|a-U;~1JzE?G
z)m@9FIdWZyH$S#Wb{wS(&QPh@HYLfuWEM1qpC{vAlZR%lp7vDSJ(S8maKu}j`?!n<
zyUY}Q7QH4mbPR&<(@Ii*rAX0?3?DNTfF+>8Cm2p!I2j3QsiR{~vS^9or<_wB`%P`r
zOR#qVzLlxG*>(=o38yq@x-Faf{$6CER5?eJ$$+%8jz$6wa4VU1YF72KYY;AU!?ThA
zW9}rH+e2PUx#Ew7iWrgro*M9VoE<)uB=9VJEpmHIsG2A!fg^r@!A}ziTMVs%Dd4so
zCg2OU?_X2)+SdN-=AB?&412if3_kU2dqhJZI$(=sat1Z`u#E-!?`N3tAAE|o+Mwg+
z6!{s>yJ&LTO{7f75JPW@r|&_cnniE6u{15bDy66sS6~VA21=5AP%R@Z`$<3Mp0|ue
z0o=yawX`Z6TiYyuXta8O&@kA#_RkSuBMV+cIRL4{mjC%z<L!@jIb24;zTMm(|DmX<
z^@qTxmU5kdBB`|BuF4|j;6^Y(*Mz!Yw6J{l_!#qjZzHXX*1kQ9{Me=+EY0n4q;ZGm
zY^g(+SEnFTwn*^@-Fh)QAl2fnSa<x3wavt{+Eq|oKuEHGvP5(t*()RF8*sLSLdgP`
zsb;d`6Hc=>5zLidy3@b)+k;63!SqEy_}r4z%-BoL9TR2VQ4sy}h3H|Oss>2sCVXod
z!e7iN6*(B$*7C4XCKtAQz*13lH~WQ4R!AAUPCuMhCM$RUS`Zqh+PN4k%-J=?yh*cn
zCb?qRH|eB*jtQ&B_6;hVGJhMLAO)?q+79%O3ybZ2d@27{g4n8)TM5=w!e~lJL#0^S
z@5uy=W><2{xw7QHBGRU@s>t<xbIfbn`B1Z-kZx{^GK#(QM)<O-riN~e<)xs9gsQ~`
z5W>{`I!uk!=`Wa+F-*$-_f7Hz`X+!rX8dtk<UgE$8We)=Rq?-fOS9DFQ++`q!mJiT
zollcY>n>)4FwmKYj>yC3S+xLZ^fa+=#)_o`PFhIgGl&qB!#Dy?wZx>vYBM*Az<(3A
zhJA|>W*K?EwSpnO?*8j`u}ulcIz~|MOGWA6L}>5FQ%fn(+5>r-*N6A0Y>Agjyp~36
zrdMlaD0AD)>Bu*Q#}&NC$$)LIci&hG<;dviS00`R?w5zB0B=xTaU0!4gDp=qpb}U(
zS&Ko~pWDIVx5?QT8>VTXZ2M4VzI>px_}gKJ5Z0fqdMEPA)toM#YVJr|lKD!1NAfPr
EV9tqwM*si-

literal 3605
zcmbVJc|4SD7k*}8j3xV$otYSln#C3=*_Dbiwn}4cgK02gXtSj(DO*WeY%!LU?1_jW
zsmW4yg-A+fN}<j7jC$Yi`+a}C-*=whb)W0p=iKK$*Zlwhpz0GE5kv~3_yC~sJeA^u
zrBX;f_GVZ!0D$1B-k~I34m6CPS769*3IIVAa_C>2=L0F8f3;Z`L<yy?<sjg?i4sU7
z^CAlXfC9W75Xf=>fct^*S_E+i00Bpkn^7o7*CtuZ$b*45uY`Ak6t)FxP79>14Y2<2
z44AfLP<(jc70OdWyni<UfOTXqI(h9%-lhJOppYQY@1g{eX`q*)(1W}|4;l;&E^#2l
zf+!5i+KzyL0O*BDVOaBMRo)IDNu~vc93=-bz+prH{wQ!umJ&oI@p7O+00<lcjfI1U
zTB%;7wWqPQ)dqNNz)?UTfnNZer(_La`5zC)f4DZ7gF;{c4D?YTU?At!^Yic@T>1~^
z)j^=Y`^1AB`iFNSzyLIXwQqHB^)(=7XJu;zUbHqS0IZGx=70b{KZ2i60D(XtkphCk
zQX;}aLc;4MBt@l^<W-cF<P{ZF(Yl(d>YGrCiWmc}O<S-80zpO7XqzF<L>EuM@tQ!8
zNTjfku$+j998OJ94fj9W>O(+W0MLejV$}htI0PmRS#1MUz&ZIKYxY|TPbdt|$Bz&|
z3JQS*)ndGtf<fUhK0Y}3=#Z0O9)OGUNvL7X_$3`k2=!noTy$!#0BYym7HP*G4jS(n
z5`z?!k(FC7zd=J2qoqyI(>E|Q+G=iLX=QC=Yq$S^6Vchl)s5`s?c?i5@u!C#3kzpN
zM8?LQi9dTTAu%mIBlFVbtSi}h`2~fyii(*fmG`QuYijH28(JT=wX-@pA9wZk^}l#I
zFgP?kF*)^SdgkryyE*Qs&x>EaE-kNo<LTn*{L6kT`!8MMpe`sJ4ud0jx**VSo^WwE
zpBk25!ps3d3YJvIMGHvnOwGO9f<)mRIntgXJ%Tc5!o&tHPuiNYe<m#E|5En1uz%|s
z283Y{@aMtAf$acy6`0o%Nfy<}nVw47pyuQhQk+`}S*dKvN`E}MP3xWhg)r~L0jv7-
z8+d<ccfLtZYz~?8l%82TQLH>U!_m!^PSmM+r|d-}DtiJ221<4}4jayt+ZU3ryZCh-
zeA@gV`&*lshkx2w`$RygF=l?LA;M~t^xRlH_Ch3+p6gLwSf*8&k-dH<HA`J4RN3X>
zp|+-%Y=lYEM*A-RTKp6G<Y41$cg;ApE%-wkwu*Db1iQ&R{2{X-W2AF{v&<3?m$;8#
z3BK0$;fS=E2?sxr+7bEK>e)<}On80QIK^N|*1%c+n`O656A2Tqp<ou28!;F1@JM*c
zlvV$a*$JxYw6c|8?&QX_JqXS5`xv27H@9ugNmR$(tOVK{4fCo*#y*Ig_Sqsi#V>90
zCA(<l@3@B<OpP?Heu;CX(@IlDENi7xM-59b(<x_4V-Q~tO|VtVgw2$1Mt3gde-|Qt
zT3Q8s#-@S}lLFJsP_XqTutUpf@1NWYo^nTf=)Ca8TG)v&vl4XJ3dhN@Il->_M@yL=
zRi|`pK4u@ljW#;OT?{<stdpLSL#~Jf-c*E^{xl*7Jh3H7V7ztf-sku}=P*qAook%s
zPmT<aS&^?`>ye1{K+5$t=Ur3$<Lb2e&T9SF#>Gh+Dpyo13>RX5evFtbUT&dYZWH}_
z$ijm~-u+BJWCzQ19|8~rTJjPxz&}P6fl)P7k?3D5N(<cgiz{_kWF$(2cACuC)!A_E
z*orIaWNN7z@f5;vcn|)1@chRexWE&e%lyMs0`FDfItDk2w1wc47duh!+ihtR)MJG;
zj7>yhX7pK6#l#;uie53M`v+nZdnz0IbO_1TlZWixpQOtKG^r}gpgw*)yl4C^Q=?kN
ztv9ebz`fkK-7QTfqaEK!HF7!eQk$-xOtL`(qu0;oL|KO|z4AMAw8|yh6}FockZJs)
z0@a$D!f(|w7@OKBby+{WGGN$EGwx>9v1{w#QCh~)KxLGy$;l62<dn{Dd{VyoSrvA<
z!YPB$`~YqAX&|yDBsf_-Cu&H09iMG5{ic#t*QAHoTy6JdtPCB+OxXJ>sGXiUoDV=5
zs$T&G2Z1;4t_rO(zG`B|c4stSwc03<(9<rfz{7ZYY9jHjzrwf`=X~j~y)O0jm;@iD
ztPF|TymXIkSH#aO?4Sh*1vFf8D(}yzzwBiveD$1y^;jE&Wx5K$VjT;gog>-$aF5>l
zyfftv%PWhz0sAO$#q3Bui=i|Ny^!RS<}&3<FkI{tKLF9N9yaxq1z@l0=h=F)7epR&
z@mKF-%HDk1zvN)sNLHdpvnTc~#~e2j?;SYwp#Ol~ean^;Vp2Z_QJfDEEYbb4iEr=J
z4anQ;f1CL_%F2IM@8hefm|SakQ`ioZ7bW-)VSqTJCnJtqvGhtYf_X<lo*T{?JtXD$
zW?OS^6|KLBYtK+6pFYU#m}>WQIFLgv*^;r*=rE4BxC+G3{7*^r6UwbW;GR&?BPQJz
z({<1A&y|b%2JYzXq^eH}=-djkuazWVfWVksWM{`uf)Xy0djM0`oB73uX}3f(XZD_u
z)y)r>)Y|aC#;eB@hf|M;afIc-QZLjm3=~N}adw)pok=q1%6DwcdvIHEqnI4^R8w`=
z3n?iFOW=RS>D3_#KoDuT;gg}hnAmd)Zct#i7j%qZ?m0f*bOC*NzeaUvaZd8Go{DZE
zyJA=LoOQpZ@n<GGyiTL&kwZ!lzOt2L{LSeY+CL*5H}6u<K#!*FDYAcHvqzzRhoIQw
zj#!dIxJPxtv9N1Rc=7a!4XyqVR_eNRGr@OI7fhd?+_dQS`NuWmNt999Tg3Ob8yg~T
zro~u%bu7tR2VeX?)oAJ5$L2~X&fj+VsI$ib@`^sP%Unh_j@^-ayH~@e@>yN0FZ!bR
zm}y2<uK5e50;k7hXUh%td06r~m$cr3sD-E3I)xsDAE`Ig@GR%VH9m5U)AcAHEd7w+
z<Mn#->td(r@sHw@Lwz{f$lJ&J=IwpQn{&S#U-D~nW;GohKWbW?%-CiMPl|};;<8U2
z4}DxXy8S2J1Tc;J`Zij6AWfzOm&>xh*x;GR-)DZ({+heZ@}gv(QpdF$YRk8)ux5|4
zw|pM_nOM2f9vrD<<}N#9v;9Xo8*#HI3@H}#KHuix0JVqcmaje#|LOjDVur`-tE^FG
zEF>Y*C8cbp{wdx!Q%xgJjHa_GNFx&-w-GR~-`a4?tfBjbo{npGf>6RCR@8;-s_I@(
z68x3z<f*8*GlRDaN=C1_)57^!o>C`@wzQ{nf9<x5-~F^Wpx2Kmn1njlk`X`@om{G*
zmB~2UbbPLgP!+lIw7FO+sVUy%R$Y7<evp=WTyN;q;c}Ho6+pP6wAR8e_d!4B`hENF
zJtYa7E{TXNDJG<4{VdWEiP1APDamznt2;lAO6<-Ob}`Ysbn<8ASaa7*aCC#Amf!(%
z`-Z2o1<yStCE3e_?%CEV`$dH~PjOTB5Ydg0dB7=?oiCktF~8iob)_kLv8R!+_tRGG
zE}d#3|5bWxR!xIw^X{!ft%p1G9lSH@DFw=TVLyI4ZH*@NoM9&3Zq?55pOT<=*AkJ!
zCpN#>57VDbQ|=C_EJ}Yn!^f$Vr*1aTbV=W;jjnze;wvUnP^|m@tYF*%Y;eTv^u5}`
zSqp7P$z!{^7d3%T>=pmg+SI3Awd%nN!3Y$z%a6a8%e1QKPSSCSsACR$pplF9cWz+a
zi?@)QOHO+0loeVi-d^^c39CiLp8ip*-Nw{SO6)SP(=9Bpiz!gu-M%kMuYfF&^LCCa
zb)*q9TbyyrG+qsz@cnW_;D<YV(b}q0XEmiTU*<v?$D`hT+ZWiM<!QF6S@S}a?6-Ma
zwf=MM&Ss0d);Egej@v}G=)9y_VupxEet9pvByz6anfTbVC3SDt$mh>x<dtfQCFjeV
zreNV-n~K9e_l-u*bGBXnA~nOsI3Tf@H?sq0=AafvCKDBdA691E3`ELW-WY`|ppMu+
zDy*N6=#zEGLnjuitXAOp2x04?_hH@DQ<If8GyB}1F9a>Xi%p~`3!N=l)*kE~o4>QF
z8s>knJZ(1HY!CJ!9~#fD_LuhdRjY6rbv@YnR#uSiKJwj&dmUJCWC}A*gnbS#5p2+&
J?(Y4v{4c*$$>0D0

diff --git a/README.d/03-check-certs.avif b/README.d/03-check-certs.avif
index 4717b3ea9cc9436ab94be0e471263f601fcf47c8..1f03ad2c01bc115ffec79e9fd3b60259cfcb4e13 100644
GIT binary patch
delta 4948
zcmV-a6RYg+KG!FZA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951b!~g&QC~0YKW&i*H0004zoE?$u90e!<005?w
z4FO1h63lI6VRRAz3I;eO@_JSYGPfm6WCGZ3EA=XQAkXW?=cr#3Gpv5b%Xdf$v0xN=
zx{nP@p8!1}o)lZi$Z#oD#pwsMPJxhz{sBqI!*~b05sAoy*ofK&JF`@>FOO8cbxoVW
zjCK(0{g7P^@ez`W-X$9EtvE8~PONcjF%7DJNTWJB7jEsK;w%R~0<}&t*&i%JCOBM@
zF-Ic5frdn0vd0M&oJo`<vl84Ik1}7}dc2Y5eQLHWAz-w9eHqDv^{xyK`Hk-+&cPVy
zEuPebz8EGb84iGcMdr7Jr><$S2~||X?Or&&sz~E1Ca>=5q;06gaQ)<Q8$49WbfO7=
zR<$Y0L+Q!&t6JIR;rjN+E;`&lfl|XeoA=>t0f5C$%XIhyw#zZi7_YR%nvEQp!#XF{
z_{+`suxVp-<R!CHv8%nBBNLHD@JVdXd8bA~h<7Eg6MCuP=-vVypLuiDDr#c2#Kb}B
z{eqVA0xr$QJ$v#b^Z0#xUE3$Bs07A;ivkC7Q&HDO#0Ed{0&TE(Vy-;kym~sIN}|W0
zf=l4Td5!wYNr&Xrz6yLNXQC$?Fv6|>cA{|^No~8Rg{{@7^V2p}=g{!z$26=|_-dZ)
zCJykt9&Ky*F4!mJtOW<N*|SjgG1EUguoDlL^oE^xbUf;HyD#dEesHYoFXvBxTJI~P
z^Qp%*_u+ySGx&S9)eYi~SYQ}iEo}rr>?Q+Q<2_46UchoB%)Zh^Epn@rwYvT<y(zGs
zaj%?&3@4L0nG*JWT6ttod;uQPdpFcd*PlY9KHx;?{!)n<5;P@`ubHl~%C>TGJi;Q8
zdfbmiGyK!5l!%J=z@ji5(R+)3Y!{*1#C<`g_j|s8vvUO6`)cB6;q+&|!UYeEa^QLT
zKk%fIdc76`(vn^I@$&);S&$o5J(0_J;!(dGuY%?_SOO@&--Cc&%d|QDmwJD%PSJuW
z2i3_f1JyB{TJdgifihxMzCy<Fs%HQ4u9>4P%9!$e>&9y+)L-Jp$5+CCun|Vw1S>;g
zh%lW~D288x4BSbroZ|N*hs{vH{xNu+{3BzoUv4MOh<xfifiR1UVPyFeHxV+Bqxg-}
zl?G@GXBY+5ECbw)trL~xJ6yLg4383*mL?HKmfR}at@e1xPWMm#6B9Et2w{!3kj>=t
zw{;@@@qMh)_FQ?9n@=5o`{mpgc?~;iw>JCKm4GBuM_5C{fnvVE`e=DJbC`KiKa{^v
z@o=HT*qASSh)|w?-=(UYlcVqW3`L+Xcs#5oW?sQ=(-b!Q$&Ah)L>PBIY6S!!2c3Xk
zv0Mmh&yz6}@v;|9Ig^JdBey)gEgJx{C0vDPCd{TW;8brL-Sh8%DO4^IM30XLY_FTV
zyNpvBdcJpYVULg%K<(VEez=y`1VA)b5PN+g>vJp?Mw;t)HEjG{gmqGlBd}D3OQ7Yf
zO!c%b?4aexyPVQR!4XPaHqp|K8Cf+B%w<XF-q^K#M+#;TXs}arKg{s_Ly<vFo~Zg*
zV<1w0(d|<V!X(Cj(d@<u-`(1^A=%IQ6crWiDf-*-In+;5CGC%Fb!~6jNc>#h!PJU~
z{fOlT(#R8*6Dy%MaO5Zkjn(09mR<PJ!N+Yg#985g9yD{jTU889yL-38gH+lxmE)I_
z{<*1H(FX2R*R@0Ioj(>uuXWtPhTHg9DCwG)`4<>f1FQ{y;hrJ!|39fsjQ6?$`eIHk
zu8UQ~N4e19Cm+YBx$sZR>h|JFo8-hYJ2p*cH$c#NLtLKpu@J$}s@TcK%2i<eeg%1|
z`wUTY+7X{d_l<VA`-6*H)+9Nj@H}p&-N@&U;aDBpBm}du2xq%<{QU47G*Tkh*|(IT
zhSuSBr-3hjgWJ=@mA>AnkXPimk&UK&Xb5#Z!u8&r7{$$82{&ENKc;om1^H8K8)B4b
z?WR~|h2r^v3iyq5!j&#r_#7|_jEjR^c@9(jmh`U?@X7e=6{Ncj3U}xnC)f*^0N?>c
zKl^I7p4V95ZI?ENnE6=cUz;K(T*EM{Aj!mjY5X34(4;K_hBU9p5nxtqk*Bdn<#Pr}
zc@%kd0>u^cz~pcxsY28_zgw!{OrS#sR>tW0mjpu}c0a3HvT0PtJqcPzniveIa@OD8
z_-uksq4Oy3(!PPAt@*-d*%qvB()*SOn12Wn*+enb6UE9Yla>*2V=8}*pl7rK$D8&z
zF6W+qs;cIDA!>VZQl2tq=AwVMPQQ|raD+^uA0BI)J){8s-CJP7(r<b;sz||ZPESU)
zK1}%WwOWg$wbiV$&S~gQe2!%A=59Ad2uqvB4%xz!GXRuF7cAk!sjyIy!WeT75DoG2
zA6VmNc>(gp*YZ4)qURUVSf>n>Hq4fM7^2vJp%C5HZMw8u27kDgG)P}u*s1Uh-1q|_
zhBt)~WNG54Duh`iUlMz4D}b>z@l1;2e#NymCM^CZEcMI83ojWf1VIV3{h7PJA9l3e
z(bI#eju*8|lX4hmM!=x<I$9}q&p&q<Hw1Qt_Z!P#adY8Fi|%mP;!9e$Ui!>xFyBRg
zU)#!g-b|@k&xyWecmlQf6T7?GTMEe|JFab`D%if+b#^*c7hHM68c4^o(<_hCk`We<
z7Brr;h)TyqiJheFctgY?hBcnRb2?d0^oRYJnazd3a80J|#8#Zwi22%Ev*WjzM6?2c
zuo_R1g%HYV$&mi_2PB~=T2N80P=%|1El-=z<dMU$u)Mmgl>32ZV6PquT+Ks!<mlr}
zXaFzh^b%QbhLA}imc}Lfcmcc3_F&m@3ASzW35XPJ6=&Mk9rR~Otmx|;Mexy>bFvTK
zOl!h14M~`$>$l1lUF^L-EL7)0=zZ4Y5C%_*{(obSNM<5%OdjCHonTrY3nsjO1ttts
z2RP~UA9QZhn0XvOf@04MKJY{eW7nvO|NPtVgG5DoaeWM_7Xsc*k;m>1x#%vt<rG#>
zgsHq2fD_RNrKy2^3c^*$doiZiBC2Q9cGvOR=jy^tNch*D@k}lBhHzDmPcrq285flr
z{woWOaDm<FUk*C?C)ra+qv@)D2Spt3et_%@Uh4@9mKYk|+wNDPaUwOzA>-!W8iHC{
zI^y4oKXx^3>{T!C7A0#=F1ChdUFs(*_H^qzWTaYk!lT+`w_MS|{iFoo!-Ka3hMbCN
zrqZc3Wt#Dh<4qGRMv`6z1(b}ULjx--wNP~(k`jY3{vesMbS~|kcyB&`x80$B<y{Vo
zX2*gNn#EEAWnB_ER>i6;*g0QY{`3xb+#f@kW_!*J%q1<$ia*jo*>3(PE1MQ)R$=o}
z1ztxFRS<w6kvJv#mMUBGe};saj<<}|(J3oCYxJfUb>fC?^ucz4ZM1RCMu%!3b^BR^
z-t<>LFdcC#Lj69Q`6i`*??0?$o-7Hq^ev7hwF8%5H)jrw`;}VbEtf{o6@>L}ZIUAI
zeM>A>PDGiyria*{TGeDhJE*?Jcrr@gpVZu1bGGYtw)n0h3q84NExzBAW!9+Ta0b9o
zpbKBg63Mk8oo|Ez)wG=$ax&YuR^(mp@u_!?g0(r}i~C&IsY4=vTNPc1olJT#b+WME
z19j$hqM#mv*o4w{f>Z%JBI!)>&O8Q>hqz`g`qR7<gck+PC?P7sn{JBS5FBhTahoL2
z9@iQfj%DNoE9l%JmC+n6lsXgSbGxz@1aX%~(HSrJFcpmwl!XI*G-&{VII7E`54IDI
zCB$3k66|>)KH`FZT|ZKy$eyPRUZcE+XL;cnEGXm_JcD=C@DR=}0mEWi(Sf9iTkgtq
zNUOM9e_6@f&ya_5_eQ;y-}aX7et>SseWiV7*T4c|$sG1Gn$}+DT!T}1TNo~p*3Tu?
z2QKjDptB4^ZL1Lyv8OvSAD%5p2I#1kUc=-s(~(W*I}JvE5#)cn70$?YWPQ{-&7+jS
zNw7zF*LcJ)0&PxYmj}MqguT6|SKmZ3yl6_c3h3Y+Shf4I!vKRxON!IJ0`CKe^g9gU
zlU~swxyBFyGfaePmZtLiY;SskduDPW!lAa6IQGdk3%=CDnV=Ejww1_u1%Q)?8immM
zD10#JAYXrf5NDAjodD%SsQ*a_-kS|^Tp{?Ds_S9o<rz0%Qsq3{Q1zI>Fz0Va3>kxG
zzuuJB|NI)P0a14maur>2{tyB(dY>cq7JIs*zHtK2cD6vMTXv{r8~&a1GQkT))8-{b
zN6rCgcNdUptNy=s63A@nXE+Q@(}-BS9#zWa4-MCUk~coyag9c;Yr_*x@}pxfKS!+6
zv}f{sBkc-(dJ0?mnE}X&+a^J!oR~N0Gdg%u{2QIKWy?ouFxXE}6K;c-)RJIwF^=4y
zKL@GEsGDzBY;T3jQOxL1%+D97!OHC1*L{ofKbWUO5?UW8)Kl}^`H{T1aYn8GrDLl<
z$7~aSk$F$PsS|~RTb;K-kZi+~)%TY8xU@=D#(vSv2`SLwj(jg|1K=b1AGFEz1HP<`
zWq>kl5##)*U)pfpLFF3l3|>S-WvTUa!N!P`fvDeu{zTD(E%7K<v9>WorknSeb7T%H
z$z^zubCB@b@74%;9i^GYfsu|5=;B~FBJg^DO7viLercVmm3vZikafu&PI2pDd8HDY
z7~RxHlf!A=1jfWv1#oQxI<(D5(8NrK2^*wA-S!6PNLCF$p`wCtS`z|{|DYX;hFj@^
zV|s*1@gh{#wb5#lfBX+i|N4?<5)m`~1+Oa_-4Y?5B<Cy%K<^3kXbapONYU^<#z;?p
z%S-=r5#XEyB)AZAjUy1e7&g~vDC*P`M!jC*b!Up$S|Ii+YkFb;|M+YromRqu3fJM)
zRY(q}{l|k5%a$`5LvvMrNYMc<Ul%SBC0D>I$p#rpDIWJZfHkQ<kNyC^=@ivCE-Bd-
zZfrlgY~BC$sWLNzslEzPyPg!Z!!P-Nx`9y8T3ZwPagnH(AbLFtdlpTrm;xxpH${QT
zCYrp1Q6-mk5D7?E_Y7Mfu33dQF7G)7-Qvx#RV3r<$GeJxtn?#XD;ozXgiFsbw!DAu
z{0)JVUW1)jKaQ@BaKI+Yk{XpU#{Tj)l9d)az;wtL1(xwVZp$>908cL(3KVC5%%rtj
zlaHWczc&M+X{(4*ljm(%aM>E~3f&>@@hcTtvC6NRv#-Se6boC2N0i0M=S8X#&+2V&
z=t(*luK-MQHzPW74rdF^gxNd%D_*35wwITOM!RfH4xhPhje9RRHTo!Z={PQQl!VU7
zW-743pyZpvwwHOqddA243mw~k#74X}uN%eMH<YLSAU5H*R~PV%qFC$UI-cX(cYSBM
zo9K!G$jL&QlWn@{&zPg1pj_Vp0ZZbuj8R6)bLEDeEqQ7bZjug^SF~uTOE#PSVL&f;
z*;;4|D-o}+nlmKLYgB8FtuG|^m$i-UA?NX{(LB|eg?-EG%sYuMozLEXcTpaqUNm$V
ziH{F(3GX9`@md=K2=^5t$+xY0Yu3fmztRgTyL{aVmsfvq#xnOc6s@ovj6E}%1ujEi
zy@b#t1MYO-ZeaenNwcmtk2PevYBf<jQ;3Vw(4?S!S8dq_1_%_%wIqo7|E%I$_UfE@
z^S0eBx8Z?`q?_Em28iu{l@!Y!5MU99?KXg<;>FkWZyX&s18IQ#az3&<M;>jmy?RcO
zlMBkeXiUL&2;5+gQ5DVKSR^EaQIW7y6)72i24rC+#1$=VOz||U9mPzb=9mt_`zS6(
zWss<0<57V8|9oijeAno<>WoBL=lMF(g4M@s!)T_Noo|5ILs{8>-~QL6Axt-vkZ&5l
zVeu$y`I1E&$E~r)@=e;zLzO4M>wTq6v&c$&dqRTJewzA2wn$jAIOr6q<^qG`htXFv
z)MR4rkQ&Z{?2N)ITQ{Rpbc}`7rV6pUzyB=YDo-#P<SVFKZp_lt?C2$~&nk>Xx$0e(
z66u2TA$9|B`&kBmpJ#S?&~rOh_Yj8)9Fc!X_<%JJ3b3n_!@mGiY&~x{A0LowpAZk0
z7Qr&RVz9~HAm2*+H4Ve(7lRrkj-Zj$K~dUw<Qx_?87n-Bz>0t4uu+U*@sKl+urTTw
z$3!?I&#G-$TKGfVF)`4oc2-?tjKt{`VSbRc@qQeaAXsUCX#lN$@zDp-zIeqpq)eDx
zb&qe9F#2LCWx>ov10|+USiEhUYHjY(s%d{J`M~D($A@9bYSRqu#xqE8sY!7sKfIN^
z!($J1A8Fmblu9!BH>!$G#|q^^^@jvqLA{0;27CZ)0QRUU#iSIT@n0Y`7*h0_Eh)d<
z@)5G?+FRal8+hSu*3JwKT?A9yn-1wWYDD97OAL$BO;H81DdJF3PNKjO>c~x{mBi$|
zbzhGL3BIw?{6}sEQlmavKG)T6NOaOy?oPTiD3_FpyKxp5uyJ>YII4Mp`0TdNGF-D?
SVi<(%h1X<{``P91&U}FF%!w`l

literal 8047
zcmbVOby!tjmp*Vw>5wkr5&}{e>Fy8^k?!`=mqrjI6(pp)yE~+j2I&szE~QhLi@)!i
znP>i*nRT9buXpXW&f4qU=br-r0F8yShl8;z)B=Fpqql`xaN0tREtJGL#Q^{TVr%Yf
z{Fs9q(>pU8$A2gQI6zIE|IHu04b<e{ZLl4n&bEJZ2=J8^YGZHu7)b#DBJj8a2c9SZ
zU~|CZzY&5i0N`xExi}PR_ji)N88Uca{#f$(hOsLLr=-1&{oesd|1$$mOS?lY9`RU6
z26Z(5rvbdbshN}M-y<InwSqc0I>5am)WOsq?g^nz4(4zVHxL-U1i*po0Ck7{-9bY`
zgL_P4S58S^n#Uc0z|`Kx(azMy9X<>efbtQ(MGSSYHGa&&4FNzvLO}FK0stxsTQlRo
zS0gXa3_P}hj{*lea1S6oD)|d|`M*3o{ugJ4=MWJ<00{0s!U2Nw$9j}U{5SseU;MES
z0r8(cL2!=vFRqOP58#IO_j#CoSOIVqWaMSw2mKus03H?qNdOH61r-Gu4HXp?9Ubin
zCLtCk1_mZ6J^>CPB^fmpB^d<;4VaCQhL)9%f`W<nIV%SzH#avmBfl^omk=9-o9nR&
z0y;W6CI%)678VKDGm2+i|7Uw>2k_7UW(2rcS^yCb0fdL}&;?M#=R`*MYyU`j6beE@
zMnOeGe}VxosKtG}DG(wO2pJg(e(4Aw;CTQE4;lX%r#K3Msxc}pjF8JWG82tXqO#-Z
zo3Y<uh>4>g`V%5z5>hgH21cgm%-k<|c=`ARB&DQfWaZ=))ZVIVXliNen3|beSiXZ=
zIXSzyy19G2_YVjR`t&(CBq};4HZDFPF)1rMCpRy@ps=W_x~8_SzTsQr_s*{Fp5DIx
zf$@pSsp*;7x%t(#^^MJ~?Va7d<CD{~^NY)?>zhYik2?Qt|0w$(y71t-5Rs5TNT`px
z5D?uSh2tS1KjTEf7gt3!h7r(m`Jxd@L}pfYpwmI#{C;ZUIQE1H%)Lr~{3z|Ovj3eh
zzyFuA{}lFLy5<2)5CZ(;f$#uP;G`$$$DrlbyJ(?S=~g7GCZDNigSLG1;f7n=n2_=8
zq!*%t32gqZ1>oC;>-d>gSVZT`Vyn0XjU~gUGT@V}*}X_4G28;A=r|e~|H_`FyEiX~
z0=@>P>m{Ui4jBqi91|zUUORf*uyOF0zFmuLlN>4hRLUGKzkAQ1e#}iYxJHDtT3E7r
zB4hj+^XU8<d(rf`L^olI`;RD57Qw|g*`(u)5j?LPd=*m0Exzmf+UX_9{1Nxd84*^9
zvZ>aZF&O+&_F3hQ2N*l8rGPCgX9Oi3^PZvhv-gEqXyqzBAIL$kfJ7P`$G^j=Hx?R`
z>`4g=jal#{5v0AJZ!<jDlExORqp^6o#KkY_NzK&jx?Zajg5gs$|CyUS2*&Dp*KJz@
z>FeMlT`#07wd=@)(rVk4d1>3z|EP*{m8X4k7o--Y%ujJoVPuihI8jq*QSaWY9K@$h
zA#*B$M&p%(*FG;#g3tuh$BR-_Bdf7eQ0m^@djKR+(Bk_(htY5y1wg78<OVk|)ABd(
z!adbqtW+`GI_uVb%|2xP^o|^-*ztYZ&&u$de3gl<hI&Oqd|4#xpclN+0n8-j2%j!z
zG0iObd!JftEvVE<({&vWTD?)@RwdD%4G<QvbR|UaUuMh|aZeO_X=`(NYRNC;y1;Pa
z3|$N0STyU0^$v!fh<*_jSEmo*;k<UmFM&R1YoHHVbrkmb<1(W&w;S*0!G0%&yQ)Ck
z@C95Yqx%HXXVm$dWFz{uc+QUJ+)P(NWV79Hkkn!otSL&wII<luGYV;aZzoiKBAXwy
z8AxrZ=C)wiy=N@ZX!nc$>`NizD|8JWM$}gR-CcPQiM{bV?!-6CLxwNSlvZbiMT~uy
zTb%0zTzv_IM%`l#pkRq%?PoN$NGTjb8|irt%HjpX>E<Z2ws)#_wq83u<733?{g`fc
zr0pYoM}lTE>CA85*pZd<3@a<dY%?m_^9*8??37GMr4egHsa0{kct#63Wxo$xOo2tb
zAE`)JNo1o-{;o+N&V4lSTg(laZ#Lr`RoL|_XAl2ccS}$r;gVh&Q)s1rdv;IJ$TpRe
zA0Z%VbmG*DSZrv}ktLs>3ert76#_>Mk$WIq9KGS}{RyHlwSAW|T~!+fEv%b7+%!om
zrc7-~uAw4ttc!Th5w*w9;eG$M?g)icz=du%j1p?$sjaI#Dip+3{FQahGECt)aL7;E
zZ-Tb&7|sD1F?7$@nLO-n*}PRkv%MuHM!F4kdH|-WVg~K;_laQKuMMi`Z2HjJ+6me1
zI*3n-t!^Mvhed?DWa)EsUv8-`hqOuO!m1r}m_U3ZNYuk+4AD+7h}~#e`=A{00Ouwb
z0LoK#;DAUkhn){D#KtMcYE5S178#3ZXiz->9^(7^>U75<)mR(6s!K6RXi|7j!vHC)
z1}2jBtulOvF*2Ew?Aq2f%ewIItLBs3$$`Y=I&)7BhsV`@4GVVfxp!?3iPSN&eja|W
zcI;Xy-1Xm&n65rLFO|4|$MCJ;l-?hamnowFmBtJ^ahvLlr?#N6v3A0^hx{X?M_8C8
zsf6+QDO;<pw=C9sr&L+Kmb>}esF&Qjp6KjrwM}D3mT^#uUfjjpX!`+#r3@oKdH%k$
z(r-3*LbL(-0WLDjL7E{lk=k-dn8kQ0X7{uWwUc(^?hM+q@`!<-SG+PXeVC^zkK<~M
zDrDj@z_@IaK~m(h0Coc7QMvaNL9Xgv`r3~@)uMBi<9B18`hvF-7KZ3n5`BzMH1u~C
zIyR1ac)at+%aouQf8u05b=;IE6b*m`{U`uOO&E<)I4s=f$#&c7i|L`R8JzdyO3blK
zd+2&q_?n@hgqibSLz1Y$FFoyrI^XwMMsCC$7$znoM=0OQZYs`Be()h;H`Z)h8!9E$
zRi4?Xp5#`gW%0n9my7(y^@{>=c2Swc!E^f08PTPH&~Ne8cUei&#uVEJ1CCtieL|R3
zXJ`9E9=H2s0ZAcySk7C!7N=7^DBxi?(>$jUWhJfXuKBLAvda=}EskqKM^Y^c(<$PU
zUWFY$sCMe5Ez6N>SXR5uO3>wZh)2ajj)4tZh){c?rDGWvHssXXhogvSUe%sJ+=)8K
zf{3TUG-+C08t0@HTW__Ipy9n`8B5xy?#9h#6++E!I#`f6zR~#z$tCyJaZn50uc*5w
zuQqS6eN&1HWwi#K+S~D$wn|<LSk!%0PjKV>m=w7}s~tQjLh*Vy`1c$cM{60Yd0BGx
zvNGS=bcy$gr$N%a*4uRA?+H|J57qC-KNKk<Z04&?o)w*5C2M_)-E3%qYImZX;%QMF
zGWu~&;r@|<Iu<W_4Np@EJuf9TBl^;UP3m=Zg8g&0=itwhcP#mpy=KUw%8O*FJl+^|
zO4W-pH_Du&b<}z*wKZF#0r0IgDpE=j(?%fWr!1yBks6gXeS@uOMJPK?H0^<l+>{$O
z-wMu=?-|MND_MQ4vW)rYAy}rkhrLj6AY_YgfX*+U8FtyR1AyIVbEj&qEq%M={gLpB
zIiMI4CFIDizWyoroWt@|`7eFfl&qNSY$iHyjtXB?)XBvEXo%iO-oiwI^>9v1*WPiK
zymKR??>J@;c1b9|`%N3ppJ)F3#HmL{e9;F%jD+2^uor5Xq4KVnWjQQx3(3wX;~DUq
zf7oep#${z0)jhv+ezP^FQ8=d1`7?6%l82Ru(c%$S^a)3=u!_}|7u0k0Po3kHll~;z
zraY+fTilzSPCg@Tu^r-kI?(TJ+GB<$M6s{?I-yVi@u^}yA_o`BA{A%!#PmnOT`%YQ
zq?q^2J9vLef0?2kFU1%_1mD8{Krv5nkV3!0blfnCu9D@amqw)OFx>1(A~#yNz_bjJ
zip(TE=qC$#{J@EIfBsZ0d0}Rf=YAqXz)`qNOq|BBBaYs7n*nMr6h2kjzy(v;`3Hps
zWx1RIokf9@r*m%s&u<shoEv6Iz;wi_<>$?muB;iyvaKHh2q&ofp_WjJ4<E3^L@3;S
zYYB`B?PdTvTYOg^2xZ%DvUghTnD*X1eoOdVtv$j17nZp}iXzL@DPAKF8wX`H0GBHV
zTLm%KR;`2Qw>;NXyiOeK8S~d6foj?^wK%}isekz@c%6}k3RVnNdv}>Ny(VX%@&YWP
zW(RQejet^ceaNy65}j~5S(2Ly8Kzy(0dp-g7>ghijZ@4Hp=r4ts?}=kYA##JepWn>
zIDs`kIBp)p1vu}!V*+u7Fl8YAFM++Mag2F0oL-D}5KyVpQ&=I8*Q>NH+~1Y5-nOnZ
z{s64fjFyzytkqXWlIf3ZLpV*u47v~@`^!nIJ4MPoQzQycQ_4wM-urY2Gj_d?4>p}z
zscVXm^-NG0&LWxX09G94=%Ocq_bV%8!)?cGRr4Rd#my*5I*#jtD<x?Ma+ptN#-)1@
zHf1TEtnQSI$DUghDqPx2j@P`LVvFvMXQvO~g03GD$WpLMmE<myPfea1ls1G$w)Y9W
z5;&g}p|O1jR&g9YQtx;kheQQQyK~Z6B20T%BZ^nz*vK-!`n?h%Xl8$3uT)i5_W{7b
z(fmn@tIZUO{JLO|Cv?T(CqIQxm7pb8c~_~CB&Mx(ep^&`Y!WXcBk4W6U2V^p7^Tsb
zZy}D*i|~|UK|5!y1a>jbu*EY<r%_iB0d=rIro<=Z@lbOfLJrP1khJ9Du&j>){6f$I
zMFOddizYN0gl5}5VC87oeSd#MNA@@`Z~WI=U&1E-Ft<YsD3J`~)`+0Q`E5@4b(w1j
zuy1x1Sk%v(e4&U8MmDOfz|8)NGc<}T%Kj=OxY?};l6_6|v1cJ0;6oosL1-emmR*rM
zvW|zJsC5S`>gIlf9N1hVHQysaZB^yB%nSasJy~?~HeN(%@~EzOehw{GUrHgIV2jx)
z>}TDICj>j_n-vqN`~e6IE+n;Zov6vfuiKUc*}e!h3tNoh+veW!23w7?A_^)3#tXF}
zee%7erft#TTpnct@KMRvunWeo{icTu9qV4pwUAKx9xqV83g1eEt`8{;DK7}3n{l$*
zf(s6ML8OdsYLhonDo%Q}ga}je>xZhF+Q=<QCR&@!A$t@VMvzly!G4h((0-!Ns;Sl5
zkZs(2hq|sijNI<$M}*-cx%Ru_uW*rFSN=t^;E1PbsiYoKIbc=}v0iH4e5!_ZzO@``
zymN=KY8~i7KXn{>*!_`!!%yKxPfcoRz`3{QvS;F8*`x}+BGU-G=#(bE9Obb;<Gb_R
zXH{@Y5;0Pz2dT%lpaey+IOT59PZL!*A^iM@su)r23kiMAHw~?+s^+PK72<)Y^F?FQ
z0HNwX@OhX6@PQ}jeDo)LJh-@{P_7J$S7wMmxg|}OmRcjg@oEgU&IQF$g>3BG2U}nX
ziONI<ZiW7zd?;9)#G{EdSo$Zuksh%fc~V;ZyHs@Ye(|;nPY$>p9BcE5j9-#86a?fa
zi_v(E6(<l2yG<oP_l73@I0rz`M6!LG3dPI~JDf?a?ZOZ%n!#aInMN%lN-c3b%)^h{
z=IGEya@R)78T2&L7Oo~u0TdlUu)*DaHx3I}&`KGk?Bg`m8>^>J3yysi8J0kd72APd
zF!-s%>QeF0<e+p;^K~LRLA=uoHiyEYtPST=AvN`x!|||ZEhj`@zQ4?8^||loJ!fZu
zF^-kSu)HaoUuEwKFfdAYB^0jDHKmlh8Jx`C)d1y{QL;{iD`N6CoMvnHZ<I#Nd#ri(
z&UoM#Q~-z#C4s4q)?)tKn_ua@$17%f;~Q1ZFsHQYUVS`A&130)?U|tQH5#{xU7GdB
zLo^bHqJ)zle*5mPW3^aTpn=PvdWcy;^FBx5nJ*>%ccnL(sZNenX7pG^ZYyIj+6H2j
zD)GRbs+;6=6`ynMKwTvzEdz-qD~yGVG_}pJ!oUFWmj3gjfXvq>vX}MW((F@<hGC3}
zOqbpb@nbgWOA=OZIR<qCA^`j-A<d=`&96&#uiq!}fy#LYlwGK5)U6M|dx!;|ov)+k
z_=H(vyE2Hr-k|9aVNEY((zTGiG5|65y^}~%W)xpY`oR76998$HOEzW?sQM2(3J_bq
zB~>sR(2QrUVjA>ZB`(&5C{!i$&}+ga1D&t>SR~l(xS_(eL}1&>Ay$Z(wMW~6HSt5+
zA~bCTVnUv`Hwohcd-8w#?)mHPOeMavoO*XC+KoHiDvj>L^8?p8K2D)9em+wg$?O0J
zNVIW@IeW*$-RGYMd(jHo`Dw1I9IK*(&ygS8@8*vkr|NGks;j3rj?RUsQ{FN!CpIqp
zLM(U8>2i=y3)xQ6ueFW|5tMQ2#;V_(O*IlO?=)X-ZXrFnCUaaw@$cLo&|xAAJ4^Tk
zbg&FqWZ8XWXJUHS@;0IJPpHn(^i!UjZ{)assJ7IdQ&u3I3VP(oC_DlcB;@uDl{p^H
zUTvKwt4Q|wvNMiV&K?8eKa>N;>XDjLZ-vgQt=hKkvoN?*nQmo<Zl%;=sEM5q*<4^l
zat3L7zw}*#SBOEkoOl8oBq27|$Fm%i))#dcPNxBkRb8j4@?W=3&8)9(8^QXd`o%8y
ziO6;2&t<!&T{mAkPpr;nVP{o-b)M48I>8<vm&1~B$0sF1zol&HC2%}9jt!;CR+hF2
zBR3}!MJ*{TDa(E!L>iJqsuw9yh80_qZcp~xE{6OZ4T*-{dz702lyU>X{SdAOQpJ77
zo?2QxIj6;ycLW?|r)Py;Y`=*TkPDZc=Yjieg%y1TSApbgx!_qG1=-m@xM?W9a?^g*
z`x$9Y{z#caZKnbx$j>_sb4f2!WA?Wkn7h%MsomyUdrY-vOaT@|rNG@+$hF`3By|Uc
zdmQ3H)soF<lg_14Zd?(%ACn>$(|ivbVB07^qGV~wWGo(hcZ6wka%TcXFMe#<>1R&}
zvedjm(xnCIL4KD6)x{qk<bVh3{Wbz)$k;15x5XpZo0g1!TKnse4eO<Tn;r`4P8B~;
zxF@e?JsZL|9(d7QuIz81_uf-|hX<0@eZG~SI_88_{wk^7xD3-K#e(m7m}|<B#<p57
zdVtCUu7TcbB3VHc8H%<#w$R?tgCL>ns-v~nfez^tQ*1Fqts`m7FPAmIg1a;Pp{n)D
zG|IRw*ny4;ZTXO$0lKZ8h<C`KqfDzT552G{YOD4PwRDlZ5LBByUjGqa_IIDM03xmw
z;$P?;Ca=Lia)$?_M|<vBq7BSXYeC_uR7_~6U0CYD^c)8qEm@K@1=9=Edr>rYB=1GM
zw#3suv5{OLTAZN=uSUu}@H%dQ7rToXw?m7S{%jo8nSN8g^_kj&eHG7$QfLz?$#Dm&
z`J9OFteZk7orY6{#$Fi1xa2KF!hg<lyxXH5$X#$?%l?Mx&${Wo4KhvY@tBIV{>D1_
zrIfuSiROT0exKHQsGB$*K%8mO@!ypzrW`+-*YL^9xpWsqwvx;JmXlH%mi+rRWBx8P
zEhn~1fA+UhUb>(o3RBO4Z)qO!WV2Ubl2zB|5KR-$+0`-9IQ`l7P}bdtA5>#FtutD$
zUG%1#q|S6BghZ%5T}_JeD2Bg!6-KQ>$4J|Npye)D#%LB_>?*2kebV#s2irEogTSx|
zQ?La(wnP2mVTA7vrrvFk*|ASKU8@>SNn*zf6Gi{x497$fyL5sNn#P#rWQ>qf`4ESj
z!gP(8SAq6HJ*Ej1GWMB9D`qyF;+7p6_z_CVDzbvd8br8td}uG0OP-wbnIvs{%l3BD
z)w43GHiz<`Q!K6BI2{R0%z4idlJ{{(Q3$?F`+#+TY8T}F9(}0B!J3w|Y?--8u$=E_
zsMYR$JF`CGn2nL?R@5)Mk=I&9-vbU|cJ9gzU1tOnIpR9!a{}?Q2`0HgP5DVE=N;Bt
z&Z<ev-Sv3ErgjXuG<h7JGiY(2nSL;LFIl-5f7E;}<?qjS(>wN}BFq#i@!V=`KElkH
zT0g=!H7>Sj>9!QBa4vF=deA2*LVcA4sZJ^|oxYCK<ZA4eRDmFS5r3Jse^^zhK{&Q&
zj6E7V9s=P)h$ODCI@05$x9QFd^yii0asBmkKR{ad5IngZ4MX!&2#izNlM&Usc(y{^
zHiKI^{#w4v28SW3@hjA4w~Lx+SIYGeRT#(OEhawqIxgAG)l~`t8G}bZt5<f@`(BhT
zmhl$nMeO4xFgtOH?_1*$#Qh4ID7h0ocg7sE&q~!r#A*6TMTC>ZW^ZBXZF0&B1Lr%R
zt8o6P0g;VRW;~I6TWg=5wkqlCiHYG-A?T}8X?rKy-_;?1#EO+^3b**Mj^9X%?bB$;
zb`n>-8OYMN0*pCS*g)|`{gd5gGT_Y*E9Vs`<)iBeWQR#EM`d2T1D^ho0b-w~7CA>?
z$9}Hs+M-{LC|G~L_XyHt3O6pqLE5+XTVejKir^PAv1^lTF9$BAA&6wUU~sZODzN1h
zX!dfH5Q!h7E;^;kkeQQ|;m^S>56elmCC-#x+r)IjB1ef7$xu8h#Sim}mil&MEp_u$
zp}U~klE|-5$L7=P20Nu1F1*&e6NBVUuYr7o1GkFQXEI*5bObjSOmjNBiechc%NC=v
zqS%=hC|pi!%Y=WjJ61$okAE>8V()bR(S0&aW-#S_beVhHcI9c{^}SX$Ew_lGeg~RP
z^TVCJ?B@NAq(%9I<dZP9r4^0`&FhCvo3Z4e&lu`}LKw2}MLRTx@)d)vtpJYM>LO7g
zU18G^$%{YBe}Y}OG8@+`B+Mm>_`TYjpMn<(w_w4@jtN$MCK4B+$56I(s6s1ESHm2&
z4$|>8DB#BX;Q|fuTIh6rTSS9sQjE0q%QS@7g+{jPNvB4Bte{p`afANBwUYlE-t|u*
z^ivW-WxCCj7nrESJ~S(0tScDhm`{>vO!ZU_Sc7O%9qq1cW-RK#sby5y#Ze@}E5yrL
zNC+cnZkM)ig0*DTBJW1`UOf?NHoZa3o3i4gSRzL)zujv-lR7T9@E3tB=dbv=C>Al%
zxe*1IVO%e~V(Q-`I-_#4DNY#rZO4Yd4Pz7vWzgyN`RHYVsg_I21M0_S`9<!pEld0~
z=*AR7iF1eF;gmMfq$Yhb&4J#!^L3W_V!*mOd4_fxlUT7(#Ee>EH9L9b0;m}<VOx|V
zkoFVp5bXQ$T*YC6*v-^Y5Y~)fcqO!PNu7xn$qQCbRTFZero75V9DoU$Z)><zhJF94
zYpsXt(U?wE%;eeweXDOklKPNgD(iL<6bl>OrW;)(@+<ffS1zYZ^wm`zS$1fv+I<}6
z_hvBI1*I&MW|xt1!iQI=_C2)e2J@Q=*Hp?&OnpV^uyW_j^e=liBC)3=MSp5FKfG*s
z4lvWL$Ry~2ygspaKJR5$pr6OUe{f-4WVJC22z)MOhZ^JaTtX3bbFSG3pDdV53VZiM
ze0*y@>%Q8>1*Lt+#Cd=VFSh8Q0_m5E*Z`SI4?l0FmLf6oHH?m9zTm8_I5Csvt*0VK
zHyfzq*#{Yuw#TYJ&(9Vf2u5(0Ba|X_=bPvx$S+uxtFWtxu7*vOI-Y)~cV;l!8YUUV
z8BRj$aZ$q76<8p|^xzH+vLNsH6NvvCGQW-7oV`PeyTmG3%@wE9E9ye-=K&#7T~z6~
zHYYIP{W$etnU$V4z~`IOHRhwShg^v?YR+fL5c_eNr;%Uy0VT+;oramlgTV6=@UpLR
z{DLAgD6hG?Pn4AtpSIb1&CSDRe{)={7jI=P($=IkgNZfTOE6p0&t>aLS|5F5)Tc9O
zWwn{m%Ji9HpQnKttLKZFw)c4Mpb{ANOvXt2ekO=pxOC4+5i#2HL<S2{?sCj=R$}#*
zHx*LQ;&&uvT)wy>n0RbetZ}e&aTX?Icp!H>)$VStpTtaQq|#`y4jLPku|rUd9t)Ti
zxf6m^c-LZgKkb!$xBT)}SHk(XlfNZ<4J$V4ZGr7`ywQS|=AhFb7rRFv1;U*q45?t)
z%Y!}Al;pl5Mb10SzvW2CvWUp5QVq`Hq_?znte^VwoZGAIVg?b$8Mi=Eg2Bak;rrIr
zK=m<!8XBgcVbraAd(VrlR>SJw`dUqaw!OuzFC@CN>+#yZpJi^ARHRu{PS%Lc6uv-Z
zokM>jlSj1kLnImPOB9l!aI<04T;B1?zMb`9j?fdk+{9zWWLj~x9kLp0%a5rszIh@w
TzM_&$pcb*RT)gFS!jJy}s&{h%

diff --git a/README.d/04-import-scripts.avif b/README.d/04-import-scripts.avif
index a5cfa7bf46733ae385e5cb9c8cc55364724c0b2d..27380eba1666633b70e4c4fd2746d27ad2f9205b 100644
GIT binary patch
delta 4593
zcmV<N5f1L$9>pb)cLEWzk$Fc2C;$KeW|756e-XNEWMOm?015^;C9-_15;CPDOk@Js
zZY%XFc_7d0#pkGB6Em!S#>;m|3b9}mdAg4cOP>HeA)XXl$jERhRmJHCv`&GLhyDRc
z$isLCyb+1WgV>1L20OD<vM-NRy>(5S!Hjkg?ER2k4e=3@irys}@2xm8=1#0}YcUO~
ze@KMo$HAU6(oB8d>4M*`#}7JT1V$WdPsh*q>m3&xIJd|*2D??U*YoDIK5#e5!$64_
zO1s7~?(HTROOA~k<37D)wro-cCgqS?=g5VBrYGY8N>tsX#FFoKW4wx}XvN8=lQ5%i
z9|=0<U5@EAwJJ5|mV*+CX&dgq&?55^e=^j+1Yu!8OqDCdc4j0<>+N%`*_1`xFFV}p
z@4CaiNz;TK+3G?eIFl(B0Lh{hz9<pP+DdF@D+U%fIBbqVqu!!}&)pk4q2J7K7R5HS
z&z?o0$k4yCW~#s3O_k3Sk136Hj%)iU;1ec>hB{cR-{<S4@#aueU~O7zjXRGff7cj>
zKYnpyHcIaipT>22&=Wz`0+WVE1C5&KL6yS#+H&43f&&cq8nTg&p0Wgq+cxLj({_qJ
ztj&jwj9!w*oiCI<yF=sMJ82m`OCdsN)`P1Fs3wEj#=x&Wftr*pthIcRd~{hL4cf$C
z7J@(8BEX2&-j<r(^sO&A9LQ5Ue;1%&!br18gcUGaT2uu62yCriJjvl#OF0&S+@Df!
z_MjVptXU>AfN%&F0?WaQU5#>#YdHymm~-L((OZQ1ZqxLUhsn}$JnTzQ*CqR@)!kK2
z1~C+u_oas^`&X`Qr*L*lJJP3?pSydSOB4t>_@gJJ7Rl+XI${tKz{ms<f5Z(O98DZ_
zFKIfZ`0<*UUjA=R^V@Zx1!yRM<B7DX(RTu~=Pn594zZgA&PGJmy8_G<kXs=qqsgp1
zmx5Y1^35|^L0l+sf~>U>5i6Z%RKDoA9PkbQEwW3Gs88fVH?C)2)BE*OPF+2(Sn1_v
z*<H3aG1LJ-|5r2~=0e!`f9F7;!hsjuaSf)3aC9x*t5B(QcyzMBtpsr4zhtqw%}fcL
zA`S59v4>-4`FL|RJ@O7_Li_lrN^}gk<Rc6)J<@V-uq=FGYovYC3q~ZiNvVBBTVn!W
zEcZBlMii!PDI#0}bYc`(4To*iz3Ht(6|K~fH8q2J-OAJv%YW)%f0X216{2O+deR~w
zB9)O)H0G@lvEBDCsb@*Q$wD%%o}ngwMKV5Zun9}6Fr@6y*I<<-l$h`lJSF~R5-08W
zNtJpr#Dy%48Hx<vI`AGXmN#3SU5TlJ@|{#dvE>^U>(5@CYqEbHONt#i8f5zRw(?U1
z0{*lZ<-?j$2mfXwe=^9ttW~qxmlQ7#KuryttGXR0IaZ_hgDF~a5jwLSET8KRCJgnv
z8C(3Hv<9p50*x%yiWocC)IscBXQX(lJ5sn0hsl(m@2evac}|SRYCA(Rt3HjM+1H~a
zmZnCV{<he<j}!gK0axHWV^yt}p>?cA^lc1-RnG~7_qy9>f1zq8);jWnEGp`TFd>h2
zmY$I>_xEdM&R8a%{K2S7szP{$=>?ys8v2?b0Z+MgYUFhC#_-q3y*|DRi^MU0HQXzS
zR+6UTOLC|ajwdHx{Xtbt`{Vn_(X2c?oTi4Aw^^^E&Bn(Co5-u4X-TzdTLOBa_2*E4
z9MFC{>pLv^e;FPUeWay>4m(IUXX|&~IdFBYF1qSB!&3cXki#TRphr9=FEC0v2u>_-
z*<}08HM-6{ujUT@_1n3EBT)7lUrdP=SL@%R4tdqkv09)o+bf70;h;Py)J00b6mlZ_
z)##$5k!)t(x2nJpwVf8}<DhN6-T6Fr)Z0=eP{Dj6e|G)!$jQY&lTMnzZdtjR<7G7b
zC<b?q^GenKF#pqPb8C%AOA(ZYHK8K`bu{cwR>oy4-%4cbnQEc2TZ5?|%Ic@0&Ja86
zYFf7NhRd-&6b11O%j|?pcY$(}S&Urm;Q?ieGy*bn`RJ9kydILG0ejCptbpbIzYP9B
zhap-te=Y(#>*M*~fM*u(rb4^D-ci2--!0XY&5WI?8UpmmRu?`my-2Kt)8Vy$3mhpw
z&#a8oJP#Q@4&!|1mMSzo<YhS_y@e7Za9P&j=bc~OCb8w#!Wa+730_0es8U`}oW#I(
zc&14#+`!q_#{LX~Ku{T&ijTmnPTuw3=tR|%e<0lt*FZ7#Z?bA<jgoYv=N+e^Q5ZaI
zI)yw>*Z+3awle?;3HsXD7P=8Bmi+m+2cM|r-u-t=I&OPP53{&-z_*jco!uR{3O5m4
zMcKN{n@_NEkL<XD!KThs@46c^q>E$FRAa(v3={Az4y;NmvUYp?Wt)1~-z8RXflf-s
ze*#OuW_9NP&2J#?n`m?BpG$RH+y8n@io6!BWoH^t6YWovkG~yZ)M1AVHDuUgIamzy
z#JhQ=zLDJ6z5;$huD^p|kJl>)d@=vM@L4G9=n{PH{iVs*L_qb~JYD?u)s-NCA7o>A
zyrBJLSuX&6;hGuiRn?<F$431PDe4aee>+3t*VX7aVn@A4+N7kw5`ZOygwE>pCf_?j
zBv&w0(K)-S#&78;Y&%BsV2xx#z)iqy6qw$upo(PL*SsQVdg$b_Eq{Y_r<izOD~+^m
z(ZK7w!G_THr#hm7tVVe!37Oq4N6HYMzYqt4S5?5Cb;@ZT@J=ks?lnwV(|bgkf0y4l
zk#1WwERki@s`j4@k1PDA7J1e?D|(jDOfCaG(~*=eqP>Jx@)@=LfwfP7Tm@;u=hC<z
zIr2$Pgzg<Jl`gRKt^kVrw^kQ5?PM+&UOzTq4Gj2cOq}~3DNCzlkCXj_VlOSqvar}y
ze~mLuzURJiv{8pJU|_XER~`Cte<!BL^ph`Karr)J^-Y=dAK?`|>Oe9Pd|=!V+qRUa
zHW?2OT3%CjC=T4fi}N)d<C?ICRr4)iL`CZ%2uu9tfr}m(eDWTd!lqYYoycBY7$M0x
z+d1RinPGO(u@u@={~ed81`xXs_ZyyrX&z>R!vl8{8^M#gFvmC}ias6hfA-O#!3PSv
zA%4Wv>d*Kf63RhZkRFA-9pNr*bA+${h)quWeFm!TZqIrDbK4eWML&O+jdkM2nY)Qw
zwdZ&V{5#FT3;k6q7WgxzA*3I^0%^Q%IzV`gRg>wah9BRpm3P1gRm)K%DCC~-bhuvc
zH9-Mee0jE8qvbn#S9@9^f977X0q}zV+G8%j8GZpmi@Bp_eOa+=NFA!CS2Grh$Y7E6
z<iiKvd1}V94<jJJP?w;&Lpxr7<kCCEc|)PhK#CAaH|;UhHFweX-3v$niljT?&whgo
zn0}>}jnNnGgYnNSOzU;gNmm_)?r0sfEP}0<^s9~?-1AuzfWGjkf4^3yyevj3DM(a&
zn3Os(G*!p_x&;<q&;b{oHmg#kOz&`7CP1+Y`OrD07T-X=z41)?U;R`mmkT20<2P|g
zOr4LL>(3Eg!enYU=W`$KJ@z1?ifHglnf>-<AXWT#9Vb6M%k6BkhAw4}X~gawEYi7M
z#mEv|@D1FNXQiZAe+K4NW`q@#^3IuYkWL`5Ze*#rA;zLy-jw`>q4rBY1FnUanc3|R
z)Qt~w$Bh%%xQeOfAG~rA9;Fa6I^v^Zqk?g50&l<^W=YCC2!4cjzUn2*p^K7<C%GjW
zowTQ5MVqhptwU?-u>oNtck6~tEmnH>v<TM-$4aTGA~~bGe;Q908_k42^VU3*bO%%T
zjAoB(8eR*#kSI_pVa+(VACoC4Sz@R`W^|movt_u)HZZz1;o6bnAVq?3I~N-ylD}v-
zY$}x3^3f4iL<&y@YNR97wxsrMQF4$~_b;PzJ-5}X7Q1-sU?_VMUi-B7MTh^gS`%gO
zW|$N--r3S;f3+i>`3?#o9ubB-0MLS!WTFW(jm?FI=dSlbd&$g$<r<QGoP`UZNO})k
z-=0PSIgikd+QpxUDG_$Dc1qD28k+^G%OM%QbcxIL@)8$rgv1Xzd|#g_I;h#C`0+Y9
zNKIS&0kFjRq5m`gu}Wb9m^ot@BSuE633vs<L##*ce;m)~S?etk3+|}ug0N+(b)rv7
zHTGftibrI^^}4D-(YL-E3d>o$l~n9!YYXGU@=$7rRgn_f)P?PRnnV~YTaTdQ^ors0
ziM{-4dONk>@r4#+h1-*=xy#d~s=w6{%G%I9W(m&f7$AirDK@2+^#ESbz#;_tw=XqS
zj<p3WfA4V9h5$JdPOxQ$+uKw^wbp#X_XwT!1;t$BXN25`S6C^Hl}x1XZE3=K?y3}Z
zi0rDL_}duBAZd11ni9&+%1fGc!H_99HcWIUC&(PU>Tjjg$XyfzYNW%XZik}Ede2k3
zvKaNKThDRd;AMC0==>#?Z$XH$GGBHc-iOcZf97rVi=0H>Z>%>X;g6|c@MN|3<!`oa
zlB$zB#<4V#lY6}I#3=3Nd;i4h`c$;f8h2DvJIJRljg3k|LMn2Xon|*3AiDPXb>Tt~
zfBsuQk<Jr|qO2gpu&+)|f0_tc973zb5e=hPeo+JpRwYmHLiRSHg&{&t=kg<(DNc$!
ze|f}m2jy~IF~2E?Dk)&z5KVu2Xma^2DawG}a{Kj?EZcyMg1aGa0r)d0;By$}c<!qW
z31q~uNMC+bOQPT){fG&e*4YQE@*<dp{-ZU300{kwx`&XDH#VNUOpU*vSL-qzb-^lm
zr%+9mC}C>eD9Z?e<ko#<)_B^~HkT90e?Y?c(s`UHTz0u@uNDUZJq(cZwkTXf^#%ti
zni0NFhYGIw@X;S~?GvQ?;3lYP;atbR{i5Q}-RFYA{OwE3Y)X5L;a50uEb{n?B%_#^
zFW}>&X1CAnh0P{)QZ^Kz5SuQ0To?bkvVlaVQh541r-0YLJB_V}&hC%_IqUxff5(8T
zp}TGI1<^hu)pKn^|Fnc1igsDdE7sqX@A_f4BRe@wO2<1N80Hv((~|`x<ifK;l^(aX
z9pc}&(~n{c=^OvUeR&lRaD|#+bE@?JQQM=HKz0X*0EnkqRGBf0%$?~Nrzcq<^zuf^
zvz#5_6+gBnu2QeJoOfSs$CM}$fAC&X%p%nxbVG`Z-0jtQ-^Y0^->PmG-s%L>Wu@sl
zi_8vg{ze2=8n4uV&pCYp{av`D<3>r-sGNDK?%e=z1~<b^G<~0^8wwf4Nsu25pv;39
z$n;gxoT)a-n2H<P*_c%elNN7L+qWCViuMf&ahpyXKVEehvmOnr48gxze^R|VaoC0F
z*8Cwf905GtA39aP-o8j>y9;2iM3!DA%fcV+`qEWqwRcbh%GPutvteNER+3ic#h9-{
zTMZubgsJN6-uaF{Ij^9HJ1jcSAl>ftPCO>L;h;mApN@DTD)6_x^D|;T>MQGC&C&S&
z+#gVXBT`F}ZkWlD$9)NWfAR!}70DWUYG#`(yj0`KF=?y^=ep&<iPU$P7#pQ~+6`&0
zM$3BCpqdOdvYKDboZ@N_mgNyxJEI<Q%I3Xo1Fsp>uL52{7DB?d=+4L_Gipt9WHt%b
zLXGfGLz~GQ5jC5G>WbLNh(073mfP&_r_tha<jw=w39H)`4f%;ne-rbQLg2ApD&3>a
zNOPwAVHU-uTN-SpW$Ohs$9LSu)MU<5ov0857lA(S`0RA1prg-ZDmv@G5ESIb<onQ6
znJ*I65Q2xn!f@u?PO)%?1#sOC)3jDL93oSPE7<*FCUR(C%3^+vClR^IhO0cW7s=N_
zcZv?d&6KS^xGg$$fAX&j;eu!2e>xC0sx;278hYNgK$)~_2GlBXM*YGqY}kYlixv<f
z9&g_0>rB{{q6S!ObNz4db8Z}LD<Z1p;$@E;S1l}vA^Gk{3)a2jd=&PxA0tIS-$SSj
zkZ~$JRN+2^%2bv<l81YGf&ReAOtXgRj_K@?teu=5x3T}2TW<)$5LvucYhV5yC&^46
zru@IB0|x{iBBnknli(pFe3__S7)Fy4sGZR4q#kxR9%HtC>oGBgG)+VIo0#V(fhHRy
bgQ?9x$twZ`r0uOWEkTfn#C1|g{lA+$UIXsd

delta 3713
zcmV-{4u0{)CEOm6cLEMck$Fc2Bme*aM3Kcve-2S?WMOm?015^;C9*hd5;D9TOk@Jx
zG(%$E-oB3{ms2LSbf~M6sV*<)?B*mwLa~`U^Iy2YQ|MIqcn0X=t`?_$d-2*`RhBwx
zD3Kv-;sElRgMYegHa}ZI53UDHNw*gtZzxlXkc|taDqqL+j~fF~@W>!+Xy(%s5#E$y
ze;MS)nrA#ePoBdov-AXW7z^Xr2zqo&9l%9tmh@KcF9ga}%a{AG4}23Ol-m!Y)PN_v
z<C;CJRtZvX#w;O?8(E8#2<h|aQ(xFh9{74AE_vc9FQZp{Z2R!~ia#cu9Ot4oU~_yE
z4J2?w*}!;f4|7|zz{**=ReBL)N-iCEe>YrBtu!=rhPcM!pG*ZaAfK?){=M05M=~Wd
zV)3ZnXHl_Ut_j5`+_0>54$`7(s2QJuTl^S}(Ta14&5?S=G!`~G7!s;x(4DrR2k-U&
z^m=8L!?j|xWHS;%vA4S>7JTAA#qBRjX4Fh28SHXZ>}?*?=|<++=r$mL{}(HJe;VwQ
zqLTzH6D{X3s54;AB%6MEvYurdtsNBTRo>7MAW(j&Xqu|KZxc6GC_xA&w|a||QQ;dH
zfm7f~s(rXb{pwRIWh8;jHdF{*C-Z-zFz=m`rE}0E;4toG`Tg9q>L`R%dmjIJ-Ik(G
z5?N^uD_ojVHC`JiHwovplRm!PfADV#ta%W&l}s1ft5RcE@_%(#zcdv)<f77XKD$W*
zY{`Z-0mwe5|01Z>(p^BQt@FqhkyDJc4RWWiHG@i=>h0Ju7(d}<?adtD3=aN+mnyE)
zuVuHCJ*R;Stv&<B1^|fd0M1Ek#%+od2`|zC=PU|vt-9XF1EbWBYjqiQf8ZhRAZuFD
zI=#MYz~D|a7P6aR7T{syxz48)CGkOFAG)IUwkL#_2Gdv?O2b&d3T1$eO6X|;EZ*S~
zcGHDdEs8W53#}9m8`M}@ble&-t@_A|;7QgO`+J(AY3+3f@`|>)I`d~21Q&lQiWcMz
zQa$u<7D>_0{bw{EJKy)ve~Gnh5|W9dk4O~Uf1at|n%Pd(!@EaN<BSpC);;+VPpc=9
zA=u6z&Oc!mEdcjLiJ3ECpJrt9hljJSLctG4J*RrSS0a!w$zrW6&1_MWSM3O3k<HfH
zmG;8VA7<aBBgO0EB!;rv!0nmKv++nqt>={~UO<%hoTL)y25^B+f5a$2T*+JPq~*^v
zVx1aPRw&z1-7%aombvb5QCDq#-9e6v*1rqn@#z!aYLd}-E@M{RUF5q$8C(CH+2xcR
zGT1#%oacN8Uu{Q14!8!?nvyG+;8=A0PR<+BHocfyMdI;q?j0Az-zcmG#(Cco-@b+0
z&R=#K0!)o}B%7b|f78<{sMPBfw7sJw`jGY7%=z7-MK5UOhXR0R73JfnH&mG@0ohQ}
zPlgVKgMwLCl9TwJj8kMwtL{^}K4L;{fN3>U*AH9kNd?6_COZ7-f+sr9J-)V}YWy@R
zOW$cIa83S5Mkh;2lRkZ|Gk2JeZbafsXF~KnvD7LtVFv3?e;wNU)unRweyij9ZZ~CK
zNB5kw<vTPb{)lijzC1G@xcmP7u)DJ}Kv1Sz3=94<{%Adem@m8;W(pl+e79zc*VLXi
zP_R44pN=`1V~@flt@B?KD>#$jrW$mGlcU5=Ne7*0HTDd&V7o;P{mqYHzok7Nu<3_T
zg@HihhX?`df8P*V$MHt`o;pP?4)`lUc21S8dTc4Vu(>M-w{dnG1}$wxyZ*mBLB<3=
zpG+JEF~pQ;3R%t_UxsR4oF&Grj4f|r6%Hp}oDf1GKJn;Fz20o?*>|2Y9Lu{uQ_pMl
ztuFKF8Sk%%$Dbzup{>CmijBWavO+I!PsY|C-+ZcTf0#pm#E!KEJ2nus+{KWwZxm;@
zVs~f#j@Zeq;C*X;uWu!voPJWNxL<sgd|kLq3ZNigknv8S+x7fS(NuZzv7>N;PxI`z
zppBkU>ufFYO&0uv1ZCT}G5D1L3ZMT?!AxzxnV9-d^bQZD8F77}uTxK1TAE$qJ^j9V
z4z)odf4bQjLms6bTnOI)sN`vkdM@}b5fldnNiq!#e6uO(Ar{R;Q-w=koBS*#`gM}>
zwFh_iAs<(HN>nsc+Oq=S+6maF<^*dJvPtWG&g-6As9iPMC?B#2jH^d#VU-mw*Fb33
zGd~pdf@S{oW-aVU2R2#K3$ixau=iS;op`Yde|SyJD<?JML~d)W^oEQ8nah`-%&&7e
zPl$jTYMe?xy)*8>z~q>6Spql@qPkC5>D-#uw>KB^W(<1-!@(yK1d+SfKz#M8k(QJz
z1MhIvax4e-lt$dC%}qJ}2z-^-)du5_?>=<DKC7{!s3&3CY5|mE>Y<3F<d-5tZ_(8J
ze@&F0UY&Kb%ZjF&dzuKWt2}4Pff3Xo$1`XBEk89*P0M<UL0lv>YVH3wx{$%!$WA+D
z+h-R75MYI)`cqoF{EaQ>o7{UWFIj_rKFIFC=FR~e-V&~N4G<%fpPLfll>2zfHGVJ>
z{-Ul*h0k~&?Y$Kg)<gUnF@eDMMJ#J4f1m5r!888&Gk)ZL7~Knl2fceoQ&x?~-$8_W
ztAg;TPK4%bGK+f~ZFe9ijRZyDwP0G7Ghtl&<v-Xi$l(f+pc^+79=oTHq?6jGqTqHg
z>#l&5OlstGY&^xs_SEd7-C(U<R<-vSY?~M^INcgOE~di0ZALsVoo~t{bxO|2e}DKR
zyoLA*to@(<^paDGy8lIp(>z=Pvd+LGVJrK=P<xWt;0>@b4-RL<y$s;hAA5&JOPzr4
z4e++$&49{N&|MSoQbni2KoJ3XDw|rb$1yG&BT%^e&Q3IViTyGJuBbGbCC1(__x8u_
z@9B^ji-LTN_+UD;Rrx8r+h8mhf8L1^<6|~ap9NJb;2{&LnNZ$mcV7PlGmxEGJhbDJ
ziNW+V6QlN~y;wxh-c5cbyOr$hg6Ywy-cM=oOux+w<_JN*w+9NL&sseF-#p-DT`_5e
z$F9g9wwZb~=rC1fC-9z{#!coHwM3oCE=-MXD&zC-1Qd4nrBB#jXh^2}f0eUIp^<T>
zF((Wj3uE|6Ao1jQ&*{@>@Sdi;n0o^+nMUh(T<<43Kj|$7p;Tm#0?@eQ=F=e*->It}
z65J;G@&)L6BaT9<ob}g`>y12Id_zDJ^Ux*lt0?~<Z?a>n7R<Vhx767cMUTp~jutq%
zFa&&v{cEkF%S$<;hWHp<e<qyi-ZpRPmAo5-bK7K0Sv=a0ov;w}SPn*{i~pch&XJ^9
z7C`6_6DdOyrb{8uDK%gVxn!F7rCA=TdVdVt!$Xz$)IHv-hi@*Y`cPn+>10j-(0Og9
zsc}!WGJ#010-zNu9|)62xN)XcLWNA1t+9jl^bGELw9gwp9bvRqe_A+fF8lnZb+&|#
zDtj4W%Ito|bqn=U>!l&!zKJaUPPBI_Bb-&`6R~E4b>r!tlkt7;3J>4o9evseKQn7%
zqiY0LO^E|LcZN<InBA&17ij!62G(b89L|x6sjTkuixdQEmma0}0a3=M#HccpP5+Jz
zVv<1z9vq*<sttoDf4wdJH8Di%UEjK|*<kDIlxP25zIQ#)f@x!ZM;;r>y;I<Fi|_~^
z2e3xvvPb*_qkrVwP&F7LVgK<)pEm0;o`Pa`s`)?v|L1?=t`O(3K}z!s_!Sw5A}6{1
zoE@irDm|3+0T6aVm7UN2W@-I|dELz|UQ)++`XaU6L4(x0e+yfD3zO=Cg8rwiC2sa{
z^$NZvpc5V<iBPU;96aoE>Cmn8+=7bvgXAFz`_PBuRQKUfSeM-90<luA7z_RpMH4j`
zoDR`d$Ge7dh>$mLr`lR}TF|;m9p)A?Wc!pc<;LBHzYnnTT=+Ukem<l@(wM;#=Gqa{
zUJC!}3IK{+f8THB7bk78J&oCAVW0LQ3!4~m*OvpSq}O66&S-%uSZ74NQx%+!s7HGp
zeS9Jp%fNG78qOWT0!tu7zc`74CUL}6!>AV4&)Rp824WL-3)6vRv~-9=-;`N+Kurhw
zHJy{=$o`_W1atE4G#I3U9x_8|Dzwhv$HM@9Dc0fQe;VT_613*~u*QK_8xu{|kyM*|
zYK#Gs27cKhw)y>M7M~!(uGa|GknU|NKT~Qk8vz1v*Tv!MzJOqEnyK{0Y@|wmaKUO!
zgAbwPrdYCT&KYOo00Eml0pi%KVI~`(;^=HZlyf3L)PL^m_?c|Ao4(CezShz|(ciD-
ztS%mHe-U=<52k`*6kylE<}HEGe0gYZ@=Z<j=6hC&Ye5}_u;H(RaLRvNRLGQ}tMG|i
zXb5;@$tcs`tleM183M<bvqr|$E=|tQ-6!61v^`ZF{#vQ>m`hBP_s41>`+z}`{n_7G
zts6<`_xgW35T(i3c~vJ}9BE}9@?lX6@rcAif7qGipT}4z_?VL*vRHhfZu@XCmOlt&
z?~sIDcY!;6UX07+ga4Jv_dB=itch2h1?bWo+)6j5gv`@#7RGb4wf1y%)8nG717$<v
zQw(vNJK5`h-`4jSoF*MZqeYMndS^#0{AsPmZNvf|{VK5?vBo(#SIUXJu|Bjfg2OG+
ze}nE&&h2;aop?r!jE}*OWw+fo8hv%fV9r`uD?sZ&{G~lXjd`_!@Z||Xg1Jn%_&U??
z3<RbT%kBj_>UW#Gqyi18+iv6N)5prTfV%`@ZD|)%bidE@Rrx}(hj&4>nZ1@x#F0E#
zJ8u2E2?n(NwY@@cM``M3JL&O|>$YT<YZl71s2c+(*B*3~bot1Qvk2n(j`j{kSw}~8
zbBohfJ8c=)%xvclHN?Dz?piViqHGINfoDn_7;v_rJ-?H2#C-+*<QKQ6Ee4+hjz^CS
fe3`3FHOqH_+u1cFMkvkq&nT;Xw}44K$X53J5_vfj

diff --git a/README.d/05-run-scripts.avif b/README.d/05-run-scripts.avif
index e3b8b8b424f0502cc08fc7932742e97aa50ce7f5..12d812c0cfd1c9fcc1ce63d5c8ff1d0ce8fedbbe 100644
GIT binary patch
delta 2157
zcmV-z2$J`S4%8BmcLE4Ok$Fc2C;$KeR*}U>e+Wr!WMOm?015^;C9-;~5;C+9Ok@Js
zZY%XFc_7d0#pkGB6Em!S#a)~lh14365SH6M=h720dESb9CGQ_O$MRdJabg8ZZIB&6
zBe+Hv9?KXR;8?SOFH}@&7&<I?v93{-H+V7>L)n6&F^&e-1!jXAfmAMkI(-UOtC}SK
ze;vWh{%Z6DeCPh0<<<Zg$cf#Li_p~&H&#D&NviK%@@v+?b+r3#$bbZbytj?Q^P>UQ
z+M9yU2JZ67Qb?7<8}~LSgu4ejm&s{XWzPGG*KhFTy<g?1J!SrDLid(7`D!Gbm&XMW
zE0{q&x*KK=NBAXPYyVO-tf6{h0k3u_f9;Ld)_b;h^4)g*AZ+zwE;gacC3fFpSTM@a
zq(y}RtyS3dJ{GmYurJ!qN`?Dx<DXg2E_F6ohvbuW4siNAf@HM3k-L{XqR`T6H5)+B
ziY{ieDuFY;Kga7!(8GRC$YPf8=IF~Z@&+L*N&#iV9i3@!)@DntMv@qA8Cy2Ve}t5@
z*38G*smE-;Ivg)ZGpU}KzxyWUCQ%Sgl{qJ#dumC0Va6^1rN)VgV{%DI+d^*;Y%1d%
z+)v+Mp!eNHGe`K+^W^_%RjgvlnOO$kBg@lKY%q1U9b_YK0U+w?_<6NhHSl5-Cq*zp
zi6vw{x~JX(6!d6-5qz=Bu&p1nfA<wn6*xx#*LI6Opp_ePm9JpD>1<GPZC@x~0LdV%
zZ4!smG?e;*VUta(+4m8yy{*rzXMypsIWN0B@Nev*2nuV&BqLPa<x7$VCLN>N%>_9%
zjU*usKCCB%>_Pl{j)-DA9l&zSttn(Ey2-R20qwAw25TCzn$(&MKi<hde~wS<W+1~~
zTq;t1U3@c^;!UUE&EJ0Rw+F8RWNn_e9mqGzQGoL@_Z|M^v|EGgPTDYdp%t8ILN_W^
z(d`YhWq#tpn?F<4MJ(lg71c2d644X-glC{=!IVGP4RG@HUCFuX_?Za=rD<I!T`EV2
zfGX`lt9VXMNqHv{ei?L2f3heoCDakmzS<D>N|p2&SG+SZ`N8~P5+*8Rs<Bm`WJZ7O
z|5!Tlruc7>@qOlXM$+r?04`N<U6f5m;@6O?zZnY`kOe)Fk`1)Gu;Mq}^vA4r>7!4~
z+Pmb!v#<wdnqv?~@My_*St8lJAj2?Vu?vi0A0*^!0c=vt$M}v9e=IZ93z}iT?j7-+
z?S-NhV9vAEAl(KRdrL1jPMi6^j+r*$8(J1*&>W|67o98KOdc7-rZ8$*-v1$Z|2=_y
zK;pmKWnsOiXR>qB)EN6zdB6Xwz>Novg@xjunYlyVGm6PP)Q3n~63>!Ej$-ux!raoS
zdd0I><+uy=&s(ske`%@{j)T&sQvqKer>2*O%_tTS2MAc|mN9nG^1r?Z$n@C3Mlnco
zT#WiRymL=0!{muAY)l9KKgLaqRt_@va&Px%oa4tBaFTq}^Us>MD3=t8hGYsQk#Eo2
zO!P3xzw>f_Sossm5}QX@sT*z=N!-;WYzAaH#vL7riLh2ce?JGZHpFjg7b8b)GQ%t{
z7t9D=><nv_R5rvK+33^>lp&OKZZDw#Uz;d+d+I}Ok?}nOuP|{h5|4%>cqsKwO9(CX
z);O*YL1b$et*Lwk+p+^@g&|<~oHk+&P=`rva)vao$Pr*xZu2LCQ$(ks>j#ByD*=Yc
z+)2!ho$Ve6e@o#$I&RKid+b2DA%n1ka-pg)ZQJu^W#TK<e_d7E-;UqWbg-BhZQn=&
z3HMy2owE_GM1;#1E)N^r55P}WM{~X2%?QqlwP+0h>Bj9DJTu=7d74G#d9%jENI-1E
za4lY<OqqxXfbUCyq4ltd=E{sQD=8RY-I(wIHVqKhe;QVbRZuaVHM?uy?W_on3fUAL
z$<2-v*wC2{Baw82ln@30r06KyD2J@ehoiQ+y?%BC6Ym)f_ZBw9i*NKUny|{b6tj1+
z3?V(Djg<<oA$JayK&DMh?fl;4U3Z_FdQhRYxxaT<xewly;`IKkkD<NZ^(hta7To(f
ziaib3f5bZ6rT*I+3*4HL$h8c-k2^8RTJGh!t4wDZOmd9fOBM6YR6Z)VaUz7gU{Puj
zpkoeEZkd|Tw+~MOVTZRJhoXY>JatAtQCNFryZ38>ZsL~hi0y=i$A4@lNbj%b=A-ot
z=0I{MZ(y(vJbniDIRky}|9>gXy;)4}V2CGke{@*P$DMh!1|h|kFz+v9*XaRJlYsyu
z^#V&Mu^vP7NKBNTRfdGLdIp;TC!gsMaKS9%G-?A+7YoKkN7vL>VTzwxXi7c}lE|WL
zOBlpYy-IWdmAoY_TxCjO%wS49e_BNcda5Ui6Cw(l{~XjFQl_<0_Cg#KgU<SW(_hJT
ze=mlr#!0@wrp^x*86d6>(j-1_S}2GwH?99{h0mbfXPJ!2Xa{0A>OsXFSh-0ocyx$*
zptjCX0s!~S%C)AWK^?4#Hq!F<sxjGg7hc;JwMgP!u1HkU87>~w6(YB;mfJGbEM=sU
z;sHNAVJ7~t)$D%RBv`j%123JYrCOF|e+>U-dHwmvcOzwWyiSaGQU13ZgKs&lkAGO3
zCH<4o&)sFMz#>BVBK>`p^Op!2>r8NDVqfD+W_zai0S7Y;YC2ikILoc`lm;Eq?41$2
zSFMS<KnXbtX5fEY8<X~4qsKuaMJEew_x1qwU2xhuMmu{Kfat8ug3x1f6P6{qR~aRO
zuI8O5O6JjA(^$L2+;MyN#Mt8S6h=P(_jF2wWE_Yjgb$SVr`6meb_*))ne-vw8@+>b
jyj?e1J*E;0T_qISr&$PYTkFY522fdty(5&e=+WmOiue==

delta 1566
zcmV+(2I2YC5{V9wcLD|Wk$Fc2Bme*aG?B$fe+B++WMOm?015^;C2~C2Br@p>OvnV>
zgQg@`=cj$4_&lOk)2?Oce#zx_y_IB2YfF*m7V_GBm=2SGCTq+1CWD7r3N?w3G`qRa
zu)%bFx?dv^V4n2#4lMttDXL6V%qdfd@7}!wb4<St#ud{1M^NnJeyJhFIEUyLVuJUx
ze~h*qHm@i|8hG3hKDCZ>*=P6A7ATUTBNoh;mvCJLRX-o)*)W#6vVyTkj~SYLiERO}
zl<UE33k>#>Eqy*iTt}i*>nTF#G(Ro6j`m+%z~X#*cJyWI_SqT+J{S}RT<R7a(~4Tn
zvMazvaL#+<uTGED1jBmizcgzus@K)re^w7$bGwj=UyLhFVGf=;qaLcOJqrasS|P}R
z2AXngD0N-qX4n8BRHi|<eIGa|)M<4I=pu`^7mAi_TB0Q?iuQadA&-!0?O{L!FZ|C2
z)tsR8^U^)mACs<0fR|V^a^%f`ri4;;vtm_-t_O0%_(+v&_B7<WJLK+R5PR-xe>EW+
z<F!NMBj8dMz59k-erA@9G@R6Zzkc657p77)FJuaNNl>c3JB$*`GRg>wFHZ)=w9PkI
z&Ul7^rxSYl*zCkRzwo|Qkg4G{e-Ljk@Hy!N*AM`9%072sM$ox~n_@}w9ni_NIgxE{
z#fOLtK?oW@wj+SZv$@aKWO8D6f9;2o=71fkV%TCFBNZ~R2;H4XZe-b#Soyv(w8ZOp
zt!+Nr8P=<45Yd@x%$!Y?F%MUJNv1KWnCz2yl*yO?55eNvetTWXz%*rqP2xZ7Pb{}#
z9moaZCu{3@p=**zp+Z8TnSb0|%;uo(B1HQi5LvhaWL7Te%->JD3c%<Mf9$^QVE0?y
z5^!1CBNQ7d8gW@eb?K1D3q^G&z+u=_%wA4S<>($Dv2tD!K<L(B;GVY?B_5?YM>3ua
zi#mKH`a)Kp*!B|kEam0Dx-X?!cspIZPPq&$Z+wP>r;qsSroJ{er_uLwvQz4iv#4X=
zpf4-z@VImv<Oom$KA8Lbe@-aQ*E~LwTdp-!DYT-bSdmt<mIkYPh(I)Q=YDehGu|3c
zITyrDH8#G`4>W_*_cKOV7Kie^ed<!I^`VTgnFXCYEcUsd`}s4Y5mOIX#xAQdqET8;
zHnVyDX-!f7plcYRy4a;J|B!uS1FKg{S1OQ#Z{gBixJzEa&U*S{f11)y*8F=vtV)M=
zaUq{pfbmwSu(7c}%5B#a?5CXgP+QpnuZ%DY-$(TB5r?DSN{8DS*5NUj@Wp#$t~Ro>
z3H|#%s^pQv)xjDnqg3+v)rA5J|Bgbo&I)YF2ASx@E=ZhNg?grY_2uohEcAO55EV8^
zM3Pw5v(f>Wx1I14f7Ny_1F!LejXTwnViwI{x3&BQyFN%DXF*DbPMwZ56KTYzeH&g_
zJ;<tZKe-u>Rbgs)wvMtMf*E_=B99#g&jJSAar;O@JetTeEcRS0gmBYPiNWV7Aa>Ko
z7r@4??uxSUa%&5Y<SjL$G&*a~(6FfRf6JeY$Gc*SE^vLif3tcF%yP;Fba&mb@)d<F
zn)6b4W3>dKvPy((?5hMi-0^4xEKb2CX$r8hHh}zi_k2Vxe|)o%g7K^SuEs4ey->!-
z<>fpIk2Fn(VX{vAMK#^$^ubPYxS1R~y<$^8clttG)|^F|ld*~_9JE|`Z2SK?I#{C?
zYt8Ybnlo$`f3_)CaGYfjr3Cng?92(LHJYvpt&PsGXyqB04|!mN9{&&Ipwbc0cJ%ag
z9gpvqW$dIBHOG5O5Jcm-s1oxZh`t&5>)KWkx<}2EgbCYThmX0~s`5aX-gsG=+Ak6_
z!tFr@0)pYwDbXbCK$0_`HNo`$F}d}4+F%wGyzvu}e}iH}zexU5her%Z96-W_dEr7D
zy##Wio**iZNxGXUoYZ`3XN?kIE$zVjzLEz%u??D%s1ULPy8h_xe@Y%s_`{xh9|WBU
zjCKY5y;(gX_t;j)=<$Nw1ISgy@2#CRu%B)sf7v|^uGE6c6=~uM**ybIISatV2(oWu
QFMw%G2#188z*%8-C@)+FVE_OC

diff --git a/README.d/06-schedule-update.avif b/README.d/06-schedule-update.avif
index 7c96f3aa6f71be5f821c1eb1b78ef947e447a330..158e13f53d0d52ead604cd8a4e2bcf62baa190f3 100644
GIT binary patch
delta 2927
zcmV-#3y}1f5xE$UBMs|qWprTx00000001G8FdUInC<PM$01GCOfJX%=00011k<3Vc
z3odPBVRRAz3I;eOvU;o%GMN@kWCGZ3EA=XQAkXW?=cr#3Gpv5b%Xdf$v0xN=x{nP@
zp8!1}o)lZi$Z#oD#pwsMPJxhz{sBqI!*~b05sAoy*ofK&JF`@>FOO8cbxoVWjCK(0
z{g7P^@ez`W-X$9EtvE8~PONcjF%7DJNP4;AUN@;?Onu+!pJ8xT79d3~f!179h?Q|t
zBxRQ0u7b%VA<f>L0-${!X}~}HHna=)w@_jn7Mvu)3<+y0L5v@;d5ABvwl+*MmGbXI
zg;{ucUw5`6?=3LX;5#odIaQ<Y;6Z=o)wd$0HZ)`G)$g@bY00&C!`cQEoZ;_(C$GgX
z7wfEQv^hi)R<ZcZ1avTDQ~~l=bx|%k!kcYo6wSmM|DT8&x^&;$InjijO(s9yu}X+(
zKFi$VOp*MI-njta89)n07UtW#=C!ejZB2gMV=OU8pZrb0kH0D&R0L+Xi9own=G3b^
z&B$p<-u(~zw_s_5*->@F)Azl9M><6FI_8;TR{<aLsD5>|_x4&l&-lTZvi@kD+z`(U
z=MQ~JpBSfAm;oLel>dnoGI@rsU{Fxp&m<Y!#e7M>V}5H9GT*QH=wyMK%5)?>eGgm4
zXr#4OS;Oda0LHolE?m1U!uB)dqbs&DPa<{$EO+lE<$P)&MWJ-vCaFz-{e{_-h}8H$
z35{A*9u<!^wH+iaImmeSBh*68&X{>o7}`{>|KGc9C>5gKF}GA<)AT8xBBK@)>uv{>
zhHpO$@Bm&$Ar^$@zZS^+aat8ON?jkSX<MkbV}PcL-OiZ7=3}59C#B~ep|>C3t$H9~
z%XX7*w^*6G-x{3SpjKOdq;GS-y3e^|=qIMf@drX(tBQ+*2OHHU8Pg7U>#t|IVuB{w
zV9Re%O&V2zNZpfl^Q^?_Asn_VCUM||M&^lKcdZ3T6J!$G*BCYJxJ;pKUMEc?9w0Kp
zrv^T-t@Kx<n-+rooT$#!=K>gHDoepbG9-$H_a(A8IUmejjSlU9#JHE;ab@7-fII}l
zgW5f9N#$XszZf7yb&>2sdIk)!3P@5`XAcU;qY-2P2bxN6oG4H4R6F#^BUXoIC|-f2
z9PG=zK+t3V+$UT0CoZ&>MV&j)eOKe~TX#^+c_c1+$d=tIFie9I3v$>zt5v_7l_x--
zM?Bynx%rEUo}4Ow0$=MZ-pqPt?m-+Wq)%1yFL%I`Ep*E;T?r-L{Skntr><;6O3-@s
zNOE#1avRP~ZUNw%wL|GZSQH<i%?}awxG|Q$C4CSgPl3&jqd&+hsstnYE0HHZMk^UX
z$VM4+&>_A2rmOQNKWox88afJ9-2DZ|oaiQs)w+3k?3vYntss!2-N0`_3Bj`WTFSi(
zw^kZ@y1+)FYU|p~4X9LMi?<MMucQq?>th&KTmIFUh?o5#XOcWf&53C+o23QOxV%}K
zts$xV->l2~bgo+R;jF@#D8DeGvW%GrTGkE93CftTbERHfD^1=dc_w^fX;3!D%h3I~
zw9a#xFcL$5YWmPnJT?8yNb8I6uL+;9NlW#mZdqN`4Zl|*i9`dB^4rAe%&qW?q7mri
zY|bp!UT_AKd=%pn+9fzv=^8Fs<}+hJ)sC-qBK;txq2aaN3RvHTTZ?8nuTM1b*Z6#u
zO}yt!#_|leMv(mBVmp4kn35Gc7t9!Tnt*8dM!JK4tAPlSBqu}n?eHH90b7{?81}uc
z#bVUwc7k9FMSRG}r&)44hmvm7%`!B0(=0N=@qECA;6Ozh)M^Mg1wXxhQcjQi(L%_h
zlR5rv3`mw@=Ku8Pq`t_N73ckOj|BloNwy|WuCc^U*qpE8J@`?*!^YB<#&xP6Ax+)r
zm!(>N>exyc(!U@@fmyhEXoksi=I`;9RT36;93ck1CtUH=T13xgaOfCJ=svpr32@#w
z6<U35A6wT!BHi-O&gvL)t0*KQIZ{Q@b<HU_-(hhu;wLZWw-8_rq*Uq3fHYr`TWwk_
ztLfSdk-Cv32&yA#IcT!C6t5$e{~j0wN*DBhNs<=(Ln-*y(YYTJxY0yo^p7uB`cihm
z?o1h895i?)yVwIyOg``Gqt?XYj0OPP1FzNC-l_uNx>LEG)}ZVT5DoG2A6VzYfY(iB
zdU2Ycv^z+!uf`($fQn0XKW~qu1)#DR48v8BkJ3J5{75`qOBoe8Aja8@j0?$gGyMjC
z;*WtdPaSPOmOY?gox1{`8NFB2f7xjy_<F6wKT-BBV@qmI%t$_Me=1{lM@|l=I9}B<
zP0ZJsE2n=|q2s4ISnXxAQhaH%9Z^_xlJ;L2c#A+XMAUtIs0ITansvZR;(9O^ev{Y2
zp{OVqUtW3%2p)A_S<4LZ>1|YRXqKgac|+l%XT1)qCX$MmXI3~FSCmo%&@!h1KRMJ@
zjJdD>=!()1RYGzTzUMYT4^a2>5@-hJlv?-ewb13FgPi7B3+0BkpwZAT`EtRs+Z;CH
zhElH2IbbHU{^r45&!a(n;H0J@d<whkdFHY$p*V}8D32V$@NxU>Snn=&jD4|xmkPDJ
zFiACXku+2^f*hPj+QoT4IF9urGyE?LD?!VIh#l-WirFzuww-1eu3(1cq(n8Ffmy<X
zUUz11L2<=-*%Rkoc9^nh*W2VkC00Z7Yn4-Yr@k3kUOQAye1OK!#s*TOE+qM}*R|RL
zHFfaz!eSDbkOXTO^IY(({YS2U+C>;1RF@C{5Wx2cM;@_<yFt4Fv}68XL6qB>I1WHq
zr(`uG7Sn0<y{WGSP-_`mpZ>4kH}ZSw#lYaJtrQ6lzb7DIelA4-Ah(6-petcnTefS8
zclE{BK@>d?^}?@0M=VE*ga$`l(ox0o9eVrzrdsHwJ3C?YL1vw%8uw>^C)k30bz+Le
z_8Qs^Usf%aWtdA+)v3^Yys^@RO2nm_dTFI$<<NXE)zDt@K`y+<QO%zTfn~KEI+Hmw
zJI0RCzz&qK7G?~Q4vZykUMB_@XPG5>;QO4Js~(g$qnwro+K5)rt9OE92)|(C3HCTd
zHMI}6;gKl*PNvz<Nz-b76SAQXydFg8U3__NGz_xh*l3>jcC_540(AYP<!$FH(#tA}
z%~feVw?9n-%KmGJ^!s%0SuaY>z>*b1=x9KaWW@A5E8QjWDeMra_drB?*eeRmW>*=C
zExm=Ovt`a&|CJIEtfsxqBj}F9o-WsHzNsLmqljeDs4yq8U*Fw-!l`@&90b3(aQ-K_
zb_i~}bx8y2>YLd2wK~{P-&`y~qU99aXQ26<0`cL{08Nx?%B0RmmZUERec_bp0t4P$
zeO_oqP)NYMw*qm|pDZo7rJ*PtvUd{&GOKa_m#H{#Fe<`M>U6}G>9fuAjv7+B<EPP3
z5i0{r&D0lsU+VsUG);3@teB>thHD|J93kJSPFD)OArf}|?8*imr_$(^@(`{r6$4uG
zw`=(d`1VGTgkX>FHkU#-kk`<U%7Zupx3D=kdddp<rD)7^^VY17i#1+}@Yhr{uZnC}
z180{>Y)Yny2ru&??Tlkn5g^JH3)pESr-m0v6GyAeZeeSGA#8V-+7$i%$1<LiP8Xn3
zKgz@$!P1OfGSsO=0L!A<bwoH`A6Kx=sVz(0!!OT%Y<CGz=Wc_nDUw%h7B6^|l#bQ=
z)QT8(7Bm~Gi-M$_V`l&X-&%;pVlt2){_crb&`G$!K<|72$LP%840kt0z9e+|OzHJ-
zt73bT>KWNWF%Ch@LGf+kuk%UXbI`%2t~ctG(u}L*)ZU-~%`fnELaZ922<$P(0fF!h
Z1liSMOG(k=UcPsBwJVuijv$~is6Ydpm978)

delta 1992
zcmV;(2RHb+7?=@|BMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-00(}Nc}E2#
z0000qk;O=V2Zn8AVRRAz3JEwRay-~TLqVi6?hZ`I1l)tBBv<#A*ly_QP@<9%G^AMt
zh@<p&0E!n42v<%cAMBA#HZ=pc?fq<<ZVV)Vk9#E+M^6ZNh^_TTQRre=It}IE3t*YQ
zZn0;Vd=FvaJp|Z<1_CMZ%3_9c$v-HB?!y09B8)44BR(;9&~#9}79<z+Qx=CLhz{9a
zSxdh1KQKN?cD@=7wXlh-^IE|w7JU#wah^m9@9dPRn(;hlMkCH{IGNiCkb`vP5KgH3
zGhT)h>MwZU4t!&F$kxi+D1H2h^9K6*w9S&5Kz9#uq(*k+P=k#ay_#ovbD*1T*SLou
zB4uEI>w?^7Gj9&u?o@wr$?_05q6D}*gWo!!Sw}<?5G|?D{4n3TPK*%JJ@fdEcnoIJ
z#`AfaNGn7~WRzEcBrsaxe~g+hdL{VHguze%p8wo96|Qtj5E`wKT5}j2vPn#FghQgm
z^?-wgO%5QoNO{#4#KTns%`?EdXHkSGHkB8DK0vL@8`o9jZ|iffYPhA*1yg6MHsf)L
zH-s%ME2|EyT|F9WenNmjFVL@_zko=jWT5lQ75en75y!Jn;n5tfB=i5LN2#SS>k{uS
zRV;w0Y-m3r&osN`;ph)*Lvrs+$m$|X?8i}m)fc3EWoIydm^V)2(+xL!?^~X%G(W(9
z20?d0b87?>U!Q;LNDH9J!36lcr>|u>WrRb*|I84HNAu6e3bQEgPSS#B2NwE~zdPc-
zvc!9k0FfK9YR<`^Xxfo^*Az(zU})+(41olF5+n8Skjbczd4_TVr-c#I*q!R<074KZ
zA(7CiNT&ie?Z5Q44zDvqz=h?i-rt#jW@lbQu`1_6g3k+Dl9Hcj6Y>RP6K8Wc-xl#I
zC?yUwnh-A8;7yN>LEf7F0knlw?=sKXS7Z|{ESq&GR*s#R&8QI5Cm3yPe261jmhvH+
z%+8{MWk`ND2es3{@4wt$MWc2W9#UqK%7e0(%)}I|a5!q8@gk37NSO!`L;B`_)-z*@
zWMid@n=pbeIem}RrCdqYr-(PslcoG8<R}mLjlUlH)y$*cK9}sJ@IAQs4u<|!2}L5)
zXj4C2=}yppOf$~ne8AvKEnm5l;&AHrq5X(IiT37C?TgIto*W2K|0>#b%Oj<57klt(
zi6~{K>=mh3_`|siDImi_{dcH;<5xgAFzLRg)-3tB%r(PW!l4#&N+I~B&(ks9<}E9K
zBxG7aMy3f>oEv4ilxO$^T?>iLbA*3;&7(jF^OPC^Iw;ZZnxUZYD|{4Sn>Pz?^w=1F
zWy45y>L1*9R;tT{gmm$|>Hll{0;K?X@VP|CsXnciZ>Yq*X!8XoynlIrjscJCiPiT<
z$S-9VXA3PgD{z_us+B3!RCKdiN}MdG_16G9G_^BE(w89AK7BBxW_vxL5JhY>Oa$cV
z<(JZq#n6&v0L+sSr#O>+c+bA^tNzAvMXa=K_NL@J{z3pJx{E~fo%%^!1&QPdt5II#
zVPImfjl0(9lePCVA9!4U7%AX7{zR-gL>55=+Np<v)v;<;7l7f?IFAA>L3C&`EblI-
z?Du`gi??JN<x9DhbjFmUjmKHv2S>!}l3-q94rR@AveA|#GM&IAyS(+Rcbk<wh+P_7
z*5VE2)F6N9t`5<wDTztuYwbU*`o18>#YQ8PFB?0$bOgR(Z(RF-%hu6red*|`phkgV
z-)^<ME}mA{kM61IpAJZ?EP^p)Oxh1#ZC)N{n#{6xfs<K<yvBkKlLqur%|?0j9tgQr
zW7?r0W_weND>M|c5%#-KA(<fnh913WbpcznQxyJ;03!6wbyS_Jjfz1bk`!>(41dV-
zbxEI!KEV~1#K;GK9yDo7N`D}X`i@Qd*AxD5;IqE(t{(Q6@-zvLFd$AuNnUi-Gptym
zh2)UuzrOQ$B&3dPeFhXxJ_nt&vb7exi$`=w$h==}AVu@=Y6Rf&o%d2Ww!mmB$#nDi
zgun-%4tCvi5I^>px5IfUBve7t8RE$4{3)?cg%;ga?0^A(mW4H5q?9EJ<d|Rjlg0*r
zu6IEZRl2lCElJomvQ4K>2u56v&q;QnL^orgT-9zP&N6Xkb~f^~f2qRBaG(06?<iwR
zQAGR&;;_B<fluesMN-bw_FMr+Al!jNbE~%A86!|;pNc%46;87Ic=HHD#c9&K>027+
ziEJrac-`rL;`RyWo^Y=!I5*iB=nzUA{lplp5Uq1hX?3^k|NKWv#SLN3_ntPDxvmXK
zGX(h>+e6{t_={W$u9r|-aKlWKBV(0|xNfftq{pR&_-b6QPTQ72xZuV^zOzz(gwa0G
zqzwa$Sw<;#4K@l1n{I~4bmP3nAA4XoWOnKjkJjve)ud{F`esmHE`t!nb&<lv(H%(b
zA2aw<Uxj`P<y4)7y?^y(Mw*#VM5|8?hTyNv@7C^7?ac9rzHW!*b271O%`DN%q`H7;
zrHtLB6f7XAiunte%nK@ZmUP93U9@gc_O26A2$D=KM<hFz;gW~uV55&aofYWvK(ydX
aXw;b#prL~`lLqpW5F_?QYR{1mWEg-|2h48(

diff --git a/README.d/07-edit-global-config-overlay.avif b/README.d/07-edit-global-config-overlay.avif
index 5b9c0a6952a9a5a411ebb70e607a26d3f19bf942..9a5b903774974e641f9e1442248ba8d1226228fa 100644
GIT binary patch
delta 5973
zcmV-b7pmx~D4sBocLEm+k$Fc2C;$KfCXvNRe-{&NWMOm?015{<W-@sz1b{OAElgwr
z*lsKJDtRE!>&54&UlTK|e#Kp!8imvvkr0;Kgj;ru!{Gg*9}Gb&c^_sRFX5JGgG=Zf
zmK`q9`@LDwHr~UnTRgOeUZ~<jO8JjVK(aSfRvPnCYpdbUr*t8Ric$lQGbi9_6;&qo
zf4&x*^}@e~w8OsAAq;8@=`Ce(oF{ycXzdq1x!Mb(IfzXL9jlaG@MfYx_m?T_RQlCN
zk2Htap*~|E<Kn-KIwub&%?ULbXf75ESDi<e8WsE?Pi?!;4AJOBVOug{Ypc0$gmsz4
zfK3s?NdfQT7y?f_L^SI_*;KG$``)B-e^Ie8uYHP$sL73`=Ejh%!+Jvuz|2?(EE+`m
z?-$<{uVw_cxC`xjprQyW?U$@$!kcH;UA!zm)OeLsy^beUjB38-_3ZEK^~fHBB!ox(
zz(XZ(4Hje8ik`DQo<ZQcdKwmG3(z=OX3qUtgODs_y&JnJ$(W-cA;Exv3M@o_e>-h;
z=%skR;PU_;x^@<K0;gVJ2KBvdo$aiS%}{1|zKt4X-gnk9$>Do(_zmqrHdzv4r$psH
zJCe5ID6;GL<jvz7N<fB!G@K8R^22D=Ey2sONdrKbN)fPdwOBXuW+Cl0j2Vi|m=V|z
zj4M$c!xEs~!8dl~r1FHI61BWne-T_zRM>0qcZ@Qf{R;<<3dK{?=>+tAioCu2WqEf3
ze0h*4a`|Y}4YUqqy3Oq#YhwEx5)iAkLw_~$!Ot>zy=dZ1IyBzAacM(sACGuW@PcwW
z`7$s1Vi5|62f!uw*G6%`ab;Zci-KHh;p-;fMCJfcm>_X(?U0x~GFq@LfBk4&m5W7e
ze6R7~nB~ZaMo{OMt~}|u(JH=MZN7m=0<#k?$rvO8U^n;$g%bSChp#*@5obTUx{Zdx
z8BEdV$)Ti<S$s4m%I9pZCV}-RSp3Y#MbTd9vjk9oQuy2~{R-FF+eE=ELwe$XS+4*_
z`V_U{#xEp2{%gF+g^yz8e?S3*DxJScBCTJ{lENcvYX=wPwXy;{)|}U_{FAK$5*#dc
z{DU(hI$kXOjy2n1C2`SZa8go>cUh9y<GlIs#Yt6e{tRg(ldsvQN=;RQOML=-Tw6Mk
zG~dD2;$|f{H)Cx@_s~q<32_$@PyFTZGjBduUJZWf%%J2B!V36me-1f1@$Fw8ei<?O
zr3*Bo-ZQ^UH$PV@>r($dH9ofQl<s=;s9WLHtVF$Y%g|$}CnWe~cpd}q1K{G4Mt^W`
znpny?9U%E{TZ?`H7P^wD!Z3i$Q}4OO;<0?W8aJ9ySmjbEMP5$Na7)WTN}Sq)K#j+R
zRtOt&*elh3;v@L}f2%pcS-`0naN*7KK7>}>eazht-l(2ty(?w81@Z{>L~`Oa8y4Wx
zso**6iH~5=Tn#TlxZ_K}zc0C^b1A?u?gIPnyD;pI5wAKIO<{+B{v9=3+A#D<{`9Dn
zik;CEBO{nI@p;JQE=0zfR6hld53uzUROpY}16oPSK7@v8fAJDf3UH=6F@Wh69+*Z#
zoxAjn0m@%#ovz~hed9XCy83+>oyZx%1B$3*S|}>HiRfUZJEqgbKnq^($ejDBH*&{+
zot)GLCk3BorrE$wLW*Qw*hVTC`^#gn?0b^2p{up+Y3u<I-t8a4BMdvYCx_(0iRBt}
zL#@lBvD7OPe~cL?Kfzdb-=s898hqO`E9y(*&Mqe50A)Wh8=jLj>%|Du$U^%EwVjnw
zI2R|yz=v|{!+n;prUXw3CCi4C{|#|Dd(17$hp#4h(k6|s8}_jR6ZAwly7#O-WwNrl
zlT>u$*N&XrpOu?Yv0a07NzSu7j_1`Tcc~b6#{;@he}^_=l~?Vf7auJ#U|?l|I!>q;
zW6?I(>Q0?Xi=xks>z=g1=t45AlBSINgF0hKYbyR8OCbciI07XzLsee_+x?FqROf!e
zf+NOvr-dTLQ0kAt0h$x^La0^z@*IOnBqq91htF|E`dmm*zseBo27a#;|MHVJTQ#37
zH_0{ie|`%*arc8(1$XN#$RZW65ztwX%j_JIQ@&~BT(E`ZUlHy+<M7n}e#ji_3q-bc
zKzs%SH03`)KkRsTd~tT!WBv15lddI^XP*9^j@u^if#WIF1{-{eUcfimr0Q1c>k=3(
z?a^{1N9eGUlz1O_RzUNSTk7Pjtl5U31qEFke;DM26&K+xyEsktIS<18DyZ(-$W2^s
zQ&+~8mSh1>VBF|N;~yQRs>hU|uZL2)8d+KpLNLmEI?;x@hQNj|Lnh`&HMSw2`#dQf
zX0!0in80I>1_yob^ZNcW=$j1p?HbMDVJNc88|4*gZ`ARPh4sOnf}ce3RZx&|{Hx52
zf1spegvTY!ume9iSqX2^Y%Joee-)@<$h$NtU?JP6`V8Vk<n*4awywGwEFtl1gVePF
zZ)iUi`c(uyLRMyHGxj&YOatESs$&7VmckKs$iDe-GI_X&k<oEAF7kTT_4qxCh_Q7v
z4J-AYWfwj_JW&FokwmW`Y&qiM(^r%hfBANlOzlSgFda=Q(=`V&CkQ)uE|Go%kX?$K
zmWG>{^@xGFTbNP|oW=IN;>4($ibZ;CB?c<Ib-3(Qfn$oGEPms{xZFnIL%9k<9obrH
z7d1L2ry?J6oOe8MMit9#-3Qtd?cVq=U0#$`{T)48j|QK40lUQODW+ACRZpGrf3t#h
ztbni{xgm!hvEkj)gl%0Z|BYi1c-OEv#9~`^D=p{kWC69PjrNga+LKAd##7z^uzQ~U
z&o*pgW2q&e2bD!FV0UTqNx_Vuy#tfm4LR%Xsb2_I(w<LiP<Lq+^0fsWi8i;l>=dX?
zli}%a06p_alnyy}9MCH`R_|x3e;=_QDstc4_cvP@cQb^$@9u4DoO0F2+WeaLqS%rm
z1waP=UCL4sR=u1HejVgXT&+9^I}lAdlpkKsDoUqPQEGl{NQIC29_g;a0kcXV<tf(U
zbBx2%z=vDAC|E^>Oj~;k&ObX>Yi&~gQ!-&FGYg2l^__%ZZKwRcHH-4Me_y5ZV*<F!
zeX4zpDZX@i9{<G<kiOyXAm+SnqkfGz{31lhwG{uVkv^T5YA9M1KA7ild~VSs%viFZ
zc*TpXNa`QY&a=(U^sa$fa(jk_+qkje-GJNqdy1x+PpWPt9KEiqx~Vq+LdfRT&8;UD
zk&x)bvU#>G8{24Z<DPC^f7`M%sv5w-!a|OQ0RUDqJsYj@CPG+D+inAuM`dLyGh~ES
z4vxYZK{zJWp(f-##p>p&uhdGxq1#}eFjsig(LF;nR-nWHZ|KF+0;GnNx;2}u`(-dd
z0Ql@gXN=Di+;w%$hD4o0pkxr5At}Ic6jm7hDi%e@QL+4t*IwO8e*<eFo;*Xls%^Hx
zAYZT4Vb*aOKdLT=QEEyqfPQ6%>vP=mEjbeHj1?5<JN-X+h)g{8cxA^ST7vcV*>JZ#
z`QQ3H*V1|p+F@iXR^Y)x0$w~O_xqlmj!P*;EZ$5h{&G_M0TUoU0MCfueP<N3o=mgn
zp)&yQ9ef@x;QHKnf7?~=pLHK#75a?9V5pnzNDe3vsj^I4yMY7C$kUKx@f}?3=vY2r
zdKN;ga5oo8&)kiY>q~5tE_)uA1QQzAQPVk1jnhbXs$09Q@H$2~qXVkw6oa6yG}lD9
zQgq$@$hgsW3JvY8-Q_Zv?Sii6ohM4>(OlD5yTsgae2m2ne=_`9)a*a~-H~`i^W2eT
zKt)D*h7V|?vhEhu-cUQ&0$9gHXNvrJ#2k2`jhoc7cj2)5uPEwRNIZxdb~YeECK>Dg
z4%iXQJ>cXKS(4`CQyU>p;>==6(X6wso;`wZ!#I}|*QS5Rlg_iG3t`h%c1vqwpC7|Q
zF2RxWO(w>Of43^Hv{xmQN=R&$5(slB<8xO3{~9>JnYX_)<3!}PyRuolI9p6DEl(^v
zh?l_7bH41x^w&8#^y!T&m<rr6m?<w2z37$g4%>I9HHFy6X3MSc#*_wP4EXC6iOiur
zo*^<we`UW5HNEEOgk*udcZ?B~KKKcefHWh0M8qt_f98eUYQYlde-&2^1$$}Mrws&Z
zn2|6K>LzAe_!SEJgkLh-)lj9__@sf{V5WtWB@abksb_S|oyJI1OjD$DvH=-ZAY`AP
z)cbH^=OQ+Jkhv(=@S;VFtJ2`6(yE!7EsJtip=z-3kH#FQm;Jl*AT54??oHhP;w1JK
zIuayof9Q^u(YW62MP&+po(f77h;i7sZO;-j&vu2$*_8GrJa(Y*calIXr<X05F<}#%
zbC4by-ZzmJu+PikC)nuz8Qi9b0(W`wc*v8>c_*tg8-?SBdixI@5ur<Tqm5pzh)=r{
z#cbET1VD%9TfN!I$>CpY)*~|`dzeK$afQt=f9hc^(vni!Z7yEz3$tS_iedh<&4S!q
zfBaZ@MOWFKMV2lN)b=FSC;aWV$di_)zMh6HZs|f8OgQM0)vb_OO({;ug9IL(la{$2
z%+MrIi=P7b+>Pr22tb6d#@Mx|Kp{&>?hu<chEJ;fs6#YXQ-ESk68-U&Wbh{S!u+gy
ze;Z)3V+;Z9v;h{t3KaVI_i7jMxUJUw@1SKt=y>5V@6Lv;^k?9uO?)G5ATUTrKh;w~
zN1en`)3Gqr1@Fvx1EX{{A#N1T>6Rp$>}3=n`!RwDqy>dMY8Zq<GFH#p+ngY!X=PH{
zI6D7|N6Mw5DPM#{`t?{@QqQn$C*e=ze;eJB)q`PzUC@hMV$k|DniC^&wnCn=MVD<;
zNE-~*^XEPQ%j=0rRcyb7-<vsJSQ$7?qI17rXe$tKYC^QV;DYzyRg>IC%3PnrPrzcT
z*D02^TkWn|2sB`ZyfSiI`$$mjq|D&$n!m33?5x<3tvnzQU@gN%fsII%lc~cVe>*%V
zvImWh`2f%#a^A*m6o&LR{MDNI6jw&EL{{r6&sf2EC30<OdzNc!ffHD|>bSYw;PHYH
zD5A%>`7hTGO+jva)Pi>b|4D#j^pIN{sSXL(Vslrs<E1e$a=d+9$TZY;AKPK_Mxw(_
zQo1Gi?bD)g)z4X+W0m0!P_)XRf4dp+AZ2$+;I0B??Rjo<s0q*F6u?+%A``!OWL+G~
z4~8?PlK>V~GKMa4ajQIJeSbeW+5W}EXRwG~5g8H#ja|ZXz@sa0zd$7=ux8J%?WQnO
z+u}eX4sZC%<}?&jcfgSlo?7QnKl@sMHjG)i?&HHWmA<&sO&`f=3`5NWe?)Mqxg+7`
z!Onm@v%YuR;=LAQRLp(f$r!9MM?XG+>(-rFVX)eB%p5zplb>F*YDA9%%F+X`{v@q5
z(kJ{<gTjyCyjiOG397paT?_Y*pevXW47S}M3sI{6OKN<1svM=7fSX-PiJXMATt&=o
z@IO#PT)-Xl>!y5g(J*+Ze<zKM46vh_QAkcKU2-RzdYPN8_S8R{lRik|cA=H9uyN00
zlYpmT=20p$&OG(H-m%lNFwY8h`zme6kn(|9^9NGa{()hd!(a!Z|1};t8}9Mzs@5hP
z0<Wb9jxRNL5M0f3%Bo-DM|w1oQgTKs3m)R-$@Z)leW%E~EqMM?e=*s|xDuNlNaZDv
zun6t&ibUgy)b+jMwUf`7$XxN|z$@mE+C)^l!TGZ#;!k=l)IFgoP;r=dKWP^}NXI`w
zWw4sTCjaam{i%>^S!ZnA1jYhU_e<K>uZ-24zO340+!^<&1>)|${`bZ4H*%cOweMr|
zW(g&V3?e1TvdrqRfBe+fXiy)%YV@0tF3uqdLSy41%<>zY9;^Vu{)I*YqS!vJqJLMg
zu6X3Qk;f+p!&#?s+Q1Cp)?{bp4{BOiyx)Fd+DUSYBD6q7vlZnV$fmX?Cxmz^*R~=Q
znQsA=#cj>xU=qEN<5J#Z057z23GHA7;;jqj{`i5BrO3Hle_z|3ZCc)y*Cs@`;L^>b
z*BcY8J?KEq-gULem-z8|8X<}gQkXY>5lA~xR%>#u#Eu0<PJmrV-zCALmD@0!-B!N3
zw*Jfdc5z2pP_7?CLjE#ziN0%wRM2b|6?c#tHS7j*5U);P1pL{uWj=Q(8_1O|nL#3G
zU<HU^N-S72e?oJ6-|%c9KjM0EUN!s|u^6XR0LeO&r|?ya(*}%NHcVX_Kz!T6RMih>
zqr5=s+Ldg*wSd1(W^zkX>eHzmspepX6`;eMVOI8~nk5kP7`$(*AH71!$08Qm-+&4v
zrcmluValS3d7S)h%3xL9>4UOA;=U3QUR&@|{irV6e@<f#RZMgHH$P0guFnov3Bq<l
zc-S@v%U?YZ5GIme<n=h&fRApCY*MBq5ZabTt!KX>BPo}|((UB><9DkHm5-$3dYak9
z8G;(zssU1Y>~8EHr{>L)=1RArSfsB4uZ96v@K`q@%WhXudEg+$@st30ZXJIHOMdbt
z;yXxNe~B*S+2istpmueowi$Yjtj}m{rm2zaO1&;1ex<o<Z3I4$dIw94Ub-)6U(-Aw
zQ*pTMxO{yMc?#sEXvVX)U_$<1%>q6Pu908KEC3uT4=}FWp|T{w_X5YQXc8Ssd~?h>
z3fZvn9WuYIOhHvC?=HpbTYW_l&weTz%<iRwe`nk;SOoUrYTrEQU3LUHw>B9y@ItN>
zG(XotchSqNTWY1^SR>%=W*6e~T=-|cYwem`;oIz@HP7lu#bH00BUS<}W{w~<V-OC#
z{8$u$raKH-Oj2wu+<5mn9am`F0_QXrpc;_d^u-~iThur49Hcz4TV($l_L@B}6Teq%
ze@j+Vc@`o{>=b7abnT(6p#!{}QLN{mgjQE7hgi3rZ?=NycME!~M{j-9r4E$f2xRM$
zuNgi?>K^D?uNvz(Dp28=fvV&XT9r*NDNI&DKZVZYOhVF0Q1)GLbr?l+N$x_bQiN-=
zmk+?a6T0%eHc<w^%iH5hDWCoA1qQ&Gf2f#*f0KO~-*~BlM_4|Ke>T?Aq*U;vgrf&P
zuoO)}?f^ThOtjvsPz35ncE`9OVe}QE$a;(!Q_E&|Ae!KU*o7PIxC{=VDbuKu`&aiu
z%#r=4Byj>BLJ_Qz5UtM7d%73x`Lkl#AG|QimTJoa)&I5X?o*e*<ZaTO6m#w#e=i*t
zBAAk_?AN3~8ZG+DlTa}s38il)I|Y9^bN*rTP7Y<r)@u$R!!Ukp(>PCuqKTdlWGVfW
zT@gpojQgBxJW?2Sar-I5pbT-7XvO1W)Px!Hrq=<jJ19JSSNHz(<30@L^hGZ8vzMLl
zG`Zu!94bM`SEUVQf4AH;=pljGe_!_45{>$$P^Vrpm~*#>{lyYKQ-_stL6Ob)eU>TA
zHsnZPY+u`afURO4<}&>_19`jb_bioOv$NO4p~;1vN4TnPgqGq~P<ahUwOc3ewZ4z@
zp=DF{GNK`X-H+}6l_*B-<lntebeAXf+<7eR|CfQzOuJ`}I7vCjY{FLCfAGFIWe^yc
zleNreZd0zA)LGBpD4BEH<@4OX3B8<h6z_qM%kaK=?C^1EU52sl{K+U_uH4J^jgsV`
z&oY>SHOz-b6%?VMc1d<sgQG{OoA2JAV+@EUY)Q|hf8-@`yK_{7YoCYUQu6_$u#H~R
z`mmp$X3f+oAnqV{w$1L~f2W$p6iX*wj@34D88}dN(FVC)5-(-B!o)?xwl6lMsvLLL
zNtmE$Jwl0>9VokO-Q>v?n%4bWQIrSHD_=Ztuc5?Hk^K^Odv(oA{00hUYXgI+XMRae
zT+cQFYYdYyRVe*E|Nm&wYtENP+<t%-4s+@>X$N=j#8U(LAc_ZFKjc1QX(G7p+diA|
zUIC@xdoqV{&HhR6JmB+fmxAkvU&vdf@?VbW%GghHG#)_sf<DnV12)Qd<urSo%b{t|
D4S}#7

delta 4952
zcmV-e6Q}H+FsUezcLEa@k$Fc2Bme*b1d+u^e-j>UWMOm?015{<W->S%1b{M#CQM`k
z-85H4nt4SrV1HNCcz&VnRw!T_NoW^gXY9GxQPZmq4gR-gQ#z9>V9NSn<vdo@%<+?s
zJbX!%btu1=|As@aRvL4)LmsnEA+>G4B_P1TxL}2T^$6s4N2Rn@bc|yCkvpB;`6|fM
ze|l^n0aRH*tVLS_z+2t^-N-@3H&CC4uKhbemm~QJhztJIQ>LM;?YP5`;McentcVxm
z<G&D|0cl`gD%&Q{6Hzd13cZczusuoT5SoD%y)%o`=dxw?N1It8;zs+X=Ci0~)+Ut`
z3uS$tY8Xn6WNV<Txb<0dByks~))Q48f7B7Bx%T_LR{HZu6=7H;^wjFYSOvdzxir<5
zCdJ3-u<iCNN<Ama$DaB#J~2PYa{oHnvNSo3eOFuWEP57~)mn_SelUWd9zLG1-6eHw
zGxmKHSli{CdNf6dQ8xp!+(!;GMr(jqH0LmJ-Yq}ud_I$?l;ig<ABl$Q@XoCDf3cW?
z1-?^6vpV;9HKkt3;}0w#01szDtLGHY+N`It=bwfYJS+Xnbl{gEiov6*F=YMUlh@=5
zP}S`6^KxY$@J)WHd@cnB9E5r50Lh<{oeC)WCnam<(X`tE`V2CaC7g#3|G<ywR<L>;
zePPZ(=hi2Tc6xv!wu@H@w*v3ae|#d;ozWq_g0ycACBZmNZhz3_cH*s0$Z<liVCD#~
zh2L|@7!378gNHa*OQDz|tR&kh##ui?N_(L2O~~#%+p<&_yjn!+1~M0?Ph@`w6z1nU
zd~k$vOSCY+{ggD6{nX-GY)R`IVr%1voX{^X%x-JXvKFFu?jZo3(?)lyfB%=zpzRSo
zS+)4=qG551+=^U8V@Cp|97mKeFCs_-t!eXBe|s5!PJuE?^s{d3-6As=)BVWQ&}q=E
zOV<~fwt%+SS{j*=Y{8F{Q_$5{#8?8kZQ+@_-U^e2SBZC}c)rvRw~ejh3Qo3pZgoTV
z*_-ay@0HXE9WmPUCGhI%e~lJ(D!}9nz`#_RZE(+P{oVtVC6{P?Srj-m5Yt!1$EX^)
z3A`!3@m{6sU}3-Sp{_L{Nq97<;>~*Uo@J-KJ;DFVYQR!}b15)`IXeBm(GA-)$5OP?
z|G*d2I|idql7^<fObeKqnk<teL0$EraLf8>Pi#)}`9TTYO2?1Of3d2-s9+3tfFxSi
zQ_UU_4&tDr6w=t-7oc5gl5_bRgMh&>iF{4Cew6#H7CuFYywpMx3|+2aI5f<!_K$Do
zuLuTl>JeH<TbYipz;0;STL8F&YuI|wc$(9KMi&xKs<LYgsooEh`$cI)+H?{V$ptV=
za6-c@#b=7uT+1;ge_KEdOCn8@MyqQacH!*s>)(5uNKl?Tb1Q2SbeOtLb%+M8j6W4>
zX8*1Q;*zS@tORod0m6>fOVbrAlBr}2XFN=%?%BRTgsXlL7sO1a%1HOBZC)^1S??lr
z20o@7x{EKAk(22ftuU?npJ0a{hm`h{Op0Hy(J!knCFaS7f5%)OrEUE+<_$qfafP*;
zp_Yc-HVqk}k^iDjWk%cKLK->7CI*Cnw_HeLl%Paeb*j))`&2o&jF{3i=!s&dV{(-U
z!0LT+(5nJTF8ZUj=r;}0h4ZI}O$<|oZ|Uus#6Xu%z50#E4KM4}UvHAKVTeoeENo(|
z^7c?krPJnof5*N0wXv?J&!X?@UEEhNl)+FQK!=D%lN=6_KU+Y$I|F8S<FYe<o3*J*
zd%-R*M$}w3ug<5@q7o<X&!gf!wS6D7GBv%F_XuPx&ul7^5F+tr$k7u!j%zLh->^Nk
z=_kE3503C)^v<0}jSyJCCLbc}7$Y7dg+lF^^ClUpf5fVuy{_@Nuj@PiOo?vR{}gdT
zSU#-xJtN1CNVTe!)L(qCQECH?tTn~D*hoY{S9yU8$dX0VddN`+%lrLE&h3q7A8r;6
zy>lpy0!g_h8vY5iB8H|PazDyJj${`+SMFy{n|XVdUTxqsO>=-7PZO~AAjOpG!%*nj
zyF(cCe>LE)NUh!Y`}U^~N*S+>7X_#ES_xNrE?Qq?$b1&K{)k73M=b@kO2A`la4s}m
z)*zNHn#7!Ov8dEk-Ayhed=175V_}lYif6eI3lJ3NjcTG<XuZDn6W^oX?nK=Vh<iN7
zKzR~p1X#V7f>_58i;olJ0@r;Q1|l5$P@KFpf8ETCL@QsoSw1Tr)>wtoNvgzIksjb|
z`0a5VDlj1N+|Hy0xkWfi!Jh}rpB=DcL9#MPV+m02YG|?QIyasV1JH9_4KlSMh0qDZ
zu{y2QIP^Y+j~Fqe<(QZFW?kD`-u?67UO>n3#Sa-?40al!d%(ClfrKfVYbqxhYi%B)
ze`9#!ZQ-3IfR67BR_K~?{|UU>Hu#rCW#dZ*^Nn4q9O-E&IUB0*DhqMO-}l+1h49r*
zceYGN!0SIL=z1L>vk?Me7GB_dEp3d-^~OWyrQvS@XGi$x4Uq$ZYN~@a?H9dtG3Yb!
zfbqPP&~rVDQm#=`b;5g)DoAisb7@JMe}TJCCR4gDDOo4!E2F-4pDj%Cd<41VW-UYb
zTm}|CIjeOQXrx~W57<;?1gd~@(_%JrrUiV!z~UlAf%j2TyyEE-QE8+INwS=_dSi^Z
ztmwK)bFBOx;ASrwXl-~EJ|ePl5STXY<beWP^p+RhRa@DSnVhn{GiA<+9oDa5f2HaB
z2PuZWFjP(zM!e(2x56jbAW}QMWr*M6YcN!MGvO)y-+A&#XT`nd5g#X^aQ%113KrZA
zFK%ROsi=wX>Z+gD$Vk?Mi(Gwz6`D8pr=Vo%PL>=|C9S7sqn~?w1H0Sk>0s*&FeN51
z=&LlO&Pp(H941As(zPj=Ox>$pf0ajACT+`IMM5!H=b~@+LKrM%w}O885xw=ZH~;+a
zbKzKE@TM@qwu^#7hi=|+;Z?Yy0Tr2-m^{h}gV=Qw57B_KkKzZUSd^(-^ty++dh(V&
z(|`t|lY>{M^I}R!TOYByc(L^S007;Zf(}YSspc9OvWgsI8m&DZ0L0iPf8pGxgnSr^
zGe6wJfvnmLu_VVg9;<p)EnZHuoH2H!c3)R@&>_q<eeGKn0R4Zn*n|32CxtzUOzx9s
zYOZ=n486L)^l~%<VYKgZCOGX;Zd>m|CtMNmGcI(P4cB@6sJ?Fs!JW}Ar8*tLXrjgS
z?;`UgO?pCgH8c!0uvuTjf0MckjsM|?NB6qwlwj<-@)W$MDgz$}mB=xpe&T{e$sW~s
zE8Yi;7d;a*z=|-78>~ly@9w~zOGjRYSw7DlRo$XS$w@8^Sp5J~&035Kk5I1j>v^CR
z8FSwpgAD6ISqnSYKaza3$Nf>Uu7}c)QT^q8xfgHXpr7L7rw>j%e_1@OkoiHb3P3i6
zF)S0;@Gz14upYPYl+PwCrv7y(f`$+_>bX6M)Frc+xOTe7%$LD)9T0+Vn@6W!5A3Oq
zHqGVMgbS)2uM}z-g}@~Wi+V1YI6aa(SRRRL9WA?IQzGR4$ou-#p-JJ_z@SeY!Dhg3
zaBJEEpL33jU`||8f8OfAvqyj7GwiodF#z4f6&_1ZKHRR`RC^sbP^!@FWTYNFAmY>|
zR54Vyqduv-NKb=14eIflZ2;<>t?&<8p(faMc~KaKHD8?mhR5iTfw$~RKY42avW#C!
zBgDsa6!}sG0%tIx%9a}d+(Tx%-Y_qu1N(G>r?f?XwA(<-e-eAML%5|Og2n(D?VnpR
zLOw-ytZCcjz@DzP=h$0Xq!M!t9+e4Q<_8Nc$t2-#idUs6M-A3o`2%GO6S}e)o-nNS
zERxDU-%UKI(^%WP<vJ)R>2rMnd+d`HrlOOa7+m%GpdKN(ltD+A#_KeSx}>^`>SWf<
z)O+3sH@J9;e`c<*=s+`S<HU7n+A+5i>dwOO6aV=5AmIoZT*BQSUD`93vHZ2@evx{A
zjYEQtG$-t2`Md{&EQ#Y$*$tz00BcY0WHxSuCIu93OdmPv!z=I%V%1z$;q&5HFuxqA
zt3X!lae;lQb!(rR%Nvx-Nt^CiVx4QT%3_;}rz2Yoe}<Oqa)@^je(O>I4P(6bHQu(O
zOwm}dW&HTULe*6C)_Sby=P)LqGkQth74ZK^Ils79!{OM=4M0Sk{tG3qte?_ww2yU0
z68;Qviu}hJxa%#g0=~IN!(jO%p>tuw`99;MI~<)O(=WB%RH6e#k5t;V#TIO;IR7g#
z+I8WOf3Vi+0Gw+av~Zo0N+;@aV!wri5Lr>LEQn2`k0e-pLy%^DJoEO%JE2nIk~rUY
zVW!zMQ?G1IVWP`O=b@(=i}zvg4-PDmnF6b-u&h6$foR%LB{`7Z2xWk%n2<(^*QXm}
zZXn&tDAo;4Pvk=$2i)vNQ2I~eCoJt=R9~y|f2fgv6<09kWu&dhS{D34Tq4-dB}+^w
z1>Vo*k~FT$96bDvST7|_Dseb7CNy4Q9+H&#!Clehev|Lz&IMu-XoIPnBf*Ax*>u>V
zV5UT^ndwkuHett)RI3eE9F1Pc3Xz!;H^)MAAu$3FJQl|d;#hp_Jw{z5JfKSOpF$|5
ze-SJiT#TZ~mUD$3uz8Y7Y&1+Mv5rK&!T(QChPt4mv+NgmIk@&B&oiX36|t_*`=Pxo
zgNa5E0jGsUnbE9Gigln04~3bffsNC#$~MCJw>xGzvExsMv(`?qNGJT>aV8b%=z-AE
zv2&nUXG^oVT)!47zl%Xy$|P!9N@z|lf7qJwvD^NK+quI;XQ)Gbma9?58JL=%C`1i6
zsmEd7EAFoi9Zdrv$w#<HD0ofS6BP;RkbBA-c8=KNP44hdOWr9A)hY)Er?APW_Nzt@
zHR%7N=`w=@`feC~LIyp6V^r5VenwiMipKEp1~nsP(qL{)!ln@n+niic#v_Dvf2681
zc3li%A}GH~>ug|I@?1JIyamCHvo*;nWgLnaS@OXp2jmAs@DFnw*EU2(PI{aIGF(|i
zY!EmrEH1`1aV^F!D0Qdp)d+qT4+JoOXs-eJnluz!+w$b*hWC1^V!Z}o$DY&jAU3xb
z{HRZk_#aUg4Jb#?;GS?!rA%y?e+@Dou50<=g%_uBGEyPpMAy62aLghv8#zwtHL9bs
z`(_iw`lS?o&J?myAv<1qAgjS+fpX|(umxfbXXS2$zuuG29WB5-h3#~F<hFh%r2_tv
za)HcNd3IZAYHyBKReTw;Ik%dNcFkI_0$?H5Li^uEWosy#Y+R4lU6dB2e|#*70S+|)
z>m#15P=pOoyiy+jM@zXQpIhY$vtL4rG<5RiqS4vjFFX$#Dp@tS{aF~0yMWmMY~*PW
zdqxUZ6*RtUc$BzZNpyc(ppMq3LvS7*db~DN8LBol*UYMbZyI62?mbC(?UfE1ObSTf
z)bA{_HOVf7aRNZc&8Jffe*sZqH*Oj_>K0~WpRu@37QiwsFJAB0W~cB?>H;kyeY95W
z8d&!dy0>mEj&1`PV|r5^VyUKTe?)sCOa$l(Qmj&bH<QpKp6I^5o<^4Joj`H<Ot_dJ
zf^k$}S%Pr}ssy``?tTUm2|8h+?A2EQ^oHkDtFbJ&D61iXmh!@af1>Y9?f4+$^f64~
zeOQi37~QOKgiA`Gd;7yh2|2r4&G?w(B~ENBR1culnO=rm`PRO32R-5WktJPiZi0tL
z+H5U-5iDA^aedzmJU|&t4a`quY1Z1rS@q3NA0`3Xlw{|9OKn{$wUXZ6tylg%LWRCm
zx4)&P7``N3WD=OFe^N}+0fjVh&xHwS#ea$vdOvL7MFSZ&Y-=|ed9ds7e;sPNKI0FF
zNu2Mxz?kh6Cn02LcU<5NyVn;#9=N9Ni6Y;)8qLLvtK4cFbrjWX96Csavl7GipF@lN
z)z*w0t+YsrNWLi^%&+QZef?3<O%f?1z03LuJqk_Mg_zZ?e-IkI01Wm~2wSL4w&?{>
zq!MD1<j;SJtmerhH!*E}{XH6b$btl1!t?i_W7Tx1>c=PX8`8TL3Y-~OQIt<ifu3E0
zE~`y@k7C4UMW`2X%nJCR7Gg9ny|Gl~AEAc=Gub<cb$6Pb3#q%c<C=38&n1<`C|wd6
zt)fKK{BMV!f48aoZF1jkCf3jXb!nz*rsPyA?V!~-lMTh}*^#MHYs)I`gZ!@!92jwR
z(Qve8benPz#!6_a{EUYwlO=!Vu9Z1oX~hqxL2Vgi;_Q`6#0h|u=zA&KZ$C;7iMCv(
zr&i_ZR<7m={ZQ-_`tB|Z!d2hvT#<5fBw~)!Ea!EXf5jtEW1o>SXAV5nC6=^F*V}F;
zFRCV5@*BbE<6-%wq>zX)69h+;-&B=XOCdG>$V9XG_ite@H^F=zV$&#jEw01wnaVxU
z!AokhaAnCPjC(STow2o>F*h4Wbu?e62yk9svjWqP3xn1c`!o?8OahfM<!jNYN$Nz{
zMq+>%Leh`iMLjkK)w3v(xg?S9%R@o#VJw{IuiB?6R$ODi>VlO!Mf(b_J2c57+IM2E
W`PLjlrK=j-)L(Alaq5asm(4Jzn09sm

diff --git a/README.d/08-apply-configuration.avif b/README.d/08-apply-configuration.avif
index b66af1a7ad18f9ee6b4958b1de8c5db463d58382..ab22cae3e05eab8ee3b2b878a726890b1fbb2ee9 100644
GIT binary patch
delta 1686
zcmV;H25I?)6S5AFA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951P9{>OVC~0YKW&i*H0004zoE?$u90e!<002gl
z4FO1h1}AM~VRRAz3I;eOvUsc#GLj5LWB_4?7*N=CsI&?Rm<%8<cEa1Eiumyq$ZjGf
z)Efg#w^*pZmq?uGI{!Uw$5B_za%TYYVg*aBs{Brc5r|h-abxgQbplQ)72M_7f<sN8
zHzFeYFgwO!f#<l|OcW=yuI7Vm1|27xxLYZIR`L~F9Y_hJ0JI#w@tTe6kTTy@2%C+S
zW*%9+BS8u(MN8}=iLGT}tVr|#BJ4f-`%VdW1?v`4uMeBX2#wmmRTVL!$q<FuC`SB$
z8qQS)?)`-4S7|GUn}kM%@z_a?U(E#2$Bp&g6uEsCKMg|3*RC_)Gm7SLRH1y>Xlx9B
z@pIqbmwkpM{6Dq$b28TWdVG-gpQ2rwV1ZFz_@8{Lh|_PmKn5ncZ(qfKucTxVEsIGE
z<tJdFIASR_jf_S%tSbMn&HdE)Z5aA80ZA117U^d`ZkOU}gLePCAhx_X_xP!4iwy?=
zm`RK>#wKHxy~Jdi1a}{8<EoNx?QRc$NQe8)!y!1tt`J~^rqw%{GI0|mC1$lx+NzcA
z4Bdk;XpJ5p2wj<dXFin-gx(q=)2;ol>5UgMKPj@!y`7)wG5=Wi-%K43mtD?feU~Ir
zx9vcq$4F!$uU4gi9?Z*3>tydo@iulCjf0F=-(Y%OUv+3QmWDk(kP6*Z*=hWLn!gjr
zcN_UI3W%hB)m;_E0MYC^RqD+s)QT;}K=Ahp{%@P-2MW7zIUPV93_^`|f4-ON$`_2m
z3J^(pA}*a&Ruze%G5N`M2+q;17bZlxrx3e)M&F<9AuvHQyXVB!EMq+dIeg%RFmM@O
zJLl}L*{p|Mlztn$olO`{+#9feFh&85<${X_J{?hDllh52QlcKIQEO!b(J;|FqTKj8
z2`G6$)zTo%`vA0_L$cY_wZRb@oT6S|Q7H^oSYIC6)y9*|h7xDf(AJYaYLemqlSXk#
z@DrU9Q=^W{<lWB1$}L}gHFR5VVDG@K)&^*YJ}y8yFG8QVM>ux?C^P4ObW0g#0qP%{
z{-$nGb)M=|h&phW$tXm5*#Z?8$Fhf^B9TbBmRLa~7xON!lPYCp(0mlKj6o01{v$>&
zn%CVwWIQm#giJfh``Je2=L#QH*_oaXDRZ&kjWr97)5v<d=jWm{R?7DX5`lXFJP#3>
zSyz2Z)g&}b#5WJzOB-5$4bl|{&-X_9Z{9rh%wB6dY#J_1Kaw7+Pfe8~Cso6W7TFbJ
zClxa4<R1e@)SB>p6F^AyaY>p*X{$bQ?B;EaPu}eZ(%Qj(x_EW{xjgue&wl^1MWD8R
z^jo_z4;ZRMCeQe5c$HQG?bVmvR~ye8Zepuaax%&^Bd*fp(PLqMp~BPYI15pO;2L>_
z@CF_ssW@DwYHZx$KU}D(_Q;o2!TElW37u?&9>D<DY+|{mD9-(UGjR2$OQLaVwylf2
z+xAql>Jt(MrKWe%QmlnZSx|+3vF`qMNX)Z*k?1xBM0$8f{b<PZ%xGpKJKH_i6;EKC
zTm=Y$d9{8msW<(9J3{0i2R-c2oH=*zTpSPVVAQnZE!h+Zx0T@*!X_$!xh8R6GF<cS
zd;NL&er2R3Ho7b;Sf`Dnl+!5R`lJbMU{;0)8w7GI=nciSJb9guQK}5~qp*3!w?tJV
z<`8RTTI!E2E2p*KT&q<JW+Dk)x*@KO7k|3m+KwU~uWSB)ZhFJf)E>E0(+QYrbmoPr
z8+_hQnvArRkImCsih2C7=0HJ7-(`uoP~q*lj2=o)4|PMtx+{P6Z)l%Xb2YwSU7*x~
z^OGM-zHhQQ2kPx37uMd%?R;9$;B7t%j04s}8TO*kkxwg9<4fDi3Y4UkftB}SFeXK@
ziTdo{vn7y!FEY-tbn>#JB1mZFI$H$WR=vypuKInDYC{x(!P`S|hyUQoJsPF`8wq7x
zmsltw1Gb@$7#=6sFGhh4+s3b2{3IyR_X6UtRp?^gv=cgw8t|dg0+}Ypr3oBO=TbLQ
z{C6=wC$cEe8QcvzkB;C+?Aoy*2d(dZeDGEDQSvD<NZzz3l!Epv$M*jQ@^5c#k<9WQ
gN&IkXv7&+Dajv(UPeb0UEcDpC5guiT54I%%kkg$J;Q#;t

literal 2437
zcmbW0d03M97RP_cA}DGoS|GTPmgX{oj9XcQYo^s`re!&W2#L8ME@@@rQaL(PX=+(o
zS+;4plw_7#YA%&a<&tS?Zdlhg%fYls=6$K=-sk>tpL_4&Iq&(N-#MJ$`Mf*;0Q7iK
zaRPP>p9dg=V<?|T59PCYYgu#_00_%aZWJ4?L1q*b7$W>C0TA#xQQtKjL-+yT$EXVU
zQK9l00(zSAL&7<5<^+HOfKMRDT!oTeD3@o5EdZdsAkE_Q!{nRDD`Y6)!Y%MO*fAD#
z$MBGF`2wWBD^S@vmd}G7ZY1-C+^+)wP~`+ha^zRSmj?3%LID)r`2tQj6p8#u0T+sp
zAq}7h><a|^SibxOi^W0_&yJxxChEZ_K!Xz=A`Ih%#6ruc0E`GaTF4iKvf&zJ2!KE#
z6p~Q@U>Tu-Z27Bkb6W=BG0-ZI<G?&X!6b5r+P_68|E86pngRj|kWdssj)XMakAeMP
zwB|Pr_aPL%&N%>Sg>SkA+5$GL{3Gj?y#Nc=xVX7M7s(d|K-Lc&0TzQ%#GtW?ii$WK
zRtZm3!7D4{N$MJEL@HTVhf1bU^bE|G>d{OWQz%B(#-<i@CX=bV)YjgHvBKPv$$*C-
za5x-Z8NWzHWf4Q4qR;rBO?DR$us|6B!P0;N0f8hSWcPqBv?m%Nx34HLC=!LnC}MF+
z%20!N0sN+r3MeERje>9y@lYM02xxVEIt!!W$yTIA5E+RX1=z(7<#n1~kKY?u1_+aI
zN?HpSk;sNimKqr^WBzDmZDVWa=;Z9;y4r2c2JekNzMD4taRRx#9YOry$f)R;U9oYy
zlT-E|IGFltTISKL?3`oAb5EQ-S9t!y#Y>lqu3fJX->AG<b*sMNUSm^p%l!vWI=i}i
zp7uWL8y*=Q8<$MHeD#m14<D!hkj{LXorAex&hPe>?BBQu5SIc9g+wXBTnL3-FgO8)
z)~93CS)PjQ2n`w|5leK)C@8PPEw=P}uNfeGtfXbY95$SS(d1<R9az%;MfNw?Ke_q<
z9*KZ{JR||E0v~#k)TOP1x@LMw{b;IHq&lUH!krC2c{-1mt{kK)4oV-c;(A6jUT<ME
z8`mwZwEr|)D{fB+4%T+~a%(bJbSAD%1pQ%ZL?9lmTojD6$PIs+QY55!^e2wyP4w<_
zsPOVBZ+ht+O)0%tECb86`?@Q3Uh$8s)!Di2cIxOp;tLswdQ&&qTrhLVV@))bq<YA}
zM;tL`qG!FTI%~(`BSQ@xZ69`zlyCE_$@I;BXHIqnmK9gr5uHm{JW-x3H}y)teD6p}
z?@+5PD^sAx&Rnl^p=wmCu-`hxps+t7w~}){<$X<ic_f#ZlO7X#dcuUZk|<JS-|r~Z
z$@VX0+T><1B^hgquE!lbox5ptMRFZ!G}%}G*73boH^pk7bGnkV?@pG-b@)k4xK<gA
z0@Csu^U@HiqpOdOPnJVj-*BN>bJ0XWyX{=3)@P4HoBZsp_YX+Ih5fZ#RdLN*Po2un
zcBZ^uS*r8yU4kTRYcSc)J$<e9n45vo)(L?gB5!W{5&N~g*`5Q>FN<lM)5mS^P9CzH
zE~?nL$8~&0+cWL#Rcd_npY0_o8|rWL?X|dn?#I?^PIrQ64p_m>7Ea4Up~H(PO6Qg>
z?|WuWtWvwy+BlWV5NU2->DWx7-VO|?3O1pil=>Yz_;dZ!J`K11w2f)QUG#xEQh+PP
zTL${c_zvnFDO1pwy5gFfVRgfjk#Ui!3qaoSeDu`P8TfViwUtV&u=hi2s>`0W4>VKV
z-lP>f6M^S{c7*JiI#9yd7z%BAe{y6MGFs41EuaB!apw8{B|PT*M4U~c>TX_$(z8EO
z&zkHd`<t8I<CtCCr+>uHw8y5?R9mZaPx6x`dp>8rIK^NzC3|NjZLp=+>x~V@*hwCA
z=VcG5I+^u`ca?cw^0K>Qnx8tbbBKLl;LD8yR!0HnVRY_}%!~wO%}N~eo^;A)b&Jw;
zvIF7w!zLd}GiD^~dP{CxuyUcK3uy<~hr?PO`@;M&y!3#wz|S$2=-U&Otb*9Q_nl7(
zM#T2<c!|OnvzcOr>1DCadyIc>iacJ^&~Q8^^7Y7roWWY1s0F_>m9|g$(=x;<VY##>
z(Vy#dPmqri+xJb<>l5;WE|M!2pHt(F;oCM(3h?|yVMXJKWS*AGyq#5+rS66Y1j)SD
z3p>BHhTF=}Y44Z}@M_BL%BpB>u8)@eBdOQG>fJ|gsTwIYU0%L!d@eWs<=QtbQPsYe
z?qq0vyzQM?^1899#B9nndt$FgkH|rK(X94lM3Q=b<$z_i>koMyA8GN;#qIeax#Hjk
zNymt;y$RR6g1+}RTDtT3ZQV0(XSNC-3C3P)mgZ!|oSYK94p33N^y^UDE^(ypp#7{x
z4*M9v{g*8so26kI>UqU)({48oS8hz&(%}>;b-@_harKTIBTz`r^MuD?)A`<JLw0J{
z4W^ra7%fuw_dk(fCUDH+&70RVyNB02U*LX9{nR6+hiS9FE!^>Ddf4b~w2$=eJh6X~
znzKVqL^MiNcKOyakD5dEddYv5n0TFZ*Ge5+;o;xK>Zl$oToRZ=y?~MJNlBBo1%Y?1
zRVznAO1(aZ5x2`+ds)8hV&hP!qi^rly0Z*j-5zO+kIs=}7HVr5c@+Kf%6vZ8ri!%Q
zT#|<+B@Go+=bK-};LE4ZS(~{M&)+xb@-@`6x4V|E&YqTh+5Ks}`=^=0!<(Y`GfuJ5
YsSidUC(c4dfoaqY>zTcCgQ7Ek0U)B8WdHyG

diff --git a/README.d/09-update-scripts.avif b/README.d/09-update-scripts.avif
index a31d60b3a0066d1ee68abbf79fd48aa6d77ffdd0..e713ac2c48e8902e88b1309c660128a9d47032f5 100644
GIT binary patch
delta 2412
zcmV-y36u7S5788mcLE7Mk$Fc2C;$Kec9F$Me+foyWMOm?015^;C9;035;Cz8Ok@Js
zZY%XFc_7d0#pkGB6Em!S#a)~lh14365SH6M=h720dESb9CGQ_O$MRdJabg8ZZIB&6
zBe+Hv9?KXR;8?SOFH}@&7&<I?v93{-H+V7>L)n6&F^&e-1!jXAfmAMkI(-UOtC}SK
ze;vWh{%Z6DeCPh0<<<Zg$cf#Li_p~&H&#D&NviK%@@v+?b+r3#$bbZbytj?Q^P>UQ
z+M9yU2JZ67Qb?7<8}~LSgu4ejm&s{XWzPGG*KhFTy<g?1J!SrDLid(7`D!Gbm&XMW
zE0{q&x*OVeQoD^RgWW~DMgXvV5prw7e+75kCq>n(_SunSK5-8!j$+eCFFt)~u$;zO
z+?`7fa-|Q&s+Hi4zltMbiRMTl(;w4Ydvz10pHrI$txLG_?Iau|SR-le9?vY7afi53
zO2Jv50~@ouEl=LRem0Dto$kBv;}f3v8y8!U@HizlIQmM(T^d`ty24sKiTVN|fAH=@
zQgM+AR%+>(2#HlJ*kpc`T1o1L4X(8XP!*H(6TM)=>B>$RX3IxKMtbiQt|7}WX7-m)
zJM1t3c&=jK*27HhxDSIwNyQ_<Ss{FuDJ#0O+e<p$>cvu;o@B}nt9R;}dfpVut_!4a
zyw%p8<H^P);+(PzRs^j~71CD7f5Geu_J(Fr3DPUB=8C+bua6Qg*KUTbhL5FdxN1s=
z>8^ykm}x|wiww2!#ajS=xi%=V4g4LHPZ7KwOHMh?XI$zd=*HL^bTd(~+$Up|sep6j
zftDQ!si0pH<Xj{fI1}y8x79d8UHqA)YjZN7MiwM2{woRed=l-Tjp_Dje_nkTjq@NZ
zQvc*uttri93F7#IAu~oWX&P@1gR9UR|0|MfYzP~r1&CgP5q=JuK={K5mCv%=XH+Et
zqHEwB{Jt@G>9kVA+BT56s(*I)S+NY=0!FXu{h9z`1*Tiyf31zZ_x;1y;l@R@`@<z~
zO`i<QT;Pnnd5O<v9)PW_e<q3*P@La(<>Tlhz5skf0-Pi!UnYxD9Zkmm3~wfv#-{xS
z#*}`KEIf8y{hcC|k0Hw-K?P(Zmt`FYX$I*N2TdWv0gd7XP%%Y&iF4aFiB@A?LWu2W
zzHv5rL|w%Qt`?Pw>#e(jU|CBqm4GPA!sP9~GWV>w`{1S<srKV)e*^YfJ0H#olED&o
zx185*K<x-fV{5P98D&`|)%Oie<(<|RNcYCm7Sf+H<`miEHE}w@m7dTdx%rEUo}4o!
zFd##mm8Q@>H?LF_PgU|g!$p@uRZM&%5wKi>VNzW`#v{Ya#JCz@=O86S0R6n5P-Oo`
z9dmMi1O(FsGTu7Ne@U{QsRD$gSPy($;}voBv^6*~%$?hBkRlyo=7EI>5t#g0{ldhE
zrPNKEWi~<@uRG^#HcLu5F#srhoSi`P&-k4-o+8c)OLy*=y-|h2>C)UY>dQVcw=BU+
zPx)B~^U9h1hs~HYze28kBdK6|nK>f-63sbXydkj|O+(Gue|nx$?@8+b4IM3mag&a<
z^;VA8<<U~q*XxL@;N!U`pFFDVdPUj7Z>h+B7vWV$cGf~_<8qq5G_<oCRuwMHz~UCE
zVzv)tHW5Obi>uo!+wh+Hv-Y)pY-uCAj8q?<R-D(oz-@uv*l&lAx(WzV=o*C&9jd<x
zPlLz?^RuP-f9@~?p|F}2C&&2N;Y6Ty=et?$(=qz27D#@ad@Pwf$ZDpe@+yP|ZuNoU
zE+lGG{I^;;a#KcS#Jt@z)EzOapncOPI3`PxEVN6UM|-FXdqMcG(x@(A9>7UdQV0%n
z>`_sDI8Pb~_st?uIOW`PK&;_gy`HFk#C)WdN{CFLf0B^LDzbE08-$u)H<%>`Kc<nf
zYTIM%g|_y@2}0`ubT{n<47fw686A#TP)?WFzkeqqv=Ma4Gp%~#?Cir4QV(SihtD_A
z5uuqRy-RDPyQAt^eHF5!qs4}d!!pmKY5O7L71I`3734}Y_m~Y36M<m|k8N^sp)G{g
z&5c(1e=f2QVx0h+dy**t@Y!}K@K!-SI^(}7#}0BB_)tjsMkNR?U5nETMOd?&tEoCF
zRm<brFEvU$8SIDg2b|oPbY}T8?*gXo{@*f<!s^_r7JT1Pe74+Y`!CMF7;qzabz^66
zO}-2N(K#66j1H@yQVxQ+(_IqbNz-@tBI8D$f5$cZm+CAdBT)4VH>>xhiViRi$BKc`
z*L^i(O7jB=A20sy$g^8t1BdY|Wl&9#Dg{3ez+QX4+m>+vaLlnQFoY^YH`-10Y({`i
zS-k(A&6jWGx<x7mQVR7KaMm?>t0i`=dF7A8r=LuULk&>TiTV56sDv^+_COcJ%S619
ze-;|?Ops6{c17oUYaW+a8`#$D2Ie*|VfGreeB#j@@@_c!Bo?1Oe1rdY(a>a;k?adJ
zJJqGo%({w98)p(9lF{M*chdw<DVFpDb5<)eKPs6BA?1d>#@AWU{}nv1+5F@{$4H*q
zRKd@W`_b$Vbi5+2$%@!6Mq9C&!+vKWe}k&{7&M_FoA%f?g$QculA&XV&&aXg7LMBD
z)K)0*A9FAZ@W9PLC0`QNL&y&Y42jdb6CqJvEaBFB7s=rXl!n}fol)wjw;(f#L4`2l
zBR?`_AOsVsS@O@K-~lqrJkl=JW#X*+)V(&Cei3W>gAZH-QPv)NblAKnp-ziDf6=-}
zBLx#bNL33(c7{?Ogbpg!7dlmsPTN;|L#l8}CI^}Ad1rsXCXfqQ5L(4Ac~|t$5Ztp)
zAP7^olV1E#w00N2DQL_GLhxB({IS96`;Hp{E`lQ;JipVi=x3`WrHTWo3=@Gtm%M?u
z&mwIIO7vhp%Y|N_Ro%uNW6US%e}7eTH^4ASrLK{b@ssoW2kwQQdlmuOk|=yt`h08D
zK$&k6sb|7UVMiL=45VO3X>%ZYIyau+xM&Sv7U67=4zXruPg0jHi^3W($^i|Rwb|&=
z{Ge1)eEZpL^_e!?#R*l7qpR<2)3BBwgI^X2#Jsmj9OaY~(2at2Ts#IUR>b56N$96@
ztSOyYHs1N@oVT(<AW?T0Zb#@X#;G!B+;OtALmyC5wjV~I%|$4h+(7rn`iT)|`e4>i
eF8nn1(yx{L_@EpLGScWuJog!n?EU!iFJVZwsg}+F

delta 1694
zcmV;P24VTp6o?OycLD}=k$Fc2Bme*aRFTC<e+GSRWMOm?015^;C9*nf5;EuvOk@Jx
zG(%$E-oB3{ms2LSbf~M6sV*<)?B*mwLa~`U^Iy2Y)N?1G@Csj`dH0>r9@OnvwP1Xw
zXeNR*VXb161|EB1L4*ynKlW@4E`MHhADO&(Y|Q0);__TC;~XSKS2TDl)V#N5gHOS`
ze{m#$E$*~KB~p8?=5VH8!KVoK>0U3|o4HtGYTki+8cw5E$FeZ`G|S;<*A;WrwI`it
zz|Dl>l^^OA*MGzy)-7AwX^d^^{g+b5h%VWWxld<KZx9hZx39MrV%oV1&0aQw{a533
z3KcDvx?7@@0DCRocI|n>!+ox#6Zjf~e`YACaSE*_Dz6~xe--kqAF(9C{-~9DO^vuj
zu15Gn>X3{v6e)Lj>Zc!{1S!3m{ttHQ15N}6owAGjtoc=vvD#ZpYG`+pPowv@$bD?V
zYGq64`vVj8*A2$PzL}{n?6>F)clC5LOvtL%6Pjo?^iw&fsqQ-I;cz-NIrhnLe+_4?
zun!`4{sKaeqW5JepkDJWfO%mGygU=)z?ztUk(15h>J#Ua=mSB9_TH49({~eq-eb;y
zQCEB@tsU>b<<X7!^8M-EPtmNXj$$5vPw=;4qc3#mNK2v~ueNAh<A&I|EtiAp7|nT0
z{FF~ka?faA)MPzcd7vC<Y$cTBe}~h?`n{f*Rt&YGr3m}%e38K{w=ZCJ>83%#wg98%
z%!NGUW>-*lzZO3|#H)qkdl8&jPG#dW1%7aMk6}h!wHNLwh^Nu_F=|Tg6PyIc=k~+o
zE>uQdnXRib^-F7@q5HDV!Z8qm30|z(OTjx@j1JskEGXF^U1V?B@k}l-f9CbK-Mx2;
zP7HW;Pm4UE^9jqdqQ@WFNzq__H5PQ-kjoVrZu>n~NLvrwai;)D71uAIm1+h)hT4^N
zIuK!;NWOvh6Kn@RTl5}U$;#EwUKl;G=RF!gb>elLrZIsv+!k4$bC0@F<l^64E2SRV
z$BXK*=z{(1EpMNPC7u@Rf06d&z~q8C89X^k>*<$BM`aOSB@M&D)PP2T8VCbu*700r
zWRj~kafM<eV0&-NgBQITVo)f}9M=(Fib#gYbO^;4;rrfs@y~)q!^k1HYP?d~Ew;c<
zBF?=tHEbQNl62g2QC3-Loa5-(>|<FF0SPT5qkFl=>C{S@JO3m8f9STsi@Z0ft%<5H
zTW+j7duQO6gwmxwIly<2$(eP|Pa|`_ytBYQ%f%7ZrnTvt${nBvu6N}z++vT0TZfmn
z@}@tIumV}!@kbt#hn+GLnrmHV{|n<(;5YTz`?ZVUVNSK0Q^s^#T8(~gTS6EL{=F;+
z0K}(04|LH6U7>mOe}y_NpS13Xo5fTpPv$%t;A0`J1*8P}HZD8b)z{>L4PXcp3ps1g
zqHEVA*mM4yM>2E$YdTBa8ue~0l*g4olNX0Z{*ex=^|-z(A%9dQNuVih#}I#Xi)_D;
z!Gs{xXJ+wLAfG_Y8P#FMM5sOXgDBNUY#;kWr&u)DWvL<9f6Vr}udqhB6i`?q^d-XO
z1Q95~1zU=S5@lkg-n)@Qp6@+Mv!TTM#Djh+7XUszHNUL-p{7+$Y`>;UBUMO+v2N{P
zGerauexDZ)#ZYF^)Y)sEAOHEX5p>K(l)~;00#e??*J<E>9Og3^HS2&|>dLOJ7FAoK
zJ6No}AgKNHf8cFhjK%(k7yXP<&Y^ONTO0<E77*f)Jjgdktf!AyTocso3c`nHGoL2x
z`g&Dp|NLPm()TAl<-xJP9rMiyM@LOqvs0`*c_Ipe#o~DqfC+jz$*`J1?h{oWr+LxW
zKRE8lQ(o#(XES$b(`^G}^atmfY>`O{))YGSpHkuXe;1pqhFWA|h3Sf1V>j<9G{-U)
z*LLkLtV!0nda@^c?oMvu{1oXAxAS(d3Tzq1s1ke5ph~)$!*)ODH%bmQGJ_u3;b_L#
zx)u{>i0hD|d0xR4{o$qf(c*nm=q3(r?_#PgABK0v;PVa9?tjOiiE*#7ODZ6%Hr~gP
zP~!mde`roR#wGK4fHLM>ANlPA!vKo;bi{)eaR$n_WRWBDCDrb8bCfLZBi7}zAKiP8
zXiukUIR8JJLMMJeMxa^Z2DaBlAO9ZW-l?(tJ@!v=FmHnT#IQk?pOW`|30Z0KpxR>e
oo_3OgFY}x>^v1U~QS0}8J&sE3<K!8UPIY**2x%%4@qaM%_<XEYJpcdz

diff --git a/README.d/10-install-scripts.avif b/README.d/10-install-scripts.avif
index 00225b16e2ffeaea8b0513a34e8ee6765c79c188..cf26b1683e19b1dca235dcf91486c6f2aac2edb2 100644
GIT binary patch
delta 2814
zcmV<a3IX-^63G{kBMs|qWprTx00000001G8FdUInC<PM$01CE|fJX%=0001nk<3Vc
z3chV*VRRAz3I;eO@_1GWGN~0zWCGZ3EA=XQAkXW?=cr#3Gpv5aU7Q+))EbcxmfJq(
z(i1Xy-imuA?;knG@>{2IVg*WVkR3oHxJDNq%NQBpShIjHR8(phIxKjxu2GdYcrp}2
z*@B`mjt15RW`i4nR4#uyeF|2qnk4>z9l^~0YV-tr=l-1K)&LmDiQSKj(A5w(RzGz~
zs_$L$Yu3SawEJ$zfCPfPw~fN{qXE|1n}W{<?()e}NR`7I_ckbmy9Ya$$!S()&ijhj
zZ}8;3U*)JhW&UeI_m(#KY9ySO#|059m_a%o1`EWSN}~6O8v*t3sTv2qYHG26n*0@w
z&tG&3QF=jY5BTB_fEQ|+1#{HcmNP}5;{a>?Tt-XV;<09o8-O5S=mi=(LgSx#duS^r
z3Kr*_uO|gbEhP5v!+JP5lsYFcV@j5smyujF?Hqz?J1A>@Z+~x@X3xrOTP4hk`MQ~_
zsUW~Y9mxL4=w0xaW#m`NQF3*EkD7Te5vzi2&VAMHOxuqgR?odHLmkb+Oeiw$WB2r?
zv7U8m{+Jl$8xRY;fhjP%i)u&2PqBtuw3!_fLiethf4;wNo!TPI{${Q@+J*91q^|1E
zZ7l11s})LWd6OtQt>3C?>v%~FUmfyebj_T5GcK}>wZ^F`k0!gFm}<m-*NN~0#ZKdc
z>o7!=qq1wSaaavV*?p}fs2+WJs<Os{MxMX61qe9ufr~HFhh-JlA4*5(1tyjqtHQ|X
zS=SghnCG3O9}_8h>M-YO0|zf9yzm$9X|Sg`#u-pg);qP0FQOYC^fb1%#I{@>l75ea
z&WnWYYL_OL^;SHW&Pr*2qxv&zlck%jx88PVUu`B_uw3HvwVm6X+G5ZA952@Z$J7ZP
zsz_4Z5L#6ERMzepw8!qk=JJ(;6FID-({rjF=Xuk&F4CK?t$7B`JsoFkFFv%@9teH-
zMv#I*FYUQG^)&UnCD|=D_g3&gL<M$)B6S06I$9xE;57{5r8<LuTW_+fC!$ES;W%9c
zM}G0J7$a5K=UxY<jnfCftUjzL3pgdRr4bWuj{I;jK(rE%LSi+l2Nuk&*J-ICdgOuy
zY0253Q6E|Rk|2L^$yju$x_&Qq>5Cl?pyiOZZK{-;4+fAT(r?n7DN0$40oqHJDGG`C
zjq$l%|3ULp3k`IC^+^#`Lh8Qhyb$L?emeyH{P5J>;K$|vK@R0BuL`f>N)M-sLPE-3
z;%=HUc(*8SOy$x;%sz-%z8H_~Y4%f>3woTE!Cj7_%vObT$lSMXnl${)tG-O=y-M1E
z35KnHrlrN(9ss*TM1iU0$~CS3^Xudqs>)7NW4v(uS$lDR=hD`4PO2WDG7oIVXUODA
zaJ$VU6*Cr=Fy;@~x0j-}l4(bE$PUdpb3_Oa%?!A|+FeI4<^Tk4wDBqy6BdV#85N_<
zSG=Y=Dj~e`;K(|1{q@O79xIDD??ufy)t_|7PljtFyHgF32+^<`=g$)J<poH*`g71d
z^F)H&DH4Hyb9s~5CL1ATPLV{sKiFDG?Egh&ho%nmmO?EykD<toz@HoWMEY<$Q<k1B
z(60X*G#8G;<qQ!xA6CB&yV%$L9@pcOD77K6j@>KN2xp?j;&CSk9McV#fjE7f&}pBG
z2iVeCp8`anF+jq#&>Jd8*-fLYRE@U_r0!~xHUhVQ*P<X})A5^eAinqsAw!O3dr_md
znPHX}i{=C`fZ|nJPr&pP=-!E&iTApl9FocORmX1UfC>UEnR3fgE$%LA6r<sY-U>Za
zlEMppb&e?4dQYJDKg0Y|Z$xy$1s$#v9dC5l5lmFutf7r7@&s5Fo3k(#E@&CT1yNuI
zVd#Q?qtb~gG31CF%$UqI#Co$w!%R7x1>n`F8qp__LB+g<r;>WhK`&g7HFNBLMm`@=
zi$m?MHv9xJek1(hvaIG24Vq0QBiFL5jS^=*IL>6YaF!ij<Fp`{!q{gn@OYgx7TpOL
zZp?T98wQALjVnbes2I+g-L>val!g$fNx2k%C{hZy@l6)=uDVv)T)50DlwBLe%K|(c
zVA1y6c1#ZgUAvN2(N%G46Mh>IpGkhro%H1CB0RClb_X>`2)V26xxQu+>u@)@7hUJ(
zo|GtUY|xG<nIWq{ffM<yq?$$Sdp!_ZH;rkPh-6J}zV$N9(J%4`r}>AN=)8l+mYmLi
zlWBDfl5QvGes5`-t8CBrdj6fW4nLN(?lB1#U?<dc?vj5<?NY+Qt>L(amj*L_rPyHN
z5LpdPLCZ$irwV^-a<=4IB8OQO04l`|c3-K|=tVkUwMB*YsTL_yji0EVj%!pVN(<K%
zsC@O#FJz?z3(9M~g-Yj4k*O~a7S|VlbT>jshA_WT%VF4&VYHhyi-vEcyGD(lP-$aj
zzBYR&IbDcPRiI3oujxlgKJs3cltI0balYXGXox|qOEGHm<FQmQAl6hR?vi)JslTXq
z+w;;6ntDk&ka}cNlB_FX1*s1<ExWf@3@;}+Tuw(Ud0sA@9db1QhMwl2D9{XlvHmq}
z;P_VO#hj9$28UU+-TKY>lx1dTjaLk)CW>O=Sb1wCEe8n#CTLZO?;~dB9c*<+(m`%_
zcgj7wXsn&i=3)^#;MxvoVGa9M3F7>J@mpgWb#AR7dgcc(=qYA6f0$=dFW>3`dcdiY
z;0fkRJ*G&r*#SE0yBX>tR&5`DTlw&Mn4Gx*Xhdi0P8qT3X)P7LU&Ch5>yzw0wwfY*
z0}M=>C|p>k$l;g&cVuAvlJp-b%}lAOb!0Wbnq9bj?^=h5VBZ1kqQ@9AzGFeaT8)?}
zav11QPrN-VYEklTZP!W`0^Gu>_w7LRy!Ue#rH#1#&r?L-*)}A~SsDL-`<o_+7EQYK
z#G7{wqv6wy@}Ly#%!$XYXC%vo?f++ZQDn=)n}@4WDh17r_5saqVS#)1#)iG~N<rER
zg$ACbw+(yxDxBPQ>-&cFJLJiIQp$$AU)6ThtOG$DN^S)u=c9gGX>cTNGLvj59C^y>
zz(nh&S+&CjQ9K0#AO2K-_O?t<3Z&kz+k-35%6&Q&qc~yM+s_1yZ8gI*kS0W@!&n?g
z1R!a!d}C9>hMMq<D&~gAXIlLJL^1(;jD)B&%bh6h5rzc8VMKy5h_j&Mdu~*mYumau
z5I94rcU1uGSt>O>Y+itGchq&{;}sK!7L=EG9eJ}dT6`8r&^EY#525@q?}#wbsA-ex
z)=_{4eYOwlEIcW{m$A}+Ox9k6a|7Go>qoVsRm-@@wZsk{rQ^Gy&yjGv6WJ`68=al{
zRdOw;c#ez$yB;$Mb*F?>N<ELBWuE7PM0|Wt0$zQqzirgEu-saS<n}U=#x-TYB<4el
z!ExIV9QUFxSyrfj^~4Y<lTOSP^R2!ZQ0le0@QlKzgqJ`BuB{sc;tnjDLgk2i^C_kr
z);(aAngABNvRHOI+?|?NQ;{v4_F4xiRHn%NfUQ1qzTWsga*Di9T7&5a42ah?K$*`K
zx~Sdv@aR{sY&n@@7|i##Ieg1hSdytDcA93(VsgB7l-CtebLz7*=?H-fF-^F&6R(tm
zVGBLRUTK>eL131YBG&8=jVttef-X3F3k|u03)qp-<u1a$o}x?FPSuwJ9$%YzCEq9B
Qehl?dqz@{RZ^*0$fV*v6`~Uy|

delta 2216
zcmV;Z2v_&X7xxm7BMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-00>=?c}E2#
z0001Fk;O=V2xV<#VRRAz3JEwRvOH`cA)wMS%@9mv0^Kx2V&2}qq}ZSz;_l=D&+&pW
zw~bE&Tke5W%$D8P<kbxD{w+j&GPNag>}@0~z=St$no-d3wG)1IH&Rq8dj!<?h}M}w
z4ee6#Nj+HvJ$%=(?NCo2DN|(3K^1Uqm5{F{*!Bf~7y3*(Xe)fdNP;B+$uugEYq8=G
z<DQD%Z}rU4M0|<`b=huI9iXD{X0UVN$7bH5Vxx%?*%V)_<LV7HDqU#a&Cw(BHTxB6
zdIj;Mx!?-(6O*b}7DUE3D`U{oBzBn9fp)A??Inlr#F8%u3-mhhJf+vsLz>x^d$d@l
zmK0TgwMRApL7Kl)M>diLIk0d2*nU9vxdc!tnD2zysCitzk|G$Lq}ZUfRuCQHHU>Ey
z^Gm%d!khO0QDoDe9M+EGKj8b1!ivLycaai>Q|!EHb&qduk|s){Yx-TmTc>N@<MC`4
zPXn%)03P`sYUm@_C=Zn?6Gl#EH?+-WX-w{aXEBM~oiiBgr-i`hOEy^T(p^3i>=XmE
zC?-ka9sMEvCSeidKDw=62YlX5r?Sxwp!Y(ZIND(SgBt$-#nz79rkR2CqCtArt!gb>
zOt1>qrHZGk*0CP3yflY?!NOmMfEsjFXk0>scQ%LT5tr~##SgYOcr|Y^Qs6j;Jf*{b
zwwGT4IE%e#8=hN~3W-qC)=~JT-YHjyjma`1$~@Ro1AslIc-_LB9MFHGZAC^-d+ZAI
z$f`Z<O;@8G`2Qv%Er17qzbK)4i_JBqsd4_Ssl+MpSu@qUzcL>h>*GeB5lWS#L`6lz
ztg`6I)B*>`0jeb`&RzqM$0qa|R-kWxup-O>f$5BrZU{*Xn5ITotwI*`br7{tP8D`D
zDaVgU<NEi1^Ai8>f>vyZCbzyGfr%H{@=O9oUW!LWO&aO+hqd^gC!T=ssd79W&EEAX
zl!VYF^+RzjIfI+VSj5M1KMzF#vrTfy9j9*XR#~__@;4MxcVt6J9FWPV8<xp`kz~K%
z8|Kk)`pMd3IJ=fDJZzXc|NWO4GCl^;3+0;pk;xN^XQ{|eQCm3PH^*9r%L&*MDn@Xu
zUzn?zu=^Bk@*D2gNCeeZ*H`w0$UPFGLJmkMtu&&+C8X7^_26rY_|_4m{}$Q}zkT7(
zTSqM8tWugIniE0lYxaP#F1dq$F%u#msJ+TU50(h_)j?$=ba+T8L8Xk2Qs$!Bvs=M`
zB>~_B%ybCSivrFWUN>*vX>B-TK{a&K#gwp@J-!WW_jTM7rXRa)Xo%{%f#u0rSX9lU
z-Kv9*s=eO8qQBomlnG$L+5>jx>QP0gI86<uQxp1VI))m#BIm!7JZ|EDwEoq4Oadp!
zWn@9vdP9Z+JOe+to~fz~_7>PQKlEEzBWz@)6)k}?>u|XtzcFRq?1h6Ck>d`b>o3AU
zs>QJU!iLi9jEZs}yBYSBdO*#9fbrk_Bn?3pE!j42kE_Nki13PL@4SA5w0n)6Ph5|C
z1sdVq-r(}T#8(^1<^ZFArd}fwxa1i*(%97R0?~+^q{?!U0S~5zv6*Hx?ZJCFIpbTZ
zX`ujVaBi0OyG|a7XGQ3;r0L#=OgA?PpJws$jKsJ@1RsKJ7yynt{rHS=8WaY2@&Pl_
zxmOkJeo2_-jY)L_{Ns*9x1?{_Mf1#5!u97V7e;oQTiyVVa1LyLu51%^0?ZxZpO6U)
zUNMcQ##@Mv<A@Q1W83`jG4sQGktfN;Vo$K!Bg2k49MTub7&Fhh)3Icf&uCEIR`KRC
zAq>8DVeFJ)TJv~g_c7PovmyM+W3tuXt6`~YHYsAIqMe50%%NEf(-s(3y?HQRi)TOR
zE-vfP*nr+_n!;v(Yzm>cCjPa1s_1=W+#+!u28lMMGwRGj*N;?DiY#ic=?w?ED!4m{
zrsy7~h(tVvp+b*UL8A#DX-KOfJ`p-fAfol}i0-?5Z=UV{_6f@KOPk<9TeFkx<AR=b
z<VkwD0IuU<{L>^BDS2Tx;o6hFIQbLcp5t&3mZ504g}oksU5~BcEm3wVH@T0(6nt4y
zEOzS&NShtUQ!WA(feWgu#f8nkh$`~(1LNb29gk^bxaZcDa3+-#s6*oURvU-(g9)`l
zAr8z5Y4{AmGY{D7I8P#NmAy8th-~ceDD%J6jvgahDP_P{PASRVBZd}m;Bonm^_HpL
zli^DdT_u%&nW)uo3F(bLBBV~2X=UF~LMBYp0GL)1^mlWRd$KOf9OH%K5_eMdgZNuy
zg|p0Nm<~0|eqvFrrCF}2OS63+vMgtW)#R)dbS%j0G$?Z5X2TTOkEc1LI6%np!{LRu
zvbAU>mQAyP&~>JY;)C)HsQNcH)HFfCgbcC4vqb`b+2RFkcV~C=pwe29m~w<OTwtCf
z{$d=_ooLgY6A8w$+;#u?SL6!1OOe~(2+{4#_-IIFFN05mqK(WvZ*a{<j%G%!E4NF<
z{bVtQW`(>unJf)eg3GCiSamDKIoI=n`ohR+?WeeRLQ(0`I&I*R$GJHi4<QJ03+^U)
zve6-bO22u)<%O)Z2wU0A)!afP$_w9<gtv;H9O5w8ACq`Ip1Bv#QeEesmcw8!SWD_L
zTm?_G^^ACw#}mE~&?VRD*>r`@W>wm@s@;KN5;`NgBO}xT#UsckDDDM(TP1=I9U19a
zWWXucl$BvC_i@qj!4uyZs>%<4n17>>gd3%EjyTqcp5P>gK5y>O8_9<v$C)<uq0nXX
z{CO10J1_4II#H4OgLUuZW~b`Vl^QfXgK+lq5X?Yj{PSk{{LgL-b<+CHIZs6I8*$6G
qAkWBZX22c@$X{mvB=}yWS=b4_aHEKh*lw~(6+(H3`<T6GtJ;u#lu-Eq

diff --git a/README.d/11-schedule-script.avif b/README.d/11-schedule-script.avif
index d6eb0f895d413232e27710b9a0ba2fae9e3d26c5..558614f89fc9ffbaf70298b6b2a26efa64139199 100644
GIT binary patch
delta 2844
zcmV+%3*+>WAg>pYA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951ToB#j-C~0YKW&i*H0004zoE?$u90e!<0035#
z4FO1h3Z!jhVRRAz3I;eOvU;o%GLIEZWCGZ3EA=XQAkXW?=cr#3Gpv5b%Xdf$v0xN=
zx{nP@p8!1}o)lZi$Z#oD#pwsMPJxhz{sBqI!*~b05sAoy*ofK&JF`@)GLFldBv`So
zQI$7%G89AEf}$~w2G#{;gByWU`~4m-b4ZYXFULc+g*4esct#LMZnOl#(E;C5@A9ei
zo0>vEkd><4`xK`(7oGy0sNk13H1n#&i5frhbbCXu`G`sL039{UQn1wf8lRqGPSsq+
zB~EK#Rt&dL(CZr%egK&{;v^5-(9^a35zw`!+Tx&&e82ba5*xx@Nhv23KCJ#H1MZxE
z&GS@JuBK{#WOv*rT4);|nuL^iY0sAE6hk?e4f-`^E5ZjJ>=1r&8rHHAb%Pk`MEWke
zckC2}5?AyxTaS|ip#ybcNZ{U1`^oX*%u^0@O?yC!Rm6VnxU1!0M%9uTwG_N4y`(hx
z!kE~sGe6&uq|f_^1mB~e6Wr~unEai8(uK|j7BGYJrCm0eZi%wqe^V(24^^NUH&-*k
z0(BHgh$#$y(P!WvQR=<UoJ*(S+~ipaC7vKwhJi5_B%ga#HGSOVRZsb)6G{f2LDB}^
zlu*PIVouw4fk@iUzN}D5oq|(ryh)+u@Wa!+I-IO(;}96v82C&h_c{!O!A?Jag~UUJ
zd1R_#pkOtIw3bp6taBFoKC60ihU6px+GKw&$2Wf0G3XuxThesqId#o-E6pIgHEkFC
zgldKM`nVp6VmGD+!PK+6nLfO!hU<{3sqC@JAU9GIQKr>sR`^uMBipEVJ~iTODwlZD
z_7o)^$AYlB)8;9czmOu^2`lA)R;8SVx*)&dJIn6>*E>zMIbVAZqfHj|*R{G78teUx
zCYW(n$I9GqZKA4`gD_7eMi6|QnE1Dli4@EqLs?e9{!SDIa7C4?Es>I?z;;;EI)m5h
zb4L%CAEb&A_a{FT_X~!7<rW+)#GQf@GPF>nt;AXTCb5P-ae1@n)so16D&#rW%W0bT
zX6UoDk;yY{wb~+1C}e+*r}SI?rnF35<3PZ9x{s1ny-Elcy70rQ6Q>G4HD<Ty;+UA!
zl~xZGPwR939DX*xt>*wSSOAv=V!bWBtiPm=B;Ko#t%ptaqQ++;wk>Si)dDWT_3gl_
z@Cu^9I%>yCq((*TM<%F$Z6;Bs3d3;5mr$NTdMB}xb;tVXB!nyZ45>S?V~DU{B7j}G
z0@n$VyYgvIE6I^N12w8gs2Yh-xJ42^JRP#WZu0IiOmlH^>^B<y7XTi*G2i-AzgSiB
zg!AMtOrhY9%_a0FBh^tFhW<q<laQO1ilG`T4{Q>tC8j!}!IKMrfsza6D({b>dP=78
z5xoJpTDW}jr(`Fq?6~DK_oGuA(Hj?{>YFwwp_Yf^&3M#htvyDNaYX=Y$DD6patjvm
z_JQ(t{h<$gt-3&{h>~KHfcF<b16Of(6Oo}?%<na1gmKDiPnDLDz7eE%<dJ_EO3Oi>
z<N=4GQ3Uw6#2XZUstXNi-9|H4U*;Tg*v{1@3Q(+H(LYUUU7*Y&+F^3%CuXc0C9Rt%
z>-7$pyLu`D@d0D-E6rEfVvDLRf^<u#T+m31)@B8}*w_6Y*W;5YwIQ*N-7C}xXQIX8
zaVH2Izxr?c`PZiiH@IkbGYEvhk)^ai3>ZisHD#rRT{hHz3utb6olU>$_VDN!b?a~x
z{aRIF)X$(Sa|K>iDAC(Yu*(a@^8y$|I0Us(2&FOL7AjkbzhD1(d+%B=S+T(DZv+g#
z{LFVEN1mP~qGJuLhGz@GhHG}Z#};z-f>`P;qL%j$8%kRl)~I}iH+Q05m20bEC}T?e
zfffa3?BdRUn1oWC0EHGEJvz!Xcq{O?pO@EfInGOoEC#W6>zaA!APH6}CP*>Ru$TM6
zREDsZlE85-Azi^f9$B#LMu;wN52{xA33uQ>GD<`Kuy5}qsz01<mnth`ZF`xv<z1Q6
z`{sXV^Z4s9w730EYAMDh_-VEPCLg<GM6HwQJ7Z~o9uM;Zqv;0j8;X&$5`{p(QBtm%
ztw=%A<i6sVw{sYPwg)OlT{Uk%?|D8%)FHRRH}W>d1v*<?CkO`k`46mfd_$bC#@c0L
z6!R}aQPHNds!B)3HXL@m2?VOTQF|o%$FjPu;MG^XFro%|{Q6iQyNQ0Lf~ng;h%z-I
z%rX*xePBi8Kp5n-bj%`T!@~_W!<(v~C*Glo!2Tv6$;PEk@*Ld(yQ8NEQyed9nI{Om
zQr&tWu&{>_E2kC^AeN~9XX2U-q-KfY>O^Z~Wu3dErdB^d=hIK@S)o0_?rop@c1xNN
z-dx<6<+|A9=9*Rq9CqW#epZzoCa5mH2O^MvZM`?93(_Ll;f$A&U&oY6xq}|BAN+n_
zvJ(#+#7#tbf0D09XPTNvBlmRy6=1|R<Un6Q_0)aOGmBphLW~tcQ0%{eN6z3G`;m@z
z`az=D>Xd^V4v3EmA(S$7glh;KSGK)hD!7y_?vr)Ma)d*rJ<b!C*^a;<1zC*z8Gsgl
zqb11W#q37nGq1F=D&I?2<aXt;pRaX=yLY8uCpHKIO&coymmXj(%Z36WZf#B?LX|9z
zj7~!Sqf17sRO({>7O12AAV%XY{Y1xXUC<VW$9+)@`XT3AX`DH>qC!XUzg++c=kalz
zK?oI*5#?#mf=Gm1c)0@8>=3}L%4;rvKXQz+7D-ey7uj|F&3UwqRvn&T!91lyas5==
zSS}xqr2xz}`>_7XClr5TzZ6f2MK4@)LxByg`-}Q$DQCZQ8%5@CZ#jdHkk8I9aLz>|
zT@(8^zcXADqIZCx`^k2C1ME&Mezt%<YVX;<*>QaoHEnW_0~Qe|dK^%kn;yG=JQN)y
zq^(s_|D`vnYt5^>WwKeDJ3Ne#5I!f~1+dOQ8I%)-dgpWSiElsQbHFrtp4AW3ru1e4
z*p5y6?`!`79gsC%X(CWR7@GurB%lp!ClG-kq9l0sz4lH#ui$4BB250NOkP#>*eMk!
zTRm)CQWN`jsxPooSk;#$9hi833bJb_Xf%@3<-*6Cs?b)+-&XIY@!te`=af&eA-ta+
zzPmPeZf0m9>$QTp)42DbGRd7sBJErCoRK-w2g4aC=L~RH-|K%a3or!oi-_{OW3-3;
z?crSxnjBWxQfzQLLKBZC>qvck;w27>_u++m6?5TO+yTArr^5o5J_|5^FB*@bQGt<3
z6I9T;^$*%9ErWE{tK{JeieQm+=uEz4*@ALZ{JJ&IZ_?luJZ*H_EtQ_6*X^=3&IIFi
znGa;y)4h)p4^YJ{gkzzIN%J=>gSL<f0j*hNi1#PMO5gsPY62!7Se%zXYVhHYx!fb1
z5^T{Q-;3sWM6(sStfel0BQ3aTRHso=t^}>tE3IA2iERKFTh5!6VS)>PRZyrscov#Y
zEDk>7u!h3I%ad}R`OyV0h^QH2c9K?j-si^<t}<@?p=)qa<S5M|(jDOi&;))Q#oRO!
z3sEuC=}}}5m;c?-Dh-fwD0OS&>#4jXaUjroCGpwtehoyI(s+e8fFJw7t2q(3D6`IX
u{(?roXQQ_H+aHZQO1^?kGL~s${;Q@gPe}*=Vh?Xb__0)kTPt_<rayQ-DoXSK

literal 4113
zcmbVJc|6p8*Zz$eW5yQQ#u{cATZKV}kz`-8m6RpSXc$?>PGpH9glyRfV{K8{6(Lz}
zl%=vomPnRRA?q`v`+nZ{^ZxZd&zaAebDeXYIp<v80RTXl=o3hG@FNics?nkwi74kr
zav+}5kkbGF5XSAQj{}XPnuN2XtJfb00Av!u=O0Xqt|a_FV_3-~AGbpeME#Z_xq1+2
znHB)h0kjI$;h_KkO`_(98ORy{U??iqAd%b;FF9oRsL54Y3+)#UezJ0!9<CmT2k`!z
zq0-s`BqGgejeI1ptA7Rn04u@Kn{c?2w$z10_99cGA&E@zphixTH~A_xQVmR7tw41)
zGAV#`Sb@P{)X41MC#M-MOsfDK1P@m)cY<pG^%xca8b&SgkjQQhG>&Q@00aTiML?))
zo7@~74xdI}Ukad&q1LDl2lfF7P068C+y9Q#{BO)g<>)|Q08EWxR0mTrtshGB|Ao2!
z#<V^V-JdzPshI9>oWVd%s0KUy91I_P2G|UA^mV9<4i5!@gE2r8fI*=QP<j{x0|Oim
zV`S!JVP;}t<~_=Bgj103n2;c!fPgUS1X@^B1}PvQaY|A~R!%`d;TRgLrYw&;fl-jB
z4FSR7aAqcE1Pcp7UPM4d{y(;ZR{%Q<U;|ObiUM@(ATT@V;5BfJdM7>T(EdoF2?ayw
zp$srMBNMfunvM2SU^)nxo*qJdbkGed4?x)IkBZ1?Ksn4D7(_ie<-_kifFaL5ZQ(NS
zUqxZ?UN_;4+&l<gJ~45$grt;$qS7g4tcs?VwvMizzQOqm78flqUA7`PUL`s?lU%%g
zeEs|b0<T9z-ntzXeJ3U<IVCmietJe`L17W4xTLhK{MqxW>YCcR`i9oF*X?gQI=i|D
z28Z5%_&7W=IyF5r`(<wa>%zCS^&dZfZESA+-lplI>HNq3DEmLU*r~ecAP_Kwfu;*Y
z=T8&P4xty3gC5l|V{q`~5S0&yah|>R;AsmSi7{X0!h7{Ia-$Tc#MWri4we1?gx&nF
zl>J-S|L7V8n86_Gp9f|K)PZ#m`EKpog!~>W<>>?wz}(E@Qlc!J$gGc5S5%p>6(2J_
zuM`K7?V3Z(r3Vj>t<V1Y8nDo-LmV_Bhd=%l35N%C;{BJ*w^YfpBj6{W7JHRY{Y6c;
z+<nKA>ADe}NY^l>b?6cGpgi}Klh@o_$<jd=zj+7OKib!RX=1WtT%z!F%f-3SEg!`o
zVx7G=SmlFbjXb7ls#$ESIG4GY|5ip$>y6%k>>G<8D6CqLgI6HGZnf3@EAidevTmGu
z&698q-Sb2iuYotb*D=wByEhr{lFc{!^vX#2wU1qp@ZO>DVNU$I7Zlr_=-Fo|r0Y84
z?sRP*ec^b|a_E~$QB~U$b4(XcSqZik%~nbkae?DlXY#Ii)(%-LRHd`evTcPdyw}%<
z&ZJ6LXWjH?c4S`r@MQGu+^)j=U%Er?{AN4X-%v_~8$bw1F*%^~dt8vE81!Y?*rRvx
z>t-7{6Qpr3LoS(+66dZ*DVZ0=FCZnoZTFT&ll7hPNm{GRuh@Gw26Fc8#}SUcxEW#g
z@oXW<Cr%zLLw-qH?yCyrSCq%deyy|Fn~2#D$VHWuXK<lyKl0Qj4|bf1Eu`N60BA~h
zq+;uDk^4<G!<Q*4SN5!`p1!Fi3H(iY`}{n9yDF&p<pGe<wCyqSj$<k|zyJH$t%>aU
zX5mB=yOL@RZ;A<&f->DAe!)?sx?75V#}cqz=UZk3J8>UOc2Ruw5nU>&UC~Kn%u&2(
zbi$*v+cgiwW+v2T=e}&Lq|}d-HJS79`TKP7e#%obJk(v89s2b<s73|pTf#Rs?aVm|
zYJpc54uFqkg#J<4qoFL5n1^SYCyupkzKlA5+3B@Pi&SXU%Clzw&8T>defy9LvC}NJ
z;(_<g>yI{l>O*0bfg_!OI>^j&v!*FGGeqatWKFG7+H%RPotw(4WLlfXi`dG0@9LJ{
zz&bpCf7BGuDk)4*ZLusyMRUUC81ADXx4$&`A{Lj!!#hS7M=2>BZ5~1Lx)={KVsEMJ
z)34vU3Y%+6HA}p|tZR@E4#_1ib*uDtU3)7rp*N3O7uNPt?ar|MwvH?a6jDlem!aDo
z&ld1k!!AS@zQ<u1k|u{wZbY}j!A3oCZT#^AH?qK!qfbvL@;BBalcxPrXHXUDXw*FV
z<68OaG*og@pm=VrP?`$&&<jlZ&9COScqh)aaeFkzd58BO0CEe))k8R0-$ZvG5;Xf2
z9c0DU8i`h|N4yohv6xkm9^b&?-I~||J1yYvOgVa$(zlW=@JoP|RTmxaeQA`kpC{wl
zMj6h!v;mUyn{f1u*YU3Md?)lPRhz};B*EfjRX<}?<tK@_2f=GO>3wS6$+=a7z7+oK
zyVyv6*w|dn^2lQL&vv5O<signXpr0n`^x@?t8VFn=eV`{2J!23B1Y2Vg*===J*XL4
z^1j;k=thvHQ_+n~*k(ow8}qHO6*X2pL8#|Ir9`=@{$)N1ijdt_=!?P3ALjz>h<SHn
zO3iI<Apju|FOFkt$lTTnmwb;H^GuwFw>vwcLwWgvb5WVt<aZIXm~Z<VE^2crogF*a
zILe*Q#L_n=2%+KK3Y|%d)o$ye^Umfq1`3fzUY9LeTKdk2rQDkotm{zJR&LSt=&94t
zxGc!{E%%s*3RdB4Wky8%m(H=)xM0eix5CHVU6>YgAdB8=xp@+UVPgWsi(S~A5i}B6
zjqkS*^L6OPb+>=0dn(sMpN0tkaw>gNvI9Gxd)-1xf`V9&kuw`U7y*s~jBsT!FWm4M
zO^qV?n=D41knxCOl;vjHu>02q(}E;+g`&&!(S<+#fEXSYn58lD*wQ^CB}H)U@}6s!
zJF_%b42#^Vg?Wg>Z{?R6YlbElkm0*U%3`KFu>yiZF0pX!+zj0xCgQ!jru;rThVD{?
z1@|s8$8<!7O`NiIcJs)^Zc+8A`L^JxpMgapMm*@{^P`pACCAePq9t)<Hwpw5ubAe&
z=LvSRd-9_+v$1*uv8aFD+#qGrbbh}mi_=krqnq9>*w?rfswD6XM>dd;G)`27xX)Oy
z49a|5%4sr-SR~9aJ+wcN%I2zW#{}xDIR=8uKKJx$je_t_dSx+t46{m<2U^FDum9{U
z1D!Ru+$jw7nl1>;#yLsw_zVciB!#|<N+f$~H@q-ecw~R7t+^zSvv}sEz<#+4-(TA6
zbG_fIj&twH!euEj%H=h3@z1`FRy4h0jPM;7QW-qWQua31CF41<Y9OPn*E?&fs+d*%
z8W%RIXmlK()@J)71V}4w(s5`lM675(#w3QhPp_T$e70{OiuYWv*TC)j_jRS;DUS?@
z76du6X$Hi4G=C_$8el)wnXmUc$;J{EIy*~gU`TI%lFhul;KS3NMbcte*N4A^;nSQt
zoWRkhD*3mcIm7PgeDq#xk-ps!Az@n25di7d^Q<M&NxynxPdGVyf_0uKmJ<?%pGfbI
zt*T+1<8;>)7{#cNv@u5TEBoc%%Tl5?7->f`ntK?Nx<_F(vyOlZJr~<k7mXBt{yN(#
z*l%c{vSKjSk6#Pf^~1<GtZy_hdpVus4#&gAffG4eV&z<~5}KF_5y43q$r_B#JVho`
zKIi4?IsRHua{ER|X=DAm`kjSyU^^{WZ|iyNTg{1y)5Q{Yov4T~Df@?Etd?&X!=HK>
z_V-0V=}X1^T=Th8;+h`cY-q1DM`3Csbd-_LEa>!#-d8`CIJF=x_RW1d)DI2sZJsaX
zHMV{^XAOFzix4~FA5jIB;aV`&a=6Ya+$LnkhVAV!IKjW>mi6t+@yu+mA;AfgCOfg6
z*>HjgWdhaRE`Rq5c-LlKPj323s?w#EpM_TqDB)+M93$S}tIu;Eyl}B|<%a#^{D47c
zQEB^13&rGD>9v)S51kq~*eJH}+aYd2INqZK20qS2YkDxkhL<<VPQw5AH0Z6Cs|njc
zei!$Y$f-fs)+_n`_t&k9d5Z%rR@sxhm>a^Q*0khiv|=sPtaRNO_l*R7t_>D$Dcovz
z6F41(d6%M<@_S@Z`fD?H)Z&b!Bm$T3I%rz{xmMiBN9uegCt@SsGUn8K@=%sF#wXxK
z$G!<nQW!_6#62K|V>OIm;&~V$^^Mrtz~|ac9lIkMDrqjI_TKCcBh!yrRhICk>2)}#
zSY$;V(rWx!sMRHZf=!*g^hj-$pL{RlhCTCLgV&L`({+I#c%!4E3!RPK)^(FOqg2Zt
zC+Kp&`NA@X6)ms#ZiQKf*Gu&2%H|Bv_n}O;cR$(~>aOlN-TO;4^cuqz<`ZXz!CY)t
z6$hG`O?`N>Z^Z8;OLR>k8MWx>W<HOm9X$LH#W6B+Hdg$a=Pw~*oiG-WmJt0QKkEpZ
zOeU;4y!@)C1xze#-Qnud#Gg<ralU^;eT*wHI_mAup#n2{H1fL{M?-E7Mrv9~)9InZ
zvi}H|kXOP<H3_1ljUebC_zM8s`ARVtV5JY^UAzAyAtlvR?DSMYr?F*Y(H?7DGL!$2
zG9&%<cRjgL=gzT9o_S1s*PayQ@AAY&<+h#R?{6Q-pbKr}@Q#a<JYg=oXVcKNO*Rj|
zTP`twnooY)_**(T$l&sd2TC~>JOA+KcjXw7r|<Z4{N{`|nn0}W<znD`j~UzR)_r0u
zwlyJ*D~3qz#^Mf}ySaFsJTTV_LB50+_|hHO#th!L1f&itNu*-%`RZ5AiJ~I2{q2s3
zofgJZ=~_iXilL*+IFs5m|A~myzB_FpncD?0#G~*uZOmVKO~{e>*PYi-1|Ef;ZrEOt
zsF+X5eyX}}<gg;B^3l7P9^a(CMm91+)~xerE`J{5&rB{2-ttrr&oh&CmiQ@Ip|H-{
zcr41NO8-%mxv#1*DhoICx<WOQSVL#Fu4&-h|2<-Vw1%Z~p(4gcT4l-eyvhEg)*fM<
zckqaA@|=q;(vhh1>iOb9ZON!(Sw{7a3hbO=s=S!`-2yZ!IHmN$k(n695&St*EqKF%
V659%C*l99!+jD6bz1FIc{x6~x&wc;^

diff --git a/README.d/12-setup-lease-script.avif b/README.d/12-setup-lease-script.avif
index fb4024e2a730947774c6f165c7c5e3b191a4804c..2a8bcb24b00b57757e0ce3e70169bb29a9fef0a3 100644
GIT binary patch
delta 4093
zcmV<Z4+8MoJBA^UA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951Ya{vGUC~0YKW&i*H0004zoE?$u90e!<006d=
z4FO1h4|{E7VRRAz3I;eO@_SYZGUgskWCGZ3EA=XQAkXW?=cr#3Gpv5aU7Q+))Ebcx
zmfJq((i1Xy-imuA?;knG@>{2IVg*WVkR3oHxJDNq%NQBpShIjHR8(phIxKjxu2GdY
zcrp}2*@B`mjt15RW`i4nR4#uyeF|2qnk4>z9l^~0YV-tr=l-1K)&LmDiQSKj(A5w(
zRzGz~s_$L$Yu3SawEJ$zfCPfPw~fN{qXE|1n}W{<?()e}NR`7I_ckbmy9Ya$$!S()
z&ijhjZ}8;3U*)JhW&UeI_m(#KY9ySO#|059m_a%o1`EWSN}~6O8v*t3sTv2qYHG26
zn*0@w&tG&3QF=jY5BTB_fEQ|+1#{HcmNP}5;{a>?Tt-XV;<09o8-O5S=mi=(LgSx#
zduS^r3Kr*_uO|gbEhP5v!+JP5lsYFcV@j5smyujF?Hqz?J1A>@Z+~x@X3xrOTP4hk
z`MQ~_sUW~Y9mxL4=w0xaW#m`NQF3*EkD7Te5vzi2&VAMHOxuqgR?odHLmkb+Oeiw$
zWB2r?v7U8m{+Jl$8xRY;fhjP%i)u&2PqBtuw3!_fLiethf4;wNo!TPI{${Q@+J*91
zq^|1EZ7l11s})LWd6OtQt>3C?>v%~FUmfyebj_T5GcK}>wZ^F`k0!gFm}<m-*NN~0
z#ZKdc>o7!=qq1wSaaavV*?p}fs2+WJs<Os{MxMX61qe9ufr~HFhh-JlA4*5(1tyjq
ztHQ|XS=SghnCG3O9}_8h>M-YO0|zf9yzm$9X|Sg`#u-pg);qP0FQOYC^fb1%#I{@>
zl75ea&WnWYYL_OL^;SHW&Pr*2qxv&zlck%jx88PVUu`B_uw3HvwVm6X+G5ZA952@Z
z$J7ZPsz_4Z5L#6ERMzepw8!qk=JJ(;6FID-({rjF=Xuk&F4CK?t$7B`JsoFkFFv%@
z9teH-Mv#I*FYUQG^)&UnCD|=D_g3&gL<M$)B6S06I$9xE;57{5r8<LuTW_+fC!$ES
z;W%9cM}G0J7$a5K=UxY<jnfCftUjzL3pgdR$-O{fxoN(mw41tp;3bZ`+tcp|n5j`o
zx~{5PO4Scs8nqq46u)!Q2>1q*PxHGt&@E?DV)?65%Rk5|Q<}zFV<L<M_L|WgJ=B(B
z`J>N*S;*MQg7cUpWdn<U=_F5HP<VpY^`#ahaTW0zh?R5?dOXqP-(^R8-my3Z6XK6w
zln^eS(Wq1w(QV+$4-^Y=I~XOAzDiGI{rbbZqy{;8TOqMHsuo^g%Vp$pL9m7xX~zEf
zPc$^FL=zRhoNg-Vu-%*mZgw5C1iSwm5z|S7u$x~G!z`AoN7$Nw>T~*R<<?swm4!+H
z&kh4kA2LViA=B~Iq2fRYw0Z&s{HA1e-J#jKUTD&TY`ddP27hdM$Uej?E<;?y=%+k8
zn2Z<F!J!g<uH{0YX`=$n>1KPqz|0iCa?9i|;n%H3F9gl%>8T;*1eVSwZUWxh{YW64
zqK`sVIjz4$<;9_Y>Q5+?MC=%>!i-{&y}oXO^4q<swI1BLUgBG?lRl7AG<aSI@7Wmh
z)g43>!zuXhn*ODKwhb0P^RphHsxw~xaf(2f207{-@uOdoK`c#NwwdvuA=LK^*LroF
zFm6R$h~bw`JxE6hvZ54?R*fCB%M7r*UoatFeTzBeH{<VrHn>GbMZvDThbjI`dRK_}
zWc+oDDRm{#=}vx`7qaJVmtDWoPuB3y*I43P-XJRVn)hCNY^^n8w!g$4{Yh)Xy$i+}
zJjxi-zaT|{S-WXvQo9wy(8f#OKJzY7<$ip9ME2O(!@mTT;oc4H>W|Y+P>CGaJ-65=
zS0#!D**dg;lU2egut)ByCuMUtQm;7yd{?SYE!j^UJK^dL*^dANV9^b6rD&y90~ym>
zw!OnnF+Oe1H%c0%K-7r=8|594Ny7mG9{paFz$EkcgPD7GmDiDNpQd&$?H<>FVK&Ft
z4Go{{at{riY2d7{?eO(b_r;1GC$`eyd*MvXjqXK%*LnG;r3xEcDccdtG{b1Wk$dvl
z*2xt@l5$ZmW(!z}tgH2G=FVF9k<J_t-Q6>~jjHBjG$&{C7u_5sl$t!=+KP}^Eu`}!
z-x{jgZX>hh<~I^w1yy>hehu5y6K$eo5z#2`tugp;vv|dKCoKl)n&e(ew_A>Isv@~u
z{ow|G0@;czYudc-k;muzrm$63N*+&OV!){dB1+Qex3zmR;5n~#b-*Nce&o6qmN3?i
z{7^(%PH?GIXo*T0z*Kq`*_?X~K%}dGNiKpW&>fVhNJ8myo>@<?#4nglZpmTe(v&yC
zUVWb>($o;H@EYGPO*?T8f|`L>8b0(q7;z<kn7x=k!kWj53&qI_Ncp)&NUV&6UH`q1
zBbn<%EzR$VZMXFOO?j<MLo=+u_8Wn6c3r8{YtiBaemuop+Vx=DhI1*U!y}@pJpmlQ
z7hl>{%%DMI$n;6vG(CyRfBoH&byTA$wUj$+e+0`0yM@mKM~xa);=(Zu%@cN7kye3!
zTB@LyGDs4Z0sTv{nP9iBk^r%G;J`CtnvRT1s($ifAx`P%<pW76yF-<&7kG8HivRvv
zDp}A^acuAn4hd06M%OCcTa0~Kvqz>@<wO}rei3+npPa;)-lb?IWCz4^?;7wi@G<l!
z2Jx1+K);Z@#w87r!ZUG6Qp8SQI%h6_u}Tla&xO;1A>F{eaF3|~M~-fT5z~;Et!`^p
zmKs||qTcWultwVFzlJ3tJRu_7bf@@`2XrW3p7R>WWHo%5bK!>|CPeX9Cz<E}LTy#)
z!x&X5^Z8{u{(8w98RsV@57Nas5H0?DZYSmWJ=vAWVgm>8^jwROvsgIbKw>3-A6GTp
zFKLdu&=NQ;j^^}9)>l|Ldfkeil^fY!g87G@g1qdSono5LCYS`Gpz!iU&VJ9_D6Wld
zOK5*|t!O$B?i>#{u#3W@_KtusE#~t=oOF$a1{xMYFj(#1%uV}zg{+ZY8JBu+VMAmD
zU}Q`gt|+g{u5SZ>3;^2V=<n@+=?uF8vxKL_Oo;zwS0}G>Q?(5EEK$P7(ihOkXKp}I
zoza2NU6wz^jr{U4z81T>#U)N@O)qwTePI5o*dM5_CJ(=W0`r4egCxYP4ttBX_s`VU
z4RUWLv=0`opvGD<lqbrZT-j(hg%YAziIi)XTS_S!G_xYHdqp+5Bwi1H8nJ(coLDz1
zCT!dNpk|81hdd4Wen9nY99Sp+x8-q%S7_Xrs?`Ftr9)8Uk~O8R0}}@F=+V5`R7K&H
zn{JgHnu-@93dDZY#Q4Qa(kksJU_g?)zKR^6+72rNdzZ}lyk2;sAF`o;RyvQdX1n1r
z;g2^8<-ExxhqE*;Ni{it29zu(b<@Z*DauwK*oqG7x4K$2C(8u{fSV}J*s#%iNWi`=
zwEi}vjrX2){s}SujPp1(AS>X#<g>(Zk`A2e-vf??oPjcdFjN&J(2Jp4P600q7A0t7
zy$s0!BKqA2euYgN&8o;;Dg!moKyshQb)*!~rHx3*{ixisy!LK?{nlb!G{{;*vU&~T
zMJpb*KH4)1B>Qf+%V4($-I~3|4H-JGDRjIV3)Y(T0G5&8@Q-0?AuH^L5ULntfE8{g
zqNwQ9nCXgvvAC%py2*SI*IwN0Qq`vG6QDiq=zD10rHObTzwJx(b4X&vk&#+-!Jc&9
z#Cy8Yb-4SFc>#5QyWK2gH=*9yxGiKJL1JAqD#JMYDp*&EEu@G^UbnTRedznDsWA-o
zkV-sYdCwDx7~U9HPaDM>^0lFtohk$?j#P{23D0}}NGO-F&e#GTx9MMD&s8dbrxdBH
zK-w_mPdY2%MI0J#h_#}6kgZC>9fDI9>`u<lUj->%n-j->4tRa~-p8apwc)BHssR$Q
z#H)3jGABtrxhr=Y2zCRzBH#|fUd;A^cIzgX_)e8ZURfl@(tC{68dIcRC{;nJ#$QFA
z6>?!0$0h;$llUxm)^2PEMM~R0!ETVBCGN%!0EHr|7~^@Bq9SL*OFGp!p5Jn(u;S?F
z*kV-y$B&YK?_VSMsMqYWS7bWH;-Hq`RxP)h%LMz8@0)<IZ17c<&BjBs<W4f=ro=<V
z8kwEgC?<O)-LJa@%&wD#zI(ZI4j^!dILwz$WNxOVVV9-?{~1RtVN-c~fb<3JDga&2
z(-yuJMDv4cFq-zsJ%zDGTBEp&7ASg-GEEFjDEwJ}ycKyExNnQ$ohC|)H2%IOP6m#;
z%%BOVC-{%w=+KGN(e*)tG46rVDTRupsDMmanTE=HmY*tNLgkJK<U?!!IUA-i(?%s2
z9ItYM)HIvY>{aNt$WLxaR*W3Ew-@)#oXMvE$o0k225t6w3l*BiMJWuYihp!F?c??p
zb+$c!f_q8(v6^vL9D+l2xsw4TJFo9S0*kPr<d;<kGH$5VQ6~u^fpW*gAfcI&T9c(3
zc(Kxs0Gub(NOE%O;0#IKPrifFiZBaw`aI;|6n^sC8P{X5EeX9d1T(l&urFluoXbQ!
zPLw@4X{p_h5S%948gUll_eKT<*8v2!rTN2uNdi8<7~H_BFGI6mtva0=FDnOMuU<qK
z4UU?*Pt#UmFmq^$b?ahePm#_Dg-PkO$>juVdAKBCpPBU&n$j|@<8IHlna!CvK-ewT
zg)~D5v5RW?hESaMR}`J`cM=e(=P^oyw4n@}5$Hm5r$F#+rdB@U*!N?@J!;|w9k%L!
zyy*Ggl?^@@l8@?NXFo<o2AX~akg)s{zIhs;{ld<)0mBt5%D&jS=@L&*2E`axGcBTm
zzGEIuHc&Ni+ylzTSpQynm3)mevN1Hs&i>0s>nk$m8-DYyC>+grJL(30YmH8if~uAs
zo6DXm&@3x=K!z|3Oh1QU+_4MVO?k6_K5}63-O64SUJ`IM$W%=;q`-H#HfF`+HS~0O
zWU^<%lH$}j3iHOytnh(0n_I8=jKFxC!jS`rDZ9Zs{;({Jud<+Oqu-wEEH0!+`%wIA
z$cQo^r%ZBL0DCIIZ$H_mFe^&7D+6eOJyM`J8+fBg3_@0W*yoil8^c*JbykXhHa})s
zfE(nH!$&!<qz$9k(JR>Mddfq^-Vz%FvhsUc{t$`p&3le0=$^<rO0-r3GaxtC=3L)?
zZH^?~VQnDX;anww(x0-giz$p?y-$e9f0j^xaMqA*{@R`q^L`4&%hG!)<So6>Ax?)6
v+AS19FeAg*QSdv|Sg72!8~fE5jPOf_euWYwpiY|EvXa>$X&ERH`H*M`yco$8

literal 7642
zcmbVubyOT*v+dyS4g*YZ3j}uy!6Cth;BJG%3=Y9bg1d#_?hsrOd~gVEL4#We!R<nR
z-}l|O-g<w$d#l&(+I6bBPVLjH*J=O&0J4I4Ih(petN@Sp<Q*VZ+zt>^D^+Q3X#fC$
z*TE8I`jmS#78?tD*MBGg;0!T`{hL2|dx+V;+u%AwU=DwC2#<FTh`p2fQ}hY|Km<Ik
zJc8g6*z=F^-v~h;0KhAJ<kAp`<KIdCW+)#6%cqj3CrsU6aLYK^JN+Gi;y;<kw5%t@
z>IqMUln__Te;NP)xaJm6^S@g@ZE6c~c6EOA$`EIBr$<i=fjV10`bR@zc)TS(0^b?p
z3HiH%j*kB5u}$5%WdcD@D*z&MCwo^%b9>LnVQ>Jb0gp>$5N8L|r`)3<01%K75QC8c
z0N{HE3)8<xqo~LRcxv-F$|EoU_W<N4C4cc){xAO+|BG`y<`5B(07#EM;1NiV{HY%G
z3I7Kt`4@kxLqPnePuL?z{1>Ofdkh{8{qOZK_pl1USCUhdd)(;npa8(bB0vU!j*5zg
zih_=YhK7NGj)_f-gN=oSO+iS6M@&sgOG8Zw1cDeinL%_M^gtksAS=fUZazLfT4rH!
zAs#VKUOt|uCI}c97}!|Y<TyCwJkNm7c>c%s&;cMo2XG-gilqY}5+EQEAUyN{XdmZ9
zLHKL`NO=;9gp7iUhK_-W^;l4k|8!DFh{#AND9De8j^Ov02Otxm5I*CUMkP`=MWb^e
z<_V0;L8pIN(@CQ7{TBnTnQIURCMg*?1tlXBGYcylAHRU0kg$l%D_J>t1w|!IEwJ`m
z9bG+h3rj0&8;C6w=H~9<>E#_95*qgY!^iOWgv6xel+?8J+`RmP!lL4m(%LU|^$m?p
z%`IKsJ-vPK{(-@X$*Jj?*}3_Jwe^jkn_JsEyL%_UPyd{qUtC^YKk0hX`EUD2+5e@B
z;87PMGBOe}+LJB>M2{!o1js1QxKRnE)zM5{i0F6%(TQKi<<xXy(DQ2iA~AFQj!DYE
zx5jw#B<-)V|36_t|0`wx5%%A@768~t2#+rhi2xu8I4$O*a5Czg>?U(fd!FO@gFu^(
zl*EcL5Gx@J+O&<$dz@A*Uo=Ny-tz12uz2|e)60C?65-uUk+;?kE_k<eGZD~@US)zJ
zk&(jQpA`NZKU~9o2;H-hiGF874XUCSAY8gzC(j!iJOY?L(xY9*fQ9!Hc26x<PqYgs
zYQ{MDEIF-KmWNtq!Y{lR70E&w8yW~gx%<HHe2KD>8Uh2aZsK%2TKq;T>gycxM#E;-
zb*)nMQ8iLu3tEI>g0C}h<|=1=B3vhuPO5Eg+f3?E(wtW~U1mMRMQC`uwc6}H){VUC
zTo<*w)W-N2nkR1)Mw?NFkUWIFy5YHcR-R~oWS;{u+U73;#i(UoUcOsb#<0M{#L}cI
zJ?f_rBbeMj)GkU<YM!Cg$HQK#j$S8Cr$-{9j7&k1aTp@#U;_XmJ<8HmX0dX+=uZmT
zQ-_UrMkA7h$hU<%cKq+$-l%v*=T+ieDju#byD&t@#d%8D2apFI?w&$>4UC@;l&Go}
zUfbAowY*|SX#7>NR37ET(R+B2h6`URjr1mjcEATFb4sC#Yj>;$hL>i06!SpV*kq~N
zzGYp|w`GLbb5QVjG{;UzWeM!r2?MLEc?_(I_?;0lp*50+C|P6>Kpd)L#Kba@q6+5f
zRCcylq}h^qD^~I&6jX`+XG}^J`h}|$-g+}XZoDuzFOAXgE9#GPO}xPneo{kf8tO*8
z9C?|^1~MU_OywTv)4xrF_YFedFnq#6CGfcyTAe`@rr9Ah>UD_Tl6lV@|Au0LC7F*4
zr%P@znxtP`GBR_X{76<~O22=auHBeSZ%DiwMZ(}&GKidHg8>^K*Y7=_j~sJI@ZSA7
z!+DG4S>5@$5z!RkmJs<X_u4~8MXMp|AD+NW?vc03pRwM2*BAo-+MHP8MI#a+HtQ5<
zWDKPD5L)%IPH$wWC>T1QYcmAa4zO`P3l|WkP?K762Q+V!cT#(6(J(bA9v1mj_&Hex
zIMzpSN0zWD_KR&QzyY6&BHfaY9A2jvmVdfxO}h|z{~k02yW)W5aBzP}-yh*R&0sYt
zHMm$3?%!Q315Npgqvn`0pUVt55eB<#aX+UI>_l?s&aj}|F3z`s=_MV9Ij$w@K^g_1
zb&-R69)M;cDrNJVyu~b2ZU1^-de#+*kIoh>*{LgLM*!?YWZa%Rud_;xaKMg}8y<FY
z{S9gaTe1BT#g=(9^t+T}(?zbIe0Mnh{4QRTO8(XGNC?Wudoe<}@BMJJO3&@$Y}_oZ
zsWyHNDBQG2%z>976QXjkqZHU=9^V~_n|fAhS*^2C=$W4zfXVXzhIq>B`zcD)&-~v)
z>dxX|=LGw_hD`LdmbBbUX$W%qz{n=#?ez6F*XR^i3^8t+uw}DNLRk|}@fX=Qv~Hl=
z`4Zd`jJo=If5N?wPUkjxcIte+=r)N8P4obwq>lcD+%j7-0m=_4hnaL!oPEF4i+F^`
zUVGqnGtbuR1>0T-Z+?ul92&gea{m(1UG{RLOQ816IkZL7In_wVZ81|G7~PDN!_3K5
zAF=N_7WUlL%(=nNg?#y|g)W+{hY;MJ`%pK1rrw_4Eqtg)q)VTH9QSuWy6~tlRWvjs
z%QQ=+*$t8x-lyzmbywt*LL|7rbQ2)kn1Ksz&1MdSD-9?e&G2isHQSGfn=$H-P+5n?
zFPn=V2c&kXyfaRrZ}d+!$AObPA6%*|LWt-VNao;lXhcn?!(&D-azgofK_Nu@qt{He
z>{HoYf~|+9o^JoU{^Mo~H66=ZR8RG#?E>AV)-Unr^nxF_j-=*JwiL<xE|<t@<~F?v
zF~*83h#f1fMfM0cA-8cgzO|KcsA7Un#MtLWUg`L!Uk8MRH9N0bPCLZ=iN%=3yKKmu
z^=;IQ(>M|PkLkkL1KigVPkuKF@2x1=w}gJ4o-!4aFJ>?$alfi;eaSV5HZ*oRR>GfF
zq-yQp#Ku|g?{u1xub+p_9l2^f6|GRze-mG$ZhKpGWGz#=djXwSJa<BqcVcT!`rW@s
z21Hp5>W-Dj17=KGDYt7Ya3*w~uPsB_uWIS|vcIu6VtU7B$9j7(B&0AEp!B@8<NC;N
z_2DRzz5jrbrl<ig=g&5YHnpsMth7Vf9%+B&jeyF2y(@PI0B0$~PdG=q(JoI33|3^x
zpDnGueVzH|P3c_H8!VmjiLk~SsZ6^54s(W3BzlUCSmHlbVoiaEm6k!Ot?RB)bw4eD
zK$^2se&q;d&w~nn_PTnm7KNV3rk}r2g~-J=s(>zUGR5iE*LAI@jwt2qkKC-DkGaZu
z`)5uk>G}v-R}~h_q}00G-lyNoQIiy&Un{gkX`h>87<}>a!z=W@4=WVVGvh-WZnAVr
z8<1Owi2mlmoTU_F-zwQOw#c>V59Kbd(Eq^qL59shnVlV9DKl?zv-1HUZfAZY*jWi5
zo^b>@aZu-yfdszC4O&<FUoR1<W%0B}J!2F)rH{{TQ63TP+7(aN+nbHYpd~V!Yv@pb
zs}&WAA<Y&62cSil+6(;b{vI65wq>&QVN(p7si|;)$;rT&W4#B<=1ygn&g3n(gPqGc
zj^cKcNfoY#LuV)bky~dU#s)Cs*NdQqtMd+03l^~@>u1elPDM(jySQw3N_E;9?h8IL
zz%h<+$r$t=q`*FxV>KD-Pn}Fx?gLxCpWkiGNTlvJuB4a7o!cI+Olm5s+b&eK70D8t
zWURvWH7tlVZ`0h-ey>1~gX>lURlyvcT7-%nNbLYd;%rh7Kv4|90t%8Qr!VFMBx)Sk
zZ$L(QBi;L;S87_7f{2fQm7;2h>aSlx$k|w}!~qmcpQNZqKixH!$dfm`SBh77#qD2i
zZ9*zutf&ogP6gq+z5!5X&cJ&_l0Hu_X}3sx2fYRREq(%-kTCj${=82biHN}^Ah1)e
z9s-(9d-EbAjB$<XyO6`l^S#;xZ#t4^JBWVA%Sk-|zP3vm+fEDXLxb{Jg&TGoZXN(C
zizg`e)%@CR)4drg#N7=-S*G@=#{;X;&`3YK&+Su3{@)KR!=IfiE}PbURemAm3e9+T
z0PFlYJ@WdZ`^yT-<Utjv1}ipt^Mk9L0!oaU$abaB2Fc5HKLLe`wkFHdo}*dZ)z3RG
z9cX<jUuAxl=N}?35SS2I&lx_Xl2~mS>6qel@-6n=4_lhk09-ZV1H^gI+Kv2)M?NgD
zE6~R&eR=U?fE@1c2+f$;4kMHPBzF=SuO}bq@CmO@j=^(uUPM4b^TPl2YhD9J$0COE
z51BMcicm$vPsYFEf1uNc=q(_S8%9+pBg2H5t0=NP(+`-wqf~D*9NK4Q_#I`yE+pzB
zWF;Y->(>Ren}YspY^^=P2gy3ILGsDY+>`Ax&~^5*M3(WzO1TMj1v4HzgY69SU0q`J
zL&hai!f+3DzR_mqQN!GT8ngKYpY#36#W_ur8Rj6}pZFbpW(AEULVYgLeh&a?-6@R{
zK@G8lX=>ht5><_qt`={~Q_t`{H5ZgRivU5n5FlP(h0Q(B6igZNEQkss)5;A=`uGze
zn%o6WtGRD*Mv}<dMT<#?A0_k~{tDK(%+vIBGOA?qfZpnJfi?ayQUE~hXJE8HBA|~=
zw2Iu=uoUCDy)t`QvW;>wh+y=$)TnnP4Vu_naamn?u*b&8%X1{+WD(E1fe?|r_eitu
zx7$TO#o06Kzb4PPr=rBo0epuuLuidn!NvLO>0gNB<G;+!I^qAoUukX}Fw8z+1}1bc
zQ|sI(_RczL^T`lnYdQ^U{Y(M{z4kuQg=xR*$}*=d)412now&6uhPX#KCZ9udo85Tx
zxHYs`;ltb=B%htiRUL?H@<}%>61)a!M4W|p``AUo8`0~n>i9FjvXDJUXQhEOWp1af
z6f%^|2s&<}xzZ!3N)R&`C~erR)^Rpwa2=@2rzJwX*dBRbrF6U0lAbJb_9L_>As5aN
z)0id*1ay8t630-_a#H${u#Pj1-`?=a8hdY-zF+WmxYZ@*lTg>{&y206J@!}e->Djw
z%lG`(M8A>N=vRbgkm6_Rd#UIuZP-~fs>!+f+}R4ZITb5g&8*K1^2p!`6I@iv@nD!C
zP&aKblaD~PGzliSA|3N42}d{%Yc^B!&08-bHobIKBV7hA;3{UH@uJ;?9M@78b^2p_
z%oJ#dHUnGf1LWBN>SLG^`KNqpXwpTVU5{Vmw8d0TW4+x+0it$&3h?557&Ieen>oG4
zZNn~NgzfjBp+FD+fblY$;2^+$mC%bJI7{s{#!uHjYG@Dh073vJh7jX#VF7&naR|=<
zg^C5@4?Y>Q<>jw23@MsS^|0cy_!3U8?Sn0bmoID5L{E*IIy85*E<I6q)+<Si-uav?
z7=n{UY+061UhLbqRl)rOy)xwcB4P!PD2l&bd7h4ndiec17IQ(A%3-DJdsBJDLgauC
z(VRa&)whbu9rigb@N{Z$0mCO+IX^m)mM4-M9I6|$c<FXiLEY@>K01$@+l;k$vbUwH
z_Hd^zr#eS`@5ZVhRjq}0x|j3+Krxw<;*uxU@S?CIs~G#kgkA}XFp7&&YC-(Wo#~@F
zvCue$STyY#F@lR%0hr>_$kJM0@)#|42UpM1T_Nvq@gBr#vTGj8R!M92y2hc<2PABm
zWqz8}4F#UpK#Ai!BIbP+hjcivx-JAU^`1}G(&kII<VmivF3lh_&>OjdovqZ_F+30J
z0T|g8!LpgO!ow<c@)QxEUM+DbS?p}x&qZ59mY1it!0f|k(xU!3SwxF2)UaPo)T;i1
z{4TVcB{p}%^3LfxfS_@oXPE66!ftE+g+!o}xzo#g_=BR5pNS&}Nx<A;^Zi5bjGG35
zE60#N?ZYoA69<m49w_+AtMa3kF9KH-Dc_o;r1k3ZJ|nQHU>_Xbtr}4nyYwo(oik7Z
zc0!JxL@X!^+r;kJW*>=Lr!qeYTi+^a<~9c6Wop0p(5Jja8%7S;m!Y>cqXAyv4>tuf
zOc|+^B4VNq%B}p`=xYu~0(QEmmKgsjGpAx?dR>BDk=K1rD&2Kj>Sz<07Cn5IKD<l8
z7(+mh2a{+M^dY@z^YDMgUi*#KM}NTvYOS2?&#_Kj9W^~4$@_&A^Z^_!=Rfq7+)$Y9
zNblNm(y%2RQOmqxl>3eag3nhUlNo!ad?vvqD@kbiaw}Q+Ft=L(?VX6;gJg>yFP7*6
zH=wXNn@u?U9SalH#2xT(uj0#rnBLpS>DOUfK{Cf!<+8!Q@n>LXmwF^rt0c^5d?`%n
z?Aw>LHW9a^U#T4zVjb$DfD~S_OS)4^nCjkTcInZi0=z@Idm3Mb1byNzkABFBq*OKn
z6A5_5b$$#C|C*kqOl%{SDc(yUgYX0;L7W8Z0^ef15O3^$Jrs-Q&c>QrVRtZ3IlJ|l
z+j8KTqQl%QI>%N%*mJU(4TY1Y+|sX`N~g_D4`HBH%bODIq5k!i6Hn@wpe{>tNFngR
zQ*$<rD?@x$Vq~!cK|;SE!O7zLyqc`lhijG@j}sXVfwnOe{p$I;YwJq`Im59jZ|3Lb
zU(s_cYXlT2&8nL&-{E|bgeM7W#B52(<L@Y{{W@=s4fd|aNhtWe?LVJ47b8%WyDwJT
z&(#vSj+M4FJ9tGhIp1CwHEpAYi8N`w$Sk5W=0kI#C8_N${mNIlZhyGdH<;{Ct;)-S
zM49W+3yjJc*Ho3ZG`2|J#ErCtI*CH?ZML(AnwjIx+xMciCN0PDTGi6@Ne`g9@pcTY
z03W0Qp|I`?eGk0r0jUsrUc<M(-1DzY8x!)2bD8fl>ponK()!YqrdUw1jb(HR96K=A
zUkH1PM?_-z8-`i*U;5@AAQtROd&);|_JrF1aCAy}2ID#WNhCAgw?+$)N4@~(yn8z~
z;^GXRv?r&YfbwZRc!{QQb|sH+ms24=$Cb#X9r{%_(2t**{6MU0z4N>jc5_tfPj&Va
zzaJJ#O9#*`&@bo;qrWp+g)}ptB-0Jmd)p|nyH`mM(Twuy<qjvRoP8S_HTcw8^23}}
zgYT|MbDh#1+v1K&_N4MMd?;-)!043Uk<H2k;~CQKAoH^Zn$K%*^f2?aB||*-ABM7y
zE3$A?5n?g?y}S9xXEtEYeq%f)7RxzG6jRv}XlGIq$#X6ET_g}eb<~~Uq4?7XRwD%R
zuYD-3H=2W~V++bN5`K(W_5sX`E(C9Lm9fodcZIz=fg=SmOC9PP(T*+SWIB>x4HjSO
zC%m%@#<A7pTg4LzE2Y1>bH@3QiRV*D_1^Ha_Qd4DzJ=b*w`~TzV$%_o6lT&;vV}3!
z^D|`Fy3Aon;X+b!kE+*3g;tzuLp(wCW};0+q-8{5<KfCF%MZ@tj|nHylc%;7CJG|s
z69UgaNms&ul<O{nGAj&f-R$ww@43>J?xjM|lwTziD}L|=HbQd0zR589nr*mk&c8RJ
z0b`k_zE3xP@IXGQb9C<Yb>h6h8J_*BVGn*anv4_TXr^bO@DYu5433ev*p;Qv9U;+C
zO-d|(V{NE24vUw2f6csoOh_qbqkv%|&}mO!xi`kz56u3N694`5y<XG}Jh@?z?m!f+
zgz?Y30!E78&A7MZWzh!7c$ImB5n)P*{6(18=w8X{Y;}cEidaOH(3zm@x$tWf{UiE?
z_&mkT2gjQV&n38}qU9-H;eabZJ;y|Hf|6fv>leCwU@o2ShcB`Fh>)J0q9p`QSzcdc
z|Bv^1j44q=B$Eg4^nByXd&#b<l|tj(Z&SA{*<7LEajO-<nk`I!yVD&?4&3aXQ5o(G
z`js)kX*C~^%W41hFcYy0N?N0ntG`#1WRdZ@BpuIe3({!;;F&T=f9^2rRdyR8&YB_f
zvG(yr`xzl37>CEQ7B3DZWKKb^Los;z!=IMZKUp;|+P$d4>kqEE$<6{<gQ-M)OJl&C
z1%*oOgralsoB>34qtV$}_&0l_pOw_Q@J$?d{5tL4yCBlUDF+i?2aDcL@nt^!)44Yr
zV#j}aY3_DZQr{A7@7JzjUb4mSmnW5A5pZQl34Rrf?;AQpMXixOhF5Hn7_O;s%WmDU
z-L~L6uGI_TeCjP7adk|GsM3!w{SLcQ!jCEUo69TuzHPW9+44qZXE?5=kzyytC>7iw
z^7*`EkgvmqR!Xv8yfwvX16B+EK2f_)w4t_jGi9k_N$aivHH6PW(ksLB(Z|<qcCJOc
zE1;6m&bM;Tw9j<$|ELnLPcT&#WZ!aeb~g*mdg-;1b?(^e=9H)7n5XOi_Ci_YzAj{?
zGS5pp6B+2VOD-!`9n5xuOo6UdM{vyeY`#^waV+;OP^gqJkBcel8RMtVvBJIFy<vAi
z8;Vd#k+syfcxV?_{zyjL-e_VjA@A71__f{8j&UTGoje020j+tjMz29;P2#<WW-GbX
z?x>0*twXaHS7qPG68RbrVZz=Nh=rx;dHL4L9*%==i;`<ha6oO-Kk8qfN6PLPlYw5-
zuTa^A)O(%}ntmxo@ujOv`eP6?evE%s5QI|?D&D#AWg$xsk{e{uLwVaxhX==ndYPNk
z%(P=J(u>JBCbp)o70%Q6V<F&;h)Sjw7WNUL6Wm4_w@2j7TjvAb{7w|rlj!;cE)rYL
z<T713P;;uR>AcrBJN4X~qaE%mE!i*{8tHlH=tx#~KsKWDy;o)J+W(+AKIZG*lxJY~
zuF^;KB09gaK@KF)BjQ_D@8U1^Qgx`qIoKUHaE0;uQ<z#^W4dI(gv7yk<g3Hn#$$Md
zraZVWqt~8?z?Ter<e1R#cm#C2Pz5y!4d~Qx(7#1k$-+yYj}i^UBe)PsAfrzuI<<6P
z8~g2hlsDb5SlfDUxN#l`??bz@iKb&k6Xzm2jghx)INckgcpGTQ<cGueXU20DYo+6L
zm4nir7^0`_4g^MG1$-GjfunOTRFjESY4~Xkjh)V<?l?_$lfENJZ!R8sx!_9KqmMJ*
zS;1>4zrk$|n?+`d@oR=<2#<kicz%BsZsPv}+-pE`_ON-b?0zvJG#rfYKp}9*5zK)I
zW*wHoRFSIorm9zceyXlupv(Enf%JtygfoF5sDe5Kt7HYv`-x7NYWlOBQhg|H>Nn=^
z_b;YNr{ekVm!v>Txieu20uqhgjOHO&qKCw#sz3YiE(}>%G3UL{Dw!5u{Hng*+S`>Q
zp2xbE8dF#w%8-pxhW&gFKPO4dVI2bm$%4yaW_B*mSV=;OjfH-Vn%+@36EQ`TX^Upo
zf}dOElnv;V-?34MJU<pMS!8kbOGO#UuNcm13CY+^{DS(PaUx%oceaN|yZ9<AIhX)b
z3=CDJ>qiVf^BA#f?BIHrd9T?m%-?6*7%vkmSxN~W=Sx<2d*gG<cpSLXv%;6qY4%+W
zRSy`xlb$r`0Ke8QQ$T^4OH)w^P+giBIG){T@hlpSSJLfTF({!q$RW#*I2RNF7pnuO
zjLLXquiMV_BoY=7#!!SQW4)ozM2-8uBk<eENt7_XuMg|;W*R?ZW?3O;`Q4x_y4U@D
zLtyTW+MASLnv_x0f`BE(o2<i7qZj*JODRf`#F%*QBNw|?Y#Lygxv88lI1ZTC3i3P^
zMbwMNXbYvL^rZkc=gv_TuA)j_j&p@%R&ab=3lH7icWX8ol?02JdBCYJJ9P<9KvwR;
J^DfpM{{?im#zg=C

diff --git a/README.d/13-install-custom-script.avif b/README.d/13-install-custom-script.avif
index 2f01c43c0317a0258b52b0efdfbf22110c897da1..221b84e254c94f06b18efe876c622e80bf04a4fe 100644
GIT binary patch
delta 2731
zcmV;c3RLy&Bfl1qA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951TEC2uiC~0YKW&i*H0004zoE?$u90e!<004HA
z4FO1h3N&qGVRRAz3I;eOvVN=*GM^MoWCGZ3EA=XQAkXW?=cr#3Gpv5aU7Q+))Ebcx
zmfJq((i1Xy-imuA?;knG@>{2IVg*WVkR3oHxJDNq%NQBpShIjHTO?P29GXp=!Hjkg
z?ER2k4e=3@irys}@2xm8=1#0}YcUO~NTVEo+s3Cp1POZ}TMrMkmk*7*opTd4IX1|}
zvKoZq-y!9#ky-W;X_-EBMLQa|z7*&SFdPc*`uffyMImJxd;q`r&IJdt9vlN)JY0Vd
z83Ica&;X=?=eXWJd`_qA+)eQ#B^kHtXgyXC)ZIiFC=y`5y$s|{VTDS5481~;m--2R
z0H_IJqPPJorktW0${qxjjL<`I!PKo8tPXYge{$0b#L7fgfniJF1F{2tYK=>sjhgL1
z>l_>giOL$HQr^Vc6yt|(;pnxg2|%0To>^L#ce{;e*cb6MC&zD+gdyI$`<S0@+L|G;
z+ZHl!TZfdvl_|5B!(l%(ntHUN4q4KF!D#L{x@nW>an<}~HPP8y?s~inijJ18V1ayO
zo;WW|-{cuWoQ=B1$nvZ~1dM~#K~)lr?6t%4Y2J<W7ks087ZAPI*}VS>#-eKAar>`$
zONs<G7hYjzmoOjM;~;0GZbnXrpI#M2)j!+1E~3B>+CR;=ybcHQoIrh7I^$t~FkrAN
zB_97(M$Y~tC<nQ$X6$Q3YWHs5q5ac)ve@HDb1~egW^`jUr!U*>5{_Bek@EvROGeFZ
zY5vU=R70x35>EB|ipJIR$)9gW_K3d*{OH0;HD8@);*{PSqEZ`6`*~ko#Vj0Q7?Nwj
zb~u%?N08J;m{Uo8`geWu9o4~qpO0Ini~Lfvi{2OGg;hn(G^E;p4D4LwNo1=LLZ;A`
zi1@PkRH=~<OOc%JYnuWDg;!yRnGFmjh=wF{N{M!(2V*r@(J~{ocL+GMzbF3m(fepa
z#xOq3f52nKYvNnb1f+71Z)Jd5m|9y|QOep!`3l-|ljfHDX%6&2@!Ly(4D82rB8cMA
z9ElGLB4o}iYOwbeXf-C7eCg5=+GXe5Hp6{=MefLWIlVZ8c2sZ-{a7)#ZT^7gOxm-P
zFV1QLxEKq1T9!Co1?VoK<6#obZGIspwA}0r@5Rxk(wOiNr=(brLYDFE5W<*E{e*X{
zW?1xh#BHBF{Ab+Ww={u&08{#Q6i^<#a<LzA@JQi|%2R9^Qd11qp7)X9UE~LwL0$|r
zh?6pHH1x4#&Epf?bl80g3|dUz`_wcAJ)rL6-g@rfDI;N4eyvc1CPo}^>q7n$G!*P=
zET{VN&y>E`ObU+R3OctcV8lWOiU!9y$)G~wDQ|~ya+bG`#znAy+NkWdoM8Z~!uiLp
zI@xJ2^Z^BIH731Md@C;B(DY`GFySQmr{~LHyzc40euZB)#6Nh_z_W>mun1DFULa}T
z&tPyxji!8P2z5Qe_1=EHW_@JrEyZlSH~bja2k45Ut45C6WrkQ@FPIP^PC+dqc>ZN5
zm<2bTJD(w?oz91U0&LC6iFZ7E-np%>4xUJi8jgjRH~#C3NGBiyYphvuvG=vp-C@VD
z2~{f^LT0v63ErNLI2hX8?^O(GUyvfetcy(RPyLwK)l4C4a)|z$Z1v4=&jdW$QO~~h
zDU&U6_ZqiOsZMyQLsY|0|JC_T3J}Gsw;eB^^j5kYArWPNoVmX2#gYF2J%&@+9}U@$
z00Usr4RNJtrBwqN(_6N^*#5T(loCk>OK;CSZ^BKpe??>NmJm!Tf)a`KpgCMtT!XG|
zu(^?!n(<g(i47e8;VhKMV!jw`Dl_W-*zpFa?(pX7x3?DaM2k~<<vTaI7hUJ(o|GtU
zZAA4UwP*-`IXr-g6kRcYoQ_e?6cAyyq%$c+W4r3Yyk$N%h`Uf8W1{j89$IrcO{NAj
zj%EW!dDrlyYfk4dS3{IspsG;iugrz7pV5aXw?<Mv_DYWXQ@I@bvb6?I&lw^lZQ+Bs
z8W00nXI4o-Ms7x{IomwTCle01DuEov!uKANp~F6Z7sA~NTspVY^%h4RkNz&|WUsF;
z`Dr4b2kZ=i-}1Z_tlC)ZI7KS2z;&&)65IaWxEH5HMbzSs4S)5$SoKN82$h8iBks7W
zH)0CD5jQETRMB9bqp#rZTRJuN+9l_TK40E7eaP3S9@kj;Zs=WY;D$K!mvuCt&oHLI
z@<qabo|*Ln)eW8;Ptez<ptzxYHCsF4t+)(Qa#VopwbX5w@sd<u4@o%<%)Gu671@Y)
z1<Z7ykTa;21QZ+4A&|2&NGaQ|Tl10b`F=)!KZZ%1_NW#8(0E6P$h2FOv>gi%0&}>7
zPMJ`FV?_yL*w9L49Gs9cR?SqjMuD(x!9=uwkiD&)8u-&*G@O+)l<`-;-%4JRAndHL
zd96@BMXvZ`=ab+dRMf@r06uzO-=pGljL1E7)E@d7oycfiHmG}xkHP6dZvr?>L5gv<
zGQqD`;S}c{TT=lZ=bDh@%RDFg`@2$(G)~fq!~i3DN+>lo-(2Jby66)(+^8yl@0(74
zHK`WGB{3j0UIqsn9}SU406^b!5-2s`qS>nj@NoiWyvW6&@|EvcpS??0V2V=Qvm_T&
zeSEdpj!R6UrxtTzxW*%HNny)8jddY^sLfyi0zYDIq2wd)b_SK_N!A6if_NCO%`(2C
z-WaN3uPmr+>L+BDxX)*-6IKj3DE170L4T`#n}drIY58Ef%9FQ>ExAtQT&t;^ErU%q
zYqz~ZGwh$&HS?mb4SbA$pxqn?;Bo8o0-b~@UG&)u6DK@mO)<%p-GMWBd2^qn^|k3n
zGYHzs+vxUElGCds5k63~KSL1|8jt{_aP`?f_8WWGRg~WU`176=mO&(dB)_eHGC>R?
zU6|zENiZA#^Rh*5Mpd2>COVV(fB@~r!9)Dw6WJ$Gf6Y+fAF{R7O$7Sg!gJ~!y#8Eu
zS&(BYw#1~3JFYn4Gm=O6+hb!w>V_CEtN-HSqI>6XG7=w{`l=}_&Fz~6BeOQXL9*C-
z`8T(PP1TT8W37=uC1d29<Mg+G*u92~*o}OEo-VgJY!&)3GesgQ+`IrxiF$U2y^UM?
z=)U`ppJh%wARX1;t6x46c>@1X>BM*0#9@3WR&wvbGP~@yPh_g_MaviuFw3e;R+a?&
zXC`Nj$%aa4*|N~0mxwXiFZsI;;(KO4#N?n%GIPWGSN_s|E}T;&ix!H1lCX94x4wGP
z-|*>~$zew-D239V_GL=16o6j708Qj^!egqR6z`j~2JA1TqR*+)wDf<}yuhPT#G#w{
z1SQEm*%h~$h1=CeUZhA_Za{(=iHV=q$gO6r`8Q#+s41$R0l)fq3TZs9ZS<L*vVE$H
zV02FI^ZHkd<iSFwg;E1XxKr)QP3~>N%lW|9M4|Ab!A-KKH)qLfEv7Bq`vGE_CDjut
lVk7rs3S!DDeGIqf^HuM^PQ5*FNYGQfbs-Q|r%&k4_b~jMF-8CY

literal 4589
zcmbVJXIN8fv)u_Lgx)*Sf}k|PP!;LDh$u}^q!S^K5JV6W1O-Jv=}4E}1*F44dQ*z@
zVyH@_2%$^A3Fmy@z0dvi-8=i4J!@voo_E%}0RZ50^72L5dLx_wf)OJU;UtAb*g6@i
zN~r<>=ql3D%a+IyOvJ^(&GT;v04RjL*S|0^x*_cTHHH?2@Isz*Ai`S=;pSma%rpQ1
z3=k^>r#t}way%hF&p=iH0L>&|RRqHQe3NsAlaM$PTZmuSdS8)J_i*z#Ux4G^41w14
zK{yee*vN_Sbo_e&0MObyVC>J2Bp&(@f$~HVqCNs;??H&n2n@=R5D7*CBfRbqoF0Yn
zL7Z18C@2V#+SXf2{W%}80x;QoxOuwUyZI27p#jJP2_-fJ3TaE^2nGT`q#$rGDPc$w
z(!uupYIJok1H>_eRR|6RP61M)l5;1t{}T!MKbVuifk7ky2_Xg&oP>ah{p3XdADHDI
zOzZ=J|DF><z~Fx{8<da`jN<$`n>d>T==HR8wFn2DFA4x>(||faK~4@KC!>HsAW$d;
zB{ee*H5C;#2O|?5GY=>41s+arZa$cVFrR>!AUC&&+$FIqQgAq&S6D$wUi!MkRk$>9
z2nY&=Qd3d0)6lR>^K<h{|DWxw8DO9QI6(xl0sxo+M8W_%YX^7<dy;|9?QbbWp(Lba
z<PZudB^9Beik^5=Bw$h!GBQ%arGxwlJV44o#>g+FO3rl479xOVmVO@ffkIHNyoJT&
z8y<Gm&NB!~$;!sg!6|f6Sme@WxQwivyn>>-hNhObj;`MAJEmsl7M6GI9UPsUT@Vj3
zUXQ#V`}jTye(^FS^wsOI=$P2J_=LpwNts#MIk|cH1%(x#Dyyn%YU}D-+uA!iySjUN
zhlWQ+$Hpfnr{)(HfBam+{aRkx+}hsR-P`|ja7ffe)cG&_TiO58#X!&nCM6{yg%EXt
zz>kT-8A!?arN|joZ$WI)Oaju+DVWuwK9sjW1+SXmS?oN&QL@6|^Fo_MY3IuRGhsph
zFJ=E0_TRdu0BRBt;pdSs0Ls8tUKm>>$84K<U6{OaSzw_f0|_Glth+@U-TZplp)zP_
zABQhld)IvG%4f33D{02jJ-3;HvGO)o<U|;MH(b>J5wq4OHg*f($)$I1_OIo5D#^FA
zI#W?a^=Aib#^p-KHsEUyd(AxzbCkNEbyJ~VLFsZGw)g>l({rieXwt@HxM{dxK>E)^
z7k-AUwea7NcX{r#&@UoWjlt>artz(h>W0pM1x@7y1_6gHEo%-7VDi_KQmZuiU!ose
zu`DIF4x5fEzr|W_gi|r`i+OL&I0xkA8tT^p)gvD8Gl2D`)N^$*5v`46KKD6iF?5%)
zk*EyUwImVPbX`o|fMdqjkNK8&?-$)TDXYX3f+?nqbOx;Hx{_R1o^d11ghREZEaMZt
zQm_54iY<H|FZfeff%^wK%nHe?65oo=-V|tqWx&h1JfBumr8uwX6xMquWPP9P5g)6p
z9xC9|u!Gg`ksL4vP@8IQh2@C!ZOiUeFQq8rUe47`pS*CWqWl&&_bJF8wr;1REIJn)
zRiCB!`6aksJHw#xk9fUFJHs$U0occ-KMb1H8FZ?O_8!gF40AI39*mJ7AA-2eH>Ax*
zT>Lb2+xU*$`dGGse*RAs*O%Y@sJ}vOIzOhq_c!C2o#|_^Vf1mI!7JbomFf%gBNnx;
z`!+^DNm0biIx7|GR(&SB)EK5rr?)KD5v|J4D<aH}6K(k=HLWCN%A}32#Jotj?;D%A
zwfR8>gl))I=w#d8NE4+IRFR8-Zh|NTXM~QVri|8*t0{|V=@A#cy`Jay!=9}9&y>&O
zM#M@>ysol-DOc+K^b=-yu+_?)&%TIX?&BYARAMeyst)T3Y<duN+}y4cj^dK%G7UYZ
z8p^rH+eY=QdgEjF=5?XI*0w4^{|R7Mywm8)HH<}4v8>r)Y&l}Pa<7ohA!6h>ODXi}
zNR7YYJQ-Q<=dTmVrueT(vC<Mj3nN9o%eX6c9X_HV&0KYzifG-FkMk3y$RE{%y@dx&
zE^%LzgC*#J_DE>I&Q7Oja%PmXro>;ibg#rW;8+FmwJ1gfaV*1rhFi5K9SpcSmcyCw
z;%RN0i=5SSvI*-l?C<f&GhorWgBjF7o0S2Tyo;pstVpl8JRsbQLVsSurT!%~IQpvU
zFNo~vv!GHF5OeXzN~spo=c}h<80%4H&}d7M&s{5Lt3Kw?$m^Ygb`9wa64JEj7g2Qs
zVt%^=N8TX`S9MvF`68ZMe4F)d_73vB{_gtMCyaFR#d;zn9~E(-0`a0%-{zxrVcPLP
zy1?anp2p2?b8d8Zzi;vH8{2Kh7bU%ll5-`xP>H#tT>#+6YjfKIZVWLz$(z5ae5%6a
ztD($`@NbT82zXP5-R;g*E%0$y;$8DxzN)W4dXiB~(~xq3PKDy&2|5WUl0jQPYlhE`
zkm(zXG;@6LO@Jvl2-ToU6^`uJwjW8#eH1}|Q0#Tb$;*o>wXm_f_d7i%h86W}rHq>s
z=aNC2D{j?Vu7=L&b(ZQ)PBQ70<2Od#G!<4j_F2e8-fYDgJK4~6iyddO(6l9N%b|3!
z;r8KA#^p2t56yu2Z;#}XvvkHLZ_`^&DA(FIK=9z=$(1w?HaYZnmuV#I1qJ@AwPJw+
ztXxn$@&$Ta=IbpL9<tNCjGIg{rD66dZqRzI$-oarDz-75m@eUzapjpX5t3o#?is*j
zxm+DTXyGy|o`UM~5s2xF5UROzyEeU%<@p>vds2VnTkFx?BiEP1a6i#krKY3egPHCo
zwFAPDDywOt!I_1d)twSDzNOhE%Vz-Tj^By7`S3b_1*cP#P`h!VKA#qH?x(f_#Qi%-
z+UicB;N7tsqpl1ULyv7b2RqYl#~H((HP6{5Mujhi@5r>>vdj@(`J!k3_{oK!L8<|2
z{e|uaWf7H~N3iN3I&80HtfSs%07_2l+vPT{ICDAao*GwZS$QP<u{bmRZ)zUBsPXHU
z<T;x6i{hDjKhx}5Xp{=L<_MASWG~$q?KNdZKD;0pe+&<>uZ$E^%($aqJdK&<I8YrZ
zkdeuIQ@S=EDN`~0!(~b!x(6!JWMQ1ay>o!s6=q-LK4AuZ#w<)XG?<3yi(iksS0t$V
zS0FZh0rq5X9kGAmN?p>B3zPoP1L-s1i%v<CBTm>|mt<?BQ#3U*P)_D8^Ng#vD^jT{
z`yr2mIOP?m2Na~yMn1|J#fl;s;IRM9>CPqrMt~A3FI1uE#>byABt1uC-~h(L)$L|x
zn%=?^ZeOhO$}fs8kdVZ!Ey2{(%HLmv>-Ave$!Vn62H#iG+}rAk@{McB)iB>eU}t1*
z+*Kao4QTXmNnmua0e1)Erv|iC#(Nvn?XqPy9xW+q<!T37ke9(DTIhBK^ry$C3x(Ec
z*h$~9Rpmd+5@=}LOnRenYENo@@eMNW&ZO{oDMz%K$=>Q2Bj@A<f)DeNoyKt@D>4uZ
z{xecu$yq93__pNKWWw<%*QYJ^@LIR0xtc6B!XQ9$;;f@P&!UMDMd9QYKR#lFIE!0<
z>w@!|GPlK_b@WF=VHNpioRavna#JlY)o_S4&#%$pPAWMbL7?|h`pq?W|GBdHpH%i?
zKRq7jTj+Ev6x!+O=BT<RG?H*HhI2oQ`D45~36AHxofw5#<jqoLT*6StCHh&oxkisg
zmZ?+^RCoRgro_Gg-JWH2vs~GC^W=h`c%*=Fxql=LZKu@>SY*8lMxmj77OGmQ8&lcF
zw38yijuDr9Jijpa>U@yxLUk;Q1W_#QSE_g}*yQq#-`H+h4kxX4KJERQZ29VUV}$3+
z<eVQ71qIK)S%|b(mLQ(~tYBl9dG*S@wIT~8faXh2?C*tdH&ak>T{<C8YeOGsQC)n+
zLM`}$PP*_{%Ab(^{p@_abOqjkg8h^Hl8d=d)2)-jpcU~uo?Bn_GD70Jn&s@^N)r+3
zO8qrz+P8k%h#z5>NS2b;5<fLBGsgDMsWND8>mitXY!bi*Q~3u{NG8oh4RjE)Sd7+r
z@#wRn3nj$L(1R)ZZBd%GCsoa+^!;NspQ$`G42vMTvA{j=UIF7!N34!f4D}!NX3dk=
zhx!IRj%bso2R^yC<sG)9K0I<FVW?@HvjOrPZ4460U;GffZzY)2r$SoT<(7KvSD@WU
zZJ~_2iUrfJ9#WzuQ}{J5B(5kN`%{xXqM&vh<&@|jW;{KR92Y*gkez}zD!nFKn^?2K
zKaYb+*cRvUGIgc;4dt=?I!RL3?AQ?;g)%_ZckH%W5Y3QzMjLiE(o{fgPi@eTy_4MR
zHEYacM%H93uU@r}VlrcN&gPz?*t>RogX#}exTT$B1Sp-x5&EIA_rcTt3g_SYAMa-h
zXl_>@KW!%yIZ5=DRob^MySA=)>D94g<3L<}dv}w(|GwScDW`*ckf@~sGFBsFWG|ti
z-hb~T&`Ma7zef?Kz5pHyzuv3<2HQT3bG@0$ZZXoM-M5dETu)HuTtc7p!DE(SXNOC(
zlp;K<uxLvruHf`9m<Z%nJl0{G$t|sYLptv58^n~z0oU^SJNTXALkA3H*d33)c3W?i
zCc3(yO^&X$g~O8M9~bpO1@p`7Y;)*O?2-7hhqG>}a(LYHRI92FS|OERSp16yA}VY|
z+6|>c73@W=`CnFYk3E~1&&6fltdn`>XN0k^+rKQ7Z2pv_k@0D4drm<KO6F|S@m)-+
zpJl;&$r^th_(O<a#C^ft%0rQGdAqjN8t$g`y!{6Y7ZI_W)Qy@Sz*j9cjCXkXOmC&M
z_}9d29G2&g3-d~FMdWei`BH@U2)(}^Od6V*6FGL@ucE9$o2tX<c1ms?qp553wSZ6e
zK0WO;`*`F~`)T$g>e`7Roi?^5Sg1rY`M~sA-Ni>ITZdsi@4j>Ex!YXVUS^t0d?w<;
zKIFo+Yh2PL+@Dlro=l^BRP);{q&C~SrU|l(nR-^g>IE~sYAxEQeW9ql*{<gSc<|xT
zgL~q2?>YYDxPDO9*t<DjJy_T7SvI>BzyzQ6$&s{>&53;Nw{T*eIzpq<c(Ep?mN8_H
z(X;vJh9>zywocZ%af}Z~tS?783#heVdoC_hOR8h)v_xYBM!jGZ;U7JqY4<*kar225
zzfN(SdSxf=fP~Kj9;Jy{Bl=qYm2U@H(423LfdRp<YpNC|JL=#4On5V{pO@xQV5-ah
z#rN}NSJC?4$C?!fhZR2paQm*VH1%RsJXA%j(dd>}y>KcAGQpDJkXD&su22jWXZ1at
zaTnbq$r5wJykQPBYoDb*<QX$J$E}K-muo{eWQ``aFLOas4RYwxkrM*rt#1n+3m%y=
zPu-Zb4x@n#lG`?wre|s@x6-w;VFkOkcg1=5ihRg=qXOtJeb2mqlqUKYC{RS?NE5Y&
z>B?)1LbCRfeUCp`+#CW4S}Lx{dNN%R+DR*KHHqu(NsM?^dEmNgX>C*c^6nu%)^F=*
z=Mr)>?-ABntfwoq>0N-Yv7^(pxQm)kN#|lm2CM;}rAw){U;ztxYrqd#x;EisVQemT
wpuiKfK<lfNyAh2xoCiz1TZ=%KifR~;89aGHI?`6#+mvj9=t2&X$sNJ}3qV-fQ~&?~

diff --git a/README.d/14-remove-script.avif b/README.d/14-remove-script.avif
index a5c7dafc45453f0312829fb9915ce401a333a2ce..3e4c105a717c429968cf2899ee15cb1cfd46191e 100644
GIT binary patch
delta 1641
zcmV-v2A2872)+)GBMs|qWprTx00000001G8FdUInC<GG#00xnNNChYW002gj%t(I*
zGi_vHbP@mx1~?_Mc&rjKo(x1}0AYq0P}p^-v<eBB3?MId!rP;Y`0*6TZXzYr8v{(Y
zSg603NSx?8|2=KTQCG}zX8`hI1xu}}{7!`th*wr|WAIdU0!}Fv+~wJVLrtGIA|m@R
zJH}yw=eXKT6eqN<=7Veo9VeT(TPc55@)cVhNC~6>v>d+invLs_GT&7Qn~jxb9$CF3
zK?*8GOY9<vtz}`XNb~?A>^=JXP6>Af>lRY451YmajoQCe6)~d85QW$%M*M#o&Q%8P
z{e<UNX)A}Dghqw&*h!6F%>>ZLjrHCXxqTKt4MNG+t~1{=iso=sp?uhAYz%+#bKl>W
zeTF6cKehOCGS>Kde318_qFtI`fl*)hpM0u_({H&z1}3?0U&Vi~q+}5-i%AUSCt#sC
zVktI_j7B!BD*vy|{nYqv82T~+Nfh@M>1RG}m*Q%JcK^H}w!Ap^_^D}&4F>?2NsKba
zCS#So#AKQTcOPxzs*-Q*ZV!J*hx^ULAvnaY5MYF+)jOFoaT6pZX0=b+s+H~x-GeY_
zjUFEeU73AnK9vlF-Wnp)t^Kd*jTbUMDYDJIouBD3|5*3mOdSuGUCw2Fmn2cQ?Lec)
zNMs?eR;7R*%*#ycWba4uHg*_|gN#?-V0v9&b!ak{hCM!z3f)!NY5aehzZ1uI8~HE_
zh@^hiT@}Ru(d;@^>dh$BiY>-K@b?P-Z=2@_3cGMQ9Y7rnLXCERzL)FD7mUFQ5J`F>
zE}c|X6^WrS`N?(&&e5$GCPcZX5W9Ou-=FOvFhMfA=fu@4V?6~qeBgvIa2Z}Z=j^Z9
ztcP8cejB`<O&Ctx8?b*cMgfiGf{O+|9Z_JD`H4VMq8_PHYh?q`Fwr}r-1s^PD0x8D
z(jd+I0JNS%vf0$N!4VpqqF!H7DGXLvUmn`k#*@s35@*xUxKZ>zXQfvVUotKADt2ld
z(X&l0;H^x&p#V|Q^TkBo@J$2%6{!~!sUhYcLvql~0!eEwR!e`5hX_u!`eQ1^d6Za6
zC)n}5dZ40uuaYFma;{gCA@BD+Y~4>=>Bi!&n+@5(R_9^cKuf>8o{r1t3%~tr&bFV$
z#9ZAfN=uqK6U2pIXdK+yP0gSDFv7%LdVj?WU3OEY6D7fmtWfB<xob+GWv9H5ckf=3
zz62TOr?cG>2uOb+^OlB<>?u=F%#9$zGnK5K?hpqGt{hOd$g3GRsh3wE_!>5(q@_z`
zFTqwU%$ciZa}5uqxc|RoW6xA|5K|1N<GyS7?U^FW-sn$hB%q?DM(;UoGq#I|jp70r
zoT+8DBKdgAdY61;UuqPgQy<l;NwDOQnM9d5KkpYe7fOF}sez`o^kUU%=mh&Rg1Gyq
zV0E!e7Cx(k^8FwaI@t(4f&s4B#Y`4M!K5G1_Nw`-0;66Byb1?@(a1U;O-yl!?pd79
zIyvfD3#YWV!wgC75at9lLIWj4dU!|uXvpf&tr$`OvQ>IR)7=4$p-47l6ed`5#h-9{
z(Op&CZ3=(B>|=sr*7uZBy)XT)P~h5{NfbvZV|3n?%JK2RVWUyjD#8{Svi&Le#fQ@;
zoqwrD+BA|f+Y{^4??PN5co*4tBy-0qR?Brth7bFiubk)oNfNykJ1O24>-xEYmgc5W
znFuKb&s^71I{L00b9Fqnzp&j<7wNal0$8-0BOHIQ=0HJ7-(`uoP~q*Xgm@zNMr*j5
z3>k~dOAFlm^EJL-U7*x~^OGMhrsc<FGQU@FierOhRE!$P;5m=2&Q(J>PTXV`+1NHr
zQaHk{SHEMjwEy<iKE-I>rf1RQZO0Rt#&D&Fvcw;2Wdx|4gA4{UF4P|(A4Oe1@@6P+
z%x`}c6e4%4NSML@^&yHzqE@5lEdAUTP5aZG$KZ*kaOG4pwxLdfvUrX{Jn@!#%I&rh
z_*YGgNDB7=$MP8Q^(kg5WL@EXY=fC@J!acBqQTw^ccn?@rWce7?XSgRU$j2;@<U|x
z>k~jMlt~d0ATB55_C*>4JAtQB@!Sagn^rv}AoacK9taaW#7QZTTx+s{pQz1X00KW^
nZlUBO(mpI+l|vk;6sd5TzLR%_#3eJE?OJR!%^dx_XT;yP{Z1B+

delta 875
zcmV-x1C;!}4#fzNBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Gb+00WVDNChMS
z001PB#YlexGi_vHbP@mx2{<KkIM_f#L8LO921LjJ!wfK>+=V7)H2&v#IDrm&W^4-C
z^@yS?d>UOYEW~3is0zSkEO@i0q)InyO9lE}&Bb39*pz%w;~_J_W<GWdwm&p9@t5i4
z_WeWWOAG<6G_z2Xv_cL@_<V;+r945neo<zTO22=Y+22_1l$-abgs2|CB;$1XWkD}t
zt8h(Id~V`-9Ig#`-dDRr&BS4^1r+X%JbzgrnNO&}dz#tCRF_7x%MX2yo1&hh(waz#
zB*0G+6mNvKM;yr@8rI%^_lflpYCZ!O^7_$K8|ZMmf)8>gk|qzS*ss(6T%_x!Y65<6
z$De<x4mh}yGZ+#jTAtjm_us^*kA+aemKv*@)e4s@vTPBwGK(5}z-v8|b!~>XCk%bx
zV(w6^hp@E$1<OLbp&DeWrS}IImM%6<#Gda#<DOnpPz8Zn623);ou5LLu@*h2ai9sm
zJk!?L!rDJ_gY)`-vw~;FgtdMp4;$v5j&y&Uo@mp<VFup*j&0hZ`DOUYv+A_<03nW3
z)x~}fiV1~2wqcUTG6C0f#okgx_?QUxrUK`|#`Rj7Smm0P-MRLB#ioa?&3U>>S7_Z0
zGh>gQJ!@nmV}=D5s>9L)j#DZplE=^6ifr$<1`bu~@KvZl<Ur5rd$D3)sk~H43`>7(
z*Sf|W#lS{3Ld=orC;S8>Yl?oqbVO4>aL8*Ko)}V3rE5QHgIq{XnPnxrKPT_gdLLBG
z^u&Rw;6mYRXnv&j?5H(p3nDnGQ21wBqb*8k$~=1d-agHmY}*H1e|+(#Z4Uh0$l2+;
zWk@d{5Ci;7jq^uAJ`%$O{r%|)wW5D1DYr|g-N`V84?G{e)EAsBpzBHO28tg%k6EW%
z!){#i3HFMt%<OY{XVA;L16>3&U-@{V6wC?y>)t6(ZBDh+5S_`^;flJ`18!E$R7BP<
z<A3~G()$x#BSTgVo0M1173XZvyD$bnSh560?7?G6y199bh!ctzp@(S^0t+`V0on=d
zWv^_VMO(S6e+#ESH7@eI-KSc*e^M7o$4y6QCL>|?{58(UPgpd0flm^O{C5|GfRK?W
Bp%efB


From e6faf346c20b63ba1c0a137055e335e2e1761679 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 14:58:39 +0100
Subject: [PATCH 932/988] doc/accesslist-duplicates: update screenshot, with
 terminal window

---
 doc/accesslist-duplicates.d/01-example.avif | Bin 5208 -> 3634 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/accesslist-duplicates.d/01-example.avif b/doc/accesslist-duplicates.d/01-example.avif
index 11b3fc5f21ace72fe8f36ff62b9439e90cd39a90..d290a77133ff12670c3ea5976b4c613bbc443831 100644
GIT binary patch
delta 3436
zcmV-y4U_WND6$-oBMs|qWprTx00000001G8FdUInC<PM$01Y3JfJX%=00037k<3Vc
z4JU16VRRAz3I{l5GI%QlfHIL9Ok@JsZY%XFc_7d0#pkGB6Em!S#a)~lh14365SH6M
z=h720dESb9CGQ_O$MRdJabg8ZZIB&6Be+Hv9?KXR;8?SOFH}@&7&<I?v93{-H+V7>
zL)n6&F^&e-1!jXAfmAMkvi(3g7Da1+2RaK=x0*}7!z|{n@@9(bidgI=0-W&F51p38
z0frgJ)6OE&^toHXibQq|Y9IvC`XD!*(`CY%dFgL2Fd(*vbppFC$6r3lWmVmgcPwTi
zdVJPzf+;2D^>39vlzO`L)_c9>eJSU6b8~7=dMn)egjfyZH|c6xF+bx+#1#U6&sY|S
z8S(960XPKMhLuRnhzP60H{6r5q45Fr5*|xI#7cM2*LVhocf@BL6|)C^tcC!=h+c_P
z1OXYh*fsSFyR+Q{yQGVQ1^}w9#>ZNYhnPX%!XewL|00`!E+i$QxVg@2XZ5X#19M$~
zo{j@RLz5$Y)P0EY5NF6z3}&!@K&*46tEeBkhcO_X6G@#kG_cgP*g2+}_I*GHubDt(
zywg#pcm}c(l&D=wWR}eU3)(h64oBYHBR{La(bv`*4lN@hctClysdDj*k}%jO`;^7k
zFG8}=M$I<M`K;U}P<X_qF~EBR7cRT!@U`44vqCnhS1s<A<30grgMqYv67BT7Zz-$t
zBAJ`LxaI+<6Kt?iG)d6?{Hd#TJEckG#0cin0uXp<O7Td~*-#8{%eNM5eSlWeCzvuK
zEP(}DR0Q;@&M#A4eKS3h*yBq7-ulotMRrh5)^m+Sj?fUmmQrHPRciMuAV`VA1~wUB
z3U;SR38+|#b7`_q614<>U^&sI%2-(N$M$F+_NKaI)=)4_v+3I;u4agxfRBiNGiT4q
z9<gm?dB@qW3(o}F!u**O>n~yb|3jIoOQxeIzNFt27}H`2EGor!UN`43JbnGxm%VgV
zI9Bwd(Yd}Sc{JTSsR~%!oV~*j2cX8cZ<Z2&&H&J6;-}^<DSYvN)3(g})JMse?6#7K
zd*msdw}GO<s#_4pbsv!Q(cFr$z1<Qx8R_RC+i5#78YdtLlX+N|^?Ezsnf=R*+2YWp
ztu_!wZY{4IzrKX@c0?LY3S<ygy4i8vsh+uyvDl_{LtU^hU=D-46`Lk{qZ<j7sg7z1
z@8>iq*B@m&i>U^G3{=JD=ffrk0DS8yfI`4d+~-w5=P5qietSa=s37RPvbjRQw+^82
z@|am)auFOJm$<&`S#S+2Z3#hRc0DX#k9(D|*bkY5G84llczTb%I84_)L1A+g&1yg}
z1qfNqU@)Kexd<YMvH<=6H)O?)jj-)Gs?6pSoNsaP%byj0-;UgaESQ;E?vvAPQ2yLT
zPRBx)>29i+(1?vJ!z(o=eHid8V_7iyeRM72-JxqgddSF^QF6zUL}FE~mP|5zN)nfT
zn&i>ZVddZ7CJ2^%Z?|TWw{UOhzx>X!n=#%aZCtYihXLkR){e*X{KAzuZK9^uGIh7)
zH*2kG0n_e(;Ty@~7g-Jm9g6=~spvU-;J=zD{jX)xi*%SUOJ%gqYZV+A-JK}E6AHlc
zi}S%^)H5TQ7Y>%M@QAY_f__eOft`7tSdl-fmAB)tl`!ZgJJcP`i#^z#IQLrzy4r4j
zJ&aI*z6CXH-(7bSqazvSZ5iA}^2T;!E{%iOE`}C=a2$^rYGNYbNk$^G{GKSVB<Z3V
z#=;l$&|LDEC{+KcOS}{DlzAOmphih2?-+PwhqQeJEtBa{+JTEA*)IrlSVqWc?}@>|
ze-zm~HvXp4TZUD&AjX(T@q;DD<$6GX{%yJyuJCl4g_GmWqp$F#Qsl02KoZb|k)<)z
zv+%@!bg(FT@7Q_%$hE@LX=YtOMZm04%)$d$WasusJ2Eztvuaq`9E0F`?H-EngzxJN
z<UuNA%s%GVd?ApiB?Ki&5WFiy0U5nM-VC`9#wsqR*UBx((e`7@Q%D$zKQL)B!So;m
z{Ei!Jo5|ZTnT}-NMbaWl+}pRHOrzQe%l-3zFEVoVu{j$SHSGLn7;xhFKJ^4(+gwa2
zFAQd<uD_%~QW6V|;|+@W?onvo(=+aiBg}IeIu48zmk;u>P@O+X#oLzQM-r`zzRI7R
zEvu<I|DBb<=?<JH()KxBE&bfuTx3MVe)gOqEubt>&1sTY_d25Q5&ub<9sN6eESv#<
za=&ptRA)i?D9FEHii;RGOy}B$0OZB7p!%ZEH35y|pn>U$HeRcINkUot;E_FoHQ_%b
z0@pFG*Zdz2Y(qbvHkWmLaJ}A{VWE_1VxD+MdVZbdFn6^v5*G^oyZfbUQ`35Zl%35F
zDP_?^izTcH0Z36_WcwI1M-E%j7A`S=q+0iMXLhEchp3)>+8Kfqe{;=z2oTg;WOUaQ
zz^%>%w07|&V<&uii?Agcy^{JT|91TRLG<@;KrH>g-Y>XwBnT>yLxNXi_zz#qqelbv
zn88}U=`s7Y7JNV1n*V_kml?g^qZpb_1Xf}c*jpTXGdkmVPG>9|u>g@&w+Bssrb@A`
z4QGW^qw)RLY~6O(Cqz}W@020c2Q$xPU{Q}x#nhtbVI>Ox6sn7*4Pqx-83G$EJ;zi^
zl{h6CJOjKT$j{7|QYbx^BRzr%Y|rpQVBE49Q!Vu>sGoYu5G1?dmfN5XbjY0ZGSSS)
z-AWewD%o(`fJaTVd$!Ey#aWYo97syilA@7{v=|&|f~W)GFmnLS*l%l_83TmwsK5j2
z%L&(=AcIa^Y4Q#@LyLW2-oa`yNK+z{0JX&)96JhK)@*t60)1>P@KHpF<R2i9nAGhi
ziCb#<26ix%w0}qvg;cK`%m)*Fri+36p4fe|LBX#GiC-E_Rei|0%wnN`)JX4Y)c&g-
zZX&kjYV+as1%lWZJFAHKs&e>KUD~fP($L8886_`y6(gCoM=fwTLS!aaRL)ndECQ$;
zu~gvOs;~AbDVyZ3+1%3!&ZQ~J$n{i|6JE{sNzV@Kq6AdA;qx^uXVxHJEbv`L0kS{=
zY~WWWt0>F917FAYU<p=#mj*x&HlztsqWVZdcPCvL>;4$Ah(ZJwI_e2OYM@ay5&N`>
zB#@p)Mi68t9Ecj@G)oB_Zkn(jTsI3ABb_=jI!5Ggp^_=47GbqV&;R)<|Nfu+C*e61
zN(O~EmAjdqP;L>x9iu8_E6At!N>zD7PW!DwknScpgc1;E8U`4D6jLY8r#a2C?lHd+
z0LLX+-vXJ$Gk6}$@Ag~CK?)$R&Vf1h0@Xs<2K3X!-yOau<bs}YQ4I4&%JnHpjU{>b
z(gnvJQpzXUbH);FDrE1tYBFlRdSgvMe^}A&4>As>woKQhz(~HG@>o4&S5z`8ez-y^
z^wo=vtofBs`BH6vZJ7#Iq|vi{L^NR(S~CS_!6G5nnj7fCy+^MAdv7baLN1Rg9p-a~
zz#KjT#3QfmBZYZ~4&h<#=N6x@_sgS~2Csv^I=Yqjx5eKws)c|J>Yjv&Uwel@?u-5p
zmZeFV8HY1%t0>Q13&dAiKkJf<3!=wW8JDlJoorVg1T%tv$BUPw^eE3sV+O$Y0f_}`
z{}wXBxt-BnL4zIUfN8<IPF(?#OB&wwJ^X1VVb;E&6S26QZgK|Pn}1e!ByI!j2iWsQ
z2~}I4eM`zm_jIAn+`$`smP0mmOscpa$PznGB?(}bsG`CM*0jtt<d(o$ZaLCkEQ!bT
zOm+Htq0BLV*wEsdg*0f+b?G*Y7Wr_M=fukNKwSH%A^_YxE8cTt!`J|-sK!fMUk31J
zpN=;|+!R5OW6vitKQR}qLx19-%uw~HDJlp%W{L9gUa@bcoSGGm@|x{r<}q6a^uTAf
z)zHkJP5iDd^`t7~&c-&V;SU#Tz(iNTQN%ymBgUD3Sy?OoyB{ZEH&6+j%wsD8n1{kY
z;eB<AI2r3o8c{<W`5aB5LGj9=hOMPfErDE=;^!vnppO_QLNfxa$w>9WMX?lKcF{;o
z?@;^Y+tl1S%;*6e#^J&_Gq_I3MJ7H!oZqp@ArrJsKG}UzMHi9e<~c590}kYN3W+sI
zD>X5H76X|iG{!@oT=RD_EkQ~CL@u~akAyBeDS?X_sXJ}WlfbS{{~B-W4`G#Cr`EOV
zMpQtZ;SsJz3-)}#Nh~T4o2aj^$h@0s7_N1pN(U#)w9%9@kfizwdA?WwlyPt~OY9KM
zWQj5SI(}@HeE_`;LM;IpyyGIP>=Hj)Jc9Ipaij<-yUZPnKW=4@VSo9-1g4@|Muv}F
zH{Dlqbg7`4Wz)Zx5nt{Yj*%VAom?|Wfe;G8ryH0kQTo<U=&8ZjHcofZw2pj<pBSSG
zy1%u%-M3mx<(!d<*Fm#22l?jWHj#a}n^WZ#JOn*aqSu7P?BYMqhRuq4u2{Y8eBM|;
zDW^{Z&6n|P1KONmNT)%aBq?6A^Zp<4${^P}o_el13~Yu|>Be)!ICUN6onmF4GIq5y
OPfh7{<l$3PARwAd*MJQG

delta 5023
zcmV;Q6JYGJ9M~w3BMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-024luc}E2#
z0003rk;O=V6Gm-hVRRAz3JN%8GC7+F2xv5bGOZ>|WCGnZLt@_EzNFZoAL8!h0nhP*
zF}ICR16%HaRKP}$pmzVx+bY^$y(3R3Cw2QUR^AJS15GMhqy1H_#oZ?tpIXVoRO{9c
z7Hftoqlp9XY<f&3wFhVSw96y7!xBSF8{ry$Ptp{Bs?a-=f|ZwkzOg-*H2@h#aX%ww
zDo|h2F-I+n`St_>($IV@FRA}+qUxKjy7KAjg3XVw4xMN$Y0vI@xbmwbc)XS{F$I6R
z&$A`BGLbw#(8L_5nxg{VDDqwD=l@!j56mwq3x;R1MBEx#R!&%5&?$#QP$Dr>x{R@I
z-_n+UN*xi~9V33!wu85zHSl>+ci3jCb|z?&Y;0Km=2>UB-ByOaZ{-mX4E~<;{q9Oa
zD1_-Sqyr^&HTilgy4o((<16)XR(o?1^pv@-k<$n4(Q5I+w@$t`I1zV4x-l?plVeu(
z+2&)b+LO`38?9aYJR9c#@$(hQm)s-8v!D@w#Ut5@qpVu&Y3gU%_Ot~x#cqA~_s)}I
zmn#pbonp#oAMN6`h-{FWx0Tq0h9RPRd{%{)RtjpHf{4VKa9=IgJsZT|wng)r@`SVU
z2Hsx8C}*gg=$I5-DUuc-+$F-z3nM9bgf$cI*|k010$W2Oply*U?kAnI-CIV*{u;4=
zM0IN6-9a++s|$@awoK`ukH@f1WI{T9oclYbDiI$yn33f}3~XBwxbGkZg;(RW6+B^z
zCfj_?El$laCR)VpL;yqGTm$AJQe+b_ml?C_k=P`AO7b|wESjYWZd%{UrMm>ZENs%W
z;*k#R!pxC~`QjXdK+*!rarPXYawtfD<a}`N*tE4cIQt<xkw%y9R<BsuttQ<Z;Qx8~
zn<M^Dt6SCzd`7Z4a|W!Jal-@kdZHb2B+R7Dg*P03va9L@X=TJV>5K$&62)dI#sXjW
z^3$|SHBc)za+`l0+jcCF=1!_Mp|8zCrM18lcnOHfv*euwy{zV){Qg?yTR&NUw`5$D
z&*V@tKX(JCAL%(tCW1@TJ6qw7@d@7II>(VXh4T{t79RS#8K^1jGnOLi7q(08%C;y2
zzZCMJM8BuAX&kpk;9)ZA!fVisF*u+4vbR0dF;^3N?7{P9B!el7)w!bCt3Ylze1&2S
z#=)a;n3;P3xs#n4SYp>6&jbH|Tigz7{{gOkC5TXW?RvoA9yGEK?6mJG><d!ZP(xF@
z>2l({tT98BomfKzAp0Y?Qr-}Prxs+Pw+!$6&Apl-&B~rhmZ4zuX(`EwMHL^U4KDe2
z5LHEQZcugf-9+(OZz|+V4+LC?)6Qxz!wrj~X3n~2kQW01>60st{gF0*)nizHaN70v
z=M&y#Tm$X~>RK0q<6*#v_S|9?a}4)t4Ka8fLlU8p9iv+jV?zy>C`*6kWRdh~9L#n*
zK0(mVFvRXrHFx{N^po<BuIcjLtKrfz)8NvL%#(6^ms-;=FlDsn(}XH@V^5qkqjB?l
zh>>sfC39CWZ-ExM&E~^@REy5*%Z;7Unru)9nj$8Y8lN&`Vqv<=@M8SwPou5)tP(bk
z=_2$fET=e1uevY*S0K`6ws794%vU)d$jY{FNt5REDfz?{lkhK!rccGTdOdn}*RcY;
zW7~P`V~WAGtc!Z(Pq*I8=u80gqKW`QTm^B94D5(coUvctZRc=*e~)h#z@YS$^nX)N
zMPe|Dv|IGT_1y1M^?|6188j{Hkp8w<#9zVu8rv4Ob>T1nBG6WuGk1!D97D1Z=+4c6
ziGrOQ;vhGjgF12LkjebOS>*u{0I-V_XCWUtTTrd~Md?N$QX2xfNHdH0)}sgRLkiK}
zRKh43p;tnOJx>>Z_vb$OBq7qgZS|$O^sGiSrxigNiqV3AHLi&JLKu~zOIkHDLJgiv
zP}Fx0&i8?grIlhmq;Z{z2Yq!?H#So3)3V6`+pTbACcr>7B6An4XbzVbHZ9m=6{$Z<
z2T)?$drp6H{BiOAJigw=6WzSIW2r;bx&esVCuIEzE*z_Wsx~lXo03nt28H+OwRm;^
zvJqYU@VvFeV3qe?hil(;nwB9!likD%|2YxJbe@X914dlT@fNB}jC4-G-qEd@E#NaE
zqjW5E^seT}pM7K2q4e<~B`VP_D|F$Ubdmq(bfvQcj4|IZ&&#WiGs~87+ytq%^*biO
zkl(!}hYt{c|L;i|bPEp^D73q?)Q=v;LX}afjteT1xCyPtaiO55LbHhv{E62rN?p7P
zS$@5A<&fz(YiEO$!odN&r5z4JiWXe9q#_rm6nPN%wauwfc@)tVHP+lGS)*nClHc!H
zo7%`_9|b5=jQY-cP}x6lHxY*Xvbq9;^^h$N>x{F1({_hvp$v}NayoD=B&3J0nul~~
zIw!dx{{v%UA0md%Af%MOT>3MZ&N5tLRj>xbbk{9UXvx7qRpleB?CMfZCwiWkmivC5
zm{NK})Iz%;_bQZ@vm)`2pX^x0h{(`jG!7B*a%fSm2#=oRJ_b8;zjQG8+-$FL9(<ze
zn%Rbb`1Nf|rE+)JW3j9m&Ek8i9@gcb9?*t-_EcCC;7+M=swN8--u7{$+k2_z9@Xbh
zW<+u4RW4Nl8pv%aLO2hCXb0jBvizTTnj_r}$k&<D<#sKk$re|avMZ$6vIt|>GIq5f
zQJg?Peed(G={y30?D2Qi1J2P>9%PJ%%LTT7BVD4)>U0a1Ya(<a@-1^DMZ1y6R)&J5
z@Xw)O_&)qO`=uVO82m28hbQK-uBw*(5y-ww?_44=!;TT5Sx&xy`wW3ojGM^$bIVDT
zae-!A27utXKo}`lZLYIWR@<c0K10>2nfKO0hFX`TJA8%Ui|A&3Ov~JOYV;J_Iw87$
z$y_6MAbW@jc1z0?C8}u9um-M)dN2}v32F~=k|KldD@ndzMd*-<_Lf!mwr_WKo|!<m
ztVmR7*%d)Oh<UhU0#P~%)R#-wb(hBJR16;XjQxE!{ab>^bneSx2U5HC3*g{dOxYdD
z?xio5R|>w-Xf2C<PEF>zIU}!(!@ygAua+dnMKWeJ?$~=h(`4wtZlb*DEJPm1xENbK
zmK`yg>L*4nk3@YS>?j!(TzoOf6&zHV78Khz%S~3zjbw(TyrUH=*3aJ1SaXwy?ZUfe
zKKXH<U84x|Ih`7`u;Hk&^duD46XDox<tyyPlFz}JGZlr(r7dX++(4ZF&k_)SUtJ_E
zbnf{It<>iCAnGvx-oAXl8yP0hxPpq~cdgY(JfujN&CFAjH!}uL%0Zi92%cGz>D`eF
zm=upfk#1WuOz{0H7G+(QN96s@r7H~R@JF3<@Xyl(>$`mTpD$DvpO0Fo4}cKp%%|DW
z^rbR^fV#&qtEw6vA)?Pv^3S4wNHw}b!a_jkA%s@$k$zX28aSwh_@@Lq?$6iczNHV<
zwV5bDVl|uXnTpxp9<%KyCS;u>-geBX6_%lndvY}511`2Dr2=%)_f%f4uU90;npC3G
zXkkNf^83vp`JBuA0CNwHksck_-t&3scx#;8T|Qo+nOfd@j%|brc@Y7B0&E6ey9Nxi
z1yoS}9!#u53nvj#_0cV3GWE_e=B%TRzAO^@HrO7o!WU^<yq_o3kRzXVk7Ly5Hy93%
z9WmkS$vz&C%s4J?(uZ|l3J}75Yw>u@rc=b%5u+&EFf)oQv3={Bm!3Uy#Qq-t<26o2
zQ~iIG_1c}|_-6HJ^_SUyIkNC-a$|_TX~3Q0vAKrn#>TY>RGE~aJ#==usHWSD*kNR*
zX2|pYLVzwmSvibTNb&oDZ?kSKkP@I8ce)fnn7(zz7h#I<h8W^H>lgBSOU&0s-9_Kb
zX!;(OsInAJg-@G&Rky(xd(i}_$ShLPI?$PJW$d)FrvTUdA<LM5SNsxyt%L}bZtre)
zgKw=O&bP?|iOERU6ws_3tiB$%S)%A^WknC#sPiUW2>PNn#pdV5|BVGULL#iR55XuM
zBmz+dCE_*sb<YVaop<Ocs(y*f*C5CHW|@kvJ}@W3!PdNDKC_ce1Tu^o^Fs%c&3{+x
zu{=y!0aLLXKV1ud(xS07-X2XyYFAh6tXqI+y=bg>91*ak0)FtaixFEj-*$XfgStZD
zSB)BCbAi8Xd3_QICR*L$bp-nZT#hV77>_jOjM&hcVx*C)O?=_?M}N9fAVNyi#LxFC
z;|w@N6$m|1#kDFyw`Xi?zJ!qhQj(n;4qR6(u#RD2HS2$WZH<J0I0VamfrZa9x~V~=
z$#srks1aOX8a*!*y7|?NySo-?Cr4qe7SQgvPP;9jpROTJ#hG>0P3ws-Gw*}xAfVk^
zWoE%h4Ci-l^e_h;@Bf5dziM1&Cwj`HddY-rU4GoX%|rFcskV0MLTRHqm<HPPLVapR
z@Ip^=N1e5Qnk<AFyKZ6yR#j6z<WzMbR&}lE2a$OiHoGX_U8i4ITO*X2glgMy{kK+D
zjDPQUkkX{sQjPL{8QTp#uA4K*$3Odcglh>jr5-en{&I2_55N>`m>HXe!it1K>|Gbn
zKks6U)R>kRHOztZCVRXNGFXY}G>SD9DHuuhUizAU>SwcuhKofb<44sI;y>V3Uz|zH
z!ah!`d|k&RwZ`Z0m!2UrZ)73=BI9HNyHH9M$D7a7feM*!A#P=-^BI)82ULl(4bnA1
z%;E!3yO3)o0-14oa^dVO+{6oB@t?p$DZKzL+x>Ifppa~-Jm$Off||YtD}&o-?^NV(
zeaysvG@Q6iZn<Kotx*e;xULVW3FduOOtl4CNVTwAv`OT2sd-vUHzk^u)KL6raHiw>
zu)y`g&DKZ_lQKWeaM&&euBPo5+gek1HE*Z%n2v;fo#Wt&L7io;U|_t&2jBz7t+#AQ
z4=yg`o+VT#@$aIS+M({+kIZTOoF+G;gF-`pXb54Sbo}*gMnQSwL{bZB4wS`EXN&n;
z_ON^E18$@>#oP$7$6N;MW}G88_FEy&5uvtM3GcVsQF`FJn3=K-bv}9q7*7V{1vRkK
zq-$LwYg}^rjUFK<_3(<R=CS&0QX+lCy`Flp*C=;>BM><MCys4^7&~*?|KhV}RkwtH
zeutUxY!*xWM*E>VZsD19j(%$Ib@T!GPM2l1+}N&~S^c=ZE}K~Oj_2VM;G*>~T!M2d
zSbDY~GzaK|)ocSHJH&J7Srd0bjC)*J1t25hdmgah%gxAxVWGy49x#CgsSTP#u?M{d
z3f!?W;*v-HscD8YULuS_zC^kn^iAl0V|a@|wHYEa6L10J1a4H5)EK?5nM#A19m%Yg
zR>~{j05P#|Q0OkI+!I!A$W8uyJ(I)YKj_x^8dYEYNW*2SF)cXOSX6~5Hrv->qRNVp
z$|*O4<3-7|#D=L|rI9!^7x(3Tf_1Ms9))q<n6U>A1yVfptd5^12T7VcuV&1Du}4}R
zYbE-l7R;We4`WsjY+^Ghreau>L;6n;7V0r}TCUDOz?_nv`4)mZ_ltgLOHYN=?f3B=
zT_Tb}py8{9vp?E48Z5OZL;i88CYOX0lzayZH4r)E2x>vRg|7OnY__j6xge7qj&%A^
z$iRlC<_mfx$9v*db#6<@D<e#Q1C3--?UOX~DF^-$R{&bw9h>Lz_$ECewS<(V+tS+$
zI9+!Rvql7)2~?d;A!XR^sJCq`1{>f-e(@UqZq{chq0vUY?#tGhvK71jP1aH)Vs*XG
zYX~McxRDih8c$pTRMJE4S*Cl3Q8FSjjkL7n<<9dw;pIVO1|DMECBi0uAn5i^6OFyz
z*E2|JbW6goAIN18;f*RA2iPDVGCMXO$^#|qP?`wXqg52&HhAif&+_^VZc?g!`Eo;x
zA?vMo!08LDx|J8rmNAKN$O|PuGiSGf&`DX;UtP8HsS!Vk&TnjxH9EglT|gZKAVHEA
zx4cTbn7XLOm;zk2wTEecMiYkuHsZ8`OXpS<rhXR!{pNkh_OYFAaS04VrQs-aI2o=Z
zpz@qv{|Xtqs3GT6Clt&vZ08y0`Yzn+pATbAyU@8j)JIlpCFqg6O<y=}SbD@5qbwd{
zB_NiIc@PV-J1<rP+GV<F9i$kqE5qWb?7uS%6F1&6)M#M)_*ol&m|3~ow#X*>XYOe8
zKK`kX3u%B{J^PSK{<h-!$S1RPQOSY8Tos+?o8#Sx`wy)#MZB4Ybw9UGz0n^f+ReYq
zS3!f~s1WPbNR~zhfD6%WiDiQ*%ohn+QZjYh+;w%2SwCw9_~Hi8rl7_^kyN*nqHE@U
zraVAkWcfJQPh2y9tM|HQi@wg(gAbifu)368RKR|&_yq$}(mHGo-c-OvuxR%Yz)IhF
z7;de8?=qe8!fqbXrf_^C?{6~VS*~E&R22r63EdDfgmgB1&&bAP8@4<igBpJ=Lgb_V
z?AjoYd<oD03mibW%zvI`M8%9IwLDvo;~Y$YbCC{a3an*n>?-DmFgE56Xk>&+l?pJO
z`+7pP{LY1f;q@>eY)i@<xdTghjqEE#(|KyQ-SipC*How1D~q2?!ZGUqNsH-!97Q*)
pKnh}6N%ZFP>g%}vXx4qqDwOHquMa~kzTPNd14iw+utD5?Rmn%yz(xQ7


From 6718b9078042fc8bd5a5b910f187966b96dd3c6f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 15:08:33 +0100
Subject: [PATCH 933/988] doc/mod/notification-telegram: update screenshot,
 with terminal window

---
 .../{newbot.avif => 01-newbot.avif}              | Bin
 .../notification-telegram.d/02-getchatid.avif    | Bin 0 -> 2841 bytes
 .../{setuserpic.avif => 03-setuserpic.avif}      | Bin
 doc/mod/notification-telegram.d/getchatid.avif   | Bin 3896 -> 0 bytes
 doc/mod/notification-telegram.md                 |   6 +++---
 5 files changed, 3 insertions(+), 3 deletions(-)
 rename doc/mod/notification-telegram.d/{newbot.avif => 01-newbot.avif} (100%)
 create mode 100644 doc/mod/notification-telegram.d/02-getchatid.avif
 rename doc/mod/notification-telegram.d/{setuserpic.avif => 03-setuserpic.avif} (100%)
 delete mode 100644 doc/mod/notification-telegram.d/getchatid.avif

diff --git a/doc/mod/notification-telegram.d/newbot.avif b/doc/mod/notification-telegram.d/01-newbot.avif
similarity index 100%
rename from doc/mod/notification-telegram.d/newbot.avif
rename to doc/mod/notification-telegram.d/01-newbot.avif
diff --git a/doc/mod/notification-telegram.d/02-getchatid.avif b/doc/mod/notification-telegram.d/02-getchatid.avif
new file mode 100644
index 0000000000000000000000000000000000000000..0112449cffcf63e4f89bc46ad215560ff5a74cf2
GIT binary patch
literal 2841
zcmXv|2RIat8$KBs86hh(E_?5BnQ@3Si!%>LmpjfLk#Y7YS*b%rXY(`SY!b51N=Dh^
zhd3ie)c^E<e&6>z-}`>=_dVbD0ssJhcmEJHED+%iAjKu35bm-l1kBw;TUMJS?V#ZP
zu*(@K1RlB}eg97Z05rnY|3Cg8GN2LusJ{&vsq!L_-maIO9soc_%F7BMV*vnYsYqM|
zf$;kK^zVd=)WEM?E|Yd(fikkX-bnAizaAmbzG#wej6l13laLkRhlXD+0s!P9q;h$K
z35^Iw{8gx_sY!SZ7AUJ5#eb;)SX{l4zFw}#VA5rJ097POVn?7+u*(@KNX970u3#ug
zt{6~mFn?x}I~8DESS7REDa$>#E1$i@zl(+NkL~nsmO8P>S3c==$mNQi;(E@MJ%49&
zf<-RmYtm!jKA&p;p<RiO3#Ab%jYmrmug}gq#KE~_Qy(d9C-fka`;`f{J0*~5_ae=K
z{@{9g(pMnYewB*chH0gbr!0LrxQIt6Z~VBnV0(6OJ#ZOhS0J8RCuP&XIj=^OQRN?(
z<vNX|t!I0-u-EjAb8`8>o*5{FmU#4U)!f&7F&H-oB^GSy=NnHEy6xvzsChbXHTI7$
zx7<N0SP=L@h*cvhiH%K~jj>+fp@@}vgkWAMzLNbt^i5H;_mEXkLohenK-+0MZcy6p
zE=t(5PrgvUJRqP;n?2>%(5S(Aru7ls_<m`}0Y;6upNV<6)}4p1xe_~}gk{#_@{VL9
zc$M%^Vu5APbHXZ)R2>3RQ*DZk6+s+Cxdq7+U3iwVLwcuG&x;Dtdp$oBgw$`aviP><
z-Fu)+JUeM^gjk!=q_R;ktl^5PQxmR5tWeB56MOALx`Tguf3r6FLFLt*qoDtcF-B^*
z120yVYq1YZ0tafVR}a3))!@G|GcW?$(V&=h>oUS_y|kguDcD}r*jxv=8or$BZ@dtb
zJ%>)F(6wOE8nyz7kPmVVSnMl-=gOAXHyzEHGo9QIkWWju>%SG$ipsxnqLf2LEF{hY
zqo=fW%Bw9uUoXn^xCVZE)Lbd$HEjgX&}_uFAKguDA9~-PvbF3577eIeOAs9~d3pH9
z(GSVfbj35E`2$ne!UnO~KfTCVE7v_uJOYzh&LC;M+5P?CBV2+IyAD+25qt-wy8kG?
z%OkkblTZ{6spQt8p;Qf-Z91<UDoK8IP02R2lymX1)peHf=tfba2K@r&9XCcHj4N~D
z2qL4WTZTVKkB1*$o9?C-4O838>w3%D^dZ!AGNU;!y=2x-@3AkOPbyV87Bvkea(;d0
zREYIpID8?~#b<_h=o3_u>1Vr>!QJ*U9u?WmRbi&NffwHA{&{9Z%k$y@uQ_V=hwZ9U
zrrNp}{Fs3B>^h*LfE>!Z9vWuW#BO&kydKW3py)sewvzWK>Z=<`#KfG4a{Ji*;dz)5
z7h5%*cNzr^lSZFc*bf{>`8Du%fm^UCQD-5wMm6}Af#2-my^+n<(yeiVn)#blNC>oe
z<VQswWbO<7pBCMb>37B-8fXpF>=<!8iofmL)>_;Sv&iRnbJA4LI7XXMM$p#WO~1PE
zP_I*}n;?g%@%qu~ph<=_w{@T2;M%rbo{ym~su4_FxWTp&^xJfbtfY(zrBG9Qx;eOH
zs;mkxq`_2v%pnDKR0;N>I{iKe6+gZ!oR2w@)DXxV$(C@Ap0e0}Tg*?k&4>Ms^U{ea
z#fiusYAI&ErPnvdM=uSU5{g_hRqbOQr1~6{f^@7x9xVs~iH1>!aX_&-zAkwc2-6Zc
zGHZk4j9*GUtzv)0B?MFQwOMe;4$MToHT4_{RNPiij6bPjwNP*yI1PN_*1xg<9+!)S
z{w7;hZ#dqwT&#K5WW^ZNL=)5K-yd}(YbI@&ZEOBfNw9M^{vv|27Ia=-VD8Rv0Ee$h
zC(M1@D;ZWi>dRh(O-3Yt60Wu<60Z`~DRxrJb&as+s0bf8>W3AeI%=`<Z5L8}#j$}B
zWGvN`70;SK;j>@`i^@OAVl59EZkoI<P}*_BDhTCvyINVaV%69fNb@`(f|+KbKL2F?
z7^bYahg;7Dtr#tOTY<$7?ZJJMcN8ep@|Q#RO)=V-%yperwOvb`#~!a?D@5Vr`24+p
zhUj{auCVD8j~IuW8tj4k%ED{*AdZP<uaeV_b@IlTJ+>#$Gj2<)c-Y{okMC)&4R~hZ
zJ1whgyAFPpx@>yH*SV@0^0fa%0=oK~kDq=cq-gVtaZGgb-;J`ZB{-W;Pj3{^&XhNY
zLc#)k$6w|?x?t1pw%Gg7!3u9IC+KYbzGY3bui!rWAdppHDqLcdAcZkf2Vi~bChgfI
zYCB{1gT^!o%5jK2$g>Ye4Pl9ysjZGw%}`UHN|%Tu=>CufwChU_5uilRG{bd2$=Xad
zPqEc=K}pb(uqldjsf>lt{R>PlFz>7}+tKabKE{y=zivIZP|(lLeX7vjQjSL`+0L1X
z2qW|8r?H}dxS6Zbb;A_RjIj$IYBkm;3ybnJ0r;B>$<;?k5F=Kl#{2VTfj1M|4NmV^
z4}3DbAWUB{*{tN4i*4*1{NPU+SMIKcE)Cel*~?V*#E}KnF*kU*r;XAruCn3JV+Iaz
zVjesyGihOk{!h5*m!s-WfF&YC8cGdQj8dcQt=A{38&tzpJi_U>i-)&vCN74H)<tB@
zIYHlf%{9e0Mk(kvl2@pV5$r(*;Y@GFCP74MUA}&<ss3HQ)8@~;<dz0$ShJtEFu$+$
zEfKoxG+%9T<gz^zo)nnwP?II%@-W>TVo7&a<Q`*#qHuuOFPSqjyGd;VgY0!Zg???-
zJ&~${6J^9sKH8vl2ePNVNHla!plm&Q;akX?lU0^qOYJwvjcZEFHW_J3`Kd-1k!@k1
z7T=-nYN8`%eZo&t+rWR2X&2mZevmwH>qWj;tOTbm2L66^RW8EGHc01dK=!A-pF72;
zusZp5CAgL9NQK1gb|^|*1}BpLWt+_QAL%^AMFNmc_g$!RKa`7tH?RR-2i}E$;|aC~
zonLu4zCvMBAt~c{tq6F-;<odrEUh0AP8~@(1|r8j6J7avM)WgN)rOL~E8K$Dr95Oo
zCKI2E6w37xx&`K8WbJrJA)4IciG6Z5NQ;XKQ5-Uusi4ut@Lnss<zhjO%+TvGL8x2a
z#3BSCPN}mwAsQKL0Q)sb>03lL8`o?G&ZfT|t}DPGQ9d!Cwc=9o>h>{LOdaEQGJ*Ic
zE1<8(s1H`0cSGlmHs)o{uT`nL!oz}eCXk^XY?P;qvmp2Q`(Gnl(SB(5MbIMbPE9a#
zne6AfFx`HSsR?eqGc{xpuVbsocOAYEf}pAjmM<|)y(+p%7pxSPEm|NVv117P^8;;&
zTI_Um8+9+XC~hzv5}`o?(^fVYKCuVh&UsRjGut$nl`uoz%U&V_EYmXr+t`@weH>U~
zeT?wkM~wcwxEUc6SV5)*oDre5Ixf6n`z<qvbIH36L!tVGd-L^!;N7jdY+>hj!LD=+
zXU~1C013-wp~aT=j+XBRnM);C(w5V9d0+hge4HGsw(vgQ6ne-TTv6VhwruRDYQxdn
z=Y`bcyq~k0K;23!^Rz6?aQ&ZJl>uPpP=^mr3BI1xEFRoC1v)?T>l^D0WoQve(gP?M
zDtuy=f0CDoam)Vl+(OyZ!3Af*8*_rEP5`+0ysSc3Ln^N>+06*MzA84@Za3N7__y|2
Y9icV9{#F+HI+QLMdDl}aIO9I}f1!IY&;S4c

literal 0
HcmV?d00001

diff --git a/doc/mod/notification-telegram.d/setuserpic.avif b/doc/mod/notification-telegram.d/03-setuserpic.avif
similarity index 100%
rename from doc/mod/notification-telegram.d/setuserpic.avif
rename to doc/mod/notification-telegram.d/03-setuserpic.avif
diff --git a/doc/mod/notification-telegram.d/getchatid.avif b/doc/mod/notification-telegram.d/getchatid.avif
deleted file mode 100644
index 779296915de91a9b21e2f05685e34a1539d9c73e..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 3896
zcmbVJc|4Tw7Jp|9Gh>OdZ)4v{hOzJKWG|7Wg+Um*Axp}deNQA*iVO)U43+F6AqrWt
z6pds=B~;9v(eHQf{oKFqz32U$=X}rdoO8a<3jlzKS6EaqHXP>#P=#g#a9*eY9M;R)
z5M>AeAccT)VOUy@DxyA~{`fx-0D^HIVSnSl?V(^?Sipe;qMiyk{~!;VX956VfEJ-D
z>;(WY1XBG24`dGj&~Pd?#Nh%DRyfG;Q=N0P650)HxDv`Z$Uo>{GT%Ql)U;_N&WonB
zLVg_n+@A&jaLB_m)Z<_zZKy9U7#~cvmbhS#AgblWg$AFaTB^`VP!BX!*@AJAxPu4`
z2BTVLY&gm|UW66_I6Q*<@qr%xk<?{a0ERefhzA!OfTiWA0s=q~5I7M604!?(p4fvo
zF*lb3Xl<ygP!$gB0}vXM1ErS#WvTvOn2nkPgXjP{s*R&69Tn5+8EE=%nCmZ0s{?`m
z^hu^-@Lzb1c7ZCegOBo-vH-AIn3<bV2OTU50F)WP7=SS_KpE&^P$(1*hcPm9vM@6-
zG4ru=uyP{#g@us(f`TFviqaxt3gUu-GU~DlN+>iMEiA36tD&r;sDf6eH37llaAqcE
zUKSQ!Wl=#<<^NeI9RLCbuz{###Q-n@M27%TdH`YSp7fvt`9p<9lnz4A0ENLBnWzO#
zY_yl614HQO=^@ld2VJ7(0SJPgT@+==z;PT46${~1j?cRd6E|w;<gy#xkWg{QC%_rG
zd3gEwC8eZgWaZGRYU&!ATE-@(W|*Vq7ANc-PC7a{yLfn>^YZq=`G$s_508k9x{!D|
zDLExIE&WRV)q=unMc0e(lvmuXBve)3d-$lashQZ)`napRr?>BU|G<l}*KfurCf`m?
zFTVe<wEU5@@@aMR>$mS)Kel&vf6{o-c>XPanEeMY1eF&U0-=LIX}mz-2pVw&gkBWI
zz;1XPiVfiqQ;vsm8s*(?=!A=_*llpR<3|~}CD4nKn>1<%%>FxK3I7+fe-ir_uW5jp
z4n+NVbO=Bn_&S*Y{&BaF0e3OOpVM>d<x%{Mjq-2e(8#cgO+$0D){VzUk}LCKMtctZ
z&cC`qB2MNM*Ut<r2CY>|wQdGhlWObE4x{~dGl1#%7j7&IBA?^hq9@EAMf(v}&82eQ
zTMn5iEnHXAIh+X&b~@kx{d+BE!Tk`6B+QBHy1K5vmB@i}ToZvh^Q>)EyC}|p4*d-d
zB6Mc%o+*EpCFVpWxKe6w*j^z1;|uNWeW9pbGi`@Gi!<C#ib01jVlD>mI;4Ag;{fTP
zp(X=}N8)R}x0NnZm*+hTgV;}ZhjRMP^eA4u6XRvtwZ%L%9I`v9<Nl_^+eB1SYJSxl
z=W=+WQtE5iH(5uK95m(;67#aVl`C`~k>&24>atSLoW8#Ds9?|^c66Fl8h92pY@;%y
zCQ!nn?tJQ!zRP24)!Qr*D~!aFWfJd9X%Jn*2f^)H=r}o+Sj5WZ8{i|V%+!7>q$rM6
zAT)t9#<+OpGMR^u%g*6S2*FS9v+Iuga&Lu-a8r9?Ao#S3d}<so*g+0l|Fb>Mf&`T2
z_e)i@jG^lrT_oERws^EJ4pt>vwwiS}f^D~x&HGRtx}ODpMUlUd%k@N`wLHXapN2#T
zf)AM)NVogW-*S4T-=r9X-3-6azmO=Jsm##_qW~u_u$09<Sx24T+`k`u$%Tm7>9@?%
z8)I@z)~A0t@vtBGy6jxxXmiH0THz_z2k~~KuXe4r<<r(DJ~{$gdY>E$g21Vzz|w*m
z07@Z>uv!ei+1e2s8^q0tk4rxBI{9_(<TM;;)fXWJ^J<dGBU;Zy#$V|TnJq^o2(Sy`
z0nMLD!UclV*-T8%ezAS7AJ0rQ1*m;gJ;fsHzs|jCe&fXvky`~JnE->vr`_?Lr`F|{
zZccfR9-i|=z>7}x(UJRXt(HFImkQpL&yT<%Z)7`X+j36#K6%nMV#IbVM<HBWAeJLC
z9I1LZCq+!LTwv<>O!dI58Q$>A>&!4h@B4OElQ`)lay+c&+r5EO<_Mvdfz_yy+K{kg
z$0uiYN(_>tt6jTuHLvF;$=p3ABOVvYry&98Y7*vma=LzA-YDEyNamDyc#53azWyV#
zpmXt=?+2f<LzQPDx*yd%mx`-l`}*`YA7h6cFojJp*UpZ)J}kGUC$do`8+HCRMq%gZ
zOGK4JS93%zaJm`L5Gudj8-hLt#Zmw`PclQHLP~Pyl9y3;6raRz3J`f7`3p3bwl%`|
zAloU7r7r!!uGJJhD%m}{f&PK5NUk9-*Yi;WWa_3(g59Nk0U}NU#%;*2ICjW}lli>#
zs?s3?0x|8WQm4C+phNr#pRURcLkRNiz)EN-NoTWkGwc}Dw#x5<BEhHdgGIuahq^kd
zi)S#Cq%VhP$=3RTls6*v#Bk&vFEn0Uln_%(S4wZlb_`r&_9T5A7=UbMIwDMga7?cY
zTf74r28n-LsJ6*wUjyiUaknS!-3oQ$Pa<Fa)?XN2$)v-<i77m}?Z33O^;=#!-C7Dg
z%_wuHC?Q>@3`|v4$`m`m2-lFr>%28EHmp#dW47vt%qCV!IBpld4P5zj?9LSgy26=0
zwfuWHkj}#bbF>i`UdyvmQ>7!4_xwu&ndRjw<n+Yd&Q%GGHq_@Uas2q*pb#^$R6XRF
zP~WxTc;v;0%r^XlF~e@@<oB_u6Br#?m>9I|S#F??lUeJs5amf-fKhk79bu_c%v@a|
zBXqj&RoYf*C~>RX-l|#IT+Hz-*{x*jhq!q%ET5fGQwljGE2wj7o`fsq=Sdr3(G6jb
zw_10cbCXUdrB_DI2Kwua&(~%rXa>I1_$+HC;0N!;bHL}lw1hfuW{dpr3U)f=1}m?z
zM`dv(<<!wf53YM-I|Ynt)Y?+_WmKxJ>~>VZQ>;w0bILAW+MAfgTKW-H5iB=k1}ap|
z^VGez7o{5}CG4@R`cCui<E?7~4RSIPgdEoCdz#%fHtu0jb8<dqId<GnhWshTj?<NC
zJ+<nkk+IE$a2VO=a2z}QB7U54#cV_GO5Qg@J;=aH?X{^=(h;lD={Gh5`Z)_w^qgne
z@T9ZdJx$a6bV<=IHZwFtD*JRhW9@3U+=Vtj_WmO(@x>7WiQ+SJg`k^tJONRbg%5Y%
z&gbgI6&RR*{LN@CwY`XXJy6%}t;{&6*x$00l<b|Qdd6o%C1q>wlh48|W^F~k&M*4e
zWly<$X|D0fFY?kAukRc#`#$qnEmOORBGU4F;b##bhSol9pYZ&qI#~3|t&4^glOZ;4
zk8I=VBA371=+WLT@SMH&WT(9Dm)9;7Wn&TmxJ`|&QkLEYl{hO}g-iDT%#REa9JbEu
zvVGZIn-O_VJ^I~3a8?#2g_Km2+plMH_0zKM*NRl$)Kot?t`pby8&ABc5%ELlm0s=?
z>ceV|3R~9NONUW1YcXbeGdGb#x3(6K^{F$HW93g9l-tGKjXK$Q=KZF9^m^R$_dCg_
z=$D=~HKt0<BWLe(!q>&DUZ>c%@c?$7N^aeW&FFW%LS^^+XC8chk%n4)B^ssgQ1aTK
z+WP31k`CJ`t2KkM+^~w!r=8jc+62{hwKc~3V=wt8?1FvwQ5c^LF}dw|hLE8x-r7Qb
zC&LmXmqu*V2kRR#;0aej2Ml>~WAw^OP)dYzorsvzv@uV`Ob7fosHLWda7I?JGo0-n
zM?+%0`g`qL?u+|N-BXA4mDsw9e(0X6!&@L(n%ZJV>YprKG3EBtlpJ_A>c$rqJli~M
zPikvKkF?%AFC6C+2&reB(J0fO8Vu8Sn6ugy>NRx*pKqlMjuw``G}`Sw+h@{T$b(s`
zuuMM^;?|e#mcevK8yo*g?`YFkffRgJjB(F(rMTKN<vtCZVJG!;SfZEKS?@Xg8mJLy
zM7v+txrfMXKEJ#n<=%ft%-iL&zz>Ur6FBMIY98J)-+SHLgd)8~6Xo{UO}5R1XmToG
zCnSAix+m}UePrg@%S?)PPV!eF7>~zkEv0RQtB%|kkDnLSx_owZc<v=9@wB04N?|c3
za;GxvE>xz^5uDy1vp@V|&!>XuY$1kV_Pgs#xK<1uu|k3fL?1rsf}dTZkB73xjO3Lq
zH<$tjuhlL{gL|s6LM0i$4D|=xcGg8$gLEw=PnjQQ9XQS}9cBOB&nF%!^3+^a%lq9L
zO8VLjg%&{$BB8DVHugB<FzCT67ZV%||H1S)r@TYecy&LkL07Rvr|HfGl5RT;ZYt^V
zSk6UTGEK%j;Qerhu*Xx@iKt2J@a>r8y?7F$6>P^xE+>@0pd{tUlw9i;)UoigknML3
z@%b$`NsVc1&H!`nD@6u=OU=e-)+RNp$ahbHcfa2A3%u}V@J8em?FHEKZ}d9KMw=kF
zTffMRtn9OciH?ealxRXhhb4u6_h!BMF1|l@%4aORqSKXk4pjGCy+mKajpN2cdRq-&
z2Xf==8mW4hL8_kb4oisQj>>9`R}g40xa%QWd->9)N>7ujKW1;Z=g#13CY3jlgYgW}
z!A>kvbsgQ8vMh)(*YROFG5lO=+}+xF8B00bk())D0w1O2<VRl4T(y3;OVs`}X+6u^
zw2)-;?dR^m9Se)C#p#jGt;!=m8GJ8Ouv+O}w=;}Zm$&@&>1?kh+)7SM!D_jNJpWP?
zr2s$c>Qa4*;GmM*kqhsx>`HuqkME<nh@NxZbG@Karg-c3r|+RV#lqz30H0!qFFX^~
Js%CHF{sGTkXJh~X

diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index f464ff0f..d33f6fc6 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -36,7 +36,7 @@ Configuration
 Open Telegram, then start a chat with [BotFather ↗️](https://t.me/BotFather) and
 create your own bot:
 
-![create new bot](notification-telegram.d/newbot.avif)
+![create new bot](notification-telegram.d/01-newbot.avif)
 
 Set that token from *BotFather* (use your own!) to `TelegramTokenId`, for
 now just temporarily:
@@ -49,7 +49,7 @@ then send your first message. Any text will do. On your device run
 
     $GetTelegramChatId;
 
-![get chat id](notification-telegram.d/getchatid.avif)
+![get chat id](notification-telegram.d/02-getchatid.avif)
 
 Finally edit `global-config-overlay`, add `TelegramTokenId` with the token
 from *BotFather* and `TelegramChatId` with your retrieved chat id. Then
@@ -104,7 +104,7 @@ Tips & Tricks
 You can use a profile photo for your bot to make it recognizable. Open the
 chat with [BotFather ↗️](https://t.me/BotFather) and set it there.
 
-![set profile photo](notification-telegram.d/setuserpic.avif)
+![set profile photo](notification-telegram.d/03-setuserpic.avif)
 
 Have a look at my [Logo Color Changer](../../contrib/logo-color.html)
 to create a colored version of this scripts' logo.

From 564c7f6bbcf497d9a3656d3751f3540a5fbf0e25 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 15:11:43 +0100
Subject: [PATCH 934/988] doc/mod/ipcalc: update screenshots, with terminal
 window

---
 doc/mod/ipcalc.d/01-ipcalc.avif       | Bin 0 -> 2515 bytes
 doc/mod/ipcalc.d/02-ipcalcreturn.avif | Bin 0 -> 2205 bytes
 doc/mod/ipcalc.d/ipcalc.avif          | Bin 1729 -> 0 bytes
 doc/mod/ipcalc.d/ipcalcreturn.avif    | Bin 1247 -> 0 bytes
 doc/mod/ipcalc.md                     |   4 ++--
 5 files changed, 2 insertions(+), 2 deletions(-)
 create mode 100644 doc/mod/ipcalc.d/01-ipcalc.avif
 create mode 100644 doc/mod/ipcalc.d/02-ipcalcreturn.avif
 delete mode 100644 doc/mod/ipcalc.d/ipcalc.avif
 delete mode 100644 doc/mod/ipcalc.d/ipcalcreturn.avif

diff --git a/doc/mod/ipcalc.d/01-ipcalc.avif b/doc/mod/ipcalc.d/01-ipcalc.avif
new file mode 100644
index 0000000000000000000000000000000000000000..aaad6167a0528cf308337f0dee87c076c1ae50b8
GIT binary patch
literal 2515
zcmXv|2Rsz)A3rlf_Q-KLWcxd0&$G!mBQBdW?#?>n71_=>XCH}ELQ0CfMMlGl>_}EA
zvwLx8Wn_i-^#8oS=kxr&>-jvt9{>Ol@r#JYctxW80Mt6iAe5hC5X#HX3aSXDT9hE)
z2(R;uT41D4VA%gD0DwUuBL3t5;Ux?zBIu8xp>_}|Fa&X~i~s-{>N)QK8g2l9se{U;
zP^jQPL;oa#RN+fYwa=ATBt+3LBrxR9EHnxehN1e`Q5ZxB6?stM7~k`U005m7wLPX@
z4h$*^^~YgiVxl6eSEQn0lE}FO;6{W5h6N)6qo_Z#0T>gh7C#CT<aM4=i@F#+4K0?Q
zx>aA0k5>d2;3A{?)$QAk%t{TMmOix8!LoZY(IO+1p5-SV+{(4_J#O~|Q^y7KIf`a<
zm&dr3qG$0jS2wR{^lrOUhk7$u1my|qi?x{Wg9ZgI&%+xM6<oxf5`~CXrJY%k9BU_e
zZfrj}3HaHof*UW(;FEP)5`9-kX-3nVLZ`5G5IR{tBjASXgO5jo*(EL7SuAjM)w!{N
zShj@ed=_hD;77?G0SK@<GjwGJ-!Y3@CkPJBtG-KnY(dx3up@ubr<`9-`nbW51xM_3
z1t%Yeca!6XafXgPH#PLcPg%ig&TTzk$1+1>iy#jd<6gK=d9Wvsgf_gA$q{L^2;=wZ
za=>h6#Vk;CLkfpRZB`{#fys}TE+~g4HE6r>N9xwYu{uQx^TS>GMKL<s=y-S&&_Aa3
zseRj<M&HvqCg_Vi={BQzvAMAVDd-RFC#wf%g(Pv$gTfnFo(+c1j+d?2FTYs5_5}Nr
zeNxtT@I9Y4^OCmh#{GZmrEW_z{*__`PzDweqc<@eZ>C6PEW_V3r&|s{Lg-}*3v5Ui
z#Ax2CZuZ$E-x_<dO$B`m+QU2an|=Wal4q1Uxqbrvu$5GJ@pJQ_uZ*9c9&g_ePaomn
z0mr6y;!Znf7qWlZ$WT(EIOJv_TS)(gIKHZ9MSXMf0gUeTV{(3l+MdmRuzElm^nsZI
z7krgDR;=pMXpMVsQLDgCVdNwjo7Or&;xe+HiZaAosRMU4Me}fz!Zj+LXoF6#bsR%Q
zkl&;x9haGnxsiRx{MX+1_o4mZJOS^TtSSWkY9s<t|L9p?TvW+5Kp;UgO$T|u8651u
zB~u>0kA31CJendwsXq<N5vB)Ei86Ipg+3qF7`L>Ia8ju}Vov>gXVG5~Q;M2^E*I~@
zO77B|9iJUuRn*$XkuHCFy|>x!%5H6q5HkeXpmhQcVVk$~g6`BxOVtE%ygI!{a%AwG
zo|-e`u4r>D;N$41e5oX`D1JRRaPOtM3OP01djCh_WrA433Yt*KRcvN@CBI942(O20
z949{(etw!=4r`As%z2KhJu$#=4Lr;3w@#!rK~6LhO`?@m6LMI`RY`zv{$1gakHsff
zzX(^iT|7ILvPtX`zJ^_94O!T_a!Gt$<mrHZi}2CnvHDE>8}W!$Z4x>Mlvqe>t-k1}
z7d0+c*at|3&%IYG_2TJ}xOQx@IXZ+6iQtK5+p74rjZ)+&tCRX9-<0|^z+1mUroYSM
z)OJDc?MR!y|2LSiYi5MRxR7`Dp$Jo(Of@oG9LM*L+yR^gy(_lLhpm!*H-XZmSWPEc
z6^S^3Eja|dm;9(&Ka|Dcg$u)8IkM+a?*7nWd8xo^NqXDeIA@3X29KuOd35hZ2UfN)
zw@g#rr*XO)-L3RO#L<FX*=|W&nWY%8y+E_-6Z(8jjWv7clP~^I<PhHT^6JDD&nt?1
z$7_G{n4P_z>a4t<yoJwW&X{L-;J9s1qcnj^pXttiqgbUW`i{Nw!nkxw4iSR<p-<CQ
zax`UkMC<RXWd#+m8?(4zrWB)`ouaT>-b#YNYR>HLMoBJ7t*fP+R5L1D{gNBeoVOBK
zTJyT673ps>VT|w4T5s-WA7+LP>+<F6P7XKZe_b+8`pXX3TAquqKn1AoiDgzP?;Rqy
zMn5i%^(Jh9Sn*bX>(B!b9l%DCxO>DUFEdK#uoMq(_td!cNUA02yPolse5K*Q#%C}Y
z3vt04FKGQp|1HmLvO>_ktCNvH=ee+qHD1!0X%I@&^Uu3?rumSY_e3}hAHP=ixvST}
z4TR)sOMh-!WMi7nZ0mCT0so!T#m-0T7mjEAjs`YUeyc;aLE8Du#3p+%!~1~K;gjrs
z`@ZlU*rCOKttq=j=i00f%kOPs4vMdt&)pnBX4QT8Ln;D4SV7$NSAQj4PS92PUu#)!
z7f?L!z)@M7^;_a-+Yu;(lX2R)ARpq+<IN`CT&2O;mY4jU>AtKd3AKnWZyn*`J;9pT
zDDZ21Jytqa7;R;RI(eLiH~h?}O}yuxNECeLoXD0QYb+{f_~@bD64|WKSU1D9j{;<f
zi&Oz<4ix67>hU|97gTwelFrh&eXhICEw~ZeHawT*rVV88Zmq`Qcr_w|&Epyo1#2sF
z?QsBiwBCoQEcZz(GB}&F?kA61qD*(%_mL_<cm`X$=s3Ju!;HD4QH=vUD4KCrP)B%?
z%SVE#jK~Kt+Rr{3@t#uaD>t7JmpOs(HV>;cQluI1b^8Vv``ep#Kcudg+g2RFWww1Y
z-yXQDm@;SWEMR^N-50J~%BoqcEbR&(7Qf5gViGrjGtn9?1mpFu1cUz0ug4VwTghJ{
z_PM-jJx*!q78y6~{l`wNEWS2XpOBSHxh!o2$a{8GM>k|fwHxp{6@#FUda-eemYBEi
z;&f~&n!FrlTn1t0ly7^JkhdqD%_MD05J75LSd>zcjO)}Wc@|su54VEKy><Nq_uQaP
z!J4sQ>$yv1Pf0VmTA>8c<oi2LOQ3egn{FyW?N%0BoV6_npX-wR+&_Hm^na&@Xe`TO
zt8Y<*vhx|&OKguhyGi%y@ZJjCnXO-Vbyhug$#_lWuU02uayjLjAPsWZw)AB{pIsf2
zaw)VLlVwu%v;5R$epw^Fw)-*+(1D&UE}&Z?7>Y|lCuNAyil2y!Yfn$2-q-Hz-dwRI
zrsSAuF};<kPC14(Ee8ElDbggCj1<5L^8p#G6O@uW_aB2T>1hMoD4F{P8LI^RVENRI
z+|InLLpaZx<Zmog_Cm?)n9SEs-M=eN;|jdr2f$&PRu;xTBaER8NgSpNH!L?T;YtR~
z(GbgDLYsZ;n7|y$fCr5b+THkubCJiq3FY&JhX=EbE6?{OW{&3!$tuN@idliJp*`tq
zScp{?;zE`f0nQU~Ix#utfP15>Jn7vGGTnH7v+o*Rt4<I^(qJflM<?NSbE%g++wBJQ
LjfyWCWS)Nkl;w+9

literal 0
HcmV?d00001

diff --git a/doc/mod/ipcalc.d/02-ipcalcreturn.avif b/doc/mod/ipcalc.d/02-ipcalcreturn.avif
new file mode 100644
index 0000000000000000000000000000000000000000..2459eaf35465fcddbdb23ee56f5c8bc6f461f4b3
GIT binary patch
literal 2205
zcmXv|2{_d47o9P-lvMN$L&jEiB3ZIDOp<+<glX(Q24g3wv1Ch@WEo5HCp5M)Xk_1w
zC6P5-WSz!NA@Pm=&v)PFz31F>?sM-2fk1ptzCl>DKi~wS#R<9tPBQKQ+DTtsMx7@8
zaCh`YpLn$3cX7aY|DS?DSis)*KmH${#R9(We+w`z^8y%8`;+Px2n43RlMDj0gFsBN
zG%f-F9)Fkqbzro@k?y3K)`RxHDueXIc>dkx3ShmlG+h_K+I!NF1MtB*o-~3$5D{9k
zp#5`LAQ1SgFf%jL@C@2t1{unCqJY@#Ju%)M_LxB0WL6L(jwV3?tULO|qXq3SdN5r$
zJ?*L&?ha_*3m_Io#mf~BOD@R%IjiSDH|8O}D;C7p|D%1W2*rM_<Z-)A7VPN|Ea_b8
zgxb;|yKK;OZ1ClExKiiV{X#E01|9drO9(;IZ76RKC)YPiB2L=O%$4(oMBw`};}nHJ
zSq|iQ*#BhW8AlkL!ns4uq@E~8^}x-Qa_P;zOYgk08O>Evx{Mb!4rZIzYK(kiW~YTX
zv=i`&+rS?mt@V`K=?MClNK31R#E_#lrlErw+_D*MA*+m=^(ch;XM<0Sen9fm$_Une
z`j!;4jyV6BkNsMk_dmEz8YM`itJjvn94SN1`F!aHq)ipq*Q~if=SX{u+?gjOAsh!R
zJZDAn+bki!bjg)Pbeb2P+}A2@3U3g@1XEZ_uB1-&!`b_HE=2q^p|C37F^5QpNOtJ6
z1Ut`N+oX$Sl`2WWq9)caW^o)%;i=vYQpe5gs|KacPFm`Qo4-v(3XKH6eIP==G3BlK
z+a~HT^X*UNB9>40U#+n7G=F60)|7kq&aH*+7**hf{#2ujKXzw+tI+3aRCVR3vBQ1-
z0D&%28d<s-N~vaDBu^fZa&qU60|YPDG+>kGqc<Ai_q^&ASw4=5k+ic_#w2In)^^bM
zh(7!0&!L<ecIsI%MWfc9bnUJA!?H*tEHF!2AAsMaSWXTUaa9k$8nOvre98Rd9-^9r
z=sxwQHELnXUh+C@w!G4gMR7|@>}9b0ybT8$7m)`O){c}<>xAAmn?#+O37Qy6;HLjh
zsg;OwcJ^Y**LD=1>49kk1~zupfBX_9E+Ji<7ZmY+VYb#GRXH*Et1tfZvB<6|(-qXN
z$<9+30nOwp{bSOEwsvZh&-VPDVWi*K*`EoNJQ#U_IzXapqi#yQjpd^%nl`xXj2CeR
z)UXk{o0HG0Ta&#e2dWqcomUSpzcUC0w~Rj#8_LM+=V1B{+!=lKwNxR4pUtE<B-lq`
z<H3%wd8H0~kFSNFUnxviXHSd|7CZGrN02%<9XXd~VEpCEo%Jv}CNN4D8E*=nFZF$n
zxxVau3Y@8VNkVByg0q+BlpNl3=P`nf-R~}<$cv*quLDo#zZl<Sbm?QL@5>7Mlm&-~
z8_Xoa?g$4|e6(7p6YTF8A6)Vrx@!eYg!o#PcYhO0fGR8y!-8yM-kf=W<Xx3i6+o@8
zjr3%_(^uUO*C$bIVZh*O5=%CEagJbW1~}m8Bq3EoiHMQR<xv3?4}6X3eBnHNqx{Gt
zw|2uJYeL^9bzU72WDWKU$ge2sk5>5QxxY%C)|xRY>}Qfhy<hoV3gxpB(pp-|yesAG
zQsAA#YeASHyU9a^p)3jL;b6BEi<jQ8g?v%nii1q1F_Um>t{LOrNL{9TgjCgjwDPP;
za3x&Vjp1NrcJ$|>vA75lEpwcmzRRHfTa4pT=!L87bXVZ%#$43of^QE3$01AEGt2!%
z_!1{(YPrbLXNSD$&OQReJw|p(*6f16d#tx~>^%`XAmHHiENfN6*6_3y5PqafoqCSd
zze91)6s18-z0p*-RSIhwSltTX$HV-2Mffb34x<mbQI4QA#=gmY88tv=-0pU=YmGrs
zf+6#9DHp%m0Di=@AjZDFb#O{gmW==p{Ju`;%k<a&!0XH1()!78D(@+rqkMT9<!xG(
z13Mq#;|G5?A~k>%=C%)C-U^Yjm2R}AKuxpSMPua%xS+bz3e>a60^5?%aMj+f#ApMu
zMqHP`CCy4rR|>__Wx77jNWM=KvYPpfbvSNdF6XBH!@+RH-vw*rLdXs2wVYxcR1Rqg
zA?CCM6k4nrBOtaDD<XLvj%+E-HaaGOr!|yy^0qN=YD}v?x67Jn6eiViywUT1Iswre
zgL5C{bLZC}H1^9cl3s(JSZ%{Na8;Zt|HxAm<>1rFE6s1NCiMz@KFaB2appo{ZBAuA
zhR_?!3Upb`3k-V_S=Ma^(Fn6XRyn`4SDvLzGBdI>nZ)qNLkC^eV3dZ$Mdj$JhT;Uc
zTvbnqn(ZM*MW-g6v#SPG3~_l^9gC~-d$cXr;EuJ?Dt?iDA^Q{XI{ymKx=IEH!mB6P
z$p&f^iO9N1IH+y8`%0~gZ3N;L7Ng9MydBmo_;z%iTA$W<f0LlTPOdrFsX6zYwJM%!
zl|N}&hB14TVP7Na%)lln@)l-zTj_BEQSs=*uX~>r@Jfb69=66xbnKw)BDEo9fuZ|=
zBK}dRjyNt9ufd#5XD8kRE^1v`{Dbe!1odctF|+a>)aC6p8&<Z>xZWCH*4LYRX8W3e
zVe}!+8dvgFK=ZeAp8>2wSrGX>ZMN3Xg9l7*dbDk}VH97=tFBS>sV<*9Y=NMTR-WOn
z6;nmKr>NX*E20}(?4aTUA^}~T-mO3UMnbiCDL>vhXZY#qX5?Ye3iY+TZgN#!?*8OE
z*Q3no9L2rV=F-6;8LQ3y9?AP!8GD85B_*wO?FE_+1l(3sx2V^%my+ylE&_8Cjqfv(
zj@Oo75ZWAviXS8$i-6Wjrvtc@lxN~(zF;sZ4qsZ+i96e}30xfu%DQtxDvC2U?CEMq
MeH(b0sT?@*Ux_{N6#xJL

literal 0
HcmV?d00001

diff --git a/doc/mod/ipcalc.d/ipcalc.avif b/doc/mod/ipcalc.d/ipcalc.avif
deleted file mode 100644
index fe726e8c323ea28cda327d70c16ad80fbfcdac4e..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1729
zcmXv|3pkVs7ygFU{T33E>yStcLW+#Gam!e@Ar-?Ie9Z7+Moe24DU$8il77jK!h~{b
zl*l!PA-6;^?$>c&GHaI|{u%$X=RD7O&w1bXIp+WXpdLhugZyK_Ab=NqB!WQ*BIqCF
zj6@)L)Fu&6^5<*3&<zPBME$=700_j9{_Xil00aJABL#sZ;(-R^RaKA>f#Xj<0sxGc
z{0hL70pJH3uh#{^@Ppe2iZXA&3-HZ6kAI92;$j3L;^1T`2t`3W-U)<o5j>O!qai%s
z2mpd`Ug7^D1A(#N0V5(J!b1uF7{tW{bv^^g;UWl8;W$DpZ?hyI^b3zV3PMDGzQzmQ
zV~1b@Nr!k}l@kN~NwR>LsD*ZwH9=j2`q?;J{BoecnCZoU@$rU&Z&bDEwOLs2Mk3-}
zx{Kh|wFHkQ)I(~_eh*7;#IIh<MfU`G*9bE%epk@`L$PkZ)S*2HQ>v<rbr#JKY2B8K
z%ygs${^xNX<jW1sH1)VNWwkua%^?vC>Ho-Tczw2%Rlkv~B|kQ|*F4r<{E8a4<@&~m
zbsqiO$^HzZ!CCbdiqYDFRxgaO_lw2c9YdY;)dzoU3=bO%k2NdIap_;7suLYLAt`Rh
zNg36@lae)_##1No$8F$Du8Y36W%wUmJ5c%;6rLWy@IIY+*$cLGXDQ7ATaoJTIY1wT
zzbvD<GCtd6MXUPGzmd}<-aUHKX{*g0WIuH-ut(}dCVj&<wy>TULgzAWSdokG{e3pM
zawum(f3(`cXWRRGy;P>cPRk_1K|8m+aMz~Y(+F1OKrzvnaWjQo$}xPJZ#c`SZ}Ymq
zhW<%3hjRN@gJnqw8R|qwtf*X$rO=8+?Xde~_C{3McU$cOvR*iryf?2R;1o8~r){QX
zu-Jf$k?!>gSqu;8nBKh;`<A3iTR}ebnk^n12^M^wj{b0OYUEdIN^a@ErzuWX*L&g4
zq)NRA8Lqecbtj1;j2qe{R7dtf%P<G7ed$piu8T!yG`<%jXD;vT$XX+U<eOI9f+amP
zdvcZh;-%x|5M?-#eYTKBkt;n0ed0+&w2g|e!4V}JDNCS!aIfZ72c}=>^jBPJb(hS~
zrsqQG!oJ#wlu8Z~Q{x+hZhoYEd*D@Fs~H}{-rN*ES79kBxy@u;!^_Y%upvi=VkcA@
zw@<bFx%q&V;&-i-)$wk!{+1c)z0dn6S7Wsp%VAb^1lDA2m6SnG0-)rgaNAih>9lew
zCmgGUbu_ROChTr~Y0#b4%`H(F>O4C8oS9eSId5U7T_tk9uA~9sx`k2A%$F+$oD=m!
zpYJ})|7N@Fb0b?u<2q~?A;AiCc)|Qpk+wsSQS{B3UXvJ=<S6TgJ*jbQrf!<Btk|OC
zZ%%z%u|xjUOqlv^jwCmX2#mwcGgZGYq(t0wNJYW58eGAjk3GKDEtYe}*k<nD{>#Xj
z(hSt1kum5coSM_#<Hu^O9&T#G&5V0UBdrVPO^ODH?IFh(di)C&O|^zWtHNOWlX~5L
zzC>KI2^e`L<m=;iwr|d&44ssY<V9;@x?3eSoXa^nQpsv%ow<LDoe2vurzGA~tNJMU
zVdkXj$69c<Ic~^)ZY3={ZM<6xi>)y5t5LLzO3+uH8s8^b_4x*Wm0j{CNTM7`46kWy
zeb)V~Pp?{qlZDcCq{F-zEe0>F&3C(g=SFiV#qLn%(sH?o=wDfTk)^hdc!#aQg0eFz
znfFg6?K7p@nyshT71l%_-m2t8vo&*HDst~WQ+Yd>Z|nKFE&F-5lJY3d2>JTDXGv|F
z-+$4E$rWe};{3c`P(0%L(oU>sJ6pU$r2?I}D}ILTv{HW7OrHI5zL$o%((w+REAupf
zN`Xm-XqKCo>_bvb%(#O3@&{JMSF>8Y(+)L6Yv$KElu}EMx`(*b!eMhiZF1EPPtbe!
zR(I}uEL3+hYnN_?!W{duJ{1KBMkQUn;+=fgMV?%EIKIts>dT9MZqxiKnzG(m5~f(z
zqGofVboH$LXpcTM4`dgw?JC=*i6859HrDx6$EuvZ_;PMtr7xD_j3*Gs2g#=mK)R~E
z?4a$hbxK31Yu#If{7Gi>g%sMvI&%sqHrzL4R`5bfn)w=&x^NqCBVng$qfzqn=V)Hs
z^Z9pBaESy(aa~H=#QkFu6%>Vm>dgw3iD%)V*+uK18wHlM@f#ytSDkG)viJ;fq44!v
zxY{Czys3oJwn#6z+;agQbl5dcm?7tg3rJe8{!6dj=iZ~Ho4qqz!5<nKOFP@0ouREV
F{{v(N37h}`

diff --git a/doc/mod/ipcalc.d/ipcalcreturn.avif b/doc/mod/ipcalc.d/ipcalcreturn.avif
deleted file mode 100644
index 5e4dd570502f59b63d5c5fb05515f6c489d102a7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1247
zcmZQzU{FXasVqn=%S>Yc0uY^>nP!-qnV9D5Xy^zO`jnemk_eIm0*#E6oFWL5fuSHX
zxdg@r(K(q(Fk|=%GD~v7a*RMyE;A=T8N_p8U|<A75XrzO#lXOP6v)=d%*+GZ4VIAt
za#EQ<ih*hp%M1*i^K<gSR%T@u6cqr)y)z4v^MSNTW^q9(NFmT16(9k^0tJ~BnP3qP
z4h|sAlUQcx+^7H&VGvHv&ne1F&Zz*J%*(*m02C6>EXYj+$pHb-VJwVH%`8CE&gP~h
zmIyI$aayPrS=?}Nc3fh#mEGqA%bn(BD&gO!-N<|KGGNgpL6aqstR0KLlreOP^Kyjy
zDa*f^=woKey#4LpoY{Fi+FCUV;ZH)B&x}?K;+`Amb$-#`laJWBX3Bo|o!KCNq~Kie
z>F1LEt9J9J>e>Ezlb_r7-RkS3{rnbR5{(x&hqn8cFIWHmRxN1NqfS}9XV-;w7W~Qz
z&|WtCrE19Zr79~YwkzG~Snx_VD63(~(vb7vTkgzQpL5AtrkCZHh`_e~xP1)$Up|@z
zs{VK;820E-@cb3#>t)Lr+N!0S+Khx`@?$J#G%=g`G<_;O?)9`T%~I~fN>i&$hZo!L
zEs&jezeJOri$`Y7$%P(;j)wQ;y#D)anqzX|m9T;E#y$3HCWqAWT4f|GKX$_PsRNVc
zug4xAJyxZ9K6-Z~UV78Ai<L_&9xTnxDw-Q|y8p+@hz{{*GrCSi1|B$cV$P*q(+?_|
z?4Ez5Ec<`cq!?+-r!y6%L_E<ecl+DAeJ5Y@H$JvSYOiKbNwiR{%5=K%!=d|a-i|%F
z+nAMETMVC?G9H_{U*9d*^VI|2Ww%$Y{d|S>P<VmVukW8fUHf!W#Y?<)^|uaQt6v%U
zt<0a2KXaDu_t+OIU%sy3JKOh$6qjl>os?@UYYZ<|2{`3%3!HLn<C5>UuQ_}Zcyn#$
zYu>3#FTa=lHdi-ONh;yu+qDvWYzr1h#<`tT+5J6cgRp9;_MEiJ&_y+xjrqr){+xVP
z<I>iB_4>DJ+?f;Rn9L2|#x<?<=PNtTPs{~g_jylt6kR+SI%DJG=hc=QrrxR2UDbPP
zttsQ`zal|yQD1Zv)nrvZhMt)ewQfa?Oo#fatQFjnAv?YZRQ$6!vX(7bAyYYP{VWIb
ze?mvn1D5Q*aNGWxt8Zj}-Scgeza%qGT9kZ-*;qqV!cXX9eO}rH=Cwz6ddeQ1|H5d-
zM*jaI$tU0EUV5vb<k=~oH|1yl#^5)qO|t(ulQZ;k!!kwfe!WsFI5BH^)-Jm&ONj$7
zuR82o6_GgUeYK*;7OqoX0W+e+O3fk<XD^&@^-^j^?H6+$?S9vCY4aGZ6LzLd7nY`Z
zN`6<mbfJxT`^u*u*zO)$dWp;O%$w(v%G8%BaCYr)zq9h?&E`jXbKa~w8h!Jq>1@ZZ
z7pH{o`zUeEMZo5eNl)$HBZBOlyaKxp@V;r})RWlew>18iv`swU{7o?eQI@Y>R_)D^
z*Gzf;aC6D|O|4q*JlevQA2EMgAQN&o=b1!|v4HN)^;@KG-SJ*`_liQ2$g;$e6_dTq
k<~uq}Z88kVkt#Vo>;1CtQ!d<Vda}q?`s(59=UVOn02Z1F&j0`b

diff --git a/doc/mod/ipcalc.md b/doc/mod/ipcalc.md
index c07853e5..f8d407c0 100644
--- a/doc/mod/ipcalc.md
+++ b/doc/mod/ipcalc.md
@@ -43,7 +43,7 @@ It expects an IP address in CIDR notation as argument.
 
     $IPCalc 192.168.88.1/24;
 
-![IPCalc](ipcalc.d/ipcalc.avif)
+![IPCalc](ipcalc.d/01-ipcalc.avif)
 
 ### IPCalcReturn
 
@@ -53,7 +53,7 @@ the information in a named array.
 
     :put ([ $IPCalcReturn  192.168.88.1/24 ]->"broadcast");
 
-![IPCalcReturn](ipcalc.d/ipcalcreturn.avif)
+![IPCalcReturn](ipcalc.d/02-ipcalcreturn.avif)
 
 ---
 [⬅️ Go back to main README](../../README.md)  

From 77dc0565a9a93004f28647b3315eba5ae92625ce Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 15:17:54 +0100
Subject: [PATCH 935/988] doc/mod/inspectvar: update screenshot, with terminal
 window

---
 doc/mod/inspectvar.d/01-inspectvar.avif | Bin 0 -> 4232 bytes
 doc/mod/inspectvar.d/inspectvar.avif    | Bin 2838 -> 0 bytes
 doc/mod/inspectvar.md                   |   2 +-
 3 files changed, 1 insertion(+), 1 deletion(-)
 create mode 100644 doc/mod/inspectvar.d/01-inspectvar.avif
 delete mode 100644 doc/mod/inspectvar.d/inspectvar.avif

diff --git a/doc/mod/inspectvar.d/01-inspectvar.avif b/doc/mod/inspectvar.d/01-inspectvar.avif
new file mode 100644
index 0000000000000000000000000000000000000000..1be1358008388ec650c82e8974859237a0a5846f
GIT binary patch
literal 4232
zcmXw51yB^;*WDF_1r`KR8l;sjY3Y=b?vQ55U1I5$P#Tu*1_fow1y*U+r6nZA1*HT;
zkj@W(-~8{JdFR}7&%Ar*&Agch005Ysd;_7jaEKG&HvXXp#7W2lV(X->Af#|BZF@NS
z+WxEE28)Y>yZ8T7000WH_x&ILACf^Kz8?Q2z}uY(;_hYtFH;5pfVb=44ggXD0QdZE
z`4b4l^S`G5Rp@RL$2<Sbw;o%#ppcT6yVrlcTp>_z=&h~^f!cfB;sb~e)bXDY0Kj{4
zYtOnR<WNWe<Ua)j0^K6m7A~X|$^K6PP}+OBdwbfu2i%@a3LuEMm8c<558HpW+qfMJ
zA9yDk|8}ZS4+mS{`v77>NlxLAclZ&)8%#P>^2`7a@SG>l5qBW-`1Zg?jSZzpUD$wC
z0bR^AT^f1TqU^>brEuW#n_!N;N0OKWi)xtNT@8;^MtL@rDmBwE4K2>JDMG-4-6Vn`
zPdmRS5l+5ym1;%0Pm%s+nS<_kW0C3CdTGwj9OKu}s=YhKDO(Mu4e2{WVZdpelW;+A
zX*%me<1op|D|ED=+=sCjQ5`APidsQSr+Tq77cR@cRu&fAMcJIyiQ7e7#(ueOdH6SW
z|8Ap<nH&ACH~s*dm6cpoo|G$#>!{65?^qi1atzQc@8_e}ebKG6dwA+gaOOy_(mJ`3
z^HJ}9Jc|7bXLMA7v7~@9=^kmvZ>|Dv*|vkb@a$Kky@OsFGfh^+w1+m);%_4y=v0z4
z>Es_$eCyF~U%4imH$i5L(L|34w8WsSDH!n<th4Sk^|`1-8z#ujk8Wdk^I0-|&sXp6
z2U(8Xp%VI?jw}*koVoX{`(VcQC*He$6(@+m5%|<i->0cSee7Ii$lot;%tVlgQdDuB
zHh<4f(IKOf+BzY!Rx8Euky@(obP{<il6uQG60dVw0$mA%XM5;nM!r3hqdgp|i~*>3
z6ycJWtiI!S@PYVjG{1d933p%Hq;ZkAL~2pvx-tUR+y<l>NuHy@8cfHMInQ7^#&ZZn
z7dZP+qyb}xvZ?%hU`oD5I3T+EuD?^Uoq`&h|1BYR%H)VnmrBwvtLna-l1A5d9qgvd
zy&Z2&*>}2(%x`3ZkKv@as;>8=l(2zAI-RPWU9oUIbUziq@}$)nzohRR-;zB(2NXS4
z%E5A+<5_V|=1f$*ga0E};^R(P#H;0I82jnA;u0@M_k=@C`q^8y@t}D#aLo<1i!d+v
zC)=2y`6q-l8x-%Z=tSuJ^>OAAxEld#!p3D@NU22J<zHlxml@8WvvlauVcL=E3R|Tq
zZ4HkwjX>cuSY>@n@hohh3~=4jVRGA5S63%IV?wf8;N>&#fQd+7;mb&NZmQ*&q^r1^
zcN+kg>|cDzJ0oqxos+HyJ2S7z3cdY0R)-B7&Wieu_PlUFTGXb?y#G-<kWf=#T{_9a
zjf_EHvj*u6y3Wby_C&?m{rlRFl&Il`{S0YHHYQ?-q12WUM=0s;45pV5zT&%e5)eVE
znrYi`emO)J=<aQgeG7~ODm)k3cga*$MO$fs_AGpShmQP4*4#}lR$If@?tMF*-KSq;
z;g=bg;BEN@KkQ}2tVC>WAAFdN0`pJ(j;wvFVWbaALyN{%!MYx1hrZgspb#^G1w1#R
zZFQdnSIAWgw5MM^Pcn{B9dhzx8rE*0mOZ5e{rSEzqWs6utdK@!_r&aCy=XVF#&jUP
ze>S%^a-{~rW3x?M@q3Hz6I|~y%U<qs;3txi`sqzZVFO3YfabEiUY?A;Pz`PGFI!^+
z2V77l;%R1i7^rmJ1(glYVbLb2e0f8aKzqQRTjBSWHQ`N)A3a|w+06Nb!#=V;o2G>@
zHwx0Qv<jp=6I9Y30)rNt<v$A~j){?XRYh$edK9a#G^}vNiRB;h0$?3P{>!rxoJUie
zEbhe`$<tsnDr|sKUay!WS+o)(N>7inL@@V&&Yc4HgG59mNwQ5;Cf2W?)I4ejS>Sm;
zTgR!L?@8OV9WO4Y5s>w2s<}UI`R8VBU+&|1!9TD4IsFkL;mrw;K{DURNbQ4ms~lRA
zDm#`6nJP9J+i=+ygqzEe-v`xS)^W^sfg~$}y$BNDjVkY(4j$E*=HG$nXDBs&qOA6E
z-DoBn9gO7J4Eh=9a2Np1eAtC{`Ll;6K*_TBxvbz~L$~v6B0up^FgdsC_UHx1A2<h>
zQ%G`OT==^k<cVG?0C$o<OH>$_`+_OBCl0@+$jt^W1bnrJ*WIgV7DLb%@y3I>DAEV2
z<=gAGhzI@C^~c_7Z<;Q&h~+8kv7o~7I_=Is%X^xVxW>*?dH(nj0y{ME==FU<spec8
zjsNr%R()zg5GSxQ(_{>L9g<V9{Lt3OJSCsuIv^@iu0&u%uz5-1;{nC;NF)^38*kyL
z{wkVO+|m<;e{D*!?ej+42a1v5Nl-$^l>(m=TR(2%cr495#K4)O)$2=4e{K*|r;n%|
zX@hTl3b#S(5}%KGSS#ykdsxlUyI(*WhFniZaDR|9D=jM`>>QVmc7ChPA<_i6d^APW
zNX-fE7P2S}(-EMjjPhMe3VR6cmXl2A%ye{|fla*uA!oCrYLhCu@-pq(90?(U@1jus
zoi#NWDSA%XMVu;wVI?Qoy{rlY!B$l^y;R-Qg|N;e&m(1#U*{Y*?-VL~WeJ&+QupV4
zFg0lAog|JC@Vz#rN0&m|k!b0@j@>cw!j1hz7hJ{hn};T_^Wry-)qhsLcs+eV{&pk0
zlRbTOK92htcxBRo<5(B8S>15~;OLXgFjX7PHOU8to)LMO=uFKexSJpDGiOj-f#ip}
znnlOOW$$(k^D6s-9YdXBdoaNiYthm<I^2g9H|enz^q0?Pa<aaGccY;xO5LgVIx?Yt
ziWniw<yB}WlLr}0#;!rpY)y7GtdU?mo&YK<>4lRq+gfVMiQ;!|+;2s%)W}gu9sS(Z
z;j5Z`!AE)!oiOy4*Y4^Cc6bBbS3sorO?a?2D7ajU=aDdXM2Q(@LgqrivC%2<dOmZa
zhLWx<I9D@AS4HXp=>)uJzMp=%LbaI0+ic0ET(x7|#^4$}{#|y_>dojej7QZI?10ob
z`Cg<I!<i$UI@#6aDrdbfMqpkQ-pVA7`nz`kl2MN{MTA%oVq;2}(u)Z*9<x_@`QjDD
z*x10V{GLapyf;d83n}f<WQ8ihvJG*B-Py5lb|}UB%pPL<K0*SmXZ*0!frKWUS-#ZA
z!rAPwq54P5an@7<mO8Bbsapx8@_RF_?RNgJUT*isW>3WlvXoJ`#|3}}#I)WOiI1f`
zCPNd4V$bGFEEZ!HxNKJS{B#L=X9AwSut$RFg+K5^(6yH>h2UTonVMEDqm{?>^xcZ0
z+LSE|PmUTXj{QuG>HCky*o@EZwb2AG>r5{qeN=Z_e=!7tJ#ei}$wd0YJf%WqN-3)q
z^HqAMV_$xgU@!{?WWi@z88;L^qVJX>%Na~)K0EEg39SE?2?&_>1L0Yls_!<X=?gzb
zj%)aS4=I%o56CuTB!4g66Lvqkl@isv_NrHj1?ZPerJ(raCqvtfMOEF0hid!=Kq4n_
zvbseI(}w>1V4>G@(aZT1W~G|vq;g1Cgc862VsJUqJVU$Lal(EhyjM1b1=Q=!zWgqR
zF1z-2vo(@iN@@}Jt>L8&iq{`QMPW0ALazdxj+?mj-5zs8%_|?ViZ9bL5D=cep}YCs
z2GhIlM<hv=NzV0iD4>knhXyTcuJ^<gR^B5PYF4m-XJ1|yoLo)9QT;WDIS<Sgjm>~8
zCw;|rq6EI@Zba3#H+AQJLHQFzgVg)=j5t!rvr3#Mecjkq*X9M?Q#hqw1%Jln>!kG{
zQR#=1j;)0YdwW^b9SOY1-b1&b%!9YfN=uRbAMx<IeqVhSFjSkFp^S8Cs3WujGE}GW
zIo1o`4PviJWh<6o7||=HMV~Ayzo^7K0U4=Utjq|DH*$l9iQcbZ#n@IHYr$8$^Z=_X
zq8~wK>+In)QAzu4Z<1!P-0?K^5`>>1$$@$EYhOtje*yXqnq;4iHVW4$=2KxsMgnKK
zBWPv&ysl=ncV>hbxEw<l4XEXDAzb~VuuA$wwLV7kUG5F<B0j@5;cxG`h-t6u)4vs4
z`W!hLm^~N|=@T^O)jretMgRW6HU^-!1`RLUx2%~NIXyOFNeq=g7hxYtn)zGXl~GgS
zN*9BPW+>@%Nafz|aR#FnJA0Xui{(a{+hNIONzyA1YHibu0Sr`A*)R)BYDW?RaJv&$
znwB;N<P8a^xX(pK5x=&Htgf5(4<e09HU0DG=Td|N4V}lNC4?>y!Nfv|emJ&XGjk$a
zUQXNSK!hy)skOI8nsN%WX+B%=aq(6tdBI~13PaoJ=UV(_tq;>TH{UzNCcZs#$<c*$
zz`vMZ-=qg+6Y-k(TtEIGN$VXK=ho@9Z#JY%C$rac)ITg$+B5hR`#PZ7%9T0GA#e9t
z!SqPr7ypi7rxVu#r{s5?pX-+#+TodKjcoSIp<cO<$85&jYITW~9Y2Bxt4U9lXeM<7
zTU;Hx-JGGD*7nZ766fHt#Zw;*bq!^<f!xw&Il~uPi7AASLx2Q7BT!F56Ho3i!#2W%
zY<NtMP#7^Rf(J#oS@Bn56{R_0&NqQPZq58+nv|vamt4m>apX*-!S|W>aKT+u7om8I
zb@vYoVc1=YKnZm~1)is_Z6opga0259TO4gt+`CarMinlDK!z7AD8lqea$=*oxtrj$
z(w8nb_naQ=72xr({S~^x5#HYL?UxEx+EN1AIb@8wR(fqWn@-s5%2#Y<m=VOn*(QtD
z?@6?G8XsV-x@UCE4jTAf$!RU7_Lz2%>)6IUlGEu>B=}Br&#TI`#`02Ya<eFf96zfM
zz!4HgOAlxBD{}e~*jbVH@*k28zUiC6DLXUfwpzcRDb7ANGl-pB_W8+N@wii~yK*wB
zYH=p<2XzRiORX+=?0w-+2)^!TrpGTAJrB*eB{g5g(iqe3<_kvZB6-43_WKLtJImD7
z)dc5xy`{cRjG5SkNw5-%HZZ8HpK<x4Z8x9u<CuE};=A=||Mm^H&mE{OU+fqtT^=}%
zaEK`KtCiLc32=(NSk)j9A(8<mCN|}^_$W@Uv`sI&0UZ{@IkN5dqP})!$tIoLutjNb
zroGGgQ#vD5)&DIE@>(i9tinyZKCdC~!-EG0+dyiKqDPpgzk8YMN1kGdkPnB%Num;_
zJgGKGa)XpGep{{@$s|cfhcDASuH(7W{^nWsO%jI+&9gU*B_&wcGLJ%D|B`1Q1kTod
zR9mN+P0l<-a=~}`l<$lmZ*Gl#&Epc)Y{#rVn)o7XC4jxpCE%UvIZ?t%2i518<b!%~
z@wt7mRTvb*9D&lwMQn+4ol5Or!W}x8%=?>1v@s@G54Pr028Ad-e?I4*Ou19>)p_)_
zESHgDWFZd?d5red;h$kl$To?Z?x^c@Sr_n=^vN1&Us1e#@p=~b4^}?~60P)Q!$oOl
z$@A)y$%`vRuG<HmO6ygW==#*BQUGpS53wmP=?zhgSdZV1(JEK!%|!Ur(Vh(G5`W#*
VwjMAW3)5H(peneB)V@C${(otG>;nJ*

literal 0
HcmV?d00001

diff --git a/doc/mod/inspectvar.d/inspectvar.avif b/doc/mod/inspectvar.d/inspectvar.avif
deleted file mode 100644
index f1da1d4d1bd2685dd596c851d4100623463bd455..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2838
zcmXv|2{_d47yXTW%QC2>v6SphWLNe*6J<?E_L&&Q64{q2yGF<i5?QiD$oPn|M=}PV
zeK2COFQJhAKl(r4eV^x^bI&=?y)OU&LT>&+D8~SV8$hj7L?YZ|kqAe(+gh?(RA~$8
z>hE~!QA-@|;_3T;3IHgCv;Tkm6g?46|E*z1A^eelJrK1EAUwUDPbXaf08!s*2S679
zfccQh#SsXvzqkK77pQ|P&1smLaSV`=)$#W9{(JHf0_BUM>c$9^vo{ra5Pm4v(;xuQ
zicsS`RKkfuJVE?bn3$NT$mSRzs}m)BssP;1-k!c*&Yn-Go6i6YkyPm%0)=!u^{7St
z7#)ZPO$PuhbVwIRe=xwpqU?5EIh%<IE+2V)g&XEVGbOL%L?$;Cj^zo?uKxh_ZAQ!1
zC7aUPu18t4=wtE%PKXndB!|zJO~u6?AIMmdS)Z;qcFJ8LoSpxA=3wBwzwP{6rDgWP
zmQ=S@g9W)}Mgc>2Db>Og8N202z5%U-a;LsPMExJvXSJ@%GX9D+ud8gu^aXs>`Rv?+
z`OZ|ldsVhiiQym9^WtLQA5}9p3mOS6?tySv5_d9SlX4C0f<8gmeg03Tb8^c2`2`gY
zeW7|5g8;;kV|2OekJoMO<~uR_2c$Z~VGe~Qz=pugz7+ZqsMmDw@3(!DJTY%}t9JHa
zLscqd>0~qos#lV9;|>Wa_WR1<WDn_Sr*&Cl1Ain<1;($*<=!X1{xF`yUbFu9LeL;5
zvGw=@UoiGE!FD>Zr|p&dgzxS}-|JB~G<?#wuf6&mrY|wnJtq-Qo>=Fa9q%Wso{f>j
z3>0+V=;J~2gqpY9K0tsDFk4|#=NCjaBQ)<`nfZ+W(_pYjA4H3vn*ZmOHVZxoyt?E%
z7c(?9KGm(Vf-AO5&v(~Sj3z0WS64vd_qe(zoktja;%XQV1B#yy=UlnsV<Y)l(#7UI
zYVF(4KsouyMuwbb%?h@pxLFex-Qt?fK#=ih{jQz9?3uQPg5A6RiV<hTy%F!}V1x|E
z-1)DB*I!~|5cqp@aQ#gTe|=UgUr;O$1Pbo96S%MKiEAHCugGUneEN35hAV`7u=v~^
zq1lyp$Hr0xQ}}`n`y4XI&%+R5LsV^Ul^S+iV^F7A8ZX6+W@G$p^<szo+M;*WV)Iy>
z?pG}-ue~)aIesja+la^-{mV`i43Erbe9jhq|5>=3{U`t39`nZaN5_*<s_ASmZG4&2
zSee3@Ae%B$8GtDdsN}~HS_Tal?fDt?rB~sQgjfm9R40}R8e7Q@%hxX!MMeKIV88&#
zoR?M1yj6v!TpDemJ{m9UE;oVxWYpo&noZGjhzG^q4k7I^ih^mSZ-(Q#btld0bRS>>
z0KgXGz)j0lt>pf%fyQ(QW}r2&s!SOlzqg<hM2_DoztYOow}!m>HOHp?xJkOmdJXL{
zL=!)v>wR9w$9bQA;okJsp6V=FhwYN+ZwX~Z7yJLE;OqD8qccCdzBuIZ-?nni@1zY2
z!daX{bZS|0FbxS6w4@;Q(Glxxg^S@kALfu^II&|1#YG3cuzw%DH+h0gJ3f<%$nRG8
znkkb^$aCG|>sk1%R7X+Q<N+O}V$Qj8BlS}b6?OQ|dvJ!|^oMsDq2o37D}GZd=^iU4
z_;)#cy7?Yp6cSRo*~v=L?<K@`(MjTe9N>MOKJb@zz-Bca#-ux=9w`cj(i?@}>_^+E
zaLQ)Dwv(hPnUzlJEVPESc?NO}N3xZC=~ducF7ihU6lh14Y0u*2Czif6sxHou9xm*A
zO7;?O&joz5S^g|<wKb}8f!1CubZ=ZU75^1F6@ID6!t(hHp|bK710_GDDF9Z%X_q$w
zkrvtA*?Q8tE2r>fE@0pBfs;3K>lOz#FC_=O>F&HkPO-B{#1J%<Witv)CK8@9K(dzk
zMiP`ID!Jw28x{vG#!jL)h_uU>{MuBri}uSTo8$kW*{t<16d6n*l;j{>E46@3Q;D1y
zqy5glk@jx$(Ax6|{f1}Oel;5kT;|gI(5T4E*oYS9$5-E|g5BqMSemg0s0}keXQp>^
z7p!&6RUbPl<J~<y1MZ$Q4^Tc;yxlE&mM^3U<Sg8s0G+eowy8*lO6u{>kd}rS>L$|y
zeR{{0^^~e-gb2fywS33{n)Vs4)TGA#lEp+p>*o>51`DIjBju%g3P~jPC^Fpo(hbcd
zhl-A8zWUb7UEkmVQxUiN$V2E_j|bn?_vX9M*$*$`UAYX)L+Up|e(*z^3@(+pB%UqH
z`5qr7b#y(ye=e~w2?Y_&EQP&>B~IwF3ba{mXu711e;5mPpEkl-!+T9EzjJS)@+L>h
zhxZe+QnO)t#yEEZvrPsMYmEuEl{gXSnTq@DLc0pX{&pTtCa2Ex8AVpl<rvOGFQ!1H
zwZnDCaGA3>y2kEDD<&pQKijPBdHS<@T(06-8Q>QAq=&2JqUIkBV_`>p=}^Pt!C3~i
z;pi9f{xn4btK3=R_9c2*T|LLa>B;OFX3F%~-d{sr@+oTAT#*1$Hq-Uhd`nNrhG^+n
zBT+S_SxHRJ(>;W@_ag*mKdH(piMUEjf19-zC7Adjpy*cI05kVYlnT4KuNoR+<Y5`a
zzigalX6vgWwCUu|+#)Iv;5d`jq44gz%@?*-=IXZ|eO_bHP7zRAXipYm<noIe*zpT;
zLVdB+>rYlJU@djb<wTYQ=t+%e%4GI<P0$*x8~d7NYuxl9670YYW)O+L*Mqrrf|E|7
zgycLf$KGGty0+vRr}q>j=^Si?9GFg0(tKC|A{A`ctRTie49?)nJ){HS8`J#GU$jBB
zp-U_r_Oo~3JMfLvVD^7>Hune4EoXiNJB-LAH6|VKN~l)Pzf5NpuPZ8Suj1sle#@b2
z94n7gkfh*wclSg^=G{tx(XajydBOuNxl7E3Uv5}WrkY&LHsV38RK9F@<&Mr#)9W}J
zx|Lx?NS1mo&wc|L_-4XOYNp?;{y>WbhBCAv@-x})g39je=z0Fxqce>$8!bIw)?dKl
zH#lS#e!G2t7rWd3(L{9-T$IIn^hvH`bo%v%4-Ghm>4e^jV+n^$o-c&cHgo1$DFjI{
zkqR|SrCc#we7AGGO|-w^L}PpJ;5oLMPnwt3^FdIBCYf{^aB>}9!c<HOWpmAH#<M<_
z%{aUye7+ifKrt46GmI`ial5A>zq2=9d!dZxD??;rS}wi#l&bWbw<T^)0_-ivZH!)E
z-V~G6?VbDl?1A=rYnH~kP)pD3CWpD~Ch*2}fzeS}N-BMH;~DiIKRR`-j;}HZnW$@-
z!;vLKmItDY0wM+p$#tdd<j)c5E5X7BIiW$hX;rO7?ckb@pN>B%g67))sI(EnVMg&a
zY#f|cg&V9EPcfW|E2WWHZ)?m@4I%<cM2Ha4FwPY<NRLpFSc*9O@bI7Ht~3%+?R*EC
znUWvZ`Rkfs?v?IeEs5m&yHDnajwr8VzUPVo;1_uG_m(@tgSN^V2c+?lFZ<YSHy4>}
zVz?UaWWUTirpdQp3IWNmW@5LrZ`aNTh{tF_yCvq`pw)&~8CTxPw|ZgSE_I25rLiRF
zgbJ=()=FN_c8K4HppnVN_T#+n#rU&*XdU|=zng$<coyoL0jfAU40rSKbi#9|nrQlm
z3ByEefk#>JIX8xDZIz^*tt0K4V04>dV&K{#>STeecd#q09BP>GV(aJeYIKPeQB;<{
Wpi-Ml?@^$dcvS}^Lq&v)tok3qyD;GZ

diff --git a/doc/mod/inspectvar.md b/doc/mod/inspectvar.md
index 7daba153..e5c5629e 100644
--- a/doc/mod/inspectvar.md
+++ b/doc/mod/inspectvar.md
@@ -33,7 +33,7 @@ Call the function `$InspectVar` with a variable as parameter:
 
     $InspectVar $ModeButton;
 
-![InspectVar](inspectvar.d/inspectvar.avif)
+![InspectVar](inspectvar.d/01-inspectvar.avif)
 
 ---
 [⬅️ Go back to main README](../../README.md)  

From 2f4e83990a4133607a80ae64cbc1b6deaf975a2a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 15:20:44 +0100
Subject: [PATCH 936/988] doc/mod/scriptrunonce: update screenshot, with
 terminal window

---
 doc/mod/scriptrunonce.d/01-scriptrunonce.avif | Bin 0 -> 3072 bytes
 doc/mod/scriptrunonce.d/scriptrunonce.avif    | Bin 2356 -> 0 bytes
 doc/mod/scriptrunonce.md                      |   2 +-
 3 files changed, 1 insertion(+), 1 deletion(-)
 create mode 100644 doc/mod/scriptrunonce.d/01-scriptrunonce.avif
 delete mode 100644 doc/mod/scriptrunonce.d/scriptrunonce.avif

diff --git a/doc/mod/scriptrunonce.d/01-scriptrunonce.avif b/doc/mod/scriptrunonce.d/01-scriptrunonce.avif
new file mode 100644
index 0000000000000000000000000000000000000000..461c3981d0e2703ada931454c5c99030b35f50de
GIT binary patch
literal 3072
zcmXv|2RIvS7mZCw&04h;tx;m{UDV#2N(rJQu|<^{4YjpaQ9`MhwQJAM3SX7lt4gW8
zil(Lf(f|3*`#ksDbMAfby#N4!$2|argapCd0R&vL56m6x1B195X@E5d){YM}0CHU;
zfY;N_+wcD=0Dy$K2K<-*$2X9$0H42th!DA8-U!!gr40ZO5#DtK5HSJ(z&%2K2L^-x
zUHZ4eP7qMy>t;d^BuE0Rh44oF-Q@*C`XLFv0SxJiATSfm9|^r~1OQ0x5W@8gIwULv
z_Sd1Lq$Ds6BnYe($#d-h7+n$GesEXs5W-{-fczQ3Vu2xjAlEel2#1jp5l52}t~&K`
zg9I=DfaLN5bzzkZk}Ee2-H2!5BB#PAp0S<&@7RZoQkCHYBf)yWS{Ei%YYNDq0HDH~
z&*U&PguH9jzeUkt9GMz>N%UZ-FNC6<{>4!AY}`D#QoUt`Wb#PPZQI&vvkbWqNhYni
zs3LGO`81h(^sPwCdnFnS&!sx(w&qOFACypq<jF4CdOqbemqxjl(1|nRy1B}uqY>%E
zVUbfaqdzu3hwGBFV{um0t7EA5eAL0bc3h4C3a2mn%g^K5;iYEjCivrVL!-%)kTYIS
z3t-BMZ(4K{{v96Mwb(9)zTxhVlc6n<n$wIjQy0WFIy$x`epI#JckkC3IB&0@|LkBT
zn;@Lq{*tRIIYkQddnv=&bXl;<k3$G+v7knu=P}EKi?78pfsBVC<&`B-oZvq)82Wc$
z5fiKT0B)0|A>)x$UggV>e`yzjQ}703i%CBX6AI&+KF4M42w+{)eT(sW?ir}_#2iz>
zAwPLV%;~X-*2q0cu9}8!N5)T8xZQ;UYCK=fbd{dtWM<*79jN)8VVrZ({+Z*Jil}62
z3#UgyL4WLSbE_}w2Tj15X(ZaA;Wa0t);}?8*mm4$iP7L@1w4s=So4>txlN!)Q)Xbt
z)TgU&PO=KN7d^5z(kvQufgi{~UBNdJ>F6=EOl{^Jozlh6JKkQ_lt~;?3$m(1jSatH
zLj4WK0Ipu%fsJFXW%h!Y>S>fmjUH<ACeqbQC@&&aU9kmR<=hE9MUS$3aYym)TMZmR
zGcgo{F~*;=$P)Yd;J4WCJ+6Jm;!<y<J$Dd>dJzzy533!snt1YVZBN#VLSBjOL?P{K
z&BQLIsU|l1Vbh;){|e=6^easdHMfM{!DZF!P9!y=JM-fkxr_6Y(aV)TfQ(HI`wYv<
zK?Y3{P6owVh+wJ+qm)TkbM+l)<@siE?-ozw)n2mn?~MqDy#)bce5}x>jjt!(4f|qb
zGGxX4al)`NjE>6m!{sYwZ^c8Cy~Z}r?Q9D=(sD5uyTZwD<HBFpGF9CHM2}GMCMwa@
zhp!bUyJfTU*iD72g)QKzJ|Jg=aGa$HpQNQI&LOv?zQ&%tslo0rqoY!Iz~Oz)_tBF!
zg>?Fvip-5_=TdN8fwW?Dd7DpKH>yVu->~mn+?p3^Ixj^X-cC$c;88L9<^DlmH=7u|
zV0FV=*a_nJTO;Lg&qYX=Z9RX`q2|_AFt=2=LeV(o;sgDq=b59^Gph`bjXrjNyl?{X
zB7i!;5!sKHWyxMt2j8XH@2e0O6=wYO^b@RW`ZSAMt<D9_bz6UjET|iF?Y4$l^BEhR
zTI-t2HFe^{<SF;Qu=)RV4(0#7b2%8bE*GC;N-UAQa4$=OziTHJLw>%~=}S@OkA6D;
zpbGO4xB0uPkS?yJ{HB%Qa;zwk&Bymd8jVVwq44s(0;wBwz@fOp>W7hRK<2pHg%`u`
zb0U+2HZ{pYnbXEV0oD}hov^uhHx}Bg;K!~obMV97;T3T-O7&+fr8mn}z^+Ky6O&DT
zRh5^o<~`#u;&$20mz9AlYGwiVhzdJJs%L&3xAZN4P>W0Aq);upZ8Nxy{PWDOZJFXW
z$IN9X`%>gfjKBpHnwp+v%kYiLt+;ro=iiMqC$`#U`I!YDo5`N8V3n)%_Fp7mWJv#~
z<t>p;cS&-E+TvF~S-&-{-ai4>(E=DR0<uIK^yA~GqYeOKZ01k%vaS2c;!eaBVu#x#
zPIP&G<~vw(-_`4Xik`ok^w_|5iOnD8OsUzTfe@t{y3rDWZNFgOX5Z6|e9*0OHH^5^
z5v|`Db585_i+;+DvTr)7edb&ssI@9{B>!YmAjt*|*~eZrbK079^0j8+7=5v3v+vav
zj)6y;rBp-va};-bU$0ePG+U&eb8ukW-t|}nMREXTe8a<wNP8bCBmR)aA7s_1+EU86
zJGHY}HuCTOsL*_r<&Y4w-r5mVs4_0s;}>y^oGbc46?$P)e%oo6X*%)CF>u$@((D^t
zR6ipog+@B7IdPfuW^2KR!3olRfpaMLn6xz;hAEOrC9LOSBE{NWkIiU)$VwrOLeAVG
z>P+>~WZ)LFGW}Is$R*ro@Q)v2d^1K$Eb}(w%|4JR%C=lKmu^XxW#acI7G*q0EgS$1
zo)b1AXIvdb7tx4wl+WdzDnB=93dsw37g~B)3DY(U<;x7Gr04or`{rvNLXCZLAhXTv
zZ7icF`BJFi=!(0bf)2dwSo}^+uH#YRQ9y6cbFQN{xhY)nj@3#rn9bNqJ4EoLpiDcv
zP3(7Cy-714$wIezMkfOq9-fu=#IQGwR(4vK#Y-9(CfcChZ`r#<lk&$uwRftRhIpmg
zUqMLDldGWjK~<$1Z2B<t33DnFKKtS($NK67yH%N|28#2LV)nRljjM$sq0yf>7IkD=
z6Te}NOkS8$Phws429;SU%E$jg?{-lKH+<zCjwe%+->8tbI~-$MY!WVU%hx#<xcjTK
zF?Kmys=eBiX!gl`*d>Q04<*kAa)7)b(N_44e6ooKgTS-nq@M^Q{U6?5TF=9!zwVW`
zWxm?marXKW(33=qY33Vdd6sR1IGa*Uh3I2zyVwV}e{kgWX&JQ*%ZPPa18$JzOPy@A
zZ<4t{3^JSR?auX`ikzP2RH-SNxqZm%lCWHUJWjT*w9Q?6=kk}>;Y&+{raiAYlN%}m
zxJ)J7rxB7f5gg`tHMLs(zTe@9)X4T4=~U^C_Ewv&5!T#VKOoz+J*;f-c+Sg{m$7)}
zWN!9*+5;ZAYue3NA)9SqM~(JkW%^WQb*%4eT`8}?k&~^fr%tlk|1<;-THQMUku7%c
zl~F!D9`{!D^Zlh%B127^)vwh)vR>0Bt86c(Z;oOHM6-g~W!_-v<#{~1W*NNMqBgGx
zpB3L))s-sRzgQzPlbPv5H(P!VjnskZ_#e8^+mV~GdZB~+s6Dvu?aBf>veqhdw8l5^
zJ3FtTW<tZHkf8M;${{L`eDOiXh^?dA@`;GPPYDM){(#<02DTFF!aL3rQ5nY0><;Cr
zO2V3`^py#*yZtUiTrWgLx=WX~X9ZI{($OD4`1~V)b3|0@%I6ALYkpbe+s%cqeeCQ5
zIl1xT?Y>5i1}_U-l_m1io?znXZ!OR%W!I!}?=1L#)nqD~?D9xXY2AlAYwtGX1rf1t
z)upT`B~I{$>PwpMKn-)tNhHEXG-BxRD$K<e5sn2kSK7o{Ok9}o&k=7H>d~-s;|ktk
zjqw<uw9D(EG5eUL7QIeIx}C+uL=kt>Z4>)=#(yLe>J&OXzzlL&8m+DT1GKv!Rg`bk
zK5jKkW(p(<;MC@0UTc9u>nerY&;Jl*!~~L{dBJCY^yvY6h(zL3r>V1L{?`7$iWXln
z3<-6Q1_LOxl{iUw>kY4s-C6z*@u`2eAmDug*I1WZdnFJ7B<p-sN!;XSz$yIaB^AD;
zURL5qK^Ww6eMX5jIxEr1Uw=_I=YhTMGGqPPLMkdX`Z3hbCeq=+X)nmiLX#zys&lYu
zvPo+OflW_#y1212ul4#?!aK;)k{e%7!{EC&^$R>e{<xYjqm`V@{?W>FK%pETe~*H9
z)r#SlLvPy}v=p7z8~o@}M-Hd#fm^Oh(XIF0F$*>_PzBZ)W~#gQ)<!-DVFRS{d=(M?
wU&sdY3MtOPJOiNG0p@zlqH#z6)iNm}(ko{c8w0O>^3di;n4CwBV(zm0e+&AktN;K2

literal 0
HcmV?d00001

diff --git a/doc/mod/scriptrunonce.d/scriptrunonce.avif b/doc/mod/scriptrunonce.d/scriptrunonce.avif
deleted file mode 100644
index 27ccd41fa5541090b5c12e9f50c653e14f6f0e47..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2356
zcmXv|2|Uw{8(-#_l4~mW5#?%*5JGb2%6%(iuHTFeGs+RuYZ3`_i<K*pR7{ja@w#ss
z(_C3{<i1k+Pyf&RJfG+JKF|02e4gh4fk5KE*jpG+9N-IL*bxQ-zRH1sr>~`+vL1ul
z2=u{v9%&4d@%KiB{J#W&FaQGkUwwoq!0W#?oEQKb_*Xl|$f5uWjX3HIL7-y{KgytE
zf*=rt5g-`=2>N^buOi53e3*`g88e<ZC1nFN3jOya62OFD7`!=vL7*AP2ZUmLjs`&>
zuoNTNGlClfL;!yo2n51F4o{r2L7eyz1A-#ZsE{B8DuS{3B#1SZL7f3Gfu2Vi!x)b-
zA7hGVW_)!v(AyKs3p&oOaqiV+l(+<G=wcGLg*Vd|RRb>??R^P_BsTlw>#_cIymEbt
z71-@Zoc#ymR1)q_A60I`qe;?AMmp?3$&q#<0c;fca`CB~LZ?%2yyHmSp=iRtY{)0!
zzT*X6D`9f$*SD4*IkN04E}<t1XL-S~!LV;i4$+~~Wtq!`hQT-~UvJ|)zA$Xc6#}Jt
z>UZQQEUiLJ_?#uXcPFu_u3@Fwc3Kra#7|h*2q|9}OJalfNELedTbgmGst3eUn3^@E
z<!wu<wC5aTBfC_%lhvMYknw5t;|QDObwg9FWfOmOog|Hu#=$(?l&`XmEh~5y{|u3+
zSuM20rI4Kc?F;GqCM;qCHB9@J=C#&Qo0ENtfK3L6!h!y2^@nk0Q9SsHA*1$18#5kz
z?p!`CZ%Sd>IxCitVYr{L_D*F5WUCHXwVoga6o@Ruvi<yiqj4X*b8*W0(qf@d<2dWg
znG-Xu4MbZ=QzL$<cAjuvAVoWQaH#OZmDh{aw1%Is>vNv)Fy8F)DBb*ch2e<kianTu
zXx-GFaA^EH2bpUcQ3$S*;xW4W2f~YVNx!Bb$Zxnr;#V?s?3rC&%tdmd!`j3SkG>%6
zV=dRH!YZrvw@z5Ske<{wThC-kOY0@C9d9=gA<w(5A=9n{^cg0Dehwmn%6CP%s_fiS
zz;EH(*1{NLC&jylm1I*>cxF`G)9ArI(!Cv5+brXxjnQ|+&N6D`{AA~;F_FhlG}j}{
zR;PVDD8xYQcQ`bs-*2;y$o_@Zu5dV0V{awK<B?hJFM7hj-F%nU!0?01T9)AI-)H)5
zEF@f!W`PGirA3ZqZVx*2xz`(f$@cAl0dQl<rbunoH@4{=9lD_EoLhS$8Y#Q<oqmk{
z?wKz6yP;Q8P2znds+Hv3)V}ryo!hi-bopLD3qZ}bA6&PpJWU|K$jm0(NefoFeF~nq
zKbv6cH2Rs{JkcsBSIc=!X{>IfdhOokk78AwEFzh+_g~WFhzpCIW~?|-FT+O0O9S~Q
zLiI*nqB*PGTALEvU2Wjahk@W3p_P*=@@?yH+ZS~9WZC5?J?$a(*N1gX7h&a3-x4LC
zwH>0{*!XxVxaMR&Z8z>Hk6xp>oO3-dF*cziuoJN9CEb2}sP@;E-$PBU@K(#u3i7lE
zgK0&rPnqe=cQz|0?cDt;d?5Fs-8+2!3Q#UoIMGDvW()LyII-z>xykvZf+!d<pD5l?
z#pOPPrzxqEBF5?;WBq@R)a=b358;N<;|Wv_uyuaEK6PGFdTajWZkHd^*Yx7UZw2*u
zeX*DT`69g5j8XeGhZ(X3JVzg}*_P5Bq&U5$_rb#C!fe0$wUwe;ws)gVty#?EYX%}8
zm&!cH4MpR!`?G2)0lm5$*v-uPU=<I=;TO&~9k|YpC}&HgFIS(>a%elr_5y<3`jw2(
z56eWv5LCimK4?~iD5yPP=UZQ@ns!144#)UO{@6_4K0DW<ysxH;zj@)RrG3otq*vPT
z2}%2==TSDJMK=w!JA6G}U9S3eN7_QI_tROiUx+yhjH}MoV75_5#3IFTHvHpllCpqi
zscETGOBwm;RmTqMEJ&@_MX-)g+;gJ3{UJ$dFJ$<B9HRJ+BLN%0=bj&6hqZnG>mPqf
z;aH1%oWzeRuDlaGC8kLZIk4MAZIjyRaW6qsS@QK34^16kC(cA1_e()eKr&(Y&qn_+
zAv?oa*=#DoSxU;&(Xm8`<H8=gIfHig{lclzeTT%Ec{PiMlN(><WV)`Xl+zV-*M=#E
zp!ZU{KNg@CE#VGEwfE~q^uFBUn!jJ%@Hwo5nnLF1Gueu`+6R|=uC*=jb|`h@&9jZL
zf(r0p&*4FGx4w|PF^YdgA}1x#w(Hha(ytDwG^Vb4sh}&4HZq}GQQ8p~X&RgG@R57O
z*Rm@=7YRoDb>jCWY%31q(9GoB<g&=k^c43E3a8$7!BU6OZd|Xrwo`X(YM9@7F%(Vh
za8gkhS9FFiRVBvM`mA?eHrV1?R4Ok;8eHtWbSO~IbKPjVue35%e-j!PFwpm+I+mkN
zU_%~1W3QXkT~1>YBKJqF`Mlm8Pjyd=TbJDXgWAyibfe+|m-OLCXr}+Ad}@|?)x>Gp
zSMi637MY^l*b9;+uhX(=apo^|@XVd#BjW`=x9nP)bp22Jb1bcDR5y&K2*c;ft4@5W
z=_tcYx(qgJJQ8>vu{Y8csln2pKpzrL+wK<by>-EDDk)j-ZG^hywI>i|BbQ6`RG1vZ
zeMRa<qop{0!Z00vym(wtZhtDJLMyb!?;;P&wf-#}FKcS&qeQ}Tx%C(ZB7g}hnBC&%
zd|T9a-c7<3mnnjw#@B|(ts`;#ecrk?qOyM&H6DFYosbvB-ZNVYX|6jrC;f)fBgVqb
zzjv@RgYh@t*MNfEr$3U^2fUvv8fv>DaUZHy4`#+m&Yn?z^*M6Qq|WtP^KO@FJ6r!)
zkq42`82eK?pS~DpzPHUq5Zl_(c_Z7EmlK?eBXj2OrJTMKc!l2UGyi??^6gqIdCk66
zGyVY_h;HgtiHu98bvy+~i^D&VyUCUdb*@u!U};Y91aDa$DBADNj9j!Lncuu8oAZfP
znAvIS^EIPcb-UGc=n&YwH|U>F3%THTR3n@KdQ^g|Rq+k-YG-xqgsSnOhN-qyp0?SG
z!wh0N4+=VG$!@*n2-yat^AWt%W$R0i=3IV`XCbL9v3b^HufbYgfiK)++F6Or!B3iR
KdXs}{75@h@^+E~&

diff --git a/doc/mod/scriptrunonce.md b/doc/mod/scriptrunonce.md
index 1fbb697f..db861bbe 100644
--- a/doc/mod/scriptrunonce.md
+++ b/doc/mod/scriptrunonce.md
@@ -50,7 +50,7 @@ The function `$ScriptRunOnce` expects an URL (or name if
 
     $ScriptRunOnce https://rsc.eworm.de/main/doc/mod/scriptrunonce.d/hello-world.rsc;
 
-![ScriptRunOnce](scriptrunonce.d/scriptrunonce.avif)
+![ScriptRunOnce](scriptrunonce.d/01-scriptrunonce.avif)
 
 Giving multiple scripts is possible, separated by comma.
 

From e49f68c1f23a0f154ab578e8d3db7860ba1d0b30 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 15:25:01 +0100
Subject: [PATCH 937/988] doc/mod/notification-matrix: update screenshots, with
 terminal window

---
 .../01-authenticate.avif                      | Bin 3870 -> 2672 bytes
 .../notification-matrix.d/02-join-room.avif   | Bin 3745 -> 2604 bytes
 2 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/mod/notification-matrix.d/01-authenticate.avif b/doc/mod/notification-matrix.d/01-authenticate.avif
index b897943b1fc7d8c7c0ac6a9f225733d24dff9e37..d5b80256da1b77fd66351b3c19654a9427d70135 100644
GIT binary patch
delta 2522
zcmV<02_^QP9`F>9A`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951ST>t<8C~0YKW&i*H0004zoE?$u90e!<0035#
z4FO1h31w|$VRRAz3I;eOvU;o%GSCuCWCGZ3EA=XQAkXW?=cr#3Gpv5b%Xdf$v0xN=
zx{nP@p8!1}o)lZi$Z#oD#pwsMPJxhz{sBqI!*~b05sAoy*ofK&JF`@)GLFldBv`So
zQI$7%G89AEf}$~w2G#{;gByWVE~P;dg)_Z>5b4=a`$?q<c$_xfSZIA6QZ#vHr4TO@
z%D^6~gM)9B0(^nh*Ua<i(|$(=8mP)u3*ygtuObU~Az2<=00&*)O5TNtyl$salu!8b
z(M(O$^mz6mXj2N0;Bk?Iw)m#_sK4C2H--*obILUjr8C(Dc=EzLbx$pU*@b)@LRGDQ
zdB{ar-|uU!c7%{=lnLj6VloGFZz<@nXwRD6wd)y71kv4>T|?>gQmUIWoi31ftQj#w
z+7}%A%iBR&Fi^KV?PWJ9y=lNiyfxB9^`zbTaQ*%S3^^3Rt*q&m6@WeWPpBcyDuB-1
z!MB4@Il(a(^-_x^!Pfq#m~;~$w9iO?l#uTKDALSOn$X0VZd>CzS^H+8$L&=%T1cto
zUbRr+*wZe`S;Lq8FCy76((|c4Dmi=ZMC*|_oRB79*p8b0R3@#Q6qxo=6jh=DPHGhd
zN%;%pu}NLkp4wT~_g6#zk#yMQWAg;rT+m$uo~_Mkj9-{?;q$N`(Buc;A6TV-8TQ-0
zW#pJRH=YDD+A|-rIRl2R*)u#l(pxvCn4GaHd+aK;d)rZ~nPN`fLOInq>~?O5K~Fkv
zEcmCKh(1?gBr;mfTB-zER0NWIhwp>ZbIrr-)Y(vz!RnuU0NAB>et+jqeRQ9j9I(_o
zh-oE)_jkZgtm~#5OWZLh{Vwl+EL<^Ey8Xop49EOU{2=^xslOQKwY^E9v-S#V0)O@$
zTJXLphr626y8aPhV$2!j)?B*b6*E(ekF;-Km=Bh};Ea1#BR3^94Epyx=}WX}{;=Fm
zC$8hK&1?cm*ZO3~_9Im|<qTKX(fq_YhblFYlM7PkfQg7gs}*tsH>;k1;@eE1BI(ol
z8kr-E8WdWueQv6$;gt^y2C4>z3)*$JX~I)*hg@$g(s{3n4B^oSa;DIm9d8~?Z>>Fq
z<J%Qt5%Q9ztK<wbH`T1uUnrCABEG_gOTcqqOKa-m5IH<R&^d6y0tk3Ykf0PsMyI7K
z)>9cVns)gR8mVE5U9(?*Ru4s`g&tNRY5~UDw&*jU4SoKmZc)hN_9eUsCV*+Bm0B6`
zh2$;~R5!qa1EvCDR}cNr!H6&zaz!hD@KaN&@@(1$PfV<7*5TA3qwRV*zctJ*(dWLI
zD5vC6NV{y@OLAe(7jFeJM1j!i@zz8II7u}dVnTzr#<;Yx2Gi1iSH~CMWUc${Q;GR_
zR%+t{824#u=@S2ccD7vQf@$x}8iclAZ^ctf8cke3C;Di?PTI(zxdk3j6uUR@0tT58
z2w{ifDy4qSD7xcm(CEslhAVk0ceX&U<Nm<x87CQ%h26S4+rqe>hT5mk-76V`;aXs|
z3abNS;at4MlnT>-jceRG1lL);;z=K-nc%+|RyS((*w2iXfh|Y|fOJbQlg?IGobqEm
z%=4kzaLE=f|D7uKKU=BLHi`*t$=`~B(Eglwp=S8#I(F4@KZ3`lIYQzM8tX(#<xmVy
zs-^H*kQDVS(?;g1j%v_8qc9!GMqaMxYR^c>Bm3MOd6dk5f^o*P4Odsb->B<P_<KPC
z4x_Z_SJ7t?gyRt`azMA=tJExOhHB@~R#%p8!3RB9<fM&&r;9PZ1<<foLHL|Iim-Fw
zveJZT?WR~|h2r^v3)4l<a#OS&R$OMZvC8COHqnKg^sw5FbCC2AO6v+r*4#}Jokxxi
zc;X)oANpN?F_&FqiaskblNGnm0xmufZDoS;I(rug+Z3a||I9I{V@mvi76oSPfkM3*
zd0JFT?G8t%m&IZptOpwFSa;Go<naTI0BPOR-si=$KB2=HN-Ep}*Wu)R{dEE%SP7!h
z;3#FvpIcrkFI@o2_=CohWx$8o=@JS4@{x9LT0&lb%dM?cms41?QFFGjRYP|YA9XZ_
z`=&+a8{olzK{r1KfaUp)6p$Gu6m<TOybG+8sQvRtsK(QurIrz}BR@hzrbeuY;Q-$s
zA@z=R;401{X;e+9wmeJ)%k}pti~Z~*rZ4klvlGsI4Uqa>EBSvUWS;HRC)o4lU+{sQ
z&^S<kGG<QLvQq=bFmVFv4kQ`F_}LecW;pU^4d;J1u--m$4>Z(&C8vq%LCei5^YvQ|
z-5oeOnBjX=$u~SxW25(56~9Hd=Znpbu;H5bt-e<v`$><q46o5m1ysY%GV-4^?dBJs
zm!A@?-)1WBLO-CyLzQ0JGLNrVSYUrow*N<e!nQ>%xTa$s&LkyU9lgFP(-3Yhq}(lx
zDtQ2ED*S-Bkchef%f_h3__W58skw=IY2VpaS5P%%_&9*wMs|B%5Z180<u=1&9fm=j
z!7N99L-Y}lY?fd0PY}+of!I-R1%e`!-*8A0N*Q-Em!3zyCIQ7E)Q^2^iN?@oM!<i6
zv^Slr-?F%PR_LMq*zd`cVzVs7xQXm-UnO6xdYSIK+{n^nuD%}`3@*L1ZMgRYf&4b`
z$-1gVMbs}^lIp@**2z+eYjK)rNr)ADp}QE_vwg+9P_Tjb??!dw`etqtgz3`{;coZ+
z@T~@S5Nd}2JG8ai2?rzm3;Od+u?W3?n=;H$JyYtPi9}}1HYlYjq(!yrO^oK>h$cOL
z&w+15+&}S@RMC61xS>T1!X0!@g*xU3<(FJ%iwJ~#4`(mw&!KF^cLlsN3AiZc-+t8m
zF{%N=C$S(n?Nih9`XOn36ZNUDWji70hUa=;ov3FmkD<Qian2N4la8tMS!@x1PC;JC
zuDSnU=7zoCspi&bA*%!aNl&1AOJ~<SfUzgmACquUQRYFy%H5X~ooY~(BZqLH(0??o
zyA~-C%Xkxxr{vJNO3~mC_d3MoSQ^=dszf+xxMGwHbkp)0-1}G+WzfGWHn&RN{ESD{
z-b%xIDclB6*rP%?BMj?D<XQ=JBQ(_0TS*%%aI;hL5hv|1e%mC$V6FG7nrDwM{_crV
zg#2(y9H`Wa;cVK)QcXmJ*vEL4hHcyMsUD>@gZ1+~ecw>0k?4O&*eL;x%1?S|DVl=A
k8d0_j@^cat>R5mlI~Ha{vyTR7UpikYnBGl(YzzrTa1N}~U;qFB

literal 3870
zcmbVJc|4ST*S}^lW~|x57|YmI$}&WDB2(RCDMTWBgJCwivPE)JmLh}_?%WYWb}gvJ
z?w%~!8zEULq9WTnqx*i|=kxycKF_&6=Q`hWzUMl>^Zi`_0LXY#!-#IdcyEAZ>`1_S
zs}t~U-oKfsn*abvli)>lV{<H1zU1jo{sjSmi1(oWgW1s^@BYsiJ|dn<*yBK~_aVH0
zpa(lU4gg?)U12#Q4FEV&SovNCIu8JFZ5B4c;{*0K*<+Bb#Ead+{=zL-P2DWeKX7jW
z@qaNa+B_8R&31Mp5>NK}H2?tkJUl5Ldq=Vl^~Dp(L{>b7Cwc_3qA;F9^kPMpLF8F4
zw(le2L-BhRI2_K3JZ{12W-&7C3LxYW=uZyt@DF7z!wbNoStU_Ck>JMWSOx+>P!Ko{
z3IM!a1W&iUtHELq0PHcWRalMyb^s__$)2;?|BkHuZ_Lf&z#s?!VZ~^cLs*#I4`chk
zVUfQvyAK5ZH79|E!GGg2PFBJ)_};TSyvqdkowUGOunyW=6aaR|05bp%gK@$*;GCSC
z2n3vqN0^s~o0~^mP>5ex5-BYuiA14f<PR&!$R3hIp_GrR98y!qU@+23x&}HL`iC_!
z8tfq;1Omas%_GLkE2e=)p*8+v+kF8DzyWR$OROva763s6K)WviY1W<`pgsE~g)I~U
z<$!U*5nSA?hMIlsn}UF$5DpF~>(W7&Sv&w0;1EQso4|x@+&E=P!WuDY_u+D;v=$Lt
z#<IMoJ2@7?wO>?B9I2qFq^xoPqosXRNB5Z7adV3kme`YL&f3{KoO5*Y@bvQbxrFzn
zP=kU)Lc_x2uEr-^OT3<xo^k7TX4akToWci1#U+0{Ed8^p`bkY~U427iYun3Luj%a_
zop1UF28Z4bkBm;epPrfhF!ynOVdd-U+PCjN);E5#b+L8+W51OBA6)`0U0^5_0_9}u
z0)a!=!UdolXmyyNi4CV4Nk~>B1}<!xcAwUQkkhnX7I7ytxc19qrW97#()N`7|AfW<
zSIYh+?0<EQ0z429>*qlP03(3u+V(bt{EC{tKlltZplTzn$lO-M+gq1A9iltY*L_e`
zRknZ2%!?2-l|7g<1Fgxf^mISNbt*`Telv&mS>L1_q<U}g%d5%>>5T7LBb6!f!E<6`
zU#I(%9+4g`ID}w>C=VxkC=xJiQFiuVf|`kv%(Bse$3A{yjRNEkO`9WwzD^v2ueN7f
z*DrjUf_$bQh&O$pbe}F07xR(y*PwWrVw^Q&=rU-TFk==NZ(rZ0CrD~<txC=(Hk8G$
zz@GeG6BM!hEOvHfe$mFTycCO}U>{y+rh#cqr(dNC#De-DD0^S+5R5gpHVDa4)aV}q
zu~{Cehhn?ilW5Tp=^Wf0u6H=!wQ%pe?Fab45a#B~+M{|WZllSa4yor*wOlmjce$bZ
z(x4Pus)}}Tm~1UsDp+P_UwA$<Z9QkO{_VHKH3K8>(opfDw63t8CK+brNINS37{x)f
zvn;XHLQ7hcV5G=+11bJ6d4`#A_Ecgz_)Rn_{ZT?k+su8`45iN&C)<Me@(l=#)YR=C
zZ?*qz3DK(N?y4k_eT#XKDs?-$v9^dtM=prE$;lL6&*e_`farTbq)%dlE?7j^_-Snq
zWHK)vUsX5OnTAeRZpEL;^*q4~f26qcJ!BQ@Mk;&SeTDN<--MbQSlRYvbTjWu;F!;>
z;Ww9FI?lDSY8|=qVO8kRD(!|@pO})El4R%$gGU*(w_1Up^zeMe!QJvEnb|jt^&uJU
zGb^7j<9{66sU-MM?+iYL(}>U|T|sTcT*jBRwFjf>hvWsT0>4Ck@STTP4rswK@77Ng
zH#XSF2o&u&5=u_Y%uvNp>6XrX178HkMh_Rrr-eGbZ?&V|`~)+#F_pb9h7vp{Xhoi^
z>7qx4iFA&i2swtk7k}Fm9j)8T??R5!v~~9Vd3zkjooDg+(y0LT4o!`W#aL2~bMKIf
zbyAkryUE^eA(BTRta?g3;P79Xm=&3;&%|~CB2P42?3?fiW?Oc&*P&@SeofB9QekzX
zxn|?VIB4f<emzs@O#`TGA$IPQoNcqHL~vMP@I;*+?e3iToYa$3WeXXt%RQwoSfOZf
zso(=Ie1O=ng{Wg0lu|#5%NCRUOOt{PyfR=FNNQQ`btp4=*?8P)V6Eh3j(JBD!KgKa
zk8mAJALU6f=v+|K?C8^-OIv&FrPbr4mEtjY#QJ!X95->=edWbm%!}z^yDkFmdw*MX
zu3srS>@z)A-pB8G*WLZ7w0u$yz-X?z(aT>w8R~nkC<niPWIC0(ACQ^Icn+09EEbS#
zM;!6#ec!d0C*Ed5V-9<!J8Bfj1#yL^AEkceA8Kd_O2JVCa&4MYTU(}&=t(B?nTYG7
zGWwpX`Gzd&^&WYAymu_e<Y0hDY=e^iU3F>G%a<U2w!eA5p4+rAFgzcjj7=ITdEzYZ
zxplva4+j_5)&1g>Nw*qUifpn%2qC;e$GUaJbV<+AxzS9%aH_n6TBJ#t@bJ&#=@R(x
zs^$?n&R9~xmGN-fUBGu?|ByXtY;xQ*vHXcS8do-1aAxB#PV?<t0zTMN3R#~s;)D)V
zKXkMnLcI9$5ttGallI%w0qSKVr=$fdo<pFH)HW3!wWDYdV$_frenXw^;k^9zTPlF8
z*#Wih0@y1JeH9g2C;hHJc8y%c9;B@5?blDYawS_$8%rQd8Un*K>3A>6;^f5Qd*}KM
z-S0Uk00Qav?n=8f=(ZIm0m}d83`W%S$}X^&z2jcz$8Ej~+@$XUk9{_hChqa?jtBx=
z2pt8o&aknWNs-1j*XefXcw9Fwc$JaI)z_erUFTc%1O4ZB$;=Lc&}N_N*!2oqJBK2l
zjC8#HtL}}Q4V+)-Y2rTPN}lx$QSXYg7p=0v^%Gp2iZmZ(h3LxiP0uicuA;2PfXK<u
z2PXf(^(x;kNQA7pp}rrt3O*}o8#=M|Ue7Yg$o*=TowN(pPU^t0++0M3f>cm1x&5>T
zxD{dOa$a>wKmCOS-{|SzBYV^r{Z!Jl5y{QNjRsku7di<WHX?S%162?oD8f8AAyxk=
z*`fSr{3Hpc-iuc)E(!e85$cF76nvqMCsYQh65ILvy(;OK7t9OLBA>Wq_41~-^Xw6l
zRD8dE^+<`{qqdk&4%JzyfNmXw!*z~VRM#VUG-d!J#u<M1F`p)WEP^uK`I=UNvv;L&
zlxnPtIL-!VjX0$%nzy6XQPd)pLR$q@iwwc?rr{HSQDqBk8*8I&cw62Z?k7)Q^jqUf
z7}*pO_BrN2?zgJ4n^YRR!V!*q9b;xenjb&uH5);i`(bgb-?C$u;8S-u)v$#}2iDzS
z_5A3p>*daoH_{GM&9(&-8-DN-ue$Oh6>(obFa%SkN?Ik%Fk4;`j!wekwB*&$C&(Hl
zqH0&ql22j{J@^bLUl8ROuGjX!xmyy0pWSYCeCDpYvwn8HA-VgTQ}Aw@+3-|qy&Muv
zQg9=weKf>Gy)o^Oo00BdPzyzn!ajDdZ(Qk~^|>Z?c=%M*YIsRZQmS<XE~NQ^tOy~b
z3~%6Z)}1!$aBX#Sfxd8-b9U=NzZ;+WSoz|XnB~R$1*_6bhDu-<GeG32QdBN|uzhND
zrTmOvfiAOX8ufOn=hjIBZYZtHRF!ATa8ShCUWd^n))B~Ay=@^z>2_+F|3hW?30Dt@
zNneRe*5U`=8qtZyxQ%koYXmY?^vW0$H|TIJa<Dz?t<Sby)>kfBQQS?mt5(X@+J=K#
z+1s3kSzG>HPGI$A{j?jNL0Q?t$#q9Ymo^;e3OQ1AfuC|J2AbZpo;&Zf&figwmVj9)
zU#W-^HAb9>`JB+sxa2=_xeM8TY4f;fLfn+sw}Tb?$)j&vGi`Z4>BIz#Q#EB2<5Qv7
z8ceiYi^Tg?^IrPTY&<^R`uYa`o@Kifn%s2$gM<zywOnQ6q3~x3r`)kKL&;NVVPPA2
z7r@A=;4aM}?;f=Sn)e<18$$y!cv^btah{_Tj)ogIl4Y;0>{C7#G)tBg$ULl^Nsft3
zS$visXw-Qgqokm782!G{e7)FRxq3=9p3s7tzaCvIwR}p|e-L5i8@TO)3wQW>`*h#c
zTe!M?<O+*)=a87>PvW!|t@HVLnqG}lp8VK6{f>MozULY_x(s<~V~u<Rao_1XK9yI<
zheIGSg=EE-2zZ#T34`NS&;mVM&B}fEdP?v-vDM8Snz&8DM%!aC#?I!S<4R1bHpKMw
z6{|}&H1@@T^x8J8jh*T6hrW*HQ$`087m`HuPo5^rZdw^$NLt3vyK>cY{2cJaXejiR
ze3Rksxv5v3a>%`tsyGm%54zxu{<bCjNB?T6X5sy(E^=S3Ht^xdJA#SZe(#F(?3#!q
z(yXt%;1B5ndA+*C+2ws+r<Y=xn|WGBucPeCHjR{nV71IF^BeZqEEu|iXZ#@2x?j7f
zn>th=%xrxf1+IF|S&(U(XP3^)Ku(0IL{J%Sf8zceINj+YnQ$pNQxx=`a@NQu-hw97
zH!t`@%WP3bZEi7taA{|aJKuY*2dg?YzMXc{wX}9tz90Z*XtN-7yikJP$g%OznDE{(
z1Dur=@i8aGGTTD_s<rdGmC2+d_}W5H=8?jr$L;d>thryeP@F7JL8F@em-K8Huy%d?
U730Uad4+?KN3=Qa{QeI9Kj5%V`v3p{

diff --git a/doc/mod/notification-matrix.d/02-join-room.avif b/doc/mod/notification-matrix.d/02-join-room.avif
index ad99ffde8e4a5885c1c44d361beeb4927fd694d3..20c4e799a41fb361dc107f77dcae49ca26214ca8 100644
GIT binary patch
delta 2454
zcmV;H32FAB9jp|PA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951S82|tPC~0YKW&i*H0004zoE?$u90e!<0035#
z4FO1h2_bD{VRRAz3I;eOvU;o%GK>;TWCGZ3EA=XQAkXW?=cr#3Gpv5b%Xdf$v0xN=
zx{nP@p8!1}o)lZi$Z#oD#pwsMPJxhz{sBqI!*~b05sAoy*ofK&JF`@)GLFldBv`So
zQI$7%G89AEf}$~w2G#{;gByWVE~P;dg)_Z>5b4=a`$?q<c$_xfSZIA6QZ#vHr4TO@
z%D^6~gM)9B0(^nh*Ua<i(|$(=8mP)u3*ygtuObU~Az2<=00&*)O5TNtyl$salu!8b
z(M(O$^mz6mXj2N0;Bk?Iw)m#_sK4C2H--*obILUjr8C(Dc=EzLb#UhJA{zJjE)I5o
z9MNQEKD?J%y6{f;l3-v2a6x(j*;ipybM3_e;;FSk7zAO6Se$JGwkosV%pebq@{B@m
zGl|>9LVuKOd&HWzDqHB9gCe%K!H}Y|Llb#ZrO#-W%@Y4alptY&RtTBCB)>i&#4=pi
z-aA#k2Jx6hIT4<a(DXB9Bmoy&)1}mZsBgv1=L1?!)^75i@P_F-)zv-ZbSXj$G2J+7
zxt(AAG~$ababSqAse~9_I&!^0Zvto-1S!6`1CtJ`bf`sMzA=KBEsRJ%doPkiVlBEf
zk0lG_u}NLkp4wT~_g6#zk#yMQWAg;rT+m$xHPSUfd>$H*LiNgQrf}19d|aM?8Q&b8
zb#Dw4ZV{N~n5J!6U0Nl2xbWQY&?iRH%>J0{Up2^E5y~|B0;}4~(<Xt1MactLbjIqJ
zt$v1yVmt~`m=q>n9cM3cPrZ=?#K_?OyzJDxw44JV?x>L7Yr#;RO2jb>IPqyZ`?Ut!
zAk7DEL=T3Rekhk|eAp6nOd0!s0kJM&Ca0j1+Xy#N#V#h1^@<_pku<`WN5Gtqw$!d}
z)dG@5X7(VetHL2*2pvop9hZ2A1u$L)|J0rkLc{+Yd`MD4ZS_F-m!<UKB_ALJMTVvs
zx5x)r`CRu5YQW}hW!F_|BSsNDE|Q87ugp<C8^sFgZ-%z3HFy>Q<-J;eli2c43lGhI
zdD?|bhqEmQYW6J<7XH&Zanf1jQg)bTzYiAglpYZ#^b;t%!)N%9!@U%K>pbINXU!Z0
z++P%a$8?foyFIc<rm28YLUO3~@;KDP8G6>tVkRJ>VCfSuATllOUs1d5O>;3Y|Gw{y
z8sB^gEh}PNN+S%zr-I3U7n;h;a_R4T4;eeQW-oH_UKh%oF8ne94TOdwKEo(acRH54
zNeR`{tz-o<$d2PCU4~AeQW>3A4&!KJDH@Ous8ixn82lB7ZnT3{>#Qg)SFdc9json<
zBA_;lF3Gv-DM_~W3<waYy#54C#LuCKP0H>_&q>V&=kjNH=CaFwyjo;W02^Hdr?zmR
z0TboWvwp`bwQbp{mes}O{-{f{CiJ6^cphMN6aC~iV3i;b==^vX4GV@z<+#PXtFr8{
zix2rgyNl<p?)flmJUUJXm+kqjbR!imNpjHgh<l8*a8A6i`xelJf$$*;9(q96@Oeo9
zvs7r`m3x%<-w3vUh{r>D+7_CLEfmMRywa>U*Hx@TEre9Rzjx2Rz1x{|FJ{epP4GsL
zGFnNHaHjUw3h)do93W|&vN?Ax|Bc4$?RSH%j>dobtB<P?Z#m_+pnF60wy}Q9lkz9o
z=EN&*dr$VxP{Zu~jIyvzC_5l~t#L~yigIR0GA=isHr&O3R;1)+QC_dq9ns-dM<XJ6
z_E`CA6(yNQj@o60SY9uf5Wci@0T2IboS7N4?aw!c1!aMO;l4<%RDQ5IEtw{Iu(%>(
z3QsE5VbY60QPORRlk2Q;Nz{uiBDE$GXOcoA-uyNIU}G?PM|S8&AdnRdX<v{cz^vV<
zxXjn8$J7*mEJNo^f^NiT5a0p0@o6dMw3^v~k|Z?bEGJO+(&AC{#la`6Ki#KhJa)mj
zsrB=4_rJzr?%F}Cen7OKglG(U%*wO$@X@wlV5EUxA9<oU9uEl6?58N1>_c{&l0flG
zmC4MDlh2jOVZT%>Pzat?s$qtmx_4>o5<yc~m<Zv2A9Gz_#j+r~w47zq<>W-1xKvA>
z8udD^Wh!uhZ;z1r$3BJ+_De##>~Ie0a0ZbW;8r!%S~GB-&|ObT>#^@f{_R~|eVW@=
zCu<E3AkDllu3QNQ7*nr+5n3m_FO3?^cVt}i(sVm^1wJ!+ucrU9(n;}qzfP$$mprN8
zEUB-5qiZ?2bO!E@oE=PXy{crJne}TzJ~&#!E^Kl|E2en%9_@;Lt)_WKSr?LwyrcJJ
zT;8Z~bkBve&;h(CWrU9N^y$|bV9dmrXs^xfGgWWN!hmnucx<%(Bb|e1hMZCEAG&o~
zF028*(tL{5gdeK7%bZ4rwApr78eB|}Z)OdDLxmtxYB9Ft57~J^1CQU{OiW9`O?$c&
zT0KCFOZ4en%fzbWvg0vWvYSvfo9Ae%({Y+47R+2Md}jqxY>MhbPd3#RTqq-M8Kw_O
z5QKu;N_MTMl<k2%EUDfrNQ2I0g2CsYlrR0cm1~CT<XZbM>R$X^(+wy^HH=;+@1ie%
zZ`6*w3>H)^R!pU?_*MnaCvHvuH7a4l*sg}}N>8rV*vDFS0jO20Sd=(zD7kTgcWGn{
zz=iSH@`KLPnD@<YeK5hp*~T8Z&3r!Hp%wN|U!k#hVOM!(vGxHL7T`u_1mP7PcCUO2
z<>WglaBb@)Tp}<Wv(XAI`9SzagB0<96gKB%ygphj2+MInBl|n^avrr?iva@cxW0B`
zsW;y%uUqGJ?8jEc1chWKq(PKwcd8DIc{8kjcY^43AR+LJ0&mMW$*Rxc%uZ$Dda-c<
z;r~nJ9<9TJ8JG{Nbb6|LGqI~T6$GWhPGN~^nK7|L3MC=91}mVAk-=mh`*<3E6eaEG
zZ6@!8aqMULMg1fRcdj)uJ2F{+AfeE;$@zH#v<5_|BetA{2|hFL#Oqiw@sX6h$-f)5
z9`l(=DsN)256W15la-ZX%%J@0kN)n7P;C5e;-NFX%k(LqR1JgZv!#>&_Ei{IF+X%g
zW>3noDQNEmmmCRrH{TjveB=T#L!tGimM9tE5#;SAXg#-ei3bmvATnlQ3IIj(_p)D#
Uq-Y@J-%`9eS6JN$d7K_Pho`QO2><{9

literal 3745
zcmbVOc|4SD+rDREj2SY>QX@<DrKe#ElgMteWh-kL+ccIi7$yo?DzeL#JY+0oNug|&
zB}+;**`g@fo>0kNWWIa!Jn#GczQ4ZrJ@4OnoyU0{=Y3x1aozvi002mM1=9maG>R7h
z8aw(?yl{RLl9#zIP8R?mYJQ%<BsK?{{8<lQ>Td`D0TlP(e=s}xQr!M&!y7;e_S@kg
z;HpgV^>=4y1^@sB*gK#jPXPeOaWLP>AWi^)*aERGg>r6Zk{xCbn0T^F*l&<%2XXrT
zzWzG{i2jQKX~Qsz7u(r|dni=T-wgnO*WDw?edkE_q281LY5*8bDFN>OU=*YT1$crH
zG?+BFu$?b}5=PnC;o{-~Bbr3R=|@YjcK`u*e_!f3ci%8@7#@H#3fvN=1o)BI9B2>#
z0*63j-~hm5;paixxf&u-5n#6gM*$rPYy)t%k{t)j|Bhh(H%5UR6aoWaV2lDC24Z$S
zC)@uQ-u*Xb*Fm7a`^1A7`ZuN`zyvg|orm?7^%3AZZbUQ!584?N09fw;eSnLT6T!*B
zg+L&XNG@))AP*XaLW}YX>=G2)Bfd{;4;CvSeLzk^N_jsPE3dAgd=Q7n<HhAPk7}rD
z9Z<uovYSAVNF*AC7UAI$QI*6>s{Y5uY6UP{015(%l>(p`2n+*ZJq5(UIXNIZ_FD>D
zC=AZQiQqzVqrifCKK4z)pl}!m2OPX~$OVuG;1~{mNt`aHfE5WL6)310omRxPU+-Sq
zZfoYEw3-|B5|Ud;SVVM>jI5lzf+GIVVRa2ng1&*Fk+BK!xQ(sd$y4?Yj_w|wUgWbB
z@1WoiT4)&kd`xUy{N*cG6Vfv>uV-cF<mTNfW|WkcmEXQ|zqYRa!NZ2eruL4fon75M
z&wAhV4-5_sza1H!_%t~+Ju~~)=eh4o%PXsE>l;6QvURa_{$szD{U2QzP!|*qhrtnS
zT@Yv}TQ~;JA&KMU*R?{B0tKX0qqzk2(u(f2A@{3UFYb1uGP#AM@e?xN+0u5D{r`kr
z`mdDzOW414jRI&G1pIg~44?yiJkv28O6?3T5Te<@&)xr##xS(r?d7G3N{4BVy?UXf
zq9WD5rSIt%GLbu&HwCZHt?_WP;WiD~*PW7g@2i$>6-1?Q@LOlin0Uro_DD@q9Bo$Q
z-O^-#LPcQ3+^JAvNKpA$U(jAoA|p3<F#e#foW!DzVl~-EqzOZvY2F;^_ioZ!no|#o
zY*)c!A_|pNmWsM{g1>ZMJgSH*K67X=@nL-FS-+~@KFo>ui00IwVF?0y=@>BR5TRdr
zAn9Jnk$TaX>zOg_J%r@QZrJOSuHQN9a7m|GKy>tW`WA1_{DO{RpV7;i1mxkqUqZ6X
zsjPR_i<2&W(kk-Tx+<APp3ckZytXMPEFV$cQO^6;cCJ0)8gqJUD3|w@JQ`74&ugFR
zG@}VzK%D=y_vAnx?PfiyR!uJJjp&U)=UIy8=Yqg_i)^RC(v;`fHjmP^AoX9d*I*5S
z1y5nC6^YX)4Qz||q~t#MGvn;nt%_ZB^827Slj<sJl!V~&E^XgC$dviCm;x%Xr?$W7
zy^ufJWNoQV+g@#fETw=FdpbKK@lZtkz)__mHbWu0r4EL_ibL;*+4pMA{F?d7J6T}F
zc`$5#-odnD&ZPWyxl6erca&MjSs)6b1t7QjY;JfM^KezjZm)%`TT^IiPlqq^HzXZa
zdH5}$WLvLM1Mrt7(;z)sKZ$hNG(WOu+37G<`|0G9mtQ2CiF%;*4=hqYsKcZuvEhNI
z9IyXcyEq&k6qt@&E+J2m#Vj|Cm$mCY*ZUbw6jSO^x6%GHlJuM}zOw<(KF;PdUv{qA
zhen1IF6dii&ItvDMRtS|f(kn>6t#3xTY*S=D&fx;;U_a~?oh0Lm9;$!R1(P_>%f{}
z|5RoHT>EGC4{!Voa@L=Btc*eoe6vTp;uiw1xj(7dilgXOd1q}4ha{e8I(E()chzay
z&N=ERfw$mNNptg!c16tendH(1TAp2nC0#wXI$i0QOKkc*=gU@gQ<K-0c!NF<RrZO+
z63o|cPIPh7-#*hB89+%0d%f=EHPZFZE}M5&^8R^4@B86mnp;Gcz8dL1QB!nQI%5?-
zJ5=u=8Ft2|<t#(G3BO=hn?FS^C|hP&y&pMzLy%dO5;N`-s%ez3<lnQ`NtF!aupm&6
zdN<bJKU;0pf}u|%)vK{z^}BS>HO%4qkJdU<eFzK+zidfZ1^<^Mg9RwB26j<HJhe*2
z^30HEweY6Jg3_3I<4Nnnn1|PR$HzDTU(3)EV`>x6lQ`xff$i9FkAwvenO4c#s8GVz
z$X~d8NTO27h=VD{pVQeC@5_h|no*Ekq!wM7x-Fu0!6!a^v%Asha`VlyQ_Dg&lFH&K
zIr|zv1}!L>9J+9P2*dNZI23)%RXRwuT2rG{dv+NQX<iEt7xBp2>^LRv&ci2Ns|4kX
ze?Mk4<EbGchA1)jVHo;*za9%az2=j%_9OjB19CZOggb0fBGPg8K*$A)rCn0<R?P+2
z+2>g_&sWvR5<*w$Gbu5nh05lwPPGT(q2sT#X63XS3wbZwGehKZ7b;g8FScQj5c_DT
zh5C#I!$Ze9lJ|Y(BGE5UTHwHl8#TG{C6~tjgocnWu0{G4XM8n#f0Zm!so_5}Y+Xi;
z$u#8!qL+KR<?TXFrlBBU^>2q1-(msXlPq9ZZL9O#kWeBE5KmzN&aaktHy;ycjqn59
zNDUdP#@l21x(wAOZnGZv`<NFNv}NW^?pKYfxevYXuS?!p6U%yr32PzOUfQ^8ZFh=6
z&Pb=6?0oSf?}vp?m{|bdu^RM7hOpONTUX0mXu}vcLiQe6UM8xhYSV*$^f@DY{#?ZP
zSH<x%i<k1(|GWZQAz{}HENQl4)?s5?pN^O$=(xpZ+likJw%e!pcK>YnU739$FR49d
zs?c_%_Gu@T1+Dbfy}YAli4lFcc^`$e!#pbz(1k*;?#OwrTi?zx$E|OSo9B%KYgx&t
z{9Vc%E+<vot5^a3j(v31j2U|TOE+^XNcUR_#;#FAizl?JnMTXc4Qw?@l!2?7-MJgJ
z1$uQQCaBVpiBIR-Qvc|Od~lh!YX|=ZqqZ8dz70gn%|_4neo{+l^yXa^EG5={iQCMt
zI#Yj_+iWAkR+#>7G|QTp>`28kysj$Q-YJD7wi#x-NoAt57gqJE73%3(Hjxefe>Jrn
zdenE?B~n46e_*jSfq;J)I=wgEpUxs=yveeI7d_zbcZ-=x?brK^+>^?;niN-gJH!6b
zgad%KqK}l^5Pg?4Y3#r5jLbgL7|pYbN>>b68SFYJ#g%KoEzlmX&y(12ETp4{V1mYx
zLSNAb6)#$r9oRSQA^7@0>&vv2oPyOF37OfwmWqkKs7%&ys-S2RsiSV>Qu?#!w+@1T
z8>G=%V~uTAiZ1VS_;C1(uSU|$%90x;U*eZ6@AX!pcTZeh>DuVSE#!D#^kN-}t!8L2
z-*vUG=>*Bm{J7_@RQte<rNmq96E|rjhl>a-8Y^rmw~c-E`q$+rt<V$g5TC22;fywc
zvYLTUpTZP(HB>U~Zxh=Yq@;lS5Onmw8ajGVzBk6v<1TZm!7t>t(s+8YSJLsW^0mUv
zUt3mUoOq^~(OJ(n*ClaI=4SPbjidJV4+NuL?=gp?@*g9T+(o%jNI?OK=A^1}Y=DYn
z4*3ww40|LhZMVVck@a;uJ2cPp_@a;I@)v*FREB=Jt2ea4v^7^ru)g2GC_^I*;mIhY
zI{2U#Mydl*B(j3iCU6`>&E1X1KHbbJaq2Twe`$=KdR(CW;34X?@P$$Dz^ZLytGkCx
zcxnrB&O$ZJuM$MW_IF)onM|r4RWen1_v1szAu?_JgrO;`F;e_#GJK*Zy|F8fcKpMn
z=;~@@1ZFj0Z=!Z7N4^-s&|1SqF_n5pU8JHDBX9gTa`8@7(O**{vLtP6j-kL&R3fbD
z{kz9{lNIN5Ch#&s3NEfOZ&X<tWMcF}|G~D-T3l)zq4!qY^!nRVNn#`s?8h~<z3vr0
zLDLptn4AH9=1Lxk+h+CPz^>OeKF=I<`|F(bGcJodJ!M>WIbOLW>?Cuaj_bx7U-CMX
zw^#%9&8QcU+HzXH!hNLZ58RV4wS&wi?^A-FMv9pNX?G<_ja?&240YKl2+{O4#m>}c
zyQb~DJj-~rejQJ=rAtV>Fq3+4&;emMp&@6sA!JkFy%AgTvM!$cS%WP3L!ftnC%G_a
z(ud#G-2ms0_jWbch1y?R5%9@YGTf)ZQzhHaDe7o8+`-?XI?f%uZhl>-Z<3f%;@oS9
zh#vDD?zXjC<x4Zm3|4D#scc-1osubUe-cI_Flwgrl|3#6zF)r39~_e~Bhr|0`++q4
zRyl31AW@y@?NB`oxJF@XV&Wq_42q1#6-<f(=M;)zb9y(Vrn-4s46e1-pQg6p^%~Dh
zd`P*zU4i~sr#7^r{pMP=`*~ECX?)<d>|U45X_P)KkTb}P52^Y9*XDKgO)I(MX#&S)
K&!ZvF6aNEFUlig1


From 699be25b64a8b67a99786387c8b0407f7e939590 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 17:05:46 +0100
Subject: [PATCH 938/988] general/clipboard: use textContent...

... and avoid having html entity encoded characters in clipboard.
---
 general/clipboard.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/general/clipboard.js b/general/clipboard.js
index 30c31346..cbcfa4ad 100644
--- a/general/clipboard.js
+++ b/general/clipboard.js
@@ -1,7 +1,7 @@
 /* copy code to clipboard */
 function CopyToClipboard(element) {
   element.style.filter = 'invert(1)';
-  navigator.clipboard.writeText(element.firstElementChild.innerHTML);
+  navigator.clipboard.writeText(element.firstElementChild.textContent);
   setTimeout(function() {
     element.style.filter = 'invert(0)';
   }, 100);

From 94514a7c75badd034c052d566f15a530243b6b9f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Nov 2025 10:35:34 +0100
Subject: [PATCH 939/988] doc/check-routeros-update: update the forum link

---
 doc/check-routeros-update.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index a45e0751..09458c17 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -31,7 +31,7 @@ automatically is supported.
 > of view. At the same time it can be source of serve breakage. So test
 > versions in lab and read
 > [changelog ↗️](https://mikrotik.com/download/changelogs/) and
-> [forum ↗️](https://forum.mikrotik.com/viewforum.php?f=21) before deploying
+> [forum ↗️](https://forum.mikrotik.com/c/announcements/5) before deploying
 > to your production environment! Automatic updates should be handled
 > with care!
 

From ea9e843ae95b7a4cc64bb504a135d7a420bf9c5c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 22:07:00 +0100
Subject: [PATCH 940/988] contrib/html: add a class for code...

... and make sure the notification generator does not suffer
strange styles.
---
 contrib/html.sh   | 2 +-
 general/style.css | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/contrib/html.sh b/contrib/html.sh
index 098ba467..03eba23d 100755
--- a/contrib/html.sh
+++ b/contrib/html.sh
@@ -14,7 +14,7 @@ markdown -f toc,idanchor "${1}" | sed \
 	-e 's/href="\([-_\./[:alnum:]]*\)\.md\(#[-[:alnum:]]*\)\?"/href="\1.html\2"/g' \
 	-e '/<h[1234] /s| id="\(.*\)">| id="\L\1">|' \
 	-e '/<h[1234] /s|-2[1789cd]-||g' -e '/<h[1234] /s|--26-amp-3b-||g' \
-	-e '/^<pre>/s|pre|pre onclick="CopyToClipboard(this)"|g' \
+	-e '/^<pre>/s|pre|pre class="code" onclick="CopyToClipboard(this)"|g' \
 	-e '/The above link may be broken on code hosting sites/s|blockquote|blockquote style="display: none;"|'
 
 sed \
diff --git a/general/style.css b/general/style.css
index 191c0f65..6f758032 100644
--- a/general/style.css
+++ b/general/style.css
@@ -58,6 +58,8 @@ p.hint {
 pre {
   font-family: fira-mono, monospace;
   white-space: pre-wrap;
+}
+pre.code {
   background-color: #f8f8f8;
   border: 1px solid #ccc;
   overflow: auto;
@@ -69,7 +71,7 @@ pre code {
   padding: 0;
   border: 0;
 }
-pre::before {
+pre.code::before {
   content: "📋 Copy!";
   float: right;
   border: 1px solid #ccc;

From ca487376d6ef71302a1c15446ae178e12ac7beee Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 22:16:40 +0100
Subject: [PATCH 941/988] contrib/notification: use rsc.eworm.de for default
 link

---
 contrib/notification.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/contrib/notification.html b/contrib/notification.html
index 7a6ada74..baa659c3 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -31,7 +31,7 @@ instead.</p></blockquote>
   <div class="content">
   <p id="heading" class="heading">[<span id="hostname">MikroTik</span>] <span id="subject">ℹ️  Subject</span></p>
   <pre id="message">Message</pre>
-  <p id="link" class="hint">🔗 <span id="link-text" class="link">https://eworm.de/</span></p>
+  <p id="link" class="hint">🔗 <span id="link-text" class="link">https://rsc.eworm.de/</span></p>
   <p id="queued" class="hint">⏰ This message was queued since <i><span id="queued-since">2025-10-29 16:06:18</span></i> and may be obsolete.</p>
   <p id="cut" class="hint">✂️ The message was too long and has been truncated, cut off <i><span id="cut-percent">13</span>%</i>!</p>
   </div>
@@ -40,7 +40,7 @@ instead.</p></blockquote>
 <p>Hostname: <input type="text" value="MikroTik" onchange="update(this, 'hostname')"></p>
 <p>Subject: <input type="text" size=50 value="ℹ️  Subject" onchange="update(this, 'subject')"></p>
 <p>Message: <textarea id="w3review" name="w3review" rows="4" cols="50" onchange="update(this, 'message')">Message</textarea></p>
-<p><input type="checkbox" onclick="visible(this, 'link')"> Show link: <input type="text" value="https://eworm.de/" onchange="update(this, 'link-text')"></p>
+<p><input type="checkbox" onclick="visible(this, 'link')"> Show link: <input type="text" value="https://rsc.eworm.de/" onchange="update(this, 'link-text')"></p>
 <p><input type="checkbox" onclick="visible(this, 'queued')"> Queued since <input type="text" value="2025-10-29 16:06:18" onchange="update(this, 'queued-since')"></p>
 <p><input type="checkbox" onclick="visible(this, 'cut')"> Cut-off with <input type="number" min=1 max=99 value=13 onchange="update(this, 'cut-percent')"> percent</p>
 

From d4979146f99a9171d71d50c0940e2995d7b83fa3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 22:19:53 +0100
Subject: [PATCH 942/988] contrib/notification: disable the border-radius for
 logo

---
 general/style.css | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/general/style.css b/general/style.css
index 6f758032..c6b279bb 100644
--- a/general/style.css
+++ b/general/style.css
@@ -41,7 +41,7 @@ div.content {
 }
 img.logo {
   float: left;
-  border-radius: 50%;
+  /* border-radius: 50%; */
 }
 p.foot {
   color: #777;

From 544e8094de540fb9953fa5f0d2eb4f0d89ba7eb5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 20 Nov 2025 22:35:39 +0100
Subject: [PATCH 943/988] contrib/notification: increase font size for heading

---
 general/style.css | 1 +
 1 file changed, 1 insertion(+)

diff --git a/general/style.css b/general/style.css
index c6b279bb..25569bbe 100644
--- a/general/style.css
+++ b/general/style.css
@@ -48,6 +48,7 @@ p.foot {
   text-align: center;
 }
 p.heading {
+  font-size: 120%;
   margin: 0px;
   font-weight: bold;
   text-decoration: underline;

From 1f6c43d5ce336b611d741549acba1413551548d0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 24 Nov 2025 12:19:09 +0100
Subject: [PATCH 944/988] check-certificates: show lock-with-ink-pen symbol in
 notification...

... also for warning, but of course keep the warning sign.
---
 check-certificates.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 3300bee8..93641eec 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -231,7 +231,7 @@
       :local State [ $IfThenElse (($CertVal->"expired") = true) "expired" "is about to expire" ];
 
       $SendNotification2 ({ origin=$ScriptName; \
-        subject=([ $SymbolForNotification "warning-sign" ] . "Certificate warning: " . ($CertVal->"name")); \
+        subject=([ $SymbolForNotification "lock-with-ink-pen,warning-sign" ] . "Certificate warning: " . ($CertVal->"name")); \
         message=("A certificate on " . $Identity . " " . $State . ".\n\n" . [ $FormatInfo $Cert ]) });
       $LogPrint info $ScriptName ("The certificate '" . ($CertVal->"name") . "' " . $State . \
           ", it is invalid after " . ($CertVal->"invalid-after") . ".");

From 1ac0147fce7c0f7a31e4b2b1d802e8daf4d6f1b0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 24 Nov 2025 13:17:27 +0100
Subject: [PATCH 945/988] sms-forward: mark every message with an envelope

---
 sms-forward.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sms-forward.rsc b/sms-forward.rsc
index feb640e5..161ae6be 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -68,8 +68,8 @@
           $LogPrint warning $ScriptName ("Failed to remove message: " . $Err);
         }
       } else={
-        :set Messages ($Messages . "\n\nOn " . $SmsVal->"timestamp" . \
-            " type " . $SmsVal->"type" . ":\n" . $SmsVal->"message");
+        :set Messages ($Messages . "\n\n" . [ $SymbolForNotification "incoming-envelope" ] . \
+            "On " . $SmsVal->"timestamp" . " type " . $SmsVal->"type" . ":\n" . $SmsVal->"message");
         :foreach Hook in=$SmsForwardHooks do={
           :if ($Phone~($Hook->"allowed-number") && ($SmsVal->"message")~($Hook->"match")) do={
             :if ([ $ValidateSyntax ($Hook->"command") ] = true) do={

From 678fc3307e9858f7ada84f6bbf0264d9b6758cb2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Nov 2025 09:50:27 +0100
Subject: [PATCH 946/988] general/style: clear floating on hr

---
 general/style.css | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/general/style.css b/general/style.css
index 25569bbe..3d08f1d7 100644
--- a/general/style.css
+++ b/general/style.css
@@ -39,6 +39,9 @@ div.notification {
 div.content {
   padding-left: 60px;
 }
+hr {
+  clear: both;
+}
 img.logo {
   float: left;
   /* border-radius: 50%; */

From bc174d7f1ffab55832d558ca78583a58dcb92ea2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Nov 2025 09:56:40 +0100
Subject: [PATCH 947/988] general/style: add a margin to notification when
 floating

---
 general/style.css | 1 +
 1 file changed, 1 insertion(+)

diff --git a/general/style.css b/general/style.css
index 3d08f1d7..c3e86901 100644
--- a/general/style.css
+++ b/general/style.css
@@ -103,5 +103,6 @@ td.head .bottom {
   }
   div.notification {
     float: right;
+    margin: 10px;
   }
 }

From 84c49c0f7e5710a50bcf047269cc021c8c4abf04 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:41:23 +0100
Subject: [PATCH 948/988] README: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

README.d/notification-news-and-changes.avif
----- >8 -----
[rsc] 📌️ News and configuration changes

The configuration version on thyone increased to 138, current configuration may need modification. Please review and update global-config-overlay, then re-run global-config.

Changes:
 📌️ Added support to send notifications via Gotify (gotify.net).
 📌️ RouterOS 7.19 is suffering an issue with certificate store. Fixing trust state for all certificates...
----- >8 -----
---
 README.d/notification-news-and-changes.avif | Bin 14861 -> 8680 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/README.d/notification-news-and-changes.avif b/README.d/notification-news-and-changes.avif
index d91b8a085b061f256a8b69d900cae6894157034d..d2e8aa7fd896c631b4d0ffeb9e9878c66eb28f00 100644
GIT binary patch
delta 8523
zcmV-RA++9&bm&8nBMs|qWprTx00000001G8FdUInC<PM$03g+ofJ*`Sk<1wZA(7@T
ze<0m$WMOm?015^;W#=D;2{On*Ok@JvZlY<M*`rvRKHEP!BcG^Xj?bg;s>f>r<AJne
zm5KE%*^QC82v)IcVZikgTPaX~Md7IF+u*q209;HoVVHKhW!*IaTyo-s{atXjeg2MA
zX(czrGO4tyicpo?ow59zz8EyhemlAVe|wiewfUKDdJPD(Xrc6`^qOTI?rJHu4zu<>
zLVzVA-@r>^-8OBJl9<awW2}kWh)xaCXCp@n<oON#t3(f;c?E|MCHrjmLc=eq5`&pu
zkz5s{pS$nDIn1$wLHsf+$h>qy=#DM;^J7?Hyf}0(1c7sliZfBe9Ra@X#zIKMe_fHy
zBzZ$vB0|IS<sFTHS5wtBggK{ceL=?zdKyUE{3ZoeRi7Ll<V2?n@f{kikKdKXpxZf>
z-}i_F?R6pJ(9ws|yYv!GEEPHso1|5kU1}s1g0$@|{8qocC-7Fg70zD;p#uBrw8G%e
zgP$<<C>_SD)R@l49smh!VyBq)e^@OHEg>kVpRJ#DTkg#j`bS+bCub-Ju)F|3=(Qmx
zklnR}Wkk?=tPrB2H|JJr<IB)K^tsCaRV<THV4r(a;#=r9E*BMS@~!b~=dVO3kP*bf
z4FDqqf>|pIUAi4q#8cViO$u>Su%(8y$;g%3!zx}+z5d7IB)5YAOrTUMe=C}oE%T&&
z#QzDdW7K&RBh6{6!tNb-xnRmdmc|64jv7h;x2uE0hDN(~OS6&<W~4(jD0V>#^lqkr
zFob$1&LCuK>E=p@9A$-<0aKz6g4XAE6<1wUyHmWPVHwDh^5OetQh0?3Xa~8CFefZ$
zsaGN4fLd3{ioCqzYUbJcf4`y*v71JwmE&_h(mg%kS(cM(fRYz^+|z6zZP9xSJ9Ge=
zM7-^Vc#Nv2^EDifd*e%@1BnHX)-ySz2I;C?zSnD9yO^h^ogN2<j!9^Y#%k!#=4l(0
zynroG&ZBL0VyjGBJvs24`fUYJzP%)9y5B_+fV}VX;$SX$l2!t`e|Uf1MgzEAl(I;{
zm-AO*<hDF!A9T9ZHaP@$G&9wgElx+)V(urfP3Ep=hMB8%e|zcYbHKp&gY`8&n|0jy
zVy)zXn;9Q-iD>?us7k-~;c~0~8mGfRv5bEG!omP%08Z5R$fT6+v7f8CaT=-~`lD1;
zVA;78AE2r#zYAoue-r*a1La(^+l9FMHDa0LQ(hPu`*--Dl!U7J3gG4-e(d^Q7eNO>
z@;3TL<8U&cP&4XHTk@4@-%j^QHlm)`!$s-imO#H03W*uHtZsWp%4qEg8OkQ`iA|B&
zzH|W^f}(-6K(>D^j6D36(=BFe;J4|W7gBx7xwzeGilU{ee~QCniE^KXWdE`sila}P
zk~E1}%U4jfrd_Rgx9+7>=T2G}1s-2I{3cuBs_9$P(J?B$)zHv$ZHZ+i<f<)wTf!^h
zfq)rLolsm7?tly?`dozH$d8X-(ENZJMos8}x!?AN)@15>1F)otn@_K~2cXXxT&D}k
zo<UnQpLk4=f7biWK*`Y&#?vq;Ri{{I=CXvQtW`9Q1?etxOEQk+A%`rR*HAg)#YhBq
z`hxU_AV}VtKdEZRbiNn`Wd(N&;a~C?bmw0&U~E`XqrFu913$O6lE!DtMUNn6)H(M`
zUvotVo^c)D2oRL#^7qf-qjA83TV}vt^zXF$7pKSJe^ZGM+mdG10A5JGTrYE7(gjd!
z*jc>E6v#M)D>*PJDpMTN<rGp6LGL?<popISQ*&GBJzlMbaFMkp`In<1GRSKE$Y@ss
z2a-m5P^&7QZ2<S$j8)ktQt}Q?MT-^90E($<Or=}}K{}Q6V$~#P^LKZS$dV4b`5cV9
zwwl89e<>3DQ*GejAgw}ag>^>7Qbf)pR=WI)m=rTJh1LuG>3|9Sw{tFA-j>RUwedYg
zgMQTq3m0=)3-qe+d|zN+(v>zZ279DVEK=YOH~0?bq#W=F+H{noEbfbMbGwG4swQbA
z4QQh@)6`{Krjh-EIP^LG1nFX-YO^7~=Ct8gf4P|y^ZyY56uB1&0wd%_^Jz9S)69KX
z`)=<(Yl<ro*EQ?p$Y%}X;(tC}W)}o~-s<^(+y}&yeei3U`xh73QcM5e!W{9w;}lo5
zm9N2sIsEWJsapRR1_BQE;p_n2b9!m2qu#L%cKU0sWwvTO?Jk$Lu<0bI7BKUQ-N?ep
ze+%M&cX529O>h2u8qjsWZhvcZp4^bwDhg1L4-|gtsT?vxB0K$z?@S^ivI5lFmvVWy
ztG?!Smxt%>Ml$p5$(eSvK<53+SK}eI@<gNze&w$uf3mi*f^3Vv@Gc8(Rm0eTEk2ft
z8<X;4_?zvFZHFt){@H7tijWEUqJ>?Lf9~ToRvlZDwy5KRu5z=nBZ%%rI{(AvwrdGm
z9&f#dkMOTxa^{)|x$%Ns{VQ)t*%GZ~%V2cbaXdAJht^*1tz<<)NhOSwig)s+a^dzB
z;wGT-W!P?;vz>mVE%H2841)9bNX`&PV*vT~*#e=_pzXfLeg{uV-lmt8YVG$ce~e=F
z5s@GbR$q@?lSvMG+@AHsX73OdbfQ#o6}ua48oC1^#OFG*!9)c4tg)3KYuljj!k4BH
zpd#Io!#%B-^S@nTeGF4)gTW?vCRQ7ok>tgH$Kz@s*xOI}T5kHLCtO(O0a7LL6-;Gz
zU$gQ$lew*aokTn~SY(kZH;|Yhf4z|vea5`O!T{jd=z)EJxM`JVJwLs9AiBaF9actc
z9=d@NhtL-S3~yWm)c~T##33-Wql;LWy^DQAWrhDC>()VbIQ@eBaPR(syb}oHlGs%E
zi2a-${rh;d_4(QIAF4YkM^xL6?{w<&3Qs-`GX83r>#4e_xdhRDU6;k^f5$IQFfeO!
z{_kNd#L6bcwY*F(czWs4>}T%4)7d5=*ZTyII^~9%4InwP21uW_6(Sm}A|_{i+%KxK
zDzk#kiGFG#A+dojBNgS@x4Ojan<Ja6dE)hxBZ!eQCBp~yi+Owd(h@6~7yEE>D-Fsk
zS_;+IM*ZW#)Z7PxWnurtf5607>u`UD&cy;4s@42GNF{ESEY~WJ216D^lL8!9DYRr8
z&feG_V;ML`gOY7Q?zYhXGNLL|yu5fAimp0X)d1^Vq+u&RH?8Kd_RC5wC|V9yErM%I
z314Xh8sitW)_8cSA<DJgt@v3}WW0e?VW6#I<jd{mjuS1SQDC_)e@?AXY5=)ky%WE;
zdau?WC(>N32V^iUc6U1rWH^~hBb|P7joE1^Hwl#+Z~WgGhb>OO<Y7^;Z77uW7U<S7
zj#;XkJT7~sWpz#Y@|#IqJ~u8DSS=$ocq`N~1-H&L0gD`((m!j-?-TpvdJa4<g(P<F
z0h_A54tIS&Os$X8f6AUCz!$7QF(?(#MHQtKlXoB6pC_^UtL1w6mom2d$Uw|SbHPFU
za+BG=!Z17|QONt*7F#^1si(kIeKzAFgi%>`Y5(sQ!LM`eXB8hhcyWy-?@(ZzJZzjN
z-V7dc?5l>yUhH8eJ=<R%bE}b>26MNROID}iW;%Dg^@s~sf48x27jk1G88@@!>jY&-
zEO9?4@!f-K3oA7m-v)og<_FtOo?-7Z<{G#uAMz%z2WJT+-_dt?zd<&V3kV263?>|_
zxKgO~5=khd>}K1!3f<dW-wJ|As<<;RU<&ydd~wn%-g9l$dgg25jG{?kdH=q6C99Qi
zZXZn+S!O}6e`=X7NKImnXs^Lo#x|eDN9tYynx*BS3_lp@B`k1Gwa&W|Mn3EM5lT_(
z1#K*0+wN6MU0|T;b|!tc8>1Ke0qqBJmnIwwUEF-G!enmAAH{TuviHh%JBEj3zWpXL
z>#c93#;eTveDlEg>^y0e^#9NYHkU?2Uxcdm@+blYe~$PRXUVqif|MED7aHsPgi;yZ
zVa#-WVTA7A*ZC$?Cz*cgqC&r*t|hr-nx+Z6xZjuE*cQG;zs*PAS{)aEkFM#Ai0={z
zeCcf7b(OQOlrGN~jnkW51WKTWNgO=>T+V1()%6_Ig0wa__ZI&Qv|7WJQRt(=CHYMI
z$-<nYe+>PteOJs`v0czj3MH2?jsxe`H@*0K&7)L6N)18m-ovg$vJ>@Err^qdUG;K2
zKu%L{OM=g?S2A5%nv>^agLVQ6{04bUr-qjRjKie1{dj3rYoUE_1j2JX7CkS&yMqi|
zH9tPi!4-zohLD?F&D+jUSuie?<QHcu$#ut0e@*&!`{0HxAjg!ZL&b*loxKV;XH<*r
z`;{%lQ4%&Ie$yso1b$k_xxI%$M`^dcWveUtWmrDrMaFVb@oXbW1*GgX&xg}NNFD=M
z#>9y>nS#tw&xQxg(q0o7Mu`Ka>+3A=uKL=T^F?3(Eqd#P{BC_#OG+=e3W3NsCE3UU
ze<lSX_YQEff2Zk;o4UP%wVKP_TD^P<%)gw4&mUQ8v88xL+R3XUoUvfgno!HT#;c2~
z%c=g4hTPPzCk*@ri;eGSSiS+o46IzXO~oVE<#3nye8~f(7?R+v8&i7!)t<`0a1Be!
zJ;jON*c|`So?-}PaQhG!`E{{e!>w;bf0$8gy^0=S$8Zr~$O7jv7yPHdg}uqbhMoYY
z`lzg2#{s-cqv#~*EKBm8GzSRE@C!5hE*uWBN*`OP=sh{F^Ri4)=}7A~4etZ49TE<N
zMJEzMIYLzjt<pF=OZ$OS?=#UsGD|N{Y2#MpSVC+499s&xh+u(ASqy!~jdPh%e>nTh
znVy+eN9j05S4%Z)!_Ptd2iJEY)q{v~b3o!O%2k=8{LlrW<Nl@K!tF=ix3olU@Vi55
zRHr&6#v-sJ!Y|d`)$#LJ3;shBHmfFd@xK4xqDAA}OR=`)w!%>aUE&Zg9}{YOP)SE%
z-VdGdQH?=sZ2PE-U39ue8EHMge-gKdC)o-yLX>B(W|p?I8r)p01<R_$711xwfrdRg
zqB?zc|BYf)pb4uN3D8XmL><Xoa#n+2Q!-Rt%F1CXkFM<D$YR5k@9PqHE&{ojatf1E
zlhjyT&g~2$7Z1M6(BW4ANC|5oP3A2zf(MMFP|dWK(j)Wo9f}+=2c|-xf2oNywapv$
z0+2&VbMca~-qj|B*GkH0kbp9A)>W$ZPs7o_rjY`5&IBAyMiNN>wX!EvNg*^E0K*&j
zzB_Qf5kCg~XPF`u;HH3JD!fEhAT|dLk+N)ZB0mr<Lq$QK&yRw2AcG_S&H5QY!*P)0
zPk_5|<yguuckRKVPUILSf7*%fw9>vEOQ!V7HY<ea0ZE~i1@^flrQ>W32Nvj#c@>Jq
z59WwmCe&UGQi8^yjqJ)PU)_Bj?=`uo!kcjIttc<n6uAoEDl6$mtB>42;+3qz^l-YG
ztetbEm_ockN4r_(u}^qCadp$T1x!Y$mSDv1$ZS_y`NgNsgrV41f2?9cfCPf6Ja7FD
z$AW0xC%H5_+UM4)8AO?LlHi}mQfCig%BoAa6VItWS5=|bzP{Ftb?T8JTRAr-Vxyo8
z(qM~nh>Z@E`IxW6FuE)ysN)k1YqLzbaLjc5>1K!w+nSIa%^Zt?6-ZW6^wvf^Z?u6>
zT`E_O#jiZv@p~5?f0Zr^BVpC6M`DQQWd~1qkM!T(iHAmuGu;ha>TtkoYKjpyRA?4K
zD%VK(Ed@2P_nIk2z|p1l7aTPwfYXIm<o|kIDNFTlUtdUr@7IfmR~^e{Ok`5x{I9X>
zIjG$JAc10D+6NslXO9i51;nLF3R{4+QkTlX%^DXFvt~8Ee}EXEFQ`}GT=o;1GzN%~
zWUT<|*ePp?h@zG2f)EY^?#S<bTXs`s_RdL3B(!?<Ms|cg=YRm@tVWe2!!<_Fvw3-)
z$DR^#JrjGb;akya)J|9G;0eK<24&x3$q5M3&ae>HSbmaY$(({qTSUVt&|Ri?zuEr=
z9)(G<8j6ihe<O8kfFx0PBa9m7n+LAJWJT5)OcBA;G5r<2#a`o4GA-V@_FzyUzdOYu
znPoUNJcvb?5KGMCMIV6ckqjIvwAC4()0C}mEY6(FU?~@O8O}pwtxiDCM;yz_^_%*8
zEeBLGW9F0D3&*NWB5R6#^0w~sxUM=Ktdm*qhCRqAe}z+gz)`o_ru6c-sl->qj-=bE
zhF6h_=EU-VX7oC?;C0L~bAvA?>vg0n@}!NfE}^w>HV5=OSMf{T5Jvl$h{ASq_<?M<
z;~<b3o({}MHcCI8TJf98eWr)R3XbJjZBzggwsbU;A@oI;6HYr?x7YyiaRS;poJCIS
zBm>PAf0Ik$@_`QwYI_sU8_<oN<Uz|+r^dA#kC;9gZdk=q9V9I*tI&M&NW^~w<YVsB
z@9@1!49Xp&xEC+>>ogV?HkC%%%vRQn@_4mXp>}u@w*ghDb%nm=nA_h1v{4C;q*k))
z83`wxU6VY)Hd-=HJRZ0&HE1L}{dxKRZN(NXf8c%(h<bSWqGQqvt*5tEzxKoFRX1kN
z?7G0-kYeCNCuULR;<ipR{9kynSk3bwvzG7u)(5cmEV&kw)&*Rsv$$(u8LebY37{&?
zVt4Lgo@VABouNu-1z6~qvuDl&(RD*=dW|rN1)eNKda3jXODR&$(uFIkrq(cahz7YR
ze=&IJX2p4_Yhebp6O`~M={>}B3p=@blEmE^ef_Ml>^&HqaTLD0AtV|`tfA5|_v%na
zg=Q|U(l>IX(NC>uF*oJn-|7Pu_e=wTtmhR`qoWFZ{S9GnAL|Epvp-|w#(qYUB3U+H
z%7j75{A;37?V;vBf~X7BSaiYo6Zpr?f6yvSuqRGxof2jL&Le2q)lDLl_RP$X9(x}4
zQA6FyZDrnp{rH^bq)^ppEK_RJ?#K*!JJ^D_%T$Fze-3d<As=Xu+pGTciDJ8~IRJsB
zuxYf0HX+FtB8*eE8nkjK=@M{^`~M1}fa6$Y8GJbsD`n9Kwp5Mw5KVctv~6s*f4s`^
z^!&`3zw^uF*Kh?Jgn!08;U0&D6sCSSg@y=O?S?4@D5rTuz)&6hrNJW+J!MYallVxC
zi`?q?6Rmf!4|izur<v{2)TdL5bY#7P8P6x$VBE~D+&f)*qw|Lh)fFnq)@yXaW*R!C
zIN)nyN5X0l@wSX?QDCdtmV?rYe_;t#1G8~ID-B0SJw+jl>c_Y0l;s_ro2c8yad}HL
zylhb&{6<5|B$i)>eaEryo$-mLgeYuYQGY#*x8(K&0F2Q*Av)CV9{koBkXjV4H|X`z
zJGq|9d&Dc9ciICm7X;|93m%2&q79(DnK!nW6xa+(a56RO7`9_|2!kpje^!u1&ChR$
z)-yWrXeN|K7&DDq=)q9%(Zf`Q-~W-dbd@4u+mG2x3%BxAgz7M^ZB=}%-_IAh=g?;j
zgC((LF%8YXZDzmY=E67Z($E}^93C;~ys4YWb_^;qWXD3O?j@?)(*bmBjnPBL+3)W1
z*JI!Q*E1LahNdv=L~-dCe`KOop7u)1uFyLU`({WmyGBO0CUP*2))aqQE6bMv`Xg;q
z2b~n70YE!~>3Q0|vPo<59MS;Tjj20W@Y_fdt&%GuI20S_b%LFQ#jCOGmlat>#a_=x
z>l&ZuyW=SL#?|4`tjQ+dzG-{WFqT;71!{8MNY76iewGb9CXea!e_PTtBLSGz37m)x
z)jTa&LZnwQ+#*U^VY}MHs;VguG583^?wqndi?dD~vMpSn$3E8ZGMj~2k8(fN1_9hK
z2=<BsB!y=-oX0IxGXxxew%<bIz>AdHY6aAMm#u*Qu`o{~-H8qu+RY=_k%PV(iK`bj
zMw+8Bwb0>z0>DQ-f0PV>WGHhCNKlO1w=3-cwX4=*MG-4HUpf9yuhgSG9N}^!5NOSw
zO5&KOIWW~0TFxTUMZ*QFW#~oQm6wPg%x@O`Q5F54V*(hyP%`RImvPV_FrX#4Ti?(`
z?z1dgn?PiW0f_|dyCMiXz9a7DOa8OT)6-32wzC9q_OZo4e;G?815es=Zrp1!Zq?P(
z35x^<=cV_}r#lJ<p0+bkiE3Ftp9XWSTih={>|Mb59!seFb6p*Bqin#&OAmnZUyDf-
zY~C+kkQI@*!g4rY`sta^b+nXeZp9x_g<|zI!0p;Hqc@L*KPd}$poOKKjzN8r)E#?P
zFPFb`1sL!9fA?DB<Mk4)-BmhYlZOl8-w5sElj=mUNPWLwS<QX(%W@V}zMh%T_xc<Z
zAjx^I3G`{_XTGh&-v<roX-=G*xTwmzmvtZ)fuv^HvRIw+vN0Duhw0Ckst1gSAl(W=
z;@xd>=5N22hRK?0afX1TwJ8`dg4<~l&lZkb@|s%ue`LTVv&BlhiKdd-B{Ocym5d3b
zDi{GJ$zS;<X2YW9ZswM#Wl!fE!FGLv=MSZI?cq?Csdi#lg=#POQCPE@9gLyX#$hoN
zbG<9&;X7IN{y!B~U-D}^3Qx47@p^r}Gx`6++Z2f>1JLcf5&WbXUPdaE_(u01LVs$O
zbxHFpf2A>p8egBJsYSjIN$VcB*eOEd4pEZuC1&?J&{do6xSgv^U<v+u)qjdaiuu9J
z?Q&_sZKGr%1MeqS!UPj*e$!~%cE1zRE-4+^-&^hEBkJBMjBCyP#Op14=AwJD1M520
zIPiZ<DXmeN6xQwyJxfm@U0Eu%M%**>-E*sDf4X-+Yl_|n96P<sI*(>Q`au)SI*25)
zqH5Amjp9!Acqi4xBI=};=OaKxzq~6K2zkN4nJVJIrzT>oM6O+t72qJdfll;T^da5B
zca&6W59n8K^X;<fSLct;`Jyb_pUMjo#(&C4wIJ|)!CW>)Kwr6uN3=2<q{+UKCMNZ1
ze=fj84o6B<uw<r2Yg|f8YBLv)b0H7qN@?oA!!^WL^+;j*sT0sDOi>({PO%*0vKloh
z;=YTws&ZO;!d}J#QiY_hCLSy?DxJb4=!9v597zgi-B0pO$M5oWC-nA9CXNfGN)^T=
zjKJw!J<}?+@#h^0#iy|5PYHZ<8|9B!e{K7;Hl<(`;uw{z%ja%GJh(t1x)U)gt~G)O
zhX+vm(Y%=Vdj8PmWs*8d0n!kfuTmhGl*%!Niabd@ThUzQwrh<%EaYpiOQpg}v4l=(
zST)gCP@Jcq0F+_EDpWl=VNNm&XoCrPPwy0q&35z#)KpPgRiqJ7;XfxoKlUg^f1o3L
zjGv_iXTkqCIQHGd0y6NS%cL^AJw``Hlk1C&E_id3t<(2<gi50meZCxOM5MU`PQV^x
zJwwz1NJV*?L<cXWNz;X2G|&pC4=x)=2uA|LrUUQmr+Nte&;_mwnxsi9IMHXSl6dBb
z$HEA;yD_EOTQ}IvwhnzH3=-$8e^|O=d`-)tY@&es!qj|;ng^d38X>T6j66F8NPx{R
zb|pc=AlrMaT)Zyd7-Ip};nS()ZL^?L{rhAvA2jMviO3-wfOhJW>WfJloKCBKN>z+<
z+sOsb-)TiPEt0T?ExBC$4G<w~+&DwnJAHTihExn%Fs0-d0jV+h<X%}=e>LvO|M9Jv
z@UWRNR3Gh{dZ!5#hl;KcTZ}6T0Ho9{O79gs)K8_>b5z})5&y}Me;>EHhiGrUmpXL*
zZ}RDyx(-BdarR8~0_143Cqx}=<3D{NYGTlZGLpsg<v3pTpxwZslXAXfL`x9Zn`BD^
zc})a&#m4m1EU6ko89e|^f5mON@LWNNHg$5k$!JP2FLLibdl3Bf=?z=fWK~iOO+r0{
zBF(b;mHE!#kvvz(lX9m8Y-#oN!o4-}C<ILV4b51USX<IRGIgt1r9yj&6}xZ<kjeJh
z#=H&7BiSw~{E}{}__@OZ%Z&f8xp_l0G{m5j`cslHA}*GI6-$J4f2D#Kr4AU88Xaf3
zB9H%nhS#hPLtx8Vg+10@I5DAHKZf^r-BMJv-!i6XPMdljjQS<r^mVV!sJmahp21R!
z=1yhgL53DsImY{hY;bhB2zz{HO>oo`n2Tf>dW2#!jz|~Bn9;k@{G(mYaX?^OCy!@j
z)QKi@n8xqWR$LH}e-B6Oi=m9Z9VpclW%=^3-`t<0A#B1N+k5qAc}8?*-Hl0az^cWc
z{7(o^NrZ*xaLfzEP1HRU<(9b6diWg+_>WmZq{OB<>toV!r>5lG!ht_}M-AC@;LT$X
zBLz8+jG4(YkbD^>^dBlN4*-dtc6ZJiZpeBiG>LPx`K$;ue=Ik=b?5=tz_2kcc0W=k
z3dgB7TE1N#u)P>c{W=V}00KZZ$#prG)1_bg{IuXXS|-)RAokjU0X1&6Yi}i+FEW$-
zx#?X7W$Eyj&fSaiBz3up$~8#|QdzY~-aAXJxEUYZu61gttibGFISs>m<QOD{QLykP
zgoE^n2zMDXe;ZJwFozl&8tML2CIt=4w{{w8YGMQHsJ(b}ME5|JA}@)t%w~vJ@Jf|3
z@zk@jG+BMpnt;Q}m3g(U=C)*2`*+11XJW|PYX=cnjaaLPz!I7Q*1zrGJ!YJLg6v^k
z$k0tOYO~76TO{Aw-+d=w)N6)h3{3<H9steE`paxNe}PQ0*PY#?NuW3EFjx+(A`lZ`
zG}|MEGV^f|Uagb;{!E%ro`8iDTQ*lg$1yM1e;aDr6J}*tC)@iO!GGVYfQLCIPuH?}
zs~!RnTK8ZBO~GAH3V1c_ujgluR8yq9+?zcYfSuBi`-@e&a60a#Bi6SZPW-4V>Arqn
zt6kKxe+39Lf+9)Q$MDATpIrw!J4g$ea~ItmE;du?trUf5jpzY)oEAqHsmd+RdUR#@
zjXZ1Ijap)wf}G;$hK8VmB2`hzetYZRK83pnBze04CEjLbh#iAS2vd~uCrKAvAjO9s
zD2M4530|#)yRMV<mn{OYNH~GgmOWWGsf3pkf60AIB)qD>Nl&8gwhnX+5u_sc2}?y$
z3dE*VR&0icf)RBz3X8?jozz<yj&Jzc8fT;%tVE_^KlyqE5b%QPP>qjiE_%aqt)Fpk
zT7M<iJ)7{F8kmG`umgY^LtqbS>HWX!2WhzTUFXFWV32-t|G4dw(D{a=y?m<5hz9l#
zf1GbSjkYb2ivPC2Fp|KrCmPm8j(?COP^&CuDtZ{2K`NmqCfh{KTIag@=}V}(ywKxd
zn}9}SAtm$5N`&Nareh|S1J?TFdqp3V;q=|0k4^X7@S(i2K3lPVDxVitt#WKkQA#gB
ze-#kq$#vUcs-LuiYxs-!fp<;uJ&=`@9W<ueQi;@r)C;U1L|_fT?v5R&F49ei7<B`E
F3?-WRiGBb8

delta 14774
zcmV;nIZ4LoLydHhBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-066oJc}p9_
z0000GaA|mH000000|*ER0000CVRkV?fgq9JE`K=tZDe6|5&#MbI3?#CHV_cdX)@z+
z5s(3f7-2x&PfBkR@#oOhVNA-Nk@%X@DSOg(|DM>3XC7??c;OK@TO&Nb0H}C`rXoEY
z9qWGYZt3hA{GLfS(u@zy>)diDYE-9F#<h8G)B$^w*h9{D=27h^NUpr(Wv0oaVN&D-
zntvdmL(5}rjsiPmw}Y_&a&6cRtFcTtz8Wc1Q)$t`v0ruj!1(tPFpLoHcEi2x6l65Z
zVwe5Gw{BHQtY;N+FGGbPw6(j{oo#9P53B*P1>Z_;LR_n<n8RXPh=)ZODN3MEb9JRR
z>7<~#TWLbd&_<-r4FbJyyF2~Xvr$9{^?$V(HjlldRM@DdvpU2*EIT7A)^GW1M4o_`
zhJ(bo0)IRaMPTPm-ZOjq9Wec8R8+GRHx_rFtcrsO_ySxuflQytX!Mrd!2>T)(XRx;
zHLViVCyO=`-2Bbf?+E+KHCp&NZ&aKI($`&M8NPX$$%A+dVAyHu8y;QBz))eVo_}M>
zc6(d@ipH<eE?@i5?}%dnuYedxJIDKj(j|ls$4|emY-1nO!ACKBFSaPRpxcW|Os4&)
zmw{!<j=ou-0=;<G-iq5_+e+wgl0%TIQqVRnVTQDTL_}m~yzbmBlDK1rDkCP_GFkPf
zuO7>J&6}1Xf@+u%@#6Q3$H{tiFn>SzCH9eikQJ!mvtQ)|{KDXmZ<R?#z)~RBXm@)R
zty#y~I6Ixg-Kk6!aulb8HjeyZJI5Pg6R7I-{K5?oPNbWC_c9RDjGT*e2c)caR>#ds
z=K{8?6!tj)jvbRZx?{GpFkDWVI}#(3vrK@~p%=~nq7Sc=O^>&BT4mdn9e=*9O3V-0
z+pxyh@f7R8jiA5en`T5L2h3HRTK~%<6om4@XPQEFY#d1?$Qr0c3Z#O*B%^c4aJMD@
z*3wqpQ@A+B#2B+6{Qcwq3;u!S@T+`%`BS4$`-0<H3ger+_eea=Vsqg(r2~nX4=~fe
zrjpEi8h?X#PP0QzvJX=Q)PF<Yw0l)a$mgj$Qd%>@#7<A7m&LD`{Q9w9Vrw%29HKv%
zIbv3bAWFs~<k?vy1rI>|KwpIoYR|$K@Y4$8b~&ia2kNJ_zzOFq@=3ess~ksU)I@!E
zr6MVC&a&mQWl0@(X`+@8ZDq~ET<R9OM*u)CU+6KZK>H?1$vAoAUVr>(q&%Ld8pS9i
zL>O$<?!5{y--^=_8Sb#>>Y`vUEEy;Yml44M%c{(cX#cIK<E|5U4aW7mzW{3q9i<@u
zr5to(37G}@su+TI|4G!Nkj8>!6>@JFZo)MbIc&7MO@4f)k9?&Rb=hve3Iv9l@{hZ|
zQlwVZfORRA9a8@~nt!F(Xnp-&;BLQUei>*9O)!f560NYJF-(}MbiR{2Mu*i;j8hCn
z-fYI!CY8wRL{WEoc*rPT+yk?X++82BK(t;5wZw{3`yTY7R+%t7ezdrq_pmb=P`t@o
zYJWV)DPLI%14XEAK{@cHc8bpUBWrVJCu(Bge$SYFx}_mzWPi`u=}3pLhJCl<+Ih+!
zU;{SiD*413n|md1HWmF=a{``~hhtdZ??f7C1JR{*aqUCkKv62S>YR<{Mi_f{7mNi&
z1m(dXJdOqrI`Bwhp}1M`A}avR1~&UjFAvm8z-{k65jn~cg_B&sFg#_maHX)pJEw#T
zY~#5spT@aS6n~>SrVB#9N}1iP|M+XW*PbC9u`Yrp$FK++v=R2qwy4F%bTiNtO;hV~
z_>Oa}wRy@LQkCa4O<>f-z<uS_&xUx<ma(9r8P2gsKMB~V2V`v~if#9PS^t*&2!~dR
zJl(dyau$uR%R)!s#--pGC_gK$zrkaPd|Huu^a2>SM}MlBn$Rn;G|dzk0C$DH>1Q?f
zF1$5ImLr;3o&Ru(;<P;za-E|@szK@`0yzAsjUZqPkM=gfJ~l=+P99x4RhNv*nGf%H
z(0+#YA!c5#uFP_i+E{+7RwQj!<v*)g-`RQASfys+T@x%1U^{Ud%ivK4-Sa1zbC)r(
zR>(QVn17{D!DJ<$-7U8)4X&Z8Z&{v<o~eEzT3Tf;&8aPFjHVuZ%*K1#UPD?a@@Rf$
z!OpGIYmC!ZLi>&H?NS6SYK7g%VJ7GRC*ioj#}``>vo0G4Y7>oFOkcik0by|=ziZ%P
zrXvd>wE<Ye*1z(e3dwsa@!!|M)>CQ$BUg*X{(mf$eZ(IRqXz4F35A6WeSF0fZsMuj
zZ|%8=pUolS<de-(7D%Q!Qy}O{<B|w1&Sq8sSr_@xwkXdx9{A(Y{A2KMrhMyNS_gl&
z1L9PW_R<c#g>Z7n$e4t%HHe*ntLf`8DW)NL7QHIlmQeqzCxBxy+{GDLRxoF&V=ZiX
zBYzh1hFR>Ga8Otx{-g;2mZW!W){>gqwVY@(?`9-(r;#ivwf`c8584!wP60x!2zkk@
z$WHZ-lU(Pj_aPB|6~caEn9Oq(Q`osv4W)~Oner?9gQOlXM@`{axmEHe`%2W}q%DEc
z!Vasy-h|!-hC0lpL*NCjD}{V>Lnn=yV1Jp9X^Y<E5w2^~OiyDh`PW$g3YXGRq<%Y?
zabLDgNv;0J;ZE%gZn=o@c3f%d;|4<Yl*85Y(&gPKgrAlccJ0iPM^4bEw!5lNTPF07
zjn}-*+SmxP9~WrUw<V3K4VeSP3P9QOeXc3pAy(5aZ-*Ub&4`<#_{i<9&Q>eErhjRk
zNo31s263Ms1_fG=wuQpDe8-o43)S49>#?a5r632zz|@Cp-B2E#OAi+KYt!px+UsI0
zaX6kb@HbFV&<?he4;5KIZ<;inl0*M}><qy1v$5IlyTF~}4cX|NS!8z=>8@_&$Y)9v
zcTEF6ZxDUF*^eg#T9@^Vzr*Mh1%GN3HR}foA4X1XjX3J&`yf@3y(*tX<SEvJqR6IX
zN-C#n_+5mO-VY_a$IoYF=?iAnZra)-iS>3YG^5cvMpVg2A)~ba9Y-f>-#-t<i8LUV
z7&2&wf_9QaIAMFJAr^j3t=}`Wulbek{B(}&Rb%$wk>S9f-D`Svm(;IvqJKF!P9a2~
z4*QpApIF7_hPnbL;elnpx9$$qSm)=+%!~u~3N|Y&IW#}+4<8@Js#*$Jvx`TQBVj`J
z(JJ2I_Hv!{RNvucZmKNbB=IG0ensG_Q0A4sDJe}q_<>phTWHiW1=sPcY3b<~AyC@H
zEk%F6m6qZ^yRbS)F0Ul-2!A@kmiFi_c3h8Lxd|y7GYD{3=V*io)(+`LN(#=qH_54F
zJ~FsLN@y_c8LS>1p<5TNA$%?lCzr;FHhV=pLfLPCAr&`5ilNV=kQ*8;-(>o9O=>!?
zb?gHWr<C0;KI@sp;VyMd<@BXcr^FPzKQMlOe#kY@Ff%NpsxfR1X@4LHuu|CUxzZni
ziFrQ37Gf#Ztr_Ysf1C(pJI}l^cjQV^OZtNu>>7LDg_9WS%zp@wZG$6?mThbEJ`@%3
zAYkgQd?6<zhZsJg#arq!jv9)GuwMSy+|0hIjF7$yn9_BcOkN%zGE<#SfThBId#Ql_
zXwj}agA5VW;Kiyq(SI4SxAE8m)xvnB3PQnx2x})kBySCc?sVQ+r<85L8GHRa{p-OP
zJ!h>aI7pz#v-Gg?rOklYi4#Kilz+KNEjc5yRvL$clb%AX4gokC_Tr6~`B(Tt0bWbs
zF*l6|0(5#&NP*xfkW;SEJWzo6l&IzwB2P40^7bJZup7i-y?;G2=~i5UjAk^&#c4No
z&OYc9ve+S)!5P=fX^jJFouxQKJ929XuV@aMdS-wmhBzabnC%;z@W;sm%1u-MQNuWq
ztI0BzTXF)nr!iyo@uIett(=NU*OJ-3R9XBb<R<zlJ?AGrB0XDjm#m0%f#+#kHU^GC
z68x6#bD5=9B7bDAjU>e8=Waq|%Wp11gtT@z4PUhD#^3D-aeP-}L{Nz?0;$$eP)?_g
z<(y5QAU6)}z<Xxsw$;dt8Z3Ed)jVZwGjH6C`q%n%1|$-S@j^yEtZ(Q-8l&p8&L_P7
zMWCybLq1d)%*+!#cbAtRdb>ZiQBknMJ{@|jsVeONiGRHKm+psBwD}zOjt9_;Y-N3I
zH(PS{v%j%LBA2EylSBG)fs;S(4L7Y)>e>J4)!~y^1MbY1i|!iQssYS}*18;(5=7w9
zF1r*t8l+}XVtaD=5->(~<n3jAL*_x3^*{>msXt13t)Cdqp}q((;^NbpcW<*-8J@T&
zS{kTPCw~IhV}Tmf5GlpN$}Mi{i<H`hqa`z9%G>MV77t0U%eTkb0m;VLi}qmXGOBH6
zonXzTd3@q0Mo4$+>L^f1#A%tXqO$9<q$+!mnD;>w)gOBw=iC&r5rltMlIoZftjlk`
zO+-s`!1_s>RR&3&{T9Y<P^E3^$uT#YW_W#+JAcc2Nw_G#uI)rrHARQh)ixoTyfvRN
z$Qtj%hGXR|gPHI}tAGRxF=4eWxECAE0x!C&8c_;>6{+@4q~vzRX8?kKZH8c1O2ujY
z#{Bb?*@Il3bQ|daMrPx1N;2?%_6*}1dxEmsD8wO}!qQ{mayf#%>9pY0#nN-=!ihx0
z?tlI`7Xzcbf1KREU8ye<Q=B#@8&$cbHY5Yqh2%??r}b2m0T2hrJo<0aUO-!JG!64Z
zep4Xn5}kh+y*-Xbj|s7tpwoEF&>?L`C||3JbghKq4(zg63mq3|B}~zNZMFU*3q{mg
zZ6$9IR(3@EyM5}Z|LiX8s@|`FG^ue<@qgk0sIf*~f&!N`yQVCzh$(Q&sE_g_2-ewU
z|5|m$v$^@@O1ceDw4dMB=sd>0K^T!|W4z*!uJ^ubu_u9j#n_JU^O*y%rB&1&ume!I
zAnA386)T*f2EDuZJBQ&sO>)G=ymSq7Zg~;Y2fn-xR{L3NUod=}dV>S!EP5q=6n~PG
zs5iKmyQdX3*1KlTPI8LqT1tPPuuFACqP>893H##)_Gfta=~GnD^hqEsuV=yf5*1aT
zK@(oO#T<wNNt2n8hlaiH<Xn3g!{}>bR^nPg$97PVQaI5r8`xyO-#bnCk@Qct4=-3F
zfXWy8D;8o`ok1egtY+eT+CAnlW`EPM*e3whB56G+{)Y0(@rOE{7Np3DSlkLJ_Y{T<
zC!C+l`>M!FvnA#CniE3P^4j&>ct*cQyWtvo{p}0)(O?H#tu;cS_wHOY)B-dY!7vWm
zfLHD=U)=wkTof`drn8F*n(MN-L8CscVrXtP00z&JJ#xmELiJc`YPVLc#D5Tz;)V-#
z<!_i&{7WDNf(y^8gujvC5y9x99E6>IFXA<D`*-LNyiAlw=5^*;iO5EWs<dIdV?`}v
zHhE3NZ9nv_k}ah0YA4VaS$TCfIgD2)IoO9pF8ur;XN<h1GI6k3QPV4!J(+UoVrLiK
zraWF6CW2y(#6J^FGqrhx)PLRd{&42<O}*`Y$H^jG=7{nGC_SOl8=IVj65XRB*0{l)
zDw&S99gEm0<79+X1X`zR>GbbdRuAo0Q`^%ZK81cW%YR^6Q5K>kEwcqpu$RKO_T>Di
zMLy|stqa(Pb<D_z{r6gJn6?u-ANw6XQoexG2``y9^stB2h}M=mh=0ymWuUfS><<HM
z=weA{_*javVJ3+bSne%hNH*Y^hh?*0LsBW^BS>mBouDJ0puVb4`wQ4WA+{l1yFH$j
zPQz1nL{3x9sK#h@Zc?|?7`XOrmI)&_k-3(mAyve`_9*PfQq5w$W`g7}Cvq-PF)IRt
z6tOw?Y6)(KC|-)a9)Gy{zB%s+hP|?`xK*lWUAzMpw8NujxMQ$=JBLVcqy!ZXD#*}7
z7cB<2gR0E+m+`gvWgMm@fuDM;Mr%?74AnqeTlj7ZW$yKT7!Oc$zE)@HUV<7GM#1g?
zf9h8RfbF$1$;0Yo(Z7g+Zw^Cg%Lv6hMz|AD52l}JRZ7L|lz%9v=X$to!NTFTcpzOZ
zPi2Rk9Z2>0lKz?!3(NJ0sc~vf@S_O()yIH%R>xDZs0NLZscMB@-qp?0JwGK@Zqg5}
z3i{oM*Lt~6RSYrf<4|aWk+PE%f<P~akzVAdRs%suJq=BR<Ozt)MNv|O%&vWO6!uSI
zFCLER@?ZC`ynn@dmBjoPnxm=9pBhk<mk4RRCDNiUSB2ZuI37(vc9|ip%ASWL2u<%J
zfHd0qdIS;i&i=UpMJt9C7aVf;4mcCj+Itjl{eUQ?FUqDIH-6(3*Debr&OQ-OdDL{n
zBf1mN4&PGO-+Go78bV~`f;rS~!}-Ckp&b4{R9HSa^?!z+AjiY<C=0hn!o{bF;G^(%
z;%6t}0cM?L<VV%<CxVOZeGjwk<RFc6GH=@gg^|y1JPt)Po;EGTkCgDa=L}H**GsMI
zOjY6)J6+uWzU7=Ic3=_ht+%GqTHT?$?e1@+u?ZX-&XiA{IKlEb0rRNps%WtVno9ks
zKoL3Mw12?Ypuuy*<0#bUnKdDeX5>*L?j*&9DSdZ>8dt?lg*WJ%s|$j7#nS$H(TUBE
zty0+{V;1^m_q}T+h<jcJ(Dg#Aw*BQFIWLBhY_r!4xu2Tgp=G!G7_;Q7*gkFTEEjej
z7IcbRp`cb$M{R;a=#bNu<}|Jn!^azJ0@rAWUVr%G%DzChY;{O4elALBkJ=eL)CPNM
z9_%|*yXGpU(y?6?a=P?P1ZKFa(N+1i5Yy4(n1dNV@-PORV&K}70PMwiE+mDpqvPj6
z9;4U5zH0kyyYgdv-9Y~@%cO|<ijf>#I&LFZ17#6sH=?sW0z^U*pb>SFwBdOff>Rjn
zpMQV5jxKG4zHJPAO0p!Xm4o9E9VcQWc5LVkM^m4LAX~l#XklpK=4(w%Xr~26<9D|G
zZU7N!&I`@8;`27hk&-34hkpi3PlguQGVkDYO{gw8b``RSL@)_Xrvp~a8s+iG>T<x(
z>w>O8(3iS1&Ofz<kQj9wX9|=~s<{GXaDRm#m2ZIcRM?NvNu1A9I9Oh3ZIO4n+QFV<
zux4<w9B)`6S*@xXO0w?$!fAx1HOATRj+xB4H%cMGxtQp8cgJH^Jd|6NgcOiw=uC3v
z&Qy)e{!ER-XbX{BTJBWb73;JKAVhj3@3`<vsANF`q^-33hyH{%Noa+gKUDcniGP?}
zz~S6}e1VqDlf99~ox_#u7-nG^CY(iTVX_xsNO#nIdS~w2W4)xtYp*2L>e!@6#Xglq
zf^E_o1)vJiCm~ncl6%hfi>ab~3AG+r5+Iklwd|`TVJQ<QC9FX}PxbX?rtpsKSy)5V
zme=5o?Er5&7}~z*0(`9~i@S(1@qayu=4J{5MDLDcZx4}FV@G`olIT+9@^4}%$Z$i7
zm!2@C(tI#!Ud8!`tG5N#S%n%RG0Gr&)z|U87T0x$Hoj3m5WuMUk=uvSZg@tTxl-H?
z_SL^VV%aG1{r{3QtBwcX>oX!4UPAX^ONWxdE%Rh}0*3^Oc@4~6R&qD?iho)4-kqXm
zV}0uC@fv+N{I#ac+?2X=F4#6QR<Q^Y$P>Lb!}Z!y{TxPhgb`CC1P_G4ijg4d%eIk;
zm5|3Rexzg*l;)dyq)Ab3A`|PXBBXABVDSTpVjv^hkoHf;Z8mOdL_;5>_OJt1CY*L!
z+DH2aGz+VXVB4G4RLIUG)_>FlGCtsXd%v-SwS)?vq5~*|Q-_h*k|ADU+H)xGA6(>Y
z_S@Cz{x~*eXX}rUN=n~tOr(+Of&AcX5dLI@2r@W_jpkf@Tb#(&XG`z-C?WnA=QIJ!
zK0ezu*mh4sY|E|k+tbGfKS72`fyJI1SmV`r(~ZCOb$C8EX|phn*?(h=*@K~)(Lq1I
z9n3l4bqcC8o+5i6E2^!25wDgmA91O@PrEzGkz3ZG+K^Wcy~da}6YLa3<{`j}Ti`Mq
z$$Q@5AKIe#fFG#n5xNRaU)Ilg(kM!~xKzhf6DR6jk+KM?`}{)DE3O_S(S>7cQF_)1
z_)(9kCHZ9>C!ZDV;eX3oqADZjYR`X~H_c{5LbTpRNBG@H?{1Nj-61lyC^-<@iQDL<
znf?fZGf_L$c!_&m2Y7!!Zd?I5!upm6wGRHY*fE#wv55!=b7b{h!~su&k_!-01jEoq
z7#NTy?W&s<XlQ`l|N1%=KG^gWxM$<!R$+}v40mt*A#^sJ(0`e-v>Zc_(Km!!Tl&vX
zoto*70Q$Bl_0zaKsI$2lZI!uIWEKHY=y?!cDC(8G3Js-P7WmE64K0XB4A2LV8`pq5
zQZqO!z(FVzAA7}8MqYEK4Hc6RfeC?NyCKzR3mz+FE|D-MkuC>jy(!qh1sj+PH(&Ta
zk{jA0$yD1F;(zttHQRuVf0DY0)y$TXVy<I{r<jDyS@IUepT4SeTodFU-019aPOiy5
zgY&;I*<M_@Y`rQGlc|t?Zx<h>^$WVuq!yqdNJF34ks!Oz0dtSIjX9RMnhmE60tuPD
zW&J%<D-Rm4E@758o)`VpExv;yrf0=2rh*0;BOQ0=i+{rD#S2dEA2K0nhk5pC_33rx
z8~?<C(F_bsty+{CTJDBRsyvRVqj3;o;~^YAzh_)pm#$$@Hi+l_zLwkq&J-XO%!YU)
z&jQXi0C}cD_C9_KtoY)T@4LGERXp=YOq8d>xU$CuHJQs#oUb<S6h?~;by2=DsrE|B
zw*?H=9e>Q)F(Q(Z7@bP^@5}g({FR|fOJ2xvey*fkGK1*5GAYzynZXxI`}+ik`89Q5
zD1e`x{jTBKryZZ{zXl%5E3F-}^WFDrdmW{YdjO~YFi1ZygV=RCl-aZI!1YrzUd2~-
zOT$@GpIbJ3)e4%mb`~>aM+QoGr2VmS9_-F6-hcK7G26rd;yX}08pUiwaPiT&EwhVX
zL0V#N0o_?kfQQJmYY^X~KrK>H#vH^4Z^=KL@b0ao?=a2sBwm>)Al_5fK$wDyAjvFS
zokmC&?SOX0($0#>F}-8qeh?kZ!;}zyQh$CH^|}eJ9<GUnMli6zp((o&2<`y;9Wpmd
zhJSOo|5-V+=t1Xj2Zvc&*SY8}m<5jy83so_c^kY)j4ovAnnQIr?~!YnP$L0S8Q1V!
zH%}C+YbWS)LF4<Yp=R6}rS5M(od=UC$8#nxb&@%AUkn+SHEhIH3xNq|Gl5evLA<E>
z-09a{BR1?I$?6;Y5g@palAXLN*G9OAK!0}-X^}}`DW9ZaHH?3Maa+g8k23eD1;+8`
zL-kCeLkZ1h5FEt^rASoLpybBoI`gU+7QfZD7M?;r5QUs@!Q3^}T+EHM|MQFDq2%~$
z+qzr1C98HDu~ok8YU_0RwODcgI~(yLk%?J4BGprl5t0o@?n9fl;iB7gLAXNMJbz=?
zJiGeRh|jiZOae#*Yf2tGa}-}+y3dMb+O)|Boka%kR_v$V2txk3AL2Yr=odF^06M0E
zLYUr(0F?WLMv=GJ1Z8Wcn59y&?d0>`zOMgoiB{U7ibGntb#FMYlH_@nxFmE&XrqfS
zqYk`!2A!ge+7pl}kb%tP&g{)3Z+|6xx3dS%9(h*}mqFz-))8-!7p1MrvKyg{A8AH#
zRt=2+gzp0wH#>-y26Zyn|91T!n8I?R_n-eZDKZ25(^E`&b{ej^L>Sg$`Rah2-+nt!
znv%jGtL--O^KfH=+41Kw9|QLk4(G-zWO&n>PXms>+iHFKG1R48?72liaDQyxY^M+B
zD|g}Y@bwr=!7O?4M+RX^^GE$BE^-ERYD9<-h1{r>1#JcI;So%ejNnzUyKy6#mUvQ;
z48*czYJHri6?$HECt~kAu_>wS2hBK)-K}yDYt3ak6pT=C`0eKDq6Dz<VYaMTd2L-)
zYGZ=#cOdXm+W67n<kMtJ4u6@{yyCs5HRE_A>B2RW?+BpWYV6^%?a%-f$d}(KXSDZy
zgg{~oI%L+<AMr=074;DuKk3wNNaEcgF3M8_7f66W9f;zt=F;CIrur9?#_|}8f+^G>
z6<(yb*W89EvH8+<!Pl``SR8WUfGh?`&|#SBsupFam|L8yVAY@^sefDIVV@my_H8`>
zs@sJ#QB^JJd*Q%O<FCfwT<L9rlD>85)Di9Q?d2jeLM*P6)DVn~S7j92<UEBQ?>kFJ
z`m}nh7K?0I$DXDBd@S<*Sb(W&I~;)n)0hc2#g!BNS8u(MA|yn1$j$5BVph;hg`jS?
z7=uJq?lR1#4n%liMt>^_7f5}VU`|amU>$@qru1D3*&L3<hzHW9;E)|xJ?{N?UrIck
zd7fo7MAA&Cf84lGGJEiqvlp?FiAtB<?}@$T0($0Nr+6g-M3dV`JJhxMeSFX!dSb;r
zdc`@At1pZdUWdS>ukNaFe3+c~pz)Xnm#&`FU64|>hdlS~U4PWAMoyYU4>^i=up=P0
za0=YapSgIg&8#^oLmRzbTC-+|mThoN6F7S)@!5ZMtUB-64Y-Tv?lKu&s;Yj0CFLkJ
zjXuqr9?T@|?{ok$`hauHy*8kLk}}8vj!W9R^<}BFH!IdqC?TPj4~a(VYue=|;g*1u
zA&Vh*kv0m#R)55QF_;4zBH_G2pPoeRYcu>kR8dMZFCbT3b1Wo@W$&xTwIKWVlOg6i
z8ZEvLC{IYTR56rdJ&g#V2HO;xmBFG{R}(O#kaIQX%mpC}vUjpb`o$r65TzV_<zwP&
z?RyU$WIP$f(*H<F#`*~c7&wc*tu`UG$psS_P<HV{G=HA;G<?L7T|Gpf?wCaLnAy{s
zn)b=sa$ZYqeF)m>QBe_Bl?q$=Myy@V>+6i9zk}maovdbBz?GtCWuavR1aHC%d;(#<
zApOpF25{q(|Jm7E!hP8ayV-lrvHu8ylzwN3iHNb70u(1=K62!N?sNPH?!<c(vzmWz
zxo&WGg?|Q*f#9q9G@i9kh>@(p&BJmJ=5Pst-jhO5<byJ~B~%>*$-y&^FXBiZy?CHq
z{=;^@bb>aVkwKQj8A7nGttEE0lUC&VMZR-Am0PvjFb94~vMH}&SM#del}7_l#OgGU
z0(X9DSnNW4PY{GTlJpzO(v`;P7S8{UDQa8Kgn#M;7Y>2-4-L5P7BE^4SN*G{VHlYR
zMDpX=5}mt|*l>;<&me4<SmW5fG|2dPb8KAIh8fU(3pa%roTFc3*f97#<2U3nua%b4
zdVz*BRjG4f+Lg&neeQG46G5{fd*C9x`eT6(<Y8q={8}t0<XiyUOT1ExPlYA@C=;dD
z{(n<UB8cY&$ZPH19Lq<5ffDucBe=q*L-{Z5tSv3eoZ2-MVEcjMFKt^X59ZSL&Rf>@
zVsVd5j?TaY&6aOx)NW|e#5(M|+*JiobNnUyTsW%kvw92a1no8RN|kxs`q10b^=5&*
zg#1JDHv`gc@DWJcjBtpvot1OPuC*%o34bRA>bUM##WNJLcRHZ>7o8J&d;CPs@|JQ{
z;rOg~u^o9*_Xpy{FMFiX7$P5v7;Lgii)@59QhK9%X8R$vtGcN(l<^z<J{9s7$e%Z8
z@m%hEj^_`u{ZlooB|i*HQ&l#7)a2SFwnkqQm#>Au8Q`;=fEF%57q8Kv#bMm+Y=6R=
z?;;GM=p$h-5Qx_8K|tMU#+mM-Z9Ksj=Y})<-ll;%I)DCF0NQ@@%_3%d#n+WNS&zh}
zrkE!xgkrrL-}LUqk7z+x!6kAFan>)Xp8m$X<OW=nFTCU2NeHTrb1zrK8MxFW%b$Dw
z=w3&k<)6zG6agZ}N*gqp3Nv8vIe!<lHiEC#SR1BcP*c)m#fiNYEcIySbM=0*AR^uq
z78UO}YD^P5J}JMN3*>()+&?Rq!dnQL0fR3hqXet?huX6oQJHQEMmAlHSr&XiW#59e
zZO^rbbo1$EaSfZC3rJp10FRxp1W1-x!&LbxcQ8fcy0Wcu*&F7xF5e^-&VRvIQN!=j
zNic$_a4sein4GkbFiB>*sz!Ag=Z->~rj4X)oNl~(#;KY3WUWdO#*?B=yu#YnHJOR}
z@>KvZ?6Fkr+&=zH4wR5L*dB|UtDwJ?^Nzv~04W)GCm4Ig+!U9mV&F1#Q_rG!z<MT+
zPyzM`uvG=6a@seDXO)ocjepA<3J6p+_N*4$5?$3qOqdU`5{xX)t*VkSlKyG=Yt))T
zo0cu2lz{{pE^uJ#TPOPQ7g1S1ds+5klQ=|T2s0ImrO(J~@lJw~n9P@sQE$0=cM(KK
zZdl;fKR20ZsD7xU$X`>{<r_M-2bvNf$(~9Fz{7A#?cFdqYF*(bX@72f=8u5+7_P(X
zLpnIQ)nML^<C`PSVt0YzYJup|PbL1Tmb<LxZJC7M4gZ>5#o>`@yBVA_IKY3M_)Vh<
z&m#l@P#{$Cg7KWeL4$nhR}rZp1TNF`Yd+Q>sF&mr!GptkjM1>XQFh_8usyPB2Oj)A
zVkZ7QmOg$v`5lrc=YLK(*I*W8sjcRDq_`q4rSa4yvPa9YjzhG<CUuwdVn@W`biBfr
zuw(+2k_C<to^v!frILbbY{hiO?3U=f@E8`;7k>0KkxjO_ucmmlHLoCy5J;dCin#4{
z)s5I9qN^M`UN10#tpX7wK3cC2iNyZ<Hs4C&9SH2j0bq52D}VIqwG(QbT=EbMtn3xp
zubzp2MV5%hrW8rBc+N7-BX<Ps-O&Vz>k<f6uc^VAcn#e@_CX>A;@Xu(50C4l`4<x^
zo3mrF%@lR801zi^9ADsvj{hl=1mK$PJ2rOvl7ju*&X?1ytEjV_c&WzpO|1@{zmN?~
z@5Z_SK8gdf#edGQL%<6#_0=+d0=Gn#5z~cWL}J2+^Dg~dKTs5Bw8BIIDd@Onsfrl8
z&^`+z8Nb*Q2W$7rf}r9Dwq8p;Pi&1EedY%%fqp6TOzWGaaCPs^lU}8s;c9dt^&T^g
z_3C4wl=cAwNCTV{L2?zOw(Ig9oB20}&6eb!+lEK<eSbfxn^Qp?r+-)VLgd|-8Ibo&
zME}NoFYLt?gs#T3i&{O|L(y$H6gH#XvE+j*1>+AfiAhn)HneO#ts-Je9aI>7l6%TK
z7mfsGf}5W6vesPo{k*p=f7U0ul>V|@d&VC9*TF46Gs#!)h6KkpW^mJxqAmcdTTjv*
zj2%{yp?@`W4MtMt>6>^ZUnYbsDGCUEWv^m?gomts&i=MTEI(Wre`1zw%0S+qmF85@
z+HH#0?Q}m3O5Gx%#e?AgN2a>~3AS=XeZ1y^5<d<-J!D&<s2E6h_OVm8#^O`RAgTxV
zyD;Z{0r|JQ&(JqA?FYsM)?5E4<W`lvCDoh+dVgD9%2$>O!V!!t={JgLk!O`Yd)!mf
zz)*eJr3?dKPefGxBl*&Xzx(Mh%+-4bnpep}P1}0oM84cJ|2qo5EqAjm%3sY5Js1*8
zI;u@1_+XhCtPu%CVYI<9(diaRL&;%0)D~<`wI^%6(Jo)h6@SGtg$IUx?A?(UiQwLr
zynpPpT~<}pEqFX*r{x`3BlCsgi1jOuPrQWtou}|X8b9rIw|9W+6c{n6EteRnToSu$
z_oAib=Qw2dUke_o+~d*kvqzi?pH;r8njE1_v)h`P9tf<LP8w;OShtX~9?(4~@l3lp
z2$@0Re<9#F^`!~n>*c?aO48L)JCX-sL4TMq8r!RgorW#h2o4#P22R{1M@_lT-&tkR
zNUfd|vOgOGK!Jr}7gnxAo=|(Ng<!|PetO=1Gb(OuYiju>e2^4oq|knyPOkAj(4$q0
zPN?92BX@412Xc;@z&)TzI(jLg7$j|q4(J_H7C*@(_3yl|WC$A;;ZY7tK3#`6gnySP
zrW5iFQJWDO@Uvzl*JJV*BE>*C)RZ;3<D)6Nd3*xSwfD&(cLkuF(%AUZ;|H&WiNQPY
z($M47Mb0oUW#0n4L4To#9FA!F(d;&zdA3ifZyGxf5G|e_8yuXN6^7oP7tOTNNQ#l#
z34i3_eo%W{8}SW8io*-eppGT*Sbsf?uGqTc_k@YOeAGS$`=jNv?#n~-)l%hdBmeUt
zSCz4L*hE<T=1LtyW12PYP1>z@_NTdOkmL4LWG{E1HnLJ~(N+J54ybbY5z&K6Ye+)`
z4>-v(Gps00`Trq_2hAeMF`MNP7q&-+z7C;{Z!$3P&MuCwT5Rp3be{$n&VMs7f-0_(
zguYrtBRY)p7hY<!3EoZIl%sDr+_K62*TsN90Jb*KRCSFnWfa`0peaZk5G&a9YCId=
zrA6pqOiX#lsY4C(dFl}48lnWs!LQMKRock$rVaHyx#^%_X??whRsR_|X>c)p?joH4
z#GT{Y%Q;=etS!p)FcIF-e}4vLkBwH<3fD3>$#@U{kNa0#-pU`??oKt5gk$hUz^!2^
zZ@l{d#e`ii?i?LppL|MBuwPENjHuL3(u6=!4JIl+K_ei5>!#^CK({Btl5A=hpBMLs
zl~2f9C7@lfgR3+y`VZG7d~^Q@)yk_Clfc~<TM#84`57)-Q<GM?AAjOv>+04yu_NY7
z$<GVUh&Pj&v%=)w{r8z&wIBw6$md8fpZUJ{UafCd`_SFCC%`wv5G|z|0acWKu7apW
z#?zAuixC8iGsupvr81q=v+u>h$p6WIdd^8=Qu8T{=?4fsI3?3;84PZ+?Y^B4Mc4Hp
zaQ2eU3!unX&BJ7op??Ax{L@=!g|a@I+;cz7Lv?9uyjY8esJA)k`3gl4fS^XxD_+7`
z;7(D#F6-sV!k=1Dr6ZqZrU5BNc2J>8;AvKa919W&B^vREQ~%_TB!c5a*1*mP$-Q{B
zU>b7kZ?byJ7(+!{^S(tV@eS*a!>0}s@*zcOdf<-Pdc*ohbAMR9zb$dX2WI{vFIy=*
zriJW=<c+L#t{im#s>M~eWPIBNQB^ZpW>_)>K@#=xvTZCLv~gNJB5TOgH4c~a8Q0{c
zFv8^eba##2VM3LB4P`S!*0W;rRG3W+5U)SXj6tKw9?75FW&Dj{Nb|q%t~+@@f@Ku4
z8d|NsSY-#NgnyK5=ltV@mPiF`NH+iB#6rlalEXe~9`pMVGV4I%c6$lurEj~;JD)TH
z%)@OeBsjLXOE=m&vHxSAho#tc!pa(#tPpAoE4@L{A@!@cvqc-D-1|0A1j?kIMTPrH
z%0(i6NNt>Foq?bwxE^v_xhk@1-vm|Qb=+$bhl{15?SFqfE1R!j@4iaxA|kfvt!L+T
z{G^OxfS^G`eR^!AC?ZH#DNFZigUDc7$@>jyy=>}$mRSW6_{T{Z-0MACe^d1B>HuAu
z-bR#_{b-g#Z#ns?3V6hxb5B6OT78}k=GcX%h>)fn1pX{gKAFFaeacmeGX4UhOPsNr
zf4k>lntxotJ;dfTU!a(SCb4}wm__(h=jeY|;}k!c{ouqVtivH~>ldb55peMh=j@k6
zFL&HJi<ic1mZrX%&zkt09Q7f~f?0&G4$gJqg^O^Ng^*AJ?RtnVLcASoMkcGw(BshH
zd@Q0X(HKP#u3j6kxXng`iQMD9U0y%#o7s&pHGe#kq}oN^?Lj4wq<H1ZlHQUJiA9}<
z-4WcJo--9c%%xB3GUK?wb@^o&N@0lNNEawUC;{aQKpUArzqk=SjxzubEG3h2P3u_x
zFu7v{lW4OoU-y-1N(;&bE|l)`<{C)Whcbiq_l*o@5Y#e)*K<E~NG28JkgDX)3Kzmq
z1Ak)%cE8?9sTNyqRbn#0eM{||!c|{^FOzWhsr^D>Y6(>*Uj9HjV3ZhX-m#O@Hn(F)
z1&wEe34i7ISAstd100>{lGzgQ!KWkXK9YCE2KorZ4Mw=Dp+<(b1z&43^h_f9;|ABB
zc%mbzD};JZEjARM^ESjK7O@U>#Rwc4^M8IysTv;@Uu*aYP%yJa4#=~$=WtmGk@JEq
z?|bkKJl!-ef~4+e4ng<MoG4Z1K=iKdz`Jnc*poK5YEoNdOdU2RoLaW_b*6Y5rTS1&
zJP~~)_v|K793{0)clI84^%}323d7Z1D5fa)MUXatj2v`N2c<v+Q%w0FlXu->y?-xS
zPFJyr06u}F`Y#q&=;n)HZh#GHhl|yjNCZZauKU5%-#~GXPbJ}u$%dOtp7T?iUE~+V
zUFCU}ze08g@k_2(hs!P|-QNSptt<k$+rV1R)`@2*##JDz2~R-tRMhaC&PluAhuKd`
z=5s-ARkburg9y$K#dfo*;n)4J`+o%R{tNQ>XpX-!T_ou$JxY~FJIn0d_r7f8pSi;7
zp?oXwG77cA=4k<bD>hq|J}HPPq{c}i@t*y0lLW}CGGT5#KCP_q-79cG%+FQ=-?{oh
z74(U%-4;RD=rq1{TG2+2>@$o+TjuqzxJPQ1v@{Ew_~?}SZp%{;eBM6ftbeLrIEhVU
zt~Jmd>=V10B3HF6P_&MwUtyP#`0mrVd*061nUV<BLOzEu^*1jO@?`QOI>3%uUsLQF
z=Cj`jaq8AN6o*(b9`wi}Gw>l*KRV}$rrS@>l*H*;Q}%ruvpP$zO!K)AX3&C@6cVZ#
z>yDffLX>#K44Mp1qc~1F7=I7+?hQ?L`dPt|uZzlUkxxymDY2E~I*>geDbjK*e<)QK
z`iUS3u1p#ENc)hUwTw<`DLRhYWO7_k<?=n;Ap1wjpKzA=clKb<C$iL)i8GkoiOyCN
z+SD>RcFCBKF*~Y3zDM~|GcD2@XBh6q)MqQ@S`$Kj?L}q@u{FF;ntvFj+h4omaigo~
zu*eVPCbgaOVe_X3@J#U@mZq+D!thSk8{#|jRV*I-%!I9wP*ZOUC|}t8_*ZTL>>r;S
zED_K)LZwuu9m}^gjI&e;{DNpc4X8!^6`-E+S|oqcOs^mJ2J9O<taL1_M8r+8X0U~l
zjx@XjVtFCLRf@625PvYb(N;Jk>=b)${H0JF&RPfirJc=Ved8gX@R%47RLtL4jT>j2
zG<rb<nZr6#Sc*f~xPj)ngnQQyIOvP|ivkE(`pIr$_J)mFkzpXP0lMv*cx>=VY~?r~
zzyFCR)VGd;0wG>Dt5b@%z!(@-)nJC6Db_?i<Bt5L4+5X@h<|RU^zh~W>LS_zJ3AOX
z5hA4o^mxk=1Q826=kn&SAnyI&mO_Qw^ZsVWH`eO&HlXYNQgK_{T06qVq=s8td$yQ}
z&VC?_^}Gfv_sTo#+VGG%95U=b^eII4ud#CfrO3WDXgyQOK5~f~AMswe%?{j@gdT8j
zG$xH`S*AHaKz|G&HHGR-pLk`0T`1oRb2CLepvO}#mO6TFozwT0l01d-&k@Nf`Of7!
zNI{Ik`jD=c2?ac;y%>p!##PgG%D~P&0m*cWHG65H7wBMDM^7upkLXby9y75Q#%Heo
zJ`uQ)=cW)D#HBzEHw(Lg3@B$mfr((lc5!SK2`Oq?j(<rn3B>M|<gmSr-Vxeze4Rx8
zGv!c<bOxj^DzzCxQr14RH$@F~DSGX<kY-iMs?yl<!B&5>EzMMPb3+5MM#T)xHOIW_
zx;d0nJ=sja6^<8%r?B~la!or3kHD_AL<-LI?3V&hMeDm%2d2_X&iO3&PA<LVtqDp*
zO#5Wuc7M>|!XJg3tO#5A^=vxXYD|oc;|7=o6MZr!?5*n0%b*@x#0%5a4*yF%fiQRA
z(p&*>eNY~Jq<TsaL8LN}?-H1L&WS($wFjO%`C_Ex^>J)(pW#&K<zTh?VMJJ?=Mb-Y
zd+`AUL?&9tgJh29oqR2yi`*r!nHi|iRrP_k(|`DYEvMm4MRftF0Y*UYMKQfex<kBm
zIwGk45cKGxfJ+&Z<c7n|P^I?)2W8iiP7&wqjUZtZj|ZX|y@1{4uwV)-+or%Y0l>+}
z9PG98aj`mULrS;>OY%mMX%PpsvRMX(suesK)iJCWt;WtQE$Zu;hR7$4z|5ZcjhWRu
zMSp~z_u4!B?erO`uLhhFw;{2yQVe_Q*FV1DUY)347g7QoXFTJ_aW1(|P&Tk@mRe*A
zaP3C_Z~5OMllY=UHHfLQ_I6_2&{mjtcKa1EN3M)ZhZJqjou!=v42Dsy`O6p1@<&~w
z?tgZ+nLK;nha2uu(gpHN?r(Sq{MMBuP=AVxhtKx~2(ZCIwl^nil3f~XdX}*ulo~^e
zqOWFYMHcFAm1LM8D+k-18_<b-Rq3AGL2nP_!@-Co#hO{K;~bYOts#foz3XR+<iNl3
zjV*$mc`v-sZ%1$fc5}mC=p<1Tm}IbDUtb<nM$ufMNhAyc+yR<^#)UbvB3~CwxqrTz
zW5@9uKJa89OTE&g4wn4$ipaaL<jSTf;n+3sL2yS?nb5>Dcf%Iur$o>DRl@N<JX+S}
z;QG@u2{bdGKjTWKQFwKvH%M>)K}J7d=h6TSnb{;J6HGMK1?4IRR|i6Qg;o~Wmr~pV
zYdCF}PmMyUFadsK7B5?oTOTWWj(`0Fa3P`Ft~%jj`$4AAIe?l$AVza_XA^5H@MxBk
zDx`RfkriI}GTyXgbI)9%<U$<Aclwh&AeG_)mYQyO&<2P}63=zsawv*EYJCzIrKKlw
zWUDNVyh@htr3@9LdC9o&aVEC9h1s~XmVO`z29?bhTVd})D}``$eCm?Iv451JXq`>w
z<S%_Bj+yvZG?hB&HsWT<Bo7DR+>UgLgmTUj3at)CgJ8R1m7}(J>tJN7A#XnmpB9n=
zA-B#TLGtL=>SvwQp#ug4NJ=6=G)1g-3`|yjFQacI)T<tp9rAx`_^rIP7Rs*lsGREh
zb`qbI9Q$mvI~h^+*zS5Q|9{uYiQvQ7eb0$it;&@T&!Tb-jE_}cQ~N^{$4T(eCG(fO
zI68ol8_gezO@bmz2;Q*kI6M~`j^7x4KQqnetYtg?Wrg}Jo1n;9Djbl;<*xbA%OeK&
z#Tw1~CVC)RPvy2DovvH}3wnn!-iq^7zl0NHe(6pS#n#RS99mNym4A~5*`J797)Ulv
z@dcPcpu@e{K5b0B<BdD*eEO;oR*8n9ib9UKa0Q4w{C8+{<Y{lc9cez7ZVBP&TMnk6
zq_t3oFYQBY%0b%&jgH=+5H4wu85<e+$&atzZw9Ou{)yL_hiW+a2bgb@=89VI6%G3q
zvp7J)O(rQh7PcQqIe!pjtMl#CSyVCmgK@p*f+mq@XoY<q?jQ0jX}wABgX153;s;|}
zPipbYz2NecAu^_$g%?EeINk@PXTe?l2AY2iDvO*iSEbtWLQ;PJSe3~^XXtF&s=g|X
z%>xja+rE=stYFOex3d_rZ2IgJ3#1wIq0$h3l8H!aABT#5)_+B^<R0(b%7O`16Gf_j
zD;vH*(xiV9)Sw`K%aSZ84EY#~(<F2WLf|l*h%|p|f<5{Ojkf~}h?pl3fY7gr>!+Rw
zd+qtm9ve6t_A>@g&s6key^xxiXTEP8i&|usJZ}X%n|XUmz<FWyq<|6w-M^s*$@N$5
zvI|}K#4*cyb!%5%3+g9{hUrm%bF$2i!dWGFH%(CQ&s@m0Q!Fpw2*Ss$$FPkcR}(a*
ztdyLFUxzqoe$u4Bqu@Yqwy0kbY$>sQxFX4F-XQYxHZYfVcR8!?izQGC)$bBoGPS3s
Q)r+`k(1qTlNY7eqm<v3!%>V!Z


From 9ef3ba5479fca6a59bf1e825ca5c74c1d3e408bc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:36:36 +0100
Subject: [PATCH 949/988] doc/backup-cloud: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/backup-cloud.d/notification.avif
----- >8 -----
[rsc] 💾️☁️ Cloud backup

Uploaded backup for rsc to cloud.

Hostname:       rsc
Hardware:
    Board:      hAP ax^2
    Arch:       arm64
    Model:      C52iG-5HaxD2HaxD
    Serial:     HEG08Q4FT32
    License:    level 4
RouterOS:
    Channel:    stable
    Installed:  7.20.4
RouterOS-Scripts:
    Commit:     main/3287/699be25b
    Version:    138

Name:           cloud-20251124-092255
Size:           180kiB
Download key:   lteX51vlEnrV4OSXfUngu8d
----- >8 -----
---
 doc/backup-cloud.d/notification.avif | Bin 11629 -> 13346 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/backup-cloud.d/notification.avif b/doc/backup-cloud.d/notification.avif
index e533908f8d90b0340e59488c269e70775649b218..5918a6236f526ea921ec5b43fd534b10c826a257 100644
GIT binary patch
delta 13225
zcmV;aGgi#)TB2x>BMs|qWprTx00000001G8FdUInC<PM$05cDffJ*`7k<1wZB$4JW
ze=`?tWMOm?015{=CMO>s1b{MuW*Auj7-5DK068-GuzbUw521rU)>A4VM)~Tn`fk2$
zY9dW?55n*83D0*729B+TG$&FCCo`Na?g_J*rf%>wp5_MwojK0R>6~G-Hu;CVAn)bF
z?L(B;o>5M~^bsh;G4wO4e2{|A?4A`+e^1nNxu5z1ey^_&U-yoiob65uQO`usJSCiM
z?P+17{dNqbC51_aig{De{fK;Il%XE8;%9&!`rbkH2ZLlUEl^2nl1Op^!39H&Df+Th
z3dRhQ@8fc_vX^@(dPwK<3#AYAdBOusdOTHvnGX4$p572t=z=`~nd(9fmmXIVf23bX
zmTShuH&r60)A*mx#5|-@T+mCm@56}9u%3+9<tZb(i~H`83XZkBd+<dV_s{Gf;-Rpu
z`z_O3Hyheu^Xq#yl{)wOBppSY$=Iiak0Q~@Kl4NdaO4ON*M;)2#piU7XlUx~bx<hV
z-rT|SHJfmzrBoDB;%3&#)}nrPf2xDxU-%e>)uVC>Z7>go2v>$I+@_8~lfofbuAhDk
zGycx&cU}15{(9S@`2^;%*7G9C6OT%MEN-9aTFe(NI}JsWaOuIU{lKSy1QDonL_0^h
zEbKl<{{gx66^g9!Gag>cBM62Ur^u@N`~|Xq0(3N-Cz~pq%YM-`_V<$_fA!c^;HUo0
zzQ>k|?wGfHhkvVRdLbJ(dNK>$xCJDy%A56b7RtM<qoquBl=j}o$VlRSKjs0&-zts3
z(5uckia>5~I(UP~q4srTc|{@D+`A1t?I#d7Ow1H~*BAH-Q|&D#QjY@6X#X=bBuP$p
z`T=Nt)8r}=)8f9%Cg~G)f9jhKXvQ%SdoDn06h1j<fB20nnKkc@$$OETX8`k&7oZ`9
z`1TI$iax9Gt)*ODR+bbY^EP==kDu<K!{lL%GnJ^gfibxyK!C+^dd!b`G-~J+@<Ya9
zKQFg1ux7%_4|PJ#J4HUVatfU({;FDqe5`HUh7irnhs6NoWOk0le}Nr&X%0KY+T0Tj
zM5E#`f=VUeM0t>AT%etJV|>A_2!M!;ZbE7dKt6#7tD<ToQkCWFAHC?dbKN&34#Wg8
zEQSVd0(Bvz_q8#M7oW51Bm-1gEvJjHQ3Eb<Jg%I^sRW^Vx7XkwM<Tev*#C;>rZmcF
z5$IW>;Y=z4t@35sf54S6vH*#POu<PZ3P=vc()=E}Ey<)_S6%^xqpFAUuWUV;e#4eP
zThcsvbOFem?M<a{$Sy|1SoXK?1=w5rFhzdW+Cm+|*&%aj6)ogChbu@hS!b<c_yFxu
zmW1l1LX<Sh8)=Vt=%7#X4I0h`b=xn|LT60owB!<fr9CzJe;rQUfH;OL&<ML(V%qhX
zO}ZzPjaO^}t{<E7QB918vpg#6Jc4SJT1-wuC<Y|a9stg{Ug>;2rNG6a&}%bIAlc9c
z&9x=~!%7clw0=J(ESzdD6`VH-^vMEslehX5-r-U3U9XCD3xAyeQgKD4N0ojQq3O7M
z7`{HXpKgxBe`tmlfJ`y&fofAq2;!xpTleLOW3Epwlqk1~-;D7jsr1Z{1)vvW^~S{C
z1#>JSkJx&^e~%8aNV_<yGqz#~*I|6)De#>hA?$}cah7T><EXiP8;CAMcmMPy-Pcr^
zO1t*vJ-OY)kFzxgLVqK$Qn}&Y?N81sEk`P=Qqthme^M>~Z~IopjEHlrEEOU{^<JZl
zcPdLxG3{tbLd1wfx1&_wwkh=Qw2UgcEImAxF~AmKIU-$JN_iSZEAo#yk44p-41>-$
z`C6$-*8BnTzas#<U;2Qz6j$1PsGpWpwQ%JBLWhQlDW3Rtn8@nFxKbkF0jFcfp|b`!
zim1@Pe{Bu>jOI=rSSh7kbvxP#Q%?8o1u2^|Ns_zlTk*K$B%jX)OWTj^Kp4{>7)R<e
zjs2m~8n&hTb9}YRk#wLlEgkDJfCY0V;nR(??Q@++Ik{tjUBt3wO6KhpS*%Uh;5(Bg
zj=sIj01&osu=3NP<oikqyGk<q`&)rnI~-v-f5J1?f6@m<)eHn`QO=fTX<{P{g1n0(
zm015cSeqxVU<AIY8uONDsiRmkCl=;@(n~eFj-SI{<2aDiA4j6xcuq@YYq)mD+NS-_
zeG;n%32`N#x$4k)Oqan7QK@qHke}5*+VoRQ74N4<LWTJ9mz3M`p50lL!|VyFTum;N
ze^Uf_5;|D&PN%%yz;rF0Y85&k#pu>|*nkuC)YeCQO2dvuERrv;Yy~X%!iU`j_5!wD
z#Ix|u2@Ot?h%yS|K~@(N>i<%tX9|cuxU-R9xSZ_{7$&<AyCCzAIA!zjHozG;@x#p`
zVkx6pS2((RW+GUzGz_Sd=edY?#7fZae;lrumL#k6*ph!G{eoH~O@fl?<cqY2fhM>G
zoDeU0tLt-^C9<M10=}zz=<^)mPZ_S2lSMi2<u{@J0iVMi_M{_yuF5HuWGnA%#?#E2
z9(=A6L?|iD^=QaTL!*P4r}(Vlz>3zKPh%#1V_L$&=K+rb{1h%eaY$o%jSOPVf0`F)
zJ&v}2Lor1%wk3#tUZVk+6l3g;@2?VLzKX*1Ny5gN4@s%KUAx3#dd~OrR7lGMMa=8J
zig_SS^n~S?lamPuNzQ12!&en;Mo4SbGkdS~)t-GCiL9#yCt2#UpBHjK`=6J(QW*Fy
zoJt<{Hq%hktdbC9tw_#O`6wD+e=LqSI`F;h<_1x>=~x4DqXLYOmWK-tH48ro!M(4f
zCtTy1TvZZQYWH7PQyhnI9;$@eLoqhlX6V9Qom*2TkQ&V`A#x0C3~}EGi6Ash={D1i
zobVo`1{}gu+MXpr4hhqfbc*U5t-N`lWY|O9Hyr`B9^JOd`S@9xHVi+ae?h7qp_crP
z&T;j$wfvV^5uUeaOw~#%NkpZ*_G@?KU}eb|y`1ZCyjeDMR9HE!DPv6CIZx>63JFOg
z`Y+5%fzuv`pyRtgc(}fzR}?)=Hilz14A9n^jn2&K6g3{89_MfY!iDIJe#eYEj#NFD
zkTb^r{dCW}K69>|_wpt4e@iyku(dA-X={}RVt{3QSz+(DbF+S;*!|Ip0^1qDI7c1_
z1hOrnnf`juA2<*w1_|8vufWN<q5%#SH2-E0cV`;w4@xiPjxLQ6i|<)-%hQx7`vsu8
z1g>p?JP=_2TK?Pr)M4LYi2n)AsRUqXia`1jCOS`ZhYA0qz5-e%f5mSEl*>8ktBX@_
z-otUBuwkPrGLFa*MmnV08IjZ$liJ>`a#-tH{A_1mAq<^v;kB^)HQ7;Zml$jGdK(FX
zeyqxS?tG&^g=wUnPprQeRnWcAoH<E(eM7N<*V4=I+V<lKNB6p#>gmD=aw{kQPTy&=
zLWxD&pF;~Zpvhf3f5Q5XP7D|B0hnw;v;HO#nzEY>*J0sJK@9l-qk6M%3ryJ{Dp5OE
zg<HfRGasjtmGq-F+Vhh>Fnp%`2>Bd$oe9gD=%H!76|KDB0HM7aeXBDwFe`)Z+C8MI
z9qF|tGZSe&<c=w+7@VqMU_yi7hxAn=zE@l9lx5a8dWck}f8H)1nF;FXZjDGg#Cl6*
z{_?vn=VbDD+d+NPQD46%1(R5eW-C=|=7zxDGfO>ObIAVYQr5WrvDUI5=@e=S*X=NZ
zr*oNpWG+CaXTpRh?CYfuZ-2OCOV7zA(<UfcgMZQi%D$9779W(2C8<UxPQmwjTw<@o
zU3<C<RO6r~f3|^*UiZNYhRUi%yRha~&tj&GRujxMW4-hSW27A>YUJ-X2`bU808aDl
z<qH-P<v>)-x&WO@n-rLa|CY?_`b9e<PyQxQMe}0|Evk*5h?O1Av(AsJa#J$;HVf#z
zQ)0@CB?X5+omw%Ss+}$WS=!n+>Yg(9I9fz0!3wd9f1n(y^LyMDm4VC_pKD#U&8n*9
ze>o{_t_5W2nF+k{lt|K&2`nxaL*MH?evS3e7<F+JW@kv2w8H@Wu8NywETerQBF)aq
zvU*${ztR~K#sCmG#J`5t%BNgS2r#5ALM_E^fA*Ho>!zA1S&w^4$!KGaiKQD{6CS*o
zj}n4pe>;3<@{i=oP2%I4)H+eC5sDO$yiWUbrKE%`^#mE9J%EbMkh)Ea3(zZq(Pxh5
z$@tp9Q&0sf<r*5w8gPtg-gJ194=8uvZrn0!P?dvU{1ghT7}<+H{q+ZyuVNI}QJk8k
zkqy@{a;!iFC(GKzrsgtbh1~zOY%N8SnBvree<HB5c_=M32FX;#`mKwD+ihvUl+4n_
zzZHb->4y-B=~)57e0;^fZHl0=+(yx7&F_9snfNFaRWzdwxLm*~2$!$d-9cgP_o<~K
z0<>}G!62OR%n72Y+vOMSl2-A8VZ!fu-K4jiTBZXq{6|e48^JAVW_632(a9ARW=8MN
zf3P+XXtK?`KJ=O3>pvSiYD2z?pLTFa(Kb^I87keq;frGwhnwg>>uDeppl(q6?Rkay
z;qk({O|W{=q2I);ROim2`GN@Mn=q*@@;}5%J$DH&3rf)$TC+J~&lpRVHJ!GvfUfxO
z=5{b<t)o<sO%D(UAmX-z+OeeIiSd*Pe+>ENO`Rq&#&!fBEzR(@YZv17!CfcIo_g}T
zNiaDzLL0i2?qxOwbnO>>I1-+d5%lkYy&^@TgJ}~PDFC0)Dr~}8NelnruQ*wtz<CT7
zZ0Im59!^z)pN(Jw4c_f6fi)UCas^}A8f9)>>jV_FX&hp5z(9B@p16|qGfe&2e_2hN
zWUY|3irau~dG0)xRlDjoS&pT@f+p_L-I2BeuxQT03FR+hj^v1+-X5D-RgFH5`m4GV
z=MLDLmjX%h!TfO2@%=!~$1_+}5d3*QRd}A5SL0NdLQtU8-yFXn;fE`QQe_|#2<q2a
zT?&hHkVp4#n>)p|u%6?`C@eOpf4?%#)+9R4%+aP{nw9Xly|B<kOt;xL*~Nal<>2Q=
zNcacJ?NGjKq?29|;KCNTx{O0yF|+oysaU^a^sm!(M@`d2A0+uHy4XWty&v>*|I`KJ
zCyn~U(;1!`(E9UP`s(9zdgqHModwLgoM%?Om0XZ&o}%x<4G7z}$K;XOe|CkLSj?tV
zp5l1CEeLG}(n#@u=qSEzIO-kG*}PPu4PB;O&3~A@eK~~@nd-3yyj~B8Uj9>>J-izk
zD`PP6u?EA*x$1;}EW}u%`jRO|9(1t&$8=}<sWUSi{g7M<j<AepDHmHB`^3Lp8F;zv
zc^G6AF&qmrNxS2^MMZN9f6RnQ_R#EfpPym>x!}t|Q;M8_?}@q4z3>e<n;oc9mAXC<
zFGIrM_Lz~0PNK$-a0;P#ncs<z9hYhw)f{!ZQr{Ob+hY%c(wazY!NE3(IAMM#Q-!*S
zVy2h}AA9!}(rLQtX4Bxe7nm%VcPE-CDkYP<nUZNxo7L4PI$GF5e?Qo}bMrsqn=INz
z11Yg9%I|Ig-g=BHBX4^sLr<7BMuF)kc=IUfRQIK|M^uY2sr|vMQM=i9C8mL^Fk^%7
zrOqZEJ4Gt{%CKj7AgZ+iODfTmh@s0R*Dxocd5go$$%5_h3!>r)8~2!9xj`9Vo?KXq
z@XJ7p?$%p}09jD~e}Tx<*oY%gJ6URn7D%nVf`ZpgL*HFPK4sG%5Q9QR$`LWZM@IBg
zm(gdObL(LscW*9`>ABY{S;O3^O&+Q&am%dOZ{ShKu}>LDQVXzwj4yZIN1hdLp+C(!
zVbX<*_;MZaCBV_bSkl7qiM6^Hj+jyN+P?k;1xQEd)@h;&e~UmT4o}LkYR0>|5CI1!
zntsZ~6X=z5)RfMPH*KSgpw78z1C69``!%|iU16w8h|6QyA#V`NTGF14cDUx!apc-}
z7O(b<;AL9bc0AuOQGF8TZ1g1;aBnMB8Aa0z(gQupXcpSSx)%>s&i8FBV<d4D5!jg3
zEbML|1x5~=f7}Q|lcWB%cRu!`FtQqpPNMe!cM;37lA_&~@~nG8minI-yL-|tu~LdT
zvmCpf!~F09E48|IEg;A#iE9nr3cOE3W1#JY2P&$gwI#oP>M<ZUaMOEuBxLtcKKur#
z+5;-CB{3Lzd&K~@BVlrIwRj!Y6E{hz+pwSE9mA_!fBJ){PI<{{V$KhAF@7XB`4G_-
z&a4Llaw=oe6(3d_I<@>7=9~}V9+?UGPmea>t)Vl_OT2RM+okB$9v(~sXpBo~lnl%O
zj5b08n<0t2sntV%u^PzqMYZ0_OU>>M@kl(mKcLTF<sXC>Ab$zv<UR>97>L<D&_D40
z&deXje`C85aWx23!1M95AmL5b_e0G98g^K1%c`x${6b}XBj5I=Tzy(S^N*YKxHK@&
zjhQQL6XvDEwQcZ%MGSjcNyy6;rtVu13FGSppc5L$v|ut=n{=Ie@&w-BiA>Pc;B{=+
zyV+B^^Le1k+djx&aJDQzx5PEC1B)EK+>eE^e_tZK%!sX9L!rSvQh$<9+#2`;xUnE0
z>;=--UC^R8%7<o<+>4&vmM~9+D_GWn?hlS2KB&WVZFn4{Oymd@Oi6LxD@=d=_$%|=
z3`$BjTB#6q0$np78?u{{m`E`!^{`05Zubbt<A;Z=@<52thX>Vp8*>|Zv%P|s?x2zr
ze@Bq*!Wt6`Bp{r~q80YqPALaOYQr-${ri)N*YVx?tQf}mG|I>w9H0MJtLY!Im6wY|
zRRc~mzuvkVJVV`X-iYnbNRvq40;Sz<Sh0u1JF93Xwfi&#M-~9VeJKdV$O?DcBf?=x
z$OdFt0!r|N7JgVAEcjr5pqEe)WC}I*e;kC<8!?t7BP-ZPpSg!0=${CyRp@4Kn#Eiy
zyf`iD`txjMDH<##QJrR0`@p91Ze<^*JUcU^#i%9gRJtV&%ytd?GZCVUI1UWqznHgn
z1EPRf?J8y-Gj;sTw1lDS**`v;-InE2-*wWvauXQqo|nM_Wf$D(G$2*_hvm+_e;fBs
zv9zMv9nr5+MHi8-|Ji@c2RKu~CNg6DTPJ(s!*g$7{v8s+3AuZa*c0bTG5;nH;Sl7K
zh6&}10SSn47Wb%Sb3NRwb$hAZ3xA!pJ!;!VhyF&Tvr<D83xLWeQfAz{rf_`#FQWiY
zyZHh)$#FxHqeu*}L^~U~RRLB+f0R1|B);<*SME;^GkQ<RG@SV`++mQA5DPA0DDlwe
zWU1KvF^c2-I$PysnW=$8J5DKC@k}>hZp%3KS`o?z5%2~_%!C3(-m5X$5~@dkt&%_0
zM5CuEDbWo%??dXMXC)xggxXIg%~=w}%FSd&RE+Nm*XH}ZCyGM9LXP@~f0S;t06hbl
zE+WoAj^yi^55SxG-K(ugcE1U+11dFNt3QrMVwqe}M=$47rzW7ua)<cr9Ty92k;s*8
z5X*v0>fyo%P<{>-NxOAG+l&|a9FFxG6BJt$^1R!?B>P28F13rg9JX7xMCXF1LN*Hw
z8)X4D!Aj)rl|p462CJULe;oK_S1k~x&91*`&)NkaeUgb4`Lo_7>?YyoA`fx{fi8l0
z>+@V!nXr>!A?KMB)2-H-6ol!MJ_E#X?cZwJTtRV&TZTcM=@!J;B_a^`QPi9uAgre~
zb^CS|CTv9@<XqE24#B!owXzJZEixO1fmv1+!YUUo5-$#gOisM8e|Djh3qSUz+j0Wq
zn1mvKTkoi}d?G#(2wYraL((BrRL?a*7rIMH!_X=z!VhgR(BZeu5j&~t!KZDa%tly6
zWS#RALns5~#X=K$;mGV2u_3VGMUu}GoI<37+$SSwVkrZ3Wr?O+EAM~8N|V3ezCKU#
zrl<gD^kPHLHfvxze`Za{ThA|OLj0fC=Dw3kEs~nf<if8~H^qnW7UNnmsUvtC5tHH!
zn5OCvAnFhkcV^^Sgyu4fBGF@sbB74M<uZmK=V<+>Ief0K1oM(M0>(a$bs!#h$EYS^
zXjvr#;-GQk*{gy(o&TgH?J`Cl%o1_3jD}J23Z>mg6e8l)e|1Zci|qp(>ZYT&!i@Y=
z%aGn3+ER`2MAw%2q1S#X!e@a{N%~pI^lHIIIDZ;>_+LadOhN0zkIiqQUEkmk{Dk$J
zfiI*4K4L2?D^bkC@Z0hMI)$87$aJ_d!ra6-GBC`boAY$GzHJX;D$eyMgYUEUN0w}F
zT>&5I*OFYNe-vR2Q$Ad|>{ZCDW&WF)D%F`4qT3hS1A->S7<9C5FV#U&u(mYXnO#@<
z^l<QK8lTVb%<LKAw5RsW3X)u&7@r)s%sZ0AL2>HfxnEn;4|4x%%saAejJPI@6DD@C
z;bJGHw~v0k`?P7V29Iw_zKa{SoFRMPzV@Al_iOWef5W7?97@Vn?m`6LzCB<Mli?t%
z*_PoS&VE;4NoWdUw@?vz1F0}Q;h30EbA6Q~ln`Y=%yh|-k*w!B#Hfn^a)~O~tW%+G
zSG}?y??gs5PPO%{lk9Phbxz0Uv=n{1X+d7d`5z`?HkvG!9>N`ExkqDAkkY%WunC1L
zk4`Xwe}=8Gxgz;1*2rONDwxv_bj-~VHmFWKxIkUzg0*!Olz^u7+kWpYXhc#qSl(aH
znc6FJCwF&-=}Ex{5C=}~>p)YD1~&RZky!GF>y0u<L;b1ky9{ni9+G|gbDH3R*iPCf
zpfU@-gg~(EOr)RwL}sI8HGgT?&-Ib&gbPfDe>EUsfhB53cGfYatWhL=LWXWtzND|S
zR26wHA&6{LpkYaFap~V|)yU88n`qYqaLS9S__4@DIn~(2B(f77EysA(9T~rXst?&C
z4oI2YkAzpw9y6`kA9>GBH_7^A^0ZKR4JAJCUWnNeUR<&DYe(=}n@BB87>NpQp}{P!
zfBXzNr^uviWq(2<ph;c_2|E+y(-8=Di<jrm&A_O$@?d_HM#_Jq+WTKZn9`WP!qVCF
z%wxm_&duikGOo3#!#x*TIe?sM`h4(JKe*hk;@b%Epj9fQ*2AxoJLMB^NLwSQ6qSW=
z(py}8rM(27uhB#y`Pu#(=ar}C5>gTKe=S}OFZpv2z2;V0zd+*Za3JCdoCknB8iJjn
zsJNTHRQ#Yf4*abUp406ECB50NOgfSFqZ@15nvZvU6^VI$b=<BsiJyr=g@0trxYA&W
zx@TcbNKZx7(KF{4lP#YK*P>sf0{UC-`RV7D!re6R_&^esqowj4ctMJbeKuOQf8j2+
zcz>>Wr-b9ltPfMh3vxMuGGBZ$<<Cqc(M|&O--C-yHOId&pfWHyt#<5pYp1@kfEAYh
z-CZLDue7z?0`qt6IX`3UeK=EPYxFAvHLhm)%y49<utgAaN18PMU?wjBWtlF{uR1=H
z<eMCzGOmJYAIuQAXEXlYyKI%%f4#=Qb{zK!L4(?B0>tBSXZph#b9m(V%3@4)S0Tl!
zOsB`?Z_&pgNP@^*yC$qA^73@NqMhHUfm6F5e4W>7a0}i^G<>3yyelcz&heTccZMCl
z;qpf}1K9ActRj!~F7bse*f1)=IlJZtIsaybWK_MRG3A_{F#uK#$d(!7e{)6x9jUYR
z(pT{M>1B-G(9;gRy?2t;eR29}CLWAnZ3P2FRD@7U1UFwG(H)}5m+HWUP=}%U)2K&R
zY!Um4TJfa~q(S*F0y|#_c0P=e2MR3&a__OQI|b)59R;%34bSHkMvah=r`oOk=eE{+
zYVx40M$9hkxX&CgW361Re{<@a9I7uPIHBIjPdIy`Zav;+V`id~kEf_rM_k09nAEvT
z4;B$=u6(S3IS5(mSQgYe4K@g4F48gf7=nl?RV@SR3DMAelsjs3<V*AJ#xT_ja+!0_
z2JJGij_Nh!gBu`M95o20#8<t-^0RX{KI0ACW@?VJcVFF*Nf76{fBF{+tw9swI{#gg
z`tmCLr{M}`HY<mE;?0kNZkQ@I=2}8?0X+d3rk@sUEx6QKwZ9F^M}Ei5-uq>e8NdSG
zu^Uo5%)+}9k%6pwx~p6;MEoERa%~h&eZ|R|>_*Y~?5^wF6s~)-2E5NyK%v>J!mA4+
zlpBdOptRM=IoDD(e_k-Rchg@X+8S%3pt&;cg+F|T6~o2BdI3^o=7SBBnkZ`AZrTlS
z88qqwLmv&LF?1rmZFYznY=gIizJdQ+D#Y=YBeN7}uk*m?z2L9m60|$5K^bYPGT&Vw
zq+<;^620xJN2(bhILgai5ze%&f<ga$qbeCmdr>Z-akU8We{}D#K#SATZCOmc)wYKN
zLGj<#{d?LPCh=i#AI6ud;4oIOY_gc>htisgP%m)?IP`VHu!%c5gM{Q2PM4#A&+FeD
z(>oVjyE)_{9WC>%dAc=VJGIeE=IM*48?gZ5H~1=3j1@zP9`}F+&$J(L;U(;p>ZS+*
z56o?2VCRNWf6;o#OQXM@`@F7dbLs&HxvD<as-eD!OsX_h!K)6mQ%AygeeN+%Lmcez
ztJ0JQi?($6ff{*FvHX=KrM$c(s8Z~6u+A`B3mo*gf&nczS6zI^ENKX!XQ8*fP0Nnu
z?qHPxJb`DNye<CAfP*>$G=SW<*-Z$chMbuXvN9K5e`X9Wsn>;MiX*56Rq>F=a)be3
zWo07-@U-6ePio#I){wpMwcSIA@wSy=h}B#6a-R8bu*L$(-f~qI`7d^7!yF4}C&bgj
zRb~dLRgvK(?>|M%y0rm*kR1(!2Wl`@p@%IopPGV~G}EI~v=ZKXYGQZY>txN;k&c0;
z!*XCle^<A`;~jf+$|etX3-M-#5ADj&IX|PJAm8(NKq9JUzf8&(xV8iMvmX7dCD%^|
zxA0FDNQ(4haeFr6-Gv$4sM20nnKJCiH5rv!#A17abNjP<<kM1uMS*7W2ku7>0G5bU
zl~uN@w6D#Xl2rp+|DOmbUZ^~^$VvD@4W>9Se=mA2um#H^D&F5hd4?c(P>r2}ulw#F
z`5$gj>${Lz?pBGK;5=icB*R(J9#s<EX4QP+!XV9K0r#vvXAZVFUOw15ugtXqk9`9|
z7Cqb7^jg??R?mL2`npA{@B8Z&IUGZgMx$#jX0HC6etj5CnEZ~KR(R5-9I0TPQY{au
ze~lWF+a#3+*TENDE3s{;CBsSDTSDp3PK0#tHbxaNUv$}e4;ZZ|RG&Rck!+hSyynHk
zUTU5z-2m=J*krEEK{~m1=Z}{;#%Qc7tY|XzQhpQ~#IB^6-lNs~$#bWrLu7S)_kzJQ
zV0DP|lthVBpJiaX^(~g&J!H~Mxqu*?e>l6tn6c<-<LH*7;S{Vc-fYI|oA;=3wyD%L
z>8QYW`rmI-y(Biavl2Q-5?c^^$a}byLHJ<wd)(c~q5~4jA?|w~Qjb_5(vhsX6M$_1
z(lQemYrJ_>&xche=J~t}$he<Cmv-d@^E|O4u3Top_7NnKd_sZ;biQ*tZ!UM&e`LEH
z_n85q13CA`y>2mT2XJ!4!?$!Z|BA4!V*x1aW}~)_TU~VD3a{5cw3sj=<2jy%oP90e
zkp^2_Ik{;pJ8~vuuAK*Ceq%Eh!6tC*e*+{=50~KifuSfOIfNk;jeEX`SZN$)D(UF;
zC3AjGkc`1Ja>6-SDjg-vGdR1Yf9*x1^Lhg-O*7nlal~q6Nq<i?2o*cdA^6FtE)O7y
z`~l+$PuRroF>r-7wXab0%Wg=xAm|NJ&nzB_<Hhf>saCKm7$a=f&ycy>t$X?pB}eFw
z1^OsR$%9mk!?}L8u2-KRSwp9@d+F&UtQbA8X;wIvP2-G5){0@8`6PM9e{lof3#vEP
z8Q5PaQ$2Gi^6EO0-^Sf#xI;N4JJ`HHZCPibWHFN?G|&sS4X`OPgOIHfmHNfHR8>Jr
zu7YrXTkpw!Fk27ND={wwAMJ9SL|qBMu(tWzANZPA>%S*GWA@OGs#U0-nrbQ$!sJEX
zocmhS{=ZTmM2xOO7Ssine=QK<`8WQl=h`m}j*q3h!EzYH5SK`(?y0fuHUV`_RSc$w
zo0`b&q)2RG=K;z(<`{kOcO0-(mE?BH$;WWdwRkm6*!xKr>q?sMLs{f&oNr0im4|it
zRVDF4n!N_}KI@y4*6$B;(4$QS`pSmFWgCR&dyp@H10yO+3K}AAf5DpDIH<eDM7#gI
z$dd!bDDmAhiSc^xN?ng{k0Uq5KqWumFA^&+>({0;G!HcGRWyFmm6x*Q1$Y7bwV?PF
z)IR=3e|9wCLSlrrcCg@qq*of?f4~(gk$4Xs3rISHbiZR;&a0O-lB7m^l}5Ksc2P@~
zoctT1Fnoob7qm13e<!)vj=FG)izbb4az%`oH{`E`lDYVZ9c}2dOat@M{tbyUh8+$7
zGRsyoA#AY(;eU{YI}wgVCq5s}qkh@@!xbk*zmKxX*1j>YDvCc_j5P}G49xV)?O5*!
z*-D#_udjtv`*cTsh|bjP(aMqC>Y2<>^b~vvgGUC9jnl0Yf3hoYx&%na#Zg|TlztbR
z3oj=#7;zRZ*sUbeD&@e0OdB?!<CD<Cj?bJl3TF*~wh|jZZYXtBLEXtrPm`W5J4yEB
zg70@#sRc(|m68V0iQAG~ca1PlDu+btmB;*{JX4v`XoxZoz3&l5*R?pN_8HpZD78Oy
z+VQ1(Ho>PZe_Wv=e#di_MH6P`M6caE1Y~JGT~uG?q=C&UoK~YNUkj6O*qyfeKZ1TI
zh>9^uB4PaQ9LXkaai+8G7f^T}4$1J~F4bv#+*b0&>?+FOmN#|2<v2eUV*)Qx;1HeQ
zLO;@Re8hKH-sL2K0qLGsL%l5z`~KhxC)<aKkBvB$e;)1e_I39fvzB<sNDVEe^3A@a
z3cnuy4K0x}Bcht3@IOWkax4=<_qL;iz(9`S!VQ2f0Hb%J>^rAY;+K1_pK(M2gJd+5
zw)@-MSItd8wfx>&&qeYlg+NWh_vPrhf;?)#L!~m3gV;1RQ=FX0H{@T7ApL&zMqvYt
zdDbTye;6Pem@aFi$93P;(rG-<5go|x1sWHBnxmzrGM?gwRl?lcW!xVzsP1RQPV%9m
z_HsUA4myFNbGiQ%5`uGwL_z??yOe^$-KnV8EMjSP60h-8<sXEJ5HVJ-3dg%D?~PWo
zCm?p#1XPG2;^WxyO6l@Jmx9_MfjFk=gB7P=e;>d7@0I7!h}PlLI^0jjkR2moE^U?V
zQtFQLYCAbGfF(eUomG=`y3lGD(n1AXl}DiGINcT=c_>Mnzs|xzc9Ml18XZ)TH)*C;
zz!#ohx5F-p2h-l++BQDrj&BCWQI6ziWo(_TES?da>mTL}o+JrKrAnE^w6o&M`Uq!v
zf5JqCkaHBPgJqO;54WvAFi~lM?`R|k$-M3nz_-<{Y01SOaZ<LNUfNOah<w229<HBr
zbyv#FIl>PmKQ*`8l&Gx=;CbAoJyaEyV_i2&JM#Qwc$nr#)DqJ_Ss8)%xW1|ZhC_zr
zS^#^9Dk%LS5zMPuc<O}ki4;PuOR5;Ze+tf1gq5aGgu+RjnKGyqQ4ATSay&rpISA@D
z*THA{D^wZkVBKjAY=&sMuPDY(FSAB)8Ovn$?=6qcWhoY4eW@N6e@wyF{kG!?yP-3a
zHTeH{-x7jVF77HUOxt453^n_3`Q7y_uRn;d5+><V5?;KPujD#l(wiEr5V4fTe@YJ`
zOucngCguZ{orP4*<RspV5L;VhHxXasX~UB9t3wIo1@4xnFPO?f!wHSa5+f?|T&+P7
z`anbE9hA@ok6@4-rxxJjyH7mma^ZF$`*++DK1RfHGvIutVf}Mml(;$p*kPCm+e%Y)
zMQhp4hC<fD3cwYeMG1-BxSja9e|tP>0zT=fu7KQKH+2`4Q|L)OcO^-qKCWhR$?NEt
z&;!q(P`8JX`gz1JbR9yPLbN$$s>9kS6^zt3U<YOayEpP(6C>a*LtH`TuXz%pywiRR
zCRcl>uKrS$KNJC>k1+OX>#^%DZ<WE<UBAOlw4V(b>R3YK4fxk~70<Utf9LWP9QEzJ
zZ?*tJU9OOyl565WuJ^uRtPny2+t`4o*Xiibs7AVcn1R*<SM@1TXUs;X&w3+>cT{j}
ze>Z{Ct>PJe7YQHour$2TC3~ExqTRnexkSZz{$>5OACY?9>8<m?&f$&Ay-k4o3^>Jm
zkOt{NLNh4L>iYeNkqdK7e~@K^HFRrwr{(MG*{X#|2a9b!&>M1E9u>zpsTyWd&G{wA
z7Qtq9=v(hPi(0lGhubB?d2QL%)3{#n+@L9%?Q#2h35v>SEzw!g^IQ6cO_>{53pb>Y
zfA;;hX`w36Xoypxh6<%>!3sZDF`9P`6-)4-YIMlKs0NZn?%=pHe+D5PfuG0Ec+EAg
zQ*&rkFB4lT5kXH_-_H`U`j;J$M0jI+$|Dv%`FoOTd#_uwszXc**ESwTGhhdMqE$-U
zIDdtGu*bAnNd!rtZnv{^M%z@Yz-%#<1w8;Sb%7zKmXfakozCEoLeCt>?)KuR0bdf~
zFl)Pw5&}@><6{;gfA(*=;*_=hq&+@oN^4)JqO0lxPt!YYAX**k=MUs;jJ(Yo`O|9U
z#na=(0ue%RLI~>GrD&j;E06`gwvwg(LV#*5m|>W*6u&@I6Av}%9DR$48Br4gYe_<;
zP4UUU-kOnzgJlD-Qi2#PO?*?rxPkAw8>XZUj3Fg27Qq`<f4NgdiU<t0-dr!Q4)zDM
zginogs83AOJNMjfRBb$lNQ4#-#;MU-f;^G1F@R5HCqF{oiejDF67RZ&IFfdYb_tUB
zgg;L{Hc_W%cLOc8cy_bqF~TLBTS=@P9Jc`!buv28=>A&$%|s;nv=UE@F=hPL;FNME
z3J_0_h-T9ie+z{q5-firldXv8uOtWE`j&!~Z;Yz>-t;b%W$##mPWXBUO_&>|grc8v
zDisVkKA`A-e*Mv>JADY|;Lnw)O&V$EYyDx;bOTC7A=`6C#JklaA(Q6=?@4ZC;$_@Z
zb9E2d*~cwDV>~>{1;A%IVKve~fUCZ231)S%WXYMxe?;vdJqu(ObReqC2-mzAGc6X4
zKGb6|Bj%qc<QK%|D-$J@a99jj*+<qn)%JYcr148wTWoqy*Z(f5Td~q>cRSgG@VsRO
zHzRGZ#B1V|_qdwQ3{Z+6^voeLiluW`iUei8CaII0)}8FK3euUj{UAzF=%M0bGM{hd
zj=wHrf8lv$KQ*#yqf!n7of(C|M&5V;Shsa4J^YMzxr;)5OAsJr#3~hqp%4IJIH5LZ
z?SAKjd~Ox_20An_nDxRmCSsiNh!c<D+KpM*tPoq5OB>_oXy)XnB-S>hI~#6PUf_MM
zGnz!93k97N?u4BaZ358#CJ*y5m8x}R;@W_ofAV@RT+3NM+s>62xEuq>u*Q$ngDaSu
z1Z#Gg&7M?u1$848gkE7E5BtF`?liP{M7<>m=zF`?$qcyGcV1LFFw2+Im{()tj*&th
z9YnIew$CAk$ypS`Fn{NptCXbYf(bUz#zCmY-yXhF)80f^$%(c=>W6VtLupCOH>`3X
ze>#}Y?d5rIu7l6_lyDJGSA}BCu;@oN106!(z!YX5p#aSdH`<8@2*$`(4N!DDG2x}m
zgH2Fnpxi7W*uki=^yDDG2(s^Y_uJxtBk222vtF~`xNmSq#^WG=&`RiI=2;JGg3@S(
zZh4q<C$n=9n7b7^bj}7F>m}T_!#iZ+f6<Lfu7={0B+;+RjOsmr5P~BW#v%foa68W@
zs@hQdr@f!mtCz9O=5^CYAP&!AC3<gg8Aahp9kyObv73VEjPZdNAL+49Yli1T1Kz_T
zktq#}PMm?BU;5&eDCS~Cy83=(${}H*JP02-_8@ek69znKTL6?L^av1AX-V1ve<J}}
zQ9ienwIxe9fS$U)`Tho>0Y3@k^5k~z#wy`Q<?Gxp?$<m|Egs&0Q>)juE}(_#Gpw<h
z4uIYJpgTBx0i6$j8JZO_j$$OTUp4)dg<(1tm(v51qi>Dp?e?3Q90T-Odt-}TflyNH
z*f4?f0lU!!R6S<*X}9jPX&zo-f42V1zQs-S<+|J#9~@w$StFh@Ha0j+MHCG0`N4Tr
z>*}B!=yl8#KHpnD8p&*d=rG?Xt`b1xP6AW>aP3)0hC?pY%6NTol$%96PsPg6ud!dr
zzfm8+Dfcg8$q*=(b~wW&rm6!=S#`B}Sv%1f72v+UP)z~Io5xzT80Jwke^=bM9rfN)
zI|k&3laadGD<G^L4(x5#q<m0&O*Tm{!3zSeH!L1H*2Ck{E3@VXQ;T*Awu^KbXU&I!
zx)-Ci{tG03E!8w%n5HTUq~UPp7eE>6orX?#B@{yr)<wLq4xc``X<{_ZGZf|<sp`%Q
z7;pG`?%wJm$JHgI!l?Hwf8mCQF~R7Iu*&C}UX~CasteZP5+}?cg6W3UUc;Lw_Zq%X
z&X2-*Wf`D(lB3dSGnR2&m=&MdTx4l^OR$+wpSNZ4aNvzT1|#F(br2e-yk<fgh<`1#
zayp2+9pYQx?eoU)ho;S1J|<aS)2&|lyF@)K9g)%<LL@e@eKWuDe*uir(abpZs(5Aa
zMjeM~M}PK8MA@98$9z(EgBPq(@QQ~LDaWWJ^%*q=LHY|ON;1Dmw2FepVi~+aZEeGr
zR-()ack(<}-Z8M_QTB=BNm&bqm*Y<)t(WfR-6p~K*Ba!_E!I@{J{QhSqZ+jzZ5oVz
z*I!Q*wuZ^u=-0UIe{NB^?PTI0p`;lurb@=`V~~s8a;_{C#*Tez`KzX<{GqrJtTT{x
z+B1*3V=N(CU*YvJu}r3F;bvpG@XdL&6z~qvr2bzj?D^J!QQNm^AQb*FmMma&fHZ1b
z&*|5mzSik1BrpfGOAI=jG)U*yc{<L~2iH{u<-x-G3XRG;fAR?wAxVNOEkZ;_m-Osh
zJe}_|XOuZt0&=`<av4yyp=tz4I>hLK4=AyJVdA<U$g}Z|jB22>D6^bSra)N1K<F4$
zt=6X-B+5?XIwsON;WKIHb29QF+yw4OG=n#n-A3L5%O5iFRAP12zAv<4lZ#O*Phkbl
z4S$pr5k8G3e+jY_Gv5BV`nK<aw3h85y}G1*Tf6sxT3)0P=_v$Ajn%z!!t?m9L1uR-
zN9vV$u&<>#Ky$<)Qp-4SAVgx&Xz>+y#Hfp=yxNuxj17tk_T|$@`KPZOceKie#EcxZ
zsnz{lbeST_5S_e!ro9QT_5~}-E}lGSOZmD^=F>pDf66qGYebh>lWzjTtu!0Jlx${y
zt$u*koATENSTW-66$}dT@#t`c(FVSpW8hI!p$M<X=n8{fTqLu9xG?#0OtxA6$Tz`G
zo4Vt_o8$4ii!Q2FegRoKA-UPUjzi8Q$af?(Uf|o&Mk~-?LSvnf>Gn6Gk{c7fS@T4T
zx904{d)aU2SmLV+r@Q6tq%A6VNw9R_P{DYw8K3(7_}ML_2(f|Xt2w3>NsO}PW)#hE
zi-C3dCi~fTY_%_4{@i9H*ahLE)(w7c)y~<W`kgY6bkrJ~9HXzg|GbM=s4mW(W_jP^
bQuv?>rJ6Ns(Tkr{CWuDN!r)kqRMZpTeP6M$

delta 11517
zcmV<ZECSP_Xzf~%BMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-04!6Hc}p84
z0000GaA|mH000000|*ER0000CVRkV?fgzFKE`KarZDe6|5&#McIA$jq8wdz!G=MU~
zSP_r`h8ST$-A_ty67lEI)nQD^o{{*P(kXk=clbu#6o?s(9n*O{Wf-tz#|8NkrUCL5
ztqBJh#jzWfx6*H*%jBIg3PhU~zM0$e+_w3PQB>lsPIfdNb2JEH_di6u=ZK|K<S0Lg
zMt^&CIggVW6w^U=r4K#}2!4$tAhUEHLZZe2tr0!gHmXJ)_me(|K?#!);)?rlF|DZ^
zJX`4D78VhpFAFTTnCU?g(#v(osKj2TzjNV#-IN}YFC;7}WBNaaEd*=Mt8(|W03YJB
z-MtT#zPaHy6;hyP%On=l>@9i1`wnG*9DnfewxprF!bh<KK-^AJ>$kAhj8XrSMFZ_j
zW$Is(N8^6*QMrDT#8`e3XXCsaNAGP)Mv^xh1#me@c$OR5sPo89k2ANAXmXD{H5=3v
zV=Fv4sh7(&1p<n5FEM!RT}{YYasd{^*wG{IRN}^T$CgsnZhO=_;>Qd}WNFk^Qh%RU
z5Ip+@{l<6Nau0QklEczR<MlYbAi&NK-p4OHUjqh#(j`l{TgTA<6?Kn;rU(9j89wLu
zlxJ(`uwNv`N#SlYFk9VU`yu+Lww=D%_3W{2W%8e4F248wH{f`y6pA!5M~Bs=W8_a@
zIm-7`%62o?4okxv6bgS%&l4G&AAg<QzXzRhxLpEQ=_N9)EUaWf!=i<P&|7P6KKpBi
zvnTt}Rt$-jUMu81jjuaLS|<iv**!tj7wi3U{W|Xv>e#2%lKO4A2w0247wJpwKAr@A
zsq>gQL)vYnOzKI$!H)nnI7UGk=fjH|{%@x&J}HXVX=g~ZiO7^>lR5mbCVzXFEs#>5
zm`0>Or(4WnpbO;;E)XgO4=fz2wQxjO;5m`)S-qce3#iyJw_ju;z*Fk{X&ggUjPRBB
zp}GWB0~WxVIXWq*RL+7WKu_r`4dEEiOS_2Bu1)eXYDARk8`fndV*)n^>^TaOw|XFY
z3tC6~u*W&Ef7W5?kB8FJZhzF`1N40*f&!Nzv<Hd$yI=#-e{A?Q$t>SNQx%lPV@R|h
zU0%az!XI+ziz+&!5EW$QDcg<RSuR3=mGMj=R%*2a4OkmLpWIDEtb$xFikc?1lk2j0
zjaZL;ndF!n1%<Xz9vBU`U3E7PGK{;tytA2bl4g*elUY}OYTWW_GJiv#b?6BGVUp&J
zm-lx<J}KUoTZ@;zc)0LNSl$fC8;-@x@uEj?V%ga%@V)>UU6&vmPPrca98)N)ZQev3
zyTkFjvc}f^$o3D4KB1_k3rMnsV_;SP8jZhssbJH<pT-#x2o9D#Dgl6{4N9#2Y1XBU
z8}&Ie7Zh_(M*+5FSAQOv{V)UJ5ep#T*2y(oGdYNVfY|aZJ=K4Fz8{z3avh|2TxF(a
z&@*uY1+hsNrD0q&>Ah~{_ZrbrLG1y?Q`5{}RF}0w5Ob_StMdBZUEj6>UB2VXJqo7O
zh{g@w@6CeBDGChY+3_wK`}fx+L5NIr$-*;^uaQ;dJT1v<lz&z39yejhEG9N;11D3=
zP08|GH$WYX=^P+<$VJ#7ALY00U7@!K_|r3kek=Hc(kAtet8&VqK>O%C(DUfp>()gs
zPRT3#;ESA_*4{9R7+dP7S!DdD>bmOR6&~iZK&kkt4oP3$*_(!+6CM$6%_$Pf7`dAi
z_yA$p6<LLs=YQg^F&ez}iG<C2FH}fqzNqXl8hZ_(gE(IEtv0Ci@V~Vjf`QaeFPHob
zf$1_K7@ASv)z_P60&mGIi@`~AK@4P|9;9VYn^v#nZTCKqZXlnIFiRhje;xmm$IeFM
za_!{Zinr1|PuEydB%CVBD)_|fb96Ylp_GL`j8sjkSbvW|Ivz#?9?!NR8;UCZk{i#8
zvD|Y+6CTx|S9g#rs9`9`<eh!Zy|Ti19#nKfrXV;aYwOx623ROWpG9C}R13Ovb*sXk
znPG^6!%Xw>J$AFrJO;IDmCw~lt)!~hZ9<XkHBClE{{k6$A>!Kg0z}*P03CmjN{0Bg
zx6Tlb>wh#bGN~iB><Y`j_%j}6q160+yPZU`5#tCgfRUXW6>hutZg7IxnqVpfR(1G9
z@7P(|Z_PJzJc4$<sUMA4{2chwDCXn>tU+A5`=Tz$<RCa26jSnJ?JhFQI^#cDg6;$-
z)+VY;7$sA%GHxCBbbQjLmgP@x#exu_8Woj2a(_;6(_RaWuUA|KU=ZNM)_JL(*_QYr
z#3!}S>vZf1{N%+Tnt3MR-E;<%QfEhjqqk<1)}Qj*GtPh+|DR<pJRGmA28UpcW<0Wn
zXS`~4qwK6a;CyQm(caDFo8NS`@N!2Q{c9_e9}q1DwC7k(jQ%W0)%L|X;Gq0AGQ8U6
z?tkJ)<3EK>M3vdX?W!z)Yw!5@sN2&ir^@~%nC6UT^MOv!5@>@;ZNZ}GP(s4VZ_<%g
zp)I%H(I-RLreSoAa4BCtU_|}+$@?gzUL#j-mAm#mCGm`@s&sJQHs4Fu6=og!nzq?x
z%POj~UEv+4y{q$27k~s+-Vw?nKqHR#eSgPDbfNqFE>Vr3_LC%+QSIHvUa?+MxjrxA
ztlIH8M<9O5Kta!n$T`<5Ih9ddGhj@zzb1hN`K504_R;OHJu+x=#+@~K<Ro1fDggRh
zU<l=UuX~#QbCFd0<cyA3Eq>81AkQfTF3+rw>U1Ash+Rq;IA0SsHT(FLOSq~isDB$n
z@qh-#%l$^3R=qVxXSLZ}*cZ@**YhNPFa+|ivK-T5cuOB53`UX8ne$4$y-eSv`v3j@
zGXM$V<OyfgO}YR+iUYExEpgIZ%k8ZWYaK!o)xl%y`#z&Z3CqiwQ2SMSk+{p?RJ}MZ
zA6QW+7^e^q&t@r(np*rrC3cX*@P8DrNIB6Oi<)of$OA2C@yNmjwqsTI;q!UE8`6af
z9Xkg7CrbI2>!xmvTt4Vez4}g_!vTk{3nrL!F;;u(-bT`R0jKLF9g<3gJ#s2z+uO9x
ztm{{fL>>`Sw0J>n21NyatL@g)BU4j>%S3D&GQdpGGa=k!Wx6gG#8X_F7k|li1voRM
zn+0^!?o%@H88-Ud*=8YymZnK>*v2rnB@?x#zPdgus?<|(G-3R5#ip^A<kvsQRPD#5
zFWcBHWqUy@Fu@C5j0aQy_E+$g!-is@5i6LwP+E#CQ%5*|=r7=0?V^)-Oc$W^@w+&N
zXPiq?_M%F7j8V3WFzn&uet&!TkI``=w34o<iP$oEI9!J=n!5J`S8M;&n>&%IBCOx;
zX?fS32PVLJ#(&d6`DbMSJeoX)Tv?6ulP4GFc7;9gL*qh(<1Rcr#IG;J5;8}?<+5WQ
z-PDDyFCqEAt@ty{D1aiRO4}@#OFo}Ukrn`zxLgE-vhqVAnKT1jwSNs;lqxnn`j+vf
zWGX(C{Q)Y*(xq~1(Q#HOLV88cJ}<ZdV!&BXx`nZID3qmg4A1Oo!U8n4Jm$#^wUfK?
zDoFwzN+x!qL61(>U`p_6WzU_vX6nJT?%ZQT1H}>yE=!v948iSbE8LH-5MvhiE?28#
z#-dIJ!uN$5!y)nlkAJ-kEXSOFQu9MpKgLMUg5_Ej7+KN4@Y1CvyjL}>nY_(G?+4=H
z^EKXE2qC}z^_-yg%2=nE3#N{WnEA%6YR^In>yzUThP$*6Tj5AU!F-QW%<7LEieFp;
zwx)C1-t%?37ZZ8)^a&(^<)K=CtLh5hceJP|_mb6+%-mov%70&=SJeqtN>=WvSDXWx
z^~F|Z_NA+zbCHF{`hw_ytyAQg@OxelbWk$a&HV_gc;GlZBV_#WX>P|9>w6^}o-cME
zZV+<}`IE@3_oSLb9-El+08&v864a%RUAIF6qZyj`au7tR`t_+W=RNyo+LU^kTAK%y
z3uJGn@P3lnXMZ1bFN@SGJC5iQR-HdT|2X<K()b<f-O-O5tA18MXw~wHNl|S0r=!XY
zrvE&D*_u-N3i^fy7M^)Sc3TyHaj|NI$jc7&7M0~!bzqa=VuyvFBhc0-y?tX4Qb`fR
zI^O+e!_q7zn-2?5%bzc(f(9^VQyRX#!lRUD8+b^WwSQCQCoW%6IO^BI#IqgVm(tNP
zDWcD6Q-^Eq>V!`WIaQSNv!kAmt--A0S^Ao%X&IdYgID)5FG|w{;F5;bkx3HhiFyh2
zYZm($k!H-~&Z!oOE8AWJ_j8B~Ni2A2Qe-9|unNp!QzY1o&EpltO$lnc6)A6%U#)3Y
zD*lshHh&!OjfGu$6JfmNpp&&3PC&#p?n3f;Qtk3rSoTeUGQc!`A!7~hO;D<9DZ14j
zbPY!eb+&euGa+4qqcq*}=AHsc4Sqe?k?tQAsi@oc@-TuOz+eiyboV%&5&`JfQQykC
zC{$R|opvYULGo4DTw!k6L<8_!dEpM!H;T%tKYz}j&^g(sDK(>VUCak4_5J4T@suo`
zRLaP#fBW`Y%^fAsxIHVhp4`s8XR#>e5&<iGMNCFeu?}<ZR|Tqt)CstLQ{?wh0Xo^L
z=a-l0a&_QF^=;$4tkW$XW1)z+Py~!#?S%fK(7K`yFc1C;9fxbI?(-Y8-R{rMR0pRq
zjDObprLYE1k-+3Xez-3<i{DGqVku%5!JM9xY|v4f5xYm=fhh8zwuKAuOKn95A@hO&
zbAV-k#b@_1T<b9JR%;PO09w|+K6)!vF84uUYj|Z){Y5adXR)fwV!lKT5Bi3nX2uDj
zjM@HSN}_A$U--<s8)rXbg4zEc+J<x*KY!=z`yWjV(#8Ca`twS{TE*Pn^ishCpmMQA
z=aM|cLp%&0R9i~%Kk>FhhOY9v5`44us>~tBT5Va*;|?wg`iKj$ltMonxt@YOE_}NG
z4}_M*P^t|+uq59~SJLpB$%%m5wuYU~D-JsrK1VgX&LU$sXX?6ZqVxqWRKjwD1%DBh
zt;4Y@e11<!;};>$-ox^zy(vzk^+X4II#`Hrp0#&xHdLdw3t}7tj^PspUr^0mpZk7u
zK~*+M|8Z``gV1j=m@?XD^oTT3_1MgV-@vK4qyQjx&PI^0ABGD!B7O&@L4-LGTn}qr
zZ4O&cnlC=mD8p`WknQ4~?<_bRf`9z7`b-nX2)`C%G8DipQui2%)<ijc(+zP7V>(hJ
zbBhC8mBeJ1Q$Y0Gp|`OmKgqnkKU$%BV6F^)OlqS3xF<v2z?>3m!^171N74j@Kh4zS
z{K-8I@>JMDIUwqfI`I?HQ6C~PZ@1*{n@hW!O=TIwz29H$D;FS&m^C-RXMcpiOSmw*
zS>Y!C<EK=Pg4JX9TqFsG!t38hVjzHFQ@3L3vb*g{fuZDXwwdb;5^{%_T?Wzg^$=Wu
zg+*N4Z059u^se&tujRX?x1w^sTqq6AZ9T_>MT4N+rSWd)qO9*rOR*lVCX1CV+c&=c
zrV4Tpk`j>r_EZvbZJ?WW>wg2+&q&LdQe!`$(~O6;8|a~aN^?u)H#E8}Pe4d&bHD#+
zz@eFu>JY)Upoi$HFI3F^z`z|_k*9#p$Y2fI{ec^WbevL8u}3a^s`M0CI6c~YOnclH
zQpfnWzZmB3Wd}_wvru?~>Qo%gEkDw|Ca{*&&DreP$-mp2>Su~F(SI`@hl2h}?JPze
zo}d~!*WaE?+XQIJOmN<1h3d7jy1sQcf!;E-WuMuQWRG3Bs3}T%%=F(6+D*S4h~Hz$
z7sfcIuyB9kOL%Pqrz-GkSk!U#K0=o!ZX|eTcwzuIj>`@WxEx{UTml%MQ}eeKgU_1L
ziH%Jg#;m&aoK=T??|%ahn0U;dy&-G*DD?K$D2vN-P!gMz!8;P09Yfz*rk2~e@oFg;
zVmM#E%lrRTPG?yqRYcK*GVzr%v27SHSqole*Z>8%BCg57>v%3a`RuMg|4|ToA3q{R
zPO$j_WdT*EDK1j++2oh_W<f&CZ`Td8>uw)ZPBWBeX@07g#D8YftxyR%1L;Qbq}Jb3
zw6AgatXsRCQ{F2il78wZ-}x#iUt)Pmiwyma)uG0aZLkC~i65sUNW(In$uy&+190MA
zk6@Y|GjPJX!PsJVifsZrf}z%*EHWS~cy21aBrr^gQe$Wxq+$|740iE*E)!WfG|D3M
zf`3vPcHGD_Sbrm$ps8MXbvqNEE2q+wDG75iLAeMFYGBe+85~S2V>5ybS(JW^4T&P)
zmz>Gx67i0_QQAN;4B)E2|NqS`mfdD*iPdA!hFmpuTE*JQi*_bY4NUk9@1&>ptb`t$
z;6{ZCGp~c@gks0Z6Xq2uU;aj~*dU=!n~d$1UZFD48GjtyP>ADnYSE;krJ+BZaP~i3
zT+nH^=*a~kt0PiX79@VYdtzUXDWSEI{RwUrj5g9Jz&46!<UyKXPLbG~%$f@o*$ziT
z-U(n+vEQFFZy9u!|A=r%#i9oyBSJDr%lEAG_OpiE&B28!Ie&f^1{}CMV^&J_EJ#SZ
z*%F(e0)H#fXuz6ST2b!H!b~Z0ORNOHa&%(Fdl4`{vdWn**~e@y?pB_0;14L9jqPUB
zc3!wICqGDU1}xz>f4yE_BHak4%Q7<b=dt#SDH=*T8bF<U`WC@jO#OkBWs-x?zHho)
zrchr58GqeD6D+z7WPk`xXMcAa;Mw=#$))8pxPMCPTb%i}s`Vq%3h5NxDHj@<=l@kr
zdSrcZSGgSKOcEJttRx1vn6a4Y`+r-c(rx1+YA1uQDrwC60+LOw+gk$=H%Px4L`spn
zaSOS|*(`hr*&JXR7FXR`f4E?TEb~5s-j~uge-1Hu{b_Xk-asHH!A=oF<hFg;BSn9c
zet#GusoTiBYsrcjI;^E1z^F<0P1#wmHy&|9%3XLZ;gZ1(!^|V8B3jy%p;xDr4qxq9
zXtuQXBzew15m*LZcuwWF*ZlAQ7o$99B(qXq$2ndn#9Qo`xgsx1T)u{i0<lQjyh2eF
zflE|&fmd@>g!2+&wsKm~z4u(|pf?=8bAJU$L$z{5QmQGJC`88zYpx*0)qKDUSHI~}
z9{3y7Z3LfzXurlcir{k=D%8M;SU`h%a0(ephenji9DEJfQS}++#aWY$0QoV#fgoN>
zU;a4)H_7juF&8DFUitg+f!|lAlSUc{Ql;RZKyhYVZG~)8{S><3GzTJKzyS6pMSuFT
z$Z#t{b4INqMFCW)sVphew4*{;z-fR1f-{I3fX96HB7P4rM423HyB+Uc@6?s2Q{{LT
zH7LWl*pD1Vw$sc+7ZNlVHk-(+k2QF_N?6yl7Sze?lipdjbdMLtp^R3F8mG`&`FH~8
z%s1ew&zZf#I%AcOO6Onpbgxr*@P8ipIxZ09IHD$VGzg9Sz5Ug{Zs10g8S+r-hNHf+
z?K+>~0LyRJtO8{{#EtEqQf@DZzA&FMde_%=D9S<L1=yiamNnzrpwUzUmzhUD1@?jQ
zy<XAv_9+B|4dLHD{<T{2^GHaS*E`3tx6Jd$67?-&#$U^Li>Kul_49C=0)M|VKnn1u
z8n*@3><-6&(g@zBN+D(_mpjs6Vb~+N_#;n0;#JgUH|lmV&ZFF+Qa_L8SyVqza5A;e
z!7%9)S<=ZA(l5MvOF^abUbwGY$#UQF)R+I-9y}E^tjK35R-m!GPW1WYXa{)^g21co
z5q<&Y9p@`yI#ZQc2(^{VF@I#4B-KN=`_l^4Q9qY^el6;>8x9wf0aYV~q>q;QX=y0A
z>tWtqPxXN6Qs$o@lapZ17MB9s%q46!=_lXD$~GO;trnwSw6#bW;WNejd`Iitq}GLp
zF-dDx2TJ42r~y4BLEfoe>&vYm@v0N8&2+S7@R|hQ*4z;3^Tc@_a(`i3hZW6KWg$sK
zIY|Lu2fkgR%o(QIEZpiQQT59xsBpC#2z-Qc4J%#EGx_*1N+Ze;ah{C|v7GRD1Hc&K
z(N>)?8u`=VLV$nkIq6n;y-pthKdV0i$&LEQG(bFGaVN9TAb$-vfeBaUS^T_xus=%;
z<YWpqBNs@ZEvFv~Jb%$N)EryIB+s50>o+7C5;0BW<QVr@eJ<Z}aD)AuYEd=dP_n5{
zLPyQa%ZI<l6Ju8}R;t<X(i@ovcHb)@MNsMY8v`41jBR7b`d6foxWjYj`1yifDV6*M
zy}Mqdc_RmnAWc?3YS}3n4re{uXs%%u0sF0}6zqA1QphwS5`VZ{X9vDa7XVJ8>^!k;
zpSsl|3nGdnvfk|1@A;%IQN3wgEDH!aw1EI1$q7z5kR<-9l2RLrpZW3JTRoZMf9&bq
znJWsrlmtsQ<Dor%u%O_l;1h657N+X}KzAmUX_`B{4A0+(7X5MGp~0I@Sa>xFt$=&h
z+&~@1!Z4sf0Dl#T6TblDt*7>>&ok!g{V4qw)iKQ=sznjM{S8SAuGyS)B}zRqN(Scv
z;pT*8;`IU}cYP_Vh+7`dsB7Ml`Qi}F+O=;rl@BTt!|AMLILsxJ0nn4wtrb-5D0h5l
zXSO56qI8OL#&cf3d#}2?7CVYeR|kYJE<8%yaDaCjkbjjXAh03elDh=_|AFI5<Y#=z
z!p4b=m8yH+*28X{TS|>m3lBGzeERi+`?buntcqI-d6t+m7cW05!lvD#E+t4+I|Sp9
zW=I#H)u*WZ$aZJ8d9q;~C2lk#lwmu?(OTm1p=r#hzFz`*K>dR9?^;u!d}UtHgaHXV
z(bPZ*EPpz}M|<aWoVQOj21jkT2BuFCNQ|e(FWzt)Bf3YP;V{(pgq!Iw$^ZVlUQcTp
z%kb~gLi$~HbiL|LX}XY(M~Ye9MgaWCy0m=(cC@Pj(xPB4wJpAHEo%+DYmZ`(gA{Ay
z<w`)q8AhzPj4#13J=Q%h+T;_N)^kfa>1`*UVShT3LSm;4IQ5wf-Wis#hU;r2h?pVp
zD6|n)pruEDJ{E1QHz3{@t+Apoc~K9t{~=`~Jhes4+sUP6Hi~k#^myRp-f{s=&Abcs
zYhpNG&c>&^LHW``B$R?USA7yT7SQikEzET0F_9#I)7~Phlb@dr_0Bk_W40O??f*g}
zuYWwSKF89Y*1xv+{>zDQYkebYFK}Ad(%+P|>@RS~F8_D=8K=CqBT$jkaML<Vkv5tL
z4pYzD*wq!h0C4|^dBb2pr?hb3@kK1#^)oAOeTkskaNQ+YpNkij<j@-!rlzv<*ivjt
zlWrpho!?G)S;B{0A9ty387~!klA`xv%YTRLD}7e-p(4%~o<QmG@96nEryP8$yfYTJ
zi26D(mAqTwJ#S-)+4Wx_bA*<0e8}X>;{nU<Phv6_&`((`exN~v49=q`9@>n%FoHd7
zp|AFFh+Wys2<R1xt48g>biVpxpIvc61Xi|uT%IGJ+kGe~-ms3a^5ca+*XIk&PJgT4
z0YY)ZW7<5r16O?gC@O%Vbr7IPbZ?`9JQrV7E1dq+F1#Vb-uO=-$MYV!_pY@6*|CGn
z%!sp(SgH^-CcPhWR9l?Mb_PtNsMNE9o+&2h6&yRMQM^7!FR>D8*wH54T$~7`5AW*Y
zQVGY-eU!%$VIG|D@?#5i3w|OFyMIFx-!-*Uh_au3DeaqBbk_{dI~SOf+ehOUq_~5S
zf(>Jx^{k5PT2;tY<8a`V|NCCVrQCL6o4f=UbwbDOsP_2L#<HNNgKZ0rpfgnAUZ?!@
zN5s?rQT&P?=MsKJZyb35*=O)vHvbA3SIR&Fv=w)47Vo;%fJJ>%Z*A_+B7Y3Cw4@oS
z=pFatJED736Rvu8`}}xp6VbAsPJMdZWk>6X%LO`r<bvb$`B%QlAD;H^$@9yl>8*So
zzT2WBwbh&xr+~Z<D}+_GS9Km>8!eoE!9Y`A7&451tUCc{k}HtcDKni2i83rl1Vm?3
zUvvLc=STg(6kuLBg1|^nKz}V|l2ym<2SqLmg0oxJN~i%;d-zJG%Xk~kBN{m~=5L0t
zAp*|OE&k20e{AIdT>I6=TC{-{fgQDYzV#_=sv%Hjb@P_Qc%YJi4$%i9O5cuUki~%6
zY#b5p@k?%Un|Ar>J3P7Jy>GK=nxjb15KMmT4JqHYRnZ{c;op?QdVhZ+sb-WL?eGpb
z{9GhTk{J`|ibDA8%958Ob5SNUifGh&YeI(*JbI>(AcYJ>CDvmLamvYg4?=CF%Dd)b
zQ~XGm&CH^z3gl1UI2olEU`|30x>y<$l$E{u-O~Osd{QP|ry3`t=f6Y9ijd-`%kU|Q
zKX7~HrPlWtrj`8sT7MKK2KGo!;?3#1e9~Nn49n^^6<ksn8-Q$+Ngnp*x5CZ*zS5&y
z+4YKrbgZD0g^=K>#fMOVf#UMyDdLZWl70pQ4qDmi@pHL@Nq8G?HP=$aN7yD|!7an(
zuaTL4k0uW?@5LA4$=L?j`nxfaU>Mx%^RvHMv7-O$7X&sx!him`G==gz+tBjgT8RLa
zA`e{B>OHuS54snA<jyU{{JrK#g|Tb0D^2LvfmA0XbHTz4c5bI@2e;(~s657eJIdEZ
zBIux!JSPVEx|ZwXnuX)PDgRUr$X<o`t~2+vuBveUlDMlpE38*=p8}+Vpa7GJ<AJDu
zga&ftWA-CKK!4ow-+7QVrP-_Q4z(B@0rI#qk-59mjP3#G+<AS|WF=$SjjJkP3jTZ(
zR`enBbd*oQTL?En!P0juLq3WfE}*)i;`fXqS`&GgjjruK&~u6vhYhE_c_hbts{Et?
z0%f$6`8==c->N7!{ms*Du?6L}9Z_4ObC5*C%h7iQB!7LG31dagbI$VRe*(Jva@HVM
z00RjDMyFL`u|i#x5j}8v#jF_Fpx`CG*r0LlU)|I7W|}Z8EiTKIwNeN?)+4AblbYba
ziL=XIHmN}D>D&%?2QXGX{Uozh?h=B#Ao1@$ea1PfY-O2W=sRPq-SJfyqdo-mV2mKU
zKxYiC_<t2skz8O`i<qe-1@#e_h&;a^)3C1tZ!}c5T|VFs#paPP05x~XA6%bdQ#s0U
zxcuG-^t|zfDAY}$0uguo?-J##niN?3{ST{jDJ#!xR1KfSj?jWIECBYYc@bJSP0#ZZ
z05k2JbE)jzqH(Y=@T`YzbL80ppR9P?|Lie#zJER|hg=|{h!|`#p^Vz9Z40G64=0?v
zmW|Q5#MjU1@1uh3|7RAm36}bJTB94U%Z6coeLIT$9Xn9X?BYY^Xr}G|1vCKh=wP{d
z`<-r6PF7KU5P1$#iGDo1!6lg`?QYutR|MxnOn6h#0Ry%7g(R2!DtS)cVp|!h8%C1<
z8h`6QX^PTptN$;&ju0b(N?K=&83nc=Oj^k7o-$+oobQ~lp2YFFp#Bsf&?yirCiHuB
z784`Z!&{icdP#3M+T|NX@c6~eR&>j_Iuq5z1pSH_Goe^tdak_{AZxeQIhyOw2ucD6
zsG(BQyz?Iq+;fcZ>Dg;Ded0C~XZg?K1b+_fbe*@w6WF(i$_HM~OCtn@KQM#*KP?gK
ziUG3Ntt448rVe8oxT8-chBjv#J9@j7T0^_bz8x~{T?y`C(f|M>zxQPGKI~WZZIF&0
zD^;yQLvG;ua>6l(LBG|T@80LFKV(msQ=eyBZ$j;$-V&0j=H7uVsNC5NaWv3Ik$+1c
z1uGKz+N==?AfX}ir#`8Q@I%<c%1-f;Nrd+oOZE&{m2gmO0B~bKJ3cMtj&nrh-SiLR
z!;56AO@5KCi7KQToI7KBhxs4CDN>@JppR^ILXN+-sEDSR++C6`peAjou*FN{inECG
ztWHtU4dQ&|#dFd;;t7tW=2+A(Wq(Iqh3X{x-ql7pm3H3<HXF$U{p*0MuJLWV_|iOw
zzWB;_Ilw&ba>SGMNM4A0yekGkx`|y-7G0BL2@QMc;S%v*s?=}0bhG4;FTirsl+JBO
zB_?;!1?P7!Cu6bbjuYBRHS^DEDM1B8G%fxo6kb29zpSUw5cDUrU*Gc-9e=V1IF|nH
zITA&o&E6KvfExY)ma|r1E12<XrPs5!G$4WbM?AYykz+3OaVIqX=g1|#krY%0zr}`x
zA9hYGUe~inI$dM{SVKv+ut)!V__H?*@Z9=Nyg}>lpHA#{A&JM~wh58?FC35^GWCvl
zi=29wo%)B9`CvmmF&*9&pMQH%M|S=GmHJI2`kZer(s?^O&HXgQEkSeA5PKW_g*Dra
zq9-A`YuYsomI~7d`(pZk-n4Qo8$ZEF2J+su0q&L&4{EysR!fZyUL-|Do*-x!8n*aM
z$X>H1c8~LV-zQ;-ctvtLoDe@fd+S7K6>6o3<G+@!GI;1r4>;=ZIe)>xdkyvl=O+Ig
zJH))YY-l=4JxGe$7@LoRilD$8+IV=CiZ2tp;nx%3p?5=<?;_Q2-MK>v_zVhSKMvx!
zST~*fI`H86W-!L>j{<ZaCs5bOB7QH!DpaMn_dIJtUyZrzTNf`_NG_jg$}9*5PSx#c
z%J>esAZAwa{gRK^n|}z!pUpv=5~n2|7jTk}Qr~?*j?#=U?bc?}g=C=NJT1cVB`$o2
zfGNn1P3!4Kg7x=bv_v#@E0Lep!1hv!>;;5TW^i-IH8^Cuq>HZ-APRQz;B)SniTvxJ
zxZZ%hA1x$0a$DO&zMmfyp*{~kpPifRzmhtuxYgI<mnfm;EPrmZXF{al{K;^2RO)fD
zGHvtuHGd1PxGh>T(^Mc|a?)ae*Xvmjx+Y9$7-30`9fv#(Y>j$`1yAe>g9pFvHX?aS
zx4nILm~%v~W}S7z0&K2s5<K`a<Y+JC|62989V^slia$b*FT=GOt(wZ8Ef4<5|I}eV
zz3(fW&k!)cB!70=F=TohpBIuF4mQl}fBITCYj7{+ZoZ1ek^W%a*dN-j%~%s!2xKCR
zf0UU3(zkS9{zzIo8&kaEjc37yq~_3rn8;Q2ucZ1*aMB7U!wa8iu>X5@3jwHnLAFvZ
z8d7Uofr@1aY)%Kn<}BEiol8qU15;&<z6r0&^tLk!yMJt<QY#XYm!SO_^sUiNJeez?
zJV(Kz<{6ixg;PU0<|&9$t#NyRy1PZ#(lSf&jaInpVSq&#4^)4oqsfhKCgWvDN-Grx
z?BsIfQx4qxIWo`Hdk-w<-tje&8utD<7YM-SiK}$0aE*Pb)j%5uT>oC*iCeIG?vB4?
zjw!TQN`FGsFoq~$$p01>l15d?q?0i|&@=D}lb(Wht_n;nad-ZNy~_$r@`zj}vpKPW
z2^@MiHAtzLH{KeSM{&eUGz{_$DM5S0WBtM_n#|D}XriL8Ne@OY=R2#}<k=T1C71iq
zU7S}9AN=7NM)Td%8JAU>eeu4wN&z9~7iYx!w}0}mtRPBDVbY{cI?0(iybyG^29h@v
zLLwgQ@11X%D|T5~FpZb{3p(J>uR9q$NZAO9(f^5>`i<OC+u^i#7B7wV`K3)q2c5cF
zZ)bF03hV-q%zHi~ZgLBl#=vwVV3^D+6-%=VaV^D77PT5FTb17|qhPsQgH5PgXzU4Z
zj(?2$-)aTw5<Xyni0>#+32ek%Cn-`XrLib7a-eCS?#&GhhgSIyrtA&Ofhlb0R1^pD
zI<lpRFjB`;`_Bvm-&ecGG-n*52`f%XZiemU#$6m>I5!5Dj{9Pt`613oP{V{pI-S8?
zof)7MH;q6-)MTFhEC?&(+$RIkKHZ^I#(yWg=$W}c_9krw$Wrl>bZGFeGX`9|DeSY>
z@8x`OZ9l=U9o>&hs&D8)L2XO#42PJ03K)@QH!Ur=wZtE0rBbA4(}1=3ND{dGyWkia
z#^&F$%Yj)~VXO;-v-~+Y*Tjo$x6L-2C{K7rf%MQQ0u`4oI9J$U7Q?X0&OY<g_J4O=
zZ36p?x$`9_5|CxVd&iSOw0IKg?y}WGxeem%{ekU2nAMBa4+Z&iF^E?4f%R9}bmK=<
zwXYI)>qQM1KmuMvKMz0jltlK_zI`|p$bE179g*9MG&RuU*N$5FqU^Qb`7C_BdBn6M
zj&LNtxvThSiWJKm87r3*3NI2^_<!?vKn7BVc6I=`WQ4g#m*dt12ujbe5H{B9rTi^8
zxB!q2+#8L2vTEanv?E0iJJvFJeZb3h_;k%@6vvK0nz-%_Q!}uUz3OI1;BfAy`E&@6
zpy@E34vD-5ivffxB#0qe)7@jH->$}u7PIyfxPA%}$tgd2_|g<0Z^izlTYs@)WFHnr
zq9h#dlZqfSQ^J<1aD)>J84qsM!Y>aoYpsBp-m2iTSmsFa@3rQ>woy&9G0O_19*3Q~
zM$k?yxFJOCo=3FeT?k9pn%UzI57;EO0Xnxr2-El)J*sDX24%fNmGJdRXMGgi>4}*u
z%D7f@GBYSfz(=m@!fU$j34b7<Bq87ik*bJZ*H7<4vyS3Zc8@Gg4eaM12iu{~-~v*i
zGIWQ1!Mha<slgxp8T#ABARr_EKu|`}Fu6PSZ1wbzjUbCOr|&j|e%00WK$Hf3bIK(9
zj{>AzHNFS^ex9|>8Gvd8jg#Q7*We)2&g+3sZT1Oqxj(GYY!0zeAAb<niLq`u07x;V
zx$m8&ld0Sc)m#U@gz|l<%k6-TMna48U)bAZyV#;=6&R49FhzHJ1ih%CU9z7MjY87G
z9^k!A-UQ6X;A+N%NDPm8kaAJ<HQqg3iX><Xd{yTe6RXm^aE29XZU6P}5FBi<vtG0S
zC*o@dThU=0N+F`?I)4K_a$%Dq_Uw*gVqCK}UfVyxMCk71T;*N7BlzVDFuNW2pAKkF
z$#~jJS8kCueJ#c7Ski0c*HnO#vuMfMvka|(gyK;~c71+ju9o(mmlQ2J!(w|T9iv}m
z<*VKSa4KTVx%Is6C)01-dr!V96!xKMo38<~7$k5q^bFdg#D8nVFcF8{-JVc(S$9WN
z@0wJ>DdT;M|2=~agymX}7Hu^V>bQ<F@Mdi|Itt$-5qCFN_15s_NLX`Tf3^ciq*zb~
zifE9fYNpzbsCiP}Xd`|q=ctSLRuBO`Tuun3It4QVJ){xKtE0oIj`A$;&Tr4g1&%jl
zqSf~<2Qf>K9)Hmit{qRl^>X|^!(GiKo+ey%nYsVasUBZ5I5s=qDw+$foE2enCA)T(
z!MnLw#0ikVpT8+QY<h`=jbx<^)peXsET4(SOo8mI7(?Q5Zg?PAH~3b0?%qD3xF;8(
zh40RoYKWI6QqQ-iGVjPIH#`P4SMCa?uzM*{H&*OThcd!J;c9}q<9tir^?&`e7X*Tk
jWOpmeO6(a^Zz94iY9*KOCRTEBVzoL&eQ0r}61Si5^x#iT


From 518a4c329fa3749e713eca5c4c348c88db1c4360 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:37:01 +0100
Subject: [PATCH 950/988] doc/backup-upload: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/backup-upload.d/notification.avif
----- >8 -----
[rsc] 💾️⬆️ Backup & Config upload

Backup and config export upload for rsc.

Hostname:       rsc
Hardware:
    Board:      hAP ax^2
    Arch:       arm64
    Model:      C52iG-5HaxD2HaxD
    Serial:     HEG08Q4FT32
    License:    level 4
RouterOS:
    Channel:    stable
    Installed:  7.20.4
RouterOS-Scripts:
    Commit:     main/3287/699be25b
    Version:    138

Backup file:
    name:       rsc-eworm-de.backup
    size:       372kiB
Export file:
    name:       rsc-eworm-de.rsc
    size:       377kiB
Config file:
    name:       rsc-eworm-de.conf
    size:       3.26kiB
----- >8 -----
---
 doc/backup-upload.d/notification.avif | Bin 11776 -> 15905 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/backup-upload.d/notification.avif b/doc/backup-upload.d/notification.avif
index 83cfb18aabeb4cf7725154fd08a50663458d7863..3bcc1f4d7d51213235a240b7e1bf674ba4d6db73 100644
GIT binary patch
delta 15806
zcmV;vJwd{NT%mlBBMs|qWprTx00000001G8FdUInC<PM$06h+ofJy=aWRc7n0VI*;
zE`L21ZDe6|5&#MZIVNWrkAgrlfO;5N02pD06aX<i`MLyRP)lu1hZO%g6(7zLs^aQR
zh80YkI`25zpO3Xas(SYthN;td*B$a?z@TceZPsAj7sFb<CdYFX_%T`hZp*d*t2&iu
zwI~I7-NP5J5;7s2`_ga|nawsu1<GySjeo|Cd+IF+ztetN%3OlY2gSa!XI~v5KQ=%N
zT^f6~)>~SQy}x+u@<d)X|2Ej+71alK2m{G>Qgm>&ty}-0z!2k*ev?UAd8T%3;j9F}
z*09LEL9hFhH<+Rx6-(s|x_H!4=+M_hlKSjs&M7LJh5;}0yDsDN(`WDl40*paxPJl5
zzp$fb%%wmYT4S%X>gSqi{)QH&|Nrkt`|heD!6C$YV?&OQilv67L0~Z)$`ENCv8NK7
zkE*v>NcYh~GWWelqG7eDT1|f>M~o_y@Y><i1z4*>4NQaoQ+%ZjTQ&8|6OQ*NoI*GI
zsieJJ7c0@ojAM200&&Q$?Gg_6Lw`@9Q)}K}UNe^R)z_q^AR(W=@R`o;hA`tnHJj|H
zX09nO)dNHni9&8A=<%+x5%-iG#-F^ix+3|l60j_(e+StVHP<Wh6iC63y=ql`e*@%-
zva1>>62Wiua+1JYodms)E47J2rP`~<5_h%WY1+>}ZId?FTu0!liTqkV8h`VdRqA%a
zs|xym=b{}>q79FP#n4F<PqO;w^9~n}8-*?Xyr@Li^*qY2SYVw8@8#r?#IN_7Ao$C1
zil69vS#OuNE$Jl$z#yL@0&n`dcZgWDWZvxE9;W{zrVQhXyRgwcl+*-I0=Nz()wNrq
zKg3YmTCjpZC&`uI>qg|kLVxS^4q4t1kw@8l7js2t`ua7yz*~HXV5vqqw)q3fRjSim
zEc(7642$Q*L=m|9!4E2_4sM~Z1eph<$Cm%|X?p3U%UgX!J>(7-iteam@-m^1#?sc5
zCv7A#EPkzur0+g7JnZcFjqWzPgOw=+f@xXeDW{pm&jKa6080C*4S(FdF(H&L4dOpQ
z;h#gbNTU-(n)iz45giO$WATgHK~69qsCgvFrK)(fS|`qRnVzWWSuuKKYl{T$xQ0rA
zRjMr$nBpy03DVp$tYzd>KV5-l?52?jv_ll~CNVMgBG4(!u=JDQzUtNnRwo-pV@dkw
z61!ruXj#er{_LpUW`7!R=7!+o=L;lW!0&J*jY7UBglQ!WLKsx37jd^f*?Pu){l-US
z;K$o_*5ERh)s~T#-nW%Dh-DR@HZ0pe2J_rd+e{2ceNg)#6?x*}5V93G2FTuHVn+j5
z!RMH1L^W+@Lr^**<1t)8y>^%5k(DC5lvYd}$oM@Yjn#v)dVfHHr^b86bb`vasgV@f
zyuo(6igq9|1TgDlCc@8gPmXVa+jI#62NFO8;<_CgfQHoPF5*rf*&}Kdr@b00EhKdu
zZNRppT@IX4q}ipAb>%uA0bQR3^;LyM_|pp?<=FSW#MlNy!WI<q?dlNTf9?e}AYGU-
zV^#_D-!cXjyMGr3Cg9Bw_*;%6q?gt8O|SYv_HKS0Crl6*!mm4nRz}LMIWNH9U3W!o
zoqd|fI#hpi2{>N9ECjO>1H%2hM)G?&2$M-1NrP1MyU)sU5i)8k`Ls?K5i!n>k`ea}
zzf5j8PevXx{+u+Rcq02u@7GYp1=xgdDqeiWz@L7Px_=qH#ifa5Mm`dg|5(#wR&h18
zx(BiE)IIf)Rqkvg2S2Azv^r-tuhqKo%ESU1GRV^H0~JrGccvq<)eW1w_&(>w0X}{o
zP)chhs(Gtb;bbH;iJceUb|FilElTO<PJ~{~+yux(4E)f)jyvWwEyUdKN4wESXG+$b
z<XQ-bu79{E{t~SmQTM^uu}=pmUD)fY8G+*o2Kq~rX5X#G&^S>Wz`$>(gZ512$v=I;
z080Y<?)#XwJRuirxTOTeb4w~8TWTYuQ67GQSIpAmi$j}PyJ_^w$jcltH0L$w?=5{P
zGeEBGXd(wXa8K-3KH3}#rxR8;Z<dkOgIT^p{eNb!T&Ol`@|!kl1Vp^phMX<i-OCgg
zmi6hzQP&!ef3QvR_RbKJc%U&c`_SQA6fz>>X)O9TW3eE~#$O^*Dk^ZB;CGPfD5<xz
zV$qmG?9Ww~`A6-Gq9dSVWhK^H#8MFNn+M3Dst>X5%gVbQ&%Xsc-qjM2%k_L6B)KqX
z8-G?i!Fr+g1u$~Ya_fV>I1trBbi}@imH-YfAq8ro8Nw=bKv`?MXnF7p(cIJMa|X?h
zS>@JE>wO$#@%h>?1pZ#MNkKv4JT*JyR)WyON(9Z8X~W})z1n5d0|ij+;PwsW5QypH
z=XZ~&H<^Z04wO836KL{ZN-K_m{zoA+r+@6mFN<FTON(>t)xj;m$j+id9Eo`-s~Tq_
zXVTbJ>KQFSM_-M?sAy#LF0yG!0w7UzqRL)~e}l@)9kMkjap*v$pM;)njD%&wwZW`K
zx_ndNl12gaOqjvv6n&&Zd01NBda^0}A1=}@@MU^yoR>cd)TO4wAZFr=j`?#~KY!8L
zQAtHY5-?%}l7s!wJfK*&2#}23S)?#?Ho0zDEAxzMn=TrsuA`&i9*CkZpxOP4i*rBO
zc}Mz*m}urp7C9uv))WFjh$vxG{t9dZ5!l~v16gDRE%qLRbljgZvHxj%<D?N@eR`+&
znrKwkuKYn+=k4ayzE}cxDi__(xqqv^8{AYrgvHRH61bI&{;bUYo3wEiH@aDmNb<+T
zDl7;#SGp3@nxl+MrxW_oSIR5k0TU&vs!hYK{1Xt^s*$BEPM6O^UXX^N$mC(Nh-EqG
zF8VRmRckI0bU331jLzcWQPOe^%yOt(8Nr@||KhH_Q(oc{mN;ph^@5^5jeqes{C!cW
zU3Hr}N`}G~-3el1`MHHElOdKk-xY>E^_zXN!s-Yb5F8L>7X8mzDnS;)=Yr-@7=`qm
z_T>&@H7i1XU7RH#MAR%R_I+$?2K8$Qs82p{$ajNTOFe0EQacc(H_l;vXxxVTle^*y
ztgdqVF**JXYf#=0QkMa)Jby4)^*#u{NX>kwMVZhHQF|1wraq-Bb3FJHU(UJW<^1#u
z8$KMbaNWGu@VHbaVD^~EE&YYo_d0}*(MYZk!ML}0EV@J#ZW#Pk`$FK;QB@JruQq90
zA8WINc9>pz@z;*mCMDc#Op^E(6Fz<oq6hAgFXL(&8x|LwGDJR72Y=|VLW3}X2aS@f
zs#j%3I}3@UW3niGE9=#$ln>QfXW5};TSGp@h*VKmijY&y7Es3u-dv9BJeo9;mi_~f
z0t!ZWUHY_6FL*J<c38(NWX#kh`g+X)@|4>t@Cpay4~SI{1`eD_;%vXYRVc)Y2mx{A
zysgM(`NVGKjux21Fn@}mw7PjVvTyjVzesL*$fta(%BE*ryv$Zhaa)ylF!nKkHh*)Z
z_t}cy^wr|hjO_nCBXjp^L8eKJia&n$CH{#-N&dM7BGOb6bLxP>glRwitV+aj-{uGK
zZb1?)%V&rn?JJ?HwlehoVGI;5sFX)8I*6hH^(nMhDJJ#XjDLn4x`R2-(fClDzsZlz
zaE1G&;D%-rK3~EV-A9+q%q;$-KRzSpiU`8*-Olz;#wfrB><tpzW8OYEoP!G3Q3Buc
zizI;|K#_>YKk#Ll6KOV9B<oUw{8~<d4)180Q0t1F<XeVee6$XP%?}tJCr{3L579vN
z;ds}0848&qcz-*LP;=OSgI(#KVi2Pax42+))L<PFIv|4VSD-fuP3T=xl1|jBr`m>#
zJR1uIPL)JYL>45~4%Gj%(#21IZM4~ZF4%ABAa7(!W=ioSrC`nfj65pI2pmbFIteH}
z8tg}H)~e;%v2^og_pgmCkqq^lhD`Qq>&+VIRL|BE$A8@rYb%t05K}R;+SQ;Ln!JmW
zvYktVjN#Ns`|p_hOCH}kpwKM<HlEJ+x*2yRT%%XoRHOqekinn)0!XB?@`=c>eEj|T
z0Y9D2A`1+}{hZY<!NP~d<XW4a+up5ESeO<Of6NQKR$Q47+=x(P+tJO%AAIa&-<_-B
ziCAJP`+xeJf$jL20I5-7!KjBuNnsU)Xw<>DbA;$&)*eqkj9|U~h1&HGv|Q<oTl4X#
zy)Ffq?)@yA?S2G1z$7}BLWn^>(=%PL6Zo;IzxvpO%`#zhZ;=ppg}=R91apE^$0co4
zd8qMZ^i{?{Y5S}_!0dt(p~q<Ry2eH$)KBfskbgn%BZR=p^L%s3Yjx%)IL$g{mBgiK
zI>3$%#cMjZ5_yyPyRe+sir->%6D7vUaa>OTPK-u^%mt2;h3OP~H;rS7<MlL$o=H}r
zqcmIqhR8}1hC@W*{>5^^-&)*{G;m#UT9Apk!5fJu+)(QB!jD}Emr<%IKHp8z7i$sI
zMSmL@deVgKyqyvXhVHLsvaGFkNm8KJGbDC%+)}Rx{6`R_**U-4Sm(NpA<D+IdU()#
zd~Xs#$z=1Jmjw*VYbe(6)m5&9oeEJbw3l#=f1L2JdC?h|SqZ~wNd**0)g9Y>`cs>+
z-#Uh$<EMGn`_<-ELNxVbHgl!}w2-j8H-E+MR`3MEKP_w36Rxz%AtL1dnDkESIT!2`
z17slv;G@uqd{2as-ANP)LTh24Q$qF<kqoH5OwsqFLy_msU832+5yDS;6_&V`rK#bn
z>ZhKYWyry0O*m`jhN9*7`P(PIKj%=y&1^|Dj$b$t%y|)30*l$BkOOcFT@V@hihpK9
zq{v&%n#hn=iyL}H+&?#j_{BV1;+-2+Ke;JQLgNN$?06s>BpMGPC8?WZ%>>NGG#mko
zTO2@9dBICD2qWN}AEYBl>QVVlAwEWZWK^linYOqOe6VFZp&7qrg7@Q0C8SQNOUwYm
zKXp3f1J1_(8tztR!)$$V`gYGXn18T+*|CXGF!&dPe50Cx^~zp=;ZT}N{d+<gU|9Yt
zky`<>IW>g}RM-II6Nut<t*~12@{n!AA}~O-Np(g@K}43qZuOZj)zv;;3@nCl$0IC?
zr$S0xM&1hj@S-J`z~_#c4C}<O_k&M%^m?R)ex(10MLRyu$>fs-ve8NZ>3?Ij<*J?t
zr^Ss4`LCP_nP$H0;yuucncxzUsc2|kFLtw7fg6PTUj_<HPxU?Nt}w}Or+bKLOtUv6
zcFqsBJryyyYes+EZ7og#4cAJL?$pB@yBW@TDnDvInqrcsLTkRG2V2}qqMjabJGTL;
z%RnnD_a={PF<_MxDG1j2V}B`Z<bch$9peZuKpJH|*aKxPuNa%cGbJ^kPrWpK4^SGc
zR2up&|1DS<h;E*XfxN^xRwlKz1W3)|NWB)69|yF@T8zM%Kqxaj%6qw!27!5%cN*=M
z@0^SlWinJx;Dk?CVuI~0!5dWz>{7ZH@0~$(G1Hk-$n7s5V}^QfTz{AtP{6I~?J>#A
z4Ul}C4&VLASOrM4sf6niH**UAf-W5Eyx9yVVfb>JIL7J7)7hES(1c7Tvo%BWo7o!-
zl;kahq*90Tk(P^BC~4w1dmXx_Mo4y*`aXagI|bB;XN>ckMwY%*1ArKOsk!V_&1^l}
zYokbI<i%<gmaN#h!hZyA8}lioF$b@Yw&Ykf;f>qWsBq<d!<tHhVKQA#BjJ|-Aa$?k
z^y;*1u{yFfe*_1EpzJK?)&np{r{LV&=ZK&;X%xm+&Yy7e)tvy#5IjA!V9L)B84D95
zd?9wAkl+>T{}%PRh11gA6mSc`<{3qpw4k&fU!~1k!OPSK^MA^KYw9n1JOe_UVJNfS
zc3hSSUW1XvbvLNfyDkk{;nvS2IUjxT$i-%x+mRLW2R4RC84!YBsGw*NCdcX>LUaZK
zu4)<RE7Bem>2;Gv$>^=B-jHr-=#P8w!7;scqGDJDwO^#-h-mM@{rCn)zF@V6idOG=
zP0AQjJOtg<;eUOG-dB2Xm_vzk9Ap)6O&w0m#z<M*D*wR#a4M1;%0($n%Ll0)4yUa+
z{^Ef&&6-g|K#=_JP!bMPV7z(CPkqq|a;=mTP$$my(?ZAs2~?!6r#XkNu`+4RU7*Mm
zj6)eZJ++6v>)QX|W30PUNU?+0CN`)MbLZVQYlJ_zr+@So;RjcXUI{smMS0RP5Ew!K
z2Nc3&=fTOndkzhgbJQ#P#3zm=P7$X^2{3<JqR<-1B_kg>aW*d)>?hwHnM(BqyA$BJ
z10jZQF5MV;&Qgv#urIwJ1yB}iXlgnbo@V80yX--k-a6qM5iO*5v#%HHMtjSGl+ppr
z^>}?P@_&NS{At*%O>7a_dx4WRjciCz@^PLj6lMN+KiUXnQprEqfQK|880L`9Qf?#r
zo8k7;lhhJUButsWB)pXjL(hGuo);#*2L(z9EjVA!88*IuEgh6Pe-=D{-bnA;O-SS+
z5x+Zcxy3A(G9Dd9zv<aY4N)^a^rz=yXR~y=Z-2X;wlYWTHD_)!eWP5iu5^ardb<Q|
z*y8VzU!&@qe(eWzaLFU@D13U$s)_9Lf@Xf1Sz>2E7j8dFm<1l2B3>YhUm9^+3zq{%
zn>H!}d+HJlXQLQH*b>~M%ALKjB-uzFkXweWu`+c}oCr4P9&TNaQ{;1?dD|~ECP~2#
zyno!oRliXfXjs9W%H-VD7x;B|IY=!7KsE{ID%-tTQR-2Q=Y73rdP*TyH}GEOzkfBr
zhGTG7Z1}h#CjMKtO>PMn9oWzZIfs4M9^nLUQ~MRTO_U;*R(FGK^4IL`d4x?eiDdTh
zfvOIF`9uE>CHNl-XY3O@Veht#X=$H&5`Q9e@oJQm<9q(3UXII9dD9fwO(m%%!SHmR
zi2eVBB>*k~)or7R1Mn~(20d{J61GE+CN^H|tN{R2WU?{Eb%*$nUJI`Afa_;`g+35E
zNK4R-RFI$=dspcF6nh$sLBHW*bm7Ble*3mVYcbLzW3lqJI=8B(@hq3^qCf~-cYmcu
zy0lsqNJv@egDs;b488k}&GT0SJ=J^2zmsjz`G(>lgO|N$?Qgg4$`Kk5$1k$E!#7E}
z(pa9`zJGH`^#6{k6mfJd0d{ypL|tks?E~o+8n7{@6ta_ZF&7<saho!r|I7(f!aX$9
zmO58nJiA<eP|<fSx<l!%avuVFaeoTr5;&FBXi|TmbZNYO9Hxa<8+bIsx<sO9o^0i$
zabsY6odGi2c^y=b7hs23{W~_iH@V~ks!a0ikOQRRE#^?OmaUBFnz2S(QT=Rwb&))Y
zpBatN-?cK+TBLe_)F~Jf`o3{Hh6?|M5BzwTg@-4aLXeTu)9!b=!iGVYAb%G!5sjA2
z%|5&@y;!jYFf4J=qz^P!;yMc9xhlXQlHTGBV_x<Pr(KxHMy^xR^KjVJ+HtR{mUnKH
zyr++ad)Ob$vIcWh3}KYnMyp1*@zpSRygnI!H4_y_z96b~n&^+hM7b#rkQP34Dmv*2
zN>`~t>@J``+PL|#ZfU^VPJdG*#h@X+QsdE!-y8$7k(t>~Ai!X-y%EC42Js(ocP(p>
z&@2m3CljdWXecM|$-vg)*vAe?(LU37m0(s6ilgJ`NWmQ$ANbbRmm|qAp9SSZ?jt2s
zWEEjhUZU6JVI_)kbeDPM5HF|~K1P|0{$)G?fyZGQK7#ytMWGZ6Rew(Pn@qzj6H}~D
z(6;!#Y;l|y(=@Z{%+1~?8bed%%+b~qVD;RX))sSpvCu`mu+bDGkG-#^!3T_eR~NqP
zFsp?k-|rrUK!Q+$i$VF8lYRP_5x48Q#n+CP_YzFEmUwL#$SF|NUHkL+SC<PhFzdR;
z%8=3n?l~WJjn_LMh<^*<jD;<$D!pucoFd<_x#?&=tvQD;M7h*#5RpQHAX7-nVw~#F
zkycd{1JZtUkjDzOzH%)R_WF5~g}U7vubPfaWNYy8RZ0F?Bhxe1XD8F?s48#{v%dCt
z5rG--A!~aAIa<NB@S%Y4|6fJNrcNsXMr@UuF0F82lMJ=$Dt~_<H_4fUEeAVE@Q{vp
zhH<SD8~YpR&f8dL0va1iFqs@G;_YJq%2_|<rjiRlMaRB22fER1@G_CR<vIC=fuGd5
zzlZWS&tu;eg;jhB^&tBLKr}OA7J;}$Y5O30!jS?j<;CP!e_#V+y75`)o34$28<A&H
zluC?#7j`_drhjzxIA|bXmS5UcL06m9&7a}gGmY{Y9@6d&7N4WcSDAm`coipYKgl~p
zF)vS~0)AnGo2EJ9ccyjzlh%+$YAu=~QUKLP6G~A<G?9TgC;)yoWi>0Bh{}f`?b2LQ
z+!YZxcD*<<-}c@;mgYw&f>SMTv(Gk%6s+&;5g3Oce}9h56^kakqKc5wg7iAf82Viy
z24>EP{m!swl$F(J&P(GteuaNjsedI(U$UkP_~JVN99Qb>sB3x(0+^AI`eDh<@AKqx
zJ1_q<2lmr!b^|Sl#S-$yD7<M_{`KMkZZId`$X*RH*qK(5ZY6>;I+k#qNJ3MWO;spT
z;_woi(SH>P!PGfpq6s2=stB{82};zk4W-uBgtaEFSHSYHK^5opJ2CrS!C09<!7@g{
zaIYp9KYvAFO%E5wn*e5gEuI-d7kaZzF8+YjnWRrQrhUQ@AtK!&PMkA$mTYYY{+5*0
z^p6dSg`ImPHw9UsNRcw*XCwb=NKTECu>tyq5r39PJjH>MZrIuMQ>od$TNik&2!kDF
z`-}s95!C3rDljo5oLTOZvX{T?lAt=!k1QIX(w#Y!r`9zJJZ9eMY*55KyVUb*Qz>6^
zji=IB+enlhFV9@vel+(py71v<8X|Ip-=Xgb09G8!01@feHY*I|(YR!$tg$ouGEp9B
z-hc9AIliX|RMbVhRec7i`H<Ej#IdV`kZ!fna#@qfilI0XT#c$#KS(Uq_zl8{%+$1E
zF!*ble|Xd2q(8M-I>rYbLobm41@YP$_ZFZgV!4}4LcFwv6v_u5N;M)W{<Tfd!Pvjy
zVGVjs`+d#x-rYBVlUiI$5H=~ZNV`*c6Mq6_NC$bVWEYmh(du#{TV@RJ)y&P@+tq|}
zXBrM?5`y?}3;rIca(|=(*Zp)A85~-0z<&3}2>T@r{A_%BRXqQxU$s~f3aR3#<Kb0d
zp>VR>3ovig$bR8rRql;yyjd#UKzL)j{<_`p<(8F1c}oFE0?w0$MtFw&ifx4$4Sx@1
zT?Q7E&9dD9M2-XBA0z(!i*(kG4LG`rTWgj_z!_I3+MZ^j;A;U69P7k97`TgQ<zD|q
z=oB8Uq3ht0&bl#0Xg%s5KHJeqF|(*}Fj&L?^jKTzI+f&_z5tdg|DSyxSgeJ658phO
zwf<4FvG)fner~hLI9Ak>EE9%O&wrDM_i`C*ZGBUBFBONE^NEI2FJHY$x@Q_;O+DV~
zjQ(HWJwHZ*(Wp2jP`3FPIu^k6z%6z-{#cydB?IjyD#6CkNa|g>1L)u6OTo+MuXYXv
zq}b)**J6mkKjJ94_8*BJI+OS=_mEf`m{+_-WEo7}$GR8CLW1D^jNXt{&422kr$B~m
zaK`-!^{ln>X~ZYKUwY#UIn^TyE}QKDni!9gVW$?mE~Qa?7tbFRj^=9fb0abrKN4A^
z44lMEHzs6#c65Mn(9xFl!c)9f^%NOsrT6*)mR8<Z|0(qCsWgq&Ibi)9G-DmA-nm=N
z&}@A0naFitqT}i?tKAzw%zxOkt;t#&%01e)G4qm!>G*sDs?Yd*=)hX1Wix<<PwyXS
zT!l5E^_25BCxnZ9nKk!y`>?!r8UmwtN(mkX<bty%LfU~rL=Vu{lkd|kMTC$+TD<`~
zbNRhsU*{r2y<46B(gFV@Q@%h)T?$)7#PA0$+VWNh7ZVo{++IY&W`A=F6!xkY!d~Q&
z>T`Wq#&#%y9iv?MhZsGO4EL0YQdd;fWl`a?K5rfm^?fez?EM*lS$iu9O{TES`2>3O
zSYUBt@|Kh!aw#DGy#jcKbc$dOqoYs+-(X!5i4rFuZc)^w3i>PKqQ9uixSf62iJ+$J
zox@jA;UndAyYwB|VSh_S`p<3ov3bt56Ae;ItHlrb?PsPAJ=^isYcF#fr!H`B8?(*c
zpN5Pw_nGo$#>T0F1epPfAtSK{kEDu+A`+KKRiL<`X2Sxx$?TV4xQkGX(D$}!P9K@t
zlB~g-aSDjc(A@1J-$e8J>MT8(KH-}(`U$JEKx3E7-h7Tx{C|}w)qu4fS|^Veu?82!
zwy$-8pA?|O5$dLwm_T<*y5s(e4c{0V9ALID7@y_J#fB^S#s=Uu6i7Qefas+2RC$}q
zO!W(n=Zz;`_H@jEe2dDpf+XFVJw8(z5VLYG@NH&=BxDWph^pQI5Ari<fL)=0lhDa5
zjQ%{Nyj$Wq;eU4}YF8cT!qY=y8xXLFd?kb4aC$zbHvatpYm&Kwna)$3cF3RnaHuFU
zyo*zP0#l<}7Ks8|@(pv%m&a0*(%QSy-t_rKKQCoL2($rmNIoH>MmZ3|*cf6qiF^6d
zxPbt=HGF+Szn_*v6E*fTye;}mw1TRw%Y6DS(yazk6@PCH7kAXRg<uOuyQ#3|#Qz(r
z8J_6kxg0o$`v}Zw{Bu4~au*k2PEf@Je7%M!X38F_je1o}@zz6H-K|)bHyNL!oS?zu
zF+3RJ{83lok<ROLMJsmZ4E`Z37S5&38My$;eD>&ODx{f92*%(9w4qnPX%oCD_=x^+
zHZs+fUw?4YkBQ?$!VgqG=UmG>`iKz2hOt{U4J$`b|0Uk1@wer3o-dZrFaX(Io1->Y
zt(o7E4M$WR${qC-b1$^b(l%30gwYe4<?HMAS-j+4v*1PgB;5hfC__iC(hzj0FdFhM
z3M&x!ywu(CdOED{r~#0(U+`Xcr~th-;!XYRaevoLFLf(Yu=;YFvyrWsMI$`?W}PiR
zU1p6pK5w+U3k6s@!Ke_e0QBq0bg`5W&R5#wvVvamkjAG0m|9|*$me(}$>SJJ*Gsid
zGnL#Hj`|hGqdhyOyn%T`pQb$^zkgmq4;eoDBb=0t6mx?Oc}p;tqlT^DS3i=Q;xax<
zUw_y`hwtVB=*kb8V`jIVz>hK{54#EEW%o^~k>dAs{RS%;7h7||UV`p|z@8_9kknpu
zVNX;U>Pz5Ed1`L`Tq+~bkRZ!*4l!D2zISsk&lYdIiPJEj5;7@AxWhI1l2g>@J`KH!
zunVJG20aW5d+p#xCnPjN@TJHG`p~nWpnv>%`Sxox3Q^fB`KwD$C>&B&^y7o}Dk*8$
zRmROlLx};(n%Bkn8Z<-B`idTnXA;AHG><${k=wZ)uvUxrEwJHYeC3Iaagt@XMt>?)
zMwGYdu*<l2`>CJ=xi1u%(l(lz(s4{DbBUGA6tu-T<~$fN@WO!;y-Zp2-N$*V5Pzfh
za%O{ojgq3zSQwsoR1N`#0$P#$%)ps)ZNdyzrbZ*5Zs|FJ^NouJ-8v=f+TN6mrkD4H
z;U@rztPn3fWzuPQFsGZq?EWxov+en^v8z2>HoR5}YOn?6bv|B_Bs~5o)i{v;Vd693
zf?mCWN4wYE+h=;=Lez#U*RUqlJ%3$&vOcLP0m_zK{sJ^+wvj7?5C7GLd@x+bkb%5q
zn-B`^QZPwID&3VQK?v6%L8gdT<&{>fc|N&W0TZShkE2b~A8Jwq{oG~4AZN#l<3DQk
zO#7X-_CbzjVoq_XdY=th3|pz5-`&SkJYl#T`n)`63kVNb#_mHSB(ckGAb-vEiojfz
zZv&3&YT3lV^binT014F;>upSgl+Q<u+U?p+{GjWfEy2S+cF}Z<KoBO(bjwI?-MGXw
zm07)#F;_Ex9asymjdn`+E)sSjWO;yH<S{Sx*x-X=wq8*#GfNB>a%i&GDRT?VIM&~a
zXLd(*+-vUAb|zB<z0qH}D}VVZ!^U><9MU}W!UGhB(6ryn1MoMIS%u$u-c<s*T?^NA
zf^pZcR^V>K_Ig6)DJx}7aH6Fx&3^X)sxLF77Iqg+1<vR`&A3Mz=GbVfLM~k1ek&4N
z8*W)%u`b2pes{mMe)xo{A#T-`3&(MOWo;}FkBfg%gcIyZUDd8`Lx19^F^AD89v%7|
z6GP`u?uwLPz#-l$O_|uX=<*+YnJbMi;XC>FCrEs2e83clEdTYkkK4oYE2JJo4NfSI
z{7mPVOV4Rlb*a0uOWArmO9oFd$manrm75%iT}Gmk%aIU~-{;=T@q$1G2IaC9JZ7U`
z4>Mq!mlluWw#Lj2i+|&^k}6#^m;>#Wz$Dy|ez-agns*2%RAs)&y)6a4e==wpIOR3T
z(E&T4YAR}jzt^u_rbblM-M#giPaOGYWEYRi;z%OM6#9@~PCJ>>y@Me7ov0~&P?LMo
z$2`5gU*Z3jG?i-q`I_KwC0I9VlDj<4AW((mlFdZx-*MY9L4O&(bbEqYL~Lm1VN(Jv
zJINUiHp%FPbdE$&Q~<gmAf1@qx`Cw_zUbJZpvseb^xgXJ&xtSsur)}rxxKeNHyO6d
zru3VisM_N5$`d}n<2A17h+%h?C1vRJ?e$-)q3#g`A&hE=9s8qr08k>!<Y=9$$xq?(
zW9NP6rf))>7k?~wvIrsBln&B46HjIer`&u_Bv<}}$<T8gLFJIZ$IeBxzm5;?TJ4Lw
z*}7u}-tbe&`tpP<Q+lLY3-lG>R$P_Ku|WNr-lQZ{Dm4vTc6#ZkEV##KRzOUKL966c
z=$@&u5qnjvnkq2-?DrhmRq0`ul&llC36=Ln!UL=}TYnqQ`iX5<4M9`~>-vWyR=dmM
z!zi((QWEf=aZ-xV_d_pzoBR2Y7T-~h+%)<#0J%3myU2Hvg$J9tS<VQ556qg(BJd&C
z_cRwlth504k;7IMLF%%+zXsqx7&u1)`~Kx5>i)snNJPb<j>AeC6!8knWNUhlZW5EF
zr$meTRDa5SGD}^_4vDt!eyb;}IIUZQp(vY=5U9k;JWZjEumsikb%>c`#4#}DE#s{<
zE#U5Awu=s19i?uV2`xC_Vn+%?kesF!w_j@#3e3DXQBp-QZ0X^&GSIN@>JK{OKex@q
z+uuiKu9eovI#45Fs&_0%i&1YA0(rC7hYVu8-+$9!oVRI#0~5oOkB+2j05o~`1NWVD
z&gFlG-TW(qA;IH^Ebk4YZsiL4h_f8KSFgec_B#jAX55A(bYMPx9ObTD0{IagRg!Gm
zmNy_0>6gFjp_GF^X77MLI;V9(l|FRMhUI9c`pqb9fnB#;-D4g*^%08jR$kP|Oi))i
zg?|{Xvl#}KtiqvLuca0uQFGOxI0r$<4c9U?+z#TySJ$$P;juV-fO%WXQpZlN9ddEO
z(RWrD*w0M47pZB=&$2<4r!%G_W{;qy$UYezo0B3l&2@f_L9^lAX2C>i)Y453w{6MS
zMm*I)h6eG0vrW7D?g)Bg$O9X5s3t%naesxK*a4>pPa^omL}aG09T?DFeXNrig?;v^
zhMK%Y-@j(sTqKGD#t(F(10}#~Y$igV^5Z0CEx8*{$3&MNUpM7n#wd-!<0HN2%$Vm@
zR0R@$NQ5LZjoR}!-6q;`+YE!u2=K$C@Uw2pLH)?n`0>2JrySeUV!+sgF$7>(4u7vG
zcIkQ`FYwlQb%p2-E*xp2*lVm^Fp<X;tXt#rdHsoK!Iu(&ukW^UHs;TTU>6OzWi2*Y
z?6GKGJKhXOOKG;3@g3weD3HdK6$s}@jJV|rJ?w0rWR>*65=22rE}#Y(DR_<r>AWwU
z%1)lmGej@5Kk?WB-noFoNT9JhDStRPL7BXVG#^<utQ97(Ex<qyWYyshgcX~gPM?~@
z4fM<5m5Iy2qgCF_7B5oK5QbpDdQkz6k8$0$(Ka1?VNqe|<-*A}*7M7nHRrpuRv_~F
zWx-!#AA%?1Cc<MjwI+_FDEvwRFqjVbGmDv%1_?tT*341}KC)FX90a_olz+;C!39CA
zqolXn^9y~xP4NcFD_o@;FpoZkVxHjVe7RrA@^W?p*w(27_3ERb!zVoZh@v&?RW$W(
zcRB=DWpf%Ww6PyX%f1{kJ4ySb`i>SH_U!Enq78JQ><E&6K&Xk|PWr7j9u`YPzyEP?
zN5o+=PdDKp3_K45M$?PDV}CD<nfC-F#BMAI;xBmexW$zwoBaE~hUwNtv}BH#9L{iG
zv)~pI>xp<Kk~|^|d6B}IwnX4%rPm`TE|m^EB&qV31bk<qf-lg#pJiwpY76~{e?^nS
za`p+&Kx=IYeuRRjtGujeB<<JX_qGVL!jIT4t((xseUA1uC&CC0n|}u%n{F^2&9QL;
zkM&Gj>7hIt2)Usk6+g6x_kijLABFSS9W`pl!?Y~5=JjLkR2sf-`WhB2M!uqTDt+HJ
zSpr`6T2flaYD>ou^%ZWoc?bb;W%Z4#M-OM=%YvJ)*M76Wj52|9J%n-#gj35c(Z$j`
zH1S9&l5AUK)az!fihm<{tw5wdhtq;0p%)bogt@z%i;8PCl>Q({6FzQDJJTDkY1Q;S
z2t=-$Vr)McGHKE2NY@1@HNPsJ5>t+uTf^_H!ZW}CGPn=w;Z1LkTg!l^EeP61^ybyM
zZa*xz#EbZ?@Y7p$xal>Re&cnjn8=+VMxWVg$pgJ)j7v!K0e_*_aW~;Gi6l}rj60Yt
zBHVLAPl1S?dXRV=l|9r`gf`EXgI&Nh8G-D5^@D7-88G3AOtf<aQOuVu`i#<=dQ?H6
zp>#f=9`exNtPkcLsZJp|sf8U$fF+47y74ep{PRVXWNj6o>A+f@z5s)=3dpoN62zj;
zOpq{Qcp&~^qknhX2F*>Afp+hfRl}+!jUz`l92ls1r8n{O$2ir%lWt0sDLl12Q*~fA
zw+lwAt?MuUZ|6in8WVoNGGYni_GicW{=>8sWEX@!_@bRP8w;0&%Ze{)i{~5pu9jCL
z51$?PZvf>%nh3T$4WkeLZD-dfV^qe+R*F+o#=tMNeSb}#ZE+eHA+`NASi)PN;`L(K
zEy^j_UBMTc-E{KI3n#EpKB%+7KExYVCO8976+jEC&~eP8a*DsL9@?8;(2_yNBH%46
zt`kZSXdx-5xTxz7sfcfCQt^P$@MOxZW)@Zq6jN3?Y&e)ipJY8(ybtC)J(?P9Qu16P
z8+BR{=YLkVb;~$#*=*R^q373it#2eERk(Uek>;~y3qy~7RM9Heb~N#BuNkW4+e?XF
z!SLzxN7LC4eR+S@FwKQy3H+6DYC$aADbawml5e;mNc7(7(sCa>nUxMmK^kdSv}-F4
zQZKmA9sxoXZWT!4su##@VL=PZftmldK+PTA{(rb`0~~Z@JWcbf-NzEu6U02Nq3FTW
zka04X+B10<90lW#N+xb+$fBTX0M`fTo~&M$YdlBgVWPF&IN~~p!j&91RUgNkH;Jsx
z?NUb8VuG=%@B$!>&de(7AdL;I0He>WLG?9E+^v??LKqA5n<v=)We8JqWsmwlS23%j
zlz%#eEQ|67Sp3kIIc>|VU@A!VJ*2XAe4LN7g;;!}f-6FPMt2vlvdUrgrc{~n%V2tN
zPQFPO_Tx#gu%Xow*8@!iG8+K5E3bRTP0XIQe8e`(_i;q;5BM<UPPC7I1Em8bH6FK)
z{BUxjfBD%gbDy{Dkq(Pwk14@;Ner4BCVwnuan=Dc@<Fhjj^S}~tHwk34aMd#gMuRl
z4b1RT-ZWJ=q_}6A|9+q}?Tw3CYpMXOI5q9|v0I7h-_Z9Ja)5!=JdzWxrLw;yAw9QE
z+d`j+1+FZythne^Mt&i<hjY|O-|r;Q13ORsMW)$sp^a)|;S{mh1>ai&Ktf=vxqlST
zaOhE~Pz__<JQ)QqkCur1KM%W7r|`9F^$s~<W6&a=db)?JZAtwI0x0~7Ac#w<(QE(0
z<y}liC{=axxe-J@l{~GvpQ%+Fj?cw?jnP8ORBcmJ1o|#}$F#==;w~g|;Jazbwmn6|
z47e8(#BIht#~k3XROv+et?@}?TYt{`?n?JV@zJH5$c+Fj^!`Dako6C=Lz@zjp?vg>
zQx9$a;_vQbn5zMxpi0H{e|5~JviY5M@ku`*wupg$7k&#jYamo|W?8H9LM=IkOCh=g
zq%j6woS>u1wsIyFwH1_wY^w7=lP_38<bD_DzNq-oI0<J7ke`Y43>|XR7JqzPhdcP8
z9l~9_77=$PilMCeW;~QLRNn~AIC|3cF9aoPqwhz+B&{@^9mXnK@r)t!j{h2)US_Ka
z`4@jLnveCVO^1axb<x>H$Me>b7#QmONe`vIl;>&mA-KWli@DKuM=#4Y`3yV+7Mvbw
zwPT9)24Ef6Fib>x^`p<_41a^Ha%1xO|Hy;nGlwY1?%7v?|KeOxr+vx-k3%=@?;LlI
zHC-whW3DvFavmueDwv(iB`eJiW+75aC%blo%qnoBp>5iPspnL~aV#5kreoX!2l%>T
zrJ;utM0+e5Iwl}(pDBedb6x;l64S&7()QtNifCsoyQEK+6aKJd@qgE2?Zb+6`lONn
z<SNAgI0HrccAp#oM$2Z6E`Mu370x($XIV@k8uy2MYp5KZk!7@)qcU7Wa3vbjxg%jE
z<dVK>7}def6CG`;;*ZW&REgy(T_K`3neLVeVKUQd8cuq`ew7%?sV@+hjQ#qgj>01a
zfuBrXLdQ(SMPULC34aMX3}^CmamzS^#;tSA(8P!(Jo&anyDZ7pB9QaV-1n}VASbfB
zck@7gS4yigRZ&%#A6BB}rGdZ7T2*MjrcJ#S9X#IT`@K2v=P6>&0xkxnLS=TX;e-2n
z9Hip&u+X&TOduQ`!sKc>k-T}VWGP6v#J(1O9EYlC+&3S%H-E9okSZ`$TdfFhZt;ZY
zjck)Nm4Dkzvyc52W$vIs3B}TM?8x)R16MthSUwx&&uHinLzfYg0*oes;?AJgL1C8&
z^WWj@z{VCv)7N2mFe#d2ez1lCOz@2Azy{zZ(70=m2>~N2%u4*VWk7k)b*uIEHjSQh
z^nn{FlCuj3cz<eR7mZqm$~XG(WQL~bjjHjPyv#hKSpl_&Lj4ih1g)5hV3j~}H|oxD
zieSs%*UHhkZY-dv)8r?|eWGWGP#tBV?~`9v;Lix`UGPh*9H^4ja}htRG2HI%9+wK~
zw>zb1N;#5~xzW9_f&RJq?;p+$Sa#zdnGKsQAnZM)H-BP0U*<svKfR-ru-U?{YKxf<
z?ipueLxK%m>}f0O-ru0e;kDRLWA2i}+aojvg*pYmQ;*Dje*(Pe$4vlcrS1BXZ1D;J
zJD@$F_n(G+V=0J<oCDp{y@XX~?{tCRp31Zgt0*9Z<ePN9HWww<d69()%gK=)SAH?n
zCgfQ~-GB8n=RSdz^#p_qB#p^rfKT!n<2ePuMd&|(f4T(;A2i7llAas+^ziT9s?>d~
zK;Y&t%X&LP&Lfrp<EyX*f_ZvS<2mER5`}cH#)NnKb;?SP%a&XrVm_o(4USVK*4M!(
zdy56MqI0!z=ApKmdx}l<(QRUUOI@wsi2;)hD}O38#O`Y$=OD*qg7Yt)-v8L}AMVPa
zP3C$*g*C87z+za+cK~-N?V%L-PBTx4T+V!ct!Rd^KohY~fjHbxj<4mR0?qkiW{DoE
zu%JjmU8_IHt_@+zQ_SQXr(1l^n}cUI*1W={*Inui)9AW&r#}gLQwD9Z!FA1MP)<>W
z>VI`$Ug`oqI%v6BVhyy<y#C3yNdp1TKW_%JA0Jo(Q>ifjUt+;t^8EQ)yx!@btu;-;
z%4mYAFC$wtc1}{61eko@`Q4n$z_Mc{Y`4kH8*MDs9?<N<LH*WdN=wM#=J}Dx0*d8P
zjRc}PeYF<tAaeLBu}?Dc9HUpOM%aB}Eq|7ZWDlc{KWKC1>l%7N#9HMJs~V5kF6gOy
z6KZ%%hVlhnOBhoVG(%b{izL56mUe1vw_82Vr+*K_^d7xcHRkF!3Klv(=Vnd7AT@Kz
z6*3o>WdVe%>6ci@5_c1+U0rNzH7PP<Rst#jnetEz2&gG^B=5nN&?@ho#%fstUVn~n
zfETnshG#C%)Og3xE&`bIi4eXjD|D^{pZ3{gz&-<V-)a|ycYFdo@*1l^!bU^)e-|m#
zx`ZPxCI5l;y9$9jCHSTyEjzj6oFzg=@B9!toja?kU7w6ReGN##tt@2vr9$*~hM}tY
zcVleDy{O0gME^}Gj4L50J)5l?;(y&<`WZ>c<}~yJ^mw4xmlR+-`N(o!Y755Dd!7WD
znu{gwT<;~ChJ!&ts$@YeDJ5^<54sktCSmd~VnSKil1(KWjIS9>uxW7kpT6gfgS}Q-
zb&mL6x|7}8Nk&g|b=y_EztgvCUHgduUsI%=l_;@+0qEGpc-_+}H<_~Yc7N<l;wv#d
zHg3-t(OwSsRx5zMkiE-hHCTJIRxkx|O#cUBq3zNapX`pRGy$ER=yOT-6Gjs(<Gg0;
zQ=;rx0W|E97_1pudMxldB0y9(?m%o2Dff1SBeQKp^z~d&$8gwQ`SJ$dUYk)E7Y87&
zw>HdVd*Mrdx~&$p>U7zzC4aMCi7=GhzDK)%oM2@bpGF$%R8rcoByo8g-^9X*Z)IAT
zOKtk@FfFXdaMdPcA!Hvq0d<wCPofLNBcKag1i7W+*y46kt3gpzQ|&T(b2knL_1vu|
zAyOH3qA!N3enBTp`5Ij-?91veeIWS`Qt_flL#BP|i3Gdvh~WKqGJhdtWtl&ytq4|j
zen-Z*jo^I6;y;Iem~DY%^|FqES4_y_pNQfEnVRyOcIaKQyZp2P2)r<(ZzUv1{kTBY
zUd@j$8}E<;R7ZYk_rH_&o}?+1CZird3P3FC?ES1oyr3is#QP1AU6Qw^cpBS=f-f<r
zWMGW*G{ExsRV!60-G44eEl2_fXZr^TPV`zotAqto7!atXB3gtRtkq!@XzeWS?~mz~
zzMiH4Z#|s-;bx2Lh9Sj$Ie|8)wbPxbJ!dN*p79?jba%J4pAkpebCbc{DcZzk38SDP
z%+CXXsC@z^1@voR!f&UXuwj0oPp`=uRC~-fq4BQ-(m)n+bbm>XXjsn5SA@AInDK8D
zLvL3@O{C(W{QS~0XsdFg1GQu@L0K%<<_{fcrgoo0nq&h8=h)H-9XnQt`WKpR|MS{g
z`kZM_)2TBy18$Eq_3?G{TnfG!91583QS)J||IW`zdgCEFujYSq+8W)}O&>s9=egjg
zr_Wy<RGca-@_#?F<|}U{1nDJa==i<3@IG-CJl|x0BE3Sp$howos3t1T%b-=GKoE=f
z2F8Q<^p@-GL8A2cupY~MyxvC*nPWY#r}gqsfsYB9ai{5!LbTXX;flLjL=$2t%_p((
zz5pGdruf2q!#IjDSqBcB9*@peU^taX#zQ!T3e_mSW`FyL%gxb<Q$1iSLrp=U-fkk>
z!g|aAVP6AXnb|OHi$P~7+j~QD!2jW!FV=6N3T1!7j&)sWAfgPiqh4M!%KVP-X}6Js
zEb7fY=)0^uB7B4EtPq>I<2@6DlILG#N9E9;gqL_+FTfXRsMbB}+#+D$&&DB;S~;{2
zal4mig?|9JZc#u}GiyK=w{#gC{k-C105FB2%Fpa3Ve(*xV9v&3nOTH9IBcbLw!n#_
zxg))0e*q#<%^n>G0|U!k%gg=B5g`+z&VDIYqGKCCF43S<=}rCOmye_heD8EwyBQJm
zieUUVf{&9(3*`cSN7Ce>a{M6R{iL~O#9oQlnt#2zXm%1caiuu==g?a7W2dP)aaP5H
zqfA!s55%N|{2UNoLb~srITrZ-)GkD9y%+^l!>*={Dh_r?zCIVIcn%OF;!>YfDpJ%>
zMYLwf^9%3*saq0~DnKPt({20mjD!K(kp-}G9u}J+Y0AaiLe6&(&kynq2lTEpt2PX?
zBY!R@dl=32_$2qxmvN$NdIIbnp~2T@X1AEF>5@w(>JSk0d{J5fEztx$`pJpCO9&8(
z+6Bv5b3jcgfmvkjgfeWvvdZ?iYWd@ihE@v=2OaHo)_%|sh#H1!h<YU~$f?6S7Xq*+
zp|*yJn(7{k!t@wZ&LqXc>HlR885tE6&wsVFg<cbA`-!Y+#7<z>7Y<t;KJ#F;&3P$P
ztMKr?c6EE}mEtbj?;8ef5eq@6Q7UZfLkRO9H3*cb_;czVhT%v|EccD0Fn)~nZ*vAx
z!;Yu%>yk^Ej^}USyl&_aybEe%@YrZG5H+`f<)<yQBkr7sT#TOF6)=m7Wj5`l`+vYA
zmcc;I7Bg^qY2`Oy85z>0-4lhw6N}S3FF5Ro@1sb!EdOTg&E94{J{I*EejHLb2`{UE
z!PmTA$kqWQ0>)3AKV5-A?+hYN$a)k#N8p2>A}R4GYe}0$%Tdf9X^ENA?)ZdiQ$4x%
z^>JV`Q|!`3W9@^aJbPAXV|1HS(0?c0GtIG(`zd#zi7rryzi#ZGKm@c4q|?QXOZoC*
zDhsA1%~xl(>r2aUKr?8)D3L#g<k5yp#@-?7POcWW13M{Qcq5!jylw*l<;AiBf#3Fd
z9XWu3PQ;pxrWgOPfe`d;lst#E@!$+tCT{+eivZ+7i7SWL7}KxtyO+gc*nb7eCCw2k
zbj===E+V$1QHDmwZiRv?M(6Dl$!Kq~vzlrr|D8UHFTNI{_I@4iPk|oNpL|D9K_Qiv
z7V6Ln4cu6H;>wU1PA0hda!j^a{>V4MPMf;pznkOnx{EHVRek|kJ0ZE*zK%oAB*=Fp
zG+yA_(MBuKUqWNKD8@=XI)A}OyoEt1imU`5y@N494m5+*DHesyN`hgxwy<AWfGEB=
zw(pqz{A_P_rH&rzT3(>ZZZb(J#;ySKi<U;tm1<<ad+DQM+wrNyYJ`4Dtw!^k?t&G!
z2WYBERm$fjgg2>gs_&hV%%cuXf5oX9X4f2IbfCQ)&RI8-3;|&j?GIc4&Q2ALOD@JQ
IumPF1*iF}qXaE2J

delta 11666
zcmV;DEp5`Fe1Ke#BMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-04(N_c}g4s
z6aWAK5O8UDX#fBK00RgJ2mk;83}JRLLxCZY-!6YF?rmgYbP@mx3OHsb7@G(PXf%K_
z)magc0frc1K;2JDZxZq6(A8l~%AS$<n$jtI(s%f!g6i_XN)9sT{ZcdrfVJuNb^#E~
z?1i5O8hGF`3+ie}!#Dmr8ndG}=I_I^i*Hx_V!c^YwpH9+B?y@aGwjo$qdFEB>Zvv^
zbM$`^WUF3|0M@;xsYB0#!XKkZ$SmClkf^bMYeY|W4Te&%sS!fAwvi5MlmlcffEdoK
zg%i9~oDEqy3WJ!*D+F{T9WGJzP7v}!coT)d`qjIv^J|B8W<Bz5m63R^m|K%GlzNGZ
z{7~5uqDfq3o>hmhh`4ZA-(-<{_ZZo}$fJMKP0t2a|58r@a4Kr4OfAslu*NGJSN>vk
zScVaV5C)y#)U^^?U+qOf1#P)iTGo{cj+KuJphKb?8W|;srXEiEv}l3EzfbcsyJA_C
z!UsZuIFo_yWFi9iOEO8os{?#A$*k@k;iGWAulLN6_4ND>Kf|D|T_YK;jpj`k=TLtn
zWDBNoy)P!KkdHplszHGy=qBM)ndNVPFn?clcMEio0ywY$q8Vm|#W|2>>rWTE55D0C
z{Xl&>P&{rUij$IFAw6(3PHJF`)VFN@Z<(eY{>qpG+-Yb_uVc)q%;-_fM|^98nJxXO
z!5ah&d=SDwPc_I)gm_oo$ac;(J9~e~J?d1=^hWVVQuL&ymweb_iVY;kTwJIjm0OK2
z4aI3ImuXVpEhDdQMjwWq;|DHNONkePx51`|p0Wrk8h7}$dNGjYpei$p;PLlg@<F^(
zf<4CyCXa4s57s*8JQiQK1kD81p7eJ<7S<cd{YwiY5UZa{pF=4osqb;hb3T79oW9wL
z6o3?ys?ADvRrCjX+%Axrz$P!P`Bq%k7<!9sczh(dpK@egzaT_9EaIFLCDsF%7Ta1b
zmt^Gw@4OB~xOkW|d>9!*-eH=@!<GMLq0kXkaD7{{)Q8L(zr0;@Kyz21v-xf-_|?Z=
z`#I(Bl%S@)+m9P)d?u9K=w^RB^(Hc3#e#t*$Wv^g;gS9!8V)erq6;s+JASjE-?7V4
zvnHV?uDN|;JmXM9tn-6JW=48J+DTB5=37RA4m<FYg81)S+J51h7|I^Cql0Q}lXRh`
zd-!XsKWw;n<ks#gJ#POe@9zM4pt|!ZsxR%n$1R&VB}EVR(yWG-O!0pkvnAq`Ii}w2
zI3dW_@$(t0(a82FGF!Uej`&aIG|?*x&NW-mQx}Ad28j+-1bE%0Q=^&7vypNh*woBy
zxmPVmm}fl-;#>5I3Y$35T6X1+#m_!Vx+J8vFOu17bOh_}`2ON!Ck%Pp381N&QEA_{
z^=o_L_B4LNJ|EmaYsY^DI1)ZC;ss^~MzI8)lpVt)*YQO!**67U)>Y+2>401>^$^#4
zxTm`g)O_8I{i_8+5i?HBm0k(!K@IZNapr!Zyp|(5THs#5p#!9SvEq|oBF$|IFjean
zjhkb;O`zgAAgosQR0R`xRfp7!IS>UY4S<6e*eXKwU700mRylu6{q?rbeTxTdX369_
zlT<T7*G?_eli>PW!%MZ{CYPEz-t73fO-ZvxOD<{Hh}EDYGl<&ZkOTi;N&sp-C0~)P
z#jTKUeJ`{Vg+0OGM#b%AN9c1Sm%u7p9q)QQtT9M*FLKfgKRB*&=Vn#-n;(e|jdO86
zGFSlCOvwR0P&|L`)2u~dW;yNG_snOBwkl(J;nCj3wx2VZsPr!Uq#t}D9AVF{-LBj{
ze1xD2zzUj%oPWfom{i5+5z<#BBEuKcQ3e_$fA-xxYDG52Mu#r;f8<Sshj_7IuoGo{
z7d{6)c?+Y0MhH!{Kq=9j)ZRv;$LSBYD=b`A-|ROhjf{U)1I~KHFSL>C*0v))cA8Nt
z$7_Pr_ac24riA5)iA?4%&CZbulVo!1*W0RbC;|9fR7k5&3*um<V%fR(vf<1$#Me^+
zjTR}(9Jj+9`YX(mU@FvycIUgEzqhBHRe(UUbU+7ZKo+&qu4=3e8$Y)~bh*`R@lKPU
zLsq9Ob-{mc{Evcqm6d*Q#}8^En+QlvydwPbfB?X~S?+=X`v;`n>oBZ=&+!M9c843W
zH+P01(aynZSvQZ8(u}lRo5xeD$GcBQss-(APYMQn^=B=~Fv<qMrI3X*PI6tar7Ukl
zC&C!2gJ*D1F!XL=+BX2;T8RIZH_N^KAbSOS1jm0gvc3fCx|TN`1l!5s?9Y)80Rx<8
zG0z4xw|>uzQo$GQ3bk_1w(JTul`7=>B-FM=%c@H_E)MRYv=yBLI0F5kJ9yq%@-R!}
z((RhyR^dQ#OgpRvO(nDEk0nUD*xQyV2na_h6FXS5J`z_990j6Jgv&%7Nvyj^HO@M0
zE(L!B)<30LD8<l8U|}dRaLwFMmdZyVWR{#q6^Qas)*ZN=lVJ^ykT()i+&EVh_W=R;
zb(tcJlfjC_J``6rGMO<sTIFMMk;kn&(bo-yf_BttzRwqaAp-f_Q^a#i1it9CY-@jq
zh+x!;FcJ1z>Hi@!pro8PMhI^GYmd2YkL-VfY27QxP8VoE6A0*oFm<}g*3_MQI0o_A
z;j}Ifbqa@FSEj2NaVA(W7qO<~B&yS>@k|}$j_FlF;s8azD@4c2T$hs*XOz$;ca(Jr
zu%^+=PkYg>_Lj(dtQ+GtW04%qSPT5k)HaZ8;C%cF#(KTuhn#pK+Q?Skve|d_Q3ii%
zk>=6GcAK|cLt(64CW+CyN41xJ=y7^QBe?j7>g@^dcGoRU=Vicl69s<-Q$wpL8GE_P
zx1~EsG97t6C^uvQDA(A9RrYrppB6`P8bHTKBM`v~z}Q5um=i2n1uJxS&~yu#_Q{@X
zE{q1Bkj)#d_J72$dkt@JKH5$aV(EY3r)<f`z`#DIg4E&3LD`@E_1oP4sg?m6V!VDV
zpbW`{t%OD#un3?LJAy2%OD^Riyv-X&-|cXwwfUR7p;1gmUr>S3IO*t<Q7FwP>zLHE
ziJdY!*p$XvnZGXz>no3xX9=&vu`{E4tBAuY`AWQf+|%ARYI5WYGDTtp$@hQ7B>>Te
z!7An!A}{lAjSrr%E<*xTJH!a+!Lu~2-e<gx#BC)a<$ETfA%b-B%-t{%)@`AsR=Y2}
z<*lQ!r8>G(m`{Tn&l>NMD6Sg7G5mdMmkg7SprN?#SLSK{@8iu=>)j5U<Fo#rWcS%R
z{bBH8*{LzsI&<^g4Y<+XrmlaonL-hf7;G<dssNc~0$K3I>M>mdw0qU&yf^>Yw$UqW
ziAcDRmifsuFeH*C&HE@iu`qLv0tB!jXE_B!#Gi+YK}URjRpTOQydGr*rwA+UPEAiG
zZ(5Fts3IjM8z{OLCbk@=*IhRjT6&xkpqJ5{N0A<E1zX*c<IpCWuuFeWxBtbp?(}+z
z)2}~yI_DqxPrd-9xVr3&MN`rFJlwq?z~VH~CSLn)LhEMap!~yM&2}?(#)gxMJ~PL;
zkG&7+2U~bVT%X%90!2sW{5mQ>_Og3sR~$;if5S2sLa`ss{>I=X*t(+g@9Ush7kCnz
zClC?1WDAL#0=aY+*2sTuc@--Ubdy(|PXPP}1c2dImtiyC4zgfI#C7=M7=5O?NE_zh
zykDc~{alZGg$MY6fCwK!hD;V~b-Q#O#9Pdr6ie%_Z?gl)xxqfnO{;=Pfam#x1sEZl
zEzuIPN`sQ>Od6kR&QmRuk3hsDWLGgKX~fb_a&$)r#ch?3^L~GafWNGUY%5i_6vu+3
zPIM-{XYgqT{_r|{c}f1lWWV4OGWu+j(UBt_n)oV+t;vPnS+GC$6p3-n_tur(odBj+
z%);FsJeNorpyUMWktFlT{@-o-w6<qk)T~WlmdfiH%>|SlqiLL4h5JP6u|(^i44tNg
zAF=Hkea<&^xhsEfZT67o`a4}*pe%ZBpLxg&?Y)j$mzUE7*!*=IYO>|T{OcQoP04t=
zxNf*l+YtwvK?{wY)7`R*9O~O;eHiOC2?@s^(ys5Cyo}?hRR6cIoKgl2k#?;V1o_au
z$8SzW<Ut3InIhorT8|_xwt@<YxxD8!Jj0D^FLtrj)r5be5u`?qYZlGX8idlgh1;-v
z4nIA&@<|~uq3(n)cu1%JxsxbXBHdT#kK%X`mj?@1Hi%*bUn9v+#=9;4E)iiU#RWkN
zJj<PDuMFhYj+02gZ9(m*()C`kHGByaFs3s&qbI)4%VtwLqRgqq+ugsJHy?|)C%`lA
zpeg&1TMmD8p(x3G30iCaW+`;p-Yq73p*_%x2N(QTGg5V1Gb{obxQU}9GMDa%zFpat
zaX2M0eeWMm<_XkA-mukjw*%{!r=Z>ZNeful1EVgMvgzJ$-Cvs(MY&$cC+|7s-$T^v
z_770NNG`}5x~`lAf5%!*qMiLI0Vbj|hi7#<_aJ}9rf9}me=Mb0h~gvlmS_7TskdmL
zs?^aaUP+_Bg^()CaQ~9~teAqWBcL9@+)PP1SCPIIYIO?pB*^!^?15n#;6P?|hASop
zM6e%&!7n(0m2`*;2KSSyK`vFog|a{i+2c`p7$xqHnE#7fKZYT?^cS<A7$B6L(EM_J
z?T~*Wm<Jol;ke!9mEA@h#pCPTr}eZP1&;OtXyH_TM%N5wg1Gr~KQ1<6er1%5s~5dW
z)`$=l*oO8&)SflS0ZPARQ~5*#uv8o?uHei&wFTw5j_d(WfrM7n4brm^=m)Ak?Oo@i
zl6&b^1%D(14zVw~`4B7PGzsV>qFYN}I2M0|z$#dSgd72x);0%rUK-3CU&1Sot!y`K
zW@l^K1iB1fltzv@l!oVQKpplaI;MXATJ}@?#b_Gc)Rn>5;H=8v?ax01**5rWx#SE>
zs8pB6ZkwD43DcgRFHVf)ZlEF!I$Ix6Jc)DPd;P}@6TNrbi!Y867Cs#sj0lS>VLN{@
zXLoMlo~i9?LyBOLdD4WdTjEk{#=b{m1IfTpRsAfeM~x<5U^do`f$tPjcn=jv@kh_d
z+C(#}a4-y#P3qh-IgK}5lg4~>){(mCS>q^t)-5k|jF{81g-|@LsYHKX(Y1z8<xWcc
zEM>EuV7un5KWj)BVOVXYkTLDObUJ@y<Dc>7s0mXWW^EGvUs*GdlaL>v<8F565px<U
z!EKcnU)X?!Yz#xwp`qVaEKamgB~L#~7-9#!VO(~=1kdQBVHP}{_&b)h{{Sw3HgdiY
zNCp&C%4ElOeB|q-YsF$~sv;$IKM(s4>yLdESKF5-RY!$rnTlF(ED*4wv$TH^dsYn=
zf=YhZ6!uszPlmS1F{kUOd_vP0j_F>=#ZjPc5digB_;J-bw%>Mb?F35oz~rami-2Fq
zi$zjqb5h#6JmkgdmgcA!pj((M2L@FMH0790yb*G8=BSm$0~Gbl;cR8{fjZ|VK=)nT
zhDEMHUx!IkuE%}?RwiHRUR8gRbu{gAN6fl!HK3X@Yl~p-;_pZ@K-l%2+-Uyj_)k<G
zFzX94^=X?zI;LPM7z&jurahCb;lJ9rH3zXyyp5IqE*l;2&EARUpP}G!vCIBQ>`xz<
zrR4(I^sw1LUd{uik+bW2-(pm%at;2c_yUr?K`Ir%(1|`HvpBg<#(;le%v5eAv(m7%
z%G2>=k!DvVuZGL@HbVHWOebQU0iAO;cts(P-<#dq?6e#kcpOU(l!PJ94}64+ko46r
zZtJ=Bp^`<*=MnVD#Whm}reNDm1RuCQbv(^;8Ri^^ylXBRm=k}Vmp&&~R(b=VsYYi{
zVMK@vF1j?lT%s=I5D$MQ)NY^-Y~qj&fnFXu_z8LsJfIu6*pD2mMUoBHzA0;ranin#
zsn-Fs2+>7s9tdbTrcA}!YG$42sEkY8ul}my2wjSO-h!ZF@pzj(Wx!m$&7JP6RN{9Y
ze|$*zOM4b`(anvKngKj7ZTdPI-CI`5BVH>K*r26P7;)|(ar=LQR{TwHv6@SVPpM#G
zxX#d!0Itv5%A87}+YGsn80h}}LBA6xJ|ec2@lrLGy~aFl6M<`Q@!iNy?e4i28+elR
zmeqxuSk$^5L#`G^al~)S3eS2qY;@>jgdm)y*dvq<T7auCSDXp}t6GBo>L~9>x;XT5
zzJN^4eax8wB2RxJQRm<%JP83|<?T^zIrhJKkc}gTEV_)g0}62NnFfz(L!Xg(hJM{o
zvse_V(#MuwDwSFwrnx2HE}o-Le*^x3uvs5i3$1(C*5kEM5Pu+AVHN}^saeAYoO7nI
ztgf)x3jf#{gmfsxoMd<T9fD>-_)UAzQ1_d!gPL}m<obVFM3zsu#YeMK`!dz?YRcBi
z9l|}wh*fiE;w#@ouDDxZv#l?b%Ua^x95a-ohrC<~Me%zwiDxih&X%?8H7bM~JMUI>
z-?DOAgqp6v0jVdMTPoq;cbbh4-{C7HF0J9&seuX24on&pd9mku2_-3gKf3p82Yi&*
z!AJa{{DFUNrzJYBJvh*_FE!sbX?140ZAKU?HIqmPZxq#%brRyyxd-}>X45+a%iJ?9
z0Fpj`(LL|bfCd0By2J}O0K&Bs;DYcz%dq1M<PX_aSzwJI&IBT@k9d*p>nm_o=>pW;
zeb5kmq{766nv?LBRd7&{wzKwF`5Y6J8dmJhlE{B2v0~4~;b*8pjS(8xj@j%0i7wdf
z6?Yy<KBw`9sE1aEon}8P0wWMIyK+>N3)z#xs1$#gUqDB1Df^a`uLS`Jh-I|AuqRAj
z<}r{7B|3t!-zw|%R)&6NX(G>oRvD;<PO}15WMA$WGf?^dV5Z8N=&yp%qzODiGwP*|
zJB@!XVj_d>Zg$sZmc0yv=gHHXHusx$V>ssBJv*41^Z=n9H0B%0I?ohPkC^L?@)Sz;
zO#Z6FdTM_Z!X{ux*|XZIM$JAa$d!mPRynahN|XpEJG+y6^nXNbL3XnTpbI6F-!`7#
zj*#kpbKRry)@Mvgpw1DY3H-cg$El6ti~@gCiXhw8MYm?Pl0%$@A09H#WZ6|aBQ6-)
zjh@$8R8DW>#9aF*+DEtYAj~&JxviKqk=BPmawtJ6cYRQ$6x9mk&rDhpmp1)@KX|ec
z*p%&Q%_s=8fA^wqgP-nhU|w7Y?a7B0`Zow0!rC$P0#DioN!4+<cUkn8^n6iS1gd{b
z9}B%DH*!~Ao#VOH0i$q4&#JPPr`d7I%8zbAiaibt2Jis2)CJ(k>F)*I=3ebSI|f_h
z9RF30@rV9o^|_kY$?})h^&~4CEJM0$pYPL%P#l7SU}U+_+;7qQ@kV!xlA4nup?=PL
zVw-G0q;19It$&Ojhy+4~#lX=?FtmS^KT7z{+)VucLegxJ_1*h!Hb=`EphdMyV4-U2
z!*2v8qCex@zqYE~^-l`np6fVei62Kvz{$DSfY0+!-}4h_JP42(q~voS4!gG(VMBfZ
zlAp|G@=lKjWd-aK#@^7muVXA#Gch-nTb#<@(V2Uk^H1ll>_rWE4U<Fbti^vHlNtY#
zvZHIYr(#smuNYCbL?%L1T?~7L%2mY*>-ofE8QMbaa6qS9PrZcr*N_5KC_;z`=`!i?
z{@PQW90*VRJS~~R<r9KE7tsBTi`P$fKQDZ!sS-P)Jr(({dMLlb;E+5UH|D0@y{XJJ
zJ#UoXKcMffd7wChQ_1$ohu?qnd=>oC=d_ZkI>G66c{8CqONp0j^RgF^dKYW9W!r+5
z>#tY4yb5bULg%&?Dp@i@OtemN^$+AZ6qw1vq>=n|<o^K^;V2uRDw@Uu2o2wkg6#fr
z07a73y&;-3ytA}V3f7r1VVuDrmeCGG&_2z9a0$n(3~)Y4MjCNco*92|6Dx{60}#Oq
z)9TE|9fxWX8NW>~-uIJ7<uD{jO%P3HIbQG>(Xl3K?X>=+BpEm4kO3rjFc~*@oN+PP
z6N`=Jv@BR>G<*%_V(l2QHF2Q%UC3Z0YNWYqTb(54&Sx1y2NN7I;5fibEVpd@Ls=b=
z(dMBFZGA%tRv41Z-YI|ZD!@XOeI_73J{Cc;T)8fXpH)<wAx8fC%fSu$BD%3a@%2X<
zw@U1&6+9%ZCXW|)K{Zrow?mlHT4IV(%ou=Z8msy)zI;t>kL`o$&e_$eFeQXrPwz<P
z^*YcuyY|Mxnk`0}gF~rqi{l0pQ49^OHjd$=452^OKq0}pxQu`OXB=S)g!6fNIFm~f
z{4|78L8fy)*zun;@8*MtCzdp-G@)FZRk`WW0T_W<Fh1W|0eg@+8X$B@fc+45<fIjP
zCT)iyp{wDviT?-IgHqwHIhp;&u#+bvbRQ^!m;U-;7HxgzN(BSt9iG66mRpL2a|-5G
zbs{iO>*O=SI4pnn26Pu$MXpA3TnAIhfLcX*{^vK>UqQ-JKW~Xb%yr=&Y+>Vz4S!a(
zJp7eu?)g9aCRi}r5h17({J5Ym<mDsBn0zzyMYoyT-Bp+6l`6BKpbZQDMQk~Og4%6&
zaG3J$Ij7~dYl`YyBu)1G!{mQHLaZ-_;(5v~E8S>#hyj0Ae#x!rF8p4bk4?))-Re3K
zBEIbQcqnnkOvV(6#*sGic4W!`7=Yms5si(mxg+%Uzg(PUx-ayjZ}LEDbBz=NjcoE7
zmov6H5Ikd0rqh~a%dZ*!#w1Z45@odD33dU%j!y#&wTbWF_4Xk}hJb<27<h^c%V-U4
znaWzOO#gqZvU1v1`*K6PTGPk-K{G2^rh?3@ETXV%OO$r@{LVW(?yl|T7WTcMf(TGU
zC)}7c_!Vr2frIa^5mu=r2ucyP^y5C~1wK&m1z(`e>XOnJ;k=cd;2%7zJK5?e?^J-o
zy0n*M&PdM8U;8^mZ^3bwMWs~`gy@rG?2oZ2DFT1y>P+WrzfPu4?+|5w;}_b1TE8Tk
zun_a4_}=Zyo%GgcE#sO!q5jZYo2r)#ez7wEv5-S4tU=_^#|v$mnqOsm5&T8PZgha+
zIg;=0?#6^-UPBz{!PXGed|H+eIb-5|a)8^eISG&+kF6<XwWnpw_Krki<m%k4`}|fj
zgF1hU4uCd(6b1lj%vhj##D_eJ{i8p$ui_Z81lQySgpkyJP1VcDzig0go4SfpQ6NFv
zOb$CePh5{K!gbd2zj5DCU@e{tkM5?ytQ(`CTFCpeHS6=O@Bj_uh8_i{eVV@GEcQbV
zKCmx!pn2(vSCzUWYz$OUN!I=UK;>RI8Qp)Dt3wTm;Zt_09+X;WiI&<RK%0^lFy?#F
z3u3O;+JoPN_O`i4UFV85k^xCOVJZROVf2FGlUQZ;-TrZLXqJesp9nCOn@tqI-ui32
zr#0q!_7X$x$>ZZ42xjzPAQGJX)JnvQm2dJZe{t!jGxik&0?nVr0snL#Tsng#OUHjr
zC`+UWm6*k9qdaGOcnV4$sG%C=S?$m^mL7|v(MVt5;?Fq^q9D-t7}-RTeN@d$D2r{M
zuM)b*_&6Ey0}6>zn^CZ|5q6dPQ_?%7M>kZ#jX>wUdaiV#z^$lHM`q2Z7(Wimws$)A
z2w+ERC<Ma7jbg{+Jf6_~^evw%Hhg~xDm#Fa1+46oJyH}n&vcoMUK2Hf3XH6P*977S
zFF4sK>D|g`XnAY@f8?4ZbR!5pNL+VUHWHjXNuks<r0pbLDLb&Qqnde+Nv9i_rw@Ve
z1;%%KiC7Jsb8;UE(J~DWGXI-s3g*o`%OP`08ZE!W#x`;W{FXpc1S9WU{knf8Q1kOM
zJlS!q49>gl0i;nSg`Wg96(~y_hkGSe9#TnYYMr%}#gFI2H#~!nxS9k$Uj;Tlf$1Vr
z*fbLgx;IWj9tOZb^aqH>q5kd+Z33a!9%{+I;#9eTt@(n>)Rgkisp|O1Kj%^@*K$ua
zxUyUs=KH)vbWMtNp@WI{^TB^1Y-Y1`!5T~$VQ{TOWs3Qiik%DS|C7VqKixysApdUf
zU$;8M3;kPU10HlCsPjA5(b2a&NVR|+56fj%dADc_r#*;f{4EOO>U9ixSmW94G$GOg
z|IBN525Fk^0j@I3Tc6wpx3Zj8cAl<Nc=$5mlF({zJm4a%&aCsvmOy_bDt6otG;0Dj
zo8ufjSH1SXeP;2)d3}tKRx-9kU$qa-`6nfxuk;1ElwiKILiz88Wx7zQX=_1sU$6qS
z;}!zZ-Tyt^@`?p`bPC#@Vlk>znb7P3mb7uL6Y>ipTTN*5?OT~_lIf&PT8e?~a_~p<
zool~@$EN&OjAqA3P%?isKKuVuX+q>62I5)k`Q)RTj>W#L<<Q%joCh)*(7LSmsInZ?
z9bPI%r=DJZnq^iGgU@ZzD%QyF|85!I`!e#bRn^8D4K`$OMaa7bSSV#p!?u>1d4#w6
z(D&;$NLDufsFLB`%?a-PxWG=RW<<3l@Z7A!iy8GzTOx}>%SnF_r|Z)7fY{fFABJ-#
zUmSeMZ{4EdGo#iU{wwoKt$2!y$TCWc=?>3$6nO%6DUwsS3DQLZ+126|JU?n5odQfj
zyowpffdsZ0w0>!HgG4Z9RQvy~Og774AlefU<SPR_e2UiD;;@fSR-S)&sKbjBAVrMm
zCQ#Zw-D<@#^%;Na(S=Oj1HAV>mog5to7;+Mj-mx51_@67J=<wwE9hnS9=6N!RBaC2
zONy~UPSkg0c45+8+I}F}@rbtw!=sauhQpEERvxf@00zhT?47NT{ZJ1EL6w^GO3gbm
z6LaW5UFnaq=b-2R(ff<4pW-Xg7eTud^_OV|Se*Vway);;nviu0!2mJTHoR9u;J1b^
z#-NZKirR*Q`X2?K7G3KOa|HJu<AHAx%3KKyIso7%10}KPNf+LtFy^<b2W^!{yRr_@
z`9aG#&~{Stdt*_Z*FC|SEg$fK!-E_bo5<|#uGl@}R6kBMvWf6>24OKVtJM7=W3}_4
zTd-UUC)R(G%4uzF`y=HIV;cGlaq@9NCxxm!XgTuD(Ci|^2SHwOFs9ecTu2B>is5JL
zW-<Mz&+Wxu|5owFoc|lNEg|`t-o}O=a|!vdNSx4qR$qozwv;V<Yn~oHEMY-$G#3U#
zDVI6jnjNvf7N>F?<ZihSd@1R(gjf|Ac~!WWH|c*Ea`UaxIi*~KivJ@{)<)|bKlfni
z`bAD%H~EZ(5;s~w8O|}L$N$<z#hJ}Vzojt=XePJhgA^8F?Mc7YA6t&)e4~H?^doJD
zbtDnG6>|ahk0$$z+(nG@8&t8oH!u1ZB4;e7b>?vrPBVC-c8{*q(&hnSf*Tx<Bk>bo
zH1mIbR|#8nzponS(3+JI;YQk*jh}?+)pv=$dSPb@{qNas7m)hUur}1MR)$3>&M--|
zK8FLUhRagfxgMb?e^lzWyA09N_n_nN<9rq9)u%ZzrdNO{Kl#Oup(%$kFl>AKozc3M
z=S&(^M%M&^xya97|1?v2*7X}3aME1$oZ5e)xt20hgUGxWIwMyn?DN+&su{hJ_z3m3
zs}03Z_D*UBBu{+Uv-wY`rd(5Te)67*ZBGQw0>~JP#(*=~1lc)o(SUDp<|)`g1Z$}R
zAkR$7R~g(<s(T|EBNmqIx{!@vuP*B#x6U&uX}OB0^o{Svp|yGA7fxdq3m#RN|9^ko
zC%O)qvTIRPD{0;3`t^yZDidPeB?+nQ>+O4ah^WtHw}&lrfpHx>C$cc!b=<jL(nx)3
zh&bXF3SsD>tE~>%hKrDkqlVRS=c_-b2zqw4CYSy-L8SrVwty$ZeKnKP)*UP5lDAM_
zS>g&i5<02~iyN(27%bvt+oGL6FvWjXz=o}OCJJh@5PWA9tk}OP$LcG4g;;iOq!SY(
z{Ppym9s<MmS)uW$L+LE#NGm`Ef5=3H_wvTtRB8)ye?W0})n!5KF`J^TQo2?aH-qPc
z6m;W=7=I6-xVSGx*{WzgCCa{+xczVVcYt$5M?j`={fe_V^m}YXC$jzQ>LGv573B-z
z<P<NZ_)=Js4f1R9m*VY2(l_V2HPhlavGflo+wOjjXI71u(edmsY)YZ{4zy2Z970#2
zX?o2-)X#3Br()k3TZUmE=nRR@(MXU|S4a9JXeN_~$u^lnn^bYDlZL@Af$Rtd>lVRL
z>-bpI!)*v3@HE48lB7t@g0FwSB$<}<4f_gGr)Y&abnh`4+EJ`Pbo`A@`;z0UnuGTi
zp$u;cbZ~EUB^?mt!+`#*jI{vjUBcQlA~Ad7C2ndWgFz-spa`IXzDT@RnWU(4>~8_A
zv`qB|O8qr^XsD)@#viz<>}B_}Txf-Gg8UOEsviuPi16X4j6U?G$_{^wDbKNZ<WHm5
z?2VP>ARNg8s`J(WPnFPVwv*h}y|#X|kPs+ZqC`O1B{WM9FCIVlp#pVnkbnZ1efj_&
z!>9O|TC7O;DU8bzk50nEkO&V{fTn{-`aMZ`1ow7uoH*Dl0U$9yp)8Q_ZJRBGreyZ-
zA(Moc^({26-w`Wd^%j5mLa(8E#Y_!<mc!_O`W8AKFtn?4rNxXfb==O?iWC%fi=6wb
zO^X27GOsjvjV`;Lv5mGYb-;--AR~jmT)u{a@o{*&%vG_TOO|+s_Z3&fb>Dy*<r`%K
zk^q5Atqt1e-5qV9IGX(K;(V5zr`*)Ylk)Et(nv&9+e)0+!|8uAdF6$->MAIXsNLG+
z5Z*uI1|U^B-};cx;aV@m9~)`|S1ns+90!CLZ8QLnADq>cg)Mhqxj=QIER?w$T#&3V
z-jL?5WP$@BiZQ9W9$jp^ouvOd9uokPTN>qf9{2<4WF_B4o3*h3R#;*jR%2TfTMU2G
zs{H(-@~&SXOu>KeHFmPV>`la~*%f&VPJAhFSU)R@ZwDRXT`jxq0H~R#3l|O-KF)$A
zty18&(8S&C;gms&8nl=dHUjcr6ae>{tJPp!H6ONGWCdi^{zVhUh<KnF+ewH-&cqC@
z_~J-;M65z_UbwNgu!U64+NP(-bh`a^U(SlU^_u%JFj0T^6p=ghvoheIjuCn<`d%Nq
zm`Yc*V|ApXG0UKSI8?m@IEyAh0Ayr2>9Uc2GIc_?lG(7l-yX8FpDE7cH}??kH1efj
z+W8J#mGi`YzMJt^kYn5E8RMLl^$DHE2QHJTmj+50;?r2eoXU{mkM#t4zRF5b_#eX)
zQMn&=Ja>QYAZVbS%<egU>sJ;DbnPp9S0{>{CA8Luhc(kER31@z(m+p|PJgtbLdhD=
z4%Cfmv%$gO!^YFtXNWZI&zzy-vAe8*P(z$hcs`lu)MvW*>Wslp*GyLD&{}hub#b9=
zYSItk+-*F2F!h#bq6s)Nzg3<wW|3fLG9mMvTL*tTh@${sXILyqOU7QGIt{!;s-0uu
z(B|T2_tke@@Bg2EZ@>B+^&b|@m&Um8m;D%NH8uLNkmn!}Hu(_KJd_D(2E9v`joTT=
z_Ahd^>6(gt)->RTRJO@t(=v)x`a4}AwhToECv25m0T3f}uK3p9lKjREbT<zoQ^6st
z&M<$BQRod0EUi<jba!$Sm;4}cz!O^+2n*kpI-o_tUfEM#zxw0)e^`a2JGC}*nG%kP
zYVjCh@%7#8XZ}nwU(EPnDD&M!VI~q{{fzqd1ew)Vd#+u<@v~=8D<v8FL-p&L%WVGF
zM)!vH>Rg3Y!iV|Evo2$!Zx^~Eg#@s0%A$X_@+Q=>`62cjF^1E6N~c|mU24a3WP%=T
zBNqaEP_Ns4Pq|176=@;QJnZ~p0AnR>?ec1b6{#pXPOkm;0%UXNaDLmEu+cKrw>v1G
zrI$D#C<PI>CXXZojVh9#+v)3)RcKwM2-McPM`k=+KMkMF9|jYaStP}c;M_b^qVj+G
zl;45$|8$3p7|k&ucX&!f7y=F|b5388l=lGxgsH|J0F1e9>w)Y_I@qB0>#0b$_=F_z
zwX9_9f7(>_iRfdL2i^o6fQb&fOR1vDhpa_zL>r`0qq>R^ESd$CD*f=2m;CQ6Zrl6k
z?fsWXYgFR5r6(S;-+o4*r~JyZAU%I=aN@J=mmNCXWJ6Q#7q`rhRjcn@22G!%^l3yK
zxL`0?=0znZjay(&9y)E^pPv1F+9!Y#p-b0OkT-o7JLJuDYn9Ja**E?KNC@W8olx{9
zMWS<`ONjpW9!%2NA&+|4Q;y#EUBa`^BLW#yR$MX$5*FvUQ>hvqxL${Z$FzTbQ|i_+
z2lbfkjiy(Gc+ldg6pw|*LgFx^^g%C5kXT9T2V3J=E(Eg=E;1P01H1V|Rn(8(;5Dq0
z?YiS6Qr#I=$PE8Zzk3;)2mtnSV4m?Iw=TiKKmPM6toPY~%6E5iT!f3jy``I9eJg{;
zJGa|OCXhm&`t?v<p2yd^Ot^nhv(hp*aJ*pBX9Uqos}y1B3hY~rb$d^H!{`t%6Bq?5
zZ3aS6OYQ28b%Hf6%xa1A2L^YW8fcxOGC*f;G$wjSPnw#Cuc|^m+7`&YI}|(YChMw<
zFhKu(l%<9_1(woYrSxZ7F1AcS%wZP?mEke-Re{=D86s=ftHc}*aS4CiPPztXi*>gk
zfNn8zF=~;n13b-TZId?&d20S~Zyr13j$eYTwt!IE19r01&5$iDwQA^zSy|Z=>9Z6|
z&aCNWpvjvbK)ZsnU1)j1WoE#NGuMem!TP=su`5Da##O35_~vzgnfDilMS2*>1z8<P
z;K18pgD6XHy1Ejyptpa1$%#(-*)`$_QBG3@*+`&ECvY|wi@(1|E6i)Am4Y7^z+8p6
z%HXoSXf;61(LJpiP@;y-ddj%|eOSh&ec1{q$PxC-;5k~&&Mil=u6l5u(nX&EI}r|4
zz@a<X^f7yDh|Ul6Xp<dv4@j@J_(AC+C9(OoX>y>~BhrpmAV_~8K?;QJ4Jg#al~fTm
zIMaFCVo|hci50_ei0$qw78LxJ*sdG71DO|QwTm|Bb;~%@wqTCexgB}Hq+@gEtiy@`
zjR_WsuaL>KZr6s`)Mi;cBT_n*P35+v(v#*s-dmUhX@)^V22+x}as+^8&t6st5%BEQ
zMXv0$sB$9d-QRzFWvlP|-MISW3}bQ3=RZrKZa8wnH2U+K0~mi`@#7`!ZJ<z547H)K
zOGE2>3cjP>qu_biX3ZV}Yalt<k-nlS5^r&`Iwhf%pKJt9(4a<L0X3Q1^&*!dJ|PY;
zB6G2CRBwF-uku7dXN#>fG%7Z%{gGM)XV=5o3jNG$>;ZodoH}q4CfCL+jC`%r5U%;L
zt;dsf^mV8(eTuEI4FzV12{rx#Cin3IHT!2r&O3u=XgD8p5gwb?Q@`4qTDoX<Z@v-V
zp?>5aq3f`t|L-A3V9kL*9G;Niao9SiDU6uy3G0(6@?*asGwDCe)8&S!MU|D4V+YIP
z0{s!OoODJTu4p^AlMCbVy<9H!`5N%zBkQ=yx|HQVD0uW8TEzi<1l3v5v5VbdssNOr
c1A>QXZ}%nZXP$&}4L)eRUkp-e#9hepNspeM<^TWy


From ac6aefd34c2070217ecd296745e8d9b93f7182a0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:37:35 +0100
Subject: [PATCH 951/988] doc/check-certificates: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/check-certificates.d/notification-01-warn.avif
----- >8 -----
[rsc] 🔏️⚠️ Certificate warning: rsc.eworm.de

A certificate on rsc is about to expire.

Name:           rsc.eworm.de
CommonName:     rsc.eworm.de
SubjectAltNames:
                DNS:rsc.eworm.de
Private key:    available
Fingerprint:    f21bd7e64eef82b963938fecd07ab0210194129d7829ba08c2d212d063f3b07c
Issuer chain:   E7 -> ISRG Root X2
Validity:
    from:       2025-09-09 13:30:10
    to:         2025-12-07 13:30:09
Expires in:     1w 3d 11:37:06
----- >8 -----

doc/check-certificates.d/notification-02-renew.avif
----- >8 -----
[rsc] 🔏️ Certificate renewed: rsc.eworm.de

A certificate on rsc has been renewed.

Name:           rsc.eworm.de
CommonName:     rsc.eworm.de
SubjectAltNames:
                DNS:rsc.eworm.de
Private key:    available
Fingerprint:    f21bd7e64eef82b963938fecd07ab0210194129d7829ba08c2d212d063f3b07c
Issuer chain:   E7 -> ISRG Root X2
Validity:
    from:       2025-11-07 13:30:09
    to:         2026-02-05 13:30:08
Expires in:     11w 3d 02:25:23
----- >8 -----
---
 .../notification-01-warn.avif                   | Bin 0 -> 8798 bytes
 .../notification-02-renew.avif                  | Bin 0 -> 8792 bytes
 doc/check-certificates.d/notification.avif      | Bin 25274 -> 0 bytes
 doc/check-certificates.md                       |   5 +++--
 4 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 doc/check-certificates.d/notification-01-warn.avif
 create mode 100644 doc/check-certificates.d/notification-02-renew.avif
 delete mode 100644 doc/check-certificates.d/notification.avif

diff --git a/doc/check-certificates.d/notification-01-warn.avif b/doc/check-certificates.d/notification-01-warn.avif
new file mode 100644
index 0000000000000000000000000000000000000000..e32e54b365c4d55cc65399b368ad1681dabc3eb0
GIT binary patch
literal 8798
zcmXweWl$Yl&n@om?(XjH6nA&`gA{iT?heHribJ6kio3gead($<dEPr;_RL<%%9<qq
zGP5@r7#NwghY!Ha)6N>~%l<<rJ8O0)J2Pt~adz=9>deW?!|cD@myz3AI=cOT7Yqzw
zXW{XG{{JBgz|O<ze*yT{O=9QhV)0)j1qKHGb^g1-z%jq-D17;Jc6QGHYx=(o!B=1f
z@t^ohW9G@mF6rXv^1oj8b^tfP7q4IkuyFZ8EIW6A)qg@TFo-V!xX+h^2C(zC`;UQy
zgM<45Br{KT$q@4Y7%)r=7e_Z|3rFv-%E(|a!Cw@v9l*)#zucF74F&}c5eD@&m4=h0
znFj_K0xX|3Enz=YFh{3^q9w$-bFp2{YKiU-k#$i4%7RMMgz1v&pTiCidm+Cp(xdM@
z-c<3j#Y5%W4PojRfhz;g@$3TC^xzHdr~%GfI1q`ivWGflbGma${Ckfw2mkWa8bF$@
zK25FI7AhDlvq_OrFPoIy4kmyhB)|5JK6?aDM&`xa>WS^&sHx^K?%TJc_iw535XGgO
zYg`O6z7OfhP(}1l>nMS)h=DG3oP`8D3a&&_361y|!G3BAVIFZk@Z!KDE_`<=7N^7E
z#CkoRC;Sp}wx>}27<VuGfn8sNvL4Bs<Q+3dZ%Maz^cNa?8_5oItduBRspe)wn^F|&
z9&w~KG(v*T@z)rwF|QFs0zuV?;S`m(7ht)FT)?jv(T(zTNdW3a9+xpq+BAxzS#Oqt
z=JHwe1o5<uTe(1NB>E!wPr7@2py(gVdrJ-!yR<k)vrHet>r|N6Um=cF=di@G$1hO|
zSWel$)>%TadHs!5=>8;dteu{H2I<Qa8phm%g^2AH$NGm?WviRssxlY=J8!vB>!Ylt
zID7raM!tnGSS{sndB5Y`*#CCuRT2!lAFG2~&I+jPs$Ihs7u?{5V6Zf<8=DeTyB1(+
z4F04%NF!WtfT_tc?1XPy)$SA9D#Nn3NQp|bj5+za`vGb4H>nE6#3V!iHgD2>H7Bp7
zo}y+_j1asRX3I+jna}qnR?j;_EV=TGiuIo)Bk$5(A5j|Y&LH6x0j{R2u2h*i5wEt6
z_|}l;IX``{P8tQK@o|pUuDPx6F+~C2EETjzQ@XYFI<VW?hR$nLk(~3$c~M~pk;w*l
zUOu)qkWg_niWF;7jW4Eh*Cia+de_Y^q6Dgz7~L_Q>WJKg)l^ZMR7P(U)?Ku;)Eb_&
znV8558sp=CwBcK5(!Qb5aA<;C<CA=wbadp~IeKGS`(B>STrH)mQsQnQTB(fE;IKep
z8y8+Kow`C0k!1<!-e>-CldE>-b+S%M%dfv7r<gC<-F*HahAI#jM2$p=TF$BufqmZH
zZJbQ~GNMF!Be8P_5k>u|5G6^}<LnWQCW=T+{h+ELJaKgI?d&v*E*}i8jMwx5nJ71}
zJfqv?EJlqsAQPN_G(Of@<W#EwRrR=e5bqjPG2=q^&QV14rm&9Xzv!L}0k7L7JA2Hx
zA<2LLxOKf>7mVynea~ScIf5zN<6uB+=sLwTf)43TH35Q&JCI<yjuX)QeasW4=bFF2
zVJD(Mod$H-74PoFO1c??b}vRFMqN!=)UU<%jc*m|tC{D?x%w_;i{gZg7J=Nq-eET{
zZ*7vdL)2^;$5t^<4Ljk(qmgm={sY_4^!{_=<B&a<YvIgp6C8i*r7N~%G~XLxJrl-n
z72e^dDqtuon9;2hy>J7ETiDR&hX&&Qn$xhn`g|_j1=n1&UI?0q^qzOh)<QGa@G8U_
z)hBbQsy{!Cu9<;ht-)tVRwG5tdTXmUyh>#83x97{Wv=lR8bMJt9P)9Sl={#9SCvnD
zf&0U6RXc5j1PlkPbO~y-bd<jc%!foQbD)!J>R6-4$kZ@C8Bi({@`M8?cdF-l0w1;k
zNuD$LvlE3~1Zp@I=kj@ps+c2i8N?h?@KZ#NNHycieuu`j-MdBSx90Y}2{LTUgO%%U
z(E&PyEDwwKyXjHfMqH(M-ZktKHH>;gHc|tuWxhw#1u+XVsjuU=UgGe||2`r9T;ZwL
z#9REhR-y)0EhydTl@7|=&^WQR@pOWWlfflnd>nB3z{i`H9629j9oblbUbUd1+|Q7f
zc%@Y+pPta;dRKN#GlJ^+YI#-h-RsDu#SI8BxcY^;4@1}AolhlpoQu*@*+i7Ih0jo0
zpHi8!+kZI^GVR%W+2L17ESfEO82M>aKi4!ok92VKmfnT<690he)@*rbPpR3xI|e#C
zUqB$6`6|Q?ewWf=PKlA=t-Uv_pXyxVmZEe_e!#vPeB!U|wSk68jxfWaH5iN>=n1Y^
zZY?lH0g@OBPKb7}-4T~n;dO<s%C6u64O~-*KNfn~XkIUzEZTL0@^cM`x&MIHxJ{HX
z`HeG($r$-W7_~0&?FjMZueOqGxlSTDo-ClAKLir>m8>i=d1y8#jTCnbtuN7(h|TzE
zIOF#zE)qwmhjmvk{IDJSM-0OXUTLM&@xzT)t>Zf#?7D_(es=x<z7CblBMZO3IfF!g
zU$2^3Js8#{7zjOkXHl&!m8ksm<cYyyW}o`b9SmIV@m&ZZSC}a-?DK~C>3<4h4yV>S
zLLSiJ$n%7xn^O;ncak}_hJ)u5*xtR!Yv3?BT!~U|eNot0x4#-4(sD>n41jN6&KW*v
z9C=_Bx7q&FmKABXlFmFCX;I4$rO5w{c7s~b$M`bNFw#R#U*;6ttqJRm8x2{yo#<80
z0Kyg!IEaD#a~~i<w|Qy7onc#0Ff!p%)6eDGc4GO*)q{lck2kyQ0{2T|)iVx!ce(XZ
z60cL9+*>a;O3cyxOze>+9n2^Br1r;>{G7?nRc*%K6ADj>Rfzoba;>MBC)~|fOUmLD
zGf1QW!#md>Snv4Rp5taPjgFqG7ux-1bjAJhY!wsZZ{G*M=cnt7Brj00l&k@pp>4Q=
zZQAr2@kJ7q5Ol-$PdD^4nhQRQ^056`$2;l{(KjnUFtBC=NX{y0kO8)pm4U-HS-$2m
zKVNd4vlI;K)M%ddOTbm<?8bIL&D-g(EnDghP{WW0P(&>}Q=K9z1eUcw6{e@JlGw=z
z3ysD%GY@|0aaQPzXerGFP^yOXM2yJ0_G-||taT4^p>xVbT+8UJJ!pk%C$el7LKgl~
zeFG<WYByGA86}3j8`Kl7<t&0Gudky0gapes>-QQuy{3X)JrdI24OQ~G2_1N8*`o+D
zZBa*}ujefGZzw?cKwlG*dH|oAWhNpfYPiz=UGlKrSkf}*Y<BYDa|FZZye-~FYI#bq
zY%GQPUExX2I@y8+amrQj+~PCV<c2C9n%2$A6jSt50`E=BT!&DyhSSKf_S>USg40uq
z-O|Mi{#jiOCFb9g+6cKzTiGx$>JSg760FArs%b;<+H&W=@j^k2RjBb{rBxEpw!R0Y
z*LmaBDBsUuU=WjDQ<A0YHS_GcW>=msSe}0m3p!_Km-9)r;)<wBZg?^7|6n;R5>VFP
zsZb^{!?VdEFDo$=xsI<$!M#+@UY#Ez0WS(fll{ZMdxGD~w;Kz|lwDbjG-x7ce6o$D
z1u7a5Y9I2%h71r1Y+}VmN=pRtpno6EQq?-aw%+Z$)^BkCUMa>0D?%pZME-A<S?^-l
zvd>YX3feBXkgcsp;}g?*TsfE?DW_$6LVSwi%t4`~m|fUC)Fyib?C%Bdj4Q%$mkr{A
z<hgkfrKbC`QQ8vcF~JhH&VXBO(XvUsGI=c$mZHp({nG3iw&=#*6S*Zh4Sk?9hJ&Js
zAD7ECl8~$SZNf+)abv+#9Dp~w)X|??zEoeHloOi=ewWvjRVXU8C1)gkIhAhXN*~;&
zJdKI?klg)L!+Yj5J3-g+^%~P?2_#I|^j@kJL_Q?)=aYmuFd-!fSbCGQY$Z7`DBY82
zcXKhTjVqalx5yDg!;%a6Lnb1ESDGIQDbC7g-v+Zo*OLiGQ96bH@17*GraF1`Ph3M?
zDxD_^Ph6IHB7CM&egLSAB;O}q;5csJu|TtviQt>5SM$Dzw_mbrm#>CN_na@%Llv(Z
zeKns9W$txe1i_DdO2mFC!>0Dm+e@Ddxkadq+(|w+jqIjaq$%K1THJc8ysDkID>R7f
zXX+M&oZwnsb&dK@6`kt4r(bw3QJSN1hvRRYR4}~DHZ~8Vx0YxGF^^5iC1II`BQv{>
zE*y$bsGnngUFr=&UiBf%czGHiu?4eaQ`{mEJDZG+Yceo;fz4=SH3jAvWm7G2$gyNn
zT4u4t=RBM%xwo4(^~;p{{H+Wd2cjHRyK+;b$Q6}uYhC)*e*p_G`{wFun`o_YxY45-
zxQs4G$BtsF_|!_JW|X!u5^rL~;UEO}Yvk@#ETp30rV4!~uBkD<4bHcp#g461q)THS
zDNNoCHhE&blOdV_ia{XVCA{B((0JwTRc)1eiDM)G#9=LNd}$=ML8Y~N3V|c`vgC*n
zGe{1UdYbmE#?oZ{Iu9y6XV`w&U{D54omf|r57@oPT;eGk>?~Y?!I5uk={N7|1Zt~0
z6`08~)QFt@U{|n`K5iO=8Qn*!R5S~nNQHr#vmxMoHnCHH+&d|)f*mYQzn1m)$;uhd
zGmclDOL{eQL}POEuTPAT?!8!h*rHPNU@`f|xPG+zF8&strYwA5v<_%n`d7&ry(fLT
zEp2x;?f3gc%&aL4@0!VFz&5%)&54*Y2GG_3&jd{iljWj&E7U`@FEtmh2oRi9W}o{(
zl4p&!wkTSKdFe<6Qr_Coxa*AV7>Q_mlL6qdsmvFnKVA~x$y2hg!WkJM!VQ1OfE@n)
zazCzz13kWi7MLvnvX5n6c^a_!;Pj6tU`6oaQ+GkMFv*!m43-#6bXKZ*?kE9-xfN?>
z7Jn!vuWZ8w;uyR)^r1*qnzwq_QZO{te&-}0$miB=`U-3ssa@;wEs|mYDjU+mMw-Al
zXtKN-h(0VJSr~W8R#ga5Hth#&6Gch%`w3$?d1@1-51$Epf^!CaaRwJS8KJs}3r8wR
zJ!T^(i67{O(la;covKT=B78NfG0~CY>bx-C`ujEu=#5u9k6FE5mMS{SC!)8@7j<RR
z1o}U@5T#%VvX$okf<Fp|ac?+sF4FC#$9in$y8Y6j&_lmi_jO~iOpui+b?(5q0P0($
z$^0%U#O`M*lhy3w9Dtz;o6~b_PdAPbOs@x0ow!G;;@(^*8twFnkSbtD2gY`rY-1x9
z-C#BOb3TN--Zj#>u|A(ig?hYiVM?S5*5O=YoC6^h7EqnJA75ne7!r-IaIZiR$Ars-
zYpzTy2$3pPyuQ`x-oj7+%7x$6`ve!_#Uh(V@w>pJskDH8nH{Rof1`WiG>>j!;QBPU
zC69hP#Ir@LlmY;2Yq<4z^!{=FZN{09#(f5p)ov{GaqFAJpP5aiKc+vdI;1{Gs}QkZ
z#!yClV5++2uW*SJa2qF^?%$$=CJQcaO{DyasZq+P+rdt|@C8Gu7*+X^pUG6xY#hP}
zOI7eH+EinWed(6G-E3^R-80U11O?wo86WcfYGx^Xn?W{%{9%}49Xfv{A4Jc1iWW#s
zd`d4%@3OWg(u(Gl5JgfI%>+5x8aEd92F?{>RuoC!E*m{F+f&~}v#smty6}0}`c)rm
zrte7K+t5&6BcBL-nu~duXQG1&)X)OOZG^1*;`@aRvfKl7vrA1_|8UJ_*X|jT)+8Pl
zvxkjHl397AJnUUL4&~)p@DR39JpY~Bg>WnOB}3$e6jappNQ$n{^7cO}G<s*2@ED1p
zliXu()`^U-G6JW8J)<IF<sgtyTO*NhtCdFD32qMv@LtNKs_=cOGrD&;8N|Sp5_t^L
z8zhW?x(U+VO*5i$(5l^!!GwIFyB3`2%6EJ)4|kuu{%!9X$Zt4=PKRDbp9Ai#IgPx4
zpTd&yJzqE6ACS8a2zTD_%n53Ryss`ufzlHDOkOc`4$I5=;9jHKZ!#Pbkx{6|k;;=Y
zZo?Qx_Bi~^3iGcj6E-<)*zt%AeCbTS6-whTf@iM`a}R`ccs(x)y<6f%a{O%_J^c-A
z-?u*W%JDeSfdbOQ`5EUyQnu@E{*7;Eo`n%HZFW+EGy%)!+gY5PYl(ch<(c&F5!E|I
z7BC6Q8va!Vsk463`HdH?_-!`f;&kk)6=<ZJ3u&1Le`{`1e;O9C_<_hUhA^x~-9SL3
z|NEbix_B9`4sm-~G}hM4&YPyP8<Vv5sT;wYHr8f^rGecsOq2drNq1gS!)#}%8^sO0
zNcdxsZAnPjfKH$Vpxz?Ly>iJCP6EAu(jug9&zF=Ylm1PN8S&u-`!MkR^f{ADAUy`h
z_fK^TCEirdtc(V&RJm<s`)+YE!;yM@XVpyEXJ-TeVIL+phJ?%KFLuIxLjOQ|xi3n4
z+%q+IN)AWO2fonebGUj+EMGHDCVI36!wgZD*gs(^yKNG7QD%E-YOH>AW?iU>KWO8{
z&JXszgt)jx!u>bD0cqwbSOFo6V#lcsM2_`^I+vlS<4P+9ANG`O@2Fwd2F4p9y}EWM
zO)U8qyN$#G&TS<)3h+~<vniEmX+MPX3|(@o*~Q>A!7zU~jK=UPg42o71-mL(H<>dN
zk+fOu7Q^*s$i1Wtn;NUoLmVE<wGgUw5UDce5<!)zCgIEeo}d+{chr>POwMV2a+0lP
zY1q|Uk8=Ennc5i1xV21+bW2j*{Zo(z;~7kZoiV_x(zC(OX8p!ib(Ir$ow-w`qa~~p
z{tk}fgUHPCPg&CE;J>90=S3x4XBjpN9=lwbY+yrY#3`Y$Vi;5-MeT~iM889Mg4@va
zkSGhAaWtF4iJ>c249;t%WYna$1Rh$w_&}q&%CZVcUY|{>x5UCOz0&)5b1hom^1Si8
zlA@{{DzRjLTZSsr&qpF%?g22}ta7!N+0&6O&H8hg>Hge|s-){0Xt{d3dj#l{h)g;*
z@R$%MVX0_SJg0ZQ8Q~Arpj>r@%RWJ8Y4bJ{Yc>_M%agY}YmFhcLyd++&?kd~3mnAH
zbF(>Rq|gYmTar;a(Zy-oL}bzUP^XBAa>8=p2+L#qZ4W}YE&E;;BrJg-TQ;J;)1>V;
z!U%kKm$H4%m75ETf|b$IC+%aQKuQ1aC29I)>zmEe7wr|nbk+2C>rDAB7M8!<Y_bKm
zPWE{3b8}ZM$gK@CilRwkLN%Hop=Jf85q>$UUx7?z;3v&bi-EkDU04aa4g+zd7#&>2
zvIMuke3oy-?mNTlP^HO;VbQj#z`DJ-{mD=`aNiNOf8*O`wAK{5{R&b<0%Z#~A97`@
zZw(8D(fKGq!Hz#z!twNf$MhowmrCjmN0t-7c-!3ei&3mTqBw_z<cGb-r#Lrlyog=%
z`p0yodeXo{+0bZbCsC4^@>+{X-(c?bO?%Le$Z#W!eu`|Hm^M;%85wX8`P5hR?KOU%
zizcF&)FqrV$v_eNvgmrz(YF$H!A+rGQEAc84_DEP7HUw`;=F@cn+#iXvkwzT=dtVx
z`H*35#q5K7XPb<jL8nY9fuKmWl^Oxelk?xPpxlXHPb|$3*NaRpD?Cz-0Z=0A`x-r|
zV;o0id@u@GBvED4gnHF3RuW0r<b?Q@2NNW**V_bjAX)Q505%X}>Ju)Lnf`^(%Yzeh
zmRO+q1x-DE<e;p?WcX~XzGf$1%ki7|9YLo%ROmRt1hR9UJ?rPu)%G9QpQ^jk*Q!<h
z{4kPMs@x<hNe{C{5_r3Ps1~HHxNWcO8_M?q=nOZ7fdt94b6#ASQN_2{io}DZlJr`_
zEH3be8RacSq{Hw!ybV{)HT_|2Lr)8;iZ2Mwe^-|;XRbb0=7R5=h=@?@R7Qq{+AAhW
ziy#e^L%AZ0k3#e|EYlxXe9Br*(gKQ-AnWUj?W~G4uyd*kC>&M|jf%Z|FG2BnRm%27
zpZli%6B!@NjKH>r!a(?p-r6M0!%Cksi97?yKKNYsty&?UIN<m{_<(+!;`ZuFO9C>S
z@-)NKEa8t;laL^FE6OfuH^G24dg9r<Z53ZnHcpuL^s|xua;aZltYM;}<+B69{a4+G
zhVK-c0rM;n7_D{`8m@C%Kpk-m-HA1dJrZ(MR_`Ub;@$Uk3r<P3a+fZoTkU`#`45di
z9V~yjzddW&AI!w8-{n$8%;z#Io5dB9QJiw(@+TAIIaF}apEj;7b-IGRT?D73z6lBZ
z`h-qRdjAnG<9CuOFpY|SuB@l$21M2&`L)EA%2I{mx}i6Hy$IZ=EH!E7a=EcDNju!z
zJaFXYt7AnqNLlbavgQZ9bCLK|<nZF5JYFQNg<yzU(Gz29ou%=EknyfxduiJ1qALgW
zR_2jHh~+-yWwq?Yaof~vYAgO7S;9)Wg4xpDi7@4_FY{G}q6bg7rV-PlxdW03y$_H8
z8M>jZ9}!6O9?FrdpW=VTcIBo;8Loap3HKu71CDMKrQl&cy_!9$z`ZIfsTYXb$Q#PP
z1qOV~y%t}~WF4A6a)?!j-l#^{AN{-ZTMBFSQ0_p~2+sbaE&JA=0)?dTBxV1L#-oc9
z>#eqq3w^(tLa)_8Hkw^qk&Jz=YST!L<1!$Z(;yPn{w)DgpzJ<RG`-GePDj_Tn~u#y
z%`{yExiXUPHQjHI_?$d~`mxTGbk_;BwF@`n_rMuHTjSv8L-u*|Ndw-~Y`+TpCtm!1
zu3&EB&ahR6`y1^U-9f>9w=ABWLUL)v01Jl8*g|+`>~3ZXq)cThA;cx^$>I85-J5zH
z6{t1Ka<(a8=_kWC6QrPXEZFpdtR)5V;^G2X?sY2x@PDnzw??<K8x7X@NCf<Xj{~V(
z+f1eCeL2Gl4x8+!E`cUb7FL3VmymQdIz%D3BKHGMV=N+F(q!EuQkq{ckH<6G?A5NU
z8Qf@yd$;}<_uMGlGgZQySw){~EBx!aD}lBel!yo7m{*j9u#tDi6t{|!=%P7qLW;IO
z^tnz|`dFT-Fb>B#(*XoRXwtFaE(oZB4-QW(ZlQAK2Vj5Zn2=|}zu(3|TxM_<)#%n_
zm_iU=+U<>Y0nXFgmjXMW)|6lxDxj%_?f+0lH0ZqH%M}c-A(Y774quZXo*#HR9%-d(
zi_0h8tnauF^R}j`0yoZi^Y9F&z}ZNRR}B>jUy{t@WKz3>IQVj_XmwysesB%F9Eo_g
z;sc&G%Zku^yn<L!s>z>ql6@UTv^+Q0m&8f~)V$ww+c=f?{VdZm4PLeNjruFh2jAQs
z;|j)i`hO#!#bYMa2*#|~EbP8bdE&*JHO%*?-!h%<k?zw|@NE<}ihfXRdBGyv?%?J!
zbUL&gl8;szS8L~}^vN8o-ocjD&BvhwMl|}Eu5eG)5U!HL#>|`wh4^Mgkf*2xp$#1K
zx1pW?q8HDr;&mL-L;o$M^1TTuSzc#wS`ep+0pL2(GCHrLe~)EUzqa6$4dbG-m_o)w
z2H@lPDVs_X_dAsx4w{Sd${w)E7~*{PmFJZ~e7@3GfG0CtQ}{``C-5_`7$>U|KiCJ|
zz%s?vq+;dT=PBHgIIfaWLA)SsL_quJl^#nqp&ELK(U>O^o(qaqh%v}!wE(M~&l3+o
z=V;*lhZF#AxNoq|-=V)dpr^6jHVUp`OspnjeOKEv74n^K0;yI!G*kOv%JhGmuox&5
z6YV+n2zJB?5@K@T_j-sElbb@GG74@;5*b?SVsgtk&5NMukuL5!4IHTw<eT2#_bBH;
z@V%7RWeDMY0+Z$oUzKEg{TSiJ67SrbtHq`E_Utq62KkN=UkIc=`KsSv9~rmKsSe=7
zHzNUZD5C1CpZSjwUQ8mI3I5IH9%RtzTq>-IgP)90U;y2@KRQ8~4SxyXe_1b{o>4k1
zkxR=M%8Hp5&qdPAtT6ontk4LwLJ6Wntad4|pLQlWzV`?m6;occRt^-0H*a?e2U4t$
zG$BjITe`Hr)^lQOQ#HZd8iv-)!Ct&y#alp`5$u)I56<_C>#u9W=_0>oQ${eCz2aU;
ze(l!`X?g1dRImr}bI)(xiuxm!P5BsGI>}rmKhK^nxzsPD>~NCLW=QBVF5s4@UDr_G
znxf>}5VuV1>u1}~7Bz0uk@p{p+}n{;x>LpD2I{p_-dWy8nb%2_JI>giANbDOoZRJA
zaPv&M$zgQw-=gM8BARaK2Y3!gyz-Gr9l+)*y7RW2r@XRR={va2X=yi^%;;L=8qo{x
z1O=mT%XeVvGr%Yxo%vNS&)seMQH4KcawzPPgJD_E9&bcjnymL5U<<@crci&8U-Ayz
zqQ?St<#K_lf^BDSGD}W$L-G$#7z145R2sTJj`uC}0AOTtN^4FP4Xfq>94@&%aX$>R
zMYb7;!&d1<YeRH1=QaOLiL_C_;W`6=RSMr<1VUzNtl(#cwBNVHlBB7IMDrG2h^$QY
z#Hc=|^xk)b(seioNw@WENYzYL+MmZ2Lnie~B1!nNsPjhyT1p>#e0M2Rrcd0VJ(CIS
zTY*qA^t|v%gibpop@`sl=oh*XgQvV{s{&CPCXe?-l{^D(=_xJ3AM5JWCGz0Q76u!8
z)s>)4gkJ`B^VWPiyPPr`Fk00k9T7nzsUzzJ)$=o_HD;AnES9`e_FcUnGE+1_lQJWf
zDGtmbOZ`9y{NK#s^cKR1wxGDIkaz(JuMnMYFeJKWP>7yDePzNv(Uq$2WQmwdq7lTp
zU<$zqS?!}wDrYUutUXE1=@^}2CGDpCs;pwUXEFRpG^p!DOBJZl##NAAm<3un37*rM
zvLaC)>X=V^SXSej3a<|xK}8owE4q)a4mn!394!O%_TOd?9;)e&P1(c0wGO|UZ(+oR
zT<B}lvTx!CQ?3u=Lr-<Xas%<un3!#4XalzpT5<BCiEa8i@#>XEf87j4atanUDxtNB
zd``=)K2!gI`x`Klwx+^pnj;;i2(dE2KGzsO2pzBOwMa_FZ2vn0UNjQa+jkUjCSl?w
zMh=A-e3VIok~rlbFxj)IQ_;x!1NccLDMi;MPiybEyS65CxD{Zb&e+c|x-;j2%(nPA
z2WZqxPXFXF+9RE%6F<|r3<I_%ZA4%uGyO|y14(ep6$X|*a4JGcKPO*X84fj$1T2s)
zZ3R2nV;}2sezfLc4AZ?$m^G@@Lt#zrKf6yhtN7V0HAE6#NNc&w=&wm09~v2<Nes!v
zV)|s@HuSEeE>yIGB{J6xk_T1Rt*Qxm0$<3;6c$ga3A=fY&7w4eP37cdgD=GPccRP0
za5t{!DL3=xSNPx4oSi3mE3RV9N>5)@crD5<f8U2<rQC7B+QtqV3dIBt)SUk!C2bUl
z#Dyu76V!lPb@ikUPflJ2>NVj$MBlP~9F7G9ns2pm2H?oE?0odF5@!jnbwLZ+FfHR(
zJ{N(>ERv}J<HeCMzdk_%U4};ppv~1~L;OfUS>(T;x#Py<?L}Y;>U-f?v@(QVj^Uq0
zfQaI=#g1wUpBrao!>M1p=Y$vQ?45j3&fHe!apFK&<;8NbNf((aC73J6R~~p?VX(!d
z@@<H<Kxi3<$8x_ULfv2xWAwevG+{JOMhO>RT7ksDKAXjP$`H#)>{vcB8nG#62o(ce
zWZ~qYCJQ+!jMc+O^HlgRsAY=6*f{+Nrqd;gTQ#{tv1gj1Fxg+_=Sb93AJe!~jvoWD
I*plx51DQ0%FaQ7m

literal 0
HcmV?d00001

diff --git a/doc/check-certificates.d/notification-02-renew.avif b/doc/check-certificates.d/notification-02-renew.avif
new file mode 100644
index 0000000000000000000000000000000000000000..9ff1400a467198c11b9924a83193cc02dfff5be6
GIT binary patch
literal 8792
zcmXwdWl$VU(=G1quEE`177qk>*DNe7?oNWUxO;*HcZc8v4+$=dyF0<*^1Qdco~k+B
zr%!eFznN+n7#JF$hp&sJ7YGRRZvUYp2*~3IvIMFEcmVIzvEyeC%l~rkMr&sScKiP>
z42%oN+T;KH|3fSnkcZ>{0@(MP3Iukx{x6b)fq{KL|J^XK`0sV(-+g8f$mxGg|Cb?q
z4?e^FCw|vhdU5l}I)k16*UKK{;^y+stAJdro!^lF<nHqMKOqbZ+`9nQ_uav90r`Ob
zW8hIxP~HK<(u+s-3+;al48FB9*v-ir?DJk369y^dogxOgI9mRfd$;$&5Mbd#5#Fa#
zb+obcz=J_U76vkr4<Ll_w#t06frB~~f^wFM46-GmQlj+V$}Hml6kSvdJHTy!X|hg>
zzV>+1AjtxJ{n%lGR67^8ICvk&BU;G<Tj!1)=(I)zm++{#r(ZH{Fr6r}{ZC<cD^IiT
zO{c}Tp@q;|9glM=F*535m0rNX++_&EzhkA}9?gr5WA3VQV!ahR#R|!N{c7~)DJ2fB
zu$XU|pH;!{HVqS@faMN~737K@<Xpq|olH>0l|nAQo)j;{UsEO2BeoY65Vp@x>W;wa
zxHp_oYbba}T13lz_thxI-P?X})6cl1SN1Y#!xHQx>-LQMz-VtP+lfn%97QbG*l1!~
zjK$Ckz*xp1C+ix2jL{wQ9ziD)(});OR)2a3`yr_m*z_Q^@&hXCf_<9DZ^oGV2McW3
zm#Lz&a2!2B`N!7nhbSZxcMi6K`Gz!1s@>+sh8GKz8p~#x;Y)szg7nz*1zdiDOsRPA
z5T!!knAHU3{7NVkV5ZL89?!dcbo?4@^pV^o<_6}A^mZX6AiO+F%i>Cd)i|u{N&vey
z3Mj|d7ce%W{Dt-Nd=9_QGs&fWt3#ivSm@1I4a!1hU|DzdGBH4GMF@`7#;j&+QcUwg
zl(RnMm3}vs99oA|m1)w2+P0+EFTGYmU~ioqm1+}nSh4v6Z~il}9LwB1-RLUsxBF5~
zUUMy7)o*EX*gm8+Z*@#zzXyn+Pr7tc+3^RiEm=09`Rjg)ROF3c<mY6>I<5wCC0Z0h
zdisF1A+Hk=mJt0^I()N(9NkSTJHG?EZ^Ba_5Iq{wfIw(i573s`d-M}6-@enF$_6^S
zZP>|=vE{+|(*02kh<PQcwEA_oL~P4-509kkTcynChQ(xO<SMd`y6SH=+<FOvIU5_@
z;or6s6Pdwd!Xp1{g=ZV|E*Z5Q8c>#nWuJb7!NME+PwdN{Ke9L~<qXt|+^wa`)UfIt
zX6fu=!+*%9ERscJ+PL)WaAaTRY94zZLaCWVj8>FB<;(Uop4>`fi^c{sV9;a#;4*?E
zJn88%OJaB!QKi0=*|>&_V)&;LB}>uk<PnV{h0efmtD!A1v47*^<T!=<F$7kPq~QfV
zL1{+quR*tyGy~3{LP-Ap_*hqgW3>uG`M=fOIM?9Pzs@wzyag0bDo}!eIrk(uRD*8C
zsRQ8^S&^H6YZp5;A((y)H@xPuBlr@%4#t!wu9NH|xbQw7Cf<-@cV*ZwVnuaY4+KLE
zUGsNVK$0p9sbS8WfSx{r#LF>6_d*;>?4{&6qiRCGxEAsLsu{tYb5A)tEJsY72+RR!
zCurs)&^&L0qR}RnyL5&DdBRsvJALmto6yAK=5^v_k0+OZ_87DZOS<;Z4JjI3Z~Kr8
zFdpD2gNpL+7?BRZmwj!b5U8~cV}g~lR_APaQuvXr2nZ^yJ+$8;D|I(+#gz*gF4oP%
zSgisBiVAt7%DB>+zkHM_I22-cUi^Ga=>o5W6&|r~Zja5qy_mA$(}GxR!ydKNDb*V{
z;scTIip*Q@DabouHF%sfjj)?X9ZS3iU_GHUp!1pzuDZCVFPHnSpHKw5fBG=@J@~Ha
zwr<CYnC3dG0mUcHd4rBCc)5TcSrWX!FI-g<d36&x#LjYMf1ZPmNG4TXhHvs^vd)0e
z;kzKJx1<b-wL9w+Rp*65GFqV#USIm33QLqJ^J#;Ckj7*)t!9!x?W7qD{G5&~DX&G&
ze|$6;EQ|C1esG=8xLgi)uhjKtZ9+bC91d0<Z|9Ur|6?wT?&VqQLcm(SU~IGX8x4(*
zLCq(MVq+qL<ry9I^M@;X&I~eoNcJQq3*-Pvyr{WIt`n>BP=aEZEY+jLlg%04GRDTd
zC`fQ+KLOhG4e6uR?Cr>?uTBcJk?8O@LF>%TbR7{VoIZRV@^&N{ge*Tm;DX%NS47`<
z>I_hW!PD2CY-|r?<h@x-s;;jE<eFAdWrHnYvu5Ja^E(@IgC)d}gE5t25zHR^@FHlI
zVhwUPlrNaAKIKmN?=!5KHoi+*B9C29CS^I4{9<NTWe!#S#vY7HutK5KU`M}%;Dulz
zk4CXBoTFvJl{Ab@vLY<nvL7{RBTu)tn9!;^pl%ON-@b`+@El(<ciIT_PqkHyz(&M>
zE*5vaxZ3V$L=!#hC|Yn*1Fv=Q>I7mv)$`zcCI#|`+*+HxQF$a;J}WFnhPZ%r-5FPl
zJbjmcs6?i=*{nRoH>Y*y|6-o~K?lG1#|&N=J_D7To!M^+P&$PXKKwXOM4vx(qdM08
zb!nb9DrL5(0Ds>>JZP#sw3}?tgLaKh$kf~0*vRCL_}gqV>j!igqMvQtyjFfLCo$HP
z*qq+sgb6>u-+mTtAXyxVWtDXeyNt7nNlVFMbtDfVpjRZyTEOw4hd^4LzcmD45>w5y
z+XVB#eRd0I*!J*#zz9$#?=1FS&886$+BRT!{6dDI6zSpoohW{P$_rJW4D*lYjpgp*
z!{$f^$IYP&dEHtx1M4&OEV8K<t!y`QzIK^6WT8ye*@IKiYd2x_uc~*R2Tty9W6G+J
zKA@A@JffM-x-nA=+6)|9prPUeA&j(J+>y`g&JAxn+PVdvZ6oi8%|^|YX2emqbbL)c
zx1p9_xt;#;J9E5&yfl4qlP$^1staFxE^6~^SZ+-T9`cdYG~dQq?};Wogitb-s(%O?
z1BjmQtM|n;9tY9sgq?t)eEe^R!AN?{<#y6dGP$=OfFTLagmCgRd0Js3uL55**gG6<
z4I`iQ@!W}*LZ1*e?Kw=L;T7S_iMBd>*F+epAD%LbRE|g>{hw@sr<DF9+s$Ma1(^|a
z3$i@QaojQ0jlJrhKhc!M!-Rf%@rb69ckn&2wBAdmLVlRkosk235mGJq$OW$lJIB&;
zqeR9wQj?-Llg(7DP%R9mRes;EdAZE&+z&uD4fxmNc_0=hU(Kad9uVd$f6F6?s3+F>
z5;X4!*aIwg(X0D!EB%n-vnt~iKQFi__vXwyTUc3Rx{wc#PF<~;DxiZAOvSFrukMzM
z_ci%)RIIohsDc#e)Wt;CGyI7s7ugU!?1?9IhTS+Z>@F?&m{BgRAHIBmO<PfMFOECS
z<e2i!iiM8`fBVU)X_H-#E%;JUd9`Ex-s4|s=&`=E71uC|ZoOqvil^)0tF+X0Z|A7-
zF*JI$>IN`f-JB+=JR1A=Es=8&*S}E#Q3%~Bmqz4!guq}XQRPwm6)U)n$(t>)3ZwuZ
z#b~CJ)+E<)prrcTJ$4(DA3z@SWoXD+gK#6XGGG_VKDU`DWthRPAo|JL`0$iAH>KRR
zsH*QsYJk4d6vtNK>u`taKBbXPvw?o3FTm%aPH<g7LZ|sqfmcz$!D@9E!Yg_fbrI0l
zC}_K}u|b~xrG3Wx6(GKURt4D`iGVo`f)6p>*<`i&C_?IE&!?5jva0;5HHc(jt!_GV
zgrp|z_F`_;(S5P!6Jc0s81s>3)Re@J3*AnWwLihPyQ^3>IYs8YykyS?HDmMvN2&Mt
zD4J7K26IqWWArn^?;Z`UlZRer9^#+4AtsGzN(rHTLubV`tbPM)HgvZ-LQ}33`5Dwd
zC)x{myT{(&xDaYF7{w&5GGuj4MVQX`n7i5RW%6PQZ+>AeO#UWyfm?hrk;LLJ-f4O+
z3C2ElsS{m=?gr^rvcmc<M3Mb%X}`U~66jFOdz+a^mJ+J$&r`dURfZJ5TB@TVYEyc4
zZ_)JQw{WzT1P4R~{$spvlg4aNtpXSwn@=ps*#&-I(H%T!_4~-TpzVY2*|`@j`7CvX
z%!FKr_JaHrZ=|yhAO2D5EPC$OG0~6qn;~W}90$a^n`$J!dK~Zkvim@6b|bazekg?U
z3Zc(cgw5X+5oP_pK)@=JPn%<potmT^*dkt@7nG=(T(LOFQ+I;<^2$2vCaKGCyYTR>
zBQ=0)gwEG#k`d06=H|DxuI6m~-~Q!-kCBv`&pJ-H2ft4e59cN03gkEn1Yw<VpUUza
zw%!c?T{XF?L_vYb92r@4X!o*$`eIyKR5$4YL_%x1-=%2EtX=PT6_~#JU=#L1a7h=@
zn)J`8hl1;uU<wi0M^@MO7FI<YO(frbzTIb;x66vv;pI$6t69epQ<_)ZuDn(I-YY`8
zba=n5cii3u&c?<3GZE7VF=?|<TYCkgaovb~R$(aVnAz@-F7$M|!I~M8M9$?_g}2@}
zVa;BtxOuH(pQmx<f-nKQv&WG5e+AWceW?c&J?Dpbqy0%2Ga%lQz5fI*?`T!udbDk9
zITxdsC(sX?k2Wdfkg%few9emqhPGg#Wc7{dD%{WIio+ZoE32)GV%r>Qk)}*-;C*vS
zBy{W91Pxw^V{CJ$ktF}pBV6=;Wnw(1F~F*L;z0$WiC~-5?UeF{tHnp%q;3rB4MD^%
zT<o4Gr$<@R(Em!3_a-Ctw?OhlTwRz>pxi8IEadS3v52s(d?8}>Ui)&}Mll5{jN@S)
z7CiIlO9DR}X$uBzpsrU<E}CHab;AAW5xtH{3iE;zVSLILWU;q)m(u#(SLNL>6Q<vP
zWorjGE<@08!Zhp?^amI2YZ*J4BmHNCN;}p$SlS6c%wz`6j=&hBo*R~!hU>kKdd*x(
z+)e+a{*X{)JVeyw<%s_Y&w%q8t%r<2t<N(v$dU$b<xB}P87Z^sCp?+GF~FNG+NSAO
zpx!+W$*ZA+2^6uoD2(Wv95y*h3>1w2^Z|%Hhvfqk<FQ((Iqit)#6pLCT9iE>bSaYB
zo~YkfigBNA9dh;aOx|>g@mn=FV0@I87CjJ(aqx!N9C8#d-})FA<88j-Cf)s&-*Fd{
zQTZS)9ORQ`vTSGr3A?2^SVO#&Kj2V|IlkbhwCNlaSVo^Q3O(kfj_S`EO789}@-o*M
ziPNcaLKUcNwa8Q7AtRO~iB4b%R@h^2WMj=5q#ICxJO1z{usWbo;s$-<l?x6`3N1(t
z1;TJZZ`#{ESOd7+yvh;Vr#%h+l?|ayyB{8;IG)aGbHC)`Rgb@YJ0Bu5iW@UK6*Xsc
zYd@K<eNi&RKV~_DFGtCo;97g}8H+9j0Vx@@(Dr=%ut;JWZX|BSstKqXG@t69r0UQ*
z&k`q^IqHw@$|4p|x@oKaTrM%h=WGHp^A`!6!cXYV#K)J6Kn2ho3fDjFPo_g;3a&5P
z(%X?JeaPRMCIjDEfJaZts=zrP<*$$5e5V3e);asFUF%AW)zakci_3rD1<-t~#vsIu
z4&rjqpDP)Y<4jy*WN7Zbo{npm{%*6i&Bp$fC&mQBMH=@p)3{hhZIJ({rF-i{x>?uO
zQ~Ixel7_;SP?KgiYO4SVl^_w9QWc|uEe}85YGsEci_X?73nXCZk9>fjYT>DN$DX9d
zl7GoVe7GQOQ?=2}8KUQWOZ2p2xrOKf;()19c~0IcP~JU$s@ieV8JylgOA^bl=Zb_(
zdbA_SZF?cOW66+X=SB*t#7+4m(i5P*^fAkS8$p@L#A4+Gt&5XIy!ph4?E%B->krEJ
z-|22sj2(U4POa&y=>2J9e?`p8r3`OJgiUTI{;0OXveL))0elgvNlwKnN8J3bv87mc
z=03$9>|>|1$!=p_`#=Bi0gRH@n)EG&=P}J>k;l8M!D-tL5;WfRT2$QvOT$UdZT3?|
zzsz+T%st#jFa6fLT?7&4hMbi(4;{=OhDfT*U1fY0Gvp^qRcz@ncLa4^&SeMk#(WM4
zg59*Nj0QH(i3!&AsH<innB<h7kR?`_g<Im0o}o7nytcX*xNER(=z+v;%!lsUXBdRN
z!~LerzT;9}_g;L`bnUm3hrDLlUuc)uG(Rca;LB>xtwOCJEfmcDb4I(eMg5GbZYFDg
zl!mEi0M~0y);;GaZsew(1%5jH+IU-eH8)BLC&sjis<l<n^(xC@giab`aERw8__+vu
z^zU3?xW2Nho=}lr@<L(YMVo&HL2%^9(OLMW)i@K_gWUdXl?((14A)?{ZR&4(j|?R+
zq{WKb81CJLv6DtzA4wr>moj*Zch2mqM1$W&Xa8yl^hy+0G<N9h`qR_70e+M1#C%}!
z$29;oIgMh1N}>ycDxW0`O{&eO0_`V%(N4BrqFBHPztqPjh#BA;A8cP(u!};=2Rko#
ze)l4&N*BUZhs9*Usp=!Me_gXb<(NpXP^j6L*!fPJ>f%kfgn<>2aXzh`+h6&D3tAv*
z+`kYT8G2tKaSzZ~=|tlNJPELIaAG%b-v8~AjI|Ek2Gsm^+D~t%yJA4=7RTzI5Q~Pv
zRZRIj-A$_FyRfxp)Z0=j9*LIA8IXMMnp!P-qe<7<vuvlRP=V2#=buzlswpFQL*&}Q
zyQj3}siruR{UbtU!_1&8PAi@im9shR(6~NT<_a`suBJ&a!7tiN_0*mQL~w1wqe<3X
zl;VVYX4Y#==2!BqakL7L8+^(@J%gXQge^N?7kZshJkObw^Ad5K{6@>5(#dOoY%sWW
z`lwd`S3hLHk5cnlLRlldX&&diCLJZuT?u(9XW^oT5eW3SPOAmpV*>gm&$+2y(6$gF
zy5<%o6S|JednrF@2~^z%G4Xx$4Y>sF!pNTZm3-CvR76%mj*yad=(Q<Z9NpCeiIkw9
zi9q{0bIMSAgC;6H-A#v(-S3o!nK3hJ{3cfW`P2rJp)F9XZRiaKEngWVed;0D!zINd
z@4tMS_mtSafy1MLMz~PDU6pI0@TD`Z9`J(M?A-o=Eq+iCCb%>#mix7@S-mCG&;Qy}
zmzKu5nUHQ;2=`Bpye16_r#`+|G*ZB|)wN{X7*c!I+LLv64I4*J^qn$BXDdWrPRlIA
zUEf>gwmu$IlieZt_yWNqJdF$jd6$gcDRF{_#<oO;OcZf0+vFI63p?UHeR1XSKZGKZ
zrv0;WGnQ-&qZ6I3(hNgD9YtvLOUcaKIbQ69l)d3cNaiIPx#nT(c>g6@yq<EkecwlE
z7F(qzT)>t-uhL7vRkJ4(^G_@S|8-@?WSb>oIN1)ALVMnBV=>w!FkuxH8;7YG7WO)c
z6%MlJ;!KY)-1T?a*CQspO@5&+Ux&3i{p5LM#;m60E}30yV*XPawR@1J`lN5YAO^c*
zo$|UGkb_&r0?`t3U6RELp-;`!VVc+w{Y7<q=<HS*Qnl+yr~pyuzGh=USIo0_XOUoE
zV~<g3!xx@qtFLE1{6&DtXJ!MlF)DqUyw*{+t2V}{py?59Pyc1e+q2How7_t$Ezt7`
zGCY}I0VvcLS3(F^LH!N*SyyQMqJ)L@Jg$rws6v8I!bZ-`S3D*`YG0ANxnM#d>3D=d
zL+phXi_k}Jskg)yY9}K8Xv-IKnSkw{_YGH{er-P~p+b?R_SIk16r$yP^EL``-a!cw
z;m)S_O^`$BMI;2j4X?Wk>uc+0KDJq<4D=zo5DzCS%Q8xQ;!^zii%8wj!qjMA^XB?{
zE@B1=14Ii>Bx`__96@<Tm#sR8klubIe@fb~V$q8pzw{B#w`+Ch_wQ_c!dNk)oKBK9
zghnr-yt0dcxEz5p^f*gq%Lz3zO6~&Yz?*_QS~*^5&*NbfR#fT6pU*!!{nZ5t*Pw!%
z<UWf{tnO^3!&`y05LG)#Vr6_qdc)~M_-iqU(-@a*ZU&o*hg4$2d`essnDEi|q63o-
z+})#=_Lty!qfA3%nveUa;qGkK=vr|I>ZN*H-L+fZ(x?R#N=iy-mNJYS-=k8%lhDS&
zmZ!-7V#qLq<2~@;{(6j^vjnbR4-V2-9T?Q=fG9mr4{v_OZ&b<l%(P-iSdK>5%@HZn
zjdOflkuZ@sd^W>`)nZ8LXe{&Z_wn|p`DrwE97?CCD#yi~vE=hFrL=Phh3Foo)GL;d
z<`=h~07%s`?Kn}G^a|}n_z^4#v9&+8B8X-PNuwc<Ayfz*gi?CO!h8=0fNHj!F<Neu
zfKTu_mOOr)HI_x*{i;}>!ZYNanYzx;PeRk5>D7|3fq7`5$)tU;&ZS~p7mr-I#7c!=
zWlgLe*k8dBF&=iC<0T5ZXPRr|O0uE6-<6ju4+Wvcv~06denC=Azik(gDEBMgz|9vH
zLjLElUDauJFkz?0A%--R+iKl1kHSU9aSAlW45asBfV^qfUs!iq4YJ5>N)C^*1VR2+
zoh|;P(dC^8EI(FB*BeoSt0gFb!cc(ejb3t~gzmUe<GGf!cG<iE-HJ*|lkr`!bZ-(8
z*yGqpirL+|j}w7`wt4SgwS?#5Q7G@@1`$E@N4e;YWWVpf8XDmnf0E};T)#O2x4AXU
z5-&QXyb+?{=HZOyeU^+;?w1m9&ci7kP@>bbtTh;jdD;NF$A1aIOrdAA-p1e{`02V{
z<_002bZb|Ta@c_>#@0|&vw=khUev5S=y!=4VfZ=K50b$Tyk3zH>7JP-{auWedh#=3
z8VzJXvYnxw&w5IT6lzZ*VLE=kNiTwzl;2E-;Gok;@EAt(<xwRxJ>566gl%50$#9%b
z2O^sDdmcl*)}$KX#d>VGnAbatB2uT_#(<|A*kee^ruL4`Y>ggOp^{}J^#!p(PM|`A
zI2wd_9?-29|3FNd-9K;<T&6SBmz+T}{6msEsG8VQul_jzMj9T^%iq_vO%KI0Gk~2^
z7_eQcWbFK!gcx|FJh0#dn7u1>&hsPf4n7NMemrjgaj4&)DLB&>P4LlcQ7I)Phkwe&
zzoQ?HN7ZWWIXm62-i~tA!X4*Di@!O`>B5;QkvAH5+rf5p*Ra>VK=5=iLz-oc;ld)^
z71utniZ%cUN`JI(`|<qE6)%Bm!0PPrLQxG^kD6RlaG^2MY!hI!#7!DY!&#|b^fX#D
zCEmSn@Ow-^K2;e1+jF7{^;Bxh0Pt6N5mKD|z1CB;qE0<w7|8D_z6FJ>AxH^%F;^m`
z2I)42_cW1&3rzvKU|QO_U`86v+h4g5&21(_D9b_fX!1$Th>Yk140RxBs<Y-w9LS$k
zi4sm#8$&UECS%?TgJkzaVtYl<kIj!l9g(JFv8xH!+WTv{=|S|q<@V1OO5j3G5yJvc
z=W9&9drTUeiFE5*c1eA#4=HaS%LTWyx6>dTO}*{FU#DK;MM1kl6wFAV^*|!A4k|S*
zOD76pOMC)3iAy)b&rp%$sk(6~{Hi$z&zQeMEoce=ua4=A3he$Qow^6a)BY}sDW8_l
z$z8${Pvh69t%Zn948*@Q=kGwZWUgIMTR^o0k&d2c6pcCT2AdHd^YD#FW~5lr6V-^%
zck**O<K1Yy3ug|IG1+g}^Q$GBp1u^TVAEPj`EWf1o%T{i|LFWa13Uh3E+<<{aa9uE
z194-KOw(PNbW4MC-J=8ps;a=ZjyYd1l1$Bn@7y5vcrZ}#_V{B0b^`TfkK0!l*%y4X
zG;(#|nVKD>eRAlm+rj(QuD8*RdwiU=^TsbK5r66@Nlws+(oSpd<#+{Iq$8Rw90Gm7
zna3!vh*Tg}=?5fQ%{!qOkvrY60<#eYWS7!4=}|d@uY=Ggpb0-hnn|K6>?<l>8ySXm
z1FWU*VZJ35aGT9IXY1;k2XN?u?p!ge!F17pHdp;1hn!j<6}ny5@=3)J0Q2DU6}J)2
zI^(Ji!Wnb6T6Og^w&JpoJZ)>I7&Qk@o4H4#RdPYE=ri##hY&>L;hOewD`wZB<6_~E
zVwtGuG}V?!fQ<GJaQY8)q87(-6`f`RQ>mS>B3A>E32esXt^7%j90|Tb{*ONUNc`4d
zRSzBK9WkhKgSiTRG}a<Ie@Qih>@gj^cw*A6p<)l;Ll(*pk=T-J%KOu?!0>`0eu>98
zmbM>nQ$iy0Rm~}={bW=#3VN~(ACN|JuwoW}4)N1X1AG$i;BVF2a4YWGtgI>jwmZ2<
z=!<crHcn4;8}~6nwWsrPyR4LI6b_;0gHS`(wykS$S!d#^oB{Clr&*KG`aa&x-}#8o
z1(Akj+ma{Hu^Vr_5t&9N8wB)eD@KiV@lymmxE+4|P$VoRovjy##`g`QeIMq^uQzKc
z>&KYb-=M3QdJU>Mc~-F_wwoMdZxx}`sc+qCm6$p#tkyp^>y)az6kFg1vg-u9w7{WN
zV?uy*4d!}IYz0zCh-&*GzczJ}pPOKtj?kGN@h_M4FP<kD=<fgikthHM(Go3keNNzP
z=<>uTFbfA?+1R9-`bmOX*TM{X9_zlt(lsS$%k9~594d(luyl`<PU^|4>S{HS_3n*G
zpy&#!u^Z{2V)cc44*WFa9X$Cm8?cO_UQRilhMW-M01%(a^BH3ED7aEOtVi_3Jr?{~
zul*F72vGmh#g1!e>e$n?Yu0Y~x4DX9HK3&avXocw`(|?%9TOsBYo*F9Ma}t=Rf~EE
zyJ10)LpEasX_z2c(6mHZ>+)Z)HASB@a+LhmY8BHlU53e_vaxWgX06y*;B`WH4<_I~
zhVZAQexMx_2qt5vIUTBj=gi7BRutLrVje(UMJo{(7L~Qdwsc{&Mnth33m{qHbLF^{
z@4X6YYbp@OmRQne8F%VMiv3;?n61w!jHy#!{<uwdnNDuvUlFc1hc<pPp0etm)|`}|
zVaQjOP+{h^z*3b~P%#8VJ}kFJ)mg~=qA3f`F2dq2Vj0#38-qo%Qx5*^sq^T#@8A1;
zzLG}Os&;5h)frPyRdW?+MO4RVqOiM6;&!&^$f&{sCa?P=JASoV)8g#;JM1N2C@Wl&
z2<PuNDixPAY<9-Rmz72Mj9Pb4WuxsNBQqsd7x`F8RM&ZcSP+HrI}|Q<aN1Z5G${5V
zm8-#5q=_w@kn{6yrh4!pp{|Ecgq6VeXG5xyyW4=~>Nx3QFl*~a+~i1{9mBu!tGWi0
zPP`)@V^}_lDr7vGJLqAt#j9fXtUt`vxwm27UDDgoncj*gmWDr-X)7k_D^V4R`&)+9
zZsQc?oTt-3YVoQz<vR6u=6n8iCLy)b-yQ@}F$^(4R{q{dc9Tc&BB>?1229z2pGG)E
zDSb<jEJlRSeJSn_izzvXjjP8D^0x>P7SeBoHq}<`+Jxq}Q_dN?&KcfRe0_YKgbXGA
zKEAr&<Ogseo1rSRMS)@@Hbj0?;{T-hLs0oL_`@ykxP*#ndG#OH#NZq(Jw4o$K_fzN
zrI!O9U!%k@y_*=hSQpz7Cr*?HqA2JQ<g~jx?;`Jh02V9XS>4*#g$rze`W5QNE}an3
zOh$<w!VKfjgXJppDJHR!+(RPQOk7sco(aMGSM;NC_QZ>1UW9%U?PjEn@ncFoS^e`B
zE{V%RzB9u2ZGjRCLR-ea5Hlb)Eu+tzmsxO!B`#nf(=>gb-yKGffS)^byGK2D3{jBd
G;{O3h1ev4&

literal 0
HcmV?d00001

diff --git a/doc/check-certificates.d/notification.avif b/doc/check-certificates.d/notification.avif
deleted file mode 100644
index 7c250da192f5f0045edba36cc55e0e7246cd75b5..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 25274
zcmdqGb8zKf(=WPX+qP|MVrOD!V%v5m*2K2$WMbQPCbq4U`MvKs_j#VWb?V}eTXlO^
z@9ti`c6Wc4zSsZ&fY8Lr-A>=d+ywANf2Fm#36r(CzKN_5lMny^#A0pir2p6VMU-Yn
zRu2EA0swaAhED%e|0}J`4gO~scsp|^>wkPeU*ELmR<?$JEfD|!81T2{i!mGl0BP|r
z`yUHP3jjdJ{L+QY&29dv<R1_Amtp+3%imw<yD%~d+gjQFQvlZg@_e~P-ONq?^52fw
z<_^aH6#xK$H#BlI{3qq#q!#9O4t8Hs+T702_DiCgJK7n4$u9!F_{t#hr6AgwyP5xO
z0fB^s{1UMGE=<DyM1NZVD2BFH4mO5XZePW~0l@vfnlQ}mto8r;z6b~a1PTNk2>Mm1
zskM>*KSLuaNe%cL=Bt!1h5~#5K>s57hrhc2xBRmITmM@YFc1g;<V*T}G02zxw?Ft_
z{udqXzxBWUfPnuiPRN%I{NH*s+L!S~kpFx>mp``wh*DybVqb~=DHH(sTmuLLAi=>Q
zz`-CPARwTiAfaJV;b384V6l)<5K!^33Gnf-ad8Pr=_v?_X-RN#DLJTU8JSpFSqUh(
z_&Aw)=~-Br{{{hqf`WpDfyIP_!(=AHC1U=+O`qKWBuIcQ&=*)@05B2|2olg|KY-w?
zPB5T<=)a)+1quQR1`YuU1r77np%L-#NPz%@f`Ea6ehoU1_m>|4iUfvC#3Tfc@?9T-
z*dCSHKQ0%N<XdeIn&QkADT{$a02DMj1|}9Z894<d6*VgxI|nBhx3Gw)n7D+bl#;TF
zs+zinrlFCsiK&^ng`<<Ri>sTvM_^EJ$j{KQ@c3T|iAl*RscCun1%*Y$C8cF`^$m?p
z%`L5My?y-ygG0k3qqB4K3yVw3E2}$ycK7xV4v&scu5WJd?jIhXo?rgr`it{_(tjcQ
z4_ruJxPU=HK|mq?;sOG8{R<ok6pV-o99if)guXorF|$7;>bJPu+8!tp7R4(x1BV%C
zbW+wGvg^Ol{z3MC4OqbcBV_*z*#CiR6#xqY^fh@PNB{xAT_u6|9O;ae&fTkti9ZxM
zp(H07-kh86;N8l4pE2&~{yr>W_9m0c5uf<Z{I%u>4y2POxC3xy9TP?I2HIiUdEL~X
z-yQlzS8qwyC4$E!WB3OWJG9`gz9@*0gYpnL1uPA7XHI;IJq*^Yucpl|#;`v?63OI2
zJp$!h=2$J&+gF@U6@Di=5JAKX;&sTHc(E=0Xq`!y{2fMXlVlF7Iwu)Ms>(A0EyxKL
zI*ixZ*j1uIcVDl?8!z^IAwoRztpc74A~2G`aFBaC&Em*0A}B-mXi$Tf_7A(n-J>L=
zigT3IURle?d7`mEl+2ZzHDYZ*j~^!wi7KD{G=eTQ()I+QNL-mzNwkqd1vpN$7=&Je
zkBYSypIKD}X$G1?{sA6y@!Wgj;c6<G+0T%}gaN$Fa*4VMnE;?fgWM3e;{dMXN$!Q}
zvvY*ecqK!V+CeB2vjhNO(!;5Q=&CWQad$&&%pSFFxK2tX;W=2%;*g}~Zb-gL{z;S;
zY;2OW1@`D@*NwU-1YQV@{!wZbt*{wg!ix=-j<)7_CNHwqNo5H127wQV4OV`~-IlZg
zQ9W!|o++Wf1*WBhYmkfZI^$Kjaz~bJKVI!tQxaZh#oy!^+QI(UO)Wtb)Q&7SSC)~d
zKS`{{+oU9{Hh%V|fiHHRIF2t|MG*^p1}<!@3MbY8-`N`<ZWK;WF-?^#l``lLqdjk~
zvKu!ZsZ^=ay5WkoWgc)?x4k{bxwnJD?A{mWiLKQl_}l%-+h!7nU@QB<Z!x2O7-yZh
zgI<*!xGr+<0^D%bKZS{(vE5C*!^^@YZDkNj%4Xdt#1dpXDac(ANPvM%pp|iV`Jg_$
zEj)c;%#)G>PEeha$C;5^boy%yGvM6;(_m9)vNRw5i(QZVzP&O3qF2udq6*ZqR=+@K
zegd`<KLODHZgq(Q6h8WAyN>WIKLI{!Z<POPP`{%B3BRI9eFAcvtKXmXuJZrYD8Ewx
zL-?0e{~x7okq>uaPvR%2kDpzo#H$KO3ImR3=fG7fRLgqP{RG6>jD2(tefZ61^=V}$
zMg9Ij8WYtvK1XwZ)a<bZ-4xpCAcmvgoTQUmL|1JO-yT#I8<fO>jFY!>zpH#l`4Chk
zxWCALfh^ySo1R08D?Iin3aiqU<<`&@^(2-h8*!*3f$WXNfQXFdI+8Wheb22lLN9<?
z15$rDtdy5ERmO6GW(JoWBHe}t1aIylCPax{b|P>-oW9)NmDNg?wTq0#4u0s`mB>&0
z8rr-YI@BaeOkj=`+C%i1ody%QYbEb~Mi~dqaMo#$?ra!LdJ|jISGB@5a^{H^i13fZ
zzxN3TjB7aSC8QWU7s>>_LDkqCx%1Qs;NP?Dr3J`iuZp6G32jcT1xD|7ZjIj!=;Zma
zR8N*z<ykV&YDXI>a@r<bvCL%<^u`s;FMd-br3v$R**m*Dj{F2<n46?U*U|6&5R-Uo
zVFgO1v4lUz4xIrR3Nr+tYZqPM@I_`n4xeVxLUg<u85%s}WN`7>zmYnAcvGLF0%bar
z7h|?sn&l_#K2m?Q=oa&_v=v2FW5Z-KsTjfb;^kv$d$sP}svhOQ#_>1qp**<3`q^jP
z-tO}G{+{Hsxc{x4`3W#n#(n!OZk6pT<KbM6ssJt}TbXVK(`Q9)Ha!;1sYZ7T;BW%j
zN^@Md1Xh8u1QH{X=dEr%j9Uty&+}v6O;@>{p0LSM9BK_xA7jVa-}?mozMuLYK7THX
z3i$pX{O^lp;Yj7M3!`gKtL_s}UHi5C*(hoj4^8uYhoSpEI_5qBLTElEX4yBuHD7+G
zPr$UOUJ+s0YS4FiqiY%5{2xANJM~$Np18Yd^(vRyqYbV%N!mZoOrR0?i~N{Gu!-ey
z`1YcRr3QrA?Yf!cx_2@4KLJ1w<%^2P57T)<ENG(Lqw($nGKZ@<;eUGF)vz4`I}$Dh
z;ib`rUv7MUvXQ#7hoA8e{nXwI0(e!ay(oZ%-j_ouw5`MWFK{5*N#oM<H<EfJW=z#_
z^$7^j!@Hdh?PyHU6<E!{(KFXh;Yv3OJ-dV;%;hBu#Jwn2+T%5d#*ebc`47t{+ix_)
zEU^Mr&#Mw^9ou3<UKkOQ`k|3#{IEGBxcIu(?;lqWE?#%7n2rP+8^b(0{H~p37UiR-
zEiyx0*|oDy|5XGo@$jLo00z-8Gcoa-ZU(mUS6t@q*pRlzkHbd2D66!ajq$2vutFrU
zep4=<7F>^oU&R{Z`Uz_}OqpYT0&QXlB|Yz8>gZSHHb|5<?jTE*0MiMu=;ybQ^;Z3Z
z3{$uo1UY_fTpvz63mtkM%H3FvR^zF0iOZ=*jaRZx$QvaHtY?pH!)JTBaLim#QS2On
z4a^)U%DiyE|Bh*<d>DL(n~gsKdWN3>L5n-;+pUPL8@d(WrRA^b#s0Ny=~zD_um|=v
zQM$)p3nIKrnN|K7NZog-&G(47dJgfsDBFgi;$)AqGwHShNNGs~HmE3cz8_#)(Y-Vg
zXK37x>vZcyF<AvP2?Wo<3}{}_2>&jO)PcB-yRK%mE+c?X6u@~`q3Z285vIztUqiHh
zMkd$mVfwmEklbN)kBdFv&HlW}jvY}(Nfc*n<0FPOa+!gjJ?cl_p5_;Tf(vQH<JEn}
zuM6*v=RRZ+b-2J1+#o!5qy7WHulqj9a{p%D{9UK9!Ct(Cl=&@u(tQfAemz53VeN!b
zC!}Q|-%X8nSWv0Kl%TYS-%kO=ux*jTU16=lM`k8Kjev37*l&ajN8=*}^ROt0c{3q>
zvRQC#Sp=;P+P_CY)4#HMKS^9`U&Xr+O&pq$nXjkk@V#39`-o{73QOgm!*M!ndO?_G
z9QVh=>l`RuYbB4M<{0xIFzlSTM!T*{G5V)!)3s63kxU>Y(~B0%x@Dui`(7(ZV(!m&
zXTAi9ep9c+l@n-v+v1cmz${O&1YWq;b7_EjQH6%aju5-sjpwicb`PU?0V4lwi!MPh
z)bIc2?0z|L`HX(nb$aG|1g9IU>v`?@A^Mx)<(1$CM9~w@#>Io;&96e>bVJ|{N$n&g
z>=QspgYfbw{|>71VgOz3x%Zy(d^Uz@Oj_DAxfAWvQjP|;R|-}xO<bx>m^lP+T)N7E
z)|HKPw1u5%PAiBF%%B9I#QY9<_n1c<Dth+JYfH)N9~+*+iI%5X;(BXSn%J|n^BQ9p
zi#Hb36^fToiWNW_YE%ueq>)w;^Q*{`^p2MU0o|C+*hY|-O91kj)uP0gB*_wIX@PLa
zYQNiE=}h5cQtlioUelnJwzun4rVVRB7R2eaf%qQ6-|nfL^!VUo$QV?P6@ry*zP=U;
zifh;j@hZHSmb^G+Ko6E;_E67c&I}j<jra7L_yojwD1bLMd>3ss*aZ?}-vz+JZzgKJ
z;v*!an$Z5P*^3MiW0@<#8hRZp7pho0U?fpblc#c#q(n%<V>$s$b;3!c&9>7p`aOGM
zZS+Sp+F?X~ErC98KU(^<&~%YGL!@YzuM=+ge5>oO<d=xQP3N>pYDPU1tQrCH`Q4O|
zLRDuJF+)7#8uO;vHuD~VuTXRge<IOh9s+R;U3fBp)-MUVmDJNQ98hanG+^m)TM^$L
zovY<(WCu82yNJ1w)vlOd*!^V}Nm8TCqjKXg1i*#o?_ipe(zuteuR%c0oaH7&xaFUx
zwPQLdPymlYi*0)YUpb_15nUIIMFv05dHHb<F^AvCV=+So6g%iOC|ieDA&51MH^}uS
z3NZVwUiTEgK-azp^r5r72_X*Y{_+W+j<<H9Bwbcux?My@yK#s1Fsz=KTlHfrsR&-m
zkKZT=N1=IUpe~arU{n-`;5>gaDgKyO$;>rNsT(d?gWqn20NpL-^|(D2#70%c^&#`G
z0u`eLK^|!}QUrH3<qv1S*#P1!*IR>L0*BN$$J1pqz_SB^J*<{N7-|HVf7jSrwW_V>
zt0zZWw$YDCxSkTqKv@b8c78H4MH*@$pZbGE79s|r>j0S2EB-ppMU8xI`dL!K)((tl
zfaPX>MGsvaOWOZ|%oR6^n1Iaflmwa-B*8p$^gl5JF$kaZ)?{l@2QL3DHRBf#G7Q+w
zdW)v6*d$UX68AK~?I$z31y|#-6SzJzT?z-R<<;Y8He=wcD*ZH~)rLi6nX6u!L*uK;
zN1Go*K3|`4&xhyIj*I2qy}F<T-v58M3q#Her8Te-W&FHyU~iR_F|tfov<HaA342r>
zgC{*-6~JuyKLHaYBRW|&(=NCP_opA;C!80J9Ab1<wFI=WSd!0m-UvmUkA>ljPx3hJ
zM>9k0`#@9U=^A!!r=!_2;g*_uZHT0Tyz$|n#Xzk+uk8<qtA4D6EO@=vzmq|zTOj;1
z96S#SD|W5D>W4?z(Y1nn+qDcpfs!FM<mE3_j+(7_qUCnC_$C1S^*PB3%vu#QKUfG@
zBlX4BW8OStu1{Dk!POhhv&WjdLYNJIfl9WZuXe*4@-iu9Ee~<!z@5<0pUmzA8R<M*
zVJV|~*<f;=FH!Knic2}!=}-@oCUHROglI=g>{8V1W%nz9C!$55h2$RaL@Xq6sH_$V
z-$YW9A_}Y+Ab7vs9qf1BV+a*St!k+EXPI+83l4fj3-LNl0Ce-}NhEU!CGD{jql8Ti
z99-euapCi_ZH=AcYm>I?+|LPt!k*o`A5J)rhdRF2zQz)Ib9{NQGiYB80hj-}ye@>z
zg2^AM3=xALSXvYZgodC#{9pHn2H{0<+Vp9L38@sT;=>=s(Q;IIFnydZPL$DwYW7&T
zhrFIKV~t<g>-6M0EfW)MarEW0_?B_%`X6{5x*oeve<`I~CK)-5>N$Y(4EOp^LX>j7
zQ3AiCCE6PMqI-=beGlnjuHgfK6w5)qWZPKbc*Yg4^&NmG0z=`pf^IuFM$0ey(a&fc
zEME06Lj_=LH6x?c69SE3o&H+Gx|C~fYz@QkT1%m(>cbzR8^OIElG~{720Nh+a#_;#
zvf2MuQME@~;Wh~9!F|d0N%Zl9rp)t${`Z@J4(RsBKaXz_E_(M50(amA57_HxcmHw|
zutZV#H1w@$)|xQssv@qptZ&pY0D`Y<>x}}R;1iI&_zCD@_&^1ko_Fk}h|o7^4~#o=
ze5Zl=K#4*41WcX!ZYBSHJlo;C`UJdvG`~OlUKJ640v>pM&2J+PnV*ZPIjy3zG6j@Q
z%&f6D=6^y<hKfKcFy{P<Ddr?D@$I$W`2;+_+rHj>0(QjzBWJa_AzHeG;nXGjA%7o1
zln84HNck0>FyNcNpR4`dbDJmh*EJw$x9<~h`?B@8{|V@gd6MH5_yh=4emxfIy-|YX
zfB+DrrjjKk^_fyrV1H970ErpMiRWSws`~zWu758?5W7!4Qd7vLs&9m_{1bp~C&YEn
zC6Gy180lipJm`4Pc^k{U4Zq=``X3elXB74q5%$GnXh|aIICAw1%oxn=D{hyU`%<ug
zuq4H2dlo6VnItl)?RN+Qzl!RAFa1A&`LSwAg#N@g)Zay_i)9o;#pmnw*F>B8_k{mZ
z4bb$A_T&E+CLY}XZ$kXr5v_ypZ?Mq@yri$uQ!C6|YSh=UNTp-<Fjw4G`&u6VZidel
zWB@cYrwRQk4<w`+s~>Y?5)e`>Pza{J;D)@EE%No@^n$+3Xja@)+ANjltm{)@z{yRw
z<P2J3r3MpR)Zjpl;_4YNB&;)m^>+s2Qh?-Ty1&>V4H+Q(34=3s!S}sRhoVnX!;sR0
zILE$am@4`=6?zB`PkC-ABL86Zw98zYQCO(|9PYT8lDu6;VM@1g530I5d-6Wj4<dtr
zWo<afsRjr6@tKzA-5%CfR*p@aXTsOGS8Zm=4M+5#2U!><=uZ0K^e9kYCJ$iKrJ_3V
zz2<$7nElX&@A?+HZo;3S2`}wdvE$a-X83l~VnE>wVRnIVgapMFiup(<`4lq=K6mvz
z3-9Q_+asIb=tYQ-keas{fSKf)G+dqEW<4R*IwYPnc-4olb8)5<T)R7}qcvu$hEJ6*
zM=N+-U0Phat{(E};iS}<KsX1vHYAAiS93sCr;25|d><=#EDt!a9+B<oO_z>dYxO_q
z&I~f2fOfe-%dnPD^CZ|sMN@7AskKUBcfq6UY2*y@mZIlm>k7HTHElFbCuWc*TtG*E
z^mV2M%3-7h>WHz6BQ>N0DI1G-@<MQvF`pk^LDH3E5)Y;njzjN0YpXMEKNo@|SStzG
z8PBlZ+}Cr{7m$1|@JYTS3?zG|VGo2JZiv{>g~3k9q>RZ~)IK#x@z6*T@<%G}X8{zX
zWIk&CTtTFjFxwwSQB*jc3fGFHo%nl!qP81|Ee@rg4{c;J&5JCMXS2Chv?@);W5TBg
zCEbO$SjKs#rpNW?J+&`GT0_x;ZPZ_yMV-9}VjjOp?hc%apVuqON#KP_YHh`;S2fMC
z$|y6MV2(%&guvuWY2vR0Ww>aailQL3?_5i2^3ipGezNxfodS(UbN~r_LR=JmcEZf9
z18tfWdKDN2L6UZ#^eTx!K^LBoYXV_<6VzUZizj|7Ye`#)M71pBR=P5lzj(!xnyIlG
zo)3+h<|M4EQS!5d7}g44Gk<hp69Yb8#l;T_Ur2&lH3-4Qtt=0(@xRD)yDA62RdK7$
zEbWJZMS{kO^|Gfg+!9NyfL*g3l><$@+vy!iCcQCI7j68xQv_xaj_t9e^mAzKfE3yK
zB$&wqrdRSqLyf5nyC@ca7qn-puY(P2SG}C05H^EEYbZs)yUqT4RAy)uGf5Vx@{0v<
z@)}{moQW5hfrs3vqcUFF<Lybqxcqtr*&60UQuFF2&-EOWF6YZ5qp(W;5>je}`L=Bv
zbdMd7t8-c5B`4vg?HL`BBq7FSOaTk*L#{g|b4&v8TTfPite|8%=#yRVh#KOZ@6PlK
z)r{&@das&lBy(m!9bW1C;`|#D1nvZKAyOCMV(*53!@lmMC%8N9lw}6>$yl{ubs10s
zw!Rou$9=Li^(S;EUH7DSdFi{-82PGV$xt!<fMNM0^f%tunOTe$tH~O0--e{$zCY_z
zhmua{(9SEd;1n@`0&h)1xgtNg_nVEYzyJBQC{eD{5%ALZA=SzgU%ZEA<xZ~mD`pGw
zg@*g&P%raasi~IKC&YxnNwQ7|?E?j~5UFCgJ-B+*uc<ufHmIX=jr&&c*T5Fj%}v6Z
zv8huXvSv>8=E?qCZeu^unYW>e5#0d1$*TY#h#q)U*9`g9)Y}k!R~w#3p$dckX*}93
zTRqT*k2Eq?(%nkYJ8vq{Zr-KCVto!sa?~Y(=mB}RN_&VmCA+QVc!fzR-}-G?Bw!Z*
z{`q@_llS9zx58QoW50zA!;c(Dg107pWGc+iS_A?CKRaCLW8rR!ZlG!=FZiFf*7r)w
z%TuWCcl;3%3{ALo9u!!&89$l$qHkqP#=2BXE-F+6lR*{p^y_~dhL8l$Pan~s#Qs`R
z%DeZbDk^YQP86T#ZK9BpK|b4}WSw!Qysz4X>^jKB4QaS--}4i9A)=E2MafTnxlLfO
zZ(8a{Cyng$7xFyj|EWSF*4*Fe$|HBcaDu9ljmzG2SBpF@IIQXeeY}PK3z#c*+0UH9
z?7_)z{~Efyu!&D1jx0T*_%k9%9}K~rCgdb<o}$k2>7c(kVh8sVSb)TL`PxRHFJeOj
z(w_ecUaxac=D^?v{I?oL63N8UFd+NwM)!?*!P4DV;^@Q7jc-@XOkd*gvO<6~HJ^By
z<VhPlEqvR_-adtZ312U2TG3s{%Wfu&kFo4fkx&69OR>vZtI*B+P+3qpc73J}TV2+N
zCx5LIPl_Ssm#-SJ*mwlQ^Sk?cd-vopOGQT#(>dhx9vAoCfDx2Jwc2mT6rSxoZci5X
zBk^sP<@RK>aadC_fmL7iTGhU&{HneI2VM`}fbLZ{|7>dVq8r%9f#_vv#)m_~t1z>^
zr2&UpAgcI?T2J3%`?sq?2OOLxFG9wI`AhrtX`S+8Z}~S3ycuo^=p<CZiV*u^R*K5K
z%@9o9jE55ybl++KCY5R`W#2W-1(AI&?UIcpbPG{>8cBHLg>D_Ul=Z?u1e;p)<(|VQ
zzp&17qAXJ7o-lT@=SW8GZ!BpbfcubG;X1Pz-g(Vk*vlxUQQocT<4;&cfJXtz%JuNL
zlXkWduMWzX?lt!EDnae-7_(iL?5L<*(k6188F{_`X1KmJ#f(44ejH93q%rwAY(zdt
zk_Ak%b}g;AE^%b+PNwQ+WpoCLK1~wikMD`T$o2X+HKFqbEiet%Bjii>+l=ws2}8z7
zJm9wp*w&i0`456TMD}e!UIy~#AvHRoR*zA7g{g#R-OF%Gw>YZ-u}OA12kNG;T1eQT
z`}fL@OV~U1#}LBKlONq(&jXA#LnSpYAEiDUlFOXzOOa5G3|h`%f1;hcNU&OI1SwX6
z0y5i)er~FLgDq!8)Zl9G3{`#f-oa~F@ow0q!(L1_KnDMm86d^8(&(uLA!n1tU)T#f
z?e}HP@WtetmA{oX%QG&~PDW?0aCsA(tym(t9+lvH9`(R42!IdngMeebIdU-NB56t&
zb<gtK683BeNQ6YI;=dVT{E0eEV#DZ;+Vzu-cz301EsI4k->6GpoCy5JO(XzwP;p+?
zk5xqoFRKWH3mT?Hr5csqQKSPYbI9umtoO{-kON8bw&>inHMih0;fT>eA?I8U+y=Y<
z5(BZLpDwbm5@!2osERTkLJ9g}aaV-+`#@tCIRE<PQf`v<seIaSE9!{#c}GDt*YhyZ
zuuHNP*_6BnUDwp4L5hXm8?aFGJ9<mR0sQpT2kML?zD{29z$Oru?a+7sGXSUeEmx^g
zrGhEL*&HpIukA%*t&p*A4zyu>IN7ml5zX=YYcm^Y)T__(;ng^@=1Ng&RfI}EBY_-}
z9YOu+B)3dPR9=^FxrS9s9pV5ns9VKh{;KZG7z@H&F%g1kHI%-I*zeIcA<^LRJjbQU
zafF@l_Q&(3m{&CU4AW;{wfM;rG&~~ST?XvB{EdJhmlKyWi*5~!BRp#K6ew2y2So#)
z&k*|%r;#M=Ife<YKWFY};oGdK!|uxwD;w}7ov|3s<!tf8_|0=|Y_}}R_Of}HZXn$>
zb`9%ND^73qC65ISzXl*04m&{towHM4Q`8tkUUHXQ;$BVWM_8x^j9Kqm{z#&vIg`G#
zsj^iC_oR{WKn%W!zM{|K)}|6Rl{8x=#-JZ!sF-G1N;>T4bunJFY!&9aiwt6#*7wN?
zxZl*Agn59|tI92j_;3!E)l7Y#NzL3=Bnw9+(PaDMTudf&BOpZ(=)5N-P=EizLeh9l
zAuQjO2GKxCTXmj&RgxvxUUVoUWe9=%nJyL{6b+{zl8FTpSrqJnE+t$lnO7@!rDmLe
z%*m+}aurCo^vHrqiFrxdx{w=2J7;HwY>SdaR0*au9HT`X^IY<*c-eggdvbC5*7f|!
zF8pNMjP34oE0z-VT^^9ju2ILdk-;$BGz@*k4GGzva>!*SJ10#Eg2}E~C-;Zzo5!i<
zY<d%quhZuiETRmAqWcO_eeRwZq{YM83;)hF+=dE=ob8Nq-14qfoS3I&K)QR2jv>_5
zq*%MvXq;&e2sW~~8t<yGVm9$K>w&sj;fr|n6xcQE@+)G)k!mW&#CZM|T3!Pxxv9Ru
zljOaPvL^dzC~^$FN=2EfP7(&g@Vw0r>A+-Q4<<*z==Jzif0;1vH|nxXy&lb9?+mFq
z0-R%2-d4K#7jesZ58m#|_ImARaAY9#XA-TT@YOA(t#Qow;l2$XK>T%Qha+lFn*-k4
z#_{E9<jfsq(qxq+xW6SY?U~b>U6)?bqBN}}x1E~sHdOuCkW#ThgHtmFE1aWND)PDN
zyE7{auS{?UQ-M?|p4De2(lZ=y6w%x@qB-)E{Aw^gT)1bZ^;;{Vbl4|jqv!Bh>KnuL
zo%x-BNw=e~MDq$_$^n9@yCx7r+iQP7!+V#YMa~##oDe&q8y4?WbZlhRPfBF5tQg<4
z-Cyd3*e;i$(?eI~UA0uC*17?-bIBUt%Dg2#LpQ(O)0sR@X|nubUF1=Dq!W~-F*Uyu
z_+%Quyn`p2!@!LS3(DvO*CRPJeHpfp;<`7j#(QGR>5e=-yjTq;O?1hA9yNx(9{{x1
zHcJA9HUGH|LmTY$Kz9}e&L(E?T4#R%gT=YA4J+moC@G7Ew*)Bmpm^t9--t=g1#u{o
zCOY}Tq~>2fh2t6P0jCrQGN;mm82STUpl}m{MB;qC(Bt|fH$}(WqQ(j9Ncra87mj3d
zt(JU*8sbcq3p&Xt9hg*-vv9TzRMdP~Mi9>2Mv;a?n>AhYdvwv)t*iS`)4E}>kUUIN
z>)|3JltCFQ2aZqUw>Dy9eTnU!NTb<ja#LQm!k&vqoJ5Z&yky~r$yAi&g^?5&JyFr*
z{lcGU_$W@Yxh^l<)~0MOD{ciKM`%QJDHq>Z8Gh>5A4EYS`;@`H*U>#C9kflj*$xV1
zYFpNGos(UVRAmQvW(y@SDj_TjPg^nS;Lu~PXRbaSzjX_dDD|ZJVC9iyX>GpWGZSoH
zoH?jgK%Rpq*cQPG(H>}2hn*eE>IU_$h;_%O!Vf$(sDT5Sn;r}OwjVp7qBzFVK)B|p
zma?I}^-`Gan?q?)mDALLgKsW=Qm>>%0){`um1^at`t=TZY;fE!!Q7NRipZcGP92Gb
z#Y`mY6gn?k94v21M7o&E8?xt2xRmGHtcCz-_fC*g7TEBIlTI&kvOCt*;amONZeCS#
zdQ8|eJ~s2L`zd94C|L!iCWxE^IAtS3BlvX8&{nT&3Z+4NiF5}kHJwdXNeC}lHBalS
zbC$;|tQl$R2N`uG%5ovWE&GpgxO5~QNVA%-U3Ds;ylwUM{fcDLi4K;i80qBws``uh
zQkiWy#-vWIt2(7wvR@qb%7nDnh?A3U&-MaVG$0w@K_diy-exQeSh4bSE>$fB5;YB1
z4T5gr7Ncqo7G93x<DvS<&6rDUT<CnXOwLrf$2ZRjb?6tP_)svbtYT<E#=pbF;5W>Q
zNOiWNiR_k^cf`(XIKH`XbrU~?rhHGRTM|8JdSWJ0G09JRzI7QtxF~Uj6~@yXq$=TP
z(-C+UQ+!=UmWBPrPip?6={oM<#<fXzJhy1rh<CT{2nW{PQiJG(WRv=Oe@(#Qsr43}
zIj`jd8x<3W$xQ$|v(?|NRF*Vam#eWF>kl8Gpb{gQsb^_>&`5u3KAnVJH>HE;-sLDX
zLr(l_H0<pHF!Onyuj$~gb2}B%&Hftgs<>l1Ab5}~T0RRNE&>$v5ruhOlb^;K+J(Nx
zIt|R1n0|$iW4q`8UI!V=3)Z;GcAuN*6D!0;2!B9zN3}}idU|re4`>}}SfzBMHD`lo
z?YfY*6NI(jlM28PJ9VW~jn0r?Zg4#$><8t#iLH3ib_!NR$8GOP6dah&n~U0Y_oW{!
zwuqto{ry(Ol42|Sm(iKE_?^I*?JTvpzPHNww(6wUpl>K;3`_4u3y+Rn;H#A_l+?Gr
zrQ$>-Jg80WZm95xiJ~9GudH0umbTP;Ny_VY^Uf?#P1e)WJuH3Z5osF<+*SmojnW7|
z^?TG9qob%NRk;~=nzXgWQobQ;cnsS~?;S@o6ar^ob-$VP^Gwp8QKKP{z^(t7yw{6>
zf)QTjq#!jNh+%TeDAuVgN1FthDmuA|ul0-evV9HF*;?c{i<1Xssak(aP-;j_;+f^Q
zf#?^3`%s2+AQaV*0&*X88+2nABm#LRY8ig?c<uYimxl3-6!BBZkc2)PDOdHzZW3j)
zN~5=j(CIfwx6>Il94X8T)K8^e)_dm!klJmk4yDHFv0kCX^Hi&4WzwJC!Z*ctIqiCy
z;8W0$?w1lT+flZ183>3R88?Hgu!B~y=FWVB<!4g5uABPC{lofZ-(pzERww;5ca1b_
zw@iMf`&bd|_s&uwzmo*YV)oN%&_sIN{~&2<K1#f<BspbzE8IWQ?v#UUZDk|}`jqTC
zvht&8oK5f>5N4&t+W?#)i>dlmeuE#(95iTbY-ae5X!j}so5Zl7A_8E0{4N+AJD^!?
z!+ra;S6KG9Nyc{G);8|D2z`G$k{Q3cweu}|0Qy0Z-D5vG^4+`7wJg^??VMIr8u*xS
zQg40YkE_hRRuqbZh)sN{;K`l?KGt=(m>{{U1sJcl_L*X32cI%Xf25PY%Wo!?iedcW
zr7@79ix01IRf15?`ld`uB<Izx>1IlFj?#r4O|BkRe@xDnrwf_(%w%gQ`fjJq7f%T;
zZef4wmU~=W$99l#cOf1ku5>%~ex~>PJ>HEjw)mB5e=46PkufTz-UVi`_SvK-%pDAn
zV<F?_OK!Y@^G<2r|6GD*jB^<<SIfHJZfqeMC9}^H&L5K;uVl&A3xoDM(2=#-ya^|L
zvQ(eb|4`KO9JdqIK<dm+^kpS>u>};F4dkRwFD&@fx@lV<b+69wq-F`jess{@Vg785
zlUyY$bb1-Ppg&$TUw=$Q2w79c%zr#?@nfW|rjL`e6EAdj$}?DMed;Vvw;u0I#-2(o
z#Fo4djf#?}(2|v;@uz^2ZoR>;CV~BOt<Ix+cy9I1VB#mm?_n3#YiK|IFe)x&pJk8f
zRR$c3)7wpm!c>r)Vv@A|5~!!%w^>B12p9dSco6~21S%kVn5iY(pzK|86I6z2Is%Pa
zR`YWLysw^1&@jkdz1qKKw3qOh{?qb%StdTp+K${I>4v-nYgjAPX!vU?AgxcGBs+1X
zz%c;&{B--CSla<g20xQ?!~N4(ZncRGcQ-_$vuG7n3W1xQ0srTO{g0;FXZzFnkU;x0
zL~t${ZFxqi!RN+UBsI>!n<@?t(|(mv*4CAivBD0s2D+qyA4+O31D>6BxSD2LdZuXy
z;aXKtXougnN0FmLW3YTFuQbrIQQ%YH-1OSYJ|5VwBjM%?HLd#tn&2yMg#8r&-|RZ(
zJI=*|RUxkX9gkROAii^W`vu95aQKyo%h0EiPmM`(Cn=T}RsC*5kCo2ndBQxXe*o(Y
z=cs6WHGR^bdIFd@!eDZWdMD*TIxCHH+N@nGp3Knb=A0PqiV|=81y(UNW>1uwC_r+;
zuJY5Ki~4E?5y399O|=|q254Uk>V%_&*;?FqaHIps+pi>nAF4^KSyAD#!kt9gPHe8P
z;g_~{e^t3leV?o1LG~glk*mOQtYpt?j^QTBv>oUm2@A(NC(PGRrqXoBw0KV`f%&0p
zhkM(O=iD=owTpS`1v?v`pa(W<GYDp**4&23W@hANKP9GFG~Wp|EDTa|P`&BMPIxZe
zM4X28v{Y8SL&Az!uVp~QcEIbtT)G$nl!*I2;MPX^ql?**ZV<P?0Mbz&9Sor4+E%nw
zw_i8#n#&#8mB$fWeK1VF;M8h0n#53l)i3Oe=;3AAyMk-lnwjj2Ojhb(WHcCxgAB&*
zc{oNq5Q?0Ny(IJjF|uz3^(#u?cSge2$U|a&C{lF=s|l(JH0}b_Sn^Nw9V-38cVim*
zThc9}-qBVycCS)k?=pVE-4RyrfQ{kZ10gJ3{EZD_&JA)+ha<FW+}uAX>ah^|XR6n;
z+K^F()sndpb12O3F%2Tt%`VwZN=MdJfMAzq#eV5^tY+28Nnezi4^wF_M>%#Vifj@F
zHug&42x{x+jl)K)(`OVkJriIYL2`+>WU4F8=>Q4&_tmX<%4~FMguwD7gO@Zlr+3R+
zjw<N6$@<75kBLX`DK%XGgNhb2IC26lMhC|+bepP<DWE#dOdqODLko?&J=n-F{vpF#
zSYQ>pWffb90s<a01E>;|)SBC>LH)H2);Hz$3u0|r3{um&QUc2qrPPF7yzA$q#H2e-
z&K83kyrt=TB;0w6$db^=f@JmGQfeLHUC9Ko#QWYEH7gH;=kmGIB~V;Opn*-xPWzRI
zVO?SDwEI!54xJ;P5gd}?YbOeKjQ199Y;YKUgH|=r&-g`VuC~l}sP(Pr9!&qdm#y;N
z51+J0e;F~&nI6%rYt9uD197gfmUVmPTqz)9O>g0&mX3VC`<hB-d_asLWL2>CMGNz^
z7BHm6o#=c$RjJdww25tdvKo~Dm5ws)7z}t^P}y8{&h1adiUg*Cb_0U=6>29`IaV*7
zE~0b-mL{bM&Y0e<x^~(V@sC!lM~g!0`TC4u-wX%i$zW5|mFGeiN7a_(9Ugx6z$K10
zs-iOi&RQ)+C^P7b7aVatA_`xGXS;Q23DtSZH<{EPP>Q~+=k}87#~EkUupfgqGZ@@B
zt66<0u@~Uu*0wdF$zVr-sBf)M2i(a((Ejk6&f2j#Nm<HJqNsichks(|+Fjt4TWUca
zVDR$Heqv<Ln(08etGyV~Rd_e+=?vXT4$lNdgqgCBRZvPg_7E0=3GmsJ2#pou#Cgvq
zx%p#}Ci^QvyqD&|Dn2eRdwBjyj~s<`9O5KzC^t!QdLp>BXGCCyqt`DLUmVY;Kz&Bn
zXK$;8ZHV6DL3|wPcktiChzpUN(I^5Z1V-t7F6~BD<EdYiGO_ClnxOK?QUW%7M=w`a
zR_Y=`<nGx^)33cl{|EviGfFMWZ~n21rRQI?@h3icnCM>AqQ%2@!I4lVaMLZ<lqx=P
zB08s0YmFhD(9-XIVYUZsVX-1#tNSbuASQ5Xzbh{qwLh0C0t$+)W;a92pEOA!3&*Wc
zn#xi95}K62H8;BS`5biEW$!`ym>SUjkl_$O{UaFkhP(=i+gq<E{@#V6DfdCTa1XgP
z0AypDz56tza*!%O3P#(04{r=)EzK@A;|_P|>GC|e_IrT`kJ5*PXLrUHS^9oxi9EV*
zZ&%RFL@Y`HH*RTDr^VaXYq3&uZ*@PH#a9hAStePxnD>#1yU8_Z+&ud<9V^x~YNGA$
zu3}iChP=trlu@Uh#hjqk?_F(0VOdKGh8jgaz!{w)9NT^pDD?s+QpdYFFP3h~YY%*;
zZa)0<LkV_Ye*m1ZSxgeIw+usD<UCy4ZL3ggx=kgt^NXT95)vq&1oafwo+3EX>TT7<
zC(Oum)uA*Qlxou~^b6k|m6B&PXvoJAsu%nr`3@<+$Jem&V14XQU}t>E_%T+MVt@}_
zVHo_GjxEut`6A}!Ro8Gb)T%=0M;Qa<1iJWIx6}tq2w-hwrbf&YIJ&Oyq`*|RcxaqE
z^+p)lor*tKCDGq{B{{AnZ;!nid=9hhojbSRCNsdNQ_(`O?Zc=&6$%U#@-W$m>avKC
z`bNGlZG<vhA<#zX@!C>cGiA2=2~;KQ)NK5Wm??b1t1Q}~W~R(vbev=D{*b$(O`Jgc
zyqvy4o6dD9t0guzwI~^I7zd+SzZwIpb$RR#m1PR*0F^J1oe}zsD`poMd<v2?b2m4I
z>%md~o<x*DVF}f({fZgLemagIq`@7%U9u1;H{BDSg#2V9((0?Kl+%A?qLC+OY=WTT
z7AlyCQl@-oVk3?)1P&I9_qJv~FRAR)`1ZN3l-P9*V`3!_bYjX}KN=6u<qZUnZSo^r
z?5XJnPnLN!FxYcy?5>JxZ10sQ4;4_B6-fw<Ow>o)EVr_~+uMxt2Z%|@{A}l265B_^
zB)X=V31>>N40C8?-g~ALV+Cc&4m#w#`3%iXosZ(5s&3h<^byx*EJ})DU*&DVcup)R
zuT`-o+bwwSUsXQ`vsc9TjjZk%(5C4Xm%U`y<(1f_TAd^A8kcfSLP*Gvp-?-;<NPZV
zKJkd-)gTX>GgG1o=?N@ICo&CXvm_rl)~f759!Pa_Xv_p+kBrOPB25iBKukuYWa)fo
zr_?4buS+$zY9S7$iZCFFA3g7Zt6vmXsvyHGibQB9102S94J&8DH~DIhm}YD^1DnFa
zC@JxO?wfGm6(m>+RVs&3^H`C&#Zo-|dPf_6O4*LrD?x>bc&9czzeb9eC|naJ0IXnb
z;renVg$JOxrkKRIK?=Md&Rw~$S*)l~=`kK)Gmq%$=;-3!lY10}mY=+UqP^q}@J*&N
zWNX;GX0S`^5y2`c#=quCH;#_?B@@ZFGCF90+E<I-TvH_n`fZ(dF16JvscvutVa14}
zsEF7)5b{zsE11-yyJ^&ygMZ%{-Hk=Il`9T~QtPvzhEl2Ln<Uuq;IpbCFpI3vSxATS
zX6#U@8&?%n_v;x|m~4hS;!or8d+iy!7#ZX(EW`Wd&K(lrKHq0dP6Cy3c|<B%hH2IS
zyis%mkN_<99)#6B%!KIi^fAex)cR_-e*c+=HmK04yXlgv&2^`5uoEN-Q6~J$ut5%w
z9V!Fzw=3#c(YVq_P4I8vT--1;r`|p40c`HD-wkK7s2qfDV9kQHoN(-KYC%`tHwh)N
z1qYnE*IfH4B`?D(RdoH&fLOz(g)D)_+E>t^;T28?BW5>UHf&j7BHa6?ZAHtec`#$;
zF#o6<iWM5aBR~2>HMJ~Gx8zuYlndx(jm4{Mu1BKzoMuR%-YiL0G6jVG3@Rd0@Z6R(
zMf>LN2+I)FvXm^Alm;f2anott`z0($E+gJn3v^?XB?t`h0vFWjb8z(^c<D^WsFLdF
zBxR5YwACB4CAwG8DcP$TlIS}07{yF<gnY0CV9_;_qTF{rjf{i|aFKhW15JSYYb6FG
z*Hta7IF2$@g`G3n`X4$Y5}Zi~^4vF>wYmpZS&ePOIwp|VTKsfHyVWEmBctD08E4R3
zwUJ%tQ-HH3yllw(oxy@5GyG^W_@<eDH;cApD1RfsvZM{cJJ8|7O@g1NbJYr~(3pvp
zd@HwlBSE|I1Gq9{jRhLb9F56nu4C9!?z(ro<ad8c`hHYT$~6QG6L9>11XUPN=(~sT
zh2UXmwQu_r?D=N4w{KuA?_7WB!D=(ZuM&>OniELehGR#Dx9mD;f2An6_5=aPYY)eX
zFF`QA6W5M9Omsk)w^?@WBJ*>3QxY$na3mB;J1UU7SxFgGMw@9JT&fsOY#ICJs#8$q
zv}Y!l2~Aa$zDvI3xM*nVI^;xp-%<H<YPAe9XT~C?;~Nd2^+IyJ@6dv~T`1`m8~*Nu
zDdBPqN?0p5km~U)yLs;;FFhi8T>DCZtw<<xKGrU6f~2lVl!jPmu>=!a0p$%4GMDhc
zU7qR&=8?M^_QUW}gyy4~5yx_4EEj$LFdvy*KlkwNex==onb=rLBrwl$l`{fcQC|?Z
z%x+!p*<?6^nC}PgEG^k*GLyMR(7}(hg?TaO88a{e<IYeAO3?jfwOTD+&gfjhDw27^
zK#0iebQ_UPIi1KEdxpt4nfQYghtfgT;@MeU%3v!0yE<Fk81}2@kIUef3t~@Ee>km2
z(kk%8*iWps)pM}U4{^p@wz*cwlqTn0T=|%jcpV)L3Ga8c#y^g}e$pWgZRPL?9NG}_
zjBzd*yypTnHq)|Q?JBBALA_ATwCOAfYYL9y-Bm^{T&afvG4WwK3!hw(Ppd1;c`n~S
zV{wYTQ0rS@C_{J_Pg&Q=c#IXa5pC#!_%qq&b@bm>U%{qgIG08rzlQ*YLMPkBVjDu$
zhd{go@ypW&Jzx`WvLbSg?2WQvmm6{*@@fX%WJd<R;`yn63%`TGe6%|P{Z-8EB7csk
z$En8QFHREHHJtbj@;wjNqO_x+jU#!g%59C?Q$VW2oUEz;^QN+zeV{u7D=M0dH}&1|
zw_AqWpu&v6vcPxOLIgB&SPGsWI6X+;ZabVC!<20})R;B}w&-+?i0MH96u>#QdGjAW
zd@t4b<;<FLV5C-|Jh?CF{hjjSo{Ow#5q|=&2D{;A+VR_9dDL`jk18e=h}x|nXZ}Qc
zbcUr6eO6bhEeo4h@}m?(yHG|?;rM#Tx9!VAQozK#LAwb1vLt!tVIX?lBB7%B#0Sc&
zR}6Z~wP}%rL}*a{P<$P0rrW;pK0ex=ipKr(y*)4L)@RuV(^_+Z{pTNR721n$1x}3q
z<I4u`Qak7s=`G7!s_BVF5p`%JIO30F!D@$6Ibj}9BU`hRh!>GMlJ-BTyGib>6m<C=
zMSuFbSBKX>*^^-Bd-0(A+^><VCu{TD7!L?Iw6@=jLBEp-abK2+Fc^)BI3oJ56@Q$Y
z%S4P|;A`RFnHjn!W{#+Ya52T91=vbt1@wjA_qPmgP=PCo5#OUh(lf%l!!Jh%NsJpP
zc%0`n^r$Y(9(o%m0&RPXz85;oU}9~-jE!bFD<Km><LxL!ZHNCN@=RYCU;XfvDqx#L
zAcaf<yM=zYGjynX(3>xL=88%`Q|CogEl2kBY)cretof1B0II&iEA|}L_xrUPIVax6
ztShVdTDZj|C}B?$?!Kg-b?;Pn#!`A6_NcZLfQeBOUPHOjKP#AvZjD12<rEWNwts>i
zf7DIIW~M;4(}>GZRDY<`VJc9zu%OT;lbUlCY0Sl;?*p3W_YhVe8&&GjwO_%-7X|1h
zrZ2q<;Nc&)&ZOp(vzd$pTDk8abEQh6hLW#o1VMZZb0qwI)jH}bfNh6uzqn60-9~2?
z!1M{g`t&1p%;YvkVzK`j)@X1sp{$aK$pjACJ-gLeU;eb<Bs506p9Q*v_LThzJsI1j
zpD+*C*RU4KW5~X);mD?`^Z~TielAXwOs-)}kjMuGk^)BQOY1|K<YXL)FPwDv=bbbW
z;Hj$-(Lk+~;LR9rXZ+$Z!ehhdJVotzuxHMfeutfaIL4s2z0w+^<W|WTxEtU=R}v_T
zE6Y5Yv}J_-19vbjcwTa_ubH#$l;_G&i&!dYFtv>DP!#vuTLh@~(vNeW2Un_Oe2dk3
zX60ZE(tZ{cZ$9$W(Pkh&>FAKN(rC^_CcL?~>##7}!zj((KjPd56K(JaZaj23L+}1V
zCDM#hSS`Oh3X|A5lL?ghK_&e+olS3At7zyxy3818(V5>UI>jTHh?+3Id7}Av8gmt1
z!`4n7IAIQ9IfCM^uRJ>mV>c{H1e(ES&ULk3)veC2_JPuPsCzn=P4cjS*~G!t4}mv5
z6@f)1hAAwt`tTg7%b5d>`-?Gt-ttJp8}T|-O8&Sgrr7s;)Kh#g3>AXFZuHEPA_Iz6
z*aG>k#qenE{2<};i<>HfVfiQDw%O4UYS&OIvtDBxdN#ju^lg+yw|@wMs@kmdsL$ov
z^y|W2arq_i>PU~;c?a9r6n*na-Kv4OCl#bq*>czd_YLn*maLovx$G+CZkfq<F$ZfM
zA+l|puqzGoZG-s_7-$AYF%XE79H$Gl-j@zeQ3JpwxpI2)&A4`q_!C2FN;#)nPHy_m
zbWL$o;uh>as`CN<A<1wr->?O>sXzUE^xBH9N96@EWPeG+Ewx#LPrjXkr{}O5M_%Nt
z#6zTxW&UF05D^Nw!O1$o&BH94xM@;28IK1o!Hf8)hG$pc4ooA_=C)--;2aVTk7!3N
z_7kYwS->fAth855Ls~xlD#>f>@k$+*85P%FNZ1?v8oFke>}=<~gvd}CS)Y}TVNd)4
zK+m6zD8=p=UpEX;wv#KTJ<SN!>hKZMBv%Wm&%bG(Z(UNqJhd7dK-b+PB-1xsD!Yb#
zRbhWYFZTpW{{YA7_8Qg!Bc5XEn3n`gNnTx?<F+sW%F8O^2g8tR+z@>5i!}1nv3;>8
ztkPYYuMJ%g)l4=+*IhS%Yw`1GmcOsf8XSdhx`KunnkkjK<NgleKxtHH^1VJnjcaZC
z<LnGl&*Wj<^R?iF5cByl^pJ7~;6~!g#VaB}`~Jv0jNg`Mw>B2ZAx!I{bma9c?sQGJ
zpa<&l%N-P6UOAIMet9jkum$DCjX(S($z(m{MB_f%jj5u+fE5X5-J%>?zqOqJJQ5}5
zW<LpkT$x6vS@|b!{7)B?!#R=DZ>%2O5ZOg#;DnO!dlgf5JFIJc&^97FHTDPT5G<T&
zC3n~Z?lD5-5R>eB2KRJPy~8V5>?C@t5#)QR=sHd`)m0KdEJTS#v;wo=t6a%;*9c&w
zNkv5-yjI^WAS}MmS9}Ort@y)M>$YFOYG2BkdmbM4EWilj!hsdxu@By{!LEs$=m(Q@
zJ27XW0RJ(GF2pfY7foedo_-!d9Y1Mry%7AU<ghZ{1MV4_rtoLM9;{S~*inh5$@>ja
z!k8?IvV|pBitX?%$@Ga74IeW|wO|73{MKCD1iclH6_`27`J6+d(@z3BdO6&uqGP#D
zy|*<RsvgX_^de%N+@5W5uthlVR<ttwk%|F1enmrC2*L+RQX0C}%%q^1BBI1a<eP|T
z>tz5;)?0=g_41l{;HZA|u0h}&OOQ)bkGNS7eG1%u%t8_xrRU<Go&4gHa5FB}*}_8h
zVNo#ONn%UAZG%A_vohjzx0#<2z7x%07NsMaz-{%?Cu_Ak*PXv%b)wye;)UPR&VrA1
zx7C4(ElT2XJ!lZYv)f!UwPGNzY<wF2IPMqBHZ2F?NRmBnCro}{;;=A+>opZmE9GYJ
zzi47LT0T0#)#n;_;+aH=lqW1Xmt*;(A>W&>gQV&>AZk8=xp9Lzt6`;9>xsg_*=8e6
zQ&?c~VpwR0+i1ZpO|Oun2VtIj__(LF`f3M9$#JQ3`3EEV53_F2QQV|V)Q&X7r5K_)
ze?nTOg$#`u!+3=*Gu3$`%S0+>%n@us*>b`p>9PqWMSSv&j_|F7F*L)QC;^W~-9R&&
zei#I-Ovu{D^B;53pUVQf45$qt#~t~Y+P~B?G*nJ@2IZM65lWdnZqFt*Vn%<`uH?`Z
z>|m%CNJ7N@x{0Hh<ttiLGw%wtxb1jn>BW~TBrB6<#WLnI_JX=f9pIxDB!u8g=N?+g
z(R7sY2_X%O&DAbQixoPir|~DnCXXTL!Z#XaTIZi~N)NyOeEWsK{_PJ-Fst`u6(Y2;
zk5c@TZ>3{d+GzNFL%>!~AM9aO1lU^wkBue3HG>jsLXGzXe~9rjecoTj(ZY(r1)hO}
zNVHi?rJ8J`TudH<=#<$Cvdc|CJ<{bVUxUS95If@F)=-6}eZJ-)R9NRQ8AE3ki{EA)
zaP88<emM_Sh!?Hd@GSU00s|iW;qy0szI}3gloHS-JbmV;r_EH%)gQ!_!xr$MkbQ8E
z_Xs!Ui$PM@yW*+=kyswu1YfuE%Ci{UV|RSdl|?b6fXTE^6%F^k@RsgNXaHGh4N(EH
zeMIRm>eAo~Z1P|3y!n71WC>b{K{p73#T-)CC*n#DrAwR}pE<iTdQu;OnCfj9IpM1Z
zNqrn%1^!&Dj)&SBLyFx6TCcWK^GcQ|`)7HN&F0(;pwI3ObLT1tv$rX&Q#d(Qz5lK}
zXtFQR3>T}?^Mczl24M>#Q5)b9sf0bS21t+I;KDHxgAsEtI(d<8!T?a!ASp<nVSAJd
z5f=#ko?*p3aG6v?f#{KiI->}BAZ5{(D&G<rG?jzDNe*vE+5tM$aHH7*)K1sc!Zt3N
z4CB7ReW(O;Rc4ZSX`YbF9MW~w<fJ+z%`~O5nLkTO)=5)7?csWhkqa=kjhK@aPOLmw
zkSIy1P8(nGZF!YoSl}wsBF&`2lS#R$t5+vi`AI$qtO;wHb$Mb0SQdp&{cr*&Rcx(x
zgymPAx*#))0T};zzmBe{eRQ&?cs}1^(irn1<OB+@LDl{&=dIK&^A#&Q+Zel8&oWUw
z`p_p9C`7bjFNs6v78wjGm8rVz%iz*DwXjX-;U#(KE&}aku6f4t#bUC4a+TbZxLgNs
za>$-Gx{-m%%7SBuL=xR1_Uz1DDQ8p`cn`%=J26*#Rs8k`%NnIFYrXK~OtcA>>1fTa
zcf*%QwP+eEt+DYM{{%kJwMs9PNEY+N;KxwV)^fWo{5Kw6cWf)M*(aG&vV1SnFn<fQ
z*_6bdf>yRVzV5*)hs<4h2a=U1#D0ob0`t=WUh@zHrGxC;gU_uzb@@`ONKsos=g~6$
z52}tW*;C7ec#O|#TzEl#`IHwH3{gBK3jVW5hhuau!s`&!1<1tTXKZe1#D)1H7TKNN
zkVK**3ZPNln3fH?5RJ0KveytQy3IW~=8T(ED<l1j#9fD0yyQQ#wqfoN-U!J5mkk;g
zB*s2EElu@fGUCb=rfX)}<A*|q^S%bPpdM#=wxESwpl*I_P4iaKf0v;C?f%#YdgzZM
zz)60Dj5<MDzq0ZW9Go5C7#M7(T}`+BPNq$qFCg;{I(-+wg@`wKz`W{zSUZ4l1{6Aq
zMQ`<W^y=bp;`p~f7sgvg5c#5q7eGndS!Jer5<V_~Bvh2cDPyS}H3x(M%N;WAIw5Ay
zJW?O+l%D&@8ANX`NJfa@_T_Yx+~+1C<%8QGZm1aT8)68H5G7t<p-XYc`r0?dZ_;o`
z8tGJi7Don^#hea9K32;?n8DwP&<lmZxZCUs<IKn_-Utz!c2q-k!%Z94|BY9YCZ}Uo
z{71p}DF}pa8*TsDr)XBF?Z!J7B)hyjr|Y6nVZT1!Fym7_#bN_p@UhLC=tEbK5<LGC
zDYeRU;7*R#bUJ<?s9Iu@f}DcZW#GNBSB4;NW+C0q2a@6dAZF{iBwjo>;8hF}xbdCs
z#NW4koJ~zHqwEY(J}PMc3e3VM_#i#*o*5Z7Nuo}(A~)!J6R)8cRPHY<{@IdlH^$fW
z`1pBhq2<?Ns+7xv>hUB*3*Mi8&NH7NJ6PHT3NEC&U+6&n!p^Et_q-#&t^S}*E)1I|
zl8eXb)sAv9TSc-xkYAao(L<y4rnM4FfC!+sMc-u@E@3A|px1nq=F?9^>$sc?P0C-+
zq@xh!&%?QfAM)nyRr@UktW;gQh~vFr26_~l{UcnA%*zs%a8c*>@`XMLVBi$W!!On<
zM*+e{>)KWQj^0FJg!E`SUsJ{@yy*^K4ypaT?Gy?n#}ZA0VWpEw>2HBt{C7~;;x?6r
zF<JI2g$_~%Q={j06FJob#7LU*_LeVwbetuG7s|j6CwZX0soSSNOxmH(V&nt+>hg_m
zJO^g6ursDU<kb}>mO$aT#v9jkQ3AXKGnYib@>3z^|Jx8jVYi29k;R6Qf)N~jPygaY
zF<CkfpqRktC^;gtvEbu<oEeDyZ;wpkJ2#J7<5AoV`a9$+pjrm1BrO&M5O)e{gxv?N
z^uV<eRbdmwC&m9W{OFUA#hAF+8o26zv0>#j)xNSU_{5qISoe^}y2a82+g!s;eQGdM
zRWxZsB@I%B)x+M!lm1y#Fw-dy;fvCw$}VPD3xwVXyu;r95FMJc;y5I<tNFZi6~bB_
zRh4BGN8GIlFPIbDTxxVS;8ySZWb=aw23vEWD=UVvolgl1uMTwK@iNy%4~khG6*kOj
zp<+Xto1=~}bZHi)c-X8)ePDikn93r`MDpL_L|Ex+!Y2Du25^cJYIsCMU2hDn0|3)5
zGL+2e=2dSK;8T02tle5_YTcyB(e>)}C2;d;$PRu*2c+!7r?G)dOae?1@YO_Ym38=r
zN&sPI(<!L_ZP7$fmN8G@G?f4z!9N*&u@AUJh;nax!();{_SPGcmDrOz4j}qYvb2WI
zdtu(dial(aC-|Cwr@wvIl$ShZi~x@7uXLPxQ>q^9`99AaoURzPIvVkVg!|YbM&3GE
zm41qVRV~gnGr4FwsU*ArQ&bo9s6-{O1**}58FNd-z{9<dkg|&&$H*fD@J{Q|ZW7MI
zcmv*m=4Hg`P_WIo3<_OfULp)@n7g5xJyhJ?)Paf@r_Uigaku-^`usp1seZO>&@;!V
z0vj6_kYv3G<lxIT{;Su>I1Dx`@I5N&u1}V6AMq`p=2P{e7nsmrIXL_ji%7MXldd5P
znl_)Sfka;c6UpS=&JT@Lz@+Ig*4r3vQ^76*GM7>DA`gdyr8k|c4M;SLbSm^Y+|!Eq
z9^#FFU#GR3#)TN|!?5YA0wdv<#<Snl5@DiXw4Z52mV@j)R8IsAVJ1MB@7=)^!Glm_
z<-GSd9bBNctK~K*fh%fWi{4xa<aj;<9#e@{rE@$sP>n;PRX;Z&P4m=FU>J4me&JPQ
zDufQ62=HIK_>pD_iv-&m&laR4_YTr96hEx&z^+GGH5W_v*8UnEj&?ODX|Rv-d#%l5
zv@U2x?D}Og--0^p;+V47^>KqP_GY^%@pH~l(g%&EV(ISu*N_hm$|&n7y%5GM$$zEH
zt>IAh+BCVnCa8*1V$7fck4%!ZH|T@Aj;jFp1a2EMZVO!!b`<%5g<|t`WA3+qkLc<A
zMNdD8cPZsdKp%36gD2j36|7|DpRp*{)o?UaOtn|Jwd;=}o564v0Ez4+(UNegI(v0}
z#MHhE0!f{CjNcPK_XI4-r6W4_M~V%0XKWS96~BcXp#sO3X)XbLdGmSpEq7l5g+!+Z
zCd0``)a0ruCB`8S-z5@t_)C_QopnYi8cBaU0N&MoFUCjtti>h;QH>Jh1}CPx@mr!V
zaJYumvY42X)Z@rv*`*NNX-iI!z|p;luIcfDyn)+yt?MIPa9_yRrB;E5<z#^TtJPL&
zMW^a&5+pJu=JAh$vwZqafrk!2f_d+KiNTm7Dfa*~?2-}AQSw?YdR*v@IUvzW4y@Zw
zPSYac3h2&O-spB&U9_M&xn4PcYB+#lP)ocqhGxeWP!VDC7a#F-0lTo_LJ`|h%hNaZ
zyN{!?UaT>iSoAx)adIS10mwyPC{i2lP|NhwdR*8(8N>78|85Lo8kadeM?9bJ;`NI8
zC4jK64+u1anFcu3?9qRbU{Q^Z&UBH-rHC6rG}FbQ%(^dCIcN`!A>?S@h9*<l_x(7m
zxXuS;>|$`K4D$^rfQ0OMD|asHY7a#AaRYTKtK0Oy_Go-aBxE>xWc#eU2}n+7RpCg|
z$^|YOlLlKS+B|Ltx5KnoSd2UYzJ&5pe~#e-BUvq}7_8+>nW_B`(|Guo&Bw5~F-JQN
zCx|^q4-a*1!WtV6kJLSB;%Hj#w~SY5)#lAbvM|ijTTHuh-%={u2Fr?t`l|dGy7q~@
zh0dyDsss#39WM88eTm%+eX!uu{~GMnroK|Q!K2apS~~vIP)oE*<2xxEV2>FrzXXT4
zh6L=_7+!;2cU2;P%UP;hX)9u|Bab~85ut>05aX>Uqnt@Chr@$+2I<f-6(B-V`aO7~
zIc|$y7`S4Mj#3R7s%}S=x6|K3@UFF)!d32N=m_V&p%IZDW{Hxge-kwGek#)6Cc685
z<ATEEvu&P-N?8=!+7cFKWk9ss_%p0AO7Gq#7qmc~DWZ8hS{~oZX@DX|fgKC>7^->V
z*GoVxr6S!Wq|c+FijxIpM)vATC2>cKO%3HvNo+e$9<!!kbcot2uQn>1r?CAP2NDlz
zv1y(u#^kJJ{_)YoI{4h57fyxgTTaY~JJ(!L>`b_{H$gX|zb`*AhXD=P0lqFJDh;VN
zdHx*3S7~B<p_t~c63UA)_%)Isf!VUCkT2W%In<^reG~l=Q=-$hX<9dx{y%{_@A-i!
z<(UkWIO4>np|O#Qf@H+LaMJx`RBKSI7CdS6{Vv+_YR{jQ0k8Pp@WVmpL%Ti0;8VrZ
zM0F;EWC!l(@jc5?!Q?n_#`rdQ_tF@Dqwma$CVo@zCLfp@;;uv~OfsJkJt_IB=LM%!
zf_>-4Q>T$$VokPG8P5w#`d!p+&DN<ZIfUTke%(@VbYq85fLNN9wW7>Xhb2Ys>O6El
z+yUR=z_%-&p>UvVQfJUraVRf}va^2_uJ|2kuAo}ed$d<WF-$FgA74!W%tKz!zYx)W
zi09rP$dhl`?mEOR4P$ma!9M4^v^d6#x978n=RbrhxItu_KQ%1m<8%)3o>UNiEIVX@
zSazbFW`}r><gA^oCOkJ4V^%)n?d;6xPlGYIa4&=+R*-VB)LmK@=w|iu8OGT;lPTmW
zSOQbeZCvIsorG!8JVBn4e|z>d^Ouvpg}92o+4}3;nrL|pLKUiM6G=f$4bDr#(t#@F
zBtTj~_A%DIeb)ca*`s_N)>q}VEe=4@!P|geh6_L}xXA#0$)Y={7qNic_bmkYN@^im
zP5)m0yaG-$JZ}<$r+%_UzeJm$Xo5taz>H#}t+&X3xB>DZSL}|q?t{Yca@*#g-BSj$
zRBph@oMRB_<(6~||1mtU)$twcesowL{26#i>K^;9T}(1m7v%kfxBZG$t`nu{v4-h0
z6&@5N6rDji^V~)b)CCnx`<z%(+tp}1wITC_9>Uj;2^U+}F=LEtr^T6jiY&3_94@#e
ziS#NWj~8}o7@K^}TE~os$OMZ++uWtxsQe?ZD|8+GW39#L%RR*l1GTo$KhBP*wwe^O
z-XpMb5iJbOnI9CQ%||Q@O6_U8|51RudSgD7SVAWPk+B3=Tgm=F*ViLe&P9U7a5NS@
z2)L{X=3;22JUA25-xsap6KFplT_$0-;TJODTQ@`OtSC-(u`s`*bh`{}1yR={pS#LE
zT<=RCT~qlXxN+jjA#TrJDk8_)9UaRkM-e#&(=126JHhu0(}D25lhY8-tJ3!XuyKw2
zXeUo+tNzKaM^v7Zd*m*zXPqKxrylxWMwlkhPXK#ewNv5XCko{?^KkohiMRBQ5B5e;
ze);sK4%Z7h)2!Wh-4$QH)}(sfi~p6Sv;b6vS*TAM7R4c-Z?qV=o31*HqojmA%b0&A
zXPSa;Cd*d~qQgGklqPV-fsWck4MzB;8BJi56DO%2WzlouLbl}hEtQ_t6XDYS3=HSQ
z>XT}A5hqzZr0$(E@f&o#5L3KTv)rI)BOQf`cnq*ib+(FISP<4b1aq;Id2sx2JK0z*
zT&1r`s4X4f+reWoWV4+H)L;?z77PyPfg{w8F2b%K{g;m;%6csQm{m)V=i-q?9EZIu
z;&)|Cb&LgF0p0s??4xri4n1VJ=C~E)1=~&DW@#Z^=aTm?iYS|B=_E*{RTJr@0K-Sn
zG>ATv{}vNo12LEjqpm9b?7h~MTR9ts&Z&sy!xM|myB4N7)Z(|q>T!HE1QSp7L<2N?
z9-`eFJkWgxi5MZgo~Y6JFsq!{kTo)qzLW=Qs9TQ-?~@)zMl&-M=zlxF{I?c+SmT_|
zEpv&XfaC5)Xinx}1Bgj*?p~MFlL$FWOTzZl4|ucnQ+c9<Tr7Jo3BZU`fzsJ?zQw;G
zR}b^N3EDYU*qtJWpRFdYlv>SP5d4|Nw{GB@BTxE%sI;{=rEm)ySmJ^K)6LxbAYp>N
zd#<u?XuuW?7;zTJle7|jw}SXPjBKf}`ge0a50xU1o^fmt7e(QwGAMngUsEryw6iUC
zqa#p(y6jO&ba^oq(I|t!h;#z9WzDeqDG@xAiXoQt=og>)4~(P2<U<rhx@f8*Mmo2P
zeXkk0EPa5`QZQSk<b;v_5MAi4`MU)A`_hgW_%q*-P9yiaOP!tqUHVMN{iOj!Exsq9
zjpI{Bs9B&1TCu+Yia`IL7nm~Eo)-qvYk?fl4YHrcYGZAbnZjO<zZSZqa`?6qydgDr
z(WF;UjyJEHe=IFOlZCP;bAAjY4v0^9`B>3{)d_b`iYz_NJ40|Bb@StNi-vOyeW*bG
zxb_h{;<}&W#mvyQBkN~ld+7@c-|_O*>o7nzK*WM|CR}1EfM6$XZRp8XS+VF6v@#vr
z%i8=~s(sQEJBv)FY5afS3%m;cYv&laPiPKy9!c!prZ?^8g5l4W&OO63?tR;(?N8C#
z&)l7r^kGcXmH{OZ*Vn(=t$K((Y@W{X=^qcMqJ65jxK2fH5Z%&ULHu=#F`uw@;vs`f
z8H8|gO|#aNNSK3Zlb&Gj-Q8~GCID(fapjp3`ivuktHsBJQY8CNw-j(9{?!zLo~@I9
zyfLLJWL4nwiM1g71Q8A+L7!y3l}=sU#Xrk@n&z>sk;F<;z2T)q9&-k!(5U?7r5l8K
zPiq7xBz)G9wQoZTOK_k%2tX6-F9)I3f8^O#;Q}qlT%+&R_i!>`(n)c$-COKx#QOmS
ztc~tBFShDE7V+U3R!>ox0P$^0;1SLJWmy}u={OtGOSU=Q1%VT9v^I>4)H%rd2PZ73
zJUpls-Rqn`3DZm)ZU<ldCigL2;DiaUSPo9W>QRa!ahK^&Jh#c^hVx%wX)^vcF8*e}
zQB8+_x5)PanT=oracLJoq8{%p$*sXNl;OL>X{oT*_Uz9~QY$7Vu+nC__fX&*M>o(d
zgwYH2Gy}O&j^dKLcY8^&J+8G2tQ!%OewlF9m*b=>b>lsqW^0~R`S)H?dD&=b8sv=Z
zJS;xYJwkhbrrnvp#=ykJnYaS|xTu%2kh>ivI!X9uJ@mkZ_HnTPX7^Cusp|jUI%@^N
zqGr@;`Qz3T+y2QFW0!o=;`C1VYMuQ0tgBnf%YJ{63b)5${ZX2Z;eOc?2XF4`i_SA|
z;7T}cNDt)_N<&T3ydE!*FCWB>ZpzoiFZ9~nUx=a{%~l8dO0?sRkhB$Tv5TH8<?Pdb
zk{>Y96Ul2AFUz5c2sOb?KQJhn{1qzi<DDB8%bXxu*tT|I76>Kv2Bdq;*sar^&FI?)
zEhMELRg7{>P#~oK{?|=maFM|crb`OXjHXYdF}_L!2==v9s-WW@#0<qs=jS;}?wm1n
zdrl-{traRAoXXnZHoLp?`8v?S*4f<t)n)yaq4&Lc!4WJIQ(f4KqjnFbV;2sX!&+fo
zuNFahAB?bj%#pO%d?cDtP3p9rm=GbH%>Xv#Zbxhty>x`#sQR}kXs^WdCs!;cJMad=
z38RR3qN|%a)S$`AY4ZAM+^(g#F<di~QoONgn^<vCVT-EJ>FyPIuni5Dfw&;H++jx5
z*?VMUCvK(Q!7s4*uXFN9Oh4BKqXHnucp^G>bn#6Srxj~HLjSZMt@k4`V#NRCarbU!
z;3mH*A-7>#K$(|tTm2KYo^0zec>&-SF7X$wTN?JaJu(3MJ=tRVIoXsMUqnN8$R9?f
zw|f?K)+N(rq1U&kfOR|-?i$oAWiPZ4>sdX#$Bl(<i)}%(u5`Q~cQY~)w*gU%?D5$_
zgngj%y&hMe23)-!=fe6=?mk8wV9-!-z<likAwN6lbBgc{y?y+=4}dlI_)kO*Zra?p
z&VxPc<9<Sj;KO(7l@qBDH4pwKnMxvPrLho3g(G)bMQ#IXV&3VScHW5KczzR3Bm2U$
zLFWXE!1V#vYv8<n4b*|oA1eji_kgOD4H|(LG&|uKa4&%g;*(8cU_sjmQ~tN23md#;
z%=F>eqkD2LR(SlCs8;blhc3M)Szp?g)}<F3mk=tu?B9C_wn8_bRo$MK)zg1)DWjol
z>>&rp|M!&$Yrb6YNLc*)U@DnHn^&QEv6n&v=tjx{rV{gKfqnW~s^do+_+k<|I9R8I
z`O{Cj!X?p)81}rY!=#`o;=}zg6$vE_99y|A2HPTXPH3lajoa2HpBH9+Yj?XSoK<S)
zcZqQR@*rM>V&b<i?Y61hBW0odbAncGvf^Vg49bT8Ncfmk*Qy`!SS_2Ee`e&PcLz$M
zsT!@DhMhZHJTs1_3T$a4^y)NvNHFe0bOS8~D?UgFDNAD7y|@m+!up0U4<JX0#`|dD
z{)CF(Q-P>$j-EO~&iX6ycTM=E-KyX3nXs~Hy~0!<I^A5<UL*I~>>Z@%X?A)o8scni
zs%#|KI&jtrt>PfP^HI~)_9umf0^F^FdGAVuP(<VyHiahu%V9VUwe`D=qG$Li&OomF
zP^H;vt#LzFymn3sXq}!sq_t+DauCJ##FKW`vlJ!j&5QhObloJ_7UWc90(PfylwlkY
zNAe0A1Ah%QSb9I=w09RI(}yfnbGQU9-CX&hgUI$t@rTpY@yUxt=}@9Ur|4s*L?e9U
zjhhR^^a9NJ2Ym4)xV@f`D9(V7tf+6P@2$SpHr8e%@Zj9=sq?DZm(bZ2)JG3fVYDN>
z-3a)c!u*S?@)>jOdr|7#LENW)4ZHxb8y5F>T(qz<o$!`o!!k56rK264<qPDaOeYe@
zN9KaLD9mLCA_6d&Y!vD>-spVH$0z)>YFR!_HE_THymUWnEK-pLsamZbn<l07_2-Ez
z-uBP(VH51P$mLjqS!+vQFBydl6i`(Ik|Dv@LTW%Ou7n=JBs)?cO1=^`%9m#SSv)te
zv!dJRV&ns{L_t~D%e6NSRv8-D*?(C9$)ml?4OX`&HIH;GyZhVX<1jE4bAA!=gin%k
zWD+-+XG24ETNI^1(J_rmMbNAXk@upk9h4G@BjRzdz6B-ZNQ31N{lvH25~Co`yeS~Y
zyu|{#z~v#T=)`tKo>^$n9HJ%Sg!5XN*V_7)*s8}?00m8dk8<hFQ?F-L!T6|a<yW#q
zigUjW;ny?X;sy+&>OAL+udhN2avMrte1F5{J22MC`U9CpF-B#N_6i0$(Z=_0{^Du3
z(rajcWOBp?)gvlZ!rvk%Sxk|up6I|GC)vdHknI9#j-$(_LTr^f?|;`r-(Ah|<j-}F
zd-O$?0<6<~^UT&N3FVn6BsF2>(QxXoPZWEPjVaPCk#qeb?E7gF=UjR`sr-FU_(p#h
z9dGr0Qx=XuUA7C^9Lry1RqcI5xDD?e#q9bOny=cFE;5H)RFIE!KjJo$OYEJa@Q=6w
zc$5Z5y|fq98bv2N?s2&?fhnvzsX*R?Ow;bBFLC<I!g@^rumY{q)Bg|&L9Qrn_L77K
z3(<7khWcx;TCLxB5vw;si63?cBx1!?_rMzyR8)h9?F?5oGR~}y6P3An(r-&R{J;UT
zLLa55_-{Cu#lna1)H;HC?M8w!V8A%*{J3seqo}ouktYpIhN$gFn#LkLcw_~vC9LTG
znHKm^L%AFyk(;Z4Nk0lpbLPZ^M6cx|C%D|y6`fnKLt<8i#PM*eB$m)%gS%`-;A-^f
zj@v$I0yfB@ywE}JxewSCL`3JT_hene*?fFA5(@3<4@&CS10f=I4^<UH>}b>UT#eLX
zDNw;yocpa$X#aD175qaiKmRMM$#P1d+wwHqoo20e*ep2-HjR|4_U(jA2S!f5@QZFr
z25Ra9h-)OM>I$!kGZgCa55aYJDF>3Y!o1z&eHqmdexvWYPAH*bbd;NS%n>9d$O9X)
zD~qlEehJcF%F@nH==g6-Sa(Gr+206>ze<^B8Oml|az?|Apz{HnjPkS^>Xi~n*sL-y
zz;fp3!YZ|fn@K3%2$Ad^B)mdl(eY4u!Vs6EY&zsjC~*Z8;%ra6V$n*%q}m?1gDuTj
zLE2MLse0sS4=BN$$EqU~pdCj4mvH2$Mda8xlRFA)Jt)_m+_UdUrz)bJHpErxX{ki5
LpG`Ottk=MR`F=Nx

diff --git a/doc/check-certificates.md b/doc/check-certificates.md
index a9426dba..b8fece01 100644
--- a/doc/check-certificates.md
+++ b/doc/check-certificates.md
@@ -19,9 +19,10 @@ Description
 This script tries to download and renew certificates, then notifies about
 certificates that are still about to expire.
 
-### Sample notification
+### Sample notifications
 
-![check-certificates notification](check-certificates.d/notification.avif)
+![check-certificates notification warning](check-certificates.d/notification-01-warn.avif)  
+![check-certificates notification renew](check-certificates.d/notification-02-renew.avif)
 
 Requirements and installation
 -----------------------------

From 5dbd419d1a4a938a730a62970a026a85fe47a110 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:38:05 +0100
Subject: [PATCH 952/988] doc/check-health: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/check-health.d/notification-01-cpu-utilization-high.avif
----- >8 -----
[rsc] 🧮️📈️ Health warning: CPU utilization

The average CPU utilization on rsc is at 79%!
----- >8 -----

doc/check-health.d/notification-02-cpu-utilization-ok.avif
----- >8 -----
[rsc] 🧮️📉️ Health recovery: CPU utilization

The average CPU utilization on rsc decreased to 64%.
----- >8 -----

doc/check-health.d/notification-03-ram-utilization-high.avif
----- >8 -----
[rsc] 🗃️📈️ Health warning: RAM utilization

The RAM utilization on rsc is at 88%!

total:  64.0MiB
used:   56.7MiB
free:   7.25MiB
----- >8 -----

doc/check-health.d/notification-04-ram-utilization-ok.avif
----- >8 -----
[rsc] 🗃️📉️ Health recovery: RAM utilization

The RAM utilization on rsc decreased to 75%.
----- >8 -----

doc/check-health.d/notification-05-voltage.avif
----- >8 -----
[rsc] ⚡️📉️ Health warning: voltage

The voltage on rsc jumped more than 10%.

old value:  23.8V
new value:  16.2V
----- >8 -----

doc/check-health.d/notification-06-temperature-high.avif
----- >8 -----
[rsc] 🔥️ Health warning: cpu-temperature

The cpu-temperature on rsc is above threshold: 74°C
----- >8 -----

doc/check-health.d/notification-07-temperature-ok.avif
----- >8 -----
[rsc] ✅️ Health recovery: cpu-temperature

The cpu-temperature on rsc dropped below threshold: 64°C
----- >8 -----

doc/check-health.d/notification-08-state-fail.avif
----- >8 -----
[rsc] ❌️ Health warning: psu2-state

The device 'psu2-state' on rsc failed!
----- >8 -----

doc/check-health.d/notification-09-state-ok.avif
----- >8 -----
[rsc] ✅️ Health recovery: psu2-state

The device 'psu2-state' on rsc recovered!
----- >8 -----
---
 .../notification-01-cpu-utilization-high.avif | Bin 6481 -> 3680 bytes
 .../notification-02-cpu-utilization-ok.avif   | Bin 6797 -> 3988 bytes
 .../notification-03-ram-utilization-high.avif | Bin 7527 -> 4253 bytes
 .../notification-04-ram-utilization-ok.avif   | Bin 6637 -> 3703 bytes
 .../notification-05-voltage.avif              | Bin 3829 -> 3883 bytes
 .../notification-06-temperature-high.avif     | Bin 3519 -> 3659 bytes
 .../notification-07-temperature-ok.avif       | Bin 3727 -> 3839 bytes
 .../notification-08-state-fail.avif           | Bin 3474 -> 3142 bytes
 .../notification-09-state-ok.avif             | Bin 3531 -> 3266 bytes
 9 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/check-health.d/notification-01-cpu-utilization-high.avif b/doc/check-health.d/notification-01-cpu-utilization-high.avif
index 326e7feddb23d52c83f43050e15bb75f29b6c6c5..7fbce3ceb0041bf5606cba307c143ebd46ee4386 100644
GIT binary patch
delta 3534
zcmV;<4Kec3GT<DLA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951WO#lD@C~0YKW&i*H0004zoE?$uAOU2P4FO1h
z4OMMqVRRAz3I;eOryOh&GQb*4WCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_l
ziS;bmjgh$sR<Ubg!1WSaDNuh!;i&1`;JD!cTud}!n0C5l-8BJRa^i&jU2wL2{*F{>
zB{#$}skEz#P?g)AvHY997&OX$JGuaWdzV19`I&Bd4G6Pnq4cKonq?jCYALl2v-Ukg
zfF&Z|zIc{-l&687Y}ry1ScuYVoI5O!1&^LVaePtI;5H0TdE^!xX9jBd$Cl+d&&s#A
zpUOoQKTBs#JTFkK%TrGAny`O)(_?=SFt~!do=LXMS^dGC7kEX1&X&Jb@HM=DS-{+c
z6%4o2PfKQWz*TBC;#^s4pac>#^!7eQ6}f<J4hW59oOexb%bsF=Os&L@2fijtTFfBw
zO@UOaG(&n;e<&GfjQd)J1L=zaH%o?2`N46Gq$mtfzp@O?AN|~FV)$ELxkrVt_(Bb_
zM7W6$6RnM5t@jNz>ZGoKbc_6d$%^o$GBa^3o3voAE@{!i7J?E%+FtkwA32s<k%|3N
z-tLXbO(b?M*x07`<pLR_Z7Zr|G;wTKBOpu_N(M(KUYQoH#IE{e8dj}QzAo;)Ki;c*
zV6ZI+u2lh46ITxjsg%l0tZkXJqUZJtVcjh4`_0oLSeDMqZ~zdLj&d1)6s<qoj;#^%
zw_wrd?NU@9Bps4Ksag8$^NmM*BsC*J;H;`>_pg^0Nbw4ozc)xO!Wqn6H<}m1+YPmN
z84*@chw|HCe*;Ea1do+mF$v+T#rURyJNf$+BfYLtj`uY_jBS^)G88XMy9R#rf*z-k
z(ao)&8(Y!DDum7zwSskjD(JsPKj@`46wuA=6j@{cTO0AhkHRcqa7@RXD5#B0Sr9mL
zP@4Lc+X#M4Bit}qFo*xAKdLca6~sd5D$APS^t8<;2b`#r-`YfwQf!Y%pvL`>W*i!o
z(i+$*4Si8;2|g3SYaW*Qe@bDdfq2Rp`!0e+8XS~}-#`t!C!wW($`|bt>qKGi?S0Er
zeMjpc>z2YD&iY1L9qw8`9>iSxN!_%)`Ll%xSzVmcEO2_}0!kA|n0KdHbZ&aAc$0+q
ziBs{nMazo~>9v*XR5cN5HTzKSmTbG6o&lM-i?iF@qGs!I+Uq7@QaXdD*lJ1|mHPdk
zohFuk!^{O)Ajn~Vm8`{9T!HeIoHQ2UXUAw+P8Pv!(xhcn8b%`jQ&9u$d6@M?zzX|V
zp$N~;7<@rB?JKB|O@qfTLS|?wOhQ{6&VT}@{)%~L;dy*cgc!vunGO@Y_XOmrQzvmX
zWlR}i!-9a>ZJR_EF|CKHxyL}Hc=*^1Y%uK5jjjmxLPE=bN<tG+XJrnsJ4F;hG{sRh
zn|1>Wl99xK(T80W=B9HeCdSenAOVqP?F25N()6zAsitd;^3J<b8a?$48wt^*)cS;U
zp<}w~n$~+Tu2EBN#wvsGoxP<(?%4DEjdhY{F%6UD@fblzFKCryJq&I=8RxXF##pzK
z(Qel5Fm?Zb9_u}Hw*O*U6VD5+ffr426K-kjeTH3aAZrlS-mEeY)X`ovX=tMu-`)B?
z1<k!h3*1gN#uUy@){kFd0U7%h4Bzy>rm;Da)+#@oa3SuH;W=(2OtF^<@Q3c6DMFq%
zWRdjcfc<UW6?7n;%hJ(|Z$#*Sl%m%ughsArO~f#N2j3+FYG)f4J7F5eTqb-=yh!!C
zGA%SAp3bQr2}qSy$%PTCimcRr5moA6)QCQf{@`~+4lGJD7Cb~`BDpohUlk~Ib#rEa
z1TG_QqP-iQ`JckREM^gdDCx7E8&Y1~R<QIe?P)N`+Ft{!ilsKamFb8hmWAe0&T)DB
zKD+*Z<S29Y(O6-Iz60;=YyEAh;A9mUP)|`cnOCLvXUa@*kXdV+(QMgjI=397X>sZr
zeYQ`3Z!pmgev8UJxm@EhLL{CgS3O%bfg%FiFL*f`oc>TNe@K4flls~ouHZjrw|)>m
zCq(nml{Wqknw;6MQ>AeXP#hQkxJ6<Z1TEcvzjv%et+M(BI>$;Z_&GvB@21F*&~PVf
zHBHF}mA4GPHhpCsyQ3cne5Gvu{s*oe^}W?{37$u=P8DN<KzM~G_&vt4RJ#&G;d|2)
zV*ts()+s4kMFf%03lL#tl=Z_z3t#t2q_rD*O<VyoEi8!S@_ux^Lz9>_OMi&{1Q#-Y
z>*J;XDBj>5BH9$Dm!qV5j{S)uSr<bPB~88O`39`)^&qhH<T4p{AJU%^2C-pUVH{S|
z{jtE%d3q60Q)ev|31;Vc9ZG<YhKIDWIhBIB;6-HAQF2$8^f>zr-#y{c+02fT^?bF}
z*RZ<u8fq<1iGE&O4OUNq57x<;YIuQve*wU;yspV_*Lh{pF`_fISS^D#=GcpB3LrGD
zX##;+_mVhnUfi$R_L&EH2QoHq^0kc9Ca~-2kWAjLS((KXF0M8<`Lj#AqBJDyl-Q^5
zkjHl@JPK_3#2D#H(-Mm!+9&#~=R@^2dps(h!-z3@ydIToa?bG!X-v*yT|`NLyd_HE
zPpVvvZ<$_vgP38<7BrvdSa4KuD(i8iC<Kz>=2^C}!{?G81b=n0I=J3AvMNj$CnuV(
zrYds()OY!XdI=#<4bW_1oL7qlwkul1<p)of2G+s;`*5pkWVxtC=@>c}VxWoxge&wW
z7bw`b#I2mFk2cwA{{zCM`gMDM2UQdhzn&-d(~=cT<Uq$%qdBb*XP(?tcab|Fa-8Id
zq~lJ21LhqjKFOR{UmUx^-QV2Bs-|Cn?LJ}hudV+ephAzOnC9|Tj-D;fGb9;U>a4Ft
zaLN?DVw~he6HknlNxBk^qLp^(1wGFG0g!|)Ma1SBir9g!rzhJ;aggwTfPU38-5*Eq
zz9p7bU3F>FhBCLIPZAb7PLagtI^FHLg_B=(oL=Fo;Og(CJb>R5Q2W?oT7^oOmgDP+
zhk2@plL3JBRZ7$f^$ZdOk&tDQz%Rx%<6+hV`HIu<o0AZhYUrv6gy_0XgJ~8N<is6c
zo6i0d<3-z6Va#=ekZ1IN=@wcQByEXC(Q1fI-Qv42c$gDFfP37@CNxLX;k_0oz3lLg
zrJBp-AC~NU;Q9In{XT7%d;su?eL}*UkL-bA6EHfBojDO*%Fhvz%Tc&cGP;$dMZ4TI
zqd>3#kRCr;V?LvNot#%PdjUuzs3X)6Lc4;C#lk4kQ8TV+um=Z!9B!!$Gq4<3MbYOB
z(;S&*1@T`^dAcv38d!9hKS&~=Xi5Y`4OaFO@vqMLA<#t}j$0e?xnJHuQJq_BO!N9E
zk4pEL%)AgI)aH>H0(9ax@aXRD#1<1zm3;k?h#s&ZfeR<*UT%?sB}Xys-q&U}t3EC5
z=iJ=zGOT?c1Nmov;_HY{P!liQ%1tW~PH4}TiX(QZSr=Q(s-#&DWUGdG<tzfWEYh}P
zD_QE^x2lLCt2q#)ghUJkkSBlQz|kmiHevcTTowS^tp&b?T2dA<-PqHK!QkD!Ge;aD
z%)&M~L+_r8NU02taX{<MdeP4Dtu|Djih_npr!YM#maJ8Ost$u|7y>|Lg1|`&Qn<|q
zs#pqALp^lq<_vCI3SWkqbY@L$4iqfn=S|i%V_HlI9R=fq(t-;^+bOL@C4{D#r*uEU
z@R$#bZ$H`5T$}WSv9D}CK<fflpQCN_Y#rA5<Z^eh=dvhgOEb7aM<grhi*`5kQ$ntF
ztc>>C%(qv6<*js(>#k;9*O%4PDmuW*Rp3j|%}mH22hP>2_P~2sSE0Xq<c73UAHPp`
zY>zvrE;!j0Ax}HhWV2Av>fJQp1{wDcsiKV4>vq&WTK+?XC3px~&BIP*q(4S@K04wE
zS$yFtE?kWta44wutQ3HsJZ$5a7-RaTUC$6CFZ{QE$^?~9CYcInb^^PCxd^~VJ!sD<
z(4Q?VLlIE|#GKRZwC00zvH)%%f)<S!V8KhI?y_Eg??A#?Ww4TW@v`{R{$%eNl~JvX
z_g?N|2l>_fjc^y5T1~9o>z~D<OI1r8M6wiQ?Mip?UG8mGZ8a=vKVPKMCq4t{I+@>z
z140vj-$~4Hj<C=3pp1^Ld{h7i#L1A1w6QL(Hz4W7^x+wQB%Kj~#9OS)MD=^<&*c67
zVsFtx!V_>A_E~dn{&k5Eo>~Bgi$|rn`Z{(~Ojx4qa#LSL2do=%(sfAwpBm1%gW~B>
zh4kK_=1{|0qawCkXO`Ler)&gkt4F@oz@|oj$YJFe*`QsP@14_sd#w)3Cr5eW3!d)}
zFt#JAL8Bn<ay&K@zCP4`-Y@D@I&`XR+w8;S)n`sIQpHBLBV5zr8X2*$h9!EmHROf~
za?knBOru}H=lybkAamtFO2~!4(*S|7BG#B`uJ~8G^d@7PblC-fpsoA96qQ66L0K|w
ztOkg8%-rNciNHevY!07ahIMc?Bd|S@^=lb_pK0txI|qC@C~h^M1g_wgc)(gOdU(Qw
zI$jD1c$revAGK{Z!q&+&BLlE>|2X}QdHuB>_p%^$l4zQW-BofM;O>|EVx2&tvKd=-
ILtHYMQ1-#8O#lD@

literal 6481
zcmeHGWn5HWw?1?#HAo6WH`3i93?bbm&Cm@hNJvSylz=oMQqqmmokK|o0@5H|a|i$L
z``-J%pKg4(U+y};b=LFjwf5TU*>eT}0I-ec3s-Y*s11Oy`{)F<;dX+W+o(!&O9KEB
zuamW>`F##y%yw3e?tei5aD`fW{uAFvN2tX=+dOoIdOH2dAtB!EP)8TbdnN|}$iV#y
z!g1*U-~lIs|6xc*0D#?xz|v5t^PfrnWXKW3`o83Thq*Twx2%h!%bx+r{*^(b<$a+x
z_kLeU4t2Nws{sH!w6yZD{Bz{}q4rQ$cUMGIhPqn1AR-9r;cAVD2t&T_sf}=aSEw)a
zegy>+6B7||&Aqv0gTM#`07RB9j_%Huj=qRt9suZph$RxJtCRVC4q-?D5-Jk%8&t&V
zos*UMpR0jDSb_UCh*1!Z1>6Cs_e%aaqWm8b!T*725jkWe6aWPg0}+mb!1wj&_x>L+
z@jvi=9TM_ieZmkJ`5#yU8$l3;`R9Sp!dC!%rKgamh=cwN3IOm0Ko-D6N5?=%!^FVA
zz{0}B#sxjV#lgWPBP7BDJtn87dQ47938v>{0@Je7QBpDsvaoY;^YQUfGYN|e@rZHq
z^6}g^LBhhq!o|TQeei&khlY}d=f7?64uAj?phZH6r3H`)kWdJa;NJjh#GGhIf9x+Q
z_d-!n(a<q4v9NIv1-1D1H-&<Xih_oQinw$ne?%TYB|syj;g&`x(lE!Mbp!DPC49i7
zld0+?)*L^i=e2MT#=?F?LP|!?z{teR!pg@lASfg(A}c5VR6!A<q@}H+tEX>ZXlZ3_
zV`~Ss_we-c_VIo3@=Zu+Sa`(S$i$@Nl+<@==^1(X1%*Y$C8Zy$YrfRh)i*RYb$$KT
z-P7CGKQJ*lH9Z5Hott0%v9|tmV{_}*_R;b0lhd>Fi_5EfUH3ZwX@4pEPr3*Yx{y&(
zQBX1Nbs-`9+zTf_MWf+HCzRH}Fn1%O<q5(B$s~NJ>cpbs)jTA&a39BhM9;U%aC9&2
zkFx)ou;BlZvVRHtcU|)UE(#Lj$3r0iB!LrE4C#q|K2Z#Rk?-ri+KHB^Ns-f3#1qOP
zcOx|qrD?ozkD}oK_vK^@EpHxlX=dl9lwa7ka@ub)RCCFSSMsV&3XdY;T)G2%6*o*T
z@GSuAmmQC1v!-}HvC;u#jQs=QXt5D0JH7?w@iR0pU7x4>cwF5zcj%w-#!C6)N@f)T
zu!421HNelcf5*GC%<2hm<#Z8&j#sN$*MTMdP6i*m$&748F*cC(aBCDG^FD%fy>5JR
zF-T1Uf1*!{cD`g`>ItdyGlez?zu*m>w*gbu`;hBoR_)u@@;9N6a8f?hA9jBW7TPU0
zl({p|z#pjlzIf%PX*BEWy(6I$TG|P|+w~$H{Y}i@9?rqxoU!r9DkV*nATBLXYIKa~
za%y?D?oK00vY9^BBr0r#H(Pj%Mf^nm>31dfSzl-BC&SfW)VL#yEUCFs@iycY=&3-F
zG;Ffwl`$Qm7<6E(*OtG_u}+L$B?mElWvAZm)aV7n0cmZzL+6x7!wF7v)X5ENIK9-l
z#pZ&ubajVcsvxWjvyRb$>$wz=UpeK%dtw~a%i(IqCw-=`;DGF<cKK=)No~g5xtJD+
z2Yu6fGT~}U!&gBy%#4SR<}7ryQsxaDc+B)WudAUGBNPYUe6mM`kOWs?zwhRO;*112
zK|%1ycuMDUP4MEw;@J1l>I>OtsU*?+NX<vReOidogvxSe6D|qlY?C9#a>bCPQNU|e
zz0Z>MIW_9*4_hbpBWH#_W6^g<TMCb^L(8c{b<Nlf=W5Wgy?Y*FZLuEvzMc@fw6wUC
zc=k=5#F=}{ZETGn^RPBz;Wy+sUO~J!p!^X|e3}?*C052#w_Y)`$f4Wmx>hQzYu&@;
zd9e`dKqKXk_iz9+HCu_$%94}@%Q0oNc%9{I*9_A6YLrL+UQ*I!JnsoepVI&ig!nv#
z1G&}}x7VP6F46peF&^06ZRBKL6xz_}g@UKc6}llDSgumIp=%PnMd1iIm@OA!t~4I{
zzurl_2?s#C9DLs;IzN@K)!U}LAq`uMex+9m%eZ+C2jZPG;ebizrRJ*#&ffEw2{$ZG
zl=SQswzXLFK)3I@=SLC2H(nf^m=+{)4UVx8&DCm4-7P_@WA5eoiVL4R`R|f<4NS-7
zQbQu#)G>UFR?rNy2*(4C?6a*wTM7xSJ*SpL?J&z|E^4lYj&<syn3eRs!ei1;1%x4%
z6>Hrp`q>2;O2E+DTJ2=Eo;b3U>h(Yw7olHwBdiXkE{X0O<sk_X=g#ct8>8PTPkUcy
zP0ur<h|^C+cbYO!3kK@rySJ>LUcL6xH?`l;k+q3XF|SL-c;8D$7aK@Emlw#|=j_*P
zL0s=lW#6MGF1)kAuiNP*XJp;tK?jm$GndkxUkInVeyLjsLXux^6XYy=NUNv%3H#^N
z?fz{;QNGzOLw=Gs17I!LdQ8=pbNg~EFOat|M}zFR9LIkQg(r57sp2!5sQ*>PRo)0{
z+I23`&Eso0aJ794LV7l#yqSJCO;`}nB~7-~c30TWYNct<xGEP<+uizxGJ3D0b7!ad
zxa>q7UFD6wiIRdQ)o4savyYeYrqCL&mh(d*IJ@FwV8^$R@Z>iM!R?*Pt<Z5Pvai>&
z=ZVAtP0e&@BKwYaqTc7-s#Y!n&p4;h3ENYpF<2V*Zrmd4<pHhQ#G?#`Y{Ihj;9aG4
zNw>}-_IG<;zon}QIC-!W2S>$y_YQ{5@&cKc%a1mOBfw9nIq`;gVQq_dDa5%`cVo-Y
zz9?U|ft+{HzP076S2OQHfQJ0PyWZbE9=*c9^ZSp<bxn6FZ^&(%L@`oP#~=+54}%8O
zd8u7tnFcJM!2xpS0`&mL?VJ<B7C6wpcgOcPq9OI>+EyF!e@ofCg##`}`F~@1k$~iX
zZ1p$7oQv|e;{V_J&l~?=T+_(3%jf+GZVxZ9P6!x6<M`TBLzY|;K1T>(V+k=7lRJWG
zawmAQ$yKb77o78;nREI284?SUB6K+=+KQPF_!WMg%-iqBWUG~=Y-$@tj__M-@7k10
zYOsM=&T>-+p<-=BOCz6wm#OO2Cn6pw(J$?e*-2v_^iniMv#~4NAu516xQM<6O;J}L
z!lJOK#IIlHu+qa{M<p0zZ^$JqkGmrluaYxB5g^+3aljP*jg#NyC`3_2xWGbhUWSOE
zTG{GX9Jd)5&AwGWeIyfg-|<J;*Fn2L3LN&U;CC+t)KOo!3f?ML_<Wu&a{Cd11Et8<
zx}I<*HL8`t3dBdna7Phzv*&0t`*JhXT@-zQ1o<_rl+Anzi?JCGPI}%U9%^rB7O8|O
zVED0+$Z4=w%=0CP-@`>|hCELyve}qPIym{gbIa$;h+9IRcfN5ffhu&BgY??6CT=RI
z(b1Hh)Li|6#n(j6uwCwQw2JK1k_U0o6?d;e3x54+$FVOi)JcLK*>ef55_gqdW^4-w
z+pCN5&vU!Y5QmkD^mwD~)(LI<cwT%^X{sn7eYmYZ=lo3cg6-R*%x#(yrGsyl<iQ!U
zXKyfK;a2SAyM{7y**PNWIVcY{QCK0xk2hEt25#7YCOuZvW#;(3mt>T;s^B%X9D|!)
z&OcXXsa%9vgP#97cXMp$hjPx#{gLgp4y5<dl%F2*3{PZ4nm`5(b{rK4#od@6LK--*
z&sArHJdi2+Y*=0n;FT9oj<W<vqw}=S%{W-A(xvqEt+c-^@BD1wF9f@+%WgBnU_ipG
zb{&OfTPgUh9i53|OuWD~L_>o`3TG7&PvY$u;wPqh9?*DmDdpETVV`~luFPh5ux9`<
zQ75L&>pbIm^W()>hrk8$c5qH2236PV3Tw=D&I>sOi&3ea>9Q>)PZnpPpk~7mQ<1^(
zj<fFO%5DEgJ0{X2J~;MvfEyB;LV8qj&l@pZsmLm!@btPJADI*|RN1EC#J5V}`56|S
z!f-&lTh|i;2i&1ciL~9uE<Q4llKQbt9DC22i*%8F^aGcTC>GHt{UATkDstLnTWOEG
zgn|egMfeE{s~D+a#7{nxJpyGxeCP03Nf{+U={1sVFx7ecQPQu?pM9SFNTr<<j7o;=
zDHOj3VcJYGc435<E-Fmrce@uFt+|ddHDKlM=&iwUm@f=?HG}ER8Jht*rPL{e3xqR^
zHtSKIHUwTi<bH`4YGiyGl;crTJ-?odeoMB@q_3z%k=2?nEnbMPyH?{V+F1QwO2DC$
zM~or5X|P%lBC^&h7&1nNA1o(Q5AGK*E#JAwMrVX|hbe!W`AC$Pv8`;!av;&|hQBmm
zB(0f{A8yrTBmMZ4yZ&Y`t9JOf4J*JjE{tW@`kHlXgIGY;)`8op@s)>~oP6m?1(CHh
z0KoK~6s_>&&-slSfaCR^kK4KPbv!Ipg3D5QoSeY&xB@WQZPwRv(EZd|ma83V^#U}z
zo9dz@mY??bmVv3}Agy`aqMY%_E6dUwLY_JrCO=8cG_}6ph;@%O!1aSZfK12wJt*px
zSuhmR9Q@p2vHsiCLzzEP-;s8_+YeFW$j+g9EL{-Df?QC#u2LdZh`Q%GW*Ku$6jQQR
ze3FxNh>J=jZ+O_76=iROo-+GL%BaFlAjk+!KaraLql|g;K&4sjPud<%OQzi!tmD=l
z)~$J03)PBzhTGMnk(8Jf`kqOJjH?Q3W%pP`KV*^-(@YzdOzpuvm~%Du@!EV9`S53=
ze6i_*RdG`&7jxoDrI6sMj1l$RoMms84~^;TXH#tS>AAaQNc>NPPC_@8t)JEMVsw{X
zJXb7o9MksqD#BeTIb<)Xft=eE!m;)UNo0EB+PaXVDJ;2TPiNlc;134Ge|^TGC44S2
zHrau(Qt><>CilETKM48gY5aGtfc&8YXAVDNY!QyKcv}92z-VK>>~*rM)~tg|W_33U
zaFFTyZpMBzX*>!f<<Z_)<z((t|1ds7#dMniPu`gbl=gTspN|)eY$yzs+e*0oW%>B-
z0*&J0FBsNMU~EeEAlRX#4k|^FJe9{{eX43}u&cap`;V!N+hGyQYcE@B7!{|<$4i+(
zgQlrtybr01pE3;6p2#*o&wjV65~xC5vTioM(&qdM%w#Z>TrWClr^0et7xrt@=2cyn
ze9rGuLma~$Qe>y!eFy1`q;i~(g=6RM(rT#ev94dXD%M&yaoKL!u;Bihdpx)Mx#9Do
zdozp9+rk*|nS})r<Ia0uugS0j3TIJik>P-qIJHi3yL7$A($(ZX&q+o+Aql6946EGI
z#79g)-ecu&WIj`g@qIBy+ke1TnpmnkF7@$+>0H0D`}W$6F<fPea$JjRf~9=AUi#Jr
z*mU5;v)B0*o$AuU%Rrw*KCZw!p@BW5uri?IHdVGUlwOBFS06Pk7nV#di~h#H|J^r}
zhm2ptSk$ruh(EN`Jms+A-iqn@s7+v;d<?2B9@hzYTWhX=xl8MH3>u!p`*c;1@SR&r
zD7gj3HF)NbsL@H#kT-n%YQ$i>aH{oYW+mra7vt%d9R-CaI2?C2*h!v*$FM~8XR$3_
zMM)!VDx}ad@Eqq_s4}bf-J0zeeXd2K_hr4e$u&kZna9&sA9yiqj54BnND5l-N_I9%
zB1iPE<ND>NRq114)l0?r)jonN!b(a4F#jV1A(*7F>y&xZs62SOnb4HyGvrgHD9x7^
z-!*YMCcK5#rQ6y|6;}3j3gV*%C!wSQ6}{f!#eP)ql{P&5<mBebXh^P4oHXx_nTy8|
zm4)JZR+|tg5jE#v4fRWPjvrHhc5!!T!>!wLVC*!l$(Ad-jVnPINS4Njj_XWcjYcK!
z8s}^&|7PKgpvh|gNvdhpLVL`>Q`5AB&f(n4^e}UWgazC-!|9KzInjnni$UjE4bLju
zf3Bk$H5i0JIjr4XWaZuY)86oMIO=IcUkGNZqiBC^S^Bi3x(v6Um)I$t>MRaL4oZ2r
zHud7{cp|f(cyz({NVbxPZ)w%&=&6t|YT%5WJD2rO$sr>R;>%l#iP<Dq&ExPia@p3>
zO4az12WIK1KJQ3kmo$+aT6B0is+(Y|IU--%d3-Zp?e}FFH)x&BpD!3)hf5KI__8`{
zeb7{Y5cIS{RNI!SBG#!ot8F{r%|iL}l@!QQ2ERMrWx0rMx>bIFSL|e{Ho433;0K2~
zeZHWb`XSusGh|0_5nk0M&?&Tk5xD4`JG*m`hGve9wVM=E485_g@P|qjv|%)gE>tB0
zLTFl}ZnBs^)hsiWzs+I(SYod;e&j;zRvht!YD)M}v#YI<`@{O$MwJ5iNZ(e2K;=<|
zuzJ%r4^>Z<%k}uh=A&5H><FeY$?W4qkDh_G4;q}k&e0^&l3vJcm4@ot7wXihI;_Gm
zB2M!Hj)&2@@Asc_?Naq*CqTlUFBZ@)JX!uFW7kxfC<}XNpkvt$<Pnn0OG=a)emkR2
z#L2uVF1K0a72dXP@t)oa#{ljcX`GaamWt0{aQRHd7dYS%f)mzInJ)Ze*80q#)nLdp
zO>sf=2PW0ADUIfvOqO4QTjd;2bf{vrCqE5*`eHgt*3C9vXjQ!XXmBS$?lfxL5AD!r
zB@0$M=8KOUtGjr%xv&<%ma~)8U&9abHtCi&xZRdH-xwtSoSn=KENHf(Y%TRs75OPe
z#>GIe4uYV?4$^tun|R<ti}|QP3JhA07g>Xr%i$P<JQtc$GtsGo?v2@BJ&y_q3GDG0
zJ!~>0RQa%^YAuy8H!$R}hPGml0-jfF3W^Ev<Kg;sLl$=J&=+rnZs|?V!25m)QSLUS
zs(Rk8289c`!;Fa<a?fij8dBl37pD1<5#k<Gny9b$B=5|+E_!&_bEBi$-=UmOjjF$X
ziI*ZbCn1rN>|iPt&J`s9IT}pBf2&1`T3~8nLVn|)WR}0jcS0ZLC_YvZsm6_Zv+%iZ
zUf$d{nPJ@}bMfcO3N5`A$SYG=xp3L&v9JLszREpXO2FciBOx6D3~Ld?6WM=~Bbb}S
ziPgSG6ds{a)X}IJNt6W^W`PE?Yv)3c>7jFct@fbGC0mn>n!pbi@xVZIV96yJdC#+U
z<B8;xXgwszPhPdH^u4Be>X3Yjx^&@y*Ck|m6Bs``CksC%SNe;MI9=L4G1=djxqubw
zQNww8)aadG;t1QJ1kdrbQr0l97`<Ju=Vcpfy-BCOT&w>XqMsM1o$&6?L(5)S@=G<}
zh#kbArrp7Up%M@Gnf!p-2bqg&UB(!0t;&mlw^WgC5V`30?!$*w23Js{BA8#);@f?k
zLh?<BQmRmmL%v7j_07DwqQa?vNFD7;eXi5EWo?&U9^0z-i{b+?H7BO(F6vc}dS+gS
z1p33AsVieN+TY<VI>aq5B#czPzdwRATFE|P96iPCYbdc@ZWQfi@$C1ErrlNZ8YkQA
zJ@`S^SlmFRtRGHG_p^?BhH7`_i(%cjLd9;gniuED)yc`T`&lOGQ(IN}?@Gb{2Byuk
A>;M1&

diff --git a/doc/check-health.d/notification-02-cpu-utilization-ok.avif b/doc/check-health.d/notification-02-cpu-utilization-ok.avif
index 811ccd700714ce29abe0bea3076ad0fe87c6f45f..f8e91a3a21a8f528be3a27ce56e2c8f2f172f4e2 100644
GIT binary patch
delta 3845
zcmV+g5Bl(pHIyHaA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951XfdBviC~0YKW&i*H0004zoE?$uAOU2P4FO1h
z4vB4KVRRAz3I;eOryOh&GV~lwWCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_l
ziS;bmjgh$sR<Ubg!1WSaDNuh!;i&1`;JD!cTud}!n0C5l-8BJRa^i&jU2wL2{*F{>
zB{#$}skEz#P?g)AvHY997&OX$JGuaWdzV19`I&Bd4G6Pnq4cKonq?jCYALl2v-Ukg
zfF&Z|zIc{-l&687Y}ry1ScuYVoI5O!1&^LVaePtI;5H0TdE^!xX9jBd$Cl+d&&s#A
zpUOoQKTBs#JTFkK%TrGAny`O)(_?=SFt~!do=LXMS^dGC7kEX1&X&Jb@HM=DS-{+c
z6%4o2PfKQWz*TBC;#^s4pac>#^!7eQ6}f<J4hW59oOdeRBXR4yv4;f)?jC;|szE%e
zWcVnSZEF9OC=nngQSmU$o3cZvRfx(l{Wrb^xCw$lJnCHRvo~k&2NnrPF$}RGL7I7x
zfqllm3Cq=QxnJ#je+9N?i)Mp=ks_wF)teLy=eba;mP29xb?6952WflYAbjRoYDOpZ
zPh+U0suFwTI4Jv@qbUOuJAMsgVOZ&mwx>u&rNQ13igJ7JBqjw}G@4;(!c@_I<J*x7
zbiS#7z(L1>PtR}m+=P0czr3^9qEo!(RmF&^nlZ(T?(V8vo8RL*uGwFIAH}T*E}C!g
z@s2L?r>bD{YlHq;gSvZ)A<cwH`cnX<Zn164Rmyd?Jjm24V*K48y9j47blzxR3v4#k
z;ADLRi(ie``|Lh^mJZdHS}bxE$(V;BsGsG4COd)Q*9A0AZ!&dUfq~$QxPy_Us>{0=
zs_XaU1BSKh*_ox!fQ~wUV=<1@(1L%V!#<m5MY=p4XL-IP)5X479**#yaH66$F=RmD
z%|dJHS8O5qFpqG-WWpc*oc^fAcvle%psOxxgVNJ9m>zPXPk(6=K}oVbB7+<DL6~rA
zS4eAMs5SLPuq60T1+02o<^3s!ng!!1XnD~-72}ec<#PGv6Go<gRB>`#`gdX})@6Qd
ztKz|Jmc*w1Gjt`B8QX_~i4d>U>`!@J$z6q*t{;I6SWHDFi{;|v(&K!~dDdWhfz-gh
zcYctMsdg{5+r%eW>8ZDh^&3SrdK}tL92MnEZa1gCDeX8(GRy(Ea>{(syPpJcR7*xq
zmrUUI=3E$)7@mKBV~4HD`!0xGhnHMM;ZGXty54jQT@NE@U)PHhaeCT%?TSJ<zv>+D
zZv0eTmwA#|Sf87M_6jtE(9MI-(L?G{ZF1|A!*t^%-+P;?<I+ZdmDBK#;kkEt%%&Fe
zxr43r+BSqDkIXy#A&_ex4m;5SlteFLJ=zi(Tj%1{tFC!}mVFRC@6%N+EqkzqWg?)>
z&`#ZBS~m6QfEi%06H6gW?M&uQO^u{DKm#Jp+6Y}krRiPKQ%u(x<(+n<G<)h8HVjF6
zQ;b1~Ys<mW*P9EzzVHIM#D9k^T>yTUbWp4ccFb@y*Gb7^z2a8FU{ptpzha`S0{=3Y
z-cLdF$4BCSw$S%K5<zM8Dc$|V4fyKLZC*-4x|dhqX%~hd(PRWxyfh4cB+Xz_a#^9f
zj{54z!9(nFMzk@Ck_luC{rD^sq4AQl57RJbMdM?T(%%1@`k9odBc0I0t@G}`{Ct{h
z{dqP<N=0it($I^>zq!$AZsoI6gXHs*ai=!I9p$@!3ZQQgf;Vw_f>fMP{0Z@oS0Cd6
zg%S577nwbFjQ{VElgwoTeq?`NvX(%>cgM2dd@7gc_7vUebMN|p2(CcDky(0GSZ$RN
zA$^*%F8h_Jh_6fK`VC(ulj?1qMLky8-j|G$lt&6*#UTR3LM|6yg}>HpA`)L25PV>X
zPo6-3BgTg_U;Xef{9f<GJl$ogUN{5<v=Z6tnh^ajECff&?>w81eZ*i*|Lu};yP|6*
zA!yn=*C<tqqyI;{m@I^F%Ikwh%=+Ns;KjAnzbkS^T-2R^fHZS!TnY<y{rQkzL7wzR
zS>LGNZABhGM?upe*DL6h4sN5VEHQTiQp-($*dU$-0Qn?2p+h89U*`9jVF?DKy%VuR
zL?zU6O$<h5sbWyAS~IZomMWpd^V^B~m~6i8ppKCXZ>Dt`zFl8@LKK2CWI9B1{?(1;
z3!tLW#l+Jk7i}bNB#vv)bL;;u6jY}}F>jWxNI3n%G<suECvYNQ6m|ZJYtX{^$p=z@
zPAK#Su&K7V!7Pkvr}~LNOAlfmj?mLsXWB8skXqf&Q}+>rvfKWXSW<jRKC#-)c(C^d
z0wfEvthHrdZ)1OiG60)=-pxDVzHjX`fq&41C-B-U0RJ3jgHITB_YBdJF_U2L+hFU+
z1}+@_MHKzB$n-A2`QsYaVRvk*L&Btg{ei(N-GbOn!9`}4!-Q+y9<?DnfBz!;9`{xn
zIe=fQyzj8$xg!mC3a-0|w+l--(9&JvFnKdUFY5Y5XtCs^i|49LBp76XyQIF$`2Dfo
z1;O~7$*&2+y)4`T8Qs!EO0;8zBnARn6rHR^BjRwi7sFm#5L~?|*{msC5#JAg7-HK$
z;;dCuWN2eNe|sgh?P<FGBE~j!3J~rq0>&cya4RdVI8s_x2=3tz1uO37)pZazhnP?;
zf5+m<8Mlh{zuWD~l%sVg%ShqB!kZtaF(jS_bsU|tV+J9(QdJK;Z?8G!h{whAJp4ry
zfC%e?!qv=Q2hr^XWsD{(Cdg!e3^tHP(?al{Zl{C6CF;UaofnMa%B<N`BQLsCiTEl&
zCvMW3P+z5ACk1);pHWYYg)42ML||t;>7Z|fMc{YFogEQQyz}24TpOv7B`DDjLvH#}
z!qkAC^G?cjj#lXLFv3`sl7V&-fG~O0VjawcgOf;WRAUmlMO~ptO4Mb4{#^4!{x<~N
zlw_O!BZcek=H8-zc-y-GK2yk>`q^&1PIP4;+F?zFtub;zRv3D0`k8o1syJzXf^)+N
zRI3w}dc~Hf^Vej71f7?%j;FtL!1HN<rE;HW+1ch2f4L6@@MpF-%M*0Jyv;w!iNbT`
z^3dg@y5V!O(afj9l`H~(o2Qs-q31k9bMStb_<a?URhH4))o0Oe4)*5p`S=@ZV{!)X
z=6gxW!<4v%y8EiooB^BO+*o8QNVx9`e6GfAK5&8+?DtkI+}fb@{P$v(%hlT^Y9{i7
zaSJ8W5NK}%NWwYE?DCWQtsYl!QrRhcmsz1&>cJZjb%J`qehTJ)SNIJaW$z2ZiFZQ~
z<?{sfQ`T(FIh|$f;w?jkDW{bL_|Q>6G6#Jq5ffK*lvM86y{MBw0;vz+aBJ;LjZ&Yd
z3>NpOWp%79b~e$GXIo1k?z6-^@Vb+^L{5L%=pQCRYKyGNV!IPo)y}iI(vnW5rY;Wn
zp>~qIAO%4wWNW{F!{R==_Y&+um#X)qE)oi=od*@II=?PQKM$TWsbzw<qdV{>+Wp@_
z0VD#LWLa3a>|G{x7=ZC_mJrOsQgH_hx~U#TgFxPzxU(aay+%Cl`P#c0h+3LPL=dTU
zf=!ELC7<J>y44_Aa|{xqJK+Hu+`yXP)04=R{L+Ekb+>wdNa0GoUu{~qZ#b*h)N*ex
zQ?#bLbk``Nff2J11(pT=zPz%HMgvk2TF<|t#JzH3NE2V<eBDXNFvDp;+N3h+vh!~F
zy@f@u@l#AggrR2V38hfeTVJcLIxolmsRJD+IZ&ZMXY9xW@Q<q#0n6Qag35W59(Q({
zFSu@|2={(}c}oL2ob4LML8v&Tj2bBaTchsKz^>Je36X@07L5tL37w%^xDGKY{=6Al
ztcu~2D$Z>L8RRkI%L-HS!gI=ZW$({)2$%$le5_kURcS!!iS%<7Y#4C;d6M9JC7CjJ
z)c=eU5A0}pAT8&n+=TM!UjbG=62%JV9BCjRd^V|nYFpQLhvNlA<z4qb^?_?|zzG};
zTS-l3nL92F{F$W9+9aRS)|z8fc@418-Ffu6IBl9&8CC<iE1F%@qv8vN%4%n?R49}R
zF^`?K^{jB`F)rEFNfiZkUx_CLuB^aa0|pWcb8P7V<;srvv!hc-LDMUd0l2PCXH)M5
zi@-X69y06n)x6ARg$n+YI}J(Hw@{>=aBo$rlB|x|OGbo%pPezA*K~epeik&@{7sbQ
zUt%ZNU8BLBb~GuCs3f`akp`dvOMuJ~$zKc>io<j2nHM8kMzhx$FO8x&tuEG1E0D3N
zLres7){OG~$qzQAvUZuPf6=tpyV*uXj!iRvv;m)VUIcPQ-y7+5Uz{y4*O%+7Ulg!~
z2~ZN>6`*$mP((sYG0#swK8wMfWn0aT<`;j#L@nB~sWRpyd#^IY%%K%v6ylT6cx%Gb
z>rA=);6BN^Gs0ycFSy=VJrh#|hPRDJ4yf!R%gG`kW$YR1%12E@{-?u2Ew)E<=BxmJ
zb3WTITNr0L!baPBG9HHKL=WoBchqZG(`Jw2H^8r9$#w`GXc@R~(qn4>ec=eMs(Nbe
zEB;IcdH?1%q{JDGtznxMdMQRHn+^_Se`irP;idhPTXsBju2)6_x}Z^Sq{@d<4zUTq
zJu^~^@M_X52aWgd!T$B7tvp-Cng4fxj_aNoFDvBuV67h(CK_F_-W18|RMzSz#qi$s
zxII5=y5e6JPRt-lRkSXDcu1MR<k8qQc9hfyEw;fGfm)Q!w7Gb2NjXmH&RGnVYoyD(
zWJ%<=2Wa&|3A#m>26>s^iA8?)HyTN=4dCaTMm7ffU>O)#9<TQ>aGVe=0EVr9lI%)j
zx<4{F;Vy8li>6lBX#N{Q>tR5VNSU*CC^`SVL<U>%ijYo{@d(q}({>~Nw4sfWN=`m=
zcfyMHZ4N?3_@hm6Au3+JTG?wbg5`jRL`_e`<6eL<ZxLp74A)0~ttuFwHu9>w;h*v@
zF;2(zbSZv(q83ZMY(8X6(t}GR7>%r}Z;sXz&=&mOQ(ylAB;!5IucsL+&L-NkH5*kf
HO8N<q6zF8Q

literal 6797
zcmeHGWmr_-w?4xR-QC?G-60_<C0!yV$k5#qBOoaylG3TtC0!DNNJ>g~2uSB}2Y>&(
zpYFZSeeS2b&a=*X-@Vped%gS2002N|<KgRK;RUq;5OyCOp*DPuPzxJ%Sw2|+00}r+
zdsy7(5XNTv+`;WH2mmfnE04e9`{)3*{CgW57pRBhpBxDB=7KsnTir8x06+rnR}hZn
z3jjDo2>yqGOaK6r27zUvP^UkW{K-%ti1mHR{SFH+UcN`p4$glDApb`Okyh}5+T8nn
zAqCXU`mY9v{#MW3t^OQ&f2bYQ#mxl~RiQ3c&WK0^b$78wM1&#T_tZr=o(t3mdcOij
zLqkIZEDJBbM<H|w1OS9q&JJ!)Rt`RhVXy&|V8jwB)Wy-_K8G+60D^#!UO@nWT-@=w
z#h<HDQQ-jY+aN|kI643aAooiCIHLS-5yAh484x)n5EuX>VlcwN2z+0Ua_|3wiT{T0
z>p)0<^$AB{q`%>}7zlzev_H??^xYDG_gGOy5pmF;K>^@y4tNBhp`f6mAfut8qN1at
zVPFwqV_{-qkrNQ&5>Zpo(oj=SQPDARv(hneF;Y>niLi6=@(BtG(z1$4iSkQw3kdSx
zHvyreqhn!Wkzr$#@zYb$^Z&Q)t^>eF0~kOEu?zqbJ_w8ty88mqBIZN}{jtBK+zSOm
zkWo<4&@nI(1$B7$Hw8w5fRT|Qh)V~(MC1VoJ~9D4pDYTYmIW$<D-nN4LM|GkTvaEr
z_UIv#fTbG@9fO3FjGTg*g_Vt+Lr_RqL{v=tk-UPUlCsKU9bG+r14AQYtLN4>FKnT9
z?jD|A-afv5uR_DZUq?hnB__R1ewUJ(mY$biP*_x4Qu?8~rnauW;d5hCSNE5m-oE~?
z17qV8KPIQ9XJ(gIR@c@yHn+BSejgp5oSvOuTwdMly4U%4`%Bq>(uI%Eg#>|sA*lDd
zKuF&A!to)<^n54;vRbGXu7nKyA!tN$3At6B=!^o|hs2g{qZlMig3HXm@1^}w_FoeQ
z`yVO$hp>O@ngy`HAjHQ5;{(#bi8`w6*uJ0y>PzwYH6PtXD@an*4;tbz)lm5N8XQ@A
zFRb4&cL3kzcngC-9&}-H_oh@x>_z2|fblTxh35j&S8X!5lnLju9duW5LrlV7g3z~Z
z`8}GorSgd%AE=CQ<q`}Rn?ShmEUAt(kUjOi758y@dure)<+vlILUAS2N<ru_eQPZ`
zbKT>3H}+`*v90VbLZYMPYK}Ev!LXCr8+SZCOIebW$a<(X8jyP*LAF*uI{q_6^C8|?
zzYN1{$=n1FnUjW6n~IRg4WpM4Yv%jV>$e=bw}A>bVI-KzxebRsUtpqpWyW%FBQ3mv
z`uU$%uBz0<;f30}R`#_71(%P2m>1HiABEvmwRKJQsYZ$V=6i|{EkR&u8O=@o+_BXL
z+9t=Aq%IzvsfNnJDT@<pbdNg#yMvy8W~L-{MY8vylMFmBFA*0*0WUeXa$0do?o~oO
zzck<FWat$aDFYwh0;6R=#v63HJAjuXG!T0%Z>IV|GviSTm4(mh3DK;<h)P>tkNq+<
zFHyIlYK9zREr(KNJG&gJkR2AakGFks+I7qE?ICS_2$P;SgIwXcdtxy|t{KMmHbrl4
zvH=9t$H*xClt5rhodh!>!wjQ@siznV@Z$-vx{Uk&cE-nC-kM~RJ2yE{9?NZdmRHJ6
zTHMdaKqI!hz?|3dvSatN$T9eEr7*ht?6+}-=R4DIO_2)vb0-MRv~&(qH1dEdZP+vY
z7~@%IeLW6~PDuUe-1SeLqK3m-f{66l{;!#iXy{ZSw+bdS)HRg6y!vLM@c{SrE9>^w
ze$;GPHD@d%$udS#uHg+Dzsy&c)=KLNur>TSpJ#dy6T_I8;C@u{-XL)YJ|At{Nd;I3
zBUY)k)@O67xNo}IhY{N|<ov?I=7iZzDrWtOK@>iRWw0=CAS&=8#s#?H<wLakZEH+5
z%2fqDdlSR|sS1WI0mq-GgonIqKi|{awfC%RFx1&EcfH&w%<FU)_-9V*4nW(Fy#r(h
z&92WlHKMpk1*Dg$N87i^?eBoV9@@h<TZ<=Hb$39!W$o7g)mGm-php5zT|~3ep3~>o
z%({6meFG!Sj~&mAb~5QT%Az}9$_B2R)ot>=9>x@eVWNbN$vN{&P6gn5CPvNiCU$9F
zRTV}Swz^Nrn5g^NA@xTS_KakV_t{4{^&ODlt$7EOqu+ddB7hU4w5pDtMq!h(LMbu$
zqP2;Crg!-5wTUxRGJWbQ7V0<QLow9td><BnXh1k8J0zEE_u{t>32P}!Vz2;%qaHKH
z@BChChekTQjPK$>HBsq1CTp3|_7+T*QghLu#+q{_Dc8kfA+IQ4SVf4D*C0wreTf7@
zRUsx7nEhU#G`%tT$xI$0nPXwdrfYxyY7R=hZ4O2?Wj6P8nB&~*^s3}x4ZpJ?y-HIp
zk{M^J{vN!6=_kbX^~-&23(2JlfR-;$?BIv)h~#m5q()C^|8^(#lBsKS+qL;f8FI~o
zfY%kpcfhk+wj8YO7ZZvBALSN3fN%NrD!aQO8jFD+;UzU8EDyIJcK~YO9RP1?R{(Ts
z6E8P{>f}pl591a6c-l*y2hxbrBR^{~p;bAX_c2Pi@cLct-+Z_w0wvK+l4>VRyslZb
z<er~55c@9LA-Z`Hms9+4Cx@4ho_?Kf&Aj5!`@q=a35pAR<aRC0Y`?s}Q=>UU`ptan
zZ*60t^CZ`^P#W_@P1b|~CkgjB2fbM~FvG0rbNPjrO-YRrOyw@tqGYI4EYf8f))S$b
zGKG>q-DK!RH!G%&$}rf#JijO!L-B23axJBvO9y>VPv?dwi)-vRnlk5E`s?Xpu&lgH
zq;UKkcMTA?Dtr*MnWv6-R39*$@P5Ym5&U2S8sjNl`<NK7XM=mp5L}bFTEY0{a~TC2
zQh4Thm(ZItR&H-v5w|5k5!B~~Yw-qGLm)7U4ah@yh0sOk9Y8lP0&f;Ms(AcwwBU^5
z=W=gZsY2@N1a|^a{D&G|z#nVu4sh7XJ|Sp9{E>da1+|oO;4?p@x0n&X^q{#L+kYc@
zA*g5HOYZ<#&f#nL;;PcW5(Oe4=wBQC8_|;a|Be3}mm~E4!=mYYf#t@IFDy|eQEvKX
zD=%Cy=x&Apz(5yeE~apxqt6-R52aFjjx^_#2hEttH%xyxCoRsHU81X;p>lVHS1%Vi
ze?-1qNye$UQRHxUi{Vw5d`U}ZB$>U~)Ip$J7tzuvXyo}!{pu4TKa_A=w_|$zDL+an
zva;F8)r)U504=PDsRmhD-%y2J>E~l1!+QIrUZHv#kytxpUNHr%UCDU0>;cLkiM9^|
z&+fi(3pxJ|RTdX3ur!#JBgC&(eZC#XXGVu?*Q${AJp;1uu=25c&^DM7lj{nW;wStB
z;_D)Et6Je*{-elsB?1#lnXhv_=0s*vCx;%42SIfMi@4f7Xfvz5`PNeua{yA=9(tU`
zb~zPmGYU&G?~n?!Gd7EQj3#XSp^(sVuusy%k4VVf`SB!0o=jBpQ&w5n+xJc_<(Cn+
z1l}n=aqPirjFp2-x{pj<)gUo3RGqZEUxSOU37w|)_{xwgvfh<o$Hi2@1BvDWzNQ|%
z@x6FL8bV^nE3!<yo8vAt;SQO|@v*P9T>Zp}t?e1JhdJZmI&sXHonh97^PQ2$`}qSA
z2AmWv%0$BCnjmb)W8<@R^<wgmrny*+o%T^)bIt9W1AO@v5h8>9sMpA^Ug11}K_?Yl
z-H>bRYm&n2(sZW5?JdpSs2o{tpE}2SXu68Gf?H_!J~XIa9{x1t6V#_k@tamMKRsX`
z=pATqzvX_oQ<nJt0xw64!Dr$bjQ=fZ4b`;>b@8=%SmMBe3D5lY9>=vqhfmDg#W%Tq
zs^4-M^h$RFC#aKdXgD0i3wehODU2AL81r6N6#~ZZtAYfI9vz%<<M2mjmUxc@eG<cn
zQRZt2;MtDclcp)SK3w@)jX5xO@$u`|z`?dj`8Q|rax3%hzO4AiOzKMR14cUS9czrt
zfioQprB;H4?XOo%b4(xaCT3HLS#DDH2c#bCmgo<e3>KFDXj@JoHIQ_rlwftEG&%Pv
z+P(-h>~h$|IHpa5&IVE<Po!y`eH5!7KkW@}B(2m?D(jMCgj-+qf9Utl9m0~=`f3oa
z)7r>wjp-f{9;`LG+U!1qa$QQD^i%uv_bIrpknYwp{eax9<cQDy`BSdI&`^D!0afp(
zG$~~km)2TnX2NA7II1yt_$;SYvqiEv{b8gBdSEq)x$moVa5Cl#{uY!jFA4UxF<IBS
zcgqE_mH5$mkYb7zmoYwl4EEEXwq%lN)weva=Hi=dYaVpwYVxd_!Y1j`4VBbN%`RQ>
zPzcgI{ZkaJ8=UNxYgp~)fw%b_1s5Vqw2-DSO3$g}u0WnAaV2DIMPpw|*!{-5KA2M^
zWlXnfcBc)ul^x&)Ebg>|vesDNYWO4+1gmQYF8EcQ5G3xirM@+Z+lbFB7bS^W&p%4y
zkdKa)f6++vsECeCsIPQU*eT7QuSJHCf@*m08%=w$7NLFEL{OIuI^#UdOi_M<eBY{@
zbkf~yL%P+J^V+ILfqT({zFW!2*gFanN9K)EI!pD~sziYO`W`Zj+j8)D|L60>%<d(b
zu*T2Lyw+)+@%$WTg>HW9uapx%1if(`FaAQbK>r0rv;0GyqXB%k*}lGc8gre!Z{-GO
z@A1c+P|HhrPpa5@(*&(wmfeIx!36E#eCIjQ6`o(<0@@G!)54{N>59x})W}KRGY(kI
z{>VO)hP6`_k8HzCc7H>yi<h@c>c(r%oVV-&XY$*O)Vg@^!`??%(&Uk%c2(Yuk@Wp7
zzq%6CSZX{jl|k$4#I(4blrEWdi%65grk!kI6`DnuQo9TFgt!BN4b>a+EiXgITZ=Yg
zpQl32a#PylNBdh%*OJ;a4BL8wgi=1e{j6rj{5s9U9DOvwY%ux2uD6`eQi)jc^@+%P
z;^THHl>Ms=!L4^GkHV{?D<9FXh-jipEzY5=B|j2PuS&e03#i|uV3Lw#H3gwtQ7MEE
z=CR%RQiU(kLmQu;Y;qS;!{FnKIIU$*&`!cxXd*!;_UIC>#5bmT7cWcIk5X2!i-@mc
zi-v^{ipxlapG}2~<}8=T4Oh=t*X{&Tn+;9yf4Lj6bZFj{vDl0K#gq?YiC0AVyzXUm
z?b#9^^H`GJ5?x1Tj(W(o%y@QZu4(F0<v4VryHyg*yf*duDYKt3>jQBwj?98ZuuPYZ
zQ@Ks(;73LJI{ToxDb~ngiY4;h3}y<c<97h(cSVU;az_Hi7=$4vwzkCikqbNzN*=aP
z_$U-%#OQP($4?O~UxaWIEH3o>WU9YBu$f__qwt^Cc42jT3UyFR@NY%c$7v!M-ktP)
zpwK#8Sxfx7Qz<Iam_SKoExA3Jx4BiaMExezZSAx^sT9%?5KA>3v0d4-u0BbN=7C)4
zxi!JZgd;1R=l6B<$@YVh_ns75j4H*bpW-z5s6SQLp!>(Ck3_caN=4EP3cxX>*R3~4
z^IQ!oEh6H)IQ5RT8+l)MyOQX@LcI==TpY$Nrdr6M9L;v`a;otQra9CTS>W=4sKr@*
zd>WQ2Mg9X<eX9b?>+o|?N{(Td^1ZsrCeu*s$xN-SoXO_4MRE@r2ifK8;!h}(^Yt-=
z_I${(H0r$1X1`|ZE*a>YW)V$FEcd~-`baw(N~s^*5Oqd5Y_2s)sV=>wPT%S{1o=<e
z`x;b<kNftdX{I7kN!`+gbrD_+#t!cE4WQLUMdzPCR&GvkGs@hIQgT)dQ=bYvcy`;3
z!WCGgR{7$=Q#_1(i}lkesx2WOvKd#dfK0XrB=cv}4|%ynPMSyzn3a~unAt4J^T^<+
z^<~8>Ui9FiTY@Cy0Q**Jf}`26>@lP(FB?YAKK3g5O(%&K%*2OUGBdvibDtchOH!C2
zpFq8v#p7La{Tc+_UxCZ@d$H_<y&Z3*dVJ(xMPMdb5+bYA9!}?FFZ{qXY4449!XRNu
z-lWA0h85%lZTGalJu(m<IJ=$@N_7{GPK%M*Y7bi9nQzakc?k%SN<Py)*WL>E@rIr9
z{D=YJ-uSor(I;Tny(`%JsoJ}PcKWI%ldZr>Zhj4mqO}M6v%331EQhU!{hq~2+UXnt
z>EOej(=Q#rTWT~%e<1_34V&VY*dRqt0&djhCAxVJ6p=E_m>twp9nkiP*%QA_v=XHx
z{H8JbTYILjIw2ej8A9%<FXY-$2#^h+ra$Bs(a~rlZCJ>g1`hDel(l|~M@&;6iiI(z
z$p#P6E->7n1>k6FmYU}lDA3MxC}VYOwb*e%GEp*Lz8+X4ju~Qi+5)_8#IkrIBZEjb
zsHGxuH1hq9DjNgyok2Bteq8zlr<^0Q4&eD5qaGhusW_fnJ>)*uYmZR{W+!O5@J^6k
z<#BW0SVDCO!zY_a=R2Y2jRHcfhicUoi^2+#@jA`k*qGJPFejMe8*a91D;cmtl@}j0
zB-d-{OI?}4ZMa)ynr5df8=#2J!<FDhtoAV8#22SRqG&a}achRdIWD&PMk1nG!HVu~
z?3VsSx{8X&lzm$AIg%emLY*IK?wYln3g>Xn!LllKVe7>=zj*zL!}<=*-H+tA{?Jqv
zC#Hr^3~V1#0%NhCXpspK@EAfIV7K%N->#O!y3ap7f8FiuGadj5un$A^6`>_E{VDot
zC6Yo@I*U`p^>kM<3ti^S<Z1Y+_G5Tl60Xe<+tF8^i%W^}_?*he>PB08^Rc2$tFOOP
z&u&L=Cpcqey?$yWViwU6+&Oc670$GmGw#q+4xYr#xjf-*8MwNr%x_>S$}J|{dZEM{
zU<=RE`&M7At3sKja1bKDu1np^k83e##%@>;WgJ=CH&QTh?G_$)9si_0>?rj6m@aDb
zLD<4(=LpLJfTlbs)-fNg%-^+xPqm|HN8{H6cVT2>CU{UWyIQxEUUysyRWO^)W6*g!
zQDDIorfBNfl_TQJF7&kM8k2>8;g`;n9sXsWM6E$Qs*>Z!Q$;5My3?*?+r-$|&go`0
zbEQu`RfMWxwVo=Uv6J*euJn!lC}q5rcMOsnOo~TIq_y|<bxv)d9!F?)2Yf-}29HWo
z^QVa51T((c(QmU#W!aZG#`XhJR5HrD)V<vH<@>=I@*|0Q=XDUr=y37xELSfbmQ^)F
zLGRos4pt|hg(kWc+Eh)d7~*E@JG$NlHAJ_^*6+0y2|Q%Bhf*@Dlp6{k&J`K7K<X+{
zXKmvJoMFA+C+VfGaMcF7o8GPcxFVOlL{^(0knyNO1M$X<TTBxiy%<6>?wmG?UQOZ+
z9evNYr?Z{<jKW+hskqpv`1Yg4Pt|XoztI~jz??xzbG21&J#|gQwtXnH;ARewpI^k5
ze~!FYAMxC!S!Svb#UF{|COGFGnZar$KJ6r`DJI?<I<ghy56x!JDZScTDp4BoY-q(N
z+9vi@maT2_mR*}<p!5oDxQgecyb8LoP}IvoY5T~;OQd1nQnktk>L$jI9eNt(<MHsx
z59^&4Q?Eg714`;o5uyo#{xLyM!xzO;`QAZDlql!z9C4b3So?wtvedp+v-^kVuh=><
zxZjv(`Ckle@M@$`gxkJ1>DC6v8=GeMTJF|uaJ9f?k_wsQ5`>BczcmE7;y0k9ybz1M
z9DAeI2mItyg>o%y+qJ9Gt1aMc8Oeh)2#ihW{p5zcgn8EVJ{+?)O*X%3XAa;#7x}&R
zpaizW)9AJ<n@%cHd3t>}^5JQ6aF@BLvJtZ6$T(>v4+=*gm#_aD5bM$vnyhtXqLWKQ
zioRa{tRNLTw>|%_uN*?{1z1~-I5%3BDcN;r*d@%PV4TnoGi`n!ldT86h7ZkNL?NZ<
tGB)|@xRs<@zd+$JBMqU?UP&TVU{NO!=cVvc?xa|Qq7(~g?$Z?F{Rh`zPnrM#

diff --git a/doc/check-health.d/notification-03-ram-utilization-high.avif b/doc/check-health.d/notification-03-ram-utilization-high.avif
index 59155c563e96f10d48e4116d034cc5cb7840d51d..9015b4a318625c71b066b4aac1e806dd23089739 100644
GIT binary patch
delta 4112
zcmV+r5by8jI-MbqA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951YiU0rrC~0YKW&i*H0004zoE?$uAOX3P4FO1h
z50Y(UVRRAz3I;eO=NpCzGW{M*WCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_l
ziSu;(P#Bp(f=Rku2CvnG*u?maF*>U$0kCrqeQw?s0+0Gf=2xZCSkjO=<Mu}7;+;{j
z|5UblvbGgtPZBQCkcWu*-6J(?UvS2M412oV!fFb3D=pRXtIXfG50hdBbKmmG^!t;I
z0-~fd+B7Ogdi9kJ1fePS+YWwl3x02|GoTtaOK}`Tj<FdMfO}C(gLI6*2|<MCG#PUQ
zE^X$=kFQxa_Zg!hF!zF5igR~r#Nm2drNBe+k>Fu$ctdjh5&0%+XG6OY6q1O47euqO
zTxX;XCBQ)p+7KHWz03NFRmykB3mQ96hR2dm`}u^XK1hAE`9IvI+e2^<?VU7UCX~+(
zY+=EeOH|kEiOe0(XL6=Gi-!@_0jenU8H7K%Wb|Y*4r!E(D`A&;8}O3``m}*;sq6<G
zN9g&8OB8LHwA(I%6*qidPbj&6jxyTn>;8XQNgG^>^Z<cC<D!dvg{hfRVDeBZTZdi4
z2qrdsYaE3dvddTch^>V4oW+27jpI=w;wL`3_oc-f4d&zY^;{9PchvF8k98jQ%Htjz
zA4l_^bhwxXseBqb9&WgtR@M<uXYWE+z$Y2S2_;%RX$NsWI9>LLFaLpm%28`N#K3%_
z>b$F)+T)}w%GUqd^*oNlYOIyxZI!%ktTX82=?mrB{%wD{aq7bT^zjNg5oz496A=NO
zHrtusrOt;5>PYsWgWmL|(E|~tkPFYr5XDMH6h5_4FAj@|<j+3gwGvb1*H3a8C>s?(
zUnil))}tnfMZtROlM`)!ZGYrktknTO&iM8++s^#N`8WQp3qrwzI_@8I9Z@x8s}`gE
z)6TU^qGqCm_pIKuSw(C{9HGIj{oxgg{)t5LEXjnowIk8RoQvK!41Y;)F$Ut6TjBdZ
z(Yz!Wk3Uy-o!kL!vcgJ^PSMMdKX3@cGNe93<_va9ucULnP6Kj(sa|uGl27~em3)tK
zunS}XAY+Kyis@Ip{3a~WkrFhuQ)|CQ0{rM}MilUbm!c<|8$ljlQp5BL5hB~;NoCrF
z!KntZi+EQQGjh?&bkf&%Gx8i<k_2K=H#n|u4nxP}REH(p7d@^Qk~o}eA}bKl_wH&f
z$Y&JaPh8g=q`et`jG0B~y9CAyDg~rx_@w)wo8I3`ih<M~{ttc!fAvp!7!HCNnVhwi
zxjC?*VXS>WxPSTLT8_<;DUIdBMrEsy1|Sdmj0S1LlB>e@;FsTlA3%FG$43YxGvFc}
zR$9&&$t52x1BCMYI*|>uU=7(KqRdn}8XkMPonoInKPR?-owR_$d$v^i>T;@{-l{6{
z#DK<YngPwuBg5Y#zbhJ(f~ZL@Z-;0iZv(w{X`MnOhhyP@GdqbBmy#?jqst;pDFoGQ
z|Jqf}_lmxnvEz>CFFG1p`s#39CXb*F6>6(LJliT%8|D8NJ3Cy?R?jCt<TRAu2lqJA
zsTz-k0Z%%AL!NwE@FPh9;5v3yf!nocli5?AtgS5(IK6%r$&%uu4YH6L;W;=@7P+9G
zWOB9st+)D#r{~+%_?0w!OKv{dJMxVRuUz9bX)wf3BiA92K*yX{&>2M@oT*Rf>oS1W
zo5M6!+U{QB*>1L_abE}L-ZLL)?|FTx(U7{&V|oXF$PKkKnisj6%MtI38T-*>MV1zU
zq7~cQqNcYoT+sn{IbujK@J(XJhDPTmbXPCHP4&BHkjwpJ2qT&3r~1TxYXCik8|P8~
zE(Dmg1#Dv@F(IJWxP_ir3_36neZuTcbAvcw?qw;kE{{ODkTz(%TRslVsVR(;G`eWg
z{CCBFe`A5tHjvB1bd@rz5&M=i`~}`V(q2xrp5rUEIz~<!wB+=cT)vmFTcT?_Ffq`(
z2eH}N0#yNQ>hM!}x@Q`_Yy@-3wwWl+)lK_psFfNKx}S7jnZ~y(<HpzEx(25uU0@W3
z$^TM;7v}jrumIaBFlolJ4_b(|FEx{OpAtTQq!Hob+LKOgP|8g|L!FFdFCv?GVJNbS
zjS<h+67MJbUF|RyQaVjy{Kr+u!0qo%tknpHP;=`&>o571)9(TCRsm2V&V_FO<FEJ%
zgw>CkOAFE^7;a?l%is-KDD^PT5N_7av|=<HOVo2}28rejG7CG!u6Q31o8uA*OS=bu
z6*rO3MA}SASm+Ryh5W9lsd8ctA?Za+LSsqIaY}jrVC732emQfViUx|9yNdfdohk8{
zOtTS^7^d>_$g)z+2qt5iQn{tA%LuaPfpT452(U%-ErBtzP}RHGo)1O`_-#${fuo-i
z@pM%)DT8R;IFT+s*h6UK>K4H=9Dd<{)(pKn^}gfk-GpwDELjllnYU_5*S2zcPDgZq
zGxVfAWbP1FGwsQXyNhzFL#tYFUz+YNY#2{6EO?3K_!^16s?p5Q+kU=>>5d^V(2q+S
zozu#>sH@zpT|khwZYU5@K8N$2Q_$jDrFCwXVP$PT>}w3A)%N6<bR)WwcE^T)6D7o3
zCw|WCj)`rLKF#Ix;eg2lyF}#5LNoc>5L~fc_KQdpcgGl=QGP;+1EeUdD6b>8MUvL%
zt~(tXdjY^Z7Et^{hbs}zv<)}ipo2$yI>4mOiVhW-mFbr7p?yFTisR*;p$a@}u4%g*
z<CXJff!`9LFBK4wr;@u{^nK8OjrDO@%5@W9xF}HRzWXCFShQ#P=b1QU&@y6MpK1uJ
z{;UnOMBOik=5O~xpl^!0S*CY??Yo7D&{`To?tF8vJ(zuRv^dvWU|Tbz>XN!t^xY7o
zPW+;=VSL9*Ma_f#lH`slSTwh|J_uS~8X3z6wWnLbc7s4DT$`&jkjgB7lVqXAHgE5*
z`~WbO{F#9WD(*zUsaB$Gz=PehvL$G69gu489!!xcLDRC%fP2#Izmvy~HRYCE!83<}
z-Hopt<PU}r9R%A>0A~#l5n2k$`@fld&CKf<>lqXMH5qIn$WLa&BLABU0u^OYOs+nm
zCHhB?Srvizy*b=&sOOr0Ai3FL2pJ~o%@#unR;*tVBetE}?9Qky#q7V=nM-l}zaX_%
zL5w@>IFrH?5T?&LpyvO1Eq$Dfj5G)(ZhY9w+&|9*I0xufH1gxS%y+&|)K`dQMZa8G
z;`!EasxdK??$*+O1t&<ZB!c0dhzz<ED%7*Cgp@}Z+}VHTmwZcqnoNRMJTZvvLq+hN
zAWQAyGxS`{lsl_v>)+gb!1tM;&{K-`7mue(sH5l@fMfp5ZsXs6ti->yz>loyx^X~Q
zaG=u5G;H*<Tnj87zy?@>t-2H;zID@jV_S5kR81EnpuaIb%trhuQ;zXcx8<0z@6kG7
ziWGo2d5#9P)ZGn#+>_W~Z4a1fg&ZuQY(jB5oLi{2=_wJ7Hv1Mog4Olrcssi&V<<xa
zq$`W1@^cLGnPvF8Tfbpd_%b4%WcaKgGSygRZNLel)K!ZrhomPKHkDh9<q_0%Qu5Iy
zOTpk@yN{n>an_&hFDz>k{)YC$Xf;;wdQ(gV%6^e|Qr#?nf_8Hs?8o2x{T|qVz=~QE
zYBS7lGAPfl+2{Zy?Nh<JPiDV2gmeS?`(qw8EgXIr_?hvV6(1isZx{OdQo7Y5LvuZ%
z0xd<B;Ysqlxk}!Tse-^tcZ<F_FRFQB1!+7UeT@5;k`sjdLlwr^8RHx`d&U!Ub|@x5
zzZ%b1Eb7vKxC_#O54m%-=2g_g@ahEv7;7&$CslrqtA{=#@YLs*4?SW@tP&L_{a!Qd
zvrF}<q4d-Nw!b?N{zZdQB@fo?2$J*%g{b}`l(gM3K}2!=)cYION_fLzqTI0+NDPK2
zIE(tv5@XUIVISM(4j&xth?};`9+WHP0a<<m%)5(!?q1;XrKo9v?t(40B@}nid^w@K
z?2fs)L`IaTlB(;UuB6kJe`8IS&yP=v8M-08wu2dHBvgC$h{@#k`aN-Bv-BSbx-zi?
z_8kxPzcvwonug|8iu4p{$R%-VC5z3mt2F9Fw3+V;=(y$;0V-xX-K2GGF&qIVs2a0G
z?v~DfWbGpMwD6bw-m;bX307Mq@93&qNo8AjP?C3R03Moe#A3lCWt<f*Xm+;>0=lIb
z0wZ?%eKAOv(#;#*HC*2*9a~W6wCL`TLFBJ0*@NZV7Q1^14p9Y&WISbs6`=&#+Q}rO
zvd&UUWZq@rOyT*_4Vm*8Z)%jRuNoA$3)B67$QKh}P$n!2z$J?YrUQf3g0&Y84K)z}
zXUPJAAH~ub#|ViF?D3^ob~7j1D=v`@A|#+pC7JGSk;NG;`}yq{t_?EgZ*(|;Ie3_b
z0cn|+iNho@Iq&9z0xe3+wD#-8ml!=a3)$KW1L+U6f9Tn3ZgM88xe;I$rE%-SbgQO+
zPwL7io$sNyn)GjkDTjX^OoMNga%?yao7yx5COd)Ai0Zte+c)e;{P#~hMAU)s0S75=
zMoJ8CP6S1oA8H`)5VK%~zU5^b%``u8Ru#}Y9Qo7?L}!vEwk;k?W3~+$>3VNey(UPs
zR=O8&<eqJB>x~mBulKVq3*QZZ*LEU*(WB&*>48BGQu|N-sQDdv#5vcXO<$9oswYOk
zvM3w`a@<OeAzbC&1KXLHD8b21gZL>NS_%Hpryf~Cg=+_q34Y$M*BD7yx|Tcs<-SXw
zV}gN_hLk93xa+UG;|Vqj^#Mq-6@Hdw$IAC=r=zNe0r7y5gLefaLY)k?w?%1xmLtp*
zz?76Nll%!EzZa8Re}0Hn537q$r^7@)c0(a<uy;K9eQ>2|T=I4QIN<g@npj?t2f_oT
zvc#D>6$@5fYTIL1R?xEEB<y+@VYFN);P#yzCLof;US&VW@gwg!INWWgFWcabOH5Hf
zXY9{&CFB$yXTA#^^@ShS-?S)yQHMHE9dDw1v?0xCIMXo4-%4yPiUJy1_ZH*L|N7O4
zzPX5Q56US25$Rx`y=~o<*g7B6Y$q*A2^{rTk8YFuA@F_86%1_}+xfowj#~5G=<VO<
zW6pU5@j+KUF4>u=6k_{{j5)ifo7%b3qkcUtXX;Q-0Bh0u5XRi?h7nVLBcE-==LIhH
zANx;#Ai?mME*}2!l4$<Od#3Lk`9^$UHXC=M2W9+={S^lset_#X4vIgI51kCJrJ3ET
z8)!tIh4xJU$hNm@n#}X!{{J?gIUigclPk1r9J$Z_mnVss0^yuwj@|Y+MP{P<$K(lq
zb$_S-2u{FVro-m9uE0nyuMxI7PQ!-dm?p3BfexpT+c)JO8Zu5EbY7-_{Q-@+P(-=7
O{o5SSm&sJVQM!O$cil|@

literal 7527
zcmeHFXH?VglKurk3B4n|_ui|9pme484k1A3MT*j-BfTRaAWaYv5TpsxoAf4C1f+@}
z2-1aY@PF^_z4ybO-96`i+sSz{&%875yz@)~006W7!$%%AzDRojZ8zQ(X)of6w6T8x
z6M+E$NX!-S(B>wGHf~2d7q7o40C*tb5C6_@ybIFy?`?=YkPlt|<Ur_eex!>#{3f~w
z02si{2^vHi06<KSj{ig;GXNksKyw%p>Go%mKN(tdfVe5SxnbigEOOV~#r@9!H2;}F
zr<MGX_BXgGq(yom{%U}J18(OH|MTR{qfST<FAucWKzhL4(Vhb7?SVjhv|-%zOh<#n
z1L=>vIl;um#YH;;8()#Tq0DFo0OW9Y7cV!si$8i8LIC>-`iL6o;c9b}LmLPHfk7DI
zU;v<}aJ94fvl=xuUf`w;dK5Guz%>BAQSt}q^1pd>{5LL-&S8Ks0Zg=if(9m<-_&E@
z;2${U-}p@(2;;9lQD~0wH;y1c2WZ3n^Fhs_Rsa%pWi@5=Lw^PZ0MsII7r@2F#=*wI
z#lgXWKydL0C<qDg@d;?i$cZT!XqgxpXzA&h*#)_nS^3%M>A9tN_=QEp#l@MpWNu4~
z$_t8#i{3N=K_CzUe1cnqgttUl=vhSn*M{l<NO1vq5LzrNfI$kvBn6>*04DUDSfD@l
zmy{c!m|!ey99#$<KDwZu<YrTt7+_2+EHHZMpdfS}0Fz>ov53I1$#raSSUo93LsJTI
z*%aS)QtD0|u#4Gxg+cJBsBh8Ga&U5S^YDsGNJ>e|$lkrDq^zQ<rmm-NU}$7)VhXoI
z*gH5PoxC6V`1<)jdK?}R85JG#G&VIYJtH&gS$0lQaY^aRvhr6IwRP|68ycIM-*<KQ
z^!D`+d>ovdn*KC1J2$_u`gLu6V{>c!+s@C!qhH4-r)TFEH@a?g{@wmk_Ak0f(Yi3e
zU`#O1jV=&|-;HomFcymlHW^F@$HtSKRWuZrLNTTAZ6}0HO!t7&)@uTfid}q_<L8aE
zKg#}R!ovPf%KlT>f9YBP2rxnD9}klhfC9g6<10?S9CtxvX*K#e>eq=|r+VsYAyxy-
z(%f%<i1#MUR)!TkUkwp6wWKs~#n%){c<olQ_03!=W|wxYcWUQaIYXjxVWlTgS)JWw
zDd?kiaCl8g@}lgJ0AKe-!mH-`sXe<0IhB^d{$V2AqJ6b-{z9^`GBYf}auK3OT$rW$
zXYQ5Ve#K)5Pqzj=x@<;iyO8Yeym{clfhp3>Ns@HAdtH6F(9Q@;OGYn6vCc?IQ#9ha
z<@VNUS{M1ANVn}^5AemfPd$pMa72rvJrb_i_vPagW|EXB=CpSnx6jHN!++J5w;56r
zZD7VrnI{E4pGE-(iKcD>nI9Jmyh=!d+qr+gnv2V@X*d}EK_<s%=*^X>e^0cGW^1xi
zsnn62;AMf6iu}1^p8M*MoLR&Bh}!$RG;^RM(&rA}(#~`A53Xw6&ga7kL^E!&EhjqG
zG7NCk9DJseU*x;@rPoL#QB@i`nvEXJHg3d`UlJ~ZN2IK9Z5Qkl97Ofyt28`|AQ=U`
z#!_K`b{J3`_+~MVq-4zHQq$Xb5kZBay!?bGWPI*;BlM~4RCH|2GThjZKC$D0GKsRt
zWJKXqf3V_o!fF6@eg6EZyx#5+rgvTm<(0xqrBwz=h^gxMYf%@jMf<TU@Pv(dg7rbM
z7%`g`T|jaZl-mu8!87K(>fhV!Y{qXcoyf`t79+!k>YPt-h5y=$ay;m`PqcQdP%wa3
z^M$c7^~(Yehu@{h@O=d=O_7wubYnrC7=QJE80$oQ&P;0p=Z*LpnLg-#npQp&-eM}_
z!cgRA&s)+AV!EBH41x=rd@+RvnPl=W`#<;FZ1aq*2GEcci$`jDiOtHR0Cj$9R;o7Y
zx#5`xzMABY7X#}_+m2=-_@X}~Pw-?D28-E%twRYmf8EXj!O1&J!=OZu&qo&pqtOR1
z3)o&aIUra<-5%k;W2%}|`RZ6>UYmpcl$Gygp5s6_?>#tJ7X@_56^D$A&R$=|w!7mk
znkiuf4UDs10ljKUVVe%W+1^WCVG4xo&lO*jF40|wX11U18s<?L3)+YL*G1?m!$kWw
zjWY@e?nO@g`|qvZ;X$4}c8f!BWW4kJF-vDsWKoh(mdH2tdbCXl1q@(!U$?cN=&9|B
zAImWSjlbEboIaRN3vJeqg>(^myRN?Blp~Z~zBF873hMEC0a}c&L9om+w$3W8E}v6B
zL;)8o1%vgNl-sHodW!Z`xg|TMDlvkBZo9ktSc@t=Ed-Q>h<F|YU9tG^cwdP({+t0O
ztx<d;dNuJrd$Y06QXfB`6yxQwX9j)F0Y+6mk!dH8wc6`tv15=2gzUD2$hz+ABm{o_
z^ww>H_tkl@5l5qx{DI`fmF!H)Loh}+`wGFtCW~v!tn{eZ;>;7VhxMP@rsQ_`+w^$P
zb*h%r*SFaHWH7gjo5jN{4BiY$G^-H^MCeA75x}3HZe7g0p#VL|-xgV<kDwt5O<&de
zvcHG|K55e&8_rS9x~<If4;^~=9uRYdp3me_fC|{(KXG3&%fxZ>qr7#l8E~<7v?jr>
zYelEFV63m%zB5f4bq+heK2cdUygw1eYiAw?qS@9`cgYe~V(n+2C~jXew1%wYL)p%?
zu>#bDzL?zkgx7zIi3Lm+Y;bza55*h9w9?Rc(W55EABB+%=+&*`K=+7eCmYzB!%P^Z
zH&q_?Z5V<RL0bpR*AfDNz5GJC8r~uc0#@%OJTm%d4AyUDYSLGfGQjfX$MB`r$HRm&
z_v_oSlSNN>vsx~(*Qf*oibw*E!ZbyWOQSSWxsGi6X6_iVZ8Egv)F}bFwW$}%*gu%K
zDWTlVD^b$xjBD7ht4|6R%>2^^k2IHB?rbtKpn%V(SI&m9Kw;TcyIqLOfORF^kLS<h
z8E@AaZ5KVk<Ng;MRmY)#Lr@J0sII<BpDmir3$#K3$%N5YK_R;@)8?GLYY+B+$Gs1^
z^3d8a^~wH+|J1v0g~H`RU;)SPa=QsNEgvAvL~UoUc0L^FA$S}Ot+DswJs>!2$1m`B
zGx52TE!x(Ez-u(@2hzv3P?j8@j1R31Hq6a=>6LGzJs>h}T5R-;c^?v#9ct8SX5jwM
zRGNTbo1~4L#<C$-eo~26TXBTF!M4KE7?UZ`qC}w$LIYd=z@&a-IFU<~KW6N0*UDap
zwJ7A4^!}K-TiI3aRkf4g{i5AsTy=sK>$Kl*&yq~@cbt8iLqxf0QjMcb4uauNf{Ti$
ztJb1*!?@m(y?!Miv!W~<)bc#IEge`AaGBL_B~cR_i#(Fr>%VCF8BhG6J<-!lBB^xA
zY@~ciiLlah7yq)yC2QDGWm^FSJelbQD0GzmTTpIUQKNu$OdAwnWp&9@tyC?0){X+0
z>4+~bP{8~Hu9}%G#6Rx%d*9w2=I@e{DW*M{ZRUJ${gl-@eml9JnLOS<<wpVg6DZ(o
zISf8qUd@66BD1PcfY;dd71K3u(m$6p86WTP4TP*BzPEp_Ljmn7C?K}@n#!`}Y6yDy
zE99&~km~m1*h8j&zV**7<06wRi&~@q@fP%-8Wyeo{~-USjkJFMiUNK=ae;pSjsg%8
z2`B(x$l`jV;OYYU+rav)tT!hqhW|y_u{DG~cXmjT$TLar``tODQwVAvAOr9q(i~ef
zk|ZSKNYQx4`*s+MZbiu4`C{XoJBv_Rwt{k%%m}mDuaQnL2@`pmkasqDEOTr=CmV9`
zy;Xey{kBc;7kZDhpC-_~g1CLG1pbKlu3PaDcaO}qye8kRN@>ei96CNQAo0N^#EPUn
zwJ5xsN>OuOAS~1IGIvfV_z8!t6H|Wku7|)P@tAlZ*Hs1K@S%u8{5|HJ7@GVzh{-L6
zh*|}b7j!V)j@2PUNrPO@smJ}(>Zk~BPkguIt*WSf%{z*Hs?3QaqmytI9OEx>27dWs
zZJ|L;2CdleU#eXm<YFJ}6|iOAWbRr$noxeE8f7MRA40!ZUrDlinG|QGvqL`i;6j;q
zdY-z5gv~8}G~;SwT>WVmsd!S!fTZY*%^3X5hNH%^Oz*tLuk0zbXb=X8{*=h9SrDIJ
z+dvbEL*;U(v9q6qprNOGUMdEJmn=KxQ1Qn0l{TIXKO>QCx&9W;F@tC#)RuU`GEgHS
zSNWLnDSP;G__&pL2-4iiC6G^ym1%d4+98S<7LX$Lssw&&cJk)CpV?Cj;`+8PM}(Gr
z&zw%Y?FEO5GG(ZaRtC%;|6=qGZIERh$Ib{zm796Ye14#<lv|+q*~o|OqjGHJd+1!M
z;N|x{A9|V`<7<LB{P=b6S1e<J{q_U-glhal@BtP=>ANh%XI*SG>hs53g^=o>@;{0*
zjM@e{unHPnNMYUbt7PXX%`V?iiB8qFrH@Ranc3I79nB@LlI{rR*<#`nr@YAPAc%K0
zRdD@yt{YfY=WxkizC=&GJq>n9^*NzBsHWq$fD}Ezu+?44o(@f0464;0G*OOwQ34&z
z@7(RbW1_-VC_uLrZXdY6qv;YW*p#m3Kiwa7;ry(WKu5#k=><qUw9u4qTvK4TL7AQG
z)%cZF)OsKRtW4XP!C0g;nRG}Lt2K5&1aXhU^f1KQX{UWzBQ1`T1*)s)^0hC4y6#f6
zji8YW7QB}4dd2WF(dprl224Hf-mmR9i~b#<5u*XbmXS{6W(?`H_rv7_AwHFG{Oqw)
zv28n2{W!<_v#Q1}RKZPg#ath)-YvOLFUioK96O)adO!~EcSu&LENO;nu6G$*F;2zu
z2t3p|JarW;?W$8X(LJxVn-bSF9Bn)rjq%HLTQ=jOsQ;j#Y?re!uqg24Y-M5DJZVk-
zqqUZvIezTayvT44)7}1-9Q>^kUboogX%tmE>3BAZgm}`)tPD|wfRQnAk1AntBk$`U
z7zuyh<nCNR>3o|={siZ^$FSrIS;r?V0Oy$$I^0W7^sM`puYR}jf<1|-;VOE8=J&&b
z1qsX{J>vR4ZrE*6+`S)Ro<b7zR+BQ>jvkrPwETtLZI_IZ2>5vJ@5Z(F@|1k$U=3%d
zk2y-|Nw_PRHPI42M5>3K`+9h@fh=j7kf@vs{fpS)R0aHeCw-w2sbr!WTZFIKNQ~mT
z!^nidmA`_L09mk59Hy3}4z0R_ORSq3Xr!j@;cVIA#*d^P&dg?E?CtWfmJMafr<K%@
zZTt96811u_6vAhCr~oUy8T~g*R)|Vse3i2Ji{7*z`Y+rvF#V3XY~mf|Rx9I=a*()P
zrDrX3FJ&E9M*}=q=>vps>v-wC_2ku<4SH73PMxuNB&|kdmKV}}8GF_~@rfDaAc;ek
zK*YiDlP(wL<EWNd&8azaeye*#loK0UXa<>9TEUbs^q@RMdpCp2o6dt?f$BhSC*MaX
z6;)?T7@3M6GUKz&IrskPdCK()b<PlOeEFuxz3Mv^CnB9`FLWw&oosIDwRf~nlG$MK
zfwAT_Hsi~4LOgy697UZfe&zw?PR`axC}H6@yG)u-%quH;k+hs9oR#HdO3x6U5@T17
z*nU&tQt5xj8n#{cHll@xgDd)7Rc&FtsOe81`}bW>NHz_+q3?IrO*czutSG`LT+RX_
z{Oqf){g}yG<j(!0IDRP_VOs@h-z{@mM17g4OBAdH(b*5_k*$Sx3>1_}c1E}iRjf8G
zvy)qpfng4I3!ytKw)md$x;0#He&l`1vnv%mN;hwm!@9C|)y|f6v^!YEcO-51VBNTM
zZT*f6?=Q0Wq!2KpNT^u3z8eH#ZNREEur}2?h_xrpR%yjO@)xNn%LdGRA1KH2`9>F%
z!_~Z9tu|fyii8!R4o{33Lcb*nt6>+=2rKMH*q!J^8Pi@7|02s3Gs2>gv~^*8ZzCHB
zihH}owvtDyRdgW9!ZVp{ZPTGSridTkLowLg^KqKUnWXnc=N9+Cw@l)oWUbR6DIr*~
zhuya~cKhKA8X1G*z3t;?LzR}?GESQ)_(kB-#@A7};XI5s0_?Ux%5+*Vull(CVZD5p
z=<qu)?XQV%-1cD8veca!A^gSnMG(}pG|`^8mo|pK9*gB?ol4e2_{l!cV7+-(Kp5C*
zxko+Bg%R`JrLj4w%^dE^pm1HGd{LT6@3litXn|rnf(Q7}RAXNec&u^YQQdnnHo-Pv
zWhGP}C7GU?ScPA82m!I9=)aZ~A}X4~*}Uka!s9EX{W})t)RC8S8n4Cpq1K(_Q7l2d
zZ!b+Vr-+<kN;~vTZQ(`Knv~$V{)f0*Du%<Q6H1<}heq)$mDL3orzH_I#oLYVe`sDv
zld!~aM4E!O-)Y-w{ig6e+9@`AG-BGqWPjM=@s>0>J3Zjs_k}7({W}basaodV*}-tl
zH+N(e`^@G7Y2xo47w9jh?1d*cF6dW&BJKM4E=t3KVo<RtR;iS$#*%cd+OCQGz<k$s
zf5SO5dHZDpzk=V%PBn|-u1eS1RX;DAZt(U8-zLHER85@{)1PBweB_2@QE#C&u8xnb
zCKJ;-%X%ZB;mbL&_McNer^_W*udbI_zH&sS3ViY$f0Kau*y-$bDzdX$csVk?9SSv*
z-PE`1pl92)>?6LjjObKjTbc~h&CXYi!6;GAOL9J5j%!$xt99nACaH>2f8E!s2SlcW
zclR`;pR;L-u^)6nz`|cm@-gj0BikqlW=KEsa>V#(q<Inf0!^`3n}ftv0C`@gZ+xBh
zFKK(@YuG^!7j{kFEyZm4{(-P5D+QQ+wxqjoikXyjncTLUBh&gXz_yzz-cmNjf|zT5
zeAJz&)Z1@Ni{3s`le3y4EAN)BfR`no6n&GF?gcfrPPY#>&bj{bIz6o=!?-QNvdcAG
z`qsjy`?TNisuIA;d-sc77iQTpx|7E;hdMlimn+W$7goulsdQ_mgtJE!zxJlh;0+d!
zX&=L_W;YR|Q}4pTAHLsq)*o-8?6Ko?DFRDBS<%7Pm52>|%3vTHwSF?V9dUGE9;#?5
ztVF)4>zAwP<phQ|8*Fl};fB6SZaLEw4m@53n()uUaOYg%TrpI>FV!?BJZwiO=q)2u
zd%g+EuMlM>2gzy$+6{V-OC8{vw@9aogr+=27-HJsd+`z8p4x5aX=x4F;B2viZ4S&7
z%4_~)x%!>C<<pQ#Teah9M9rvi-sQgpxf5->!bBLF%~4-1_rc<lqoKEt*t}3z*X>kr
z$wUo_sTm=t-JVC{?K$9=te`g#za|vl3x8}R)75Y&b4^LSO!#Oxm($w#h?fP^Ros%w
zup5>s)G(hF9){uOCQFa6)I0#^qm`10b|g~sc~+yum6i4R;c@v=p?mam4Kq3wJ8Z_{
z&Bk!l&mw~qn8%J|bGqMA6d+h%U3iy$-7{xb5Q=A4nKASlpMhx3WZ2itwqI*wn<Pmq
z03(Gc02!U>k!~f!vH!xtOWhIBXI7c11eaB$8~d8`F&;ope7WQhU$oMUzI}Jw)O~b{
z`SutdZm%9R{mf_eSe?3YyuOx+ZJ4Nx!1)vI^qNav9WqC?x05A!aL|cM|5!7Z_PGnR
zN-*U!N4#E!ay+}lP(oI_0VNgRfY0Hl!aPBF9l3$Si=ofX9Vd@hs2^|qU>IlC{_3_@
z;R$Ws<0qeZP%%23wk!Vf>F5ve{-ba_ioI*zS6|FTLt3fIIxt)pnU9wvghD(5U9Qas
zo#qd|Hdh+P^kEQa)a~Ob$|5_u%{6SZ`kq4K(pNN(@oAp#$Sa(?%zi1n&@!xEvi+Po
zu;nyr^N5GBiZ;115=)t}ICUq;tv`_P^Gxb=={F7SP9)RMqNHA&n5ti=v7ovudAvF;
z*ubpL&P!Dlo6RWJRB2Ab0}25t2{0y)ra>%Mvf**s3#AW_aq`M0${4do?!-cbH!W@%
z6{vCXs*ap+ExKE@?K)tmZ{QHvdN8{Ut(y^!5Z3m&yVo?D#z?*DEKiFwyta#5Rq;4R
z?m>L&Cu8nZTJJZXZhwFC0X)=GN-ku7b?D%@7yUSuylUe}Zav3+gzC{Q(UwU2*B)6N
zo2Kf`Y`B7Racg-=yXHmBGo<YTrQM?!cd{{_b;ouYTF{HCnPC0AQuuB8ImVi2|4_p?
zfbdl6u5|}%7hP0pYSymS?aDD0r|VSl-`GTAb*~y)r+B}jf-TcN)!cuYYJ5&9eQ;8w
z6eJfCe!Yni1<EODb)_r3RQn+s4Ul&pzV~LcaZ!X7BlrhP6YQslDW~!feN7LJG1>bV
zJCu!xWWN-Eb6DKAY=5`MMi{z=u)bwcWNaN&D;2GeP~}qxzag7sO1V5-estYV?fuCm
zv+>%y8x(!gg*BUpte4-{=+kpP;<36i;V{A~+F*xHwAo7p%=8P`p$cVxc8_J%;OY%i
zyti1I+%$1l$HbA(8gV1FdTRGHE4vU&(=2?52hX)UO#Sm7>wb0PG}GMd3JA%<x!;!+
zIk~SD9P2-@t~s2~fE<vuw!Qv7fk<T0^wrZppr%K9K77}te6R8Sz0sbc?@DBsjibL}
z&-IIQt2B~w?@x`^mnSwh*kIvGUQam;AQHmVHmtiAM=w3J2LP_)hW<n2`21oU-;Hmt
zWmzyU?kSJBHrN+cHb00nSiLrR5Vo^g%|s9^i#o4(-@SHSFFK%GW|`st48VdG`-(q^
zbyZL-;<=>`vAHx;ZZq>5<k+S%yKU|(rB|uOi+ip+_@bwji5Dy6{%RMho=~GC`LmQl
z9=YUeOwJ4pN4wz1+)pK^Qzi6xpOp_0;yj&__T(D$eKqTen=RA=YwO;r*Cx{ls<4#(
io%2I}&S!7NJon9YuqAVLF#;OYu1pqJel$@on*1L>l(8cK

diff --git a/doc/check-health.d/notification-04-ram-utilization-ok.avif b/doc/check-health.d/notification-04-ram-utilization-ok.avif
index d995b9a198bf3de91e117781f89535c6f048f343..8f949ecf50cfe77f8ec077962d31c4715f70705f 100644
GIT binary patch
delta 3558
zcmV<C4H@$7Gxr>jA`SrSZDn*}000000000XkuV%P000004sdC7Z2$lO000310016o
zY;R)#0000)000310RR910RR926951WWB>pFC~0YKW&i*H0004zoE?$uAOU2P4FO1h
z4Qy>>VRRAz3I;eOryOh&GS?bRWCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_l
ziS;bmjgh$sR<Ubg!1WSaDNuh!;i&1`;JD!cTud}!n0C5l-8BJRa^i&jU2wL2{*F{>
zB{#$}skEz#P?g)AvHY997&OX$JGuaWdzV19`I&Bd4G6Pnq4cKonq?jCYALl2v-Ukg
zfF&Z|zIc{-l&687Y}ry1ScuYVoI5O!1&^LVaePtI;5H0TdE^!xX9jBd$Cl+d&&s#A
zpUOoQKTBs#JTFkK%TrGAny`O)(_?=SFt~!do=LXMS^dGC7kEX1&X&Jb@HM=DS-{+c
z6%4o2PfKQWz*TBC;#^s4pac>#^!7eQ6}f<J4hW59oOexb%bsF=Os&L@2fijtTFfBw
zO@UOaG(&n;e<&GfjQd)J1L=zaH%o?2`N46Gq$mtfzp@O?AN|~FV)$ELxkrVt_(Bb_
zM7W6$6RnM5t@jNz>ZGoKbc_6d$%^o$GBa^3o3voAE@{!i7J?E%+FtkwA32s<k%|3N
z-tLXbO(b?M*x07`<pLR_Z7Zr|G;wTKBOpu_N(M(KUYQoH#IE{e8dj}QzAo;)Ki;c*
zV6ZI+u2lh46ITxjsg%l0tZkXJqUZJtVcjh4`_0oLSeDMqZ~zdLj&d1)6s<qoj;#^%
zw_wrd?NU@9Bps4Ksag8$^NmM*BsC*J;H;`>_pg^0Nbw4ozc)xO!Wqn6H<}m1+YPmN
z84*@chw|HCe*;Ea1do+mF$v+T#rURyJNf$+BfYLtj`uY_jBS^)G88XMy9R#rf*z-k
z(ao)&8(Y!DDum7zwSskjD(JsPKj@`46wuA=6j@{cTO0AhkHRcqa7@RXD5#B0Sr9mL
zP@4Lc+X#M4Bit}qFo*xAKdLca6~sd5D$APS^s(c~O>>3Gl27k+UrqJAh61VP5n8z{
zSE~J$VT8?=^*9xzkF&USr<HSm!uKpID;rN_I_kBf&{_EdUbxqP=~}=>hOW?}ss$i*
z)HAxpV*hZP`1?$T<mK^Mh3EgDEtY3nH3>v6G1`!KL2JCk89i3@7kQyF7;E4{C1O(L
z?P+=(l0vl}#urZ-!(*LHWVwU6r@D9x_0nKUUETQk&}sCYC3sAr`Y@;q%j!5S1Rpyk
z(gG6GfZid05A@4_etw>^X2(Csp^&6qzE{QRmY4X{Ugfx0qDY+wdVNAM$Y^o>&1_Bb
z4`R50nXcAk9lvO-_x5;9I8fYe6P?%Efk!uCG<k`onsb<?Gf5u2>x3*lncqa(^-*o7
ziG{9Amu}h=vL<9f7b&rNDLixsfb#$gq1dg<Whof_<)UJLyA>m6;_+u5Y4~UNVsiFi
zLqtb=G{HdMdfQ3_eqn52=B=}x$GaQiE^7{7K6JTvVh`G!NB>c1$+KJwohF&oa=Kez
zn_e&3&4+VZ<M$!u<9Q(`z(1QKT06dwcuXWJ{?!x>l83Nr7*s8*b{hY<;#CmC6>hU(
z29&$_nv~3c->>NQ5`n16G{5$hRe6e(Y~YvJgc69yt&bRN{oUU~&4VJp?Nf;R;wt0V
zK#1)Z_hj**w!-<Oe1$6ykt2ZZ-KGx8=xZ1ZsND{$EPPs>Ez+UPeJhOlu_MbLua)Bj
zgYba+lA+w%{ivdJb$E`1e`ouM^13S}#xztAy|hw)><*1AWoj-8q3y<xV=MU6smZOc
zX^4Fx^fAX`N(aPIA=d^ZRcDKAL%Og`Q=f3p&8Z*cRD5_omvgH2P5O7vJKS@)@rf9W
zEW`6LSIJ?|&9!K;>k&<VjjuEx6l#%#W3VSTx}HTx05f5N+Xf!&rD7)wH1CRpW3kso
zn1U*Q=%EF#py9fycl$;rr2pa<tyZ2VyJU&C{}3;E;_n1X#Jnol+m~CIYsADo<h3&`
zi^UBhpqV6N<aPe8S|v86T|`3B-YBI%@cX6=_<+V#G%h!isDi&ipxW_B6a3}mJjWhH
zHL3`%){}qk7P^rdt$RyJ`0otPlyClEVDO)RB;UT8KAS8vsN0RU$cR!N=BCyaE1Nq5
zYs_&)<x4qnX~VTxHu>Zno=rJY!pO(+M5LJw>FI*-qkf$cphpK<iy_(cVQ&!Cl)rKl
z#3Cz6qV*%Ca>M~$xNz*z0_{3)F1jB~r%T{Mf$m_+@mNc~ggP>F2j58vTTRlzpsA;S
zT*co`&@AFX04`UtOq>X~s`xjp5Mx_ElZT>feT^ioVeJ=~ES@Or@6PsLmb=5YZwvv!
zXJRoQo|Y(SA7pHnPWGv2UBBVp@Jy`xLzLLHi%pT{cQcFl42gzj{>26C+c9HKf@BLS
zZ8@xogKQj;$vOM~-b+~?9~Yb{>q4G?Kc{GX!2P)E?Yq!xT=zP%q7D$<R+em>i`z6M
zUiGZckhgglh$%QQh1#GQr#5~o7o({x1E&jU64~oVOp0;7GmI%jj9-(#zzC)6Z0&=^
zdSNxIsFExtiSW;rOO1Sr60#skr@b7>I@kyEzC}8$;ogP`&|G>cHg+Cp8&ZXT{sDk-
z4=4bFh&j5&GhnffRoD2I_W!8o;|Z&(Awlbw354ZA;_lvhvSnH>l^GNbzeL!AeDWC1
z8AB6Aem~Vl1`&vPDz$*qN7=g%Go=~>^gH?P+@$R8Q_4o=acMjPbzx>&1bKrg891tu
zqLO94V0AmB8HTy9n@Mv)DR(=6laoLL6M4@q5rig)W0Diw2uV7;qcg3eo$sV>LF=>a
zVP#V3Q)wcoRjwy^uN4F~a3PENph%YrmRk}4(+w0_U=H@~YBmB99C<)Mb%^+>q*OGn
z_QoRz#9@3OxuliV%GnQ|jA-r1xMIN4W&qH)s9K^;!e*aEr|Tz;$K2n4u3Vz^L3LSY
z+W?<lT5F$e<PQa3A6p~7E~?va=<#zTC$Q>#PZ-|Wc`PgGL$)fYkgOeD9_r~-E^0Ns
z(-RLVIo-aG=VrEa4@}9iS9BU*eT+^xcJNJ+-3cmuL_JqoDg>sje<WPfJFJWZo5&SO
zcJQyTcA56xfu<qbY;010a}}friQkvKZ1FNq-*4sG66UI(Y&(9h7%rK~s6MAITYE`W
zK)>5lcL>`T`x|$?Kd4G=p+>0ktSDlGj(XYF9kSq?+$|-}$&l?4B*9UExX*1$7gLJs
zVrZu;n$q^yk(r92D&jiVZRQIe4Gx7fCPdzxEnmvj8>Ahjna2x%@r_@$3lc<<U)~<a
zA91)GI-e@Pkjmmx>1x%cslz7$pZ+1okSRUkS#xkNux6ajs3Z1F!HU5(Oohbvl01^X
zbJiAD>3{{WZXRpr5yy!t>CbQw2}H^1P}}XyTUb{EIa!%;uvAE0nK7@N45!x59l6Ej
zG>1dZsale@H8vK12IA(tHoDxqj)W$~YTQ%YQ)me+e6|CH$ysN!tT{M0gR#~H8>`o9
zqASa<qVhtpyYsPWly-(7{zU;bI{eC-l4xGYm1jTB++}z*wwrY4Q<<#ooV1>+WkU_P
z-ql7m666PxJ8m+6newy39!Wf@hc@km@{xeoPCC!(i_Fr0k(Wvc;V>#P`dWiy-y>=g
zXrHDKsk$6Q+I9ks^ibQA1Ube~e)Wzvtc_ss6z-E&JrWrt^VQOa;lnP0nynJjFK6r2
zcYmHgM-G#Of~8ar`E)m{jLaBV{`;ME^zy38pY3jr&h2Tu>FB+hJ3D_HBt@wM@+ErP
z8@@*M<URv`^du|=fOb)i0UWKa3NN#Z8cm@>5jn2Zkq5KjbbKj5INMN<v+-%T6F(Wd
zm(IwsYI2fPJ3I$LV#?n6MI4IL{8r>o`dHQ4LKLL}Xba5pt(S~B=yNze;Hw!JtpcKH
z(*(o^y@=14iMjKM74b~FFiQF_OoAXr(1)+znHq(E9J0P*?0>K~Hcwo}HQ!N*8xom@
z@a#Q~3Yy3x4_R7F{_i_L8KA&YpM5qjd*|oU<3ISM-_v526_rUe8VVU1z9$-QI&y02
zY2l8A56^=uw16wN7@UElp;ua|Wd&MHoJPVg6e^nwbX}RNB>fRuZBMPNvi&yZ9lz$?
zOEw#S?#M1`5=I#<o2?Cjwb6*BOh{btQ*{O_Q^p#Y1irI64Z)*S(iFSgN<Lhnc5NDa
z=8ch~r^CheEOy%tm;7PC8Hm`d1nkX;n4HTsd|kgD1T5w=SWW^@!(*nk!qr4?0?DU9
zX`%~|rKc#Zr2+S7Nw1q~0Q-fS*Ev@7;nl@|LD>$8rU!3TZ{d)aW}hfAnEP7~dI>0z
zCm)%I*<TqFb@eWS+fbdw$PAFm_8=_OAQWcBK3@G%UKqQ`9aX7^M+4fS&@P7;^-LzO
zBq_Nm$ZOuF7!dGn+pg7P!IG}67J=Iuq)GZ$uW)A>&>}}4WDLUH*D${A^R&ThHm#|D
z`U_?ly!MF<c8}={w2Ub}u%00EdI=Vg$th38{sw^Zl3$p%z={>mX7Mm8Ek(f)TFn@Q
z>Ku+`g^;Z)3uJAWytGT6J6E0@coqN<UUP3fNyD}q&lbw8BYf4Ly{_w_KF4N5ZcQjE
gc-US+(z9=UDG;^9RYEcgPCv5NfQO?6J{5BCU{D0V1poj5

literal 6637
zcmeHEWn9#4v;Hr=ba#g!T~dOCG*Z&t$N~#XcS$$WjetmrAdR4ON{Y170@6ss0%!4g
z-*cY#d^z#qd^)qg*}1NJ=AL`5`2zqzZ|m*@v+#u20tma0P>3xb6k=hkD$OSi03ZRV
zjl0Et4q<F|){d@!K>&b3tla;J@1rBc@}F&RVGwudpBxDB&k1pKwz_As0DuJCpCBAt
z4*+n|5&RDW836z$9D$`F5T`$r{K-%vh|PV;{S6CGUcRT!j?RAup!oL;A}!|)vAy^E
zLQ06M&0h@w0N2Xe&FasS_mA2`V6HGkRDr;(oDq>2;s&!pM1&#T_tZu>J`Cawxj#Y1
zz`#HRYzt4mry=wR1OP-<&W^55R*v3?VQ>JnV8js_1O~OZ&mjy1fKWh4p(p@Ao(;9O
z__G=%C3fJx4Pq38gMnKB<zC4jN0k2~BKSWrBO-?cLI#i#F&N><2z+0UcJF_~B>%wo
zbs(g_`a~cw(m${ZCW0Ug<InGI_HG%#SC&_jM?CarPyo1F0G<LEXlUqYs2J$z=wL7g
zCN?n+HWn5(1tAe0F%2ahEe$0#H9a#oD?KA86E!uP@Iy{sK0!f2I#y8$5q@!Q0YU!z
zCLk~vjE#j&j)Oza&p^$<|39|74uAjyU<4t=G6F~hAY=m2T@OHqm=hKB$NrLXFBBOC
z6%8E&jERLPXu!YU6fzPDGAb$xV(Fj&L>@pPKqX}0lSU)bv_NNcA?6QxRfxeP^P!XE
z`NSc!fTin8FeWJ(IRz!l16H<&?1GPkghfQfp32I}D<~={YiaA~>ggL8T3OrJzOaMX
zySaOKdU^Z!hK7YlL`Fr&B&VdNrDtSjWfv8{DS2C3R$ftCSKrXs)ZFs1tGlPSuYX{0
z=<DRSsp*;7x%rjVwe_DHn_IuOkA5GYoSvOuTwdMly4U$n`%Bq>(nWyKg@l5FjDmiz
z3xwo#FPs1cm4Oe9P+Ak+!i9*DKLmqV=2hW`PB4?e^FtC#*9lBgX2BJfqkCz8l>PUF
zz5HJ(`*&ggp=%z%Mg}219x?$S37kk^$$Wh~?r4*t-sEMcT_<Rs?DAaw#fqOpF;wDH
zoEuJ-ymUeCN|1n|DTxjgOO0Dfr|G%d$$P3E&j&%IWAA(@pG_}01V>ZH_Yw*@wd^a0
zp3sCdN6bwdKuqbrK?5fpN*9!H&r}z6pP0ks$b8j8Y%tOT#AX@HL-9A0VeF;d@%B`o
zXdO6mJU(Q8ADHN7f{&8#51{8?z&YGBY7%bo7<J7nRzkE!rAIJFOh`nA2wnV&3!>o+
zeCpg(jPIpze#Q~%!EQv$*F(EL$Qv)r)}TC`4M|Xe(nt&tAFtqWh9PlP#D9`GidbLw
zTTjsn>Jqj|_8FX2Z;>fcpIJ8>(E32eA?>^p8;#;JXILMh&RG^^W8}0SAW|-$w=zkW
zb%v#p)whP<tKz)!MMdRpOIWS)FilkduoV4^EiioB2ujMKg#Ai+jtQMzvMXDqOz4Wl
zW)dz8gnfBoTVxe=On%vdd=(R;DE^RGMmM6{f+_?PS6*rW-oI%`v{hpq)zj}CA4|_J
z!W;_ks35oyR*tnDXxvR4GIj}HOB{a=F_Tg~CFL-~QYB6<`IIm)pvMBtt3SJOQ|5$o
z>cJw_``?rO(zQ6esRuJwwh)r=wC1LXl3-rwsVh!D!menh#}%cZxLSTyAY)f!95;WV
zBmIC&#2k6TZ;fs^&^^WILKn-n+0T!Nu(sSr3T8y*>$@K4!S1c67T^8GoELi8vC}Mk
zjC{CSa0g&a<>)u$hQA4Ub8J9|Li(dQu>Cc$KDS0z8v~NS7o6mZTtdr(-~fqjzg9DB
z1GM8R&QLby_nrA5))V6D<r{XBMQgt=+|yj6zQ?DRiH{!5L^xLaAHhs|ww_C=qbjm1
ztb&U=T|XLKm`vsDHY$UdID=mRMDSnFm%2uGi{^Wv46Zs-%<1HG=Yyq#D_l=Bwl`#|
zTU}E+M+N%fs6p&LhrQ9zo)&ShlQBB=%n9@6>i{aL)-Y9PD;v%i#f(TeDhLhx@ppjK
z7qja#_R#_h+#I{caU>?wEO>i~VNs`>z%9WKs@stC_VZoMzt?i8#c+}dNUqRKv~N*3
z+yQ~TbcYFBODEV3cR;&k{nr20Ri8Vc_c4~LuzHOHmG|D<PxC&8CMMdcZI6w1a>;e7
zw|Bsd?X7lxw^3eWu+c4n-y_p1d$ME0&Gr@4mWIRWSEL1{MnU#QeXA-_8#>)h6y`%u
z-%I$skL_;%&Hd{RIPH{7vqxhpWcsBF&h&LkE4RC)Z)s_*t8F85Om3JpufoFUO4DHy
z84&5WGHkMZ(U>t{S%>fWDxp1*gpc`Dv?y4B5vs$2c~snI<JdxvpED{JR2Rder!5?R
zrrU!<SSD(gc1|-gCc(Ee=G0Is2iW{_sPviq{Ce<b4efL8C#FiG{edngn%}drvnvf-
z$uX5J0?JB6lHAvG-R^*$DrGjLLWe?z9#<0n^6j>V)aSeQEjijYAZTN{E^{5X_HjtC
z@1aCXl^7dRSn^Wj&3BZSJLfTnt!jQ(YsaevSc^HV5KB!M!2UXpsGd;lYCVv|H3lfP
zKOa6g%S<D)-|M9Dj5|La`)P2<-AePRBP%S0za{K_M}=o_@GTQ-=%B<0qf`wvhc6XS
z*T!u{Wcy@M5z$Qvfsl(yr--+WZn3ThkHKxV$`)#P88b_C(+zB|G076kf~;Gb;sWXm
z0i-q|JSJ8em+2&xa-TTLA2LoUsQN@9@p<ZjLCWJr!Tj@36DwxJ;-*v#Q1Im-1&yEE
zrPe%DYlH!s^mgMi7SvC^CTTc<So7X!;Z6F6#cjrhq71y<%V%Ch<huDlOX?iDdHEr%
z^NAT#zS`p}tJ6wt4K&VB0|)06SkBNLU<K-?_B|yZyO=I%9hwNddZ1v8oQ%5<8tDJ5
zu%e|Yg-ZN4_o?o~yF~ldemd8l=Bx8}##%GIiT$y$gm5=e<D;x8iLNbxH=1`-R}nO>
ze0+NcG+j){F@|2h(7pp+r)}Qc0nSIo|H6u5Q0NxKN^elAB@eEH;{T3`H9-H;=wFB&
z@b}Wc<Nv?*Uu|;QvogTT^Hpq4`39yEk`k8HaZwEU#N8Y~2w;LmSV}1!=^0*s<&U6x
zW{tGqR0PSHE7s3`vLGqOR8Xdn9%eMN8g4Ixnf)uW%hCi)`Z@7#Kd(^xTtbdZo1sA{
zL+I%J3fb@*GF5|J6lIp?6ngo>USI2MTSe^bniu12%Z42ZyVG<eThGy(=Afl1GDc&3
z{QU;G177h+@%h%__<287)hOiQo}1tJyTqhEZJ!6Aa0L+4$MxF35v9uMTrdxYe?2%w
z+LhbjB<;s*M7?|*jP_lpA0_1FgY8mHR@ylDUbjB))$SWzhdD`EibU33(%w-b9-?0Q
z?+$XjSG3O-6DyUZ4$|S@pTP(Ad0ROKHjckc9&guM@Qfq-_%K2JBiv7t>JtWMtjq;Q
zYntpF?i|lAT?Zq(DngpNL|HhaNEV*zJw0@iiJ+RvBzOk1MrbARPSp<wKNT8@N8QV*
z@aKT=aCd*#<GfOYxAfqTGwwXBOS_Te$X#xbK;?BSCE(&MhjyfA=f5h#iEoH_@jaG)
znHO8O4=jEBNXSI5v2{h7kPKP$9Z8#+LljhHHigB_J*L|{RX{EwEUWn|%9oOkG!crK
zPV$zupQl_`9Aj)4Gmm~}`H3tshJRIdkkZJQ(aN!zlaE-@VJtSaZ|!L>HC`f2gQM!z
z!QMmGEHzVC_!m=L-=$0MVy%WeDy%p|4=!uw{i*zk&oy&Gcu3n}Xf4Iw<ss6r^IJJk
zFr({t+)DAIlNSmf_1_SFN4JqlNx7RKP4>&qUaU=&|Co>BkXM$I=ik5LJ5+zP*<zZJ
z(c@^<9e@2gG(j4JDGyx_J<6DKq73$H5{!Q>6KKK3mnWe=ZJ@1c-u<ZL_%udiuxOI>
zX7i{>oi3^9$l#p3z|1CDFXxe=S5>{B|9M?deG+qVR*rAi0@-AHPa2)Kn3e0KDViCf
zgjp#zZ`5iA%&oV)e+a#nS;hPJ1D|==^?=*SWS)Gpujd$hMUl(g>(&b^T3NiQ=O6JE
zZW19ck*7|q%LmtA%BKA`;yU_)KfU_Gl}qVtn0hN{f30yNck4@N!8YH|wQ3U&G9%7`
z?Q45#a#bm@rX&h+ks<;GLcL8>h<)*1<q58moAawd)3@N7R02X3VkK?%eQinaC5cjT
zv)QEVuSWHL1iB#_xxG7~x|?$;PrMGp*5_|C(G7Uzxq`j0QlZ)uT<gqc_8!lZe@Tcj
zEb7mDu!qnN)ej0U8xZ_(PIztpcA1W-V{SqtWx-_j<w=^%#hkkFmHlP(BbN5B_BqrM
zPE$nnymQOc%&(UAe>~%^)WN#b<|Yl|-3#1N;8bbVhSL(09a}xj@JiZNC0sFzXYKm|
zJ4y8ilxz4g-Mes69A$;qc}s{pexoQo4tKIy^<<MH0w0g4GW*MaqotsnAP+A3{EU_7
z>9;3@xoZL<kCJai6`m+ZFc@C#TBHs~CO51#<-D`(WX)dyj~k2%kCF)SkWnt*^cP-f
zQd{%XyDxZChy;uKxIe4uNRWwk=B<-#7{tSkSkERRE<F@~g+fM;cIG%G?N+Pppc5H+
z(~WAjD3C@KSyu#a$;ilpabzrut75^zCLEWlM{bE~KeG?V=0l3+6615uwlyp4rg~WL
zln8<)$<^vd*eIpXzERIRd}ZzN?(zMl{8jVu8Gm*QG`hcbv}BUhOogR=u2|1!Y{Ga3
z%O<dF0T5Vq`jB>Z*PlgBxmPnt*P!@Ry!p;U3zfKiTzC14oOQS{iUxVMj3R26{E?5~
zvRZm!*t_Qg5?G-2fJG+X$vy`U5-#azeZhTXUut{tQ#4=Wy>KN#0o!gl_o^$x$+6Kf
zT;kWKH03@c5>prc`?C>^ZFq5%Tx||>nq<;8nl0WN&K}GZ(UCeP8rTiDhC7sNRUWAH
zx}%{_gMLk#j(z=sYT-n8&E}yFZ&>_I$r~fuS=;MS=L5$LO*~9c(`tz<Oa#w(1ugIk
z@x-($;UEDvWm!BTWxAr?;eK6#><7HD7?b%E&DLi2>|qZ~()GWdTUE8P__;7IPC%A!
z?uMOmv{_I$e#au^yfHW;NvMpOJVC2TjW*4pW8Mhah(Gu|c_I?lJUy$zLYd^BZBtzW
z1~%^0yqsj;n)kC~m5$E{hg?<EYM%|gKC|>?^-oO5jmslBT1yq-vs@Ez9I)J&gb-kU
z8dtH?tg-XB3HE>RMC7JLP|)hK!=n&u=-}D4*(EJuYaCX3{s%gbFRHvAFHs@H^Ek~D
zbty(H{oCL3G%;%D@{~u}_2-baMlu#p^}i8aytnj->s&?FPR*Tz1qe<Mb%@DRHu;;u
zH*ZZ(tilfl*145NqAQH)Y__5;7g>=NOm=vqvaaff=^+O<C&?eO39j&TIvkYHd#WYV
zQw(%nheMMSx+XK?!|q;T&@+&WD8>(!*P9!B(J24a=ha!|Z&AVuhoLo|R!S@%p;2;J
z-jFS3H;PJ|`i!$5EG+n$2QDg6XLZ?qkb3#HIrBD<kVO-j%KszZdYMb`Ygi>S|BtnZ
zhy_J&?C3pxvVwOI!DMSu%%uEBP@4(ds&Uy=gT&*in)pU-1<p+7YO7@Yls$)~%v@U<
zGuhr^^$08?rRoM;u@3I=Z{O7FF?X7m%$FE5oCH?C{JzS77ttu2-R7RKrO}ENI<ITT
z3C?@TE;%11*=ibdEf^#O$Anm8YR6&5q7tB19qHE$1w?j^x@`CAB;-Y1$V9ArjJee!
znNNNzpy}-}-W<jdT%Tm>-8ZhE(yt)=!timd8C?`v%^*Pn2=`0o3TRc#fB9wrNmfw0
zJHGf;cSE^EZRR5710b;Cia)nTwN2^0#OwE-mt`M0)s9(qwYEP8;4~<#w4Gi+$>Xqc
zElS6eJP)eX)PLhkDGqKY#pE-AcA$~!F<Rl#v~pSE%i~E#CI{P~lDst+LljiY%O{xC
z(p%AakB|lfuC)md!};Rsyr%n#Lok<L3CoVKsC`TJU%|+6-79T*`E5!d?fY0>K6vl}
z+lo6i>q%`>uiLewX>4-`$$8M{<`-UV?avhQ_H=1UUluHXB|K1=%5+(?lY5NL01uK0
zc!=t{$?vJ&rk-)iDM8|nqY~Tq0j?~vqU<>@)zQCfHqOet&r;K|uJ=%t`{Ww=EGmXL
zc)GEEvNh9ZGC>xi>cJC#MWHHQ;qp*^*e`YiE0R0#^ZJ@M9CRoikJ&@YI!p&a=Tzta
zfxLxJ$;;DNA_QKfl&Qjoow8d$jcX~$ee<N)i-n6_xk5ICy3g8VHg83=LFA+Pt&xlp
zY*HLG!XP};bC<9B<Wx;S?Zex&SSr>qy8WlG!*>oY*`%ABHSB0rBbai0duA3rY<rky
zH}+cUf074TIoX3zvmbi#!F3+7e(G5#GVC7vHHJTUcv8!PU->Zv<M^Gu!o_yz3I&&h
zCFAMvh;6C2Ed^F$DEbU)n%vJfrLu(Q1qDU4!kJ`_LRY!&ZkwjOyY>bRx>3%Uy+&ZG
zVW}7V!i`3sh1UILe@#BsqKd9<RO``nq?+BH^KN^jUv$Xk>|f#V_}P?iHfUbRK=r~0
zw(t(y0H)lk))+j4ql9MF#xDxljEgwdE0QS(C$|SR_AC{@PtNHCex|_QNVF+fG<T5F
zzQq)5Q16t~oAMQo$eMZS8OqazH#uCziXoiivdP10OkQl@uGTxUExqB44wV?7opY)1
z-)~&?vZfa=!gL1lrV)%+Ct~OD?wYcDAwLtwE`mq(lYpWRM2RS~x)wRvaUTYo%)b|D
zK&y8JhkD8Px(ad`>Rfa4MQBX4SW*ZvJ3je72>a|w=Bj$9n99LKvY^4zw4I3EsqZ03
zHjSkw;<{41jqS|vZFQAvLy)FA8p4xw3I=2PsjjRGcr1~{gef|eiMxMlp;aeoZ^_E0
z`zVN?J^D<%u9s#h|CGJ6U`WcEZW^pLCKS1!G=<yv8zVB7gz@F$3!<ZS|Hz%PMh^Hk
zV}+|UPb1BUG*v20mW@b%{~A0iI73K)q3RX-z(L=VE!?KFpmM>6Jg>Bj<B&roi@f&c
z38`km-j*#twNUyC$JFpa^qyl48lVnhZpEhZBURI8BdU)%hDgRM@5km;?lT-8!FQkV
z)X|FEm+1H2JXqDS-X&}ID)Ag4Cv2!Ifr35<d=5aap9AXaXq(h2ocWte-@J7EzN<oA
zr6%;z+X_Wq$Qh*PEGM?U#Z$R#S5XvpLu1ZPOh)uW{rL>=pw&Y1csy1&RsE=JKTh{K
z$``&87V(hh_{(qmAQU{2+CV}h?{^k#nndJWB9oDmZ_WGku`%*Zw0Cl04_{MZ#^WU^
zVvmTsTp7&y*03g%ggg-z-|<K`5E`fN77TzbJQe7O{#NKxOv+}dF6}>esTn!aNTN$>
zbG-kRWkYOskUckZ7?WfKm+PkBbJ;pvHEzU)JhOz)pQz3JI!EpIUG*#e_<{x*sZl68
z75o%bb1sM`QNUgwETEOpwyCeCCXlA!U#&#_Gp|t5CAy*QqlgRMwFVaftH{b8h_ZG}
z@bc3cFTdB2_FMTIJM~J(-_@=WjGk#@!cD6ZGpv#C2%P)tGNux!-S@Z8I`%?7Wc|L8
z<m$BwxKQ#$M&A0?Ld4l|($5@`AyM0Jk4jy|veOrUkz}c~gUjf)MgN=T(k}Dg0Q*et
A{{R30

diff --git a/doc/check-health.d/notification-05-voltage.avif b/doc/check-health.d/notification-05-voltage.avif
index 17a385bae587c144dd570e84e02110edfc04d7a9..9ef2d943d96720f780132e14f572a9003dc265d7 100644
GIT binary patch
delta 3683
zcmV-p4xI7z9jhLYBMs|qWprTx00000001G8FdUInC<PM$01g<DfJ*_Sk<3Vc4j^r0
zVRRAz3I;eO=NdK%GK(BcWCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_liSu;(
zP#Bp(f=Rku2CvnG*u?maF*>U$0kCrqeQw?s0+0Gf=2xZCSkjO=<Mu}7;+;{j|5Ubl
zvbGgtPZBQCkcWu*-6J(?UvS2M412oV!fFb3D=pRXtIXfG50hdBbKmmG^!t;I0-~fd
z+B7Ogdi9kJ1fePS+YWwl3x02|GoTtaOK}`Tj<FdMfO}C(gLI6*2|<MCG#PUQE^X$=
zkFQxa_Zg!hF!zF5igR~r#Nm2drNBe+k>Fu$ctdjh5&0%+XG6OY6q1O47euqOTxX;X
zCBQ)p+7KHWz03NFRmykB3mQ96hR2dm`}u^XK1hAE`9IvI+e2^<?VU7UCX~+(Y+=Ee
zOIoQiHD-Vn^J)m$P8kS`tDa$^i*g5@bP^F?-qDpL8D50$ljZ<%<<~KI2b11U#zmAl
z$fb5<peoC!2{$MyKUAfE5~`#%!~!71!8JS!WWhc6)+geak|C(L?-@hnJK30NI}x1Q
zV(?F!q3wG4xAbrzQF#k&G<f_N@oKkg!A(1Z^vbRX*O+~%xL8A^mkr+Im)af$EV5b-
z0xBa0J8#E^2zB>gP#m*+BZ^9VR@YDvpYzI24L!%`MDHy2e@w%FhuHf`y#r4p^&iH+
z>RUUkPw~c8nF+I9_*L0lhxxEWNK{{ag+J*Y8c}h@`-;yJNVGLwT}z|o!kAIybP60<
z=;RxwB`pt~)E!E@G)?vd6Qv_nHYgD(y|a8L9tD?N-ay*l<bES^jWspF652=8dWMRX
z`8L+!Z9Uc0f_b-p#<~cUqQ9GMlm!1f<Jik@JM$Cd-}<yI04N48G?mrgre1FM2_RvP
z39oM^{C^tAi&IF)WqQq$(vG@>A5gr~o)aQnS5(;j>hdF6iH+>V`7$0l$Gn<n1jn)e
z@JbLwD#6eFM1IQ|MU_;VxvbOunZu&&vy!Ib62!0`)|&!<bWBi(`~KL^%)&O0;=hNE
z*pQftA|tu3c{tSl{{?<AC<TiMhGPa=psw5=D}A7t`e5+=T&t#Cr{ZBiLKa6b@FhpH
zy=F^DnmO=u8qG)+g&WWH(t!feUZcy=RBlP~U2`;8IX=~J$5Nls0DF%}zGAb9o-l<K
z1iIkHfjlUG4W@o7m=(H;XOKN!)m+<csu`7Ps$Nzg<I^?QP^iLNda(acP171YyL><s
zyo~}!*BLX`XI3|JNIBtz2}zE1I?NAElCIb&LFP~O4O}`Q)NDP~L6eFAxn5>-W|!W+
z_p)wuH0k)y;j{V)|K)~Ocsmw)>-sQblN97S^=?CdHF#k2k#6=x69xjG8|Pv8ghTXs
z!6;1uEqZ>uBt&OVP(~r8Ut%=?d!}aLGi^*_F_(Y5@061m`c_(G+fLNDU7tH=ozj1p
zJ82hYHSUBHaoXs)Q(rCE`21Adb;Kqp08X&b8kmJD!jc^(;F}@DIl1!rG@n~-NQozT
z{66!4-=67*j{A=}LM3dW&Yj4ZR47uomu5D(rXpx)T&&l$yy=5c3ID0g053+sm(c1&
zU_$AL-Fs$`H~o9A$dTj#D~pS|es+3!510v@n1c=9awY=)r{$GJi4k~oHRhVfmz3_p
z4h6s<;mQz5?N_9wcUa|MNB(^{TeW%QeID3<auzd%a`ndkH|mo;p9B<UIsyq#{W!IO
z37K0|+Nv~DH~6ZR;;%~g-Dvu1ITH-Qzp9j?mY}n6_~MKi^SSsyKvsrcgO<&7^!^ra
zuh`HB_*xvG<7TwcCwuNdB`k*6ZVeyoya@H=M2<H0DDsx}<WcQfBEFe$REkA{e(AS=
z1EU%iVp|XX6e0OzEs3Gfs1os4ud7U0z?CIENNdlP7aR#fibrF$a5Lc!F_?d>(d;bs
z*VhKHyDiBb$Qc&Fd$`Z0XTOiUcPhRTr$3jNoe$ZJK|1j$&b!Nad;<{H^NZ*puML^Y
z{|_D<ZWJk1<BqTFx>zHZ?8zBvB8NzSn-bAbOMuL@9K}S;x_nPK%4B+at3SzhSRz4$
zRiHYwZ^sDadh(In#dvYKRPFNKzf@Q+Hu^9a@_zuU=5|p`-K;zGkn%qAp%q+Qr>o(v
zL?_8vHwy;3WM}<w)S`(IIqp@@h~)+xfmm;!qW#$7&)B#GxV%X$;ufWlmd@sXc{Eb7
z-}#xdo`ND<JXe9B#0aDrUPoH4;Bw``^8lAa?}2TK4c%x1J0M)DDC~NubGWw};0lSZ
zSH}aZREx<L{?<NK*$+LOgF01D2hWOa)Wa@J)%r-mBzd=McyW?IkQ-;~AWY$jklN8-
z2W-;LpeA3_z3@Lgg=xzA`OXf1nr3pOO%S=Z1L(h=_V<pQ<pDcAEEWA(NsxPtZ@3|r
zz_%mS?0$Y7Ogm*Py@nAZNsh)5;J@Dbu$w*<GJr=-QW|O%;>duVAAma1s80awQE!6R
zuY8y#xyFq-nC(`7-tUrEIl=S0E}+cwDKiVC|H@sM)gSnE_8YM)^6a^P?tuCpXfsKS
zQ3yMaX=^*WHY*uOOyY2wt|yNT`|F3@Alewvs-p*AP-S@`^GTFsoNV3FwP7~mcajMD
zF~5{e^}-m4#RT6?neOtsKI6p#NXTcfJ)iuTYJTwF?a|V?Ngu9q_n@%`l)XPjv{Wcf
zf-#);X1VnaiiydXei#UU2+jCl)#+js`w+rql2~=<YT8N`LdD{zx`P4NE3c<L2KX&A
zPzjE;YQ@vAl$(4c26{C;Rr9lCfzgn0Bf^d~bBHB<GZAvkSSiObzfR=b1lWrQ?&4!%
zG(3aK=bROAI)|8Lb7abv=5qOj2HPZk@%USe`KWTV0X|^Ndd&=fdxlwo;!$Hmvu~&I
z+XvAYB%NM0l|4ul<NLCvm^|BiWJPDU>fgJa%T51Ww0zHabG8b&H!)#tNo>TX)Tl8-
zhmjWHp2vEt=QBFx*yn^u%kWc5pf+Y{M}!t*?5tzbC(>OXAP?EIO3O)!Fh*RcObj!z
zSnF2A!o3yLu^(=K4$MHbA^VWvWUn%0bAj$3%!BJPD|vYdbv}xF*n^!e*4yqgpw&~;
zSzo^9e}Si9+#xu5)oH27IQ!KcS>rZQ)v4T~!~dLqA7d9Ngu5<N2q3lk8z9bw%&+!M
zT37IW_*q2_1m(QrBK>fxx$6Xt;BoN98TLVI`0&~gzsl5q1>KF0imZjA<Sk&CiZ$u7
zfbDO=!9`d;rpc@L4^XM&+a87=1VB?%SP+<qzqa7<)NV}?z7&S<@ifuFEbja4Z@J2t
zMK1eDA`>}O@>%^*%i0Orh78iKW&+KcD5h|qBx>P!8bsaRVI^clEhR9x&Q`VO0$|ih
zs|J?b*T=_y$x+KrU7t0!qX(1HHWPqo(}Z69*1<UezQ;co{|c!Sq-4nUIeW74T$&AP
zns2m6k^7v+xU?V};I^xkOh@1ZbV%t5Orayg5St_0;!hYhp}s>vis2<o)rf8pzMIGA
z?zv{Ct~1&_FGt3Oc=RoV&uLu<L2awT;_yf83$e$4&mmw^sQ&8KTd)xIR2#uBb%+hN
zlDcX>T3y*k2M6Awgv)uKOfK@ED8vuGRxe6nrXScm(R`~c<TIpf=m$Zcy-1T3xL+kz
zCFp3=$e`U@BBncTqVl)f%;?Can}79lz>_2!T6(%kzz3osgpNiJNV0O&)FXYVT_)EZ
z!7cNDQrEmrU$~^!8TPwkNNx2*2oq*>&<SJ(1_fyjLy8sI#_9kyST<Jex;&nbU&|hC
zek9yDv&3n@WerAKOoE!eX0DZh6~&g$UjZ)FTIgLJmtCbHHsSNlUH3yq6wNh{iq93%
zOgmwBUn68#&x*z~@?8#Zz^P!Le@Jjq_%!Q(soML`5SvPmr7I72-mq#L38kXlDp}Pz
zgM@L!1#BPH3b%~ew#&|6yW@BmSw!wLELmw#p>p<s0WxFvZ~p!grz6k>eC0I<_A1{=
z6yPO?LxGD`cvt)tXi~erNA=(-AAiaa=TM~?;{UZ#YY6fh6P+P%bkO`9<=kcdv{dnb
zph#<QgiOWuF?GQRRXNStH_OIYJ{+6@HKBtP%@J3XkNQ=*^foN>?Cm~A6L^`FSW&wo
z>Z{>zhL3m(uKKjWDP>msg3yC|o3C$59eR74nfqCcg_3H)48YhrP?n<F(4JwKwe{1j
z98B7g1g#Xr`th6wGj+pNp{EAmFn+Ip&tkiPOi0n7K`I}t*O(}y51a~jvMkkjtAcmu
zqhE}hHD0t|p3vcSs8A)%rLmI-FF^vGlo8z@MVw)^qVV_D0Aj*9hkmq(!U=EtK9E?l
zv#F@Jfm-1a81vnwxQ?Z-c)O;6V#~F(?*nfHE`=+G7h8KFeWAWRgnz$|8LRhyJ+2G9
zbD!wxk|2oww#0zG79h#n$8f4q&kin5aMWH%ZIuh;#1R%;GqB-xqgSE8zO<*G4aA4Y
zrW-IxgjSY9+!`wM=@9;k{GR?Wbt@KA>wegS5K3CNkxffRGGJ@pU<Z%Hmf6E4gk$tb
zZ;Xz3_giCwj$R(V3)#ymaVQagvaiUp^eF5TFNVPSqr+jscWBTf1Hjh;U0o&l3|GJq
z^VA-!I4O11{<1^2^b@h0ikl@j&TSHCNC#w8L9N@;Nr{5ho^)x!Y=qr?15)h}r0n5x
zp=7z28&-uST~O-s-ijIPTROeQU~~DZH^1*?;&6><1JZ7sBBVQ5sP)}Cs`g%m9fBZd
zrg~~k%%q+lW1O_m2a^&4HY%gSR0^_DAXF_EWh*UbHm_TPB!^9De;9p`!+uvt)Cd~s
BDh~hv

delta 3629
zcmV+|4$|?f9`zlNBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01exbc}oF=
zk;O=V4dZQOVRRAz3JEwR=NL8+5YTBd%NtB&0^4q)X`9)jSeicDKRP3ys7J29OPAt>
zYC$zwJQ;tqVVxn^BX#!WJ7eqjL@iXl<^<jxaFg**_@-fURmO}6=}*nGX2fgM`$-*q
zM?GY?K)vceAQ_Z1boAgTAw8K=I$L40-RB^GAm%QchwFY(^Vjh7#s2?OdEO2M%7^iM
zsNH)ncu%Ls%)5^+mCrH{nF()8pY|5}9aB;voo%?X5K?w!;^6!F;kfc0ed2bYno@b2
zSk)nzx7r>>pe$KHdtZ(fPjJ+ig6rH${svb?tzUb^w#oK@`Hzd`Ku(_Jc2#NVA_Q@N
zxok&uG!jp&g|!39`hZ?vXD(qJKjaZ)v6zX$6Uyv$xvbV)!`M+M?O_)!4pH`*xc<pf
zlz-4!cDsYFrYM(>Z-y`YJQ_x+@HqPM+NtfdJY51-@o~gLL+0~`XU7X_u~rA5Mm|KS
zDl`s=sQRJiFV$sQcQUTU7VN@b$ql@J!Lf=TBA?Y_F0{WU*!eu#v1SFHOp3E%(aDX;
zVGyPEOp{`<3^pBd!z0t53Xb)m>6Qb!-cG)wEOyZDEAGJswr_>plxY>9g6yyEVFXDC
zF^@<9y-dubn3q4|J0NYBU8Lp2IEZZRj+&=pbO>3Ck{tKUTE?2QYJh|xwR3TQRb5i&
z^ThPpN+vhml+#7E$ro<hyjRF@eYYt`oNkFno_t%7(ZZ1adGG<VggF=o`@n}Quo6<I
z7cvxk0A+-UAT_h(+@*AauXk<kj|{G+UiLF@ji*1?A4dG4!5>l<O_ng#^YiiHoPYH~
z($1AKv49>>JQS5XD9$K0z9Q9sV)q8ve`mRj3!RP><ESqW<k8WMMpvCLP-t3|>P6E!
z)Cc}8Z^7;b%bTI+CR!HEFQ0=tHOJL1gg_?`B}TGg`tXOd>QvpDf)yuQ(99M6!|(j8
zOQu<LvoNs32XM*<)IC9Nl^;NY`<BbvI*iYV<H@|FB8n%}4XmSrHsDf!v@HirieDUn
z0=%R|((({o6#N`k-;YQ8_Pg3hFQ$o)9i;$tG;Hqz5^-W}SnV2HIWx3Ll6p79KU?V)
zr|{*<Cn!`BT4+^f16t<)<#cG_ZHKh@cclhTYcYFIJ>|ik?g>6q3A6}DDirC|8n3y^
zpx0RvTD1PQ0mefnEZQ!A_FFEAj^0psA)Rs6>e+lik{V1h6+#ZyZ_z^T$&|aft&|~9
zs7BFZxq*k=iO@6wz%-YokqGv~IwB%FPnOZhA9Zc?N#BGhH6hoTi6D_{W1p^iMq$cC
z^ZvWt*Che4OxQ7uWQ6dN_PVJ<q1lbPz}6v4aQiA`i-1se28?!pXg}jw1AmOqP2)rR
z0>@M%LY`FV`7U_n)sIomj^~ziXgEt>g!+Vjgu&_@Tyo+Jq0`S1?9<I-KXJ+$#cXJy
zlU?E88Et7!Ni7u(+K0s^O$ikMWp_*#U*WvE5gK(poUG}N1N-<*t?td`GBSWR?1UqL
zzqDu#Z|7~%7)9BCP&|d!JgUVW4Q?GTRv<INhIKDzv8c#*Ko3_#Ik(W&@=m=oemvZ2
ziBY=Ba*nDpcteavL=-x>&G2NzR_?%o$af;K8cyipqevbOCNZ*A2MfGW0oeCI39>))
z!DoRoj6Y#3#Dx!<NPeooYQLe$qw55^d#{Ra5XjHkFk9q*j~oCGlx@WC^qgC7kJ|uB
z2O$-N$Ntaa{UZ&WgvE9r7H&u}&|f@zL8h_7<Yw=PK8^Fsah;$dLNj0s^%O1z<X18R
z-HurSJhcL6SZMO@lOjq_1gzFn7XLRR1WW;t(>M0h1j`mg-2{$@t$x*eJxd-IwC55P
z4ckSE?=i)H3yZC34T6Nj4=!J-tc9V|pNu^nhO%=m8LQq=T&*Bx6_26q&unc2khJME
zoD<dX4el{cm^c-}w0TLTnC7Z9DuR|?`(fWY@{bL4>1gH2Tqhr-lavxz3TtV+NLHrq
zkEPz>ke>&f61|c<3T67wYX)QNOnnrDe(eas@<IoHSx|~6PzQFc+a7*QT;%Pqz6Noq
z2k4rn8}L>wLV6~<BWPD&b;dZxQBD_Bhh^_PXI^_Y78I*6bf74uVy)*mwKZEwUXne<
ziIYk|kvVmI#lE2YDqv<b5c{vLJ?GDgTXlm5rzyfN9n>de)BIy<5z+SPFrJ(zHsga-
zdb|#QU>sA79G@NsAP|i)8Ey3*-K}m!Pm?s@db1uBsU7Qk)1v6Npj#!R?5kYCeZIi&
zcUZQc=6<SV7E0-7q9pGa3q+e%(TGMc<sNbiG=YHZ$Rm$)0@n{TumOUiG8IxQ*B^lI
zhbESo^t3oTx65g~W-c^8q-vAiZB3L<G1~@z=CZOQ7X6`hK*_brh`jM00R>*ZO#WJ}
z?J~6f;ciaCogjlAUr3?48KuK*mEn}bVl$r0q@P|Z*i3Dsz=5jx=C}w<t$FX9Yk(?-
zKF~Hi`?ROLI0uj3#E-NT4{o~5@m7t;*ZtnP%mV9-JkF8%1M-k|2Y*V^dfTdRoenO4
zUrcZrqETj9Krdf%1;sj)lODNU)gazQDt|RADqh9+J>(DM0sa{l^yd<)*S7yiRegB4
zC4ljy6CE|Wc!MWxm6^0}qyTaV^w8F5T}bP;jA>P)tgOB}vQp}!HnU0Sf-<bPkkL4f
zl%{%zEIbF;#;l#^xc(-*@`{T8Y16@fyo*Z%4ao=m(T!u|3R0LVyE-6H;y|5Syrxec
zTkrix>ViNUUW|_#(VDyc^X?krPkKFdMN4=MY0z!cr>7qM>UQdwP%Y<Nx7#P-KDn#P
zEMo2IA>Tth#))NX*t#-TNIXrZ*MA6pg_lG%r1<eTTX}FpPJvMKPV)Ghk$fG0_bFH1
z$~rmc4~Xfrn=@Y1JO8lGNO(gf1{r@wh5b1`EaX%UL#-ri*4ezyA(hZhbyM!qJgenB
z?l7%QI1m6my^8LA!mEGQ@_o9TCkPRNNXinzb*ypff}jCx3rQG?wra-~JE3KtJ#a83
z7gU2W>!iYLO36J?#2ejdfN0Hsx?00jF`K=^cdcwKY6y(vt6U-^XN4hEh{_X_l`7|R
z5X?3NW<N*B(at&#K~kan{-QK{f%6YD?R1HV>=`vwB-TSLs$jx@$A%{VpI3mz`79CL
zJXvE<G!!ik)gWE%B{yLtDSmg9aL8ee$ucB^a^xuXN^wysiK@_{4rFA1KmY|B6^4D?
zFyDEG(p@Sy(~ONlEzSEJ;d4J@L9nhdz|^aYTuh)y7#kZ(Psn&#0x&v^97*IwJKPD?
zmofSyat>2^rETb9K+YK}CHxw#e>0k~y(tX$EIf#UQ5Q`tf?~u=Dksj^BOOIn{+(E;
z687=UQE5L_eGF`ed1+jKTjd{X>{oY+nt0;=nwDfi@ZDJh+X6iHh0qUHa@MhX;L#QQ
zt*nI(txu?wpIRFu19deLLnxS4rS5b5!g^y?EJ#JHm8rJ$%in$u@k~7hS|sSxpBAo0
z=Xsl2c(eW0_MQYem^eR6`C~sGxkVbxw92CjzmvK>Y7kJeskM`TG~o!>Qj)Es9eZh6
zN*ZlnAFn*f$+Uktiy@rrB>%$>^qoM&Rk?D^Ab)kPQxjN?5&-KM!G*-jI%n$zkq@5r
z;446?VMpf)<ytynvKbF14>pwD{y#Gv2TQm8V7a<dpzco{ZsD%2tqgy61uqxF3DrsE
zS~n8vUV@(CqJ|cKZEuug^sOzG!OrJzE^_$9|NeIci$$|fv|`d$Dnbkl94s2Cl0W_B
z=NO~)Q0)shJGP}hWB!ZqwVIzg><QJNA$tt<&BD0poaB8>P1#&S5vgt+%9aT43R}tG
z&-zH-IxCnZ96<|c{S)^ig?e!l7W@ET@A}Uexmtjtx|)A~W_{-_y#x<5imtH|6&n;F
zen3=D_<^tSlE|W2o}99G5SyR?n?I4QJCU7OK%;*VBM2X^b(%jvq8b`1cCAU{%P<s`
zX1Ta5wVl|z3FBDUalxhi88a-!xt{*wE6oR_cM1p({74d^6PS6X^wr<;`Qu8){WCfd
zu9)dHdJs8(sSH~Z``e;t$yfCka?;Rk7_6%3!sZmNm0}}a6O*ZeFx;~*?gT0!TJ-;{
zvyw+aIEUvN=*TAvDQ`!)fKbpv9nA*jGR-tmIdo1wI$%-u*sd{@EQqJyg>F9AvnW|3
z=v1Oxg=l@&cnh+VlIc=r)_g)Ss9lJhrf!4mF$GV53M8zJsQP+N77G|*<rL}0)neD)
zJDK)^-+D*rY6izAa1A)0ESXYLb}eTQ7lju?hTnUrtT;%tvoy3XrBBB%1?^t}=THv|
zIJ}vzLnrc%c(N$pWzp`;L>&5TCNsbSGmOM0+-N-B!EZ(}H#C*4o<oT1&4V&FpTIp^
zn{`fq5Pg?Vp7(4+g{p{Y%qI%PPC0=jH!{z;AK9^Cnk-r(8ZTu0HqqYUNWm*bkIu1<
zua#S~1A2D>idkQu)vr0!3D7{9$0AMIXNlPP!ZcrShf`e_il+0918!ZPq7pIj)oW-R
zL!+eEE_{`UY&;&%a`5-HI)JfNL>-NbU^Iz*S7rPzZr~yd+0%fU;qs~fg6TI{y^^z&
zTXr%FW4yl2sc%cu%r$)>!%4uW#z&hc%)vS<zox;9!(e&4Ydp0`g_bFMnTds3rllmU
zB*_XufTU%8#v7~mvBqFB@i)43Y$kf3eRKJIe<&0#GU)q1Kusb|*R0GJWqnNY%eUc{

diff --git a/doc/check-health.d/notification-06-temperature-high.avif b/doc/check-health.d/notification-06-temperature-high.avif
index 60d38027a92d5bb8f1cd6467ae10b5a1dfd34001..908e8f2e7c7417ed4f2c206214ef285b67ea5241 100644
GIT binary patch
delta 3457
zcmV-{4Sw>!8_OJ!BMs|qWprTx00000001G8FdUInC<PM$01Y^ifJ*^nk<3Vc4M1&V
zVRRAz3I;eOryOh&GOHR)WCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_liS;bm
zjgh$sR<Ubg!1WSaDNuh!;i&1`;JD!cTud}!n0C5l-8BJRa^i&jU2wL2{*F{>B{#$}
zskEz#P?g)AvHY997&OX$JGuaWdzV19`I&Bd4G6Pnq4cKonq?jCYALl2v-UkgfF&Z|
zzIc{-l&687Y}ry1ScuYVoI5O!1&^LVaePtI;5H0TdE^!xX9jBd$Cl+d&&s#ApUOoQ
zKTBs#JTFkK%TrGAny`O)(_?=SFt~!do=LXMS^dGC7kEX1&X&Jb@HM=DS-{+c6%4o2
zPfKQWz*TBC;#^s4pac>#^!7eQ6}f<J4hW59oOdeRBXR4yv4;f)?jC;|szE%eWcVnS
zZEF9OC=nngQSmU$o3cZvRfx(l{Wrb^xCw$lJnCHRvo~k&2NnrPF$}RGL7I7xfqllm
z3Cq=QxnJ#je+9N?i)Mp=ks_wF)teLy=eba;mP29xb?6952WflYAbjRoYDOpZPh+U0
zsuFwTI4Jv@qbUOuJAMsgVOZ&mwx>u&rNQ13igJ7JBqjw}G@4;(!c@_I<J*x7biS#7
zz(L1>PtR}m+=P0czr3^9qEo!(RmF&^nlZ(T?(V8vo8RL*uGwFIAH}T*E}C!g@s2L?
zr>bD{YlHq;gSvZ)A<cwH`cnX<Zn164Rmyd?Jjm24V*K48y9j47blzxR3v4#k;ADLR
zi(ie``|Lh^mJZdHS}bxE$(V;BsGsG4COd)Q*9A0AZ!&dUfq~$QxPy_Us>{0=s_XaU
z1BSKh*_ox!fQ~wUV=<1@(1L%V!#<m5MY=p4XL-IP)5X479**#yaH66$F=RmD%|dJH
zS8O5qFpqG-WWpc*oc^fAcvle%psOxxgVM8A(oHHZx2}3<9|v|PP!PiXk!exs3i<rn
zssbcGu$)~<?)l7FCuyQdcP_pNp2ZscO^dvLr!x~I+;5+M{aG+FihT14gi9TnXk^{1
z;P--j3{)E~F{ctlJNNsKGJbK2&a2&CdZ~`A`A2JToJD^fnjRm$X!xH;tyko@UY>1B
z*j3`!tQRI(p$-D4PB2O!VXf7YDRy6rbTSs+98}PgXcS>w;hqopv3eQ$%i;f$YO_~1
z{SX0~zX#lZ3P8j|Dj5>Bi#2m2?w{cAM`5MqL$cmxSjg#pUuI+uhJ-CajC06+$Q>@C
zH@d<qo2O|~1SWOW#>{uI0g$Xn)po|FfD-LuKLNi=n!_m}VLKu>9iOGB7BX#Tq5%xs
z<|RC3e^RdP1Tc-yVWK_eCY`ZONLRkztfv@pwZZa#hMRW>hGqi-7`>n+nY~JW)aJ+%
zEL0E@ING-9_j`)myees}(1R!^wAf%Rd+HlXi#7=xC#`$MhJf$?;lIXDscrA&>?RP$
zwB>#`Hk7mjjb+N6=`zSQ+|sPrXjW(pCAL*-c>Bq*iCx01`0Wb0+&-4Cakw~uC?Kbt
z-_ibm0-oMqB3eJd5(IM}oci?rqm+1ZL9YqC_S<D@bZ1v@EVqLIOkWQ3&BfmjJ85%O
zT^BtYBuecQCaZXrV0g66bR8*JkZxC{S%@?_i%tZzi|$s2B*t+(K?jkX7bI%@shy=D
z;R{fLauW<igv;EA5*7phs3owzE%BpFNhw5s5cLnKuJ~v(Yn8`YqF6eqq$SkjV<tj0
z^M2z+`nE@ceBiZPm9RPXB{(n*l;}4r&>Y}r4Q7FB<{u@Oa4R)fG@)sdYj3PP&K5=N
zHR&9eTR$?IQTa*WYxryf74uzEz{cx)o>9Uwh=)Z<$|gc-ztgWq1b>V*w|saJ`5`cW
zclDTP$nm%iBFXo+*{sIc`X?sq5@*+ibZd`Kg>~)?KaJ;YjvVvc=#=5zh&Fc9{<T3r
ztu3lE($!g^o;}o#<C0%tM<EwPQ7nRdmCfP(^<YE98=Bl4G_k2q1(62r-OwZ9j}`n4
zyW}K&fN!pqyP;j8a*um*zL)Lg31M-6ZB`!#d%Csh^f<>DAY%&_9RTf<@w@!+@K=aR
zh_WHPOD=eyI%&BFx`|=r0u+)-IIb0jx1GrYD5E0co^0$wT8D2SlC*klW`p&E$rJ$2
z&YW@)kxj+f-^i>S?5tW;ipulR{CFp{u}yDtFjkwu^L?O8mpu?Cs(BE^@cAKs@_*^-
z8g#>M`~?F_-;KO(SmtbgM9D%*YEz$N^lK?)u_Pf_kAn&3TiEFJm+Aub)>;^v_(u_f
ze0IDcxUcZX%H&%~ge}Y9CHOt$NFrL{s})%Eo-v<z;-q43!`+&e`44dh4n>&5T1;cb
zZ5RZONoNA8=~r~xqZ8bH{kr>qXDPME=((G);z$bqAH<#YAF-11w$c%*HHz)2KoI&6
z>Y9^^k&s4d1vQzH!N8+5+PO><mACBRa4;MVLLVC{kIn0-6b0RF>zcFchEW{bpMA{h
z-XovxH*43A^}wjH`9VKv-bDL;N-h#V(K?H{SRmGNyAtoSB>y8)o+5{T?v*2~R&%iG
z0im|1{}hLbK%vhIytdbrR`Bstmf;!HNIP2j4c+9a!BXQ{aq$npY;a{q4_Aa2A+bxQ
z+tUI21g_Z@iAE_*r3{jQ2Pse$8<78;a8jWmV!!-XGM&`Hjs~cB8U<yq$QeIHuf`^;
zeLh0$c48N{x*%mv$-Ah3s+X!n{B=>kIsYmQ(?@I-`(}<Kl?UCWfjqIe1QtY!SgVzw
zL@h0dg(`>Rj)v97kl{c0@G|8pPCxiupv!&(wKQ7IFRLn#={zEu8K+$U#EK^7RvbK}
z6*i_JsG;&{gr8g;sz<x++qt4Fxi-II;2J*oC+8Ogt~+aZP;NSZD#_upXE({90jr1V
zjd_WuOduI$+3QmeCzl7>Nx5b)Bv^^tF}?W}SkuX|#9rs)?3^xn69Yb0x?mtNJu@+y
za{ASWLs{R<%A@XECT^2*^)KJ{YBkR%HMzIT-n`C8b^Rrj1lUl9S6y5cNcdjIv3wb3
zxBM~_GHGGoW%Yc2C%I~(iA0ll)#i5zlH;lsy+I$vA}5mt&?YdfbUieneM|Lf@Jra4
zLeo}vJ-T%%%2S%Ez?BWty00jh?6LQk3CjutKjS?T_`1sAN_9JK9a-@DFo<QRui3Eb
zJDFtg@h^$RNB|?mBM1aDfkt@I8+=4&|DvMt>2sU`@CHVIYkfz{<6DWbKD9Cg158Hb
zo8yn$DnR~Dxr+6>x1Pu$Rw!o(6OT5a+?pCYZ*aFjBI*vl5NjDXErV$9vy|ZwFe`_f
zTl8cbJm#f*eqn>~UL^>as)S)+N;DA-_Wms)l)S@SWdMhbKk^J*A9*L5P;|QsFM5ms
zwCbnovGcfp9ZhhJYN+Yt=$Yv2?>GVHLDi%hxrO)PKG3<71N^>A-w}xg+I=pq{r&Xc
zse~pCV#CL^&sKi=(@-w!kdITgI0#pBDSUI_@UKtgXuu9<61YYBzAGQ1Ej-qyg>M;6
zq>d-DPT^=!)kP<_Y(#``7<4hb+$Yg7N-{oUVURn2ZNfd#8ct<VvFr>(Yeg?{Q@dg)
zb1Ly&A7a?n?m)twq|z$>kPo)WM@>xv2Xm)lk9CqOZQ3r4yu7z9Ga%k2N3)B{1s@T+
z!3_^!#Ja`9#2yxtM4+lJ9Giid_8E_qu5nY*L)1<&IK?By^m205f0a!K2TExAnZ3}f
zC4lySw3a!3LV&AlDaRtWiydSF^qA12=a$ea5O6{jrfrwR)fgs}m7wJUfaod%^35qy
zh1F&?|9!ILZ|+!Og)PjQ_D8+Wd1LoVcLx!VV^>ZJ#%eI0swp84<xjpo+?Y`AfeuW}
z5Vf!FukF4{@xdQ;Us;Lu!l>BMNC+lj)7N2tVe&Dn=FXeXHl8ZNsB@$L4C&M)l_QQZ
zvp0cEE1Us#ER2dt*`@2G6b@dSVSFAu8c-B6UUCzrzGk=Oi~>191zaoEP>*I$s3kq$
z@}o8@8#vL%#W0111-aRgV5;N8A?BAS%aizJVlQGsJbBOWZ$5R!xt*a^aR7Agr*PDN
zD+Yra8=X0IMx8Fmc)l0YDrl<1@<GYhE>45g-Fd5%O-O7fx(iHy<G|EQR1r^Od^Wt{
zNGWw}`1r$VU`cM+a2zj1i-Y#AIp1ZEvAqW<n}}6dg0qcU)F@1%U^JIwc_U$nny9W=
zy-!tB1QKg1E6<mf_ucK?#zI4dqpIhB_Mo>4G#i)8I<#PljL3RIK{Kq20)NntM(2;>
zOLuE_nRj+`M7#fm^4ZV~)-S;QFdPoj1d!rhaF<;{{wAdr=x>Wi9~|xC=_*^31gd0J
zA7qK-jb5}2$9OT~cosm`(ShU=2^*$+@1V#`_xtQe-bnp1k$n)2<gdm6v{}GdPxT?G
z=7x|@p~IPmO@<8oT_}x+x&^d7#4u|<_=wd5m6Cuw#UD9*4pfLscfhd;-&|2sB;w%p
jDtdNtaEzD!5~SvlYCnRIspqwX(jwXv(Qb$0QoRsx-|eJ6

delta 3317
zcmV<R3<~qh9KRcoBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01Ty(c}oFQ
zk;O=V46SWsVRRAz3JEwRry6V^A)wMSl^INA0^4q)X`9)jSeicDKRP3ys8mRsN&or~
zwnB;B@)_Z<7%NZarfmQH3U;-X`5z!zJfGjXz!FHch`hNpS#@4b`m7T&X%p#Gz}VAV
zG6tyyNMF$UXUrY|AA+VNvjs?2SV<{I+)6cnShj26#x=GcH;rmqFgZmG>pYN5pUNA5
zJHD#QUjM`{HE;2RNIE&BVprNi6A`jYWa*DFUmyi)y+xVMn*{D`;;X~UXn-3FEc$|%
zdNxo5d2l!VORsmX)uwUchzn^Oqf`6RZWvp&LJ5En1P5{hH*sn$zF)Nb%*CdR?*U1F
z>CH->DEZfoX3>I^V8A_vYFb~4N(eSus-+Wc%f~!)dK5KtZ%Wo0qCkqfTqi+-l$~z8
zuK9@l5_gw)k12pmBe2UPR6|{HOazRK9Kjzj$$+Q(6K>b+F|7r!o|dQ$kBqPWeiYk$
z$(ZtvdH7Hlffi~oH{lh+tNEJhIf80`P&_r-F>%%vhN(Knb_MLVIO=zF_@PX?ucR0b
z>R8!sPCNK3#1@<CA*f34#A6zQn%MS(2af+_EE?=uLPVaQI#8bj4d(+YNv9p=DJ9DM
zEaj6ONLDB<^X-#cqTxq%)ZdK^nXNV1t7A*12(t#GexT>j%;HO*dhX8Z<G=xbos1l;
z4l>Qsnu=XX%USDeNXtEOC=N-uEeiKd);Mzl8^~rUddd&2r_<3Xe?bN^zuDGnWlbZM
z$jIQodac2(S$#Oy`L>?EUk4=t2(oa`*PdiYeB<%<JqOZx3|a*R*NQourWMl<>sk<!
zmUQnSb}&k$Ej!#iZ*qhN;Q;A>fF{uaO<U!4RXeP1o*J<)ZuSRd)9~I6DX<B;lqUY;
zdCXmE&l7~PmOw~S(Uas6o)9%&XJTij;jDMl@Or**)s3MF;@KyLF4<eVVL0cjIWq2`
z^w;a3j&kU$1d*nZL(GdW+;tOTyc>l`eUgD&+2{>RM(gbMbS|Te_dvpb(y7IyMM)F;
z(h!1_iM(g#5v#@J60+i_<o{dl$y65>G{J}ZaW%^bjJ#0Kf(VUou8Q?{*wx#bWhfo7
z!!{k^6Vkl<go9$*qPif*@T}m+;MEc&kYu`Y8}G2wSt|FCdE_IJp<y7@MZRox6K=t%
zu*y)-5lLs(U+lA0A+DQ$oCBRmepq&Vj3qHX+o$PpXu|#a{C?n-5Lo;9hCf|6>M<CI
zI)^JO*DN4W)j%}IoDRCm(1On4`w=J%8_251uVru0mom4umeD>?w$Z;?BSdhjIvHc*
znI0BKrz?c^Ly+RA`6dv`CO}Rh{6;0MLn#l&Mv<^xF>_-UQS*;~Rh>To{}<Y|3)QoU
zBEs-?1vlYJghA0ca!n{DEkKXmS<^B=OagscYi<YZHN6SfPf^1E^)Th*m5|*zS)?Se
zOm#_CGGt6`7Y`-n4PCNTs5yUM1b{Z)DwSg1Y>K>`%c$+ikzgGi<yAem-AJjWn?lhD
zC@sDMEKf{sS!48nZX`w=e)%GVh#RZKplvhxv%_$|-CtMzyu^4bqxq!SX6msb_?pjk
z5xH?-_%(^}*GJzL(Jcy#KOMVUq1+ADyWVGO-`1Dgl=~25u6%pS*r_Y$$=S@h*z!eE
zk`8gujNRwxz1St+d+f|7hhfCvcjX&et;UxH|L+BekhSxFAmcm1d}mQJMxPP|cB{}b
z#Vsgz)1ms?DvgRsu4};j`ZfIaMuDGfOgYHz2XJYoEjjaJQ{<qWyWCiTZdP=lKsFf^
zsF+J#cmAKMUOrvqwpIdFWLe+u)&u?Fr!v=PS*2ZFDy$Xf#0XXo%XZI0gy~6sv`2BZ
z!B>VM)$7lHLM!h=!(y6K*UwHe65Nb|q2<gucJ!(p45#iX_q*r`)+o**7H5hMf3!yh
zEK?T~mS%TDC0E@30L6U~3`PO#t8<N<&}k&>-FzYk-SIMRE&K0W=HC%dq6Z1W#q%^^
zGOgo9lf0kI2n0pAXB#z0bIc&x?kE+6KR80@O9y#>Fw<!uV86+{!{Cx(;_|XP-J)-{
z=V;p-hN#Of`dHWYr&D8%xNrXWzWqu4e$lT&42!TFkG%oi7O%O)a>NAqqaXV5TyL{;
z4Zg~Ix?7FQUhBYt3(Xh}OKEutgmYtyQ+n+G5AYtZ6ETTYzbN>7M;#<Dse7<+L)3K+
zy?wWTlvg)<{hAj`tyowmF7-Mad@hg*Fix6brifl^VGwpU=4(VKaUyl;5h9o_FU$=m
zJl!f7c%ml&iP22p>J^hvt1fcjvXfO1(?EFUH;zieQ=a6ukGUib%;+KW#1$%KDKd-R
zq|=6?#f2lAG1-DE2PqEo?qp<abE>ybOF9653KL8=anB<g0_Vl@D$?U@r?PXMZ+OKo
z*ZvN%TF>d*6MVsnS|k~eizwb{bI?|m7HW+D%0VeMDSm-NG^%obB?cSD&ZtO>4|#r^
zk+*QMCf0B21X+l${Q{kazw-3JP|G*2T-x<~nsdFR_G@EZUuxXTcvc^_s3rE)2}R|9
z<w0;twE4zI{{$jBQf2@iG+hu8o)EW1Vqs$Px7fW1>V|EuquL7p7DIKJ0w&|Gkl#r<
zoz_g@hc@qz3FY(+|D@GWE6_p4wp8aL;nn+6!CgEc-I5k})ESO<#wDPqg{G|tiq6RB
z*aMo2E{2;)L5#J*?Jx4LnhBM^)%Pub!kvbXhW~IJowU%Fc@lOdmTkA0HuJkxpef1l
z7}MU_piuZG@j`|wh*=``z-rHtItgR@{*_=sM{pk(ox5D6de~(n#7DuSpXbSqofS$A
zg1GGAwb-mkWd*%3ri1RHvPjO7L3^xTFRX&ut^+WW1mpXTsg^5Pl#D3@8~QSTUfh!U
z`XIr7FrDllhW=Ta`O(**PAc88a91ucd`=vD+jyO_(+Xz)We2pc_^XmGppz@6r|Do3
zh;W4Lny}@}QX%om8*BrkAWjbvSY|oI%^M&W03yzkYxuyVHusibi15}-&Z=a~V!9h|
zjd(sOvx)%bB@6DE-I0U>4m0h41K^lsEC)GHKS(7dxjC{<qFqZa)PBoX&eCr2u>EXC
z?)4O>Q!1oK1;YGcrq0?UpWP4WN6&MFj<iZtA=i23iFNltYj;&#;+c}20ewKJF!^>A
z#Ue644!WrfjB7R=CTh0C7G+WYiqV6w83F&jE&)|jzkp9@T@eR#mzbn~13cg>tCo3I
z00ek9^?rPk<}=CfNJJU+S<-q%B%KTacvKK}9lhlDJ*Jt)K;-t3Y6GbNVg8Gq(HlT>
z<vX6C>)Z*QmcA?K;sFlXNdT51km)(7Z7?o?<?}T{9{TRHSdFboHbO>tBQbiv0_BY!
znqw<7qT==#0VrSfJ-}#x6VYlbh?qFJ9?6j<Kj>gkb~DZqji5cFokG<v^b+DyRBQ)Y
zoKV3+2s=KW8fj`M)Ad|>PLYG)!B!Qx0gI7TzgymXLg(*k(%4C02_b|Sg5je^U78y7
zl#)XXC^mh5E7r>+l(^Y&y7hzx`E1nEn7MS2-><R&6RkhDaiRBrFDOh8ZXw1EZz9$a
zY7C|_G-J(@r9g0OB|Ow7L>K3<EuD#fzL7)DI4k8Fm9Ya6K*p%S=-1Mc5{A+4v6*-y
z?<N|HWL{s=a0fjw_rRK(9zrpAqf<Q7e1EoDRLOKB>yK)>%X>9F(Q94ZTmrI#q$WA@
zMrxhZHUOtW#;k;YI#RyVF)WC^Z(yB6^L7R*g$+`rSf`CP{umij^%kLBU4DA8R_h|@
zIN(fy`-BIYt#Ncikm0%=b!S8VD(G-}N*O)}tXv#qO9h|&?jCnlNd$<Jp$~gssb9%y
zD*&?7h3y;w*7#+VO2KrxJUJaEF}8rFrGzBikX5^y9LLaq^*UJ>o|Yjk11b)j><dr6
z=@Ta0K5r|Anx)yu6%us3`PJC+;Zu#d0oMqJBTZ(u3`_&OPsY22BN=1yhk8>kUlLn^
zXZL9NAk8U5$4=!O-Q#|CW&Ygn<?I36QV?fQlXWVJ+;+a0Gwwo7oJUk#`mUwe3;J=p
zAB5Ve#k6>TwS}`w5mFOZYt<OEjDtuLlKvRkI%N5o{qbh+NXgBOC%ML<@@}CI;?=VR
zQd=B$%KE1Ng$|^%t%+A~!ZVd#I}&n}GDi>W=VI0XoCHJ-!G$qa5^w0pm}ZZKNYwr7
zp&wCJepMPVp={<)`-k=IF=sE2GWtdm*m~R2Dl51|&-@D;yKv`2<2$%as4-HErJ!Rp
z!fu84qhJ?p|EZ<qKLQ<vxU|X+@tsg|*?f~Gk+{9jvDm?%_*;(j>`89lP4t?e%K%$q

diff --git a/doc/check-health.d/notification-07-temperature-ok.avif b/doc/check-health.d/notification-07-temperature-ok.avif
index 4afed02da806b192859d23f3731281d50ca209a8..8f509e8d8f702695e30baa9f7af40eb33100b789 100644
GIT binary patch
delta 3638
zcmV-64$1M49seDWBMs|qWprTx00000001G8FdUInC<PM$01fPsfJ*^nk<3Yd^lfBe
zbP@mx1~?_B9BdLY-y2M10^4q)X`9)jSeicDKRP3ys9=uIqwuQ7YXakev}2Wt^(@(q
zk+}#~v1?(#^%7etP=7_?sOj6_xZwa?Of+GbcDiNVH33|5;)MNOaJGH^j#OzSH^efj
zw5y6xmD`=M{F}ZQG|GNEx&V8Bmq4}onQnRw2(xIR^rrNhWgYHnDYXu>_B}#?B_iLx
zc$RsTr-7bq*-{f&h|+7EJ1ma{kDftsd{NTiHVjXB<Q5!f25R}omgP9l%D1<l%0(4F
zOJ_|yFHo(^Q%>=kuzz{eV}B4ZxPrT$Nw&;c{lT3VctwHEmcLc-HN07Wz}$ot47bxy
zOJ;PyRcbckTv=<N1QIj!_C7@wxqxmC2#sZ&cPiW?aqGLWhXn@i9)BCEK|HEt_$Zcb
zYX6le5g;Z}@i5GrvO}j;h{`ejH@*e934%a8>RjxzH)rn$770i(46z|Wnt70cea62D
z%hhkWU+sH;1-533W`mJ`BBr#}n-mP^xlpT?Lt+1Q=m<#%X?x%xeCAndMkn=8W2mI6
z5_{x0DEphEDFYKbehp(`Sm}(mr$|Pn!QK*za(nM2CIwkEnqg?dRMCFp+mQ=&zNvq}
zLC1kl&u{kJgnFO9ytCM%Q@rI>#fYk!F~y7S?y6gx-{U*3*<T-j#jOY~ns4#(jxO@2
zs$lbLgZ^5Bx_gQt&4ft$QvjuIv2Dv$%5}Cp$kZxg{M{hC2xl>L-e_M7Y&O;4WPJmR
zUyaxM>^^*!4%L=gEOHgen1>;#pXGoiJAvWX1vE}?GId;mf#8d{gOR1G%exq=>-XdX
zhPCV2nWfKwjyhw1F^<&Gf`6gIKAUGnx;!0cdA=mm#lBe{j_{svqM|i1WI*A~LTl<*
zY$5qDk8r_c!XN&e{;0)xR}l-Kt1fGU($28i<hf<0a(+mp_1m|AmT0~iQd+ZrephI7
zE%KZ_)!fts?7Htya)z4@zZmGM&g34Aa{n3fi$pee(C55=kN)FhTv+CVimnpYx{OKU
ziB0!GTRw<M0=}sCv!@Mx@AAnr&X<48Sg?d$R(HNgHmK_YoHnnlIHhE$xBYcAHe*dX
z&Xt>4pJ-bU0nNUWS8){04?$=2;Qxl9+CWLiM6gR%#dPL*R}k2F)JPa0GWC^NnE+nO
zUXs~gWzgGy!lR{E?>9+^?E_=#!(|`ASl%kPCxzYJ@C^BA=i*pPO+MpO44(r=t~Gts
z1mCpCH9>u2`V238*GoAe*oT^wlB`vIo`nR3=k_nr(q}S+J!z=y|9pK1c9P@*c8I+k
z&N|3kBSO;l$+a$b#I*5(jyDKxH6%%fcZIT!<%lwWJi_QEP?eWtoRh%SFvTRKhB!mE
z1aaXbS4E)A9#AaQqDgdpQ!~cbsDx^sesya`#_MNeVE==sqc+;`4HD#4BK58LOjcKQ
zckv76zjwuwwdSSW;9C7+j@*m`g5wE$;a6txn173pcmRlyO!*5G<Jk2n0gCX!)UJ~K
zRDt<_G48QsS6pPQ!Kkw-{pec3>aHewfV?pATOA8t^Q6KH6o(@Po@e4<^cw`TmRSmb
zh6oX7e64;+#IVPCfCu)XQI>ut6A1^_n1fn^Y*Y1!4abk?5ZG>fOrY*6e?8#|;I=7c
zVC7mL9OjFBuLk&C{{Q<1RwU7tjR&hO-D0<YK&DdBbbI?4sKq4i<`a&)8LTd{UR!8#
z-F@DlbRo|Edd$8{8ybKU^+ptlj}4g+3ayP=`(}3H3HbmAPkHCC3~nVZtaCPuDIpn8
zQ9wO2`iS{OhFkOgvGH}vd(#m&U){U0THha|_i+wXAV5F6F4pWgtRN2CnZe&qP*8t=
z_f(FgExS!->RXEx$C~3xk!RxXHv!HtO7fbQ?xhPnR;-3*YM@XFd*N+bQ1?;8dV;9x
znIIb)o>U9Lpl;e=7|6ABs;~12SB&T~8))Z3AC@gYzc6Xvh4<vqv@Qt6(#mDAn~ErR
z3a_Z)XSE8|0~+ivw{)sHr9zTl|IHYG004~G$}xz@2T2D$s~%1SIDRdBFLQpqN?ih%
zc*mEe-Pe5dousUsSEn=PxCzKF2ybS!(Kt<E4r;ru{rjx@AlaK>#n60NXq+5FMMdo3
zXvL1BH*ZflOdNZ6<(xUhCQ{61cosXjyaT}_*(j{<U6R_CM#w5h8Mk?LGG(}bwDG%?
z51rY}NOEa*^_(9<Niz?;BDVQ9z6ebLEREHPN5Qk2zM2kVeoi*VAM;JPG1pGhN83}7
zb6zgz{3p!HNteup>0|62TYy3O+w<2!*>9fR9qRHmzxeqlmD3wNIYX3i-^hEP0aWr4
zDxCjD8^mWOtVJVUo9s={wXrIH&#~+yk~(!r%b3?|k!nvCVtoJqkritAuDk~PwyU{b
z{&B>KNWNf1GO_$)GFst{if@rQx;0I8X@8F;g#uk5R!}y#ozBaITMR__AX1-5R)kmx
zq0;Y3?Ua68v`~wB$Kh0z6KMfI{;>M7wq#rDLArR;aG4)p-xrk`4Iqzyov6Qkip}(p
z84(De(x=rsmkU}~swclCvF=$Yz&UBKky{1Q8hK!pZl>O$O7V5xp9>T9l?w#LH~Ok*
zrtcoBrvE^VrFR-iA7S+~y&CEnLT{Qq)ma}(zk@#kPgZK|y{(^$SfkP(<7qsV1e`N*
z6?K$EcfLrpiQPByESC^}Ju6tvUXN+Gt0ousgT?qX@$GLtQa%#EYjU`GR)N6$y7#8b
z2P6{_&_Gytr>J}FB@DjWw+fA(W7YY4)itT_Z?95z;sYI=F9OrgepAkPMM~m`EkCW^
z-a#Wr4{R-PD3<c;KGRaaaX}(8H5>z}g+2>t7@wb09vl<=c#tfATN!&N+|NgYOnN<3
z*`|3QZ83F(B0Tg4MPgtf?-(p2l%me_y9V{iq^smSVx(qkBE1kwxve*d9rQ6KkqIS1
z%ZO=PDcX;QIjpF(b}@(Xk7tf4Osk0^jK?_yFBYMSE%^?6VsA1?JQ6QU<XDPVQM`Fx
z#hwPpdNL!$fMsZZZ3=g_PaJtvOqF=rhjFN6d`gE~92@F!M*=B*Mu!9)X*hL(sAXOr
zEH<1C2a6k58uYYGEuQFnE5*YB--A6AGjy7U1y}o+(=09&l666S;%q&)j+%94o);$k
z5{jKsub#XyJA!}+C@`;*HQV87t6xOh8|29APbXRT0;pGiT&lSNiGS7I7aq-*3Mx?y
zS_y|a29c%rnVa)LtPx5w>ruI6HPR2>^w0|98ZtM(0EV-AMsx_<m-W00^ks=X#=Cr*
zdc|5DRy-yve{O>p(M%v-T~xw2JMjlM7^JlfT)#JCqFv{%eYr9+W*wm&|Dj$J=PsbX
zZI^pZTBZ<x8|T1*CZs%tmqD-oo~G9|g5m}|j(>4XweCgfiIb3eJSHD;I^4?r_S#O2
zZ0X3jlNsmYE#u6#7?fKbp39*?fu>(2hz&M_97ASCJ3W9*(QU=XZ!)T+!8)5lJ;Jw-
z;vwJcmXo3avN6-Zy_H(l3%GQ>u<?`B$C=vL$A~e1Yz~o5Mf-b;$eKwxAkHna$-Xvd
zMEHQr%0k&<NUFHuYC<E8i$RvqB6a`0lp|0X*r2CoPZ{ajZ}W)|b<s6t3{||B`AW+2
z!F+c_>v^H>Ve3D;$rDH{hZ(C>-CY5O13f3^fkYM8hTlgsXK<tK-&uqwwH7q4j^_D)
zXV@Ws)9^ML{c409J1gDi!;UgX_8JhCLB#cY&jD9eBeo6l0aF|Ju&sp=?^!igc)~)u
zDorn#UAH7Xdo3j0RG<6IKc+{5=u9`OK6;SSO2MRbiRvoJ@&mI#dtH7ssIT*Two`Lk
z3MPYQG-WP0>Rq!;&4AoB_>juD+B>5z!8J2~;0$2b-tcmM&JfLk8|;$>h`wQwpW4SJ
z`T&J36%?xtN|I73RJg-Qy*`gFA`kJ*7Et_nd$PN{J}~~>#(3H#1Lum<?PFEKU(;Td
zAZ%-#L=~@l37xgM_0JP^QK+v^;QcpKsL!q@p>1A3iMn5whUCnI<r<e&R5U`cEqMKZ
zpH*?SMD9L~-=;kMa*ZHyy0^x2v70S{&X@ww6psO%a)6nAWge(xgw{cSw1}icDQN~H
zP^{9Sa&*F0hK$9M&4C^f*h?}(uh_|iXV}{@<Sr9Cm)-t7laQ8fY>@N{BiZ>zh*wDH
z8)6#M*o|`n4w#Ms)bvzk#<fpGT-3*ZptQ$dVOV)57~H|C7VMk?jn%1Pb;U=gdSFg&
zeMjB|6K%k*ip^*8KINTn+u`K${A|r!!9yrF(g+o_8*ZmQ;D6fT(1cXU`a;>^{hNy0
z_dsDVvSRrMCfaXsDz(f2iVIx1y}ml!Ad&{eJJZz;(VK9(bJ45XNDd8vWsPxvopRh1
z0yXst2ihY0kO|a@iXgxIwJ}5H_0ZAoX~w3FiLox3UXuQ<v;E19O1p|0`DKAZ()yLN
zw>(D5CH%~2nY_T%j&0~*4&^DKK#iGfaW$DK(+q+xL8f4VG0M9+oC5v~RADQ6Zm+v8
zr#EiCCgD3GA94$c(TW;E;=!SRRtT25uszZ@`^u;zOcz>BamS!~CH+Z&oXGJuKgTBr
z^4_ABg1`f1=R_GNQO&P{$QO3UMk@27LU<x~?o{2YZXoG*xX>f^1V}pc7AtQ{jDZ&$
zqpXwLZx^Pz#zdNl4LG}A2sE41=nY{9F=7q_akFnA`*`d?=1I`sD@wu*QU!JPkG+*k
IzJQm)Fn6N^SpWb4

delta 3526
zcmV;%4LS1v9giK5BMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01b7Kc}oFQ
zk;O@WeQji6bP@mx2{<LE8f+jTpwcqs8cbvY+is$1o7tmSnm*e<IwPN`R7jgi|N0QN
zLW$k-8R4)PD^KR8Z2$cVcD0rHA0SygpWnK`5=ga(yty=4bzV*StP?V66X{gI*wb7x
z2B`%|U(otz%pL$Af~F+11xQv{NhwF%N;O!2wrk+VHMSl%jcQsjIYkWXJdjME${T+>
zzN*Sz|HLjeZ}EgkIyt0bSK2}o5wc5U>5nmAAO&i@MVZc<1nz9&tHaA^fEx=e`hu5w
zHc$k4a5w!+uXnE1rg7qk3uzmpQ~T0x7+bYM34jm;2XX^9acV8TU$p$p#ioq!0ZHk9
z%}Smq`PYqR(Snm;z&(X(T3?Dv2sT=(r4wz-$2@d;6g6{iO4b^pK#IFuCqaUgoo>9Y
z`H1}zcb9mNDS%8Pu*)P=LtSx91dNOv!5=WmfT#NtZrAKFtp%^1mZ%MnjIaKF6x)2s
znDUN!_)r&t7HTjz;T7wkb2Zd+1k|8^cx$v`<E$$UQgw{%3)yUO)bk^sn_s>T&Lb~(
zWGy!$4wq3Ik`tA)e+_N(TK45lrx~kVp$xgfYl?Q;yT9kkF{7`DH_I{y`vrr84p4$=
z)<to01+=!alZLgKQ`iH)yt~5(DxPwz!P3PZ!l&qfydUhUw@dl(++8s=Rvwpsde}!`
z_3tIh#>%&I{VqQ0t&*Mi5TH>ac+_5kGL#py9Q!vNr~6=qlFIK}FWu?vD*J4}c#M?a
zj-kg(%%LJxsq22!9h3YXDr`EXFwIyRSt4#DqKC1i09u`~e>0{-@AfVZGKrk1chG;V
zISPzOF}!>)?2p@@MDYrHEH?#z!$hx7ZiU1qGI^k*(i!nRF)$JL(N0hClE29KtU)a9
z5pozeAjIy>2|8G5pKbGjbleVdH};@;&F#qWa0yPh-&N+HLN&zTcN^QbtV5^VcY}M<
zN4x*NVCOE1ut^$e6MOUW4RxHEzg-IHgAm~Bmvh%BdZWB`1nv?&4IE~FjT5i%&2&&!
zT=aGtNSnt<gm4kYh%+uKeoytj?3F=rV@w!-rxRSTh|9$c?tcbprkf_=jJq){3u3?t
zoNk=@FNfSt@aH9U(RHIq2%j#jwbpx{DH?O=Fk5L;azXh7EUH+eYPn>-lG?d>xsR0>
z@N{te6-xJDHdaWkv?)@5xilqQ1Mz0_d0xAVIp+VJE%Rl#NlptYLHH*ikkcGo5V|B1
z#ZnsQZ8Kll@SAXWJA1P)0{}Y?*9Fr~IcFGH1`z^3W4l5BtR%xeNe7Fae$#-JWhVbv
z0pSdBjRl|2bnZo96eEs>C}+P(5OwP|{$l1zCD=ur9r_<Af^AQKQ(38*f+m)zgxsl6
z7G+20j(P)8Ss=ptX7)rll|2ymkt`z?ly2@spuH*#xo?BpXs_$ev|$BXHqOwvhofQr
zp$KG5<6u9JIu!R{&P#Zaqa=xUJTxY}Vj*dMkE&ggpY-ZecJXReYdqb+>=~_A_azl7
zpyE3gwk@FGgg425BhiTPleQwP?NFi29U{Xb70gLr*n^+wI}<qhlL@_cEuOFwY&C(~
z0msz1IV(D2CO(GSJR8?z-eRg51G|bwsZhNzB*v;ea4cNLO%-%%1p(|4vv-C-9sD);
zP&5aH_^VNvNu1@^7x$tZ=d{<%bWZfwQ2UTtpOahxDnr|Uq7v|sB(NiO4VayneHqKQ
zGtQ*L7o?;jLasZvrk}cYPp({ZV{}`u#Ni;}hV0{YLs;&ut*Dkah+~^Wtf(?rcit~h
z*cgE7dkIRZfpq5gAWYuBSLH0Q3~sE{r6P^EMs1XBUq!%Hb0KVc&77j%7?r_}ACd2#
z7clmvyT>Mf>}i)M!3u%=9rc_`3RhggNGL_5Sm+@45L+(Qjt_ZgAdrHYyM2*F!l7b_
zn~>*ZiP6-?KXtTLQKGNN(r@z13%&(Y7&?t4rqoFi$Rci@=_J30k|GSh-1>vv8@PKw
z$2bNA*l0>;rfFII&4OQ^`KeG#zl-T6l9aesbEw#Vu#h$Yw14xNZ8|r;jM}b=ItW22
zcSorX%ni}CP#lCrU+56i>9*+#{m79)9hBgAX6ROLe=yYd_9XtUwgTUskS3NXmQ7iy
z5UH9NiW`eYk8~oBhqQF>?%cjcbT&l<KJ#^tF|qKq=HBmt`kTY^bq$*!#Ohf@P$i>-
z7_8%eibINzCb7}sk6%qNz8!33O#gEtbPqpUk-hIg6t}w!9>Otc`|zDo6;n7N<bGX&
zb>%@=6`hKy%2SImgD&{3n@gwB7gtif+ex-zkz*-ZB7ZEu8=Pyz<;0OMsCK;RRNKzD
zIyBlC+4BBItpk*=Di)^NuLyao0ek8r)t?D}uakiAj_JrvOoH(PKD-?CK|jQY)|;*K
zf(WVt`JWszN)ShQwNS+39U#)(p8;G1ey)TxGtt#kZG$DSy>X1a&>^5`ZATtFcFF&v
z+(??f#5Vraw}z5g_B05ZcU3qwYVN|rvnn5*Z$&gKoTS|lmyycxI=QSLZuE9q2B$rL
z4+ren?oD!g7RXQ<7#+K?W<+~2mB1?gA{mw7H?dRZPWbWrl2F8x41t|5LZ8<OY*XzB
zwa#4@o5koD0U{RdW~t{wKeD2-^@o%H1BbOF&pCoeNN6srlns=?=G4FWVyi?rT!bTo
znXMZUJHuWWN=^wH9~CMYBbgfME^JMIQSmvkZ-Pe@P#)L4EaKW0pzzHo2;WWQ;dd4-
z0PVT#0e+-Mi@df13qSR|OFyY24@NqMnGxa5E!SnlC-F@DK%hdmwDX!BNHeHrb7>=u
z_e^P>yvZIxXGF0fl#9^VpjCOvOhpoh>ZT++uP!K1E7OXeYcnGJb8Ml0TwWG`jxOq|
zvX*kt?b`A1CZqKfC=YOYU4}w*c#P0K(X6uH$&p7L*Sn3xFRDArqKO`9G~gW{f>n+3
z7HdUAmlarhaQrD1*!mZZ1@bRc9O{SP(jjQj$nCbo4#Du2*{Z?4IAlovZnJD5a!bK!
zu6%eHelqCy>H;kg+{Ln;MTI?oX@-l*{F=4rvt2<qa@#kU^g&Hfykroin(}pwaM*6B
zFL#de370p0Q-=*CZ2(3^SPlDQm+z48=>WotDiH(wr#JH~J8)4d!(vurW+w%~;x$|!
z{3|;rRS~%%#bk$0Yx*jy&3TCJa`2X-^YOb6tA8eb#+X9;yRB)N<ZB&&pW}ecxhyvo
zVLVAIEtbFuWX(Io`Z{PlySKbtl#w#h2*a-RAzsqjJ>rrM)lJb^%cb|oa-zS_ilRAw
z{}8s$9tYBD*t#mB2jXNMfb85jgN*)gqKz2u@5y2Sd~cPenfD8fEW8aKz4{&w>Uj5f
zzY=0h&4;y?3<&?_f>u?39$UY`modR2^}e}uZ(C{j#|*$Z;%lVy(vBK~U0_Voj}0zU
z9~IbdVL(dk^WNqqdzhdn)caBRY=QHM(K43%-!=g0*n_sn7bxE-USVM-VA{L)r)e*)
zv)Z@JNGC_TJxqD#JB-NKs|@e4N<0YyJyd<&;+#m%nkchqIB*Mpm$!a8v!fv<k0t5E
zM<fSMQBGNek+qfY`&f^5iF!g<Y0)FR3G=~<IGi2q2n-ig$pN+$kfD3mA~Ww^bimm*
zH&?z{4P_?sTrkcA<5imMbps*QTB(ThDH%_MIP+Oyxw}VZjc6kDbz9t4QSNVkkZnpG
z7yHuYLtGcoD8%4@u(a=Oon<qEs`7Bv+1E3hQO_E=V90(rsZYFM>c^hi5pRG?qmrfy
zUZ+2mF31jGD_Upf6AGBo0}^^5km1BuxQ;F9j(JHFoF$FI(M6?=Bj_pSKwm37b+^V4
z%_njkiU7(_u2=!M)5Y4<0hjl!-Gx(;wZT<4;38KiNd$y{5w?Gpv2_ERU~IXiRk4=h
zl__g^)GnN*%gxNzd}SJ9_pO5=^%HL1C^i@=-j><CR}-s7-wTFK>L1&<67e=?qSFst
zP2%l<{+n!pnBuT@%;E-bET9GIflaYWn?5QAfsmj;I`!j<`&RL4G>voWkE%3j^XvUc
zGBZLi0(~ieDEMb3&|6)A+|gX_ipTElhHb(gTkl1yzzmXTLv%aT2tXe59|a=<#z{5n
zn?EzQuK*?o()af)w!gw*Jkjp*ZS*P3f8HA)+|x7v|KI(EO7ay?8}OpXuHUBPag;yi
zdhwz&)S4TtJb;GmKF|I-8Li4DHm1}3YCZ+ulseIW?G;=L&+fnh?k*}SN_d*h*R3Kg
z2Z=6N4`+u5ifg3NO)bkY78OH)tq|reOI1Y0Qz0ZfRbMv6`)S2{)Wdr>Z8BqP#BW$F
zy>9|hYO~Yl_%aRl7f(d`UnF=RU35LHH?mc=%h>rB7fHeSb9Ixs*mF_&H5~xThZBop
z#Fa;XDYUCiy}+f<Mv!JHvMz`5Rh!c!i8d@%>L5s8U+{7gln$a=2wrLr>7a|muX_o&
zbeO4yJw}*!<_o;F`G6ydh;2Hzb_xUU!{~fvjU<5|)IY_&;;}32UIU&^+CU>5zS?fG
zIt-=4Geo26Ig=9jrmUXw5ZbbRH2kSa*<^MV1#`Scw)T07^D^9S|3uIY$|hhw5Ql@e
A-T(jq

diff --git a/doc/check-health.d/notification-08-state-fail.avif b/doc/check-health.d/notification-08-state-fail.avif
index ad049ac8b2c29635a4344a33be929dead82c1ae8..8ba7bb972b7eb6388630d2b711071cdfa0debdb0 100644
GIT binary patch
delta 2936
zcmV-;3y1WQ8^#!rBMs|qWprTx00000001G8FdUInC<PM$01GpbfJ*^nk<3Vc3p;IO
zVRRAz3I;eOryOh&GNu+xWCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_liS;bm
zjgh$sR<Ubg!1WSaDNuh!;i&1`;JD!cTud}!n0C5l-8BJRa^i&jU2wL2{*F{>B{#$}
zskEz#P?g)AvHY997&OX$JGuaWdzV19`I&Bd4G6Pnq4cKonq?jCYALl2v-UkgfF&Z|
zz)ND?Hf@oTn9D<Btclx*P7Ts$BS#A4`3?Q6L=T>M1&0tN`)v0@!!M~4gPC5DTot3A
zyYIm{%&~$&{4y)ZymUh7jxG4}V_0FlICL)rfpd$BGf~4G0lx0WLP*4aU6IWsc|%wt
zLc{ar9gTojQ`I$uIj3uVLB|Yw8c5sxCIwYhpBx_KM5hb!9U85V-<8Io+c}lr_lN}T
zbs^)>(TCEz^b$=h6*>@`q*a(*Y9tkcwCyeYR=>R`@K(DO&R+$g0{iN;!r;$?pD^_(
z9mcEFn9j!@010ejr<nGCSS<`KAt<Pyt)F#U?#&hYM_n){XDA1-yZ}JxwIL>u-L-^e
zM9_My5Tc?t=T>Ut%g{dbxyt`lER#`SpL<i{Tj)0~7Zq&st?_K<uS6%15yZj`03!r~
zSt|=&x*b%+Q`zKA3UO1grG~W0$d%f|Dqc^${>S1Zw}Svopj0Y<E1H)r^Q3&l{|T;R
z)Oi#m&1tK`?j3l!V9G+4#ss2{8cG1StAoRaM!R-Pvyu&Fq(d|)c0mgCZl-`RgnB2=
zAY^Ol=F4l9-Z0zZORwnjxWcuasA)3>KsC__yAwJ_*XlnkaI)P&v`);3Z0wd7Rzdma
z<`cdGI!KM;E7!Jv^7&e$SH_85z6v3}r&doEnvWt}OfOJYN)OWziw@zx5<VWamM$UR
zD$n9zh5d;Z6Y~k0oF*Rwg-D=asj{!Xp5ZG{O_W$Jhxo_a86K!x*jyBUryEBtmnYC5
z1xdNxgb{X|AiOGf<`pOyE5A0agm}BsRXvd{_|l<fimcdwjer&s?%!`j`@f=?-XEVG
z|LPlm0i_6xj!oP{0qC?f>B8gFx1CJ+7#O&<*WS5_zAi;(CT-PwwJE4jJ{(7K9L|jt
z!90A^AKns;`Xkra<wQ=a;Sde7YaDMR&V8dlsI`uz(&3-dqtX8ts{t%azkde{DGSTY
z>-RmlhM=u~kx8(UVpUY?pgTo~U+EjvPJBs|PwI#BI}=nefsY1ckekX?D2~f7M=9TT
z0ba{ER_URY>MZeD{!OC~Pq!zhm%EXALRv-)F392>dPPrhLL*e!ck!8ZyC#A9*^Bqr
zk0^MWD1@<}loqY*b<a{?Vnq+DF5w2XCeI%})8-m~idudrn<k4=5nSKE1cO``KUVti
zta)MuAoJ!UcNsZq=d~&aDm%sn8fqEN{5^#s5ZFnk)dVGp6UkSO>Fh=n3nT8G)eWlt
z_82SMep<SCF98NVrW{e?KRM9jGNnox2fque-WcQb5$8$yQ|AssBWm#)rN_?lgxvmm
z3KGD7S~n{@l~2U^Hp#7T9%Hwo<GVd!l*!57DWnOUg--lLtk&1ysi|kkA|K&dN3Z4=
zps{EjOsuZwxGt{-h*D|B?e<3Yv{Y~|+$l?_y0gfD{@*EHA*^_fpdAm-YRfpJai>hD
zuH^hS`v{Vn#xcN}lsAbg(iWBv*47dwMqtN(Ov4Php+9tN1?%LT@?l9D$10FEjE`4>
zNuYf#)gY5a0dL*uw`jT6+|)y~<PjH)qTGg6C$DMg+K1$78ADPhYgPXaX}Mx0bi2|P
zO8&N%(HXaJUC9Cu$m#*%pv*yEiR}>OCRx;Xcy`lv3QHmm?5Neg1_|l!q<0BSuODfD
zU1$0dNMey90rwwmc=D+dYF~W&B7o-RKw-lqafG!-M)6ckylb8?P>N=^&M-T@zf5d)
zyWP{)btUU^?tPjtcVw*;#BEB~S0VqE-bChMlTq<5?A$7>LciN)N1g}YU&AT|v|8H*
zR#9#kZbv#uqQ0!wC{x{SA)k-eed6SQ<fK+dH`DCC3x{yyxR9n(N7a9$i`o~dv^F|y
zhIyr)cupK5yu#Fx{n6zica;?s)w%7aT#YT%eOp86Ol7BV(bQC8RZt5Q_zTSS`vwS+
z3R1ijO6XO<4G3mDe74$_9A!l5m7{-TOK~)~$2q`7jJFzE>o<!WAP2f>Ye`jqw;IZ<
zGjFFjq1-2jf*}5=T|#Y~Y1;UTSt95m=_)`n`#bNFjS}}6;(!B3^Ir^-QusWd!e5H0
zv253OjQZTTzm{W-CPPGq%afD^=hmrf!q8IK7@`TKXd7OgZM0g=lh?Ah;*h7^{YlU$
zqvCUrR-Q1o2-|8jqmRXE=zj-)q-X*E_yE*Fu8Lrk?>(-mkKU?t&;;>_-9p<GkWux=
z+WUXZ(00~jD|+vOP5XgOUopWmg7F?rQg!__4{hAI#?NG`w5d4%)rF&?ZG<Z|JA!UC
z%+UUlU_GPhGXO`9R?>VWTZixe>PrfS2QT=t!>Oi1k0le93jF3eEUa{Yg?T|JMrQ0m
zJoc3Bm|64=2Z?NY`~=dUy|wzjS~_aHgo_j1C+e8be|m13dR~z<k~}N}SukPDav4O?
zPl9v1P8(Ns4p|4Vw_x)x&0B_pw_S)QI@Tl68QHKx9)8%Y@Wwl{iWXPg7;IQ!oDK`v
z$U!I|lpc@XeD}&GPvx0^55@ateT!O6E$WitvUTNI_ju7e1B@;nC7shxod#yP&NFR@
zMrF^@&5@>=+s^6v;ksp4GP{N@!lSNiuvo;sg9i7yW2^&higgFYr=|&XcJzs!&SBsZ
zoP3Ky0-r=!VSoSjl?^y_+4s?ap&BowJ}wMXp!@5Lamh>(;{FeR;`7G^y?u~n52n%u
zeexXGN_T4Zu~frqrwu{8$*hQ7m39nY$S;36Sn$7Yb?==fnVlbI=6kKNzDca{VMXy(
zt{(Os$Wn~sm*||H+3ND<OlHi+W}t6H=ZOtUUp1AwDjEWETW&auIr2icyP-jV=fK$4
z?GLDb^x@t=BZ<U+c{fG3rwRo~<R#6SDi9>>4<YI48=oH^oLgV7_EuG^_*!SMhT?y8
zj=OFfF;v5Ds(2-i&PJh$I`YlL_c$1}t=B~TD#ldOvag?yR@vWizQVzNs{<Afa@f6r
zNZJEMW%Dlo{~s)qp_Osgs@xaE^*JYz`#(L-#f%qrLlcjG#>+?IpG}^g1S=@n2_C-@
z&o4S)JtVt<BPY(WX6wM;Oz45_D`ybadY8P@w?!!8<Y_vq2yE4;a0qqf2N3-tcC4kF
z**9Xdzi!FnFHz!nE8Nt~)~VpRc)frbRVvtmoTyo$;PLhbZabhU!XW&|K1n02&!U`Q
zi&hfZb1V&i(Im=>e}u6X#xe@Iv!1v?`M;PY!GcrEk=Wx(<JU@d*xyO>P}NUVXJ_-A
zge&46gep69RpiS!P1287NK2JGRe|Vm)Q>t@@y0orG+_RVTRJF-M%_fp-x5e?w9#-P
z5foQC;w4@Gj#3jA>#Sgcn&BAMx1Rb<E0+7wW!NKsb$pR2l)pJV1JE{8IOCo>sxi;`
z$R4z&=tbS>t637v!YYSD5b-kslIwhd5YAMt-a@Kh3n=ZXvpbizw#3IemcxU(9fQJ~
zhaAo-5TkE>{lj{lc*khO4LU46{Az+v!_*96;QF$@9O`|lfV%%3xw+{~vxq?^)vOpq
zkfkC|5W3P?(|mpN737DQL5K}=H!cn|PCHZ!O3GCMIB?qmw*&{sWS9A@ZdHcTrkJ70
iI{sXQ+I<&VG*dH^(09KeO;0vsHP<$^ssw*{i?T2kq_8^x

delta 3272
zcmV;(3^((}7?K;1BMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01SAMc}oFQ
zk;O=V41jH9VRRAz3JEwRry6V^A)wMS=on070^4q)X`9)jSeicDKRP3ys8mRsN&or~
zwnB;B@)_Z<7%NZarfmQH3U;-X`5z!zJfGjXz!FHcePg>Vf<^KnG6B@yAGcxON6DO_
zHy`GS`riX?bo#!Tqz+Ju>!Y$GYus?Ssn>>oM7Q`cjctdG<64%C4pBoo&m<Ek@`m5e
z@2awwzwrx=Tl`@Y=K_`;Vf)$N)aZ_vR_K!01t6TZ0*3HMaRdh@kXFmfjeDqjBr8wc
z8r=CLz>1gEjaCb_X`FbX0@_CC)c*9Fh8FEmf?xyz0o;Ji+**rom+e0@F=?Yaz*2gD
zb5f^@K6T?+v|yyzFb`o`mY3p^f(@3csYKgy@y{I|g$-QW(zS-DkRq<v3D97rFFj9U
zEn<~Noi%x#kx1cDZ49};Q8)h~8BJtp+Je7-C~h;CmI#mg_G=;#Z1b9Rx9osQt51Rw
zI`$|>9WklqQx(mN4v2*MIK8N1h>B=`Q(tNbG`khhDX|Gv%*N{0DgI)0N}<*+TJhw=
z0|zT^*%&HiWDF0abZcmZNtl7#`MvQCW&W^ho%3FE*GRcbL2iv<rKQiDO^cg>@BUjo
z1k<dF;^YfyZD%J9YcV>q_o>+u>#&dKJ|vZt7*U<53yJhIIFjeyyR*8u@Bn9jV+Sh(
zjI(s6qL)%~)_U6#GS6H}1CnkFLcP;<jvT;-@)?R=vV-es^z=$!&_Rr^_H~-sQ%L1<
zGB_{Zt8i<UUrsgtZKto7!O1{EESxj-=a~`TIQ)H&LG+$O7J)%^;*Mu2g>=LE)`TRb
zojb@~j1s8}PWKNR+@S%uKssQ53A8{{R{333PU{<|hOA55y@A<u{5OM2Yyxhj3BS1B
za~E2(#NjMukP;NMWcdVVgbi1j*qQ0LYaR6b9<Q7=V`xISwn^cOwpQ-gPC4q%OuMK(
zHTvh{oVqH(Bx$5j^CHXl9Yol#2H{d4WS~~|dIM6?y8Aty3#j8g&@i-rs&Q!%Qbhjr
zgdn9NZyEW7YVmnQthlN9Ki2!QRRzV3Fk$|jO>)8`FBCK2f+Jh&qP<=AHFoBiN(XFk
z&4+kI^sheQAlSC3u81-GD>yOuHAIOd87`cL`|LE<O1<PBc?jfaSV%PyZ<`%N+puaZ
zGL$p~Qd#wv`z+N+Yo_Oa0OwL4mSEdR!<*W_v;pl?!vU6(LVLJg^lHIMJ4T>Wr9(^(
zp~}kj%Lo*8Pz^EX1Fo{PAhWoB#7YAO@+z_G*<17_%&qOEv`>^Rv~Si((Hts{w0F`@
zykpe*3-7Nx0>_T3*I+6TgllO)lDD$VGi}G=LNm&AR08Jy$d<T&wn7J|tK5lR07$pQ
zf+R`{tN37bs0QLhYk7uBJe0<m>}sQeB(xEg(<bR(+aXI|qE&O|AtsA2;hairl$Wz=
z3Z{%MKXzL~Rv|T)!>hBdEC=iR1{q(|eJm0}mOS^t7fqJ&0s~ka#V5GcY=5F4;z+u+
z)LyS&p<U(P-p9~?sV&pWCr`L^Z;svQX;9t<7#BUXxcnvd&LcDFgcK7I-me@x>9T>l
z?-vs6cKKQZI2Gql1;GF%X;F($4i#~8<*I`nV8yggEX0h12)0{3?KD&1n$fcLQX!h*
zG|Zq>0Z?r{PDu;3Ts}XN&n^9wL@ZDh86F3_?IF2vYa%9p3Q{IaHZPSwdbZ6%Pi8qD
z{}BrBQ%8s+w#uiA1^2B?W>vEIeZ8M>*K%M6JYTLWRS-HmEC`7Fur>%4uNsMSDuEY?
zLGZRAwS3(vkmvEC{oXT!c;?ME{_uwr8jc8y@!&X9jI&MYyYLY?$wLAVz+j!{1tN?y
z-6lFSFq9#GJ8!|x{0~B$4-SPN8A|i4(5NXjWwc-yre~b=G%qPAH{mXWWpn7-K7<+6
z(l#1VED}-Ks|PW+T`%K$<*##1GO6Jd*WhP?A}RaGYIoKvmezZ1_9{Z&YcjHVHoY)L
zsNO|sH6|RapIYD3Mg^{#prP>FB>W*qRmOk@>+=+U?|=Ibhv&ieuGrLw`RdXX@O87e
z@@`a#7=Dv5pJnF`)_XIWo)BtA_k=3&7!@8h#X@Cj@;zFy`oi5ji>@D=`}da~EjT8f
z$LQI5?h}L)C1NZzp8Wy`^innZ8;KTwaXXiIAOthd;&_cU?LKa?tkMDkA<qh^k{NcT
zI~s9+99%sr4vkB}D+|7D8R&WVlCFiC(EvX*FqxUlhH369p0*GDL+XnhnC|gkGF&d)
z<^{sU`W>ZgvF*Rn<!9rMdkY6+s$vkX61|Q}SE>V$I{wqJH6KM;in}9TbNa!!g<+|A
zNXB)oy;7sXAk|zUa!>Mw21}35npo2X59d37QK2faU*wPCIVa9nq^Xf%t3oi&pW?q?
zlyhdXk|48np#Oh@T?3E)!J<D}xdbu0NU@BnOCd+v7;*!TQSXI2a=<JVQ*-{@`d<_;
z(e$-II(G8i`P?@R@h#gjM5ZURhVP_70OXC{)iXW#m+OtGLxJ@7jkSru-j7O`bJv!C
z9WePCud<k>jqTtI+g}J`HsJu;LyB-m03WS)Ey<9D>@K%{4D{I{o%4134&zk3ChpuK
zy>Db};elZz%f(c#Ol<xq8=Yi@yzTPrE@@>O%}RIrZV#Rff@q<=!L@g8n&~^Y5AJJb
z&=tp~kX&fs^n;BVr|hmdB8pGg+x}*MFtC-*>H9LyYwHbn;J}Rj{?9$_{y!pbGSu%g
zCyebfnfm{N%4#}{5#}smC;Ql2q`@tWc_I<y*$3}tOS*X=z#x05vi}f`z*`YhN`)fc
zh#>$WfMD?WOlV{PP~?Tc?#b;~se77MqEiKdh@~&$X?h+2LwG`6HMRU?jQX^Hblb7b
zab&}7h(q1yvK7T<dz#qKZUMc$RZ$`umzvIrrpVagO)r)MPq#m$N4FB>C<4-`89b85
zk!Rqy`^_)^%&)MxMNb7J=0Lgi4TheQV*3+QD6raaNRz|q81=%|+wg-)_Vfi_{ONwe
zzc`*4#bU(DcLepaR!&H^Fk>@+)dI=T-u?GHBb;_D3Us8q8noCqDZVvk9>Hw}buBCp
zK8!jtJm#7dizIdm1@g_M5SW-@Thsg|5l!kMBv`ELt%I5Ps}G;XfA9kQpRz;AeiF4r
z;$7-G6&Du@EM%WuKT04He9WhRI+BLO(>9C<0+>L&60ZYo>(liAqwb-9S7Hu@2!d>t
zgZ{TXn5W$Bp?;K}kRU8~lrcU;ES+lVe?V35ofU(--DrJon&Oj%2A=-EbQ$^WvDgKf
zB!CVSOhf1Z-%q*O`Up%z!lSA?gv;aOIA-%@8<d`eeV{ifi?Av`^cpFGy>>Amc%UpR
z=7sAV0k{F5F~r|*xV1Nbt3rWX)^9K7zq<>3RqzgvQCmTyDggAO>^@PMw_TB+kT;K&
zqe-e$m}{^L`13{dc!^c)v;Tp_*Uo;FvC{~Um<fL4T-i^WUNS<L;BL{~m)P5<r9q6Z
z*jIVIFPg<_syb_9HP|Q`qT6>ba&8}wvnt*k!o1kW0j+7unD$(M#E8hj1D{|q4h1%r
z35W>0NQ!-{Fh;lDCDSXQT%LVbW>qb*!GJq!ZG*wE`qbUO*}n_un|mO=n6n#8YiBL@
zR!0?vm{IJnzgJi1D<E_+?WzCqW5zMZ&rdU;s%f5tF+LlndaK!NBvjE24-WX|x=pr3
z1W%6q3D;kZ*)g1dWV}&A<c4bc)dA`Dk>Yn6)%=g|tvh(e%1LGB-4h;-FkkW%-#2!N
zgAXDhDT<swHz+BNf^vCWBQR}`W5xrXF^h6BWc*NZ>ZIyhzJ+KTLs2yr8%2Qwcd%q^
zg}tO50H!zOK|7b&Rx>p`pf>l-FF^V0CkYTr=|O&ZV7jb--_4s3KN$pCaD$9jR?0~r
znVSpc`U5g`t=+ne;(~H6-BH4~=`xL|q5+J5F|Gvo!K9^t=Tl1XB6djw5|m+%(DlM<
zKFB&{y?%DBR*xrmySY~p_K-vVY)CTKlZ;`iR9JlOzGdZIAy86tOC?O%EG^2D5SMA(
z_SJ>`T8iO+raeypK$C~xC|Bz<R(kVXrdT(oWlyJ+JCnL6Va_pLVg?k*xLv|rK{J@h
zowq+knz37&uVxo(zD7qCdjuKb`;gTGpg<f*k<_jb;QA$d67%s*Iy44gpy&0}3Vp)f
zbWA=yIF(npSZZ4*r0XY*05;n<9S^CnZdaeL<ELO3s=am$e)X*ti|#%`c439e*u##x
Gc1tiqbx5rM

diff --git a/doc/check-health.d/notification-09-state-ok.avif b/doc/check-health.d/notification-09-state-ok.avif
index 26f5a745ae9332b04cba59628aec9d435892aee3..91977416a1eb10a2a8c88237cba9cea645a3596a 100644
GIT binary patch
delta 3061
zcmV<R3kvkh8^RfoBMs|qWprTx00000001G8FdUInC<PM$01K~?fJ*^nk<3Vc3%6}#
zVRRAz3I;eOryOh&GNKnuWCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_liS;bm
zjgh$sR<Ubg!1WSaDNuh!;i&1`;JD!cTud}!n0C5l-8BJRa^i&jU2wL2{*F{>B{#$}
zskEz#P?g)AvHY997&OX$JGuaWdzV19`I&Bd4G6Pnq4cKonq?jCYALl2v-UkgfF&Z|
zz)ND?Hf@oTn9D<Btclx*P7Ts$BS#A4`3?Q6L=T>M1&0tN`)v0@!!M~4gPC5DTot3A
zyYIm{%&~$&{4y)ZymUh7jxG4}V_0FlICL)rfpd$BGf~4G0lx0WLP*4aU6IWsc|%wt
zLc{ar9gTojQ`I$uIj3uVLB|Yw8c5sxCIwYhpBx_KM5hb!9U85V-<8Io+c}lr_lN}T
zbs^)>(TCEz^b$=h6*>@`q*a(*Y9tkcwCyeYR=>R`@K(DO&R+$g0{iN;!r;$?pD^_(
z9mcEFn9j!@010ejr<nGCSS<`KAt<Pyt)F#U?#&hYM_n){XDA1-yZ}JxwIL>u-L-^e
zM9_My5Tc?t=T>Ut%g{dbxyt`lER#`SpL<i{Tj)0~7Zq&st?_K<uS6%15yZj`03!r~
zSt|=&x*b%+Q`zKA3UO1grG~W0$d%f|Dqc^${>S1Zw}Svopj0Y<E1H)r^Q3&l{|T;R
z)Oi#m&1tK`?j3l!V9G+4#ss2{8cG1StAoRaM!R-Pvyu&Fq(d|)c0mgCZl-`RgnB2=
zAY^Ol=F4l9-Z0zZORwnjxWcuasA)3>KsC__yAwM_!UHNPwk@WYmMK5=CG~u$3Z8v9
zFH>7I@u%vlhw3ta!Nhu{f3l>-st)X(M%f2SiXKANQ6K8kFlE^ws>VFAn-@CPRyymb
z9Te!G13?M>#aobonOS<Dt%Q_EcR}45&1)XHLylr0B|dw47cV(ChQMs&!J8)L1jCZE
z^y&RjOC|7&Q*h!-*9b31?_q#u5<1raIcbf1#5Q|p;32DjR3|%&$9^-C(*@(WO6&I~
zi-3Ydz@n&4-<z8LhFoSwul3fr;nX*)C}~{VJ7j@H_-$W-sjcsK^JHJGro>_B3~mCZ
zcUiVIXqN!;T7dywWKw7!(D)Dy%*TMz!1Z#+00OWa1k7ev^7VYGt#I0gNBpd^gr9Ol
z-+`?VYf<=r44oeY;>gw$J8$%OP~oKR{>x_IQGXa)nU?*8u!%T2*tVoHinmAmWTQ{9
zNq%suuA=Fqo=-N}z<_-=%ec+MxPI*!h`4<d;i{47-H3c$tluUQZj4hsI^U>mU$pA(
ze?c?1u#S4=Z#~&>X{bkz3C=Iiz3Hw|KCZ&A4pg6i*4dSa9jAa}A3t5zwL}e{L<iPK
zKp7klHOxUn!-)y0r|8$QNH3^%`#-qodue~(yeU1?1M-EC7))$_Bz<03BfLWgT-9xq
zMQk)OJ3S+|kWPnW04a;2kEkwpaLNke*;gO$38NZ4kXmYnANvGMQp#iTbMkuFW@A2g
zA}!8;8A6hVn(LG3Nc9ozh(<=^EEs+a77qN^{mdXFP9d5S3aI)>o}VFc)mxM~gx50{
zRbC37fQBqufC@f4>2eDl9a+vC(4P%2Z#j<|Q!hlo=ZQVD2hcbc!Y`G<I=O-?o3z&^
zFK4C}w|9`y8Bt~hn+*C_Vy6>2M-;~Ny8WzwxPw?t&d@M_jQF`L#RVSrN#K3^I%0Ou
z>Gb?Kmgv4tcNG#cFYZvV&7(8`O3}foUTL&^IwKiRMh`X}K%&iZh+4Ak4=LoPo0_RY
z*?pQI6&fWs97nXAWnt6Y%O$vUCUqIjSb@hV_QL)i%;J_?tK_x*K*xoJ9Dh27C|?wR
z?kN&@bXi?|5r**V;`#^Yh@Xs~N@63+QE9wk0fD{2xExnlzEvj4X0Z{JuHz)%%>0$j
zjbR#+Wv29XWL^uCf6RdWDavAsBk7QH*(X~RA)?@nT`Z<smaR2xr$IP*uw(r%8-Z_b
z4#;l3KO?bjDam|i_owQw)FraWTw%F?3JH>>j^nOvU^XF-2}7ft{RB-#*@hv^>Uv9P
znH6BT(`8|*#0F1hOfJJTT@QMQvHI#H>&%!GnlH0Rg(UUWK8w-!V9IuIm#&%WQ=p);
zqL*TfEVhq<`#3GWALTyDg?lR49H45hoj@`&*R&V;_B~$zoE|M2K!&isYrijlzuj?2
zGUcKL&(0bsG!zFVHE}>;`eoi7QWQbSv?=S{W&{>)4>tNye#!}h;-|NB@`ZpR;ohV@
zf`KFT+O=qeWN5u1s)kgNhI|BCV&aNR9CNOn4-?H{Hv40^e!cq|@iy=I0)wAitOr+o
z2E_bkH`N)Fio-E3hv-R)y|$fyBYwwkw<VV5a1CyI#-4?l&Ee&a(5odUCCSpd2RT3)
z>U6(0nS>EHU^JVUl%sU4GfI1?z5cbfJDy<ghg1*Lc_88ChASzbrTj!2QxBYEu|5h_
ziq{m<#KgDI0Lgqd{V&*bW{jl8A(#v^gG#8n1a%}2qp6b92h@nK_5vDzu8tL22hhUl
zFe!zga`lhu-()aQv5{%h>08Z$hQ4t;{*71XFSIDi=QRNWYqF<0Sz8Kk+q2W~cIT(o
z!pxnm&<|zV;XC!1B_u)BWP3DMUo9(kHmBcA)xun%1OmLnE2b^EYvQ@<4+NLOl?8F=
z=S5mVGYL3X8WUBh`j{ernyEzak7LN^DY|fD>jrYgmkO0T<jTBvnjfN6H0P%7OJ&j>
zS49P532u@}gTJ1o<{OEK@}zJRKE>u)Xfe{Uy1~aci$^sDD)y{#t}_J|nLmoIl2({F
zDeD5&(&e6mgqr=do&C93bynWwWghsnFwdc<HoWU%>Gx(W5c8^k7^kVS*zxVFp>=pq
zYsl?aC@ElT%<K~cL^<_#t4?E^L`M#*4S=sRz&{>wM<`#IDo2q}u?d5VGGr)GjY{cu
z%Md)(;6Qe|F9B#-kIwO3Xl3lF3Fc(aZRocn=R*n)sNSUZyV}PY6jsWVOj%@O`G65w
z@FtkuC^dW`ifp}q#c<VEY~6yAS}|z{&|^gdW}$4}?KxH7UjHVSHYYZsbT^jcJm;Dm
ziT;E~vA!Al5M{}_5y@k<sXx`ivLjUV#?QyzYtgS3mj$Vr2bg>@E%Qzc;Io~7O0t3>
z^3ZM8fiL0HRB7}E9E25@G>E9U+aj7&k_V!`XShTE{8S`=*Uh&WwptKgc&v6=U{58Q
z5|UVQ=em}OW+L~{luj~OIgY#_qTF7pn$u33nR-qvTz6}#X0!H(M)jbBj(~aTkw7w*
znu0H(d(Q%;nQ`7aY9|b!)6LjZF2biEIkR0{YfP-QoufXc(IQTWA<O%^Ssxq@#+v|v
z1AK9RI!i!*icvex^r>_es7jBxV0BM8jlWxoje(*u{t13K=1a?X?|BlO>``D4l)LL_
zV^zeqL{I#QG=;jf4QwOG@#skHWbXZAZ0ObYW>SDw9)n=vf2PTs-+6eLMGcoSU^@Bm
zCJ;plU5UD-qv}(EEB(Ax4j^}!Qv-73;nVjoxAAO$6rXb53wANwx^K;9y~S5(s^S_|
z;@%Te629H+VQLt#Bs^f&_j*_JQ{AN+<{;rpPjW$a-wZst@bw~Qbk#}V%ESJKVBy=V
zK7(LuWNi*HaaWnxK+|nQ?D{SEu!)BUwEb`MenpSgg=#OyJ967LEw+X3fS}|rN<Qno
zlIT!>+OiT&NPPM8E?y<r)bUi2(zK@F%a7>@@p}&#Uc=Rgof+*aEG2>`$ba91omDdn
z_2ia+*H^7Uy^h}V?p>qGU-)O>I5tgcTH#3lGG>m9gmQ>0mMW8bY*;>GKwW<;m<6SC
ztv-9+CH{K3?=oCSo4x((K_76C^uJbWAggUm%EK)W8sW?D9!`Xlc5SFpFI@gnfex(t
zlwhB;J2p1H<))OnOq<j6|1cr1(%F$8C~Hs8@;)X)?ei_b$B4}zmut%l4d0u|;t1bR
DhG^*O

delta 3329
zcmV+c4gT`N8Os}xBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01UB_c}oFQ
zk;O=V47qJ&VRRAz3JEwRry6V^A)wMSp&3kM0^4q)X`9)jSeicDKRP3ys8mRsN&or~
zwnB;B@)_Z<7%NZarfmQH3U;-X`5z!zJfGjXz!FHch`hNpS#@4b`m7T&X%p#Gz}VAV
zG6tyyNMF$UXUrY|AA+VNvjs?2SV<{I+)6cnShj26#x=GcH;rmqFgZmG>pYN5pUNA5
zJHD#QUjM`{HE;2RNIE&BVprNi6A`jYWa*DFUmyi)y+xVMn*{D`;;X~UXn-3FEc$|%
zdNxo5d2l!VORsmX)uwUchzn^Oqf`6RZWvp&LJ5En1P5{hH*sn$zF)Nb%*CdR?*U1F
z>CH->DEZfoX3>I^V8A_vYFb~4N(eSus-+Wc%f~!)dK5KtZ%Wo0qCkqfTqi+-l$~z8
zuK9@l5_gw)k12pmBe2UPR6|{HOazRK9Kjzj$$+Q(6K>b+F|7r!o|dQ$kBqPWeiYk$
z$(ZtvdH7Hlffi~oH{liQpmR0Ua|G0Xpm=MvV&kkU4N`TC><ig!an$o8pPOI44$dPl
zcVsO$A`X{P8<G>1vwsb3^IG=hO{W>FU7-xQ!E1_k+q=K#$}yv_h&RhJ2m1wsgAP!F
zY1Tz?as{-uvy+CknN!!)O$D8-6Nw0eEFwxlUkfH~t-%C1d)&X)49$Ba(KwiYru!5Q
zPukV)$BOBhpvqT?&Oe8|nc`ZL*)&m04opik@N!K>0tt05kvlR6?4co56<`mV?LnJs
zX^&5j2Q0R)Gd>&$V=e(hl?()L@N`~0;y5*-yF=9Yg1v}Nxrv>yF}q;@JDI7=u+QIQ
z2f<acP&sd9EQ2xj;A>%cTxC#ysmi!Ns&Y_@{RBHD&BQ6TyL792I?Qb-qUgAr&ba&9
zo`=4O(kuB#Ea2QU&$ju%x^4);D4Q|9P?%$1aZ`7%Qj1)?=0bg>iq$jLd<uB!wOg^(
z040j}RKJ~*xecxRwZ!DLxb=+3KJ|tyfk}9D(zIa_U?)b!OXg!H52V0<A;?nDHpXae
zV`>(rq)p?bLO2NHL>ZSAKPUR%c1obQv8D_^(}}KFL}lWJcT@frGe4KCE=ZIj57u93
zP5_pLO~#S?D4oX^4n!o+QFp747Hk4bvca%)Ic?u{fG3Aqu6`w{LTni3QSPQ?u(R)J
zZ(|nVbC6o?G}N&4B6)p(`0>;tS>Yao{30#&@9Jdgy1Zr2!70ng!(1l~ov?93qC>U!
zL|rRh3yHzDF)saiP*e}0r!Wy!%U8#kpA;HXU+nE!pHLC!bxRr)Q-EjK-gv^ZrVyF)
z6|y5WRX$Z95`jc4xf|bd*oy^iC<?&UQNCDp$cV$5B_}V_(EWdZP-n<M-v1&Qh{c)g
zcNCR=iix;dBQQ+6Xk7M5s!+<VN~yVcnP@n0C((K8i6Fdx)F?urLM3NP$jROL4W_Z^
zLcWTQ#zPOjO)LOZ&G1?hjU_=ZlJ<J0cC5YLaGSv|w0cnzO7ngWh^4G?bKB$^Sqy5_
z@<4>gGe<gcM$oQ*35Z^kZ1BKu*`Q@t>;hWet)RGI9UY>JKDHoWh1@F}y*(%jW*A%U
z2`(9%G3%9y1Z$YH)r`kSTi17}e*emXP>F7eYn)JZ#Q^l5--6wz<cr_jcC|!mIn<H;
zw`PUlx2nTI2<r81FVNNK><Spo`a*lUgw&JRq4;XRwgLlxVEW3n1*9c*ZgZIsTHqxe
z=L+}Op-gQ*5w`FRz$0Cd?o0s3i}l57q6bH1fe{~;2EhW_=R)6U%N@CniF@5v&Why7
zNza}1Lsp6aOy|cGhp}<wf2jd;!YRnI5#I^(vW)b=FB!okjYX9n?Twp~eraiY9Qr>A
z(4n{S&%8^2TP0EN8>qVd!H057NLT_9#Z&7P7Yu%VXbC4C?+|$5ae+vz4t+Ly^>kGI
zObTLqT<?-%8-eX?QX+BZ9WZ)p^V&FdDE9zz9D`-ZTtV|;Lr?x(>S9CNO3lBMy~k$W
zDldzEb&n$N@8@ft59L)EYzrRYX9gMw<M=8pUari4CU6|0L(Hj`y7kM`qET<OYW`va
z2stG(n(^1Aw!GgUKqRwwbwtk{KEJd~JGq8I59z-Rhji}dx(ABKE)JIRIyw&Mr&mK$
z;B>yT%v0%506Zhs(7YA@u&Kfg4>MIWbS4Bjw|-A9H`w%Fjht6M1iP=x-=q$ZRa^Wi
zX5HX_-hTMKTZL!?bq(H$WFqMyV0+T-)X}7<;6X#;({n%Zza^=A=Ig3T>&Gv;w@6Hw
zbMpykw9Muf;VeVF<x?rc8SOM(I8LB$TWSMcpgv7D!1z9*TR#E;3$1IDC#H(P{y(~3
zyi}Ijt;I2z6pYtkWP&z*SrzT9<53;L>wb=Zu3EqAlZ#_Jh+hjRMkU+RIY@vPlug4`
z9#S^J5_O$$MZwDOl{ikG+ekii>>)0T;}r0oBbb)~w$V0k+w$P8`Yk;@TAyJma$2(3
zki-ZrK@w|%5x>C1U{Q$cj$9mV94#dOhmC`g9`IF_5F&e2f}w>QiNM8fV*{dbW<%wF
z)d2@&hR16CCAxmVy1RtoYJ(~060NYyhnOL!>whhTUg71?1!)NJ`EMnah|3SE_b3CW
zA%=5eMzE@7o}PPgRGRZ-JZ|qfAzR$$m^5XMD9#(?gF39#1+tQh+mT6$H}bXOkl!CQ
z^vlOgh`mrd;5u4ksT(*)FYn%3s#4j1nt_?4<SV1I--Int4L^0KyjfknZ6wDWKl523
zW^M+W{bCrT5lI`qvX3wdbvlMrLftBgWzE5Wd&if}SHHmhCR%y>5MU?CZc$#Qt_@sA
zjoLS3(^Kl?v|akK5p^*w^j6T9mTLE@`A|w1UrTWrayTj#QC<R<%rfg5UG*7%!#F=l
z8UVuE<OEPOJVPH^kPFSuIX29@SmKihR?VGWev-=*vB)2wYhIUQWr<^<Ycyg@U+!M%
z;iAtP*RNpX79Ok61(@l}(nm%+3q6I<3KY9Kr3PnuWfWL3gHEXqv+FwqfT7})JMREZ
z7k)<P#;KXP$+^4ygA8TxVg#Un(V)*v{5?VOBLm&a1EHQx4|B2(9LJMBl4;$6$|$r$
zS;I0p;3Jn3jrDUur*K9+dVPaf`?}6Lb3v1Oyna$I^}+UPDX&LGNlyb=cZ8oS0Qgdr
zLN+u?4(^Ynk^MA#Y#&HIEKg^JZRQ~r;dw6W)EF#leulWR-#nmL^^Ng=_LpvXm9d1F
zhI3ZRVdqS4I!=Ua7J{*iZSpM_lU}l=IcsgsZeK{o9>H8g%AKeWTxF<LYzIz72$S>`
zB*S5E+K>#?P6{`1Q|g!AV~0m8_Ook3{}5=lc=(rEg||i6!NcxAldKe+EZ%41=rGt2
zKk_!+1qe|WW4x;jQshH_ureG@N!icJKPU+P2Mv(U9kCMQ_zn7oqbONT&32-B`z#Ot
ziI%JfW-4Son~bydt9Fq1TJFmtI055mG+;MBZf2oZP*`rH?^SnLDjOMZgx5BYkdf5i
z2*trPNYmxmTv2}c=0Bfn72jHmT)LB1>8Vf~)>Hr06CtzXc^27!A{O{zWCSk71O=#d
z1ZQduST<jEw9wXMwMgaZ*)I+U1kVTaKZHe*7D|ZVRA`x_onJn+X!xtZ*Y$!2x>??*
zETFw1PQ42a00J6eNiNUq+iPDIYolmu<Q={M1-Ti#hQ!^$G-Q*@bsHMWf;@aAEOSdf
z{kWi6aYXv+nafjuX+9L+?s{EqH>^A|X){vY|Nhg&0y;8-vT&xGF?^S74G%q-CvKn#
zBfY<iPpRiZ5+4@o1el82uJJjXF>j<^y{tj>E}DrBp!YiP(Jy~NwN{L<<TQOlNEqs)
z(b@?IR{I~aiyctpMRr5W&5w=OT>pT+nn=DDHql%(X<n#*8<XMR&eM2Sz>@^IwxW7C
z;~tJeyXv#T*K^MfH`+|Ez-hl-TfPhlh-C-<+?*631d=y}TFJh5Fx?y59?hMxvuXJ`
zyHO(^CBkGWEtYrhbAfe>ooFcbdaRgrGJalE^Rr;2AxP4hfxY4g3}=qLF<ib*1mV{>
zfP;8&h-JusV~pbR{(KDWk0x1c&;C5ykp_wBF&GXKx=MV?vc)-<tjhJlJ-!IHG4&s(
zbK@V+aRs}}*zD8NvT4{;l}(+0!83*$wttfhQCP!r06yQ%^bBbc&&KgH7^X^;{HO+|
z!P->S-H2vbX%E(<7O8n=Jc_D)ov%E|;~Td6tSFXHZ+R+0?|tAqrzz?)pD9doDhx|0
z0Akl21&U)o82{RYcXAsFpimuq!2~6RDePVhkK}E|#81g;@r0<n3xqe`!M!;+=mV>h
L8cPa&?^OSQ-HJ!q


From 3926d1207098633cdd2a30d597c8fe2af350825b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:38:53 +0100
Subject: [PATCH 953/988] doc/check-lte-firmware-upgrade: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/check-lte-firmware-upgrade.d/notification.avif
----- >8 -----
[rsc] ✨️ LTE firmware upgrade

A new firmware version 16121.1034.00.01.01.10 is available for LTE interface lte on rsc.

Model:          FG621-EA
Revision:       16121.1034.00.01.01.09
Firmware version:
    Installed:  16121.1034.00.01.01.09
    Available:  16121.1034.00.01.01.10
----- >8 -----
---
 .../notification.avif                         | Bin 5077 -> 5723 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/check-lte-firmware-upgrade.d/notification.avif b/doc/check-lte-firmware-upgrade.d/notification.avif
index c440da59460bd6de4e5958bc992c5e4d1fa45cb2..2c2f692d5e473b0945a80d115f03b438ad73aa38 100644
GIT binary patch
delta 5542
zcmV;X6<O-lC)+HLBMs|qWprTx00000001G8FdUInC<PM$02N4)fJ*`Sk<1wZA(7@T
ze-%(|WMOm?015^;W#=D;2{OAXOk@JvZlY<M*`rvRKHEP!BcG^Xj?bg;s>f>r<AJne
zm5K9o`%oB}L4rxTTn4YzgxJLRjWIf_DFLu^4}EUl76Om@N9I?h(pb`vIpg+5<>H-D
zu>VxHd9t<@V^0z;(U6CT`Q0NmYhQ52e++xN+`?)Kb}KE_@~h0>w-1wI26Nx?$@Ke^
zjRK;iGukvNMtb#?4FsVn_uCGBaSMKLt}~z-HcN3FM2@i;5`cSAOM`TbzzIQw=QJ5}
z1TJmn$B(aBHuo8$Au#uXT8eXbYQ*7sTcyB5@sZ$RY<NR*{1N#kYG*^c5fqY$e-}iv
zvs`DS4kf@r4B8MI8okT<idD*Y$O{@fP=?2nPy6|Vranl0wD~{WrrSes5AB^aUM7^!
z4s2n;m`h(|7H^W7N+QXVWPG9vwt^T6LI5K;30%A4SUyVcEV@@*Ei&1WFw57jSV?eZ
z16M^z{x8bGB4lUCsUfvH6Hy*Ge{P78u>H=%IgCqf74Ez(Dj=FBS(~8hE<46h`40AG
z8cxJ#HrTuq=IDD~zHR*+2ozpI+YKH+20U7=+VE3O;QcbIf;HwJYA#Z{chvF8k98jQ
z%Htx8?sHm`#sr}g`E29Mv~C-Qdv_0Xj(7G?@7)@u00>G)H(KA2=+T`7e+!&@SNDq{
zz7ne-I(INC8C@^U>Q~XeqY%<?UZur>)1^&ji34uU3Z@m5$Biv>A$L}P^{ty|;umZ@
z(Ahf!P#@xmZYqQL7|e0W9Y71|jP~$}Rls?mbQIU*@6`Mw%?u<K{KgS7zElNGhPP%K
z%at5=qXZ73a^-)tPsvGae~}T)klnSKI$kH0qEr~b#00FOp_P%AOlA@ba_1ymDI;w@
z9v}PE^>5KK@B096m8hfG-xl?`dR@f%dgr<c$Rfw1pV~qdk%hpGD0JE_KdhARphpd6
zKp&Iz%1*tRZ7U%qtB~VPYvzk{gRIt~4}5aLF3a)I9HsC0il1X6f3Xi?k@*5`j*2QT
zYg-ge^4Tz{G|qqz*ABD(vx3Qr7yE%bv|NeZDr2d!oc2ERp*Js5cQx}z20-u<5aek4
z?qjrs;@YjU6rdho_;R#WydU^r5*~wiUyA&0m1l{_hWIKlC-z{NaeHvQ*ff))Hg5u0
zyS(sKb{2tO&XmdAe;Y;v8S`0i;&tGf^OrM}-v`|Cp_fDXs(w|ykL^&nTlJ}TQ8m_v
zT64J_(Ww|k;9P2j-Om+t%^bQoIh2=^Ll4x=%vc0O15x53a^5XZypuwV6qOgfE=ICu
zY%ATnwIoAjVEtiPT)nANZ{u+%@DLTUqivA9mD!`<a8xM{e>iwEOI2RK@6oAH8*%c*
zwZBB*90@I^=!2!Uk1=1Pk?H*J&YzM@W`*rhaC`3#Fzf9CCJ+pwIale0r=e;*f0q|R
zlp_yt2|^3GU7f&oT%LqPh{bMUG->uD?Fm5DC^pYr?z#0HPx>C1mt<=*OfJqd_i>?E
zKt1i#2g8spe>Esip}iC`{wZ^jEQ!l1F@ZdO5?Hzd)2`s_kz-oN)qUjyFFa80Yv4fI
zoft@maBRM`0&0T%v)L6ARyv_Et&5#?*zgdaa{VJ?Gg<?ro&k>Zhq`KjWnpT=1w^((
z$*FQNp}u&ZiFWeONz#T5&4<}hF>>o063Ay}vG$?We*iJQZa9_P>8IfL3Q+rmh^!Kg
zBOzO5r-X!+f{<lSV3=Qn7qL=C`y&3+m97s!H9N7B&CP8~%a>X6rZRN{v1=~zl8_Eg
zR6+cDPCnpErTe3ulnIOt{A(*v#>Ensi=N~vc>C>7tW+l$WnIDgJOA#kBdvmy09&ZI
z)f8;Jf1C`~DBA(3>^Egq(d_(}ua4|D9w=@n3yQ=V*b!dUqPJYq1k=KN`|CgC>T4mr
zYgH%9%ndI&TV@mtD%id-oylE3KqZ(5{IyKGk!GTr83(d}8hNkm2v0+}ciWi|y7kVZ
zd0g2J7J96bFFtvxyOLaa7v?;IwB`04=G|I*f9{i}F622nW<3j}qm7sob9P>!4QxLa
z;jq-=oDdF3UpuM^d^GG=l*0LBy?@uiRqPAm&%vD)v6m%VoR!bPswSP4F#B*$CJMxe
zEqDdv0K*rZ$Z`1d)eaaKxgr&lgp_S0b~1J_o)=))d-Vu_K$5JZqReL1og|0Vg$L4X
zf4bIZ$lF$!_iMP0{nT$<Ag7xFW^9_1#r-%5mYigWqL~5-zC1`5N)|OQc1WqED<1h^
zE|YzrcCvo&!D7<<&HrrkVw*bdTOPY4R<d#d=j7PQN10qU>V{Jfs>VebPmyjFW3Dy}
zG$9$twFhbDP$ojWblHY{OV+7dWX&bhe~RV&_WGnVo#c(up6XLZuN(6Gc|xCPm2W<G
zAn&4YyN8F5<EUOg_!=8U2VIKiO1CMz{A+lfQ?_!IHF9T>MqLrJ{@MxnI;w>pgSHRm
z<Xalo!c`@P_-!aqlq&EAVnc6{m7PkIS{W<UdADp4L0#4nG;#H<@p?q=f6^_de@%p+
zDCaW@Xc%7XQFm*svq>5$2KX?gnFXC_l+kHua%Qqt7aIXY=YH2vQw{FSO!}?GfJuzG
zc*4&^6>J~D@u-;5KjL?E597|`aC77|S?{4=TL=Q_kfCw+*oxVnfHBk~?W<*A^Lh{z
z{LW-sL{Ge?O7K?y8u%D$=}zaDe;c}R{-jZklMzl?n}WWx*6Wg|2mhm@w9saM({BB;
zVf5~pOIker70SI+OPi%jE>03*HWezgA&Wot!0^7KZkp!}r&OZH0vg3)ZZj%dfUMYq
zqf1*Ar9K34$uv>{yN+<1C%g(;0GY5FDfEmOL)uBXNyP6ysE({5dPCluf0LRfeLhVU
z;k+(h6f?bvhQk6Y8nKRCg*4(fp?I{l!n5cmf718**Y5?W=C@-E5967r{PxM9<VkC)
zG}_u0F)v_=DzPhpq8<M~&6-?|5DfODOUXXcyGb=MmxSRKdG&Zrv7fY?XP6r3Qun|u
z+LRx0R4jUl5C84Zy=^8hf1)R8mabHqhT#ZQ>$?(>Ig@7Z2-&Rw&dj(`hg=*D#~ow)
zdIvl;YRi9$kW&om(VJ4~GW}nZSgmGUG>py`+MG*g?3hHlbt<{(MSqDXTENB}G)9=a
z+zg;{l9bK<XaC{?s*3zYSmpeF-rIk?<3$xo(X-*ro%iR(C!=5!f1V*46_?h(4`!eq
z2dW@_>_{i((#LP_=1o6y5tX^+<n=F#IxU`Ps42@_Imr1rw_L$hdBY<XKH@~Z?W2(y
zo?)D%%gTVV!0#HI6%5AmF3Ir)?_Ql_H(P5nO?VZd<>8FK>xsXvX{_;wCh|r!dMO*q
zH<3W(Bnyx7%rG6Oe~v4gfj{)=EgP}~f8JZX4P?h0xtSfjBv7TEOQUejDg-+XYD8mD
zC?PEpp6Bx97hZvFs`L+UO(uq7;3ReiAzScmY%v@plYk<P@L_bj<eQeIc>NjQN&vSk
z?|tuhzKMlU$~Q|OFeR44cc%sBjr$3$D(emq8SJe6Gbg+sf9opiRK8wM0)7kWSOPi>
zbk9%7npWJcy326O_VjkCH6*IFJ13$-h(|np`<#mh7=@kw+!p;;{KNOzAMn8MGE`E=
zaqsjRoMFAQBUs?q;m9y^qM;5GWobO963aX;0puA8{#8Ohx?9>kF^^@#=|Sl*0MP5I
zTr@^rC8)0ve^~E`kKl*XuirAQ>m1|9tQ))X10*jvLQ^Cm@S<eteX*HU8`kce>BELG
ziV+*`+APqV+49UMt)UZZ*bQ2+CA~_*LZEzg?w{zwKjcrbk(cH)nS%0>9HlLd1LjK*
z>;+8B>z`+G;NaX3UgmDpw@It8d|B-Ww}azPaYZrle?KFgO`$%b;0<~|Urq3G3q-#i
z_xz-b<x7%22ybp*Nm%MB)t(n&iOP-S7l67LGdZ}Ws?e8Rqnt^dWuV=PcegsdNWKI}
zKNNE7sBe6(9-I&Tq=3BCJZ_B2QMeBoB#!3mxGU!oCiB3#)jDQ-)$m>QGGdiSsn3;f
z<xW0#e}pV;M__+%xUM25<~RYZu)0K5TTdopvKJKWKP2#;&d`a|lru@LgMRS}lFHr8
z&^;LAY-TE@Wipv0u7lyzAlk}~A4^>P;{NGfsVFG-7|~R2*~y36spw!21mlz>p@B+g
zO5zR5wv?2mh8S2vUli<NJ`af{DwyWmf41UrfAeve+j?;7iF(r*PdZCl)NTiDk%;>8
z()TTQmBU8e41{?|<Sz*lIW;A&5G0m&=yb+)9l$?^_o(a6b5#4>9iM*XV;19KbfV2Q
zo59@p1lrnM(btfI%^GRe^Zb~M5#6eO{3h1D#eT~uHH7vrswO`;W1nFM;F1*CY&P{$
ze@wB23(n4T1kg&A6)w`6PQi`8zc|~ZUQRKWMlOpKPdC{b;$AX-2Gb3ur+M!3WkM6$
zF&7FsqqEyz+l!rCtiDAlN|C2XKSst%=vQo2$UOiRA)_HDfoaYl)@D?O6S;SK2=N7h
zV@5cJgdUAc@%Kk&_)^*#FaxXggZ>Qce^7~ER*Lkr&>_|}I190)!}9gUq3JgV?K=eO
zdfrj*$Z_*d@E+v|0!}<tmEV*U4nECjLbz=n<VyL?#(R$*nLgh+TmKP}9^~AI{f9-n
z&==<BZTp3=(~ID9!Qk~XHYXY*k0Wl)T3!yHF%9RQEDNUfgZ+yK<Z3Y-hG21Le=9Ea
zno0}`lEc?YVC4933A7;oUPc;bmpq_iV>5VwB_fm7xT?l=+03V26y=Wf`8wvLgiNoh
zyOs|)^IxukCNLPvkGY#+Zj{*a3GE500P7+*Y%7OQ@{%FjuFRw+=GUjL2`Dp9tY0Pc
zJUU#(>TzEo9%wox4wI&F+`7*wf4y<u+TZOd$etrys&pQSic9m}R6TSn`uYf|y(ZW;
zEQA0J4oLum4GKuH2+KDm_e_iEf{dNsWg9$u;k=U|y|Q5k{thpzH|){rfuO;jTP6BE
z$sMxt;T1cmaPz2@>CJh$#UP3kD{f7ra=M7%T%>gP$L(a^2z$~*(uq$>fAP5C2P47O
zUo@MPX~)pf!@0GLn{%SqV)gJ+ROMa;_0O)n_WWoe+ZgZ*ZTWeL*qCW?N2ssQ>gf_P
ztgJ%D_Vvm>*6zVOf7ZVO@hkS<Z?EZj^)JWbV#VtXPJebrCTa;?BY`r;K|C+gry9NA
zdFkU;@Haj`04zmOum_+jf2~nY<J;cg((Yn-`mf&SCVmsfy4E;(ri}qqp(Q-&cQ7Pz
z6-1zda8`TuM91-YB4aAfAyElBTKZ1yVz;S?IV@es=%eQ=CTy8-7wk7vQFT8(Q}_T7
zNfg{(bco8di#m3+Lx(M*Rk`~awJOguGf4iT$nqg>Kw0E-ar!Qre>R4@aX|8kv@>oo
zT!nTbL1r`N<0gB}YwKT`1*@kos>r)Ae$Q^F=EmUzqX{E+%>}%OlL)UP>|T7Xuo8E4
znA8#o)vb&#x22AF%LK4aGw{Fn7&*Y)WQJL6vM=9N&Yih1mumAjtiZV!-U*O4h~MmX
zu~E8oXCi7aYxrLkf0B|x96x8ss7I!ajAWjOdb`r3#AJO`QXOR=8RSKHhTmX%lN;NZ
zZ0i>nILw*qwBzo6Zd-+_RZ~dvaB(7oEF6Ccz|U&Ss;(11+RF9WZAUDoQ#QPD<_F6%
z$Fp0LXKdo=6YAyA|61MfLg!Qt3;sx!7$0QfzD^RwMas2$fBS)Fe+7zPBn!`0vz^KB
zR@8#JCr~VIM{Qs98Y!7M&ZI3adY$JuI7m0Idl<NMhG{nR^~%Ft#0_l+L|d&k8e+wm
zr(r8~1Edbs3`TJvv%W=iB;k<gm?m>`sp*y^hR1`FA*5yd$5<<&YMV{q#wg^XLHSOX
zKKcfhxZo2ee_Y*QgJzxZil)YXRs1=7(^qMw`4Btm6jA|krGwab3SAXYx%^e+jYof1
z5ZMw@tMVU!g=VFAY;;wko8Jl^TVukE^LlI_&(Sq8FupN3_vbB4kGlzESpK6sR?3H)
z<ye(qN(_Fw0<n+zP-6vbKzAKzE7+f@>$dSP_1x3ce<RSK!#8nEE3C!|Sq<E*=7$5?
zmrDvdPr0n9HE_aDyP1t;pSz<2K-1*aFj{f~>N_t6hP3K8z&yq*UAvdsHI<00jsUw!
zQ5qMGPZLBSDB~f!<3S7h9bD(F{!?7*7cl$npit0DgkJuV@2~joj0=jjPftANmR-Jf
z3DC;ie`ElNn0UkT>W7=Aj&1Vrje(YLs?DmmPWoU`lp?n_6m9I<!U?^?rgN?UUKuMe
z{Q8G6>yWkP;U?5`dfcuAdd_T`@=!X?=Gbq@CF_Y<hpHtKSBc8_;Qn~Zn;Z#RyQ+D^
z!pdswvfIzawmHmx18bjpRg#8K=Zb7Zp9wnje~!jkv>AY}5%Wgt*+SPR`M!y+a5hzR
zH4#<fz67Guoqqifjidv$0lIi*s~y@eHH7L}%;3R1nZdL3;w%NFEj$P|8)rKPSTF{E
ze-(*2ldDV`_j{PYu^99Q(;QXr;~C}LGu~Pmnz9T&e`~6(aZ2xNW09lr9_45Y$ixnl
zf34LhUl46Cg3Lja_Vm8LL{Oth)`-q(%Acg$nPs#ZOI?!}5(!mqD(V8k0e&S}t}bVO
z2aQGa@CyIFj(skrdKkdWz~o*olm>Pov0eA<rQ5DEb|`M|UV^K0!aXIFyJ(1LMIX4~
zkUMqCrw7NjV=GR&|2SG-c$i`mt-_=ke_g)6@p%zE_Q^cQ5atKYUK0|YgzH0GLG;_F
zLd@wP)e2e3Q~eAt#x~VqWkHggfK@z7r#3mKkFi_duBoILIT(S{#>p&<!siV{6x*R2
zF~tWWs9uB{6%X&|7dT2(zSc6iMrkka`_S91P_g`X;Z_b!WQ_ZSX&W!;V|DeLe+Cy{
zBKmF3TqdPTglkXT0o!gE7fK>2U|;uUzkEXka34sqc67u0kjHzyx@GhKg!p8NfuLGd
z!U};8mpz<q31YFzu4Mtoqo8clp}Z+Y@c+SCY=BV1+8IxEFoJHP_-~^V-XGtMtu7<#
zDRRYaEl_PO#I8ccOxApVlW7B_ctBIKZRrSFC7&t7rFQGBuZ)sM3^3^uYWt0Z8Gk<!
z>ZQD_FkbZ@ZYH*H=TuHqXwUPO3<Escsp_DxkkA^o@J|%@D+`8Bq!+d43Yro0;b!cc
o%T|c}<Y_@_{d^B(dEBf{@KT99rXc5x_*9px9%LO%B@A=hs9_1g6951J

delta 4913
zcmV-16VB}0EY&BFBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01~^Ac}p9l
z0000GaA|mH000000|*ER0000CVRkV?fgq9JE`JikZDe6|5&#MbI3?#AHV_cdX)>!N
zOk@JvZlY<M*`rvRKHEP!BcG^8uD?r{;)QBL3YzJM!eU(s7QT=F?wz4j_dN;gR3WuC
zmp1XP-)riX9aiL{a+$To$Z(Q3g+2jMG_yT0Se}U*Zp#gf1cAyCU37LtZJB^BDs|zJ
zEr0$DV_RY4c-Ez(1C&tCv&jU>{Gqq=yXvf^@BBjJR{t18`M{-zSbp|*^*SS^)w(3M
z0Y>ue;_RBm4ynrX7=^M!?Q~^Tgw2~dWSpC4C@g(@rI(PYmSi&>&H*(o*uU%dee>8O
zMB~k{v!JU{P^s1w>vsdhLNm9%)t_Thvwx2K-@#%-{oy3i)-pku&rRV)iX|n-?2A7)
zHwPe|I1H@tR)_2gD40ZhTILu9g4PUz73o+m`#vD^N_>#1PMtzC@zGkQ5egGiA+{6S
z=ycQYlcWI__93hFPw@B7p!hFDvh*<aD~-aE0q@${(vo<S99}9H5vfdwi1QdB7=K*%
z1CA09zTT*4JWesq3C`l8jXc&EfFpF$YVM6`<fS<xh+@PTc&)_kUz$aMkNf|b+I+;D
zxVA_LmW$I-(B};?lLE<kGxzjSZ!2>fg%tg6p0fAVRim5=+Yg*w&XWmN)FE_mS$;%G
zY6)1fM?aQDxplFuY%ikf|DwNGB!BO>o3UI270l+o9rmcP4Eff<@_m1`@nR82Iphsu
zR;C|{U=I|8Fdm;al0_m&`LHL~Xb%am^S9=*^@M1r1JY)6p@GdzI^{sZ`>>h(wVbNW
zs&3$$m#4`Ct*y9(?@$RB^yLl*yDLa6K&AnPQby+nrkR^TPdD2Zq$sh&Uw`;neBAl^
zrEm?d$0Kh<L1<x|u=PP)8%!tSwr4{kX6zO=y}2F^28K)+-IN~fLvTmlM~Zo`pzVwC
zrQFRsG^Xi#XLd?F6-kFB3ff2kd^j-a<LT9tv|Kj3<8+eRSir-FsX=pBj-fftQdLrU
zhLT|U6RG#kP68EbuULl9%73hWF17$U0uy{x#v&2U#i@#!q&8dkY&=@t@{%^C5(6(b
z7&EZ4O&^3JACtQejZY>dzEQ5pKLwRQHbl1RN*}WXV&(08!+Nsa-{<ydOZ$uDRpIwU
zx37#b$@POX42nyd!YC2G!eS2{LM+CPAi8|8{IRxmTO_2ifWjQ|QGa4Bf@UQQme!Nq
z*fvC_aI49sl>xjtd?P%|tsF_{OhLUVO4eR!14(F-q<>*T$(&Bl+md2DGUZJ1I9I~$
ze~s?-UC?s~;L6X3zMlaN;R^O=#o?Ksd@qCAx(;HsQh!5=Ni8p{lhM+A{Z?Jt_9+vI
zGlV7L>r5Uxbz%B*Wq%IQF6DD7a420cl$g7Yd{ap;V9x*{z5X3BNO7vkmT0BTbJ+1Y
ze3gWQ>gfV0*6C`|Y@58e-JVG((BTFT>cWa5dstY9-{C}S|6+_<C@AWRuBC&`3Kc~x
z5k&))yfbLQaLAgSrMyfi*8P;{gEqRN&*OQ2=zpoltfykr4Sy@(d*~p!Cq<0>xO(vQ
z3NyP|1$OC16$!Wx*%Hs(JKe<hcwjvqjcA;1IydkR8Q<9O(eww&k^TRr+2pyPG5^gE
z+d#qMYIDA$-HL5wNx|6hatpGJ^FQ!wvQ#{_E*eo`e2!6HkP#N^rmY!Mm;qiY>LC)i
z;?lsZh~L*or+<v}_snCrH-^S|_#5l0Dj9&YBAo!s|EJ~VYK`?2Yfrzjy4=e>{h4`z
z!kwNfT>!)}Y?vDfhh-ho)%z#qz6}46maa4uBe^jwcCD!JI30kKUq4*KTXbN)niSCO
zYeMEn<32SRsau*Ku=Ry~WH))>*8^)6v7JCQUl6AlI)4mK{WWHzxMeUVNvcEF7~;6b
zu#aoM*PKmQexU!jo>aL{2j<&8I7IC?S0E7<VTiZ!cF{=iL4eRQ(?>?g+R6n?!I$Ja
zDwzr(+tF>T<T5302rNFLm>zvWud^x7vlVH+bks+4hk`SCcH>$zPb_#NbQ$q>Z%!aD
zVKeEh#(xI*+m^Ci1KUUO6F@Q){IU7Vj@pF12G$gGmVK`dPb-o5P;K}!)cifIZ&GhX
z?D<%CSWoa5Z89w~BiMEb9*!p^x-%XlBcGebzy2cfK^K|`>cxB`cs;KNlp0YpYx$=u
zv_2!)2uyb$ZXC02gkl}Yfeeq&mdf`$WI5r7DSxetP<Grzi3Vj$@B|Ct#pV12LjkUn
zqc%V^`n!_E-@8hLDre32%9sKv7u4;d&ULi@6$^h?@w~~X;OEj2`e1`hvyJ|-e+60Z
zTCYv31pA$hVcv)q{5X9NJOJZj7{p-xig)nXHoqPD)y_tcph`qPCGO}8YYNDB5_61&
zPk)fwc3sbS#=nL@p#j|IFWKnA6cJW?!h#Bnz1sZR@~+EZs_Oa6E_OlwO8i4|ct-#u
zzZWJs@hnX%H}84kD0_h`PkWcPeC+3JL#!v0odvX8zP4^K%U`Bz{%Q=<c-kTAH>RLn
z`mN5h+>D7N2t~9Cz9z==;EMbfHlcZY{eOtVX-V1<zFoTesR%Owz|jmTG2#p9WoX|v
zr4NE{AJdtR4BP9vH4q?A2K73*ohig~G^HSV>Vi49iQkYMwaLRva!mNl7}_gT*W|ND
z+%BFQEkf2vU`A;T8<ROchp;;*zbGA<!_>XY5BJA2Ie*G^L8Jl-jC#*!DJ#mk34fzz
zsFKOm#{;k<1W0<3^?BcwA=Y&F&IJhxm)58ia(6cjH6*j?fr}_$L!-&P<hTLg-Ao-_
zHpCXG?sez_Es%5fHcmKQ)fvpcCrb(#bx9GET4`W|((EV$e#kQRYjZw@Qy`AHMvbMl
zVI;!X4Zz(6$W}A<73vDR5QUYM?0*V0(Gg@XA0G$Np)ma==0i>;DPobp+FntuHf!qY
zwK?~&b{iX9HaU(Q+*;*TPJrO^b20fzyEu&G(5KQIX4FqZ{+V<W_AiVeYIzCdc6!k~
zpIovIIQ!Otl$pvw;7kuq??|`{-b=H}bPFq6cz@x$fubAHLmybfm~i4&CVxgd(RRny
zZY8bGwI+d^qNxs4HCpaRvsKkn_)zO1-VIE4U_r6XxtiU=;ie%!MA7ijCE}?6===Mn
z`kLGzJMDc#t=?H9_4W(TFaaMmB89cKgi-E4I@i!BKy8*1@`?23WOT-tVPs2)RRd1f
z>Bi*Os7hz(l!n=tle*SY<9`zXk=Yx|e@7D1F5$!eb2>etP}HqJZ#pa4Y?h_sLHvmV
z$Jo%e@9YOfVrd&cv}07LEL0-}7XsuUHFRYECYD;|D6M@hE6?vrjn%}9izO1f#Li?f
zGLs>F8}|GnZUyBcUA9rZi6@c2Ka+ZhKaOvcHs2;uphD)Ry{#myaDT*t86>tz&~|#d
z-H4YpLzw|C_|COOZD2KGoBJ}VX{_lw_^D6X%Z1ZB&$6FouE73v6dKsxhe5#0=z@@^
z39biNbyt-0>d9I97fv`AOg}kh=aWa?>=cUhV><BX-^PiX<0e>I=4Sfb+l3xQ@rVbv
z0&YW(#z>Ox?@kIoIDcT{x=!BbJS-TZGZcR`J$JP0R4;;qW&7Vs&^k{%SR>+)3#sLd
zsg1b|DSfGcXtE5nl((0Jdka5fK4Yv>MSS#BYDkCbnjN&s_D@+oaJuKEiiO*JesNMg
z+vlJWxB}LIkNa)ADQ{%?7F6PIS{KA<$_uGW@PlUAN#z9OZGT(hznuBZJ{QhSb0G*k
zWe$@kEkk__?eE4O<A{-1N^$xGyO%iS58v<V18voK_S|HvFFWv*CBnB<WlFW&ms=h^
ztT<O_t#1-THB2L^F^eUfIkr`^1u;%wKa_}O7hvMM(!_s~-4ILv`E+?rke9T9bR|t0
zu2!C6ccn#{m4Be^Uw*x_f7Nt+(JRHdHo*7rON;UITDw|9Q{@c@Dh{8z8}3(njXhh}
zjWIzY;=53n+Ue90StQ+@HSGRXx*hf3fp_XvXJz540`hJ5)Um&}9XD!?DG`kHWLC(M
z&n`%YlaUvfBPX)D1v)u$ADv8{_kwSy|EV=*u%z#yet$WQa}a96P%2+00P&tQx`yQ^
z@ivo1iHKKWXqQ+k&pK{u$0cte&g{08QN;VhDNFd8^R&?WVbVRgi66O&LI%3Dv9=p~
z{}S&8!va`|y#ohx*O!${GVg~Nfq982H)vcqqlsz})4wbsl89QV75w^h#Fyse%uLln
zN*^<LDSr@R&Xr@H&!_3~C#VPqJJh8MDN*%ZxYOJ=RgU%4Z_N*;B*A<Mk=<(dAT(c$
z9Q4d~Pa}daJk0VE?37r~2k7+pCIDq+-c<KD$9f_$5K7`^?2NaD^xeW(Hg2tCQH_LK
z>}#SZCX65e61W%wLlK^<U?f~n!IDZ`)XRsFRe#+Zs;uOf8f%2ypOM;}l4o{KyTX3W
zIC%k{IDo!sF7{{|0+=X)<z5ua5d5ZUh2Kjv)gh1$gH#%fXXGFP?zhB(l%>OF&~d}~
za2r8SqKk^iK$-iDxy*XVNoFxbqW>g5N}MaY-Nks+t~SNURO9&_;({O{!ZL(HY9t{)
zf`38@`e*wk>N|K!kwNw0ENqpT(Tsmkwupy&|Mm;(KU{!Zep)5AeeO1q=Q;iN_0yf>
zUr=QGoZ_g6MP9Re`f4TeQ%707&757H@czb9k$#*`8_`9}D6oo(73$~ASC0N}lgn8W
zZiAeCCjGja^rp3}e)@~g9v>Oz#oWfmS%2GUnnYaJZ4M3d5F7lJF~G=y<z`L`8zw!8
zV)lMLK^lHo=gV;G!@w3ASdq)7%3S&7kx1O+AP{fyYvlzMno8Dk8rcwNf1r)~rG!w1
z5zlHfobV4v1~~MZmSYieMt5?7#59P`MBN+ZI4B1Ip3NQOjc@S%PA=5hnBRGMy?^>$
zf;n0+rSB;UY;$)hmmh}#Nr!{?jZ!=XA~YiOR__!>erwzaE?iuQis~(~-Fs4tAkcp3
zRAddeHN2<uor<UOl_nz5txS<uuXd!+?=rVHL!f}2_2KDkenwcjV8C6m<nIx0WO>*h
zQi@ypugaCxC>6MFeP~KCA-_s;pnq3c<UThn@a|d`UjP^jgue9;j=rR->T11iKUdC9
zn3&Csy+-mCT1>F((tj-X!<!(0&paET*`<UkuwP^h<!DdN)PM;gG?Klq6y^1EQ%Vj?
zcwhIOwdwjP7bZC)-`%or>wo^VwbggS=ubfP<_fV_N5*jQ+9Xhf_5S=`3V-_PVj$GE
zYj2~?Q^uZ`BO!Hbt*$g`aH=xB`{PR9KbmX$KE5%;8dwd!)EM7jx|6iEr=!Ka=iWG&
zFUlnGg*j9szu+#fzxi*p?0Q0vT-Okb2eL7`Dudw()##*HAh~InJ4T<2&8byqYp_r9
zOzBkJkdMT8bFDvx!DTdTc7HPXpwD}TVLkaZDb})GtKIO(^nkgTr;gNe2(-Se_<`xN
zCnD$qJcL306^`+YDQrlPUllWu?ey_L1S-<XLpeUpnRJ64>Ugn_f=TSe#8HYSy#Qc8
z7Ar(koUMPQbwTNje%I0V|B71AOT%?2lY`PuBA|)uO0QPH&FUh>I)6%`X{F{39ifwi
zBznV?A_qSK-;dhPv586BqF@i4pgmkj1nbNz@*xeYT|fR9(^)rh;`BgjF73@PF)2;)
zztaqs=c!xMr^%Az=ZSUoSOrs<@3sc*LF}!7Y!Q^`1=Re;dK!q}?2t(S%c&Z>8Rt?B
zC{$o$Z|B1KF4~f0c7N2?!98g5zEQh!lHHN-i+0sc+4(ry6Y~t78+r&fcMj5cO{LB#
zMGLaBl8${n%p#I1juJ5kk!(t|d8Q5QSa=~5u$*GUKjIZPw7aMNB+Z;DncjrI3Bgj6
z1!&>odcB-ZkEx?yBc#1Aagne?(+0NH{@}4&31avy@SqBa^?w@?$$|rNSLG<f{9nRE
zaL~D$0j}8YE$*LfSYy4oEBq1!quxynQRendj)W{r%>?AMM`L!`{{{jVh+(BxjZl=)
zSd9hbkUj3>4vLg{6M1~pft=jQuK`<Kf_|;jE3eU2R?B!YurdbU9{Bu2iX?^r@L|nG
zuQ@#wLS_Ljfq!J0RW&>H14$f#y--grm{uM>T+zDoVoNabZKI9@Fg#9^sQ-F*C6Det
zt2>s#wYj?K;ppZZ+YAq)baBNnr}Oam-*p*-+&gaV!}G6k)SMl9gnf(+lt3YwqSf<c
z#eEelKxg{6_Yx$!l8#=dnfs-KIR1`)i?vGPFOHbBqh^kqJ%j}n$Dp&~e%S&9Q>G}s
zdgLFe>zZw<Glpf&%*MIPI>8QV+QH!c-#i7yI`^3nEQj$wT<^Nc`L@~fIGm)qK;v0B
j3~f??<6ev{cKZ(z{X9i=@1ZC(Oxp-(C%!G;izxqqU`U)Q


From d60ee59e77b8d01d0fa3fda218b5f28dbb3aed1c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:39:12 +0100
Subject: [PATCH 954/988] doc/check-perpetual-license: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/check-perpetual-license.d/notification-01-warn.avif
----- >8 -----
[rsc] ⚠️ License about to expire!

Your license failed to renew and is about to expire on 2025-09-13 12:12:23 on rsc...
----- >8 -----

doc/check-perpetual-license.d/notification-02-renew.avif
----- >8 -----
[rsc] ✅️ License renewed

Your license was successfully renewed on rsc. It is now valid until 2025-10-25 08:42:46.
----- >8 -----
---
 .../notification-01-warn.avif                    | Bin 0 -> 4044 bytes
 .../notification-02-renew.avif                   | Bin 0 -> 3944 bytes
 doc/check-perpetual-license.d/notification.avif  | Bin 4004 -> 0 bytes
 doc/check-perpetual-license.md                   |   5 +++--
 4 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 doc/check-perpetual-license.d/notification-01-warn.avif
 create mode 100644 doc/check-perpetual-license.d/notification-02-renew.avif
 delete mode 100644 doc/check-perpetual-license.d/notification.avif

diff --git a/doc/check-perpetual-license.d/notification-01-warn.avif b/doc/check-perpetual-license.d/notification-01-warn.avif
new file mode 100644
index 0000000000000000000000000000000000000000..fb6b56ab49bada738b2ee356b6a70d890c330d54
GIT binary patch
literal 4044
zcmXv|1y~dA*B#v@pn!uBf|N+7ND4?O445=bLPidTbd8V(agqZh93Um#T{616Lj<Ix
zr9S+9&;P#9d(XM&p6A{R003BR+`QmWcbE;}F8-k-%tpu&2DQ;r5K_34b{wtUp#OSz
z!Dega;QId*0D!|R-Tue_hm>%bo8x~4&Ru4KIXGMXtCRr%oV)ig18`^o0Lr>M&JBY(
z{kQbL4%1y>jr-4h=YhHl3Mn}|IRCfH4hDCH-{~4KxTW(Q(!mgL>wiW70QaB4>+Vy-
zVV<ym3LY^r@g0yu-G!8ptal6mptW>%aCNeD@VuK$0U!*#lODj}j?jO-ySO_H9|t!W
z|L&?bM=Pk?Jpd`8BxfFo{GM<Tv!)g9oKrRoJ(FXQ`g~4Kn&V5pMeI<{LBS7u+%;sS
zWkSRW|4dAL9WkWL9@=_x&zMI$;KfS**4%RK3cy5D6q@W_Z@nOfW8%6Ra%~E)_PdGI
zgK<i93V*9CjMPq;OE0@ZH#3O#`peV<e3Im=E>fJlDTpg<vyO9*Q>~fz?0BjuD^6t<
z13B53nmrS}KIb7b9A?0@2H~UjX)^qA1aTP(F1|XW%i`p(z1Hso-x1nf{7Br89O|v9
z`O^D>UQXkk*0ZPD#eKT34pU15yv8g8s0C|-8Zus1_Zwcfr9bd|fgDV1(LWGtG;Ey@
zp(n2yd#z#P)~atOzG`A<pNW4@<oNXY3;Mc1CraWN>ogB7r@oB0ewxLdu|&;W8b<xB
zf3%Q#g`!H{kN|E*+vrQ9P`s@u90`pNuP)kLV!m>dYqyk>4}h-c?cSano7Jg?mYyq8
zlquInP|+60K#R{P#J0bd1iD3CVIvPP!XhsG=t_$c0oX|U{h)gavu5YSAgM&7_=s!W
z#l0A;)+2X;>FM0F4P3??N4^3pQ5T0d9ITr3>V&F~%~I|ccb5FMVuBRwGz;uC$t@Q8
zSd=~?F44!)qkTg~^6hi4W|3n`W%lMN8FYbv_i|v2-5_zW4-TOI9P7$RS1dOdTTF9Q
zV==P13)TZYV*Vum&G7H<qZn1+M`9cb%S8pYXWx_Vs~wUiw@9c7v@`abN~At$pQEVq
zWTb&;hgsO$Q5VjzrvcLT(@=^dPr~w)&I{{EI*^|-=9y2`rbi;_->wg%u61E?I|eOT
zovJp<;+{VT*Rda|_jzwg;}m@pyjycokarmko6peBOVVGOucSzmih4tgH)dE1x_2Z3
zQh%jchj+KyySPnp;5YTqvIoy4@yvM}7}ka#*MFoAG=NL(;HVD4G4eI01beo=1@S{P
z_*@2vBcAy(+Jj$0i{~#r7vGhdGXIS3m*`M7BddLjgls&WA;jBJy<CuG$Vfz%{Ep^7
z$enW9F5*$0IBj#JqSPx&p@$HsVx4HT&(`rK7kw9F;Ci$EZ4qZF)kS}?b-g0>A^oN7
zV!hHNCZC@N@LEE%L&@z+1yl9r>^51prKR5*X}Pbu{c@S+Hn8155Jtry!v18r;@j4d
zjIX>9N(<MbSFb#5o78_)IZ@L<k>N*<Aq6_BRI}5|;XiFAdZb->7!FgZ>G0mx#wdR0
z3NqoO?t3<dIhk&MJ&kP0dd}<0npS1Rr~%6{o;BNicmrBAwRu{*8LNR?+BCQHEv+ab
zsocy~x+|8e;=QfblVlqUl_-K!2qmYeL&#b1vO3d<$h4Vt%%f^h_Qo*DxIev@tp(Ab
z+AeuM)^t)W@7_16PW4WUULpD3(ku`<6KMTxR^tZqhr~eN8N%+YELhU;Q|isqZjVGN
zlR>kHo_uWK(aMx|d`l-QnU%nfazDR={;M(4@{{SB;4kYP&!deTEsXy1;}|H%##mrU
z0NfF1vbRC#YIC)|z1A)#<G%ADUZ%<??E;xg7*>X~XFG@6W387GZcU4Sbd$WE6YhkE
zsZ`v)l7o2IZDoGB1RIBrXMQCkGiM?SxM{a4M}5k1ueS*CM?aDR>J;ywn2g(@!{Kok
zh={Vt?UKaqNv|y<na4X7c<tzkO}4PcW%MsCK3l@AKyeD5$I-DP%A;C9$L#?E&iJ)$
z*TWO~Kw3&TRT=OyR)@ePP?dfyT2aOR%rQ1FT7T%*rz+DPXs+CA&-iQ~%#x7;rJn#E
z%bY=GGhu!<<w!#(f2Oi3MAD;ifl(UHgV>?8K~9rSAzg2jY<Pns#A4_<O**qNE@7Hf
zjSF9SqrOu9U^=K4bY(J{XwtHfYQYT(rK_mn7JfN!6;diDH<J|C-hua2dPRocd77D|
z%5K1{GIE`QqrzVZ>hqU~dN*w~JVsBD{a_Gs5a%miXe1dmNk-x_K5=qO)}9`pf~uAD
z6P>v>5m-w87>cRQ8<2LH4~*kY3EwxoT-w|#-ODd`>Y#fBd2!!P(niB<`r`tdSPOab
zGpjl#QQ$Fa+=o|=w)6Z0mGVq}8x)NNlq8!9uFrW=oibz%n+Xt8aw72^bz%rO9+u50
ztU!iL>+ho*S%NnptoP(0LkCl)byEFx_3QP7&qWVYX#CgsewLRpAkI4$bAnXx?p^3Y
zb!e_0%pREYtHnEQ(1qF-HW_R%M1yM|WSg2_Qq)w?!DyI&qmo6WFZU@K40jv9*ek3~
z;ljg98dFS>q3sV<yQp7(uYCzF78OEMib3D|i!N4{rnmQFXm^65GnP=I>K+sp9#v$L
z>%@f{HLHA8neXKlWa3gcZnpFYWv8eWPWQ`d{C{U;P`Fsy!fFgYWTPi8y=SXVt^%0(
zvV>P`Kt5+_QwAT2aig@Euu7|+U<0V$?Y&UytC?u9PKb(p^X=+5-m88BrGd-B+V|J1
z#FlLnw!a6RJiU51CnE?Q2~kguux6TP;Ss`U!2>qhEp<S9DhY8*VrJF&_{|(zqJOiu
z%W1xRLUy40vWxjElTWuG59uNncHLmrH+2Dadk+AP%(Mh96sTrWL{aPz$BE_qk<DcL
znfYQ(QO#v6UbvV6d}Wl3OFzli<pLpeSL4W3?X5$<PaGj{vIJa)w+JQA7O!o}@!`(c
zPEYjQmgSYLxm>Z4=nqRLP@E~hELu+cg`ctHv!%vXI@vMwkx0QvM+=9(Wi6x#Oqs6J
z<GlmayR0~#JBCVIU4{r4K*AIoqPLRUrk?oZqGRIQ3J|QTx0F^IzAHG{Sk3-dUx9`d
zIiCmv=zoUIT`woGt1t$Swo20N>)jHty`nova@Ky;5?;g0RT~C=qC1kTo`QuY?w%D+
z0*&66eIrXkacBo}Is1}=nY*pbqtx&$or&wL25{|w>k|qF@2(Pl{IFTYG<z>zJxczA
z0QyVn5^NH8ZN4<F(mk_R7w|w5vKxrZT!^1ZmNKH<Kwoi-H8r47g$Fb&#=}NaO()Sx
zFS_55<Er>~WRfK#cAK9240&w0dT$dX?r<|_4P)WR=8l2E2YPPa+nB{9O-G(#mfC=7
z5&;)ie8yY&ZXhEW{lyoAvqEfiN2KL<Jdou5?;OPrzHd(tJ%7gP!h{J#FZg3)mhL0>
zrQUJq(^p9Wh4<X`C{us(XnxXXJ%QY$%HBke6iP2-^V#h|Ruzc{z?noiJr!Q%%?~7p
zRNRH<JoHVp1P0ElBbMInIX<us*>4U~p3=#_OhS>L4M=S<ltruAurM~mNl>ZGyx?eM
zFRLt1XJQL^H@bZc7y5d)dTL5Ay~kY21tg=nCG$OQP2zAIZ-rJqZrn*|=t(}l_gH@h
zjfud$QYew+!*H4&tc1G#K4cygq1TwG?so2g3SO>|G4m4NOe~<;<ieu^>nMM0H4qo4
zV<|2SUek$1HV;02Jz|xGh;T3z@8oOf#oIciJPt)T8x2l_!t?RB9>j5$c7jS_;&ZiB
z_KORgpA_CXB<968aC6cOI`Ws&3q;gE=)1lc0*DfZd3-Urxv!n+#=ZMC13<l)#k-qw
zdc5&7@mL-jHFor&O=omYYdHU&y0G8&7;>!cG5*vVxbBQos&DcJRkZCRa>E}xM)9}=
zcAue|n&MiiyF8H&oUQUoI7<}<JWZOMXqm<Kju@Fw*6k#HQOQ(&_$yND!JO%aU&3EO
zsy-HsFKL<TA$)k1fK5+dD@KDT4_$a26Z%1#ypX%d)49HBT=!{CphepdzTO`3{E^7x
z#M)@P(YNN#&A&)wuM=9p;c1~2{w!3yen3J@%hG~`7J_)mfrKhKY0Zz+Lw@#Q3ImvQ
z>gkZYiEv(pK9>1?htk!}{ps7+-%2mlRxOge50L6=Cs#8;M_tAW!EcVUeLn_BG!lwW
z*wnot>k%z!WDp{%H)35SS9|Q)B!4O$y))nbc}<(ncB*u6*7Ty8H?ADrncKsMjp_L7
zHFTSs^#NokWKRC#ZM{QBd#ej--MSyIkjb<mkE|&eZ%X}A8m<v~{gK&3J~^BDw7-jG
zv@d^#Brn;VCSs`%8oEBO|C{jBhK;fJ;A0`FLxhlwbG~g@Q{P_f5yidu???n*QJpd8
zZZN$hY3pZh7jIokCjIUST9brLL{3P@68g01wIL-WJ8F=Q6(GIexvu(*co<|BB_g@6
z>K&2aW6dsA6nVL5x`IS~+?*tvZA<!aW39fp%|(I<kp*hWtR_npBMXLsEi*I@glXN@
z!+6F+zt*;y86*WfzARgRwZ6=Ob$?etBt8f4_I>UGF{JAsNLY-Z{-%w_<z1`|5Fx)|
z`KFxm?E}VFYi7?nW2>VrEe_2i-<j8Nbae`^j)~^3%aoNka&Zk@$dBN0JpZ<zP8SA<
zMrz@Vg5q~&nXe}Lh=Rsl?LS}xsD3-lc(Z4j{}^jUM3pB&UTP9{yEaKC59EGL=kb*q
z7Q;YyqW<m&EMT1kp6m^FA|%+&ze$V^t8W=Y%4)V#e5c!1ZI-7{d5xw9X@@K)ZAbC*
zmW|aKGxE$6_`q>tC|8F!fem-6_bKyUpN}t@#9ri)YF0YO21fDq#An2SIW~Iy&Ei8_
ze)9RU#SvGS96J@Lf^40Y0TYLcx8j>v!2$IUc74wI!)~)0s&0iqr19Y^G70(OYb!TN
zbRums-Cl&7I4k)CrQr&CzfjNlwdOx)IIxG&XG^AqaW;sa<8M#0s;SC`haX|XsDTVF
z=Pb;vWnjtdT@eeey3=WGr6+!v@gjA|35x&KpC9+0;%s@IFgc^@E^=M;K=s|tw|>VX
zStK~2=JQq#Y%hfcfZv8u^*L&pMY@{U#chR~aD|iga&CLJH)}FOX^@QM*#Jq67W4{f
z+}}_3oe5dQ%%p-~OD0qx*mlSO_Bn~yzIH=$7p+y2K>eB*Xz~;CyZG&L((g!0L^fDq
m)&`cBK579idXqE<q8;9dap%Cn)T;zt`{YVVF??549Q{8`y^l};

literal 0
HcmV?d00001

diff --git a/doc/check-perpetual-license.d/notification-02-renew.avif b/doc/check-perpetual-license.d/notification-02-renew.avif
new file mode 100644
index 0000000000000000000000000000000000000000..21dfde015624199776061a72e5c160c90d75ba88
GIT binary patch
literal 3944
zcmXw3byySZ*WQpA9TM+LcQ*_{nt`OCD52y?HwH{fI;4l9bR!|%qq~ui1_ee4%%Dp~
zIN-zgyME`no^#*lKKJ#U^Vb6a063kz{E$!|m=oYO{-P_)Ny-%lb$X~SrG6{zxH@`4
z|MqT!>xBct<NqlDfP~q5{g3|-sgN))*Z&IOZDxld-0lBXng9Us_WaEN;9UTK%H);{
z!eDOy4gIgfd|NmY{59WtpgxjP5O;+8f3x5)qzCd=*M}kP-EWZ|=81ItYXkrY{u=yl
zFAWmr3;V0w0f9ibKmqlUf`oD2G63MNy*t9g%^u-<`!XefIP_Lxf+1a@e|xuayBHym
zAe``aD=SwAs23f8j98wpgoA=kdYIL~fdJ!H0Lxk|G|yDQsNU!KP-+`LS$J6f$%SAu
ztie7d_EdE7Z9*%^w9W<Eb4q6+^e9AYy>tuntz{ixX&?(t_i1xn0Rt^PHX^R9kWE3?
z@lRoV_XecP8Y)naQZPAn_^hsfWJiM)+W-M+YK<2eZvK>@`WN}Xi+^W2vhBl#8ma1W
z${L}3+-p7hb}MqO35n@r5c|qlOpGDrj5Cim8TNwmszQ@G*N-TghVKvJOru|-j4nLG
zI>C~m@I(7SufpfL*Xnp_k>L(6jbHI%=O^~&&<=So3BoYXIF!ueel}p&{*Z>wfK|dc
zuOGymTciKvJKNh(vnTW52!#@tAoWia{>(ZUJU@|%$p=<;teR8B`S0aYEBEjjyXLY_
zNP^;*kz(?LsE@*hS8sM}-P!%wCHOz&6W?164_3&BN|MPY38Tb@7A%NM>+4=AVKqOJ
z?}N_`tt)~?Z(K0vV)e2XvaGQT;Nr@KJZI(M-(>PVU!FO=Ojo4{AnqkrO`#)G%4<R>
zg-Ud=NlK=~<-Jb=HanlwUox(Bm!iJqPffOKvdORN=G7v=A*~lBj>AjEcG{(VqHysV
zk>17w!lmgrCcVLen5dibf3GMi6BK1%^yv~ehJPMEmq`87=2$_~Kr#|aX0`~;6R0xS
zTQ1a!Hkf;!ga&cgEZ@LH4NEu9T(paVt(2nbavBNEf4MjO3xB6}_^o#gY~cXb1kJGc
zh;jcpy{leVMveWtmFjD)LBgfC>#H7!k@}-qp0Jvid-?Bg1I4wU>7BDXMf!of;UMq@
z7YPW+wXNa%vh3~SFw!5^CT2%J$sp|%vI5)ducquGB;nXke_$5<uo_~wQ<VoOmARuf
z`-208Iu|Dgisg?mTt8daq%zifSUk)5x}WQ#!Gx+oBuY&;CEledh@(>D3Q%HXl(ys@
zdy?<MAsSZ2Khn;G?VV=&{`$p~VCUB_@M8WV3O%$?61(vm8=GYJGp@)$-b;{ZH4i!Y
zqvy7tQ7D#Ud0sB*#o7Ykul3Dmw!uBrc}p+Mh=rFmjGLd<v9p+cVKqiSwYYA}WRa>U
zH<TEn=gQ5}Bq4c}v7SVc*?R!Z-G9rRE`6Epf#V#w`q}7SXmc^}awB-|s-J^1!hXIX
z!(>bPK8;houhS|f^ECb@U7MRS0=FEad)E1VF=YsSFIZq_*?33z!-s&+TqRgjX7*7q
z-4XaeVW)FWx<oP!J^dZTm+P^%3GcA^@lD*;frbU?S*UuNb9w4c)&v-t8{adf^&?>8
zY*BhJ(RktH>^Ud$L)k92vpiMl68C<JCRM&y57csHv(|XUd-dfppEY7Sctj)nLH-x+
zR5@GW07u)X>VRLeyh_9>8~}*(&iF*%ZjC@8cenr-IO*Rd|I51l7}ssLK1-pcl*Y$)
ziUU6N<SaIU+t;SvS!uHntGA!)&h!R5+{HLVbGeSgCx@d&cKEzLja_U?S7(cxgLj-N
z+Q$|$Q_pZEm-5%|;|pv^^lfie$lf3VQLdAH{hW$in%ZxtD~khFXw<2dopkN<`EgGr
ze?{|Idx{%@E1jpe0t@WRD|<>s<{Tfkr(ixlxu%<phuKPkQ%Eb@Uiu4anUNF3-t1v}
ziyfO|9-OaE>q4_x&YP08o6P4JE(iA@mfHr@k37=Sj9HE3@#%>y5_wL!@tqIV7envY
z%(T&JTNz1B_IMsZ#@7dR^*Wy-+Onm@y9k!L_Cp2(8sYjv&sja0QAPvYoJp@Nxg`$+
z?T(+F4!g<UjP-fB*jYk=qs>Ie2*rG!ycrAy8!sazrqx&h7jT|?X_Qgkx9`-~5h0*N
z+AJA7b?NE_v`;q()j3hKW688ipLx(_gHVvm$1xWWz-2Yg!6M_t(n0wjs<nXK(lmY@
z1A_dxi5$7ZqqS;Quy~T65aVWeth(2Zg`7a7H%$YgY^lK~*7n4-Tl&dnR=6g86i2%B
z)vLfq+rp7e!b=ZB<2QEfFHU~EDaiU~46VC+8mu>n65f8%)c$#2VKNs!swF~D`Ry0@
zi(>3lPhGRMU4@7{m;Iie=|i$1-af5f9oVjpKM8&)h&SO(Cs@{9P)#+1`}sxOw`f+h
zmwKv9C0R^rqs0xCfm_FA)lFbgH8{Futc=`>zuQgt!a8&3G@bo~E}M4xneJ|jZ21cP
z-usK*2b7fkQ@@X}uBjM?dk+J};2hfci@ZA|olEmER8q0q9U8fnEj-49Pevpmzo-%X
zy9;`bC1>Q-Y-c-*3vzX?^whxi4G$(|qYb2@NcbySj-PrAPCfYJghc*D4k4QBd+$yV
zK|zUgz^zCJ`oJemPodq9=$*{0U-um!zmW7-{;{W*NCYuA_w82sI5cdxfg*2^Osy4Y
zLMF80WRcp%5u--ct+{`C+vDY{QSV{Z!*gmOu7O%J2#4+J_BXs7JZ9O|LcPiDk^Y88
zJ4Y_*agTRvM1#VtzqcjkFy|a;wtr8--}LwpLa%C_O~Q#JsM5ng!dSt*;C+MC7-0#)
z1OuKDffrJfiw$kD&lhxUn<>q=Sxl0m`ZJ>w;GG&rOiiNEUYx@!IU;v+txyq@Ea*gu
z`J|u{u-Yn+DW?3a`ipPI?{YF6tIt;tZ;Zm{cN0zCehU~n(FP08vrT12@w|HlT%Xou
zmerD{6lf4reL^y^D!Peu0!;hH+rQ-6i;aI0;OIxo<3DyPm?fjU80v^K3XsRO-d+I}
zgI?tvLalbRrnMi%lIziN`I)u%y4Fy9>%-XE>@7c#uEHv*e`S%u#rxFsw^_<|Yuw%?
zD^jY($Hx3bO<xL@+JCa0Fzv^cA#LBz@XVPdm!!{+QUw{+FGcQ+{1M^siC9_bSRK)N
zn}OfN;zkB>5%!gZtStLM#!1GU>^r1FkMDL7Cc)8K(=nrlOi9|z@4UO*viw(|`HJ~5
zf=Qo+LkCh-x6$0>1GH%d9w5<t9&*Nsu(4yzcSunq=?C?Ku^f$4+Thb43hytVd)dRo
zi$D((h_cRCKU}R@dbqz?g^3|YrwH=F6V^TrCBezK9f%2V4<>N()i(>A$AZ-i`XiIY
zKl1@XOR!pP%_YWpEoge7Tfh~vC{@IRByjX>Eih`HgnTf-^WJ%i?`9=z_&GLyUtoE=
zjUN&H24y@Q)tXx|M;U5|RTVYoyJk^R(ebxrQ6f9Dx{+v>tvuRr9b*~vxcjd&;i^8B
zH7|Ah;OyM>c@PuhMwvyV>Pqa6LE-dJP(#J)f!OY)l`p|o-OE%dtO8n5(XT=-sw^Lo
zQ?hb{j!N#)ZF*LILK{r#qj11_nNfMVaO|U2U^!hhQrN7ejava6Zc)2eM)+=9embf5
zFS9y(1=k~h?@61pm>jGS=XUTM^lw=wc&{-LD$9g3GXBQ5)dV5@uPoe<=;Wz+Qlb9o
zB_&N4J1mQe^pzI2dEYaxj&Im9Kn`@AIv+B{lW(h^wO-|SAu%qzhbC^AT?yc?K>k@|
z@|<Df+`_1Qjfe_pyno`+G1gkvCde!G=}B?QY0REhIs*}j##GwdgKjbJ*CZG`(J^2;
zUL2%RNy|F;>L`#{+xRKRNb#FaxDZs`OtyvR$eu|4v`L4rD72<tfJl=wBDM5M4Z}Z;
zHr>Xw^yX4ZkK-yKy6-L6#l^TWyEj$7MM`nwuH#=VPnq8w9|rq>fg8HCS<hXjP+u-d
zvt19ERs1T=_wi5Cj|*k&PdYY{IBMY(ZQVt1S5QzyMXEE`e1G=Jepx=AVE}T@>}-So
zL?%2WrgZ(|EO?xYV|1tnxmWv8dSbgDr}{Yf4)Cz>D^ULCw5`8^q+=b<x(wq^?2P*E
z^?Z%RxJ1Sn))rCr>!8tJXg+g3Vfu2KDECea;u&I?L3IuF{0@zqWY3F;O_v9LmJQy=
z<7|eDO5z?zP;N8Cdf`F)w>3~HXSNGPAJj2?e)9~$>Lmn;HdA1Hs>Z5d-aUp+uDzqC
z|FiKRWo9Ss6ERMcGmrzSQXeSk<F*Lmi5J`tVR@u6ym-E2$4d;HUKe1wu7@_6&LRe~
z?R9En)4ly-T?A9JVNLwRL+jD4hx}E@Ov&8^O;H>PV-J3T=S~D!PPf<PqGQ!NCB`$~
zdnjV*eAfj~qHG2-<l+Eh{yGdYt@LhdP%9^G)~IUpPl&7yTT>O<`AQ4l6wbWFiP~nU
zxcDyfv^goKIh)Yut^k+M0q)h|kj>f0gF03_#WX4%harg>Qd1NOrMp7Ax?va2M}bG6
z{G>|jy%wl9FEGbLd2lTkGV6vXD?{<&3Q+Ho<CCc<S{(3!S5mVFbNi(a7^z`;vW7~`
zO@vk#rb3zF-~JKbJ7dpMf7Ee)Iao-_Sv)2}hxVk_eXZ5sUDpFRn2*KsfX^nP=X1V|
zvaP$+0r5u+i}-@_3KA?Kvqb~*;RF=@dGa51;Ovd<v}wX10Yr0Qer<$=e-yT+wTnrU
z6HI{W*hh64eV((Mr(dbF%{$5pj(qdjr|6`bWIVBoN1fQ<&@vt%XOV>UcL+-fLL055
zYbW3Swr|WP))tKN1K?+zr=4hR$N}m%bW!&H3ZZg~aDxY%mjz}Ye`it6VMBdMqI=1k
zI@2;2&wPL9Su%t8%aGL9wxXR*)M34u8%C7xlG7t)^k=1H%>SsT!Ms?(cC(3zE64>p
z5^5CJ^Sf6hq~87P$N&bVz&zF?N)`Dw=0)~8Mq6brTZN2VBGbIf7fQ0$_oy82zWd?a
z`U-s!!Vr07NgUz(XrggWMJr#Qpt`Uw&u%Xx4we5UeH}a$pCHMLU-KV}4VZ?Dr>+sz
qG_$QalQ+Zf5&>n#EK%hP@WB2DU71{1$*Bvfm-0`H!*`ljK>r5=h-usa

literal 0
HcmV?d00001

diff --git a/doc/check-perpetual-license.d/notification.avif b/doc/check-perpetual-license.d/notification.avif
deleted file mode 100644
index 70ca603d4488773dd8a476ced8c89506407b95ef..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 4004
zcmXv|2RIw-_l;3O&5GIDd(WUXW7n!t)U1dVgos(CV(-xsReOFY9agOxwW2mb5u4Ah
znyu}x-~ajD_j&F)_nh;*_W}R_4rkvNNT@&D8E{*F5dn9WM8KiW1`tWet+a!1@`e8O
zZi~~^(F67W6aYZNVZQ(4|3fMy+!yiRKycgH;2vJEzmo<4Kyds1b^rk#06_KnmJ7h)
zp8qZV&tbV8oCyDhZ!=JT2}yM?53m1rxxtYr<gKm;N5Z^r5d`-^I{gg-0EB-7e>n{j
z9ti)d5RsCS-U0>GUs64c<CXycbTBUulqbw1@b+g)015h5VuT|R(7)bo-5y3vKo~)M
zd(}IHBh>dEfSgR8x9mY82WP>!R2ZwiBO%_i2%bGt{47fuukwgHzx=7AMdpKZnlEZ`
z^M}mKpP7W8tpDS2b4Bi7kI}PVaXbutwF7v}HF;7>em+=1mh}2`^PWV69LUV2UpE)%
z8pzT`TtjRywZT`UEPkj8_A5uZHp-4Rb-CQ=tgkSyj!$2(fP<xxanel)(TMiO68&Qh
zdfTfFI*)XPJC(y3s^lWM2Mqn+URvtbKE>3mmKY~3T7?G*hege_oQ_d){Gk)5(f)_>
zezp&fw!S>{+5X`M0M*YYf!=VB*9Uf%xcdd)J^f@>qf<;PqPaC|`emxDQdK--7*|PZ
zY4FCeSLTIcceND9^npPHeYUev*Xtn$x_V8klLSHVE67~*o1>@?B_LIe*X+*HuxBQ%
z8z)Ts-hN*NIBzbj`jSR$!%eh09&i<mZ%oG9dk*RZ7PuC9N06(Bv?69%rrxaR#f=tN
zTomj*TD);GSI+;9TUlo;LtRXFPk1y5{qZihHVbEVZD{Gz3)}ZCmK0lA2%j<t4jwUP
zEWUG0gh31cjy9}G{;;joK3k{~!RhG{Nuiko^C=-s10MdOQ$r&a?lb<11-Xo`*m31X
zDx{YA*L7g58_!;Sl(84m@RDao#blMUqKeI)Y7=cu6J}#7NPm?utFH-qZcuTB(cD)E
z$4Bixk&t=N%}+J`3=yvK9Y{1kVe{QLbw&RKW8)dJu1O)C<hU)VWtCw@<xqogS5ul9
zNu&Sahm(txerh~g@53BHOCv`m<K?deWTh5NY*Vza5$i$`tqMrK7`yfwcwuA;5;^1D
zbImx3%q9rsGhPU+1G!UA8?fZW7f1h|OVcTd603@5eV)gQj5gIG)QmUsiN;;lyNRVU
zIPPg2T8Q>ua-RC}hA&?p?;;+)yAe`!i@c8X6v+Egw?DomD#<Jd=f`t<j(DJ*@6ozN
zGxqy+RW`GEelzW(gf!ObnEP6wqd<#NIva)7p#g8koub_DMm88Y_mwrOnLnQ-T;}Lx
zoAqi3Q&dte8|W;Z)xD`E2!EbqMrA%S12N7iERSs)o%<@ItQmX0UQz7No9tNzKh>_m
z=J%04jGHmX^VZ`4)m_4<8uz35kQ#2=;$?%2aw_qD`6ZiPVx0vQdp~!C2Iq=&aPkVH
zVp@c;%VEvMzXDRP`*^$Iu_C(V^q7?Hn`$nvQ{SQUZI?SAgBn0QzE2LfcaqK_@m1t0
zr+Xjcg~xWco?WFC6mX%yM&CDwJ%ZEw1M49ERP(X^x`OQ}Mc=CZ*Pt+|1{)zmE%g^y
zP(3YWE`>ERBe7TdvXdh)8pfzOEjrm$W9FlDQo=?kl%J$Iy!*NEQX;-^D!p4~ui+vC
zE8}Q1KGxN0A~i^u){TBmdw0B+&a5!7BA%M-jOWtj8aP`gr=BKn;f6&~+lQWvERz#d
zj(BHe{Uciw^plgn(=h~JOO~TFH({5R<IyzwiT!2UN>5_}CTB71a%zo)nd2Dp_%fv_
z$<VEVq8u;HrsI2lboo=p$b`In(v47uI^d|w{5)c$y6RV)ZgS&^rAx;jp~u%FF!%Pv
zAN(xD!|W9j4Tk(CRTbi`!#z7pXVZ%&tyu0C0m@%g?juO-c{{_t#ATi3p3X>MTGB<$
zF`qd#7=e|ipzgwp5{7_S&XqWoc8<D9Trk1?z?-H;I1D9(K|lURJ-rJkj+rC$2h-rQ
z)D;&W@R9;uf2k{p??Ic@^6cfmTkUzrsM0`a-=;s=Mdzx~7AH)E6yiHIF_W40(x5Mz
z{UqLjt+{x=9%g~gwSK&bZD9F5?|A*f@Tkd^P+bCI_B;KB{00~er}J6c1LdX$uMSq$
zT%8$Lmf5=5-cr&01WvQ(*MqWbII-+*P$8lQce#}#@AuH3j-v!yVxGTvpuF9cNuSTa
z?4f%0k1{Te5c4<<>ItlPdWXJ@!R1m#0+&X=X-WD;=HkcO!YqFcroI8BEW<DYf2OXP
zl^u><=bVQJiU^@7x($z-s!SWoN9cb#=Jm*^r97Ul3ur9uj(O;u>6TH~1PSpK$&Z2X
zy=6Kq9_V_Q7!xXT---T@EragG{k0>eA>&BohzQ9dk9LU49K7tVL%P#0!NK<jzvYUY
z#~B6!2R_s?I1J<ka@wha@|-J%4B*UgRQacUQ1mKoKmlP=;xkBAd*9F}9TBY@&XF->
zHAcHxWT4A^#{m~_a#U<GO4QSj^@|J2VBGhqX<NDo7Xel2v%a?(R{*y%pCtW)IHu7n
zYc%>T@a^I5_War_1?|Da>(ndea?YZ}*af%TRj<D(I~iuWwU~uFA>ttElQfgT3zj?r
z*R*mr2ivn$lMWO7bRFWA3fm5q7E=6J#dF7;FK_jb3loa?Za$6LkJIEIugSPWp`$hW
zoBR;och7;q28eZB_T;~?dGZ9Cpf*ckry-J1Q4D=5dK1e(+VQ?R<>o^CKD%&%?si#B
zr#=CNe=^3#@IpNWEUUfs>aIZ~om%ZHS7mQ93yCQI+Ex<uf%5K2;4omgMYgX>r{Rws
zknO25c<0V^OCHUlE5BqHBIWxF^L^Gy67r1W+)keHKthAG{jXNx<|`6T#vs$DM_qmu
zi4MYIUE*&<g)elNSa9){$v!0<6bsf?PA5p(!9$eoiucRNQ@#-i{ojsR$NLHUB>HO~
z3WK_-DTW%$;Yr23`PBLqae9l~ECo65uLMbc0FH9wd<BW<)wraXTmKkD02l|_Mb7hK
zrWvY2er=vF`HSRb=dWU<i*)Dxv|)q+nq*dgOzg+zjbwq8^}r|Ms`x)WB$FLZS6#AA
zO{1hLxRgEJZ*F$YCD|IqNeR!wXavkAxO&0VVsg0cP95wJ)QR$)d7S>}BjTdIz2c4<
zG|Y1~$G=5ya@E|)CQ;joo)Cuz_@c&t1F6<wl0EJoq5(!$RFXxmfJgTA@Vd_CN1Cy5
ziA?_%3jfY%1RpDM_AD{v@u?e<9e2e$+~}i$FMlrcWPZx-FnfP38Ea=PQN#YTC8Kfa
zxCdTsS9zkW9Fd0*TM3x()8`jq2zV7hqTxlg32ql6w9joNzZu;N=(=EAxFDf#CGHGA
zqgh`W$RCqlbom(Hr*wyZm7q@cdAnmdmUY(d+bq={muxn5hJ@sI`)~tOcUMI|Es?L`
z+NBt?K`yL9Y9rU@aE_hrh_quiD4z&u9tfAhlg&B~ovi5I#Nmrh0W`4PW%bRGb*;CZ
zWRU?&YzK><Dl7yeS*wXe&tGTB+G8Hy^;}RKwWdw_^+}f0t*_7`Jr=7}GEqmF$%C^#
ziow-ma}li-D}!%qGF1yO<`aP&T=UXdf`L5U6%_wea$}Cy)(SaoxY>TNAYVTqI>hiD
zIDLE$o^n;?A0s0#bwgDtUv7a(!1bW`l>UUuG;!Avo&X*2;G7Qh!)7zp!@+BNLs|RQ
zOG?sos)rgfuNJCPW8Y69jUX@7bnkfyLgNMq6K;|=Hk5-}e9Yq`#zn8`eus$~V2!3d
zY(Ah`Ijtt=qYJhMm6p*CNtc7a*oMzi(k-%7K28OvLYES)C2~GX-Vj6>TF`xG@zwhY
zPY96B+}%3=Kw(QdNz>|6+FoN^Rc$Zek`SAq_{9;FlG1pdc&@=&7mf6cMK67*Trz6<
zDBbwSn}Ut@+ZlPC!9u7Tma^b2tBs|N=k&#3BFyW7;||}@H`bBT#`9Xgw;B+at8{|z
z+$8&3QeLQt)I3Xcp%Jh*h;G1ZE?J{ucay7!??-w4fgTWyDd6!m$+`zb^B+31t)dtc
zD5^1tNythSxzdrY?ga6&@;e`wZR2#r^$wP1D_O8GC0I}1+%WMit@u*PBc+p(Li3O#
z8727{Lg&h$;UR`8xBAo1QZ)YbBzbau$Lwb;Z2_V5wO$w1%a_e6?sg>Q07{ZqOZMY~
zWgohRd~Zmj9>qs=G@5{XdKGQgPF`8Z3mW=6swS{5$hZuI5+$#&r7Hxon{X1bzTCAB
zYiTR1i%It5pQM`lb3hN~zChy7kG+>)bG0|C?kDw)6l#QKasx(=vOV!dv;=l~De%(D
z1u(`DDnOgbzc0qhO6vPajr<{WnBmR4UJJA{@APtOC_fJwZy-f;$R~GUC$;orOlRB!
zL%V^25?j-^y&FB7ymQ4k%33Xd{Ftes9n>PjB}C}!t1ZhS(^5;qn5ui9ZDD|9&?M!Q
zb31xFAQ+2XO&K2<Or+t=P0#o#Z`9t;oA)wRt~mWAn|5m%*b-J9Bt_k6(qb`Kh`}{Q
zR%02`^Bv~kgoEXY{?@g1d6x<BW)Z3v>uD+7z5?i<#2)7OI3euU$5-#s&21s_PPy8~
zKjZGHz1glF<1saAQCOJTmlF?aUrJ(7(XlXoC|N7zA*v|$?n(H!Fo*Ke*dnjTU>;q_
zXG<bbyGv9O84tR7X9w}It#|&DIk$<Y-5S|uNyoFsSfdB5F>UTJPP)%jTcb*zGw(Z6
zVLm<doO6^S*`vK@IH%Qh?}izvGsTBGn*yf_v^b$J5zE4>oyyiq+S+dY5t0{@yZZ9#
zB|C?^RrO&aPl@S1q1nBnf2h*VB*1hZzsok6>oCn<x3VEYp*zS1vT_8(TJsqoJ1R!~
ztn0!MSO8^h?-X79&`sO{vKloVq?oOvUu@?p`-ONTdRV2S&mbF1%iGDi>a2G1)Q;}m
z%b~mkiy=`+=&lxyth2W<{1mGD%sWGZqn~WUb2eu7M<vcRC<1koXq8m)Z4SPC$xzR{
z;iYadz_-oX;UVskb#*8VRAj`nGz2i=2iMM=NvDmco1g0_kRi7=ON!2VT|0`=B`Jv#
zmGT0m;*#XiB4m?ml4G=~ymiYrOm{jWHV(%b+2fZW<hss>xsML04lCd9JO`f7p=6l~
uFTg~BM)@t;-^nj$GT^KwS2A~)^GONIsT;umQg#QOlZCQm7Z%VRb^IUVQDuMt

diff --git a/doc/check-perpetual-license.md b/doc/check-perpetual-license.md
index 0335fb54..a32c4c3f 100644
--- a/doc/check-perpetual-license.md
+++ b/doc/check-perpetual-license.md
@@ -20,9 +20,10 @@ On *Cloud Hosted Router* (*CHR*) the licensing is perpetual: Buy once, use
 forever - but it needs regular renewal. This script checks licensing state
 and sends a notification to warn before expiration.
 
-### Sample notification
+### Sample notifications
 
-![check-perpetual-license notification](check-perpetual-license.d/notification.avif)
+![check-perpetual-license notification warn](check-perpetual-license.d/notification-01-warn.avif)  
+![check-perpetual-license notification renew](check-perpetual-license.d/notification-02-renew.avif)
 
 Requirements and installation
 -----------------------------

From 094215aec72a796b345cf4af57ef7e0c6ed15d18 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:39:33 +0100
Subject: [PATCH 955/988] doc/check-routeros-update: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/check-routeros-update.d/notification-01-found.avif
----- >8 -----
[rsc] ✨️ RouterOS update: 7.20.4

A new RouterOS version 7.20.4 is available for rsc.

Hostname:       rsc
Hardware:
    Board:      hAP ax^2
    Arch:       arm64
    Model:      C52iG-5HaxD2HaxD
    Serial:     HEG08Q4FT32
    License:    level 4
RouterOS:
    Channel:    stable
    Installed:  7.20.2
    Available:  7.20.4
RouterOS-Scripts:
    Commit:     main/3287/699be25b
    Version:    138

🔗️ https://mikrotik.com/download/changelogs/stable-release-tree
----- >8 -----

doc/check-routeros-update.d/notification-02-neighbor.avif
----- >8 -----
[rsc] ✨️ RouterOS update: 7.20.4

Seen a neighbor (MikroTik) running version 7.20.4 from stable, updating on rsc...

🔗️ https://mikrotik.com/download/changelogs/stable-release-tree
----- >8 -----
---
 .../notification-01-found.avif                  | Bin 0 -> 14735 bytes
 .../notification-02-neighbor.avif               | Bin 0 -> 5737 bytes
 doc/check-routeros-update.d/notification.avif   | Bin 6392 -> 0 bytes
 doc/check-routeros-update.md                    |   5 +++--
 4 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 doc/check-routeros-update.d/notification-01-found.avif
 create mode 100644 doc/check-routeros-update.d/notification-02-neighbor.avif
 delete mode 100644 doc/check-routeros-update.d/notification.avif

diff --git a/doc/check-routeros-update.d/notification-01-found.avif b/doc/check-routeros-update.d/notification-01-found.avif
new file mode 100644
index 0000000000000000000000000000000000000000..54dd2df66c89607c0006f0668dee71f9583fac55
GIT binary patch
literal 14735
zcmXweV~{31)AiW4XLfAcwvB6S?bx<$+upIUW81cEetSP(y`8F@?$f8zUHOw#0t5s^
zWajK)Z|G`i2K3MVLt9HTCR<BGGdUq9p?}nct*Nu&f4P75%fiIQ@&CI(K=zi#&j08C
zA0pUWI@|s)0RA@<SlZYb{}+h@0RjIT|II+as6arR-v4|`OUvK?EBe0-&cDDE<UjF0
zjiD<elZc&--T!J?S=u|=|KnvW?TzjJA)2L=z3G2KARv%`0^pH<4wAj4yXAijC=?Xb
zKY%lIWfBP>{f_}cHMX;H{B3OG{%>V?APE0|6sD!Ut>J&UfA+62Fkp}%uzy_z+nN|U
zqX5A`a*<OIuz>k9U)y780bv=2q5-)uZYfCHq1>I!E*Z*>=O(;n&Qp2KyS<8U!TI3}
zzM)%C`@zeY^6MugR3#U9gy`d`FnW;PuAVNS6w+eAHV^jJ-Uh%@IBz(?W`dc|LU83z
zDwa<H#?msf&eA$*gAsN6!#_>PZaT;4!>dtH*&H;JFKI0{)(vu=%P6>I4Z_srv_NtE
ztN;E+e$8^4>+y14RdPx_Uh)2Jjw4B$O(s3|R2XCVD=F&59KF==u-^Zjj5oC3x4kx2
zVpCQFvhybBt+#8zRDrnV&<0gjk2cGDh{ICXGfRLO+Z0_PK^v@Fj2*1oIJcelhv$n`
zp($c&H`nJv;|M>STS{O{+I?H`ZaeD+rjqYazD3_ZkoJ>cYyN~1RA2AgRfeXf1d{qe
zBjO!^<7OX<u%kangHv@P<-uh!Eop-A3<1)+rUxc@0NU~gP-s9#{b){I?A=HFh8{Ly
z_qRikbpU{egLs;#Ugd6<a_6-2CB$o`VIg=Si0VJQ|9eFXeP)4zrld7i`Y*z{{?k`s
zW6*7e(wa$Dsv9=e#l3;nqiac}H^zlSfv6cg%3fi@aYVmOwD5ijA)z@Sf>vH-F^ee=
z7bO*GP2v=EyM<7zd3T-^`nbSUvStO+%T0$I79)+cdu;evFVo7Iq%Zuq?QK)A<NC_k
z1kxrAxw?%X#uKG7;T45?Ze`HXUy?WU<(3_dKf3pc)VW@qS&Nyc5P5H&aM3v7?jEXf
zfMPDnPp(x4{Ctu}htd!-NA%fXtRF6i>K7Ab{NU&Da{LmquBnqW>6wsO_?P&s5SlZA
zU<d~lqBVW{;4TFAT`gf^q^KG;HsNGwB`y4!AIpfYKr}$+Xn0)Nh(9wdMY5?ihU?YC
zHKUz8Bh~|=rZ#XP3>R(*9ZU@5fk$u74-e$L8b<ubcN92{4{?WmZd+?HMN_$9Q;<qe
zM^kmajl5@fnEb)6k3n4jLApzDQ?slKOfiVUXXiF*6QlbsoW3``cpR)^w^19?m6s$n
z?E!f)Ry3tRabLGZyW)UH&}r0ZB_<!R1y$@5V`%Ri8#y@!R&UT|JdC4QK2snC{y8Dq
zUv~cxY6SgV_%=wTt8B%RqmB~vhO=)0-*O@l{WANIvj<TFlD{=ke#8<3Ph(WXN5=o*
zo)}F$K(j6gl<0{B2Tp~AFm7&!K#5cRbR$DMQ*)lr=-)amVpPa^<H#C}ZK$SCeMu4Q
z?uWs`>4aL}?R?|x?~wb2VxDY9u|MCCFs4ZnAjO-*IlGs4;QF*MT<RWD{8E@hs!Js}
z><2DWW$^?WRcu5kzU<^@7FD-Ir*gFpbVZgS0L$4l6_$`if0d!{)~omD0WWl0l+*pR
zWWi}}A89We($G-ksX(yJsm+mwarg#@VZx1{LO#*02m0a2&iVK=gf@0z2_t^+IY*|E
zZ^hW`tH|#)TAQ;v4|VaisGf|YRJH8G?ld{wUkK}Ho#U*RS>G5l-Xx`dbNZVJg|lV4
zp3csjv|qW+eX-Uz0Dm~~T{3GPIHfL)y|rR*+8A7IfpNzu#auO7m<(vaYI&^|Kh=g{
z=iaxH?SS87iWCLsMIXVZWIjbvOCxcJ{2Mid*KW->m8|albsUO^%k)sFoCoah--n}J
z#w>+4ZZgoY_M=7BfWd3<^bl(kCHL;eKrzmO(iM8sp7EU3cLvn6;?>bP@3p`FK&e#Q
zw^?8`X2gj_0gn6=JNS$bnA^CRSIHvXau9_Dl#@gBxJFIUN<a3%&=!`*jpr=pMK(Gy
ze}t2Qsq&)YrHp!7UdOaq42^Gmfx*zhj}it3X^D1XUpVx)fiR_~gEp9noIY&`id`l4
zJE%x6S`>v&QX~1fS;u}l(+5RX4oOV-lh6qsCr+~WEK7T`N!N+dl|4n{v!Lx(UXy;@
z!gHkl0K@*ip4z_YoQP~ah?0}vvJmu4y<v_#4%M$&-_Ga@P$e=Lln3^VYb0C24g97Z
z%+mT(QryG&T{Wl3DI}m_Xn)82aNnQ=t}imA#olbGEeJiRoNtG(J%YtO!Z~*^D(Yz*
z6jETmhz>ZlFAcMW5p($3$*Ex_5A4Y;55)gU@sUf1bnh^dKX_-E@E6prk@jLJ9yM0u
zJ8$E24d0u#$tQ8?2v#NyiaPHCx@|(EP~xr7<c;98e$C#PkiA;!kx+)L#V*Qyi8U_1
zbk9koF@w$j!Yx|sPBBAw5PR0PaN;Uq^-*@BzC^R529sFG0|pAx8{t^VHBqMoay#zG
z0DjBdX_RNH$)X#LeD_O9oE7E#2=Y;(pA8qV_C~kjnB2Ng>yeUpIKiGNhHy{th$(CG
z8aH5;(@PERrx7MT45Pwr>tt6f)T<c=3jaJA6p#fGZjYsj7+anHo=d4>8_opfk%0*G
zB3P@c)tL_c=55aidfzFh)yNi`r9KdLCl4FN!=?FSvPcevPUfW(>e9jQ&M^=nx#1jp
z<goo_4?|~cKb;PN;(T%dGpNZBEgC6g0L?0Nl77z75;mW-_&YOulGjX1u=Wd&<9@0;
zY)J$ftK8bxKyLshJlj(%WicOil|OWTi<)RGbK}mH)NWgl=oSl@7+N-Me}wb~-56LH
z;>&1E<0btaOm|>&warBiIw@UTO@*-69Aa+#w8tQkX6om$`rfKS`99|a7g_G0_1Hln
z_Kc?=s$ShetG%wa$?x9Ljy>z>WQW9JQLlF!^?ae|C)}^`a^82iZPs(wan{fflF8Uc
zt-@0@=9hB=P}qcXRH_AwvZg6Q*H#zcT!@d3)b3(N2GLHL*49)w5mQ&os=7Tv;WHj&
z-^r%sbnLF0)vBi=Lk4*?W;Nm4tfA7(mBw|l2hzc@mD3)PPLH-2;1It;HN|{^x-uzl
zBM+(_h1C{fxv|R>o*o=Ru)PpeHiZu$n%$D_@SP<<Npq2zu-GOe?ZdXTAZ_Gv+Q$%f
z>6_cQU-9m0ppTbjoA*K+RkB|^-A|t5S{X#wCM`n-N8NZi3$zQDf9uFgY6T*6NxTn3
zSu*|FVLOBlA?8+{nLT`F9cT$dpB3T&;}8hoQlE(QL)zy;OUoUPE573NhSQ|1WjtE{
zMieGA#MM!DCFgdHZ?F+EzlsG{)U~r37V=5Q2Q>fWpW`WQY^r~sg2|Y)Cqn%Yvutv6
zvjw0Nw6Hi{)8_V6_I?AgUZx|0Zgbp5yznmERW7xdDVd;V21KWdJ>q$s+mBI?T5n8X
zswUk8$tTi-l1YZbU%^tFz7Lx5oVS>{<khN>o?CY=3}<JDPHSZ{n}p-Y>(Z_`vw2XK
z5Vx>t4WC5F5EV{5&vs2-#ND08uZ$%hK!}H*3`4|-YXctw5lPkkezzkwUav}hL~;9#
z`=Zh6WJp_JXEzkFZC!ZnAQlJb-DM%2+n75An74)}p!MmlgX^)2y~i`Go6Yh`D&|MC
zV#Mg`W?gYjfQp*q`yHs3X~dq7y_4+B?w?9X`5~;WYPz@to{*w-qYQUC@<p}9iy5aH
z(MD9^VyLnSQ2p}8A<aU2RTEY7l+p4b4)^3(Tpawh<6CZNeB$pBf$DKpotI!qrMA!O
zT8G|80S2G`u+1eYL!Cglv(ZX7bf$z~`D}(mCX6+i6qJj=pC4cCm^Di?>tjq?;+;$h
zv=D;vRerYpyqZz)Yjf!xM7Hy1BmOCFN)#A*UFbOg;j6*okZ3byb0Y#-K~3HCQQ6`X
zL=Er9?8Cyn<^7&=Sba4}S9-{b2!!})CH*aid8h?=oS&tVv~<Ey;46622P9!p-w#Ek
z-rBp;mOLoBzP%m#pd_=;4&Jy*%;LsS2LueoC!G{=+pgVrsVxjIJ<Vz;yO*#p>zaKc
zR%~zFXUpDD0Rnvcn}zk0VRZu|&?f?t&r(;^=5(%Qg%=}AuFez~b@al$ip5?~z^g92
zq1!-3xKurwp~UL4w$+*Bfg*h`3ZpZH%gM%nX25zxB(x&UIDxI3zV&G9h!rDoOWu$t
zUIX(nb$nT)Zph)pp;!VFaFf}j2{F0eq>q7j5{9Q{N~pBtwB1cfr$>yYpTb1;^jq}Z
zdvq(Z3~6?Q%Ry4f5=GU5tcEu>I?;=9qm37}A=VLeV%2zjY8m5xs6_Oa`0I1>hC{hT
zq=8z2s8CJ^4bVhYA*v~+(t4!u#ZH=!paoS|i^Vpt=*};*lZRN#@HF@zkw1mc0jr*?
zFm~TgJ|VHb%C<o&AXohxAGuXWr+8fuzDU8p9OJaXP;aYY$~lgNwO$LhIl(GwhAhrE
zQXL9N+OlD^-n(2b4Hsgng+2Tg_z=wR5?U+Z$k|r0;y_g2kehR%w_Avil`>+la_lYs
zm{)A_HLUK%y!H+qvoO>Sn!W9ei_+{N+Nz`Y8Buy5TSTAyxxyTWC>vPK>F6}(XfTvg
zDl47y3@m;98~D&e7C8iV)sZ@(kIzX4{MZYm>ymnPFdYR29WJ)<#?-nj>~O3}OJyy+
z^&JHh22wzNmaf+%(bU|cJh&?HZ!<X^Is3O@8Y~*mLKwCusHDOgm+@Z1pn7tOp3G=@
z!27C$mVjkUtmQbrr@5_}+lkr%%KZ<>Go4PsA3KAW>EU>x(L+*Oz<PeoMIdR>AbKvp
zJrYM33=lRqWe^AY8`KwFo45&TkW**vPGW&+Vc?Ehwq~IH?}3KQ!oIogmnu|H8@x3t
zMK?|2Nq2?JQ*%}mX5bv}S>){G6aU^1ili<dU{oBf=s~7KK~0-|+7eaW&fhvYPNyYa
z4B$ooEmFsWx>QCQlU|-6yvo(~w=4qBhLa_eU98J+TJt<bEVJZZBk$p8u&4DltsfEB
z5e~WeoTG7S1Mg3lFEZNQL>dwU6WF|WPJgBt$&pRBEp-<-pA5!qczr$;u5fqCKrO0`
zL~y#Pg@;>+wnZU5e)<42^U|MBhtL<IGSW~N#&p`O*1TdcfftB#y!(l#<EqXze8Nlm
zOxI@@gGX#^!>f}c^*@Nq80u#4ORkoVCxuJRV6y<akrk*QE3?J&)7(1s8uKH1$K0Ul
z#6-Ra=pnavJV_$N(#W>RoJbGVOQ0~=6i?`RW@ffgGgP+Y=g!H}{o+D&J-e4KsW-v(
zjdk3ECDi<uj1hO`$td_PY6~;@lW;T&0`vDQxc1N%$Y&esN4B3r5B{1MUMn*pDV?ST
zU;k5&zlRTUE=ZF(UGr;p9yTha-6g_}TEQ)!q;3n}Rg?J<Pg|O<vkj>(8hd@rwuUYZ
zT>)j>QxdafU}-K`PN-N}Xu7D*cy+C!{MEWOWFe#(y-oOX(dTUG1oE&pu}6qCh$2G<
zrZ2*z4;73gR;h*6*{{p-Fr#CPSkIUg?8NTby5mp1C=PS+bFvkpxN)k)2g?1b=R5pV
zriiDh1_}f45}z&hc1J%10)#!`Jx!t`cHhgQb-OB15o=Tvy@|DNGayVvBB>5GgE1pF
z4P~xn382^Y*+{o~<9J>0A|If5xxX|VL@G%@{<Nxhl(}LyhwCk(=UZtD)nf6d@J(1z
zi}fd;z(l_yTJ?1%EXxJj_bb)DLHf(?&GSwze*oBOI0ZJKd0{oSc-DDDdO_8CGX-@+
zFt^d5Cqv7}&z|S8FC<K3A_;-jV~3MMC^@)(eUHSdxxuk__@WTSz67?0fhvr@t>qOi
zuI0Q36tF2p@_ds|j_|0wp1Co7<n@@0s*KAFg35dvS>Qs+KwR;14TfK%Yyy+Uybco|
z!Zd@WD6fOG{RP6A0x(JchH|KHx!PoJT<;X_7OftareVMyGDo6@Um6%6Kq7i|Q9{DK
zNA!y5*G5@SfVhtg#~Foe)mhnW8uAnttdJl@V}LOnUcbYokQu?N+!KAvRI8iUH0A5U
z)aeoH^{DjG=YFJ0?mi%PX2MK{yL|?^MjEq-ys%jO%Onwrs4=pzr(|>2X^?nCQ=<NK
zpJ;;#(z{hGp07|LP84i)b?yExqd;oF{?X4cW--g}m>2i9=!#9MWG-lFW+0`^iwDdv
zDUq;#Wa3?&ObK>tY(<vUOF?C*kA&0Pr_wPLP095(wqs@Yvm0Cri9V>~;4uW{U;Z`B
zbPhHgQ8H}O^JgqY%>mGR&Y3G)61{KwkXu2zLWf8X@r^358S?5u?*MsS%<+QPxMhAM
zgVQ`-5fI>Z#HtO`-1s^B3^vqRzBjm(V@Mm@&v1@Kr;-Nk1AbMBv5c@eq1_GIu#NTG
zB#C*|EU)oo55*p4joe=tnA<op)f!jsD8Q_5F05kj?aV8st*mC>q;CMBlr+ThA+L4X
z#Fju%iPK8mTY;S*7l31qfZXs2U7IV|+qor_`3PFOCGCiZd^Mk^09s4I*oFRufm%13
zB)N@L)td@8E6L^c_et#xOyKt?0f~iAe|QB{&Sz--RgjEPBaCWJ9OYVSI@Fqc+hF2~
zSi0uMni{u9+=_XT;K~>V`v>M&BJ&j<?Al)!lUAA|W;LFsI%*+qSC%LQfBqsW=nq-x
zU71V}Pg!)P%0X0$Ybw*-ZFbh<i5JG&_-vzCyN^qCdzmBItPK$Qs5JRu-py1fw!|<_
zhA$L-xzTH}IhtdNT8-V!fz*vYxy)Z1j&*!UZC5pQzYuPuPV~S0J(Q+H12$O)%fjZr
zn${*?Ca6^W%VI(0D>WqXr{#Yv_`6Lk&<>R0Vv6elMrk>`bg^S|e>+inzgQOL`YpyX
zv*7E3J5OC2V3;ZZPCRKekYwA9hxD_aJWI74&m17K-LJ;)yQdBJku@bA7S@4{9}h-i
zmsPY;GGDYGtBsSO3bZ-A(~4s<(rxPQec=(+pK^IaID~0$9=o+Z7*5GiEsU2i@~WQD
zjeZMPA5L`iUgLSI26lV-SVm_-Ql*m|vwm@*m)&U!B25-Ef7xm3$tJ5}aVAez)E7s5
zJe?<<8Av^{2r03VRp~{U>u!!sO)g5#4=w~YihO1P>}cM82-XGxLPTnwh@bp+*)L7d
zPC4`m%zwqxU>vK5li8o`VCPM&=j@Td!)+M;%>T%RmQ$ktV535`q-=TU)UF`&J8dK#
zKpX*=Bzp<OIk`B`#F1z^Ae=qPndVp{W4Zco`y>Ykm1_+zyMvJ6`1amV-@kQdd*|{i
znA#gl<#{^||ITsy@=m!gGDi7v&YI$5)dmH|#q>&x<@easo$$UK*m#DQhG`!-;>EIr
z;^?=HJ+k=1e4Irh)xes-nxsRYqPEO+RV71c-{0*uAl8Ku3bCh#HTPTcR2f4=tryUc
z#hmRb6^oot^Et-_H4FIeWEHwfL~q^UWHL+wJh27y#2fLz?&*}ah#WyuIuBfaG;)dB
zH3QJXMsV*q>__Dz;?#X#n1D<oX~N;}?Lq9Bdb3Y7$?P_;al7Yn#YGys$~vg0XOv@5
zrCd8DE(TP4BV?^*JI&Yl6BKrQ4D2wYib6oe2pDDQ-KWE)ei2<k#t8M3Jes9`>VK2b
zc|(qf_v2S0?Iv*&{~4v2!dqtc3KatEhs0C-Ruf@~9n{g+<qhMN#E+U)%C}IuOYT?|
zq*6pUO@ccT570Br9cTaE;CJ9=mu<SRFm{@haP{xZ?F&A)8ni!Mw?SdbplR?Dti2_#
z-=>2zrnDC9+xK4>DKCg(Jevtp`(^Ac!V)^E=^d(hP3O1w7nBg}k?u6vnE!0GRsY14
z1Y9h#ds&LSc9DD%qi=~xaQRv3rBGz!jw+4g<l?VtBBkh09r?rLA}fd-$um4WPd}@@
zcDwy0_kb0CHwXTWZV%dM4-D?rc39|mys+|PXADMqlNXniCb_Aq_s=0yq>p|sFg{pD
ztX7c%0p;kyh&8vLurNN#oSSiX-W6bO<zv-E(AuT&4?v6r=D93Z`G;Hg<XmNB)OdVl
z`q!hY8sWLZde@z|>8vCennvyLFCH`_mB)dlG?FN2V9%M9*LtEdS%0nFczs8x<*hSS
zcLAY%p6+oqJ^Ivn&h|z_1FdT8h}l#00kumTqujdM5TvJrBxZg23=b|yg<pYZKf1{X
z=S19v1oOS*Am(Tzl2TVGvzoz^+ZxBMH4+?}%D%AB<HDA3c^)34(4;cF$4;u#4MVCv
zwHI;g6g+NI(JZZ!Ldk*l^{(usFSeFT)Bc`fo12Q{v~QKGHgY~gDgg^P+gXh^6~1?;
zp((fcT*5ZdD9uJ37P@{b?4FjfPBw5fR8mw6fNJik3&3Rb=YF$#Zv>Vj&v$#k%1o+Q
zzCSBS1ed10TGsSNHh~2cc$nVT6gsNgL#ctIYtmXk4g~Syc5akRAvPZ!JHq2){G;Xm
z<bE-95GFaWs;;5flZF057xGtmPYJoTjq#$80dDTExSQEx)(#XVfDz%tNmDQuY+H%a
ziI7&Qexq;m{6hlYZB3`2{F<|^p08ex^)*ulRO@E&%a9uDcT`uuf*UQ-36;Z7+#k=D
zOnMIj5BVEHprZCfN4Dyh3&Zmk65bAL?_)m9OvMMs7p=up!(eF4sG(^T+fP*=l~-ZY
zCsnAj2S?|8cqmX9ehq}~0nJLWtM6hmMofL^o-k-&u{X}hr&SEBNCXhh;6;FC=12xC
zTj~qs&el15e(jBuCPg9mQbGs9GT=}xAueX@*Gr7np-^GKjtvTicI)n=9TQzExr!yw
zQR44+5nueZ(ijXt%=HsXf~1~9CubyA0kW1BBSSOV=0%3lWY(8SIq2IUBDbIxTH1D{
z?y<=!l4&>$rkBPsOtyYi?iy;iimghN-bj{}6=X=a*tt^sJht4Q8iseSyk=<oP-3Vm
z3qYaiv_NFqc0C}xJOyDEbpzBVVREKljc7*7#PZknp9kQ*<!0RjTU$2>67c@yVRf_+
ztYt^w<spPmQ_uZrvXC58?4$)zee?FTrgji*7*oa%2^(w+ubRHP?fK#sCXOYp;pL*1
z24Rq&Qhr+4+HDJL=Z>YKYg&kk7g=X`QfCcQvMw+W;@Rj64V7k{xwmEE=dUvkmBn|Z
z_<hsTO#BlUWK8R>{(&7%dI#-cnOp(HGicwl(G69J;%O`TFC5J*LAe^WSAr9{N8Q2Y
zt)13FqLXzBt1sZQJ`wdXUtKi-1dpyT^8S0JG|PPmM?Q;=@jOm0Phc2wC4^7Q)}DFp
zLsGdJA7qI<jM6Z&&@Vh?DW~Mo&Rr^7hpJsQpH+uqU=C0_hHmRUBII4N!-S+~*Zebg
zayPi}D$EN@Wk^DnpQPv-SG(l*aaghC>8ApzGVCgiWNF2BUK5O8@SC0Bhtt5>0$tTc
z@Z6Qqa~`=f{Ahe%o#Ii4(tJ>FxyNk_dy}pxbpk7F1PDQgu(O+>=op-by@~+?jmgBf
zDE-g=PWC)(kl%SU1O0nK&o6KS^4}$uoN%2oYV3oGGf6+cFf9N!1t(7o)FTrIGm02g
zls80Mp~8Afb02X_G<r{3d+~iwK(DAGn1xSYi8WKOvjjjyu-TS}kgdjcVUFZO3^sAL
zu`86-%GgMc7n4I?m9^g?41*g~+Dve<$jK@Sjy}**35;Th`gsP^pdHzu4Oe!46R|z!
zQgzy<5Js$EOWhg|;=FRtbht_;1KV_RtDrWt)W2WQSiS1;T(A4_;m?oQ^5-9UZ4+Kf
z=$On_c#ZV9-{91DLX47jIL|eIwdE0N<62CXnQPb3H(dQY%tLko&Vk#t97yA~Q+%ra
z3#CzES>J(6I4kY1gw*`R6-UrFsKr{%vCFTc^hn8N@&kh(rC8c2{3$*}L60x6ud8s-
zbN(7l@R)=uqlMhC3STV~)bPJFe8^JlfBWZx5lZeeu=#|u(MJoDy2%A5B{tG_Aw<DG
zO3e(2X)dd>iH{h^te3{}&8Y50u9w|#hEG^U)z4EG+Yh2C7xv@4`SP%JeB?(Omu!<F
zR6Bu8UPB&zy7aERMZo(sL;Derl-(IO%hX+D+tRiBXHqwXn2|19z@in2#BzXg#SZ$E
zzZU5m`IO<%s_P)h;eyHB`1jXis6=SqqMy3!=rCsB;vv7*pFxSD!`h25W&EO3SB)<7
z05gudU(3}2hPgx$c8|0W2#Yy5hM^-y%+EwBG&U^&#yFK8!7o^eB6+mi>-gj0Ml$8?
zae||Z79hXS(jJouq)Lb}(k7#*wC|t{uaqPaer@AMvO^*0SDl0;NYl{gE4=G1M!tF&
zBFp?k*eyb=RW)vG+BSJLyd$0nw$^c^f)o#e?n#U$Aly}y04HDf0?@a{6|;C(>pjnA
z1j<Tsas@Id`uwQl%C&d+B$h1Q;6HXl)87@oj^*MkO7dt}TH=ZkW(o|^`jslUn-Cr+
zPD-EFLTx3T+0Jj-<S{LzZm2M$pN!tj|E2yXixG~If;h=MlC3=Zd{CY;8e{M}7vz|C
zc)V<fK_HLzTao;XW9-?52G&+RF*WViJc4s@p=WWu^8iAAF%-R=+oUysEHe!;uaFOl
zaU;y(qw!j3pIA*m4~bYj!Kosd9S}pi<Z=SMqj7&&*;@%h(1~fzGymn-qm5qtB>{)v
zIT2&i;aY#nM4S+Gp`&ByWPrrI!Vi{J5yCAa2qBcFIppZeLb#YdnK^J|uf47ooFWB%
z?g2Xh$gIAl!(Gv-*njQZCbBP@NGmzw7QypOH!&g2l*QKX3->Jujxe<OiddY`VdeOd
zcE3`xaZaXcO#E$dZHGRq!)mXk5~ptMz%T0LQ5T1F&KDK4`^tC($)D$@Py=nVK>$)B
zoeu|0xt!b^K&;hk$kF)Cx#=1q`*gFnX-ii2#NU}4tC0<&v)7zm2c(NrcxgR*gP_gq
z1!BZ1q@=P}OkgTt)wyyUv8h7nV{r@|2K@+C5*WnG-S2PfC3c@OP-fT^v3p^znxOHu
zgEJSDI%ux!-EiXW1+x@IYXhs@bb`ztXo(hDpC_RUY75SU3<#oAV0E+D#7fJWAXeW)
zUbf+B1;%$kBvI%zT)4r*gE@N7q@9V)khg6FjAnm?dz!tpIaUNV*jVoE7$$JcP70Q!
zeD@&k-QmN`!3Fs=C^CU_1@nU2>^HgX3K^*f<R&fNb*=;THh#|$e4|5y(ynAp*vP|6
zNS?sQ+mXJCqh3<yehm^iCzKxpb(-b3Brmob-1kqEexNxIN4`&Jekux(4x<&n#9c{N
zWRj)vK<$TzqkEJ(k2TSS?9s2}!+z|c^>YCX8$A69$vG2hmUWHO2hIL$LO806_lP@b
zX5O85d|Q}Ir-=Ri25X(v=$D63%7Pd}0Ll>A1@ZZ8s{uXDz6px`JE*5Z>n^>Dt1#S-
zp?yG>U-#5VWIJ&no1KE5ynKPC`f6abFzc3Fpob>>km~L4d96vJ8f!y5C4GQxv&K!9
zd{Cv>6T$%MRBL%P_PYw$TBQYj%qC?0_DUBqr%0_=@5_|5ja<Zs;bCT}lNtkI5ES?&
zP7VE!y6++d_cW}0fBeTBauVCro)T-<PaBb}f0n^#E$a#>sU3E|$b7uUJuI;u%n+MV
zV%yOLB#`q76m_X+Zy>|qC!rO8ZeLsgQjjPB-b6Py40vA499g&9$7~ZXqku1LBvoma
zL$=1#Mu{ONFRkECUw?CTct~BVq|7QLjSOcHRDn{ys)v{@zy8BAUB4YaRwqyXL%xyU
z|JX#$Q_OD=k&h;$%kKwxaEiAlzs0O9k0`A>*KiCTeow+ye}Lm6t5GKJn5nUIs|Bfq
zB8j&GySni^Sk+G30s&3$`G}<2-wc<&L_&dA*9sR;ZtaZWA#Dc~B%Bm|Y->s<&$1}7
zL4vart@ZaX`&F58G3>4bYZMl(5?xaIXuhC4az&SJRaw3};{vC+W$@EnmO8E9;yg%L
z3-U~>dGThRcq8N*QA=cqd^=9J$<AwkVmw&f;P0aTUE~iOO!`#tPnGxIY4>{7#Ezri
z*nzrX0dT@ClY5M^osTiehu+Gu7so=H@}L0&-*Rr~Lt-8-eMv4-pa@;oHk`L7f2FtU
z-Fw41e7i>@msOof@M-=s7&p4nu1;|6538}SFE1TUN#|<Hy`><duUFD+d4OLY&N0(C
z4bow=e!OZJ0?Z~CW;?T?4t7hCWm*LQG|DHE-KJoY4wg);9X*#4UT^*HnqQ;tY)re%
z&_0vcMNt~RxPhgG2i8Hz$-hiyOF)a){M<$LUqenO%S!B#nx_ZrD=Qc3l7Qi?_>Y!v
z>)y8SzKO4Qtb!mC-LMBc-Nu9~XnxKFE+u}YV`<C|#5Qrb+o34gkicvlZ#J<s{nb%W
zEbT*9Brmn4%B$B2HR4DtV#g)9fD*n;<K+S$GZ3=ReZ}&;Sm{r_6dl+=Ohqb9jew&z
z4;7Y?flv7+%DX)MlgwMAv_Gmv=Y(Qdui{jvK9L2-wNscKX0sIDE~Cqsi3Uvsg_Yh<
zfF#GUXj*GXKZLD2dkMW=t-T0ar~(DLti=t5$X;^9;pBx~t3say1gKH~X{QOtqlh>0
zp;i3|)lz+g^`d|*!YbER&{#B=Vg^c?>;d=j4AC&H0YWL|eqb!bmwI==$E|*lE6h?w
zfBm8we{c3Yw*P^jkf2pEbVro%4H-RcF!pe_+fWh)*$iv5avsRUMKJ$NRIFn##d80&
zJjP}FlkQp+tpK)_S4<1M-DQMekduQ2V>v;DUk3R{hKBmU^$WE9x6`cEdnz}~iS6@M
z9)QA0i8#W(jz6sV`ozfeBoFNV+KprxAX^?@&NPM?_7sJd>c@pxg!#KIW-+FSg_n=(
zwV1u+idnB>%Dp_>c}6^5mU52$=?;KcD?zj%dLL&B`ZfC96UA%(5*EktnRt$LG@~~9
zyC8}ZAjr2$#Fia3VY9)Tz3Kt>L94^UafnaA_7@_%;%AW{6uIOH-B!+rSeYF8tN;gD
zDuUlgmfN#8S_rx=-zUDyH31`?SdNJ$<+eo|)FW{SXg?Dv7W4@9gSU5Eh_~F4b8Wl@
z6HI+}_=1b8^p%75$L*7X&OpfvK5kSLM7GOHr9#LuV362|Pw*RD$I2uEE7YHfn6j?V
zW%aqpwwAq8PU0w5E4#!EBv<{`%7Gx9`!rjrOlQ<lXm8TvGt-wr&PEKkA1wN7AqG#H
zSOe}Toig&<id4KanC?f=FGn+2?yNx7cLt|ET?#ha!^2+(b$a~Wf3;hn-M|?}BpC?z
zL9+4h#N-5?AGnfAGT!-ktxYP?5kMCjc)M@N-ZNP=jl1Mb8#nWT`v!=kNmGx4`iH{W
z-mD4vmUGxg7hDVM=DyoGH6d+(N4-Ct{CR9t^2(~kONo;<)SVU~4%X(ZQrWEe%`}w8
z;yH)JkR}&d&%5^Gq%+j8p?9wDkCF}Ev8+wIiM^~g@v`7#gkc|OxHv8o-$~K9FEgRy
z$0jD-gb{7xTStUZAw4*@C~Pm)w8_2*qzErj_`X0(7Wc3U=8MkpLx_(K9={N%u@nuO
zXXpS<y12vrly56OG^J{K;!Z4WaXj8RHB&2kR{;KpXOlWeYYy;R&Aqv$p8D+#XRf?H
zAjg05Hw{a8V~|R!)+*tyP&@n|((Y;Izl#*==XQXWM&TvhtCN;6dU)Vaq}|k@&b9sY
zjIY0*sBXwc9`N0j{MlaKe3J$!&n=Z;D4611xh%;lD+3IsxD|_L%6j7#^3?}3v*A^4
zIlH^QVAX&*D5bD<=?AE;o`5vL;Lg8E<i~n%IYdRepECOyI`OA@9Ce;nSn@vbV^HMt
z=|6|1ACgyB{t*=|PAK5yvBrKoqSg<6=)k^Avsmo#1|%xsN8jP+#+~N9zxfVYpckt)
zKM8Q8UxCB+6^$y7R7_BOK2`k@LTb%iwhL8<w~Eld7mjs6SV{$R@GqE*Xv8RP%KAhA
zX1hVrHOi2sWg$C@DtB8Ze;*GiOL1QWJK|mjhT&O{okC^fLZ^sna3RBxY|};qy_=~`
zc%9$lF&^{#s=eQnd6@3ma>{%O4NIdiTyuEu-bYh<&<}<1PIRg+0|#Y2VV?K}yC6d6
z<W>JPdRXIHytirh$tStS>GQjNHIlD2wWJQ6-Y`WMi$)&GWwz87C0srp)1W7bf1irl
zP`3DJaVs;_H2De-eLmpb9hhmVLT3n99o>CCsj&TK<J4|YC>V_s)@+Pf0>nZS$em~q
zKZbl>+ei*M5~9<LvvINLXyUqnyYQ7hhhs%`BauqmZq<$0%HLv0?@Ym5Kqx_F69NtG
zJ5YwrrmG4-2gBkxSzT;+1`$^dGC*?nL`NCEBR*>H#v1KxCIu2&qehCK+#Nc-e)$Zu
zF8{Isd+!A#0_%rXiE39wON|2C4nx_zUuYh7<id8mQ)%jZb2jVeiNj(%p)(Y2bPOkz
zHptrr50Gpt5R=HtEoHT}sGtpnwk4ps@d5eX2{>NbAd!g1?}e{IUX;^h=D?l4%W1px
ze`L<}R@=+il_70bEcwJCQ?ay3ucwnSS^$gDf-B<mJ=7|ORHnXyh@H(&GhGmN4-qvp
z;oqRmQ$@F*s5HU6k8W>5kL^SAw*45m`)M-DVI|ZnR?;TLr`9g&AypjefAMCrR_G~h
zpRoKfxImJKdRldq&8`C0#7+ND*U(OCdXF~;p}5NIvh}4mo91fgX1CfyBhygm+G#10
z-4e!$bVo0T1@!x<il82zqK!6*IF@EJjpOe@Qr9%I@uq}>H(i47q9>`Qd}1!6FSO3j
zKk}T|?X4pro*7m6RpsFMuZP3<2@g2GTsq3G*>{;GS#{y|a<@hX^OCqQVr(0S1R=Cr
zBd8gc*@A1-;uTGF(4|YXB|eIlGd|7=HQ}6&%C`@2;D4wF<{QArDyv0BAx9kJZC;Na
z;1H+5t~jEYC=v492X>hL0JX7od*a+WYO_)rcA>w?e(m;#m8F)jqy7|H{~U2Aa?tYR
zJ+mhZv9YKcX$dd+{rw!wDi342pDIjk!LW>&aXBM?p0fMlA1E^@KYp`7*x}c{f*E54
z!FudiZW}d;JkdEaYJUSZe_ic18(1s-Q+Ciu<@e%^hD8*Ic7>7jt9MWZQc`(wuqKU`
zXTx>dYS4Dn*seUSKFOOshDzU+Lpk|pTGXwVv)&&Ub&rk#Li_EZ9cP7(D+EY6I#?lV
zgEp~v5_6akaGZ*BaVbbwme|G~3YsioYSh6|PF7g>!8bjF%zFa_@WgP?j4Oekjueoe
z`$7XX_w0Du0CgPzx&_<uttfTYnuwt1PER~y9eep|Z(adkn3L)6Y3+Aqe4Wk%&TleF
z<cBhsaPh*I%_z%bMm5m%;@E~&Bv-Z5IwgN^g`SldQLELHuM*(8a?KFe^V}@8S3c#6
zS0CQ^Dm!l+WX1SG8cK_byUk6vOvE3(_<P_)-q6n!8Pqp)rE&Iq5e6!~(R-)Gs>YKG
zq*eweZi4iHNxo)SYtd=MUD_=9qFPrLPM28E7E+8Ogv@U?+#nbs9bl}<%`K@9(8n5S
z-^w!eJ_-|HmOm5MMT5fwwi5QoVjV5?!?K+1w|>O^iR(E^g~+xB?uwUNb0x7712#m-
zhK;J04kxFkq7M&5GB18LOJ64qhGb}oIx~pZkJyz%z8x~sG3Mt5F#P6Om=_!|8A{NN
z8U7L5q$Z5-xA)0MD=+{eRuxN|g}Z8QF+zeUMHchD7)bR%KA*}xzawp(2tw)#QKz?$
z&y0ntb`b`RMYyiewBLc~MhSVmg<g7uS%H6xoG?jR#OAB$mQ^YtE0V7j5HdxSf77vA
z|E*9+r4PBQ9MQHn!f>;Lkm1^5okRF1M8DKS9Jb^&<SDfc7GyF99Gl+C4$a60$C6#@
zmxe}fZQ^?a)p&uE5UNd$oY!vEa`ENp#RGy<@q7$sWaW@Tw7RF?sENM<-8!__PF)oY
zl{0b2Z%U_#WQ1E_Ew_jqZw2XR(Ht#F$k)5B_`Et|<8I3|n8W9LUFLj&{nc~H87o3`
zCD@(#!|t`E8_LRW(y}mPWRr}~E~R!oBDowh6Mn>1E|0+uOIc$f1S`=hDCe`A66E>m
z&y8{My{upRBqBr<ebQNk-hOJXhGTDY-L)x1f;T&QZDjT>rP^l>DE)Jn3gc6+UCV*k
zR6zh1@Pe$sk98<fN@&m@y}*UQaU~NmviPO#?&K;?b4DH1IdaBaopqF-kEFP~v;*(+
z(kLf<F5b}+t(CMo$4>z~Iy(TSCGYK?a|!JUUHLQ-;gE8fwC?D&-az&%*T^xrR_C$Y
z1$g0xJVH$(951%$57Rc{+Gdi?-W<}3nM0hI*YjnyS#eQznxRnQ&gxJgmz^<-mtK`L
znPDbXu81u`!O;Y7KTpW&o`-5EkNy}DSua}C0R#A3!e~j>2Ra}2)cl2P29&5@XmA%N
z8R;x~t}J2F6b4u-=8ZT_fvBDz>H&6HXPD6iO$O`OC5iniiTu<-jIA?WHIWytYy1r(
z!%EWPfe%-r^Hkl_H<l4Sq*p5?S2$6X(dPvlHdB-at*L&UE)Cxgu^mPQjPT5!Lbu80
zTy7Ao9kXhDxms4x1)|BG-J%OvEm<2Nm-LDNnozv<`JlksS6y3j3lGt0800D>AJqDd
zU=p(dTWs#7Z$k!2W#(C^2gZ481^;u0FlJH9MY-x0W^4_9dg{@Uz=2$ppoiZjmf*Qq
zg{=l!3F3=HkEF`3J*)n-@cD3AzXSi@5AvP7X;vDTza(_+&EppIdwkRuhjJ$EZC&=^
z+Hf@-QWYQZ%aY=&XMapvLz18F!H^Ss^Mmk3xQKKLgq(EmzefYXMF^wl02*sj0y*oG
zVMU;~DbT>ty<^|bwen1nkj%J+&7CUh$nBDzt=z;uGsa9#(4vKeHwa{3icCFD=X`?_
z)B%mK?L+f6>!RP)d+=TmT&Bu1!EdK%J}N^IAEEB3Bndg;bmg0X_gj3-wW4nXJ1f=e
zXT3e;iBN?o!;)}opi_H^1BAsv&qmq787jr*7d;1G6xk|~xw+w62zPit8rLd+;!8;J
z9u8-*iiH9?zY|rO{Zi+xuQl=Mg^27~j>T5Z9KFBLpK)Qjl_?Cf_4svD7IpEwU7vS|
zGQ+9>BqUG^`^HZeKZcd<DG?vj4VEBAypW+n#(LaJ6vqr!_1r5I_OQu!)1(Jy3<e_F
zug@6bqA@`k%^umGrOEi+gl|-+WAe1;dY>kJ@#;MvKHd>(!QkgKhgOnCTHeS%<h|^(
z$LyXHBYo!g#{Ko9IAvqn0uOFg?KdA*%8?RdSsPDXfIr!~O?F_)rcUB@k#dv3fgqhC
zR^v@lZ5DyX6iF2PMxMGB5mz*-QUm?Ie%)8gMTGG_Oe(<``$|15{^b(770F#OpkhMR
zz~{%jlJC0h$|`GPj*`rtp;F;7yb_ks)yvd5okL=&xZixzYPuvkh7}kX&0NnUfl=Di
z1a}_9bVjnfzXq9uhhhqTmo6NVe_cjcdo3nt{#A6of|ZL~cum8Qm6Z?ZaeD8OR?#^D
z-+na@A<6I6w>Syaj%(B`@qVx_i$%~C=$w<JyNXapN2W{olb5YFf~sG-j?JOvx5c1#
z%{!hn<(L@30ErMowr*OTwex721MF)eDr|Lb$xf^#9l&i)U_XbG+owEyRbtB?$0@0F
zzRSG;<kJAH5b3@WSL@OL5?=0{G_V=7HMhuDM5PJJqZPMm#uXM{(^!P|CQ>^tsH1bB
z9o_zx>sWXO_bW~tU+L4-NJHwfPO1DTW4mv|&(_+BL7u8U(@R~1^&9=Ha=)(ME(^NW
zAIgoQB<n~jm|Duh5aH(dx1S@upVvdGOYO=-Ji`KfETf^t!nN`}lTyTlXHR~YNm?Xc
z)%OVHhl9jKmq3L~_P1mgY-p^#xXJM06j#RPVKUAj<cR)O{OR&8g=rl$T#~*9`3{Nl
zr=(yLg-g`skeUnP%2F0khr$c`jYp|_`m8H@QJW7wRq}Uyvj5=DDaOD<DF{yJ^%G<~
z<utI<h4%GToj*%NCPlKz@b~B9j>agfq0`<w8rD4)V|0{$;iX9^C~6=OD8Nj6txUKt
zY`_MPmE5-#M`Q|?U6@HQ5TBmE|MM7mw2UeKtKR}AUDN+!U5Bqe5Kgw)86OSQ^sI^4
z;a!L<n~uNW-+g5}d!LWKdyCTyUR4jN9S%<#O!Zp9jTc8G&h0$AhxyKuq9`O?v@UC3
zxs@MXugdqW>PSJw^W1#-bJ-CL(4fTr4&5X2{2VgX=PO%CBC6^d8p<U(^|c6#@DnyU
z;VAW2@Wqd_aqusyarY_Bq7dh~qwiDEa}BK=?Mj~F-H+aHa9Jn}tKNW9<|DU_Ur@Ht
zr|W5>a)lC&4~SrHEO8oFlmi29xWy>xm(<wt@Gw$;)tI4hsG~~PhX!rUq@r>B9<&`n
z_@2H130b&_8mQih(}$xI7@6Equ_LOE?-gM$vw_!dza8p8n%|(RYZCC}7*OUOARfBI
z-0_2d8``z6`_}T;sPc_4E-?`o+CvJ*;?1z?5wXbBFKc-ljyEM}LVFEj*XpT7LS-K~
zniy)U%X4IIfE+G(fT#VD+7{vQJ(4&>(&|eXbFEc-$z8BkR98@{HSfZPlw8N2fah|u
zK(wj(cFF1F@-Kt#RxZKWvD|n`O(Y*J22Zw4;^k+mkChG8yDp5s{3FhVNJkn*8+OrZ
z{)}#&Zq6-=S?<3`A}Wg_+LwW3lU6$F`~*vF+w3I#X}iEM_o2XX^MS`Xky<Kv`{<Z-
z?Srg}q)fE=hfB0SSzZPg+YG*6l3xE%FVwNH{>IjR55~VQ4%WGt*ti2`8U3!I--p~5
zXO8DS7)5-YmfGFD)vVbc+Y%}YjvxR@6NT|6Kblg<iP?S!RpIGvNxM2QF&S#`uMqmB
zkKV`v&{UpCD;j^@!c)t^`>1cnFqACG#<$wGZZ>2RRz7z!C%MqfMB7Q5IZU)?+t!dk
z-6Udh-kOriWI$(O;~9F++dF?od?@i`$+hP-3sX8MFmPK?v4n__J4uR!Qgfx<VIlS)
zvyr>F5d|}ZsVvJUr;%?=zEZFLRt+<b`LX7Y)5kNV2#CA}Lz8twP>J{*RD`d>W!Cct
zP1vygF3(V>eAFjFDI0^*wanq*tG)B~xx#9I%$1kji%OFVXf_>wq`v<$>fqy9!{AIh
z(z`iB{YV$|C`_hHD428mw#Zn@owumVMv4DOg|R#gE$w9AMIf%JbU^n@5dhH^%y;D~
zg2Z_%FvbUy#D)~)Uc!`FTI`VlmM$5%r#mEvgAu<^M9N13<X&vDHM8c5&DkpS2JOB#
SVa)E0Hx3kkP&5?i^Zx-E(l~ek

literal 0
HcmV?d00001

diff --git a/doc/check-routeros-update.d/notification-02-neighbor.avif b/doc/check-routeros-update.d/notification-02-neighbor.avif
new file mode 100644
index 0000000000000000000000000000000000000000..db4e9807af64aa2913d7a66a7ee7f40b249164aa
GIT binary patch
literal 5737
zcmXw7byyVK)1|v}S-Lx=Lpqo4?r_NkmXvVm?h=remXwk%MU?JtmJ&gv>%;eZesiBY
z=ggV&+?l^G0s;b^BQyYF;|q2~c!_`L26p6k1KT)i$nwj+NXKptP@8|fm!N-R@9Opc
z6afJOwuAnU{}1sXV5r-F1>#Gl0lRwG{i_rZ5D;I^zl?xLjDSFD_`=!1VE6xq{?`G%
z6b?xL%r71rUp{_$4_A->W;uf)UXT|Z1cumoydVkK8{+WKh=73f&yfFe2_Rs9@IM6^
z0|Vm)aBO_}<zaL$3;}`I&coHq-Oknj<z-w1w0AEOIT+$*^RM?3FN>idB88*8Y-Q<Y
zZv!Plz(NychEud+3Vi2Kw?|rWF9GK*l^W;1UXd1OEUdInnkYT1{^o+T1N&^38GFgK
zl$hFqVc6(m(|1W^#;zTzxK(+$ve~|cV6HA`ljHlvVND3p+-p1H(E`#M{FI~*W)|tW
zMPVdR+KZfO_i-7D8wJpT{diz57yLL)PUB|VB_~pV+i4};tk|_5#5b>3qz>Q;;#Qn*
zevTNG9yhlg_DbYSa3!NA7sz@B=}d15<7fr!l2OTI|7u>t#_1_j!*d8!gcv4;{O(18
z3w*^yKO3oMIG@5U5pA2+i|ejkgvS5<Fc|BeB4pp=%x}9b701bA1$u<Uym8tVbVY2E
ztnnAFP28waIR|WZ_vII}kZZtC76Xe=<q=Qt5@Mn?{b}%u9WWMMN0okghyKiU9oqLv
z&nap58NL3N%5Nr_r-mqk5nt1uU~2a>`UB{l4v_oMM;0h1Ky4=6dFI@I4=NenF-E1<
zZ!1cL?e2T>e=A8wNJSz(T{DR6KpoJ$5Dvg)d(CwwEuBT)n)*rafTOQOSA>(|ZACF0
zuMu8KuvPD~uPrkB>WUTFzN+$7^bf6|_reR0E(@Fe?-E|c{o+X*-7|$4Dz9bko_X=w
z<gbC;&W=&wVb*m=W@A?r>jjN6GQP{KeO@*@u|1KpUzlyf=s+Y$7IA6JC(Mn54m&FT
z^N|gsq<z%~C{!vzYDxI&Ks$;WMadyZBBP=DFa5($mW4MP*&`a?eG>IC$Gry^_}2`&
zOhwu*y)v?`rr@5DF6?|gO7ka4t7kIrp^5dg;OKsbFX3-KyeC*%;^L_dznJ*R8iWE(
zr5rM<cia2ZqEw$q)EPt~AFNqhz%4|h(4J#iRGUFtPWNB{o~;x3(wh)c6wY~G&a998
z^`<vPnU3ao42zj2?{(hqo>r{+d~a8zl%h>->G{H^Tx;5Fh;4dGBkD9#j_yF}Dne&7
z_OFhS{j2$wv|R^7G!WbJm;Akg69v{ALjF%NTMPsdt~Z(NUBL5RPV2#;@s?jv*GQP(
z%Txt|0x1>$77G%~!dkv<qx=qEk4D06{u=7>U;zl0gRN}ckE?4GhUR0@$IP8#_#_Y<
zv3|DLu7KyGwba9y5=7V1x|CYi2Ds-7i!9FXdiacoWJR}ZQt$|(4+!JpUrmdges47p
z5OTLLFLAamdW$#AO_`{q_k4KoVX?IH{ZBb7-9g}4ixMvZX-8Ep=|;V*VfrDZCJnE0
z=)mJDWhV9&wv;1~KFXi`)fvc>z<5jPyYzFkXVN@X)LL>rtC%Oi&{nAunN4_^%E*CH
z-=^YhP`I{BazOJaw~Y}y;%D`VYd%sgdA>`22?_PHh4`QQ6JSh$ku>>Hu0nk=0akaf
z$`hXDjq-UortSL=n<H%D?P`zCdU{Fpd+y);Z)OmI%vJHfOjG{kh}gq2D1jJ{-^q_z
zMUnN2q0EjdEd+%@a2Frf)F%ElhDKPd;+g#G-y*sEirA*2r@X{h061=C=Ye0#tmH7l
zlt8~#ws$=SPjh{fKQ^~s#~nY3(q&VsuT5ucbDV)jd*BA8Bjw9l$X@9YZ0SyA!C<U2
z(S4YfF=LK^^;P(o@9oCI1gMRf8iq_0Wg8U3<moqE;SVz-Gdz!Cn>tN2MyuT7erx6;
z6!)(BD9z-lf;3*Vq9;!2ZN{u_zxWd{aG=n~^EegnYdB^6BeiMyZKpfKuk@g%&mG`4
z&q|NDOco!9<P%UFG$#%PLBkY2^)mx>!&a2V!BRQxlGXT|t)^6p_L=k=L?~|441>OF
z_wlyK?#|y(-%}m+luPyZZ0$6xHaFN%z6sv}Qj9maqi`+KHBQUwYZlU|ZcPw;{U~1R
z1gAl4n+_8e>4i;qZbq8H0=``QEN0Oj6sX=wd@=zGGRVkU40lmF%0L!zaA<(Mtf0VA
zjZl6Mmyb_|Kv(?LGk83$Ebop<8RcU8dg+taY+zdIP0ZGKQWuiyqY=lY4K2>(jIu(O
zht+|puwuMP=hC`ucK`ajddX%?yuWYezWdX#cl$q~4-zjd&jr)&w$GHDl7F6>PFU~P
z2ajtk1$cg3k0NkPTMoVKkO{xGI#te;-$LSv^uz6*m;IzmNlzm6BW^wdchl2I*kDVg
zL<?MbiH{hv+jH;;fZBfP8ivoWr?;|8Rld&pJ~pmwoxUP{I1--o5q4BoG0=Zy-{;=r
z8cS#oM&oY&^#IQ&5=dLCbwphmKHmL-n^8JLU&JoLV{5(MmvR^2$2~k4@Vlb_kSBwh
z&))=e<6x7!Ag+>Y#>=G?74V(v^JN~{x<OrQdI6N4sg+}IMd%&7B7Gr_Z{N7}iC`8+
z$@thQALiDKxQd0~CccPeC>IM<gKzNq)TD=d^o|Nt9@6Co;T2Sj!NyoUVQI04aV*T|
zJ`ewe+cc&#tDp_$+%6|x{n&SvsoYsnjLWiG6lTpRIO{IS*8waK5J$9U5Y=36S)d3j
zvl%A})Ia7~@R<^?5!G{WWBB*08fYYTw~lB^T?*9Y>L^M+wyFqVPEqz(>LcI$q@~i6
zut$1xO+%s+Q`HMLVS8}uQz5@1>n^~(7cU|ui`9vr+uopQUSjbe07UZ^h5(lIoIPjI
zGAuhXz3|<~k=N|_;pDN$gd}&$K)dO%he}&z_<>3bCx5|e48!Z{M?KI`cGl`y_KKZc
z!XJ~g;)`_AK;Y`eunV>}uR^M@muFAi`Ob!69z3F|U*~Rzy9jyL07<S+TbG$W9eLo-
z$jB=<>ja*_w4v)^Z?+3#DZ9O=UdEl?4%?-{A$N!=AFcW<s2xz_DYEs|?x_&jPh<F$
zb96g}v~hPFr*7`?gxk6XX;u1903uad7*w)lp@8!jhXT$3EBLx;A}7?3l2yfwe5lFa
zOhcT=(KQ;sgr&4|(%kVADimKrrxn;@afN=*3B=j!KiL`%7+A}U_4TZDn>|N{Muk?f
z3Z<M+uZZ4=h?)(RI*^+r`Ujz`v-K^$b)Fbm!qj#cdn2-IHaWXQd-c{#IrdPBXyI)3
zTXnYyKD^u|yFuW(E*C@Qpo@r=Upp<aHtgF49W}kww$?S1<d3lr%an#Uylg5Tue9zX
z%%WIMbA|Fn(8(E9in2HVavZ{9Vmt3zYjTL(*07NG3C_MhlN@)O^s;TSPv+NnlFdCL
zS9QMO<(l;zdX2f!z|xkV-CcniMa!%zSxeR(im|Fd5gO|#b<kbQ8)=lhCtgYP?Qo=Y
zBk0tsZAH(HhF{c=432tb!8&++D8PM;7BmbkUXWOAs4_?R^yc6puq!X;e4xu)LCZ%H
z2v7q*{0MxcTWIf+GvTY6osjMr%jxM)cZL5&w;~N*F%Wy0i2S4G)&mjOX>4x9zP?;q
zL&M^arW;=##L(VUBZ?1Iq)~?FA$&^tKKu1JbQzD^V=fPz{j1`wRy@QmRZN`C-Pcq2
zgIN)vl=ZU`JP;?0!}-yq40rU}AD^bgBPmfE2>3b4yO%oyl)TjcgP~46KHB4YaAA+>
zh{&Et%Ajo-rELjil&chD$rNNoU=<DSuZDaX43uLX&;LD8)yHNtDO31yKIkvJ+#<&`
z?p#4h=x?DE&N~N{Z|b>;(6|t8VNPIE#$K<(k=*P0;EE<|?RrJWO%s{eU%5rA!kv@R
z;epbI`~v5H4PS*lc%!@%yREj1>q|j;P8cJ~WTau?#(R7KDQ5Xk#0N%oxSqBzc}eIq
zN?gqBrfQcr8_(pm%)Nr-Dwy|adXG`{sRK<6UbC`z&$I59Uj2DZI;%|9nIveRbGr}a
zuR3>)lu@=Lf2=f@yHkpy>~1v)`QpBh;s1{E91isvwxD$Ia<1gZHCz;zJljS&bh#!S
z3}8dg^4BtVUu7Vqpp-um%hSglsgs?_cMeK<OQhpjPFUAUzxM5#PKHiIHf|P&L6J|?
zUzGS`bIy|F2D8-xWAq97PDUc3#s@J2%n4m#4xn&7d9YDI=<}U~-_sL^DZJ3)H-RN4
zOl7$>v>b(G`ngmtSmo@;k-64}(irlc#-zOOnx83NOEc$42z5|r6*57VCw!fnSR;t_
zocU3GglZLV>#{m=Fx$#FN_wjShUlXcJK0-qFSYw?0NN%#uWz`hLH=CvwvYJb$u#nO
zF4*DdCppNo+#bBu%Q1YfX}FvYxG(Z2_dLzu!zlk;dtqu=L?fQmx3~)LltJ}!l$$y3
zm}5i#l=u{R_w$W=ys~o=<MMK5m?szaBI$%s)t-fBQ%@Yan0&Z}-V|0xikOoxx`=vp
zjf6$F9E^ug(|j@e=fZ5CmoJ3cA~a2B1N%TxzRbuZMt@z|Rw1SQu!vcmZQHfY0E5w4
zMm~p1O%sw75yjVs8!s3!x1@>u6Q^2hRoPyhHW=l`CfQoCAk6bJ&e+8F5GI!xRq@kJ
zeWt)f-Yz}NMw!mX#X%yaQH;Xo+eer5)%<Ckl)E_($5Hwjz7kvn48WEe#fb=efqig7
z;eoM!{>dlg1j?C+aGYtcY{{R^x+1xs_gvhkypn^d@>F2nWDO)iE)6+i6x&vm<TN^#
zcf~ta*nIja6U;@OLPiIzFb8JGFrPZ~K5t%n;B5xI4mEne{_7E!oDu37*`+VzBjipI
z+G4N`ptn$Qzd!GKRQRbh*&AaW4RHTiW^Y0;7_R0TvUYwSg<m*Fr*)|iv@@`VI}bQF
zc^INEWY$rmNDhHHKFA+0pDo^)_nil|7$#2{p8`VuGJU;YbF6Zz5Yhv%)pAwqNdb;|
z8c%GwljaUJ*_+8K&i0UW|5lY3myX0T>>-z!ZsQ9z7g~5tMX67LY9IC7B}Rl~L5Y&R
z$%?hI{AIc|7m}B+#j}Su>l?wWAv)HM?$Xzxy&0**IAkiue{>`vJ_CXVN)m@VWQn!p
zX!yn~r>EpgW!c&cGx}Gm(KuT8wMpY}8_lmYPFM+7D*;6Kj|{_|l;5Err$FnENB&=9
z;ZFjr1mEJPRCsz36HgxrpSJ(V1wR%Y9biO`yR&=-><exf5;jwXx`8WO>a`{|#}S})
zGWyFW!hD3xxP#$bLUK*ucbxLc>FTe9%B@*=47GxdwPzlBw{25zoui7h#~j6UF?9%r
zZH83L#N^m@Zd@HdJ4jsjFEN-qakz6e;O1-HXrKQL<qen=M(fJ^UA);gov;7ET+v8|
zj6y;WRot+$tSw@457i7mL#$v<#5nn&fHalxsr}=RU10-e&`ikRata3Teu>VcXIi|?
z@tN38CSdTzy(9bkbInGt)TP>Gr&l)D*XC+Ck$P?mQ6v;txT9)E^hWp~w}_{Mr14oW
z&yVxbJAdSBCJWWh8E5jGAa7SrW_Au3xG4<Psv>l`q6RyaGqRTCTR+l#YgvOoKhpau
zBZC!oNR{WI|5uv=eXhyqBPZcZ{wA<Bcfoc;YtxEb0)wqQ>D(an0zFK^lgXn<F$9zF
zSe+9syFEFUOXjfLE;UQcSVK=R%}kZ-s7x@!oFiW;t~3J`+fh-1)F<nc11ewWreD|o
z)*fWlsAkA(i!RTxuFpHrILeUJWX^R&E)CFK4TvRQ+$yDb3%H-Ep)op<#vx(2e=Z0n
zxTU#l=G3Lg(&ms<LpPFdN-I~O!e0=+1F3N3uC<9U^`WImB0dF7t;yJ_XC|Hqtd#M6
zXm6G08dkBB#~YTvOwiK1Vy2pWI*MMYIvmLyap%TO95(0L9zu82hHV6a;CF>df6tk)
zJKrarnsLUP71$_-nXv9D`#}71qpk#GpYuVIk|Vq<fjVgJLMq8q2g=Yg@_8bQhI`^M
z_54@njZg+gK+U*V3v+X~cBKR+<I@q~z-*<CG8la*RfKl%vj`$cn#6%O{g%s3%$xy;
zq6$_pr;PJcGbk#!Q#WFq=n&-2LsIgJ7WjU8kqAQTE*6=N7@2?9uq65x9)!FSfD1CE
z*gJty7?1BTvG-9epVV9&m^-ftWL1_vrbp*9i92kIWjl1NN+z^_yh)lR2bTn+j|HfG
z-HM;Q@e#G?QwJ%@vK!?xei4>l0JxpeP~5AT^7r;e5{SuWEml68eg#j7sW!z5K5OFb
zy*pf4x4Dz30J(asw$)?V9|lduXW`<w$jUg@?G8dmZuskwBd}3|#)4CIwTeUWJ@_Q=
zAVkr$P2HGdh2$(BVoar)T^(NQc(gkO`vgw7I3|A}%<2dax1Uf=7o5Ryd5ziN$LW9<
zrc@i=a?4+zAPGJWdX?<j>GPYCgdh8%zhYKSR}V9vWNdITPJzq!@<1k$*mp}GwVaEE
zNBY+H75noIBCJ>Zsz{|r=+>+$p73*c)JOjPIfBdjhG<bfUd;rk)1Wa^-da)6Q-IGU
zIiTac-X-ZFlkL$yQ{Aa@-Zd9KDp$$7=*E7aZy0VVkvq4+4T7zE1R1`sTe}l-7@JeF
z%w>qEYS)-<pe}W4bpdyiXXVRx++nMJv1?}U<BAHe2BJak6iMEpwuub#ut6RZno8NT
zkwMG`p+i8_#wpPO$F6RgHIO>961OFl1e*cHFn3?g=&7g{VA~z%*7qTz{Lr-KAmZ#X
zcb$7|W@ulxm-SuC-Zr&@5JUD|jkC%CzQI0!=WVPW9SIY!h%arCUAI-7mm(32S60+x
z*RI+k21R)n`b5yW3aCFlu(guuND3(LA9_~(!Z-gz3h4mG+Z{}aHLvgmD5N|pkw(=?
z@@kVK?*24SLn+;qDjqy%<hpbItrJfOljAJ%qI!+I({)U&0Xg4I^*3Ec1azoFCuP#q
z>Vww(Wr*A9+dN@8IR}hZu&RYeW17Q-xO@86vC=^2Y&cRBb=fa^q>((f%MLq{y}$xq
zOGKG9<_z-I31^x&;k7p-gF1GbYJ9Tdn`nWYk!8HsGvW{%PnxxRO(Vi1$0XtfFAXlA
zh=&j~GN6z18(LE~1`_QKJzY{YHU(NiPX=@RN%}h*%6@&$^)0WmRiiH8Pf;zq;$8<Q
zAb|^#z5E1@f|vfQ0=w-=YL`}{0272V{jVCvE@v#<La`mg6&sbHw_YjvmY{==-lPh%
zT+gF}R%rmn_cA#j-S>5G&CVzHVNI0<pR6GEj?-B5<JdcO?8e)ev!PSbU&s_)49%$U
zbR4TR%%pw*3oYd@(`Osd6}&>zZs`?JFQ#+5-})g%l4=460tlkwrX<gPA>a^Si{o+!
zh698`z1Hh5_G;y@VlZm&PkhowxFTV8Ge7+H1*Z3y`Pd$eTaZXcNdElzWoIJqwTac{
LPN7#I8tVUluxYg`

literal 0
HcmV?d00001

diff --git a/doc/check-routeros-update.d/notification.avif b/doc/check-routeros-update.d/notification.avif
deleted file mode 100644
index 50317cf7722e30986a49869f3e72f8983928e74e..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 6392
zcmXw2Wl$VU)5I+Y!CeCccPH54?i$=VoWtSppuqzK4HkmC1^3|2;ZAUOhmSm8y|Y!*
zz1>|i`)6TbU?{EJyq!%wKvpns^$#6DRvZo>Q!6DP2k=e0aIkbU{pY<Ey^V!E`2Q&k
zj5EmG?SK3q+JnsgHwMEQ<mT|72m98^LH17O|89~nFtBguUx$GuhJhhiedF{XkmG;5
z|8t1nE|zfr!fzQ<4|Wa-Cwr&=R@#D`!Om~G0?66i=?!r~uFjVKf-o>}Zvj~BH-hO5
z@&f%+;89Re-T+|g!66Yu^-qDpF?X^DJDS^jy-h}kK?;162tdvbrvJRRdV3fGEL;e}
zo4Vs*Vd{nrgNDX$MMwA*1;vItkaLtx(E@JCF%OinkguCAvLq@<on0hT(V_5tGt?Hy
zqbEcZP-mJ&HBaq+v;E2Z@K%yVvwa6)mDKs$xys!yQ?S;bXq0`G(ORosyO~EhGKh?@
z#c#2;15rw%BrdnBHLRhdGvLsUGt|C~3SSylZq|mva>M|vA-EE#n22bB6fbWDtGR_!
zq1(Nh%-GK#rxGPV0Xz?fcu1Qs9|J$<mflgZ(^&|t<6m!1W(5}BGQ=PValCXFZ-%eg
z)53KJPyP-Bb$O{I;l6XEd*-6ga=I}X?Uqfp;oXO1K|ox>WH5kE6AUdKr!O1O{YeBg
zRb9$*9j{PHjPj30>uiR0gG|8&TG4j8>24qa8*rS;f#Ot_E^@VJ*P>*i$qanmT^?Vh
z1-Yr|wlVJEO^L4qa-~-O$qqaD;u-f|FzzR74)^khzFfvxl1N~09b7xdw;S|rV_$?P
zi;CkSQ7W%Hqa^m_R4!89B|wXTJ}3dVht(HH=JqqlvtpA*2)}CJOZ91VrE6I>aU9pG
zVS%rDA*OaH(vQtwVag14`V&9l#NHnq{WOB;{G3SRQuzK|oKV!j&9;^N@IgY6;a-1C
zLYOcmq66)OJ#k7&NoL_xBN;q=Qq&=p&+~2EG6RUOGOBY`vnI$qJ!RDmHQ)Gf%s`Qx
zvJ)sdeW@&JihUkiM72dVb}8BOqgtZ_+25}tSa;t|Q>mpPOz?o;(h_X<7_}$c4sPH3
z{ixbGB;*62){gkR#3OrQt+D5ju`Paw*kPO3asqD<cTP1>U(U;C{z&^!mg#MIpGR8Q
z1i+iI>L8>uv{~pBxkN<!$os?y%j}!BL-8RHjz@oK;9KXX&kYdCyLE<)d~fg_ff*Xu
z5Lt<xkNk}51WmcQMusS{R`tF!r3S!3!(2YNa7s*JK@}Gu{6JxwP3dnzRTY@XF&Qtw
z?7&|(p%J^8_eq3-BI8H(z<W|_Lyg~4c)61a(8K)k?}!qllsgYVdR$uO<rgygiHg=T
zV~q`q;CnQp`>w~P4x{mF*1v<sAvSvV$jnB$&;;6^M#5$-3y%=Tj?+@rG_p$X9X7V$
z^D5-4d%5uxAr=`oor2yYQA)X9^9sNQE_JP3hP*DCl{m3}3b}ZZG95SYqIsAl>X1Y|
zV=onKCw*EY<h<Ka(LiCTd<V$Rf$I%y!e4+BoI=<CY{+@yvfks3t!=|5<l~R#76_+N
z476f8;kJYOOP~6lb@?h;e|ik7b-Y5;f8xh{S=+IDFTLuD;JmUVlhS#%Ep@Tr0=_c*
z+TcE&y?Y<~@P#oRWXkq$#;N)#_~FkxpOh)4{n*<*b@U-Y$7xE%C|@O}+1dmO=LSok
zXlR*|d9eHQ_hwwX;mGLmi5(jLUpXWSXjvX`!+VIxC?)sY4^QFJfa+W-Q`Cl4kKg5%
zn&CQ_)kUSsk#lPWLoQ|dD}MCFmp2^oJU5NCZNJVjiBtJdCyat=MqIBgPZs)M3lojo
zmoLO_ixV~gceP~M7DMqb<(vb(8hIG?%NcceyRei^Zdgxb2gxg|z`mZLWvBzo5Zm%}
zBbWX|y2vhTF-8Im_$;LqO{z7zxI`V+IpzvK(0mQMvu#S&>e<_gT(yUPK!+}S``!Rb
zX<367{saN&hRBLnzUUxL(dDnf&?C|@sKi;t<-WrfE5GG(NnSohwt4(g9Q4W2tDH{G
zov<*aBut!Z=FcPZapio-f`arRpqAf{LcPbIO9xXx=(fMngyZI`15We}33Bn^_CDeb
zGp`97(!9e+MrL_8^}YbA7GpFI)!YyJyr@f|%nI{E^Ln(U-`AB*x80abvVmuDh;6Y+
z6vr*?GwN0L=@IrP@|=mWj#7s4s90aPEosV5mUiAFz&?*rhlzJE04^%FU(|!R$_<C^
zafZ+ORAgU}6tBnYH8}8IyPTiUY|MKj?_2H^%Yu+h2gk{`w!D_f)lnDgScj=k^8#(<
zC&i%OY^*_InL+8D2N3S!Q0BO@zl?6Xet(dxZ{@Q|fuT0``biFDn1dm%ngGtfl?QF`
z_)^5fnbv&XqqMhv;^II&b5ZRzIrL2lfttBIq}Y0zONEP)OkqP(DlH9``euR1WH^&J
zX;Cbl)hmajM25ks?6@EK<8$|ah-l1II+>x%AR(Ec{>YEtn<5K)uq}0-Hfw)Q47lvT
zu@?sRC{26Jo^7=S#%T!FBG9(y09-6)`^vtfxZgvcC_j8*vc>JvVPCmAPxxAXct42~
z*drogm~P1b0V~M@FHYA$dZUE+;c@J4)rCB|hpi>2o$LEZMbM%1);Zudwu^9PAh>!&
zw%Mmvgt8M=Z7sECb8q8ny_J}U_ubX2Ie_F#29cVj(JSsG8}jT*P1{=1mhHEK=CZ6m
zWaw=f=)49~=*Gf7dsg^tHCX>nU^P8UfmPf(97DI)S2Lh}q0n$Vi{Ofdj8Itu2eG*-
zS6#VPSk*2Wg(SynTfRbgD4j@L9&!H<L8I;{sJ&oKP^9%|?_JM@TP>g{*nqEYa|<Yy
zBvuMfmDXBJAHI)|oL0*yIj%j9^_6-p>{v1IPJq@)_M>Xlh<0HCxmw%t?Wh>8{v{$+
zc$cz=&`cL_y~{>SV7l%G$&y<<s*Up#>5NzE7^I1D)V53I9@I>bpghd;=WLO@{R%lS
zHR+{nBlSSP7LQV#@aG<M{335rbZ1^b($CPPeYZaMRdbey63CuYX#r15x(DqXhqf3v
zT;x)yM04n2u~KGf>EyaP>qbEVp;i9MxR5k%UV>am&SWWXeGoH&|I)^<NBhb;71`C>
zW6HXr^4Tl!9A|U$MZjhWW_Xb){9k^Fw2@|04oK*q_;^vp^H8<lKonFlaV@2bXAp{G
zWlZ_Ctg;SmAoLUG+Mn8%O12bVGQ44!qM5ClKI8z}h8To_)7@-aQVG+5n2Pljg<sQE
z{6~fGAw+CJ5|=F;I=3N?&Hxj(fPOS&Ol}u|AVeFDAa}0m(sNpU#46_3lSwPLPh;2@
z4?!vzgOKh>2{mzDqg<amFf{`S$=)mcFCL)#DJDe7G4TWEO3euSD3;v<OWy_@KOqdy
zv~{S2F_%ja_TPLLHt~ncYwZQm?=K63G(nf~a*{$;@y*pF<9E%_^U}reN%<@;fx7-z
z&O#vCI34pkd{Ai*RWl+Jb87>3|0~Rc4Dq3^=+WG4WHV>&kX@$;n|OrCI2#?ep_d$;
z+Zo@7tPtdHBitlwb>-5Vm)<N~hFmJ?m$pl|@7p&m$m_XMzqv4Q9lKf8o@o<k+K;5(
z18kp~&j5Z5gLOMa9Ah+at2BD1pf<v=OUPI8Bc(=m{N9~<mhRJ3iK6O(k9{LLT`OPj
zJ`S<-_Ib(uI(rl?g|-AmH&xH=5`q|uOP!krS^|uFyrHB@En|KlOCn~i0c8vaMF;T$
z2b5W_qA(}vjI#+%={8<N%1zxyzCH-Hr%Tpul$H%<TqURG!^TyW{C2wNh{h|!0$+T?
zP8hj?QTK~iqK=KuzTQ#TO@Z%og|dPed(<s|h<OBcf$F^Di7sXKA$RX5=Ir&SkDu9e
z;UZry8D3$5=}7YglX@31DjoF3L4ZRShP(HJH1c0QNehfD6L^;IQ%S@0cpP9>&$)}A
zU?3HDwe9XdGZwfmp>17^aU?IvDF1E3haAxnOP`IEESI5`O{nW1uTjREx^5wQT&mye
zJW|&)3BVsI>+FemQElEuDfx@y8);YI@LvhV#Q+Y-f_|rtd@eDhGS;U_Y`7Njiyqd1
z{Mx;t1EN4;P{>aAQu=(F=!MYIvIq}0cKJIueTKAEl{8s9{jYE97m(t*@>cm??k&Yd
zCp^|(24LM~8Ui@n)v5tzzrMvyF>L$e%kv5GBifMS*VyZ8w$?@d;#(A*e{U`#*b9c?
z`cSviMTsLmOf^C3>jd6#Y*hx@5p6K+)ar{!Xg#8h(hCM;CI!ro$GpVo^nItF7{2tE
z8UlJP_ijQe!;)L(F!<_!Lhkeo?p$P_()P6vqHRmV9<G41Bx093nfL+``*bWxVx9em
zO(td$p@^Ode;ijP4C{JAV&Gn+g-TW*XSboRIKrX^J@1$*5_9Q&Q}XlaZ#0J%6{0_m
zB1SF#oFB9=Vm4~K5{+f}8eNHYn!_Zl`hY;-hdV9zw;2Ma<_KcR@VjW;+-UUC5i1jR
zKJ+KAi$?{VHc`qoDlg&KJwLsM>-2Zsx5mI;n91l3Rfl!=S+o;G#^{np>0sb}C>mmC
zS`xRdQ=@WHrB%|Y6j0e;lt38xTx%|uyno4%X?fui-Tw_C7qY-NKITRCefF2snEP~R
zOf<)jek~c=BJ;roo5OmUV2pxQgKU_ErlAvyd;h<**DPAj?4&iQ9)qh3J>VnV;qa<N
z2N=~P8%|q?U}_#aq~18}>E1Qw!ZUQ{yU%~riedX|*(ojbrqm8*wyvg-+fo2sX!3kU
zwtQ#L=)eo@W1inyjOCXhA{{a8fZl+vck1Zy?9YC<yVN<umM!DMRTVS~i%U!LOs7{3
zt8^J?=7B2(F@9qa`q5%#J=zi*@v`{ZO~RgwKPlHx%VT!gwSLRuAfm(ncs47o%fb-G
z@~^-x$IBrdB$0JN^(eO{DqLX$p6<1!qxxG63N7F8o1Itqi7Vgq)fuI@Yog?Bl*>#C
z-LX)t4CNXd8i5xsmpxbHUgHoK4h4l~+=44OIW6{L`!F`oT)i!}YE;lNF6vlHC+qQM
zf8y_!^jVN*594YtP|h`poCOJ+#JBkKAW<M3gdt-Wn#ih$(ka|6%$K}sJz7um9fbPB
zn|jvMLC9iHAbi+GiAw$B^-d4n`w(Zi_4f<M<$nj>%V?NXAFVq-S*$(tacfI4ph>x;
zPd=gSQEv!;jT~wl5lSUJbgazQhwJeLg+zHrVbgiFxe+)cVLwgvS>gXu`h6p_7H_;5
z?n+vS{h^{Y)b88dYKHueuJ^?$Uc}Wpfm-Z%;=WLB=Twe^qZC~G)i70_?zxp1vV^t0
zckU-Hc;m3~m}0y|K3{S_D%FW)@HY;72KPvOn4$WiIF#S*IhLffsWpKtpDS579kCp>
z7e5DABqa6I908_j*l?-nn%nKFSs2>Ufz**ymM9W7xqtEXDxTHfV$|4$#VR1hb&{1G
zQJ|8vRvuN(OdL1z6IAZcy4}o!x##(xrPpt;uuL}Tea9`%J{)SLq+4#18k$K8Ux$&)
z`~Pa@1%kq)SvF4USR^hfsYb(!ug?pbfF$L&N{ekJwfJ1m<HBXf)YY4YzsGNkq)Hr(
z2j&}7@`<z(dwBfGL}2(WHX@HRx&^oJJvlvmtCQ}Nw9M~m(@n(KP)_JwGEbpUZ1Fn-
zDgyF_TA}9~8888V_jY%togWB;=+cm#7fTCrZM9c-`L6d%ziEYvog^z?9qekkZI!pF
zp<(%~tzy7%CCeyv{CQEZ`-3H3gwYHQCRqie<bEHtMN5osH8SXi`I6VJLnhPNE7n^n
z(-DqrQ=mLIMRVf{_+>}{&x>jCwxL5Tj24jeHDx+9=fNnqMp{iJ_bF=v-2`yJ=`|Yz
zIQh*X_GIy=X)*zH8WeNI7Rohmg)0C4JcKqH5?%TUdTql~xg$Q8&yZ(dRCQ_d;Uym&
z)7`U$P3V6&O{ZwoSDJwJ?JMp*n{VQ*?l-~!E5pIiU~H-vJ%|A}{H5pvp93(3|CFju
zvk6RoFd?Xoqw9`O2uP!lYWs<aE3@kZzO50Rty09ht`y#k7`({OHw)hJ&whQTsT&i{
z3eqx^61#NSkQM1!PVWyv@!32#FH%X;1GVs%zMh;SM!%!hLNQgu39y(T)kt7hB@wsT
zUdDsPc@`tmC|)rUowTGp+nC?)4t%7}S)Skpxh-Ki-CDx?Uvbc1Jg4XG{9u@F<gBm`
zeNAJ{1+%2EbF2ugUuh99f69`-ESDLkm8B8Q8-yc!v|9Dc*-q;$yqW$M%fP%@9^%yT
z#da=!YDCx!RijOw7DU&C0QlQcl3AHhFnX)23eV@Cs569}UdC6?<Panv+`jCMXzlVT
zzuBLSq-^H^7+bOKEUNN~!a>h}kI8Lc@SUGL-D5ztf_-dB%0#_Yhgi0{g4Psic)c(H
zi_6>`=QF!?gVX{3#zVeMl`)`M4>`Gk3pQ&QPDMkdn$lEYQtiDd8k5y_rRnb+5a4mA
zW;42MD^lXBibxx8NF6;VgcKZs$iM7)AIvBRJ-9FCz5{ovG-6~MU#p#%y7(<~Clz)7
zd?&@qvwDl|6T#rCuNOU3z3iePYa3!1GU;bUAbu`dlN_zjc<5^MlUoOLY$Pl`F(f(-
zgT$E$^ob@38a!BlekYatFd~QcA?dK&xsI-OYyZIj5GzDjLGfuM&bSb4Osw5iQ>(Bl
z{S|vueqUVG3Os>6*BVEJ<J!p+f?c=BuiLoW0bIugmlTLa`x~+l$Fq0R#j^~pk~ZP&
z2=K+KR#}ajtkN$Ob*a6kk<wt_?tBfXSVImGZVil=LNy1>r^;68!<$KkUpIj_wxZ{0
z!)qSAt*ay+dnhHo+$N)=z89yMZ2RipJ)MXt*A_W2rGHWEMSQU_3^>S5kqxPPZl3LS
z<n^V%ShRMNV4o?w=n>9W(DWa;SWnaB3LGxUFj~qluwBro7)Q#y+R@4+7iBH_Smkc%
z`ypBS?C`MG*HzTvb92$zl5eo8NBNDV-Z|HH9Gm_HT(^|cwMHwbc6Z&3cE~`I=!CE!
zTyoZ2quQ+49}1mP+(uttrI9}=m@o%7i5<n}%f`wFe{af(dMEIXJ$P5Sfz+aI5zoLw
zq^VzoUU>$843l|E{F1uKL}_kkGH-yAxFgkARUy|VxjvY&@3SehDp?+I_(|1~WU!5*
z{gU>~-Z~|<8EVSPfFLfHq_6xf_=UctdG`Bef}Y}ZdZCDTs_+~$1s&|TdU3B|Jc{VB
z>$+-ZQNc|kb(}H*Hu1<ua|wy;$h_ZD+;vBN5rbx8&Bl7eC01>?Szia_5m0Io&>Azl
z3ECTW&=qGv&NsCB9j^-Kc%#O8J=$g&O!*-3E^2M29o~xc#{3_58W#)Gj6s$P^*4$u
zgq{ui+7=KM3b^?#z&2z5n6E+ic=^hE2l=_>Nr$JY4XlSSJzJ>v4_XL__K1mn11B)h
z6=lp@WaQlXbgFCbz(OE2Ier|s@gf%uVvRMgu$}1R%Ux%IkfVT9{Q83Y@N28fd<|E3
z*R2#(F|)@zBU(I35kQrC6&$pYMY#Ry^KAxdHfmPjtVnC2mV^TPpqARqjwn4#%}_~N
z6#SqKDNZ}F<ae~9=odP*C5$35aw=&@koEBAQ2dI;YabDR0*r?-`C@++@rX}ksH0Ft
za9NR%TF25QW3wJx1(I%Od&Hc1K1cE!Z#xZVh`qrk^D#!blS+UT9eyUSc`h6t>o3?i
z+TDnpH$PcnPpk>^(L$Kc4|H)sfkakeJcg^VnWiLTxss>#vY&X?Q+>DiTk;!pti}<l
zBpF8Swd&6i|I$K`Co6a1Hj40i?Mm$?;c3~qS7a#s(?`_N=IGwRqfWm-lW*(9cHRTd
zr*@~D?USXiDE^em%s%d=Gb**|>8a86hoD3&b9i?FrXZK$Ws;Dm<PO0$M5Hdq;v992
zgk|rrDSdm9D$&S;F*WHG2fWJ^SWQ<f;v5RX0y5>(amV=9Z-dC{vg>Gu7;4PXKWxiy
z=v(EfWZ!?S;K;}uf2V0bUgt;VT_h%1%B3DFrgaoy1ajUE6MliyxhZ>xtSV|;+iaX7
z$oTe|?~QuvEw3Pn?<U*MQ85!gQcFLY!s=K9#>nZs9tPHd>A*c~_!YZq>a^k1<Q4?h
z&v4WkK+saeR4N5B>(bK>JPQ>X<!2JGB+&=6j%_pHWLMTSrnrdPY@--tjQZ7qJKH_0
z&&CfF9|IJUsJvgN0@?6!+btP1B4kc&DADJX%{WehDkUVCG~j_Kf&)KOfvzm+g7hQt
zqxZSVQ~=J+0l}Zvxkn}jb&MW+9urM})XLg`St_mjC3%<cXF*tWofyRCPz+yLJ+H?a
pig!(VVV2E1`?b^O*Z2JwCR|PpPJ$AAI5c?6JMohuywnMS{|8dFD!2du

diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index 09458c17..516dc624 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -35,9 +35,10 @@ automatically is supported.
 > to your production environment! Automatic updates should be handled
 > with care!
 
-### Sample notification
+### Sample notifications
 
-![check-routeros-update notification](check-routeros-update.d/notification.avif)
+![check-routeros-update notification found](check-routeros-update.d/notification-01-found.avif)  
+![check-routeros-update notification neighbor](check-routeros-update.d/notification-02-neighbor.avif)
 
 Requirements and installation
 -----------------------------

From f77cc07338104160d07b3f5a4c7dce17f65bb31c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:39:52 +0100
Subject: [PATCH 956/988] doc/collect-wireless-mac: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/collect-wireless-mac.d/notification.avif
----- >8 -----
[rsc] 📱️ 02:00:C0:FF:EE:00 connected to Guest-Wifi

A device with unknown MAC address connected to Guest-Wifi on rsc.

Controller:     rsc
Interface:      wifi1-guest
SSID:           Guest-Wifi
MAC:            02:00:C0:FF:EE:00
Vendor:         locally administered
Hostname:       Wifi-Client
Address:        192.168.1.244
DNS name:       02-00-C0-FF-EE-00.dhcp-guest.rsc.eworm.de
                Wifi-Client.dhcp-guest.rsc.eworm.de
Date:           2025-11-23 15:30:27
----- >8 -----
---
 doc/collect-wireless-mac.d/notification.avif | Bin 13378 -> 8301 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/collect-wireless-mac.d/notification.avif b/doc/collect-wireless-mac.d/notification.avif
index a2833f095d53748fcf3e92cdd44e5469f83f177d..4b21b2f516d84a8c66ebb6f6fc85b76a7a9679bf 100644
GIT binary patch
delta 8137
zcmV;)A2#5^Xzf6dBMs|qWprTx00000001G8FdUInC<PM$03TYBfJy=ZPm#<>e;;CP
zWMOm?015{<W+xhR1b{NkK1^f++is$1o7tmSnm*e<IwPN`V2;nD@T$ja0^@<SW0i^X
zbo)>knL&a{x?BdY)r8o@_>D0-t0@7na}RxP-WCFn`bXwhrP5f^kU8V_M&;t2QLz71
zwt2F)6=P2lF42&Oi22<kHEUmRf5r@Zy4=EQ3U(_k)$*&%-?tBwVg_^H^2zl3lZ^tR
zq%+zyDn@$sl??=;DfinBesK$aZ>}?-8a7LD97K+>84`edQA>k#jKB#&gy%FFa|AAJ
z=Esk(SvL0>qaiT&f?A4mcWT7pdRwKyL-CQ|VQhFqa{LkbCTeFxyAc$Ue~1@Ev$I@h
zqz)y(K@8du8ydaK`ifP`cgPDGJ5Ywll27~jgr+`7eYE*M+@{+@a1ZUBG+ri@&kk&1
z!I(>5WEO9dnMxwblVp6N3$}t73PJ!QI0;<4;#fXP?<~4kTrD!$kub~Gu2@NMW&>A6
zNd7O%!6Ia5$f+T<I}=eJe>iT4k+A*F!#RvgZ58gkEh-?ICRv-H>MlFRQ27q_W*Sb!
zXExZp6Xxi9UcPPp90(L%LfZ`<KL$Knt=jNYPT>7AtAaJ=A8IaAyLZ&_$&Ym&_R8ZT
zjP7$<lg0$06Zvf8%d~DAhI@ApbdGoSPw(9tr2q&@M>ksEkm%8!e*_Dhdsp|1A-)o;
zAUbz2Dj8ib&FWXtzM~M*a9*Xwfzzc;W{CrC%?hR!l*f%Nb0K$DfAy`KXyO-aJkZ%Y
z15h90h;Ax__!!J_$sIro>5TU9iB-UPpmY@1<nPq{Bh3sX7W~E$GQLy=O@_B-8q1X&
zccTOjqH^Vbv`@)Ne{7Kv%#hu+nmS%5m7-J_z{CWsqM?<MmP}?63v%ZqTqz@MJ{}+Y
z)b(%CGVl8UZ<VN{*xwfQxq4m1`FiKN3CJSHqo3MB6_JI&jVN`=Yyx2=%|uiC-9R70
zv{@0X$8UuEQ+I0G(e?sI1OX(-77@H}u3j`4O0!xc215Pwf5=8_kvjeou*t_TUTSQy
zcR(m6dH?yoj^0O`D|)y=Y4j^qBEwJ^a`;wO9#V+{5>J6Vk&y!-8=mgq8{57(I2oC_
zlX^zopbnP>V-D2yU7x-}k!_aX5DSSZuv!gKj4UjTPyd9T5HUiD13g1JWt_?5H7Zcb
z81c==2L;Z(e<pDS8JP<8A+-#s<-uzR6`H;;@<P^u<ZhC3L1|v{ZtK*0p7`kq)=f)$
z79*lz*4Dka1zu+-u-tmJM+Qh$)Iw-bvl{$~fs)*ias@QA-W$3coksJ)5sP^gd`tdT
z_a&H60L=P};jhHjO-k?X16$MXvYRn4O%a}l0d723e_aUV?`O^)sL+Y=XRxrcRStx^
zNRLq~v7xt_?EL4oS85szJgHnEDj)wsL{4z;E#7yZGAChC*%fX=<|=h>JUvt#^H20?
zw$9uz@G4l$f`~ODbafwr9@G<*AT6?@caL)Ael0Y==&;Yvy-<l5XRneim7u3pp<(DP
z!m)eIe|Ae=?kl$=EA$dzCu!D=dfyxp{G5oLu`eZqey?bEl-+e8#JsvZX?o7TM|Fhw
zV<*K?SK_qw^soky7~wvIz%jrP5+M{>NK$zcdbIC;5e9vN2VOk_jv``NU)0JvY#g-l
zMZ>nt^;9jN)YAYuHqw|4Z6EE!>HL%4$OT1ne=V~tL(va$2D*O>koIR+rC<6IDJFRQ
zDnA)fvb@xUo<2kRObM3Q!SfWi<It$#BdNTYaG}S(h2IkIyR*R!7=%L;m&gR+$JsXg
z@y54cBEbkOZz!Um=n_%3n-`jrprJY3Wf8PD;8LD?vQ0e`>=|72c}bRx6y&eGgMED9
zf7~S|<uSE1-%&S8!89BF3xdfCR`<Harl_g^_*%@-7ki*U;XpblWdV!!xR)WV7dLQ~
zB4Ntv%(cKYkCQ%4fZ#YC3fZE<({k3N3pIx$Bn)3)qU#@KE*Be;jF|*|&`LY<=daG!
z43zv3xKiN7HLt@ncNdRJ<v<e?PNMz>e;4z_&&zwJ$h?hw^aXp9tqE_o^p_(H8m!`S
z3hw%XAhmvMd~JDs+Oec+Zod47VZ>j3AZLWJE@$H>R}WYv6zKt>4-lj4?@@_6E!{(f
z?G{ew;I;|Nm?zOSq;UKhdL#B$kl&9QXGqsy^WbB)Tnm5s2os;`%_n|aIs|V>f5&g?
z+3=na9ycaLU)2Oh=g2TtOrrTwoo00BI3#DhAxy7x@g`6goPun=i<dMSGH0C!rrRGi
zWC~kqg9I*+&8H&|g<-dN)9m~9IT%@eZ4Xwk5^A52R@X;Anq@s+<_!5zwaKl1Oy9ZR
zmpVj`eulm&NyWBOjYEpN_VNd{f7Q8vSJABmtoLWbtk&K<-*44L20Az@-KX~h7{}Y{
zaF#mnH-3oQ0LoIj!a{2|V4#7AAMZTZDHuoyBF0&+Y*>MjS}0yHQ0T$t%PDZnF_<Nw
zde_0}3C2GIe@tb_C3)!>E_M8@4u#``Tx$9O!MfZfgMjQ}q;<Pu*UWcie|??khH231
z@3|nIKQ{~RL5;6x1D(0)kxJNAYljj_DH`GYu?_3gc7QN>YzWQ_J7~%2dxe}8fpdg{
z?b=8hz6Okb#2-UpqlYXTqq0bLI>8TJ%E@ik?!l-<WV4;)?aa8Ns)%$`h`njFX-htZ
z<i}{}RM<LxeaE7?U5PK$e@Mel6{TLSE=7>(VF^V~?XN1pD+ib>>XcopL;|zr2^XH$
zN#`I8HTs2H{I^nC1&sEP429f3l(A?E!!*}52F0&DgEIxiH?{=4usJP1Ltc}#>{ISc
zFi0hjiAoTiLqI<AK5Wz8DVB^waUC(kop{Qz(^yR15UNCCAIOc$e{as$eHeMT50Ib}
zRiQl9EdB0?eFdA&$aVl0ZT)%DTE4$u;)8oo1^=1?=+?N@Q(nKmE?oPMc5I?7e%FDj
zfEHXkz_bSw=aSd4?(&nnmS?Dhri}znr#{yz`D5V7sOSMdHugBnQoFGrc_J7WJ}=j}
zAO}BNGr`=@sBp@$f1Y&T%XE$0?r1rWU_`(X>@9m;0iNV(CpT?R<B4Rf6O5kq8bC6L
zS^%VK^{SHcko8oH=!{>Tet*SClYNhmjY_cunk1X+{cF*`L$(ZIx=r=a5FF*;G)pya
z=kHv&zkK|CrMaifMLPEU@t{6;j8#6@sRFo?d1SB#<OHhBf1*=_R6&*#(H@57{NC$4
zn@DdDnxQj-Ba&<(i29bMXm$~HT8^tib;&qK!g)4zjUKmDaBQxisLK>6>%jroGdrav
zmKpZ~&~XH^{u#-fi1<x--mm!~P?I+f8M$E+1_|vgy`d`-wp5m3SXKdah@cKicV&#u
ziv?V^nCG-|e@j}S)G^7ZCP^UY!~qoC<KH@Ger(7TtcbFt^3BHq(bqa!-w1vtdI{<Y
z3-R*7#awwb*}9P{pOD%7qnD=)A$_=Bs56tMNmw-M><h2@)Box(OiR94prjKk1G$j(
z!+4SxDm{Hec@{g9rs_Lmz0ZRz4AZr1^vAyFeSj#oe=@ASC#>}$`7HZE#+p0rBq35v
z!72fh6zjENfr<DT-p@loEFS?6$DyJ~ypXSd^iNi9P$|=6ca9Xz4ip)U;pY;HqUi)|
z73B10(NvXy&U`rsud_rlDK$PhtuLSYh?+sB9bpOl2n9!{Hp0yAr&nZ+1i37y40&`R
znEm(*e;>bOLx%ECq%r2iij-WhS~;Vm;=))fQiBLPrQR!^rmXEP>-5<6N%d->ZbOqY
zi!w_HQH$w`!GfFS3!Mbr1qLHDHpT)94}%0ECkGQ9gE8pJUoN`plp0aN3hY4DF}HZf
z6m9+uD12{u&fOMk=VvlHayxrFl8#^W+y#V&e?kQVJ!`rjREm`c3=qYoN-l=HD)xgz
zkL$*=jgC~w8T<IzI5_0A`{~thX^IA*Hmn?tGw;>SuZg7s>Ir451h^ZQQMlwy{yM0u
z9|vMHzx%#}s!f8*hER>{`3R|rj@8P&rFW4b9xZ!&pYb%@&Yg@zp@U6(d;ZF_`0w7I
zf8Ml9O-fghY-Ir5IAfz#n-BH0WNo<=g(#mIYrOsZm6<QT;pP2>(OmaERlX^$weFnK
zGl7ToZ<`$h=X_@s;Dk;0e)daTEN%2kWEg|p{ame}t;31p7IlzI;YglaXniwsC-%M%
z5rs$d+S4bUsTB;KQkH(2_+i3VlmpQIf6&!8#ASgvToq6u#9CS{gFA!C*Q&;d`zcT^
z(noyKs{=?to)z0tJJi0%T1gMujIBD@*UNq_Vfx{|p;cf@U9_Ipubgya@YE)>8v)6K
z@e5bIy|-T9)V5fTbJ`zesr{t6X79&Ub>@tvqsPiElA?rO<%NL4xv3*~^eD4^f2@z!
zwLPASn+2Aa0`xP2*-lG92$FHB%V<bY?g-*9M_GAx?th=)m$oVOW;UffIZ}T~V>Ekv
zL{66cDgQ^kGL69XyHyLzHsD)M*glpnX<R>s%3emwj9owAs-+_U5N;7P&XQWtVN+in
za<#o`#Th3nJLI(VzJp7(I~##)e=b+zf0aSKR66;zA|vf*I$z8o3o^yR461Y`O?Py0
zRFa1`Z4C0%&P_6&x*PJ!6~*A{o3pZqCpL9Qe>C%uD-?*7)aW0`uGvTnbF)d_3n7+k
zVkCOLIz2_W;Ga2GSb8u44X`wxEBj0&Cz2zEn>L-^k!&zVI*i}G-T2rtf2#X^N3u|k
zpKb5zl$>MeAEbXb+d4CXwCsHdUmM{)(iNS4Bk69|l%6G==Sqgw5D6+`3vjw+ABQr5
zmUxXNgvMY7eE%VOLmPeTzZy#z<f>&^b66W^KmHJPZ5tUkX8?_SXYcpeZTfIcQ$m|z
zS~{nR^vIb0&VE1sx2Bb!e~^gJs-_D-4fm>~c$cUI#P0q@ni%qpu3>ocHTpYt2+%|a
z%mk-jt-2=|osHpk>4^@b3q;hGfrq2UYTh828s#x3-FBQrf)374ZOmQVDthIN+U(A`
z6<#6q4lE8{uBg}<4ThlZ=4xTh-gJsOJYh%xxs@An+TF9@p3@SEe<GPy=AI8Rk~||l
z(`hVi^3V8%9@JyqJ8*p#okD5m(;$b|jK-tsv_SWJ-AH)gK2ER3kHVAQKI)a4&%7Y7
z1Y0K_TvaAh?b;5M*iaziht|jL`eFH!*4r_;yjB2gE1~+PIxW(cdf>{UI9e`nSr1`W
z_qcjEiFIQ5BPHA2f3)*WS)a}0kNmGjvdVjla{*`{qxRz%*ZVWV=Y2m`jsOE$2fgrQ
zsdCmjVcCy0_m3E8vUW)4=M1eatz@4yQ$K~Q&;(P1ra0!DXeBhaB0AyR<8K6jZ|+Xq
z@bva6b`{oBK&rl(Hmz@L&wefRI!E^)+&{c4TTLBdynkSPfA!!Ou;V20vdDc@%jI5t
zX=tN#m1PYclUuq~B4#o}9ycf74(;^#Ho4C|6AxGOaNzK0&SQ?T3HntPzUrKv@0<sy
zu?alxtYa<K<n7j#I2o_B_Yv>bb>@*vLm&R%(1os_-5Y(#>tPPNPM}Z^1I%SrT0m*r
zN6Coapsu1me*s}5ZvbO$^mfp!h+?NBNM<;~Nj8;zBNoTWMu^CcJSB13)R3%-^U-^U
z1r)G8{NZx>w+xNz9TX`u{o1jrwKX7W&aF@$qpM7YyRaQh1V{*q7H>+wL3g121Tc3^
z>k#uS`}Xa<R<D=b_Q&hE=fEK&w>WKztlpWr7!#;Ne@x2&sn)(@of!7PnCU`+ON&l&
zmW)JKEAfW#$Hb|uoQ+apwb#!?bfY{$;G9?Idngomd(eFHm{aR<`P!0dq<E`dOQm}~
zFklb#-y9xRg$><HB5wZ*3D&et&i+edVbGlAhSd+x25CDX<-BOgU3y^eYO4QzUG33+
z9h~(Pe_eJ`NDeEz88p2K`58qa<ho@Tt5T6Bm#(jLVcTHdCCted`sY0Q9V~N#G(yzT
zFr0g<{2vP+j-Fn&2Qt~N%oQFr;A;McdDxxhN=baKywr#QU;4<lPpMqIn-mNdN(F6;
zlU-4^H%&JNd|h3!VWfDT4QAICL+#Ou_Fl2Qf6%8UQn_H++gL4ZYaxx^X1UgQgzs6F
z8N$N?3N6i<!78eJHOECYG%7BW;~%s^PdYmy0_qDo&F`#Ae&TEL&=|VXCug{HE`6<t
z%#EA74C%(1LtN^ZYAgJW>HT~Btqraq$3djO0=xAmTOfC}T#QY$_ER|RB{dR#ZR}NE
ze`uXpeK^dIE8z+u8crP0KvR<#fVtIXVmXPL?V}lbKenTu;+u;_%*vX{@Kw;m3n%v)
zYXrZ>KuntJb0-d&3D_DSD~8n=RIqXRHc+)ZX~7V5%gLwxGkTT`z>_&{1zSEea9HJF
zTGXZBMaZk8mW$GRZkVJ9-_lskE<ZkNe{<=C4tm^Mca;dhIuv+mgmiDYC3pVs_(tVK
zLEyrai?j-2qqZlzvzHPyNeZh~`ysS#cRusL51U0+p|-X`)-tojEhjm47H$n|Xk0q;
zANKLoX^a+x=!&Eywg8z{u)n>1pN!v=9tI3LB&{XjLdsNY82e@?Ni=owIEj4Ke=fDW
z5_X|CHKgc_L7IUlhsH)9qFrAyhF3sp;>#q?2w{BoQOi)k3Nv(UazSa1&T9T3C*#M;
zG!%856>l*jA}eu{Jv<_#g;Yw=UWzAOm&1@?%O<C+uy7?VeU;topQR|cc`5Bei@C5r
z?%m`Y+l8;nUoAelDZ6D5XXI<Xf0sAu4$9cTXl^C0``tGAfUAh5{67nMeSGraHUQLx
zk~v$osCLr?q8iXEE0|TJfLXndO0n);JP+Jf-&Mjn`54@<LEJB=<)w##t~4raYWerV
zt~ruBU{Bq7zj|3DCPU7w185%%;I46n{Dgm?8E$ka@&ZlE6A^l8KU(^<e|=5obCz&5
zk=<^W0Z(8qa#~{)|A^nQ-v<-D(eGy5YSf<Z8J<c?p5FOuKX$I<Av9el0tb>fTA7+q
zC@jWxBB_fw6K>|0$!y|%Qt4%k4RoZqgm<8hHI1C9^$)-aU|Xd!KC~%%<9}d;R8Wph
zMhOk|*UZT7nQ6GWjN3q`f4lim1EcdZTib$^_j069GKr}ZYLK}%FBmRb3|VQ5UXX7s
zNAmg%Y9REC>7*5B)7B?TbAIADeP7@K*1&JKUm;5vO&nu~BhIbm1&{GC9Xp0i_E-)E
z(Afz{tPkpJv0uIf#RR7;$*$tIpH0?(83{6G5k((o?Ubg`VrktBe=B;yV3<19nO$e3
z4nS_sV2qr^5FMA6?8L5kp7j>ao}teraR_s9f8;`x(IT@<Av|tcf5hTTrbjx%xHz#_
zfWkJ;%sU1X$hS}*eMfT?F%(Mf3vWPIcO+WW`X5D2$sNA5*qTVV(g494$Z|4C$1SK0
zO1w6jwd;7K0?sKGf7weN$ej(7t{}2GJgawgsv)R~uozo}y6^7CVPi)1_nfLf-)~WQ
z`!vOKS)nqvJ1jJ^b;TJXYMFu(<UlUqy~%JJ6%oNx=<h(-;2iOXbQ|r3iY*fgq&3=C
z*22@j-twIH2W4@?*Y;=&Dsz*{ek1fL9xg4W-`PVIR2$h+e+YTw|IE!V;XnR%zK?U<
zz0LZM?Gh0`WfCkq+R-Ip^OoVDVeyF_^3j#)At0|y_b-lPj&3?_dwehm{5lMSSSY=N
z7W=F><&%2S20g{I@*~2(q9TmyjOwEFr3-41))hWoV<K!>*F*`Ey)Z>bIQ9CT!QCoG
zp});-2Ax9>e-H<R>a>$}$#hO9qf4fC$-GnpmK={}kV3bd(qbR=${J(+DmDT*;}L)s
zb1y>p6Ry*5sFoaKJy$1fCLk{HCSPZ5j8Jubl%<0dT8RW^tb-1*vWU;sTOnqBpz15n
zjx@)Y-5N-AlX<dmX$DrQ%Q?e0JpQdxvVfoql;U9ve~EK^Q=CxuKcy@-@>0*XS&8;n
z0lGL)Zcpim`7pFlVjPq}I(Z;F_k!-~y{FS`_2xlQpH-j|8KhqgyC5dO*Jb0xh8Ub!
z==WVs+}_u!+y5W>Wl)<0Xm*QbU+9gO41RQQ!m+~Dx3~ws^H8mqa_EXdHr2ZGNv4#i
zg6RjZf3Igf)UI57r$#ShkmSEYK&B1Y?S+j#|7T_sY38xzsE92{4`^&eBJ1&{0NV%p
zhl~d}fAa@jvF*BK;|=s%I0D2;!3lM-a7PS?7ja|WX349BVkx6(EDK0qXE(qQ!ht>v
zQVj4RK7#j^{g8|=Cw3nyXZ{ltew)bv?tkv+e{wZIOY`am><AGajb;9DD(&R0xX0q^
zU0#du%{&VUeesghx1UtHO4(0kB+-CD8Qeztil-A93=}TX$k&B!pF3>06P$2j$7__E
z+Xfb&W9CI))Ez_UCr-QSj);q|`F%+|eF;~zMy1^*otE1Mv@PM`NpR@nw*|t@eVrl5
ze+G?e;$WNsxdC(I|Npm62-{{x4{LNkpw!h#2|&`y0im+{A`A{6IIra<8RAa7+FbD}
zq-Gl%Y-T&Bz7LKn9q;8}eEtggUEZKZnT742OOAx#Wwf2#BArSK6mNNvrhzme0+uLF
zEcoV8*;<Xe5K0&5Qx7=PRnOy2VR54pe=LQ2pnSdnPmNsC&9KrAKa}M>UB`(1O+<0z
zd1o}X&L2uaepAZE0CNi7YI~tGS=`g+<JRm68>-=}As&e#{FZbw$|g_)-@F>a0;$Y}
z<U@w<>Q*CZW7g#hQXz7|-XOb-zfl|XEqSgvu56#^hWe)EIWwOoJGN5@@PcqJe|Yz*
zjOG^la2mWD_N#Jm-HBGUBa`)Ti&xHcX$qO|xmKI7&*_xqJo`1ArBn~mR}+cc{S0-R
z`$w2;;}G@h0D9aRrgt&BqvlmX3gY4T2=qQF(v3${r3U*9&!MUFQVDlquHO|JiI{%@
zeBY7%;bE*P-1N{AL5Kv<Vf39Ve^Y_Q$%X+uiacjkrnhf1;D#K}+x|(U>GiN)3(pLO
zyc$^d#*PLoH9|iff!Ee!QuI`bP5uH8`|gws{`Yvp=hwughBsTaaAH(~K2(XLM)jK_
zRJJy9X~;~pDwomT*IjEo&&_nFQ$K;3=Zzi?ne^na?A88|jM+LE{Ec@qe+aZ_F2&hw
z_9>|ztjh<Q9g|@k^eLmDS=ZbYA=3TaQ4zW%MUT#Tb#zEfMpzRxB}YKL??SA)#av@s
zE3H)X4sR{E<-h-z4@usQ9ndK3CyII_MCT_5-Ue64PadGj_);^MYfyA5hh&sW#ZPz)
zmS*tXm0J#_&`FkDBBj-jf8DfFUmTozv@icRu5kCpJ36P3jbg0y>6k;LxJjsf3GhMA
zwJ)K=XBJ$jDiyBc3m*xK1llE|tP8!1^+)b0@96z4Y1U*o%J6KjX}ui+6=EALlf!j=
z{(3RAY^1^4xNCM_jAYs2#15Gc!Xx``IJnFN&g0>`!azr>`ob79e@##`6|f+Ye5Ux;
z%lt$9LI`QK=ZhyPFRDj$o2YUV1O*O2kM#ts1I++2JDcfFs#N5+q9sYu_n1<C4W)C0
zEN#pv2<?OrVC!#;-#zbz`Xw7u!I?fuF3eARIx{CxBkHcwQE{uKZ*#3Ms}_O|6d8p#
z_6-@CIo*EqB8Ua<e-J?h_NN0nh?qmJX0UiYJ8OJNAGFJ{u$vs*`V23$cuOXFIaQw#
zPftsCCK`pBJ<@<UGn?^8cTELx4@WuLi%4dd<DUwnlU0eFl(c0_Dn~ashIZO5h3b>?
z4udUsTr&2=vKr#8N3cIYtf`cS=Y1f#)05SKa3j@t(1J&je>$@nhU}R&U?Cdiyk=By
z08wq%zJGUtWxwPLPlb$|S%GGVPlQnb)+DrMcef8ay1=SzN!_Hp`4mZON5!b?8w4X+
zF_YwiPgYPq#a*rd$9HEml<nJ8Jq4);dPh7Pm@7_!dTpYLAA9{%3C^@<n{v9XHw2Jc
zy6)F-coRGqe+KAawU;*9>dOf`P!VXRP>dR$M2RX6XQN%n!siOkni9Jbs`{M79C%f$
zjqpbOfwVe!=M?-Ae^<{|)FSJ?#cPu}plo0y5(SrskmDFrn|b=Y)YnZ%)sNy7HR(6w
z*&fS3t;W$dslVDH?-;0+W9_+&NRga`S;R_usnK(-e{lVVKs0a5g$RJZ-izJUtY^||
z#C%Q<1E79OAnt%>CbOuGOEJ8lNOmdR@VUgVe(P=l<pYtLh@H2sfsy$-LP^E)X4(u>
z*)%I2o?Vyb`=jE~L1OX~eWs!}<L@63#P4|nGJ3^riQ)}G3{Ufrv2RX6vaTS`f_IR6
z+20TUf3ZaKqfY~L?b;fI7vpaWuVWrY2e_lU;kZKb+}bL)fQ8%N0}*?V>r+)2(WHQD
z8JLeAxT9&6f$%Gvv$^L5&-e=aq|Z0orwh^i<Ng(!kL~r(fgOrm8=+x7{VMiYC<2mC
zz-0gdnOI^Hj$g>1vm15Ea`i<cQ2CC+uTXqke_HIG7*acMyA8FwrLMEal4;W1GA}_!
zJq8^i(@ZFyp?N6M(2IJ{tt8RW{Vf@Q30iOV_Rx4vN}q7Gx@rk$X>$bI_=_+^x0GzE
zJ6Qe5kUh7yx2(36Lht{|lRVV+{bX`1RfY#?fXs2A8-X8Kr(4Y@{(AD+>!`z6v~omA
jAA5elZ)O)T@<$`;pxZEroEGyG7a#%Rfk&QdUh3DlV_>BN

delta 13255
zcmV;&GdRrcK*DH{BMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-05d3&c}fBR
z^pV9#e={&`WMOm?0162>W#=C@5D?I5GMHu&kO77mVL;taN^cVJ=g`$*Ov;{-_?prw
zd(wEXs!3##ieZeb-YMlfLTAlm^93{VR9k2*)XIr2Ov$VG-RW6`o2)9@jtvnU3hMZw
zNg{MGuu(o^zEWP)u2yp+Mu-?Vn-ZKsXT>Dae-eF%3~q*%I^|;p;bBr_>JoxS@y5;M
zJu6B<@8Z~ru%tt9#e;Q?&}kTh9TdqU3&9W@W2o=gf-z|ATY!(+t_~3F<h~$8PcH0w
zpz5S9PSrD=PZ0f{Ii;j<X#)%atXT^Q(igiJ%B9U#4n4uj<f*A%v7xZaKA4ftTiHhb
zf11R(M)MN;v$^vU;FXS+IV%Gu^G4pC<SItGXynWWrx3MB1}WfwgJQ<wqC)np4k8fb
zcr0&bNjHf_{hcSfWig6^LX<$1CInbo9Nuo#Uo8DuZb+H%RoSJ_6Ku7a`pDc?&I<Mt
zu&T4*$}}8!l9>(E=tM*>e|3_8*g>u|e+aCm&FAvAaKT55M)r@zmzvN|3K3S>Kpdk<
zR$`Sm@q4!VPfeYKmehlnBj_cMwtirdzV*<>R>tqf;`0@X-{`krQkV~ko!s$GHBLWQ
z%$w$8ZMP-KvfPcx;{nUxF=~UtjQZs@n1p`ziSY5bPO~6+B!akFFwS7uIpI&Se+2nB
z703pNDZ+<yxSj&JqHMhd5`Y8FY%J|VEDld=jqF#}seO8==an-Bpy8H`zl1MkLOWbF
zBQ=4$YOndc*H^xyjrh4~<sFv-{QaUa-jV7n-9fR0CQ8=gktD$OG-LhZ2mfyc`eUGW
zQQQ2VLjnl`v<;sEXCYe+Nhd{te=TR%8lUdWQ7B({h1gv&D|Q0smCQsysE9A_FBSpH
z_1$K^EL>*=n+wd|<RX`SJQoRVLW`V|U`P)MNlfTlSbE5FqO#rMI{?+tbt?)=g*1`R
z5>8B(nYZ<T@;E{e!j)%yf1e!xVU-S6xOcZCEvKjp?oQ09i8dF8R=5Jre+k9r3FO~n
zjdl37Buw{UWIN}Vv<(;9mNkKRJJ-A{6&2i+p&h_A1M>Fov6j(}H9umda5B!_B=QqW
zKi-Fkwr>W_&X*PkthzTEBR=_4^xe6~@+rJCK-k42BF~6A($^${H$rNrw*%I;Niq%p
zpB;YYO0*J6Tnwa^lqK0ke>Rev%oPu4h82vNc6hA&v*7Dxo2%$T%D%mMo0EF;-+9rB
z;U(Gf%4i<tPT&?F<Zry}d#L-+&I-eB_*%+sV07Jq_TK04nRSZDAHUx2lMG#*xA9Nl
zWa;Bd>j1yG@nT(MB_R<Y^}ouOV|TNOwGbg529Uf@uzq344C1SDe?(;;ylkpA18LN@
z<(zmM7RA|9n33L0DT7esu2cDsATIb>uJly6#7Eoyafk-jFGF~<A3c_g1rBFsedMq-
z+zYa!*iiSCpDqr#2QSMC@I{Q#;Wylb4wsU-194e_Hd`8*f}BMWxrE!$qZQwr4PyLq
z$#xA(8+n20x!sMsf2~PeXk=a?(!V?(nmk{ZnT><}{k9r$UxFxJKb#J5H=An~h4hds
zT9d`>!r=)`)0AyCN{I;NGE==SjYOU_4GtHCId!*PgSZ-08~A7HSVF5kvRBiwIWtU&
zZao~WB{^z{W$$YOeOMCCayyzQ{)^wLkJn%?#G(V<`5k<(f9~74$rBYP*ERHk5yzq#
zxI3LgY-{4xuvLoYfq89>zpV1Gd-o{z=t)9SgP+zIp_1~t2M0>_1)q4Wcxi%1d(HJ%
zMLTeda!7)$bA8~dL)o(w<7f}QFV91tIMEC1;0K}mKdvq%XVzuLBT)IBV}1A32^Cqo
z(a-5oHed9bf9i#)NWxE7CNTG4(G?-@i#lO9{~sAQ&BE%h4++^e!P~RD*|dks#nU<h
zD74-7HeKfl664GCF#LQ=?p~A<a1gn+hkPqVKt3G;NLBXIWt!wvf*Z>FfBIMv@00Gb
zGkq2{1W!33Cgg^%Cau=_va0!)a9%`mGgYBWh*k~;e|Jyqvd*f~gHj7G<FCB`&U29I
zBR>(=F#o-B^oAJ}!mQ{5tJsonXW3eTqT7|)gN9Sl;IIi3wnEMqUQ-;CJPLdf>|o+T
z`Qq)aaPRyhln+tB(Xbo_d!XGSNmX(szMk+N6nt|3%g5V!`*3?E>P~e5x0e8hos#9Z
z)cFyTe~6=Gnjj0m$TM-Wh}bWawhGpX|D+)`pwESvA{~&#796Rl8uEE)3+jliC*DMP
z<u}lg98#x{>4kZii#0sRWd6~G#DD8cqskD-NeA|hu#{o9q$bQJU<7KZ2;wy5=Qtt?
z{LFWf?0@~?6zG}Ms}qbb=zOKpRSa&`g{<`Te?f81NHIIa84av21%E=9+o>P9cvMgN
zStshjh1bucN@(8I@c7t&v_<+D_lJ!Fr$Bx(*U9!#b-BKosWBR6c8&_esAX9t`dl#4
z;N6+N_{w7FKMeLvecY|xR-rv>MNCz6PK9(Re8J^%(G)QU^<39mmd^$)3%ROjVCLPw
zf1<(okDu?nI7hG-i)jv6X&1WHB|3kHM}k<*i<0EXw%{8EG6FosQq7#*;2#ok5M%Hg
z0u&=e7){WsuejAsGrNvF4H7bWff5E<2rQgCUjE6Mq9oRhnID}QD08Kx_NIsu&95J@
zm-6w~SMC(T2OlIqP$H5#MZ-UnWgR!^e;hvWrMOWbm4GpQB$@qzaBf`tEoURrP>H&%
zUY6x*Hqg+q`-mNjBZ6Hq$H*;M)R$!6JWii705TEA*|HCN4Izm`J6Zr2ZNF0GykXHZ
zzfN@I>yVk{)KlmHa~iG_sxJV4+Fc2Px2LFDU8GPz&_B(*N_gYW!<X{KWNC%ue_TfB
zeGfwp?N1C88sF4>c~WaJi@nLH#u@bNb5p)3$=1_^Mzl_-o_c4`@d@Y!CcR7<L)Ydd
zjSFAOc<~NsiGwHmkZD@*mJ6Uphxj8nshSE2fPDaHE^e)1!V?ffYYQ1!1fT|M;4`uW
z$52;6-jImLZ9FF@>s{~C`HK&0f7WJe>%1rj0tl<2IN0|yQfQ3)A>6}8SEYzGRlJ{l
z%;ECEn07-pg60`pG@&|vaJI)I2*B{ps9FSDNSoJOl?1mufG3N3fTN#YeYhG`P-kAp
zSjs{`X6X$^3Ud%3F&9sPHI@J$=<Owns~mNI!-Z9cJlYjq<mjZ;;7rM*f6Gx6Fi36^
zN2|oTP<Ob6O75X?iyK)it;ab1Vsj*|pmiPgD)T%22Gj>Hok(9QR|XBe+_--|Kqq#M
zeWo6P-DLQpAgpZ$V-4?`HQn~0$J6-yMr#U;z?7J^8MMFS0~jZ8*BGH08$Wgvp39t^
z&Yc(S+^z3F=VjZq7f#4(fASb8g5ab1T?>`P$iket9~G__ASWuMh>rn<*lVK;0UtCx
z^a1S`2N+_Wm#TW?8LjX{riaEbE(};usY|qZV$ZJRcjg~cX`FP~yoW_nYIXeNf(Lp5
za;lF|$!CgYy@=L5+$A&HW3yZof_^Ns7y?z!Aw{TEpq<OYgFwomf2-zXsgEz5_3p~G
z;fw4dktT;`+CUoA8!uX-CQ1ML>hAw!;Ao$NKjN#iF_*|T-1?^suO2pY6lW;VF);Oy
z-H=i~xy&Lwqtk-aN!JUg>gxkW|E}ku)OXFpaHiJ?<PAl`+z}}zgJl1AJRwzjYg9?{
zjBzn^?&ee$q2&$ue-#I@Q9<61A)Z48n{?(RNe88*%=>C|uzlZA*8$oBI@UiY%kZ34
zt!GlInv&J=l#>ac<8y9mTgT%cA*V-P>YC^SU`4>kHW=Y$^Gu%zb%PMxta;75l%}g@
zuK{Rg``YNX5TvuKpziwu>=P20I~d&R`pyZ-*5-tP2c%$efBWXJxI1}^d6VMRrcs%{
z{;Wl71AT)39E9rwfz1*n>Hg;lK|D`)9vu}}0?vaM_c9}J1d8|fL_ajbyGRTS)vAu@
z5hY|9{-e*)JJ15;piQQiUyv-(rcPW*l*XJ!<oSAu6zVxHh09{{EgV>c3w(*e39<e(
zpEqT)6*SAFf8t{3*SX_)hBx4YF7#pI-4?t!SZoZC;A9p2Dh^G!5I|8cKrhhgyp>QN
ziWwJqZwb5P7nxxq&U`kY#$w~v7KeK=I4}T<kGrBtwroU+f|=dYLEMTKF7^R&iOVXq
zIwGem>hdDaL5h7gw^%rVS4C{n1oNqO4s?U!RunPdfA02`lFXgefCHNu?=Y|Mph7UU
ze!(q8(5m5kyF{;n{IDy1oa}X(w#_WYE+fQ6PDbWtv!C5}w6zPL`L%YkF;BrTskP_A
zt%&^yYf+eJ&%2LO+|9j+z<6nzSY`?+{0<nr3!?O)aWg}W=n|+=raH=Y&>qX1P_Afd
z&7;~}fB2Pz>H8OYZ_q{{qXY5hK2oT5=s{bTJO@1)2?;bVeq;qQ;<v8b5_3JnZIPrc
z)#B7`BjwCDVyD~JG)oc8m=ssJjUa-o+1vH;_2!%Wua?u<5Gzb@_1f=LD!WS;im*@i
zU(X7pfXvaBUXu;{Tl8M^Rj3JiQ_*FT2$QMCfBCyu0IUa++sbYOpJDaUMZN+al+6JP
zZAry<z|x6YiY-p_*VD5A<c+z=aA33K{@V;`K5n1wHWTMXniu3i-Vvqy1PJ<m^nCw-
z)iHpsw&niFEsbRN?4I_?kHB?mQuAwF%n8smsHS~gxZznnP}p=-6}m`s`r$&6<z$-{
zf5#%_df6N1ZEzr*RX9bT6c5OeV8(;=`vrKfY=B0QoyQ<yg+&<aM*R=#J1bie(4AIi
zgTGX<Wh}kX?;?4=N}@d?3}*>1qNYCVJv|srx56P+b@8=bqBPOdmXbsykA6-jg<J~j
zMiQ;|4*7Z^;;zOgQ8bX(YTg-qZkpwMe>E(6^JsA=Ri9bIwe`2T-XsRq?D8wS-gD?w
za|b6O{sx-%=m^0*Rr-?H5Y8J9SsnC3ZSm{fa57g>oMs)GhMs)(T_y72zY5eWVml4Q
zjVM=ca6G|{o$OJ|%`<U)ja{@xMYVrp{V@a$XWQx&)ZOh3BhY8TQGgCzPQ>%2e`3Ph
zqQ6Mji~LhSDVfE3F)JOlb+JPLPJ}1+tQhZw$sB=`(xM+f@t)VVJ#<d|&|OlF5Qf(W
z#<%6nhLpx9H{{mAhx<cIIl^ein)Lrt0kR?muIdUZo_<&LL`wEb7asB5hC6hhIanj#
z{65!quy{Xj*pYu`u9N*1g^nj?e`E&P2{Mx%Zk^0!{~?x_@ONMEFV%wwXk&fat7P_p
z+_!cRQG+Il=(Eqjpe8*LmjjHhYoGV1=q_qFmY1iksWwej{Dmk2#dhB7NM=Cz{$=X_
zefOQ|<VN(1l71FnW!6>h*Sd?e*c!w%p*RNeFsZD6P-4}<9kK^T7=Q<Ze^2J+M^2cZ
z)XR9&umH|eHF3d7?VBKiRC&;cg*}MEjM&C^qcITI=sHc#6=h##%pPWQagy;-d%agk
z8%^xm)6-(O8oe8p=%eb5#}=d~o~nsV+Jb|erN=w$QN5y{63zzDHS22wuY<pI$Apnf
zt*~;-nw;mN_W7Z(hG!j7f2HB6p7)y#t83O5K33nX&CwaDeJ0tKPFqUe@^X5l$aYUQ
z6ys`t2};W_fC=^0?oouZOyk{8Y@6#t4M6_x%s#t;cU(Mr(zLs${SvPl2|dQLPQ|-&
zv!3!Y*$!NMnlL?BWmy810sm@v3i0Hhz;uU*Myg}nR{+>SGzgB@f07UKY~W9fu?s>#
zl-C8^zAFR+aaPhlcLS)r1~!t#C#f!vdzGBI(5~;H?~~pYtlIVTa2g-sSmo^xhCU)j
zQ|#aH+J&oM%Gqllq^2ocHVRCxs&Q2pB!7DnizU;0A#f3S>gwQ6=Z!fFhuC-^tXTR2
z)ewXEv`%0gEx!N(f5JXH+J(64TN*&vNU?Rqm|e?I8OCH9YsHMy$G4Cx#Bx#?F((uX
zh01*!{duQ;vUfS=0tM$I>SP=cg0d5P&Ca4A=Y3#}l^eE4@6;`R_{hd(Q{W^YhJiTq
ztfU^L!8DFJ2@3NVgqQSto<;JUMB6Yh3chd>bR0v$P~IOpe-WA|B+kTr&H_YuBU#VG
zsngw7xxq)EuqU(`W|!DMz#kc{QW=9Ht8wRMYPz>y<^agXMbXF&D}jXLu-v1WytA0L
zJo_tkX;<cRN+vs#Z6NKaAWyr?vInS68s|l0%jMxYG1?tio_zkZr+4u+o;D0m6v(A2
z_-ks;v%g^lf0-PwlO<7g5UMu9<M{2gzYwGTkpks-o@`#?$eVC#N&O@t8q#N?g>#74
zD-(U-O^QXs2oVYOH6F#E-c8gOFx~#ZHC!J^S5wg~MV%L&c|f4|T%l^5da`Kec{?_w
z9KM<Jj@<k7a<rRc;zmlQ+nBnB4~q_fJ91JL7^8zwf6Q}@m@)gA9|-cJlEu#WH~%YF
zvVR^AhwY9D`Pcpg=|VCFw1jbDo@xYP|EzsO2-^*N#wa+oJu$ULxw>+xWPmv1PIV9G
z2A{Qq1z`Kpv&YKpdEk}4z}9=J7r*TKVLGUNJN3-2hG^eHTbpvooE_h=!2T4N#_aRn
z`SBGme`lUk8-%T(%y3eVK2)Mx7>E6Jp<1c^GuH`{cLX*Wmi>!@ZVYdBLG(G~9;I*b
ze$h^=-6`zZ|N1Mclis!nyHUV|Z7KS&y(g@L!0!Y!MPhinwf|hs>Qgba1{fX0C{a8o
zcTH^AsK3XmeAWPAX)?C{<@rp~H`bmE8M|f5f4~&j6qr*ZKV7r`1+u5SuVm_vyBUK4
z+maQvHf4*D>HGmupP_{|&n3VE61wzPHhh76>wvS!rATee8sN2crLL=Pcb<EhFiRuE
ztNH7Ujzh$aG+LZSW6?`KbHzS#ok1zC%V?>X1O;@KROV#-rIN+K61|vdzwaF1;Vdmm
zfAk$0SPqLG=$`38LMa9Gf{D7^4NO4cW}sc=mc)7^XoZDp<2pP7l0&EKi10Kaa8Dpk
zd9_9FSZ|p<OEacHFok(6aZ1*p{6gPtuPfc#{lty<jm0;*$$TBuhm)VrV6XS^>n#}H
z+bxD(i;9tesWZLfTto&iZf6a?{lI^gf5h9n9}lg0hh3qzDM+N2oRJH8HEs<d!`%14
zX#nH&W8y2OLgobW|Cr>hCl0&SH76tRG2K5ga!3TmXw#l3*C0WKuen)&EhGf?8S)S>
zOl~N3;3&YKmo$!qw>IgBj$EExGo`~)LcWI@Ar4U_p~Ee)?@<If->Fc(Wvn>+e-qt&
z!^}cNZLN`wRE0$nqmULFr{mn^Vbk+F=k$^YGvljvkBWs`x=bOz6MaZ3uH=nq)S1h@
zeZA%5T-;+_zkC*!^)2%--V!^jy3xOEoFvK(%}h^&`AeY2-21785bCI_o1_5#<c6p1
z5`$>jgVLOiJF2M1FlKV|`|ET#e^irwgg3|Uz!wR)A!uCz*!knmASzdZ;ma7G({aKe
zt7UpLdETS0wm~+Q97dI@1zIP#9kypL@^l`%q8vkAW#Sfrd;TiVr9kOZQprK<#_r#v
zxV+9zp}^Ylu5B@^K}mUx0H0SrR4LiKk}i|jXu8?ea0;*5ns2jbcOPu{f9;~7Y9gAo
zYN5MB|JP7{txEnb$n`GV{?Mo(A!WKY6n2B!beO=lPsNwH66H3XFZPIC_m7y%uq|4p
zB;%@=3E!i$>Fx~=paI<k^@0ivPgGFn9~ct72REW|z$E0DH|_e=zUR5aYZ@1P)Omub
zbu&y<>PnBL#l9kH#UiQIf4d3O$>NOgs<`Dww>auAbn=na5eh0FZGG1|E9hw{bbS#=
z2NjGoaWhHz`2N>P+36sZydlIIeMdl7d86+iNmz<^g^35kcT`;F`dDjadyP1&aRwVC
zJa~Y;WOlpO5^vP>w7jNaJ<NB@xc~cb*M;fUa4)Ea0TY@J%iOdbe?=Hfm=a5t5=2`6
z(`Mw{W)bRTQO}w=8Qe;OfH2P}XE31rHgjb<C_Fe;zl)vO4+-RO5y2)Jra|b}P&A^n
z&m_ff7Rh|%tQ7=CMZyiQI6;_T3Imp&c0zNs3}&(gxn8#&jPD|7m+7Xbk|<B6Tg3J&
zGa4?aq`SJpQ;`~Le+98>!j7@U3uXS>B_guo?ev`$Kzj3E7s<5Y!zVMwTWtw!ErmIg
zltGR!-(z#p7J{eT6&7+?2Vmsh{Y@%gAiUWw#7Q~XZ)-$}+t8yWV-Y5n<hT>GnR3}C
z_GFrnCgm$K=n2V_N$DRJLETWIEsfE*bqAvrd@f&N=eof#f5+1zd5+ok4&<DNU`7YX
z$r~<YW1C`6nE6|7gWAAX82EY|X#~<qu_F#gknz7df1grDJYI|NL8b<%wXW=;Wftu{
z^orzOb`gDl%shW9>!pW3`ZE~4N;A~eKp<u3l$iWQz&%9ZSHM`3DHY!^!SvCB%oA@i
z<7MiNI(!65e+0sVWqZ}v2kjK)cy<L*&?6S5kBIiCe4VEnbPA5-12Dl<nRFE02!^tu
zTk~=AHfmUe$sQ(ND6Qc{{TUbl`S>YP6tvGdO2V@CP57mw^Wr>8jIIC5t5S=?CC45!
zRiiHW00{>_5WS+i@`a*fIn_XSTz*K4gWjx6DoevWf4x}-u?uR4R&de_dn;!iD&c`V
zfRXHPwJSwG<H*;|{@YtTpTaq_vhhfwEId_w-}7Wx*3~0aYkG>iRhW!xAnFo{zn(4A
z5H2jJRh*K|f!2hr>?FS<ntGal41Txqa-_R~-<g1ipw~8%U+UIsMo!5#B;`fa9x_8D
zbh$y_e?x_T!E({^&E7^Y4fGCy!aJm`4mf_?w7HuZ9MgcDi&z0Ak%E4oXDHYKvWcGJ
zj#q(v)>D0uHqHY)k?rgV!w<{o>z9;VQ9htBzH;mM{RVbMNQ%Ccw%aHpuuV$E)N1)1
zV=Hk;rTAzk0is00_kZ}lG8q%X<xtgrjwsO3e>`w}Da$p~?eL*CP0hn+4)u-|?>OK1
zRQE9}1_4&@AX%m6qbQvnpB{A))PLMbuAWj2mHaf4ewsetF~qC-Ydf<1-iMe06~Vn^
zhQ#cieSVWQ$@BaYIwMca<Twl>>z|elgTt@J<M`jlEUO($Ie@!MHqi3SnIqJiX=M8T
zf0}FddmHG~bPzgcT2%!gw<eD3G0T>;LA(m7R0P&q!3sQ0*`Tx0ryfjVKzYGVq>&Cn
zMiJ{ZQ;weGVd$=b*u=>ZGDo+>QIT1RtbH<g&Z7;+nv*k3zsY7{l<Vg@;!(TGvn@V}
zqrIYE-r;kdRrf04cqz=p8hl@XFv|Q2e;t$@nklo`4za3ElFzK#lsq$szj^W&`FTod
z*D*<)KJJK}0x}8sdoI$}l59uxU@P_wPFd@HNKf70vU;ZaUXZp4aF|5sp;bqBn)$;m
zdzS6e>PHc4Gl(<+Yvu%o?!%Pzx9lG$JklvP?<Z1z1H;LunI2>FE}tC_Qil_of7PhC
zbR7q*X_iCoPyo7?@sAIKxB!L8wiUh+tY`W(9?2=dIpw!91pmV*&@Am(BU`Njb((pl
zs}#>s$4xT&kqcZ>r<4O~E~PB!aW7>JAaa8H5zN9lvCFM&GDDQ^!bk={`pt?9<T?uW
z^SVt+Rq#UQIb4^Ej~IfrU}aSSf9=17UCp3*ps>aaURr=P;GNwCX2Klh93vU=C2{F<
z`Ea^>^hArI{|6GCF3+GpMzR?so2eIuCkbbaUv0{FEQh<}jdFyVA@_1lt4bptC{N-*
zrF39UTZxk}nPs|vIBECJ4%Aw%K-d?MPBjoUtnxhW=BP)nF;z?Q<rlj@f6Q*v@&H5B
z6qNpviqDDP8m%N~Q9{G9u=f_5c?qu)aVK)M<(;{<E_5Z$vetUqJ_W;Cod#!@B$nne
zKt^0SO<V&O2t*<l9uvXq!8)j3Lr!#2<rXPJ2`IuKWHYEHKqf!z0KYs3>{3S_Ae5z}
zqF2`L*Lse>FZ`OgNNB@VfA4X1HGse2S3%M~v!$%yr+be@5VFbkg6qEBg$*0-vO<oV
z*}mI$`Bx7*5yVh9AIz@EE0ftm#_!W>0NM?J4Qj(OAhg9E=jrm(cU9nL=3#B#NUyW+
zqcZnDf0)GAk&+Vz?Dq9aJic(9iQ_RXLD<C$S|t&E=uJ!-G2v|ee_s%D`9LlM9e!T0
z5S{!wlddk+g(2o%aYmNPL%yS++DaUDN|A1d4C~<jxlgED!s7`ab%woX7HYcX1}z*k
z#|?|(5<tAms@^6~E+{t1IZTXO*r+5wA$p3_-yx5#vc+NDjnoA6`<u#Lt!|O;E=i<h
zyFn*}{_Pn-u_S(PfAkfG-z#9;m^GVn3Fgkk7c+0A*La339R!={F7XTJI*aNwB~RPo
zZgEh!H2@xYJV^7B>U>?g$B#1{L;MK>Rh36bNUuJ$WWrQJry%ySUe@OfGP#%d<=!1l
zu|;xA|9v9s1OP8j(X+e&57Up!jGOC2JSg?SZ6?5K(0owLf6C}G1K7J<ndd#Vp@tht
zQpntRNK{819hFY|M5c(lmoYv-m6vBpa47mVhDeBEndASUMa@?@7M~7sY_~BivM&3M
z(aq$CV`1s?ma1BwvPVR1?m>|4{wd9B>Ubc4Un&Jb+BtO~zlDXC)+rCkt!Znuaj(SU
zG6>5Np16z%f12$L#)Y0TT7Io>c{0b8U+#;>SB`vNC)EqlfB+w$XQ17?ZPNG{mq0UY
zmdD_)eD3%JQ|XWrdN@FtNxf`>9-1|iW=ln<Z!XBQClWY}5hy;evn%o)l0^4sfI@&y
z0jmsljt&9UHe6+g^UE-QF3ZAn`f%A?VyB0`Z)j#Pe|4YK7eya9yJ3}O#Dvg4lQ>n!
zHz$-`w{#bLu)#ezx7d|cPrNJgi=Q`5lEKjLt%uXJR3@Cgn2{Ew%sX<-*X&M!lT&$n
zmDY;p?hLU5hc2Q9LEA0A`+}GDII~aE?tfS@I}P<u?hhTs@%o};Xpjg#h<~UbxxRP^
z5cwqPe>&ABp2j}&>u#@w`(2rg#5%r-JvyEJ?uZLk#tItYEcJVI=MI8EJZAvqq%z~&
zzvkJO^_x6kXVo(iC;4{dSu~sxPmjteA)srShzLA7aZY>)|3#EWwTP@6KHU*6^W$p+
z(^7#<bd9h@g2h0li=^;hv5c%zG59h|>E9;5e+@8C6ZQ+?knd(S=ximc99rO$zj+UF
zSu(x<qv7b!#6%{2oy3lk*w^J*`zY=CS)J1@OiuzKgPwvXF$%fnz@xx%WrZxSwxhC6
z(cjf^MFX#$sMNTiS^~rbXh<8zNJ8eL?zq&5XGwIP>f|^7bA1^9>v?4kEI_}&fx^%j
ze=X~HVG@Zkmr*#X4MxDlOQpuS$Z=osoT7Yt6c`i#DrG=~FJ`zW%4sh|Js2mMyE7a{
z&UU?U?la7jAERqW{Vp37!o&>YnWp&YZ>s_Hj(6(kx-}&nxTrPo7{cAycVgrN))Jc6
zvmmLtI1MR*aU4*kGfm2h;g-|$UHhRPe=W@>V;$Qd-m{v~7)y+q#h&w@yee8%%wTUa
zu)#N-;4cdoB$B#`z>hv>60+XxJX9|K2Q(@-29BP|M?`TpxTjOR-)g$5ck*tS&Jp9P
z%a@8wpnu2=mkwLr7*}Rw8w=dM=-<Ui2J5CNhpNbdAoz^{G=94SoxF4`k&aWWe_{uG
z&smOGebk&FQ;g4@`k`v1c~MqC^?sa$e_rFj4ahe0=%oDZ9wk1Pm<JK1d?$SCA`vWy
zuH#IO>uoYdEY9wn_{EnGY<eGgoy{`cCD2kHv*%RR66%6jZE^?(NE?`vsgaHj6PboP
zDfP<q$e!>gFi@`};#JPsMSf4Fe~qm_<HEy`zG2ASUn2WKfy`++JRPYZ`$tuRs8<gd
z(i3Hshs561ekodp-tG0MDVcql*E_^zaPF&^OOT2`G*K6Cw2eD3u~X3XXY(-4_AWGi
z-n*kwkDLJJ0(WKKGb5hOH<2)yPq#l%aX#L73eJ|QvtW&ek)Ne}p~7B5fA<Vq)ZWdQ
z1Hs5}c?Q5`=^6ADxzg;r0Eym#n}ip7lmd_eidl7b>fP#-q-$+Ju%}0B3S5)ramR6*
z0J}0r`&qfwjLmu;Wo>pLLx84!)+!}7;=Ejr|GCABVRf;NcwtHpW#zHf_#XOMYMP8U
z%Sf|T?E%JiC=g-X6YT$XfBV5$3#h7%Qx2Uy;<bcAEB{QOkP3<cvIr6uw(;3Vltl<~
z^N_sO04I6kXFL%>@M+9un<i-O6`1J!bf*(<r6?IjjUwzuFG3`&Zol#EX({4v-J-!1
zigY&o@A^T*v~oXx2W3?6@J8EpFTNU?hY8%v&ZXzvbw${UbOSIEe|@HAcZ<7%05@#+
zhoOc*@%_ma1<vWtt3(ge+M@r28WwTXf&}nMK2t)=#RZ=P{4;k0b1O73)h$`rUQGM5
zF(5*@U}>Tyx^qXY$<=M^vRH_(FlWwCG)3=r&RcyCr*WuZGPm(i{QuP#ocD{FKE<Uy
z!eM2KN|x^3?KiLdf4$%X(Sf?f6%1e!^RU;<!oN`bGa(5<DxDrFf<W;CKm(-^Ypa7Q
z^ZcC7n`Kq@L_pECH9l$_)HOumN8P{J;MPE)HQraddq>4`MLAQ&=-+kJpbjHlt5|rn
z_+BziTgyAqWX<2-jt4&u<?Ho+f`ff;2dZUb^K>H)oFF>|f0R7&H&T7It`U6!0s3?C
z?PVCBBCPEtpJA*YHMA%1L=@<Kkcb_`S|QkpGzi!`gNNhOjg}H{Bz?CNNX#qzXFtp+
zKK}ioQhrMy`WV(IDJSJjNy-TP=Am#+JyAx*a>|*n4pg}gBY;_T;qG(*kO|+_EAq95
zV>UlPBI7U6f5EA^Hg4>ppLi!Ff{x>o&M%@?|49$C5iQhPh)Z1v*u^M>DE_WB46^3U
zRZ_6>!i)dN$iQKfkjo<uhzti3<jD}|D?Q$1l%;`0my52CNtsM%J)&HfW9Cs~-F7C=
z{@T}p4;9}_fD84cHoOGsUJSV)A!du+>Rqn>`#**$e_-`{0dh=_zfr&f!F1(5Jn-%P
ztf(Qu@!}&C3~lR>PEOQ|7;gpOycJbtJ0dXoH{d{5iP`y)#y~=ufM_@!aQ?ab&7kq4
zUGjJ<`?fo&LY;U-5TaP`#xp>XNSl<&w_*Fj@bI8FkttHXMq}^L4S+umzaz@+nuY&o
z2ZrN>fAolpO1Dn8ku?*L;Hzz*Q5R*No`a-SLtV(e2ip(wRsOYIH*gNhI*J;JnZc^s
zP4agk{@<>Ynz?B_I14%3K9u*%4iRg}kIjLtT@U)!C=_kKX8?Y&gk@2tx@p<AOdla2
z(@=RbMvnwLWb};xDIQM31*i5pta0sMT~A2-e>}tBE>5H-V<;?N`zbk;bKl^IvEEKq
zkWZd551c)+X{B(W{+$L<h|)%r4NyWAj|)xYoShz~wOA#_xfG=@!S`ijD2sCGypkJ$
zWMMcX3azmZ;N2}ZB_g`V;qm6k8(3o(fJN6tkW5}ms<U8$Pi!Dq%5~mDX+*32Gvn42
zf0I8SgeZs%J$G+w<%g4eaq*YPNr4<Sm*7=B>eQyUlK88+hD>$o2~#cHJ(lT%-v7=m
zK`<q%s~OHI0IIVBu@PlK^%B4!Zf9~_ypTvcv~`5D(jIaJ$dt+ev^MsF&IfIc+1TE&
zWcpW<E|vzq#KAopp4)X~iEflj#cQm*e|s)e%64?W=g4$;U7Q$*xVj;tW7}9Ieqk(q
z<FO(&KodZ1s|Qnsw=cM8gwgTqxr4y!p??ivB)ZFdsCBl~vsvOCe*GV>O(zwsI~%oX
zd;F>AbJt{dwI@RCE-p>Z#Mh4e146FVBGUC9d>Gcy>;QKvI4E1FgZ!~{A+4W_e+bLU
z6@q~#7j8#)Wmh*p8|KXz=X;AtEfW+WJHW!GB%;=PAJ;k~UjPLGetr9t5if|Fd)aCa
zOvic#H9fDfb`C)F@_n|=slAT&$wFTdDKv1;Rf*zWSArWz35_PG6X({By((AOmP7<4
zRk>$N&870?WCdj!MN)R17Uplef23^sJ4QJRx^rPi)=TIrcN@Nz*h15*lmH=L8?_`c
zMrcms3XmZ9Za3M|4L-bmJ@UW5maiPtu;TADyzfyVL~%1vQPX;C9NnxQkfz!lY53|0
zd=XNQm;Da@Tkb!zNMp<WEzO}-m*Le#Zlfy5(mF18qo#1XN$<Q~N^xT2f5olp)w80c
zTG9&fFu9y+ualo>0VCUl-?umKqR{w@<!1oEx1E>;8@s6RWMv7WlR|(UM=bd+$!{80
zzQa!aPXZkU7l~>+X@FhCtVCrUdq4OCDL02yf19U^TeG@zvHhPzk4Z|b$fDwqF!PVS
zRn<4I!2jJy*PyCY1KkNve<7hsB0SMo*NO1{3@1ln9y=$pLOwSP>xzGucNm<M$;9qY
z9|*cVA!l$Ay%mGhwY)(FlwgIMMq(c}A3ntFYJU~zM(m3WYAdHJ9gLc~Zb#KOq>|a;
zQ~2CE!TjDV*#e4Wv1CKYaNgQ`l5o9ku?Fe!ql=Gw>S#`Wg0|NZe^1Kz&<r8Z(?WpR
zqz@P%_cvjsq`jBF|7%GGg3*Z)DX&f9;G9q(dvZ!!r>d^>LImx)Yn1eIOrbp49myCq
zXN+2;LHo2AZ}F3P{sLtwW4VEVYZjw5gf~SGL(LRz#5LH30koIDi9O1mg?fccuqjNI
zOZr5lwoH7JVlNy8e@M??6!yX0sXc5d)L#Qupm{e0B#;bwu?&W2Z;XK`N|~IWWxFr2
z;IWo<v(ilu(ZIF3so(VEyc|ZarM`Ml+DK{$Bd>UBvIV&5_T?H~LX{vPk=j%<B^L^E
zn*#{a-R)#`&E1;d+a8eA@)+`EM~vK>kozz_Q)XYPGRsCof3d;qPk$%H^){gc$7k98
z(#t&H6!R-Mi*_&D8T`k4jb!ydf<X(%_XM!@zfkXF3Hmbj@G=MPil9hh*!@mkXSjU~
zDaEI{M$Zen*$`vN@z8mpz&ez?MutlYS_0qgA?h)STa}vVJ$s>L*bM|el{~etv(X}S
z7X)(X*}&M~f5{dpR5gTM`tOglmGpL)ByG->d0u?ZVZmi;Llb+tv8$sF9>9G7w#@Um
z1h*3^xDXdD7yErkfJb;r{0_S)tq!tUuD~|`wa2eAJrq`6Iv>{;-2tDjbl`3ADwl{}
zZWsHHdsbmY8|Weuf7)3Qa~T#v^dL6rNOh2<M>_@~e*h4-;4axGEwXR?XoON^755f&
z?K7;&*ln2weefH1UyDXQ+kz0SIF>_d-Mi29{(@i*)-{UqN1fDXOL{I$K7F`4D`)``
zHt*p^$wQA_H*?0i&mA~BKk|HK9tkxQ<N2F90~A}o%Y=3$%py`X-|qQ(=j}fl-x3<H
zajf^IfALZlV!Fma{+Z&;BB9!pUjWxyIaiMZ%l5BLYo@-41)CLEDUnGW!^5v`PI~_q
zF*>1AvrOgxyiiL!AjHnkejh$?Gro=kl$ma~4uMT2;;V}ii54j*l|TwlMU_V2uL2%p
z?2IlaXy;(pChS$7M0@gofZI_DwR}hSm;V$mf6(W*M?GPq;Vb}fmBKX_Db{T8iQa5o
z7;>87UlS>!HJ6`;$aaA0)$2N^6^w_8V1I)|v(?G6QIXNq!I|NiRQI>mv2G}h=-er~
z9Go$hD5{<BW}}&QX*X8&2UGUqEFdeuRq6R|IIX3Hj)cqr;9H}{=OJ3E^<0qmTqkH-
ze_Pm&F)Bn=_lB>1WE(^XTrC88=cHV&{frYZZKrc&UO+1Eb-566JNR3Tp8*C(p$h&L
zXo{z{uovR{+of}ggWc7D+)N-Gzs6jvVr9)`k61`9S2=8!h1}d~fC6$_{QSp|(7jUF
zDy0WDnX%Z*Aac&bx`M2%;Y7D*waQX}f1WLIpvD!NMtutQz-I9MN#Zd>#~?xp+MMUq
zQ*2l6LV2VThHS?6s#cg@d}Z`q;DF-aDuZ7}y#uxq!h&lROAH)sWzZCrnd$`YP*`c#
zLU8a0UF#mnq&%X~hoDut+WilCNMb(Zfh}c<XEBe7D>YSHAl2`9UX2fvb+_}Ce@;3N
zU|>}ZbnQx=#ub~M^@JZ22~bo`eq5H?T*p>>*Lk@o45Cdy&6anwP0e`6$eOvoFyO$g
zxX)OX20)9Ez9TU}(Tv1<p3^`E?{43(9(+*@Z^Usfdg)|;PNY3-%=w_5VI0?B%4a<v
zK#a-p4r!C^`#|NSA=5y-y9%y5e@ZozpC@N=vZ`o&MSAl=Dj3}r`$#=nh1J1=^g>aD
zl|WM2YB1cj0;cY+H1^sy7^^(<yVcMs#zY6)9{mk=^l7Q938MoGfzy$3RL>)1rnea?
zZF96F#}7m9$HndbM~av(m2EJ=EssyXE;+H-l`HQPbu78tTb^<Ae0z~|f2C(?6180y
zgk(3COKC4KAU=ds1u^c-<j-2hj-bHB+2f(t`hbf5AXK?qeEpw5SLYA;+5=lMT5JwP
z<O7}+QJ(t1BX8-fN@r68-k2^reE%p3nyOIG2}dcut~bk(LrrDk$EcNed7nPOW)wmc
zcgCokKmJaUpR;H5&uLw6e|mi6A=0Lf7}6~(dKV8<^Z}`qot;ozN_a!Zu|p;R%SJ>w
zfC79|?*9HTPsa<eCzqe3x6tF(PBl&GhPu8C2|XMI1_&cx09qMnZiRcV)C{s<g74-#
zm1q4#c=Da;*SN<^9wNT}U({Bw_!>~TavoAo4N2n|Uoj0wUjRkhe=9gt?mcuTwp4Zs
zQ)P(NLXp!+Lo<Vc;+vUKuoS-#dW#4dt%qvIK*UhUP6PjX6?nWG5sNCumv=Ne8P;X}
z^3FtV3_~$tYwo%;?)U0}c=wS6yx*1<Neiu$4RoFWY)oy>tcVkj?Mzz|=-C-SX8Y*<
zOgWObD3>?Zwe#fVf3D_<cdl1$XB3QD(gCKqZ5LK~iN1c5Ha-VGrNRg*zHNi=WEYZ1
z{KY9B$t-^QUu{zi;gbWtCjLN;@s?or|6;a%>TXjcgqQ}7-Ps|4UgogEywh?&ZC6-N
z97E|=oy5(`*a+h@Vs;NB%$^+7tif>*2ZVy#FWQl5@1E1ce;$h{e~U#9Vt)JraRY7T
zd7;WiIXkx`7eR_*HGeIW9mKNJ*a{F^7V&S@ekAM<@&clOf=THYnU*!E0jh6JnQrP4
z3nOM@U5;@3!<$y!XAZL+deRDEk87@05#_sODZ@4o5IU_cG{T`cegB}X@ddSO4+Yxr
z$W$ePDJK$+f9$n_FbXS^LOP>5J=#&E3%88wJM;~V%zJ8T+=d-Px|6krsShi&JgH*p
zP)kQ?6?E0Ddwc*G@uyx+JpSotBX=_<b_5^C`iFoYAAezh;KfBCK7x(}Cw#66%|H3)
zBj^CB)MnErSP!aZv0OXJ$I7D|2kVurehBPKJ}To@6$nWTqNtOBNdM3zN$2i<zRbhw
FxL~;y!#4l`


From 1b53b52ac6256524e001c3b1e33f80e8cbbb388c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:40:08 +0100
Subject: [PATCH 957/988] doc/daily-psk: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/daily-psk.d/notification.avif
----- >8 -----
[rsc] 📅️ daily PSK Guest-Wifi

This is the daily PSK on rsc:

SSID:   Guest-Wifi
PSK:    53cr3t5tr1ng
Date:   2025-11-24

A client device specific rule must not exist!

🔗️ https://www.eworm.de/cgi-bin/cqrlogo-wifi.cgi?scale=8&ssid=Guest-Wifi&pass=53cr3t5tr1ng
----- >8 -----
---
 doc/daily-psk.d/notification.avif | Bin 7040 -> 6966 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/daily-psk.d/notification.avif b/doc/daily-psk.d/notification.avif
index dd0b1b62520d0c3b7d5aa383506730fd0a9e0e7f..79cfc3e2978889f740021b04421cb8e8c2ab0388 100644
GIT binary patch
delta 6795
zcmV;68g%7=H?}sABMs|qWprTx00000001G8FdUInC<PM$02(8afJy=Z9Ffc!0U?p*
zFMlg-WMOm?015{<W+xci1b{M?G)!ay+is$1o7tmSnm*e<IwPN`V2;nD@T$ja0^@<S
zW0i^Xbo)>knL&a{x?BdY)r8o@_>D0-t0@7na}RxP-WCFn`bXwhrP5f^kU8V_M&;t2
zQLz71wt2F)6=P2lF42&Oi22<kHEUmR#(xZZy4=EQ3U(_k)$*&%-?tBwVg_^H^2zl3
zlZ^tRq%+zyDn@$sl??=;DfinBesK$aZ>}?-8a7LD97K+>84`edQA>k#jKB#&gy%FF
za|AAJ=Esk(SvL0>qaiT&f?A4mcWT7pdRwKyL-CQ|VQhFqa{LkbCTeFxyAc$Uh<_JE
zv$I@hqz)y(K@8du8ydaK`ifP`cgPDGJ5Ywll27~jgr+`7eYE*M+@{+@a1ZUBG+ri@
z&kk&1!I(=_*XxPQ9nWWSraFs<5!C^zDD)YGKe=S|WHJtEl#DB3mw6lTlLq><fo!Sl
z2OUS~`G`vtZJD&&E`k*|d|po|xqpr_+Uo26e_BZ!T#EDnfk5M;i+qKtnNnc#P%2x8
zUBd__HhgOwg&MNUSNe#pg!7!mfO(DMQ6l0eKDzg%#TyOg<Mj1h5w&;J@yU;M9`?%P
z9vdG=^PY6Lm<FkQ8af_sxSUqj5l?6DLRY{i8N~@DT0Ln8aXvU*_J}Y4fq%+TYdXZh
ze4^^StDD;6q%6wT|JwCDj>BrKmE&!dyl$*B=;P@N<=Xyjf4Xt%!u|B|3ONyJ+_4i8
z0i8D6nct<(hY9LP_Mn5_^rg`Q5vGs}&&d$QN=6huwNWn)i;3jVKH;?zQ{~rBav3Na
z6+mAnp~lvuCWuABdh3%DZGUZl<Xo)P0YA?8_A=Yf{KWY;{;dl_!Gk*PA9Nj2HDs$6
zqy5v)wM(LAqJ;OX-n3aCN6H%Nc!dSRS7jdyX44S4T7g1$tP4Z_$lO)r+BNfnujoU8
zY8qZ0$<I|2!Y|z9s^v=TEO(C9{@mN_YH(&{o9z9T9}plB<3WL*5`VoSySkya_@#x0
zP8%#=obY_%fJu)LZ1@dZAX|;{PF#A;i2nxtsNHr4Khee9Mv1rxIqO3ez{@5S(3rf8
zo4oQ6iS1dp0FK%bK{xMBS_szG!ESNmJWWfK8rayVGayn@cwnggR9M4K)l@~b*XS8!
zd}Xx?ISH-5R@FoO0Dq1#K6u>=(IQDZjVY1(xT()~hWXZKsBS{C4MyFEdtdr7mejX}
z<GMKVGvz^z9D7&8M~IfuLw3YbN?6X+vz<+-Xq_d8XURAZXc>Y#DTf9nI^?lfWfMeH
z?dt3pzZTcb=?(Q!sMAM{)T<1h-3DnSSby&D;hbaF_~hq^aewj8)!8As!-$6n8ZU>K
zygq+qYh9AL*6iSy?Bjfr1(L2@tFgUXG7?jHRnS=0*hXtOirFz@s0HbvJ}zto?69mt
zElDI*eap~kaxnI>pN2(<JjMfxx0vPRc7<B|#X83`-E_DaV{ogJS{8}h>LVa@$x53b
zfd-&&EuF*%{(r<4&)5mxeUhdLq(FkMSm1xfoC!+zlJONLjlc{}{*4jqYkbZ=-E5#G
zT;p0dlq;keURGka0Y_Dbtur}sjuX8AEdjzYij>T_abk8YoK7ey?x(%d2K$&ald(OF
z9Z%$ko10g`WOY-beTEE_R4I`jyr%(Z(T)p=O*3oyVt?K4mxu?W>Kc%-5zj*iq=4Z>
z()PH#?2!ouZW!=n^J<tWOu4@c0UT*~GSrXw{ON)+g4WkHr^g(OO$(a3xzVmq5&ufS
z#7m>jUY1HVU{Pf7A%U1&mc^J%m4GspS0@x+cBY)7Ro7+V@%?2mogt(_-M|^m4HE8D
zE(YHWGJl@@<Vgv)Pm2#FE-gO1Q++@m6q<nTZch#edkdZhrwuz9x!O9)jzpu_(qFGY
zRqto^gh=JxAA3<C(tlA8Gr6{A<MDdJ-ep1;82fbL!=C7jD-9RMh%1Ovv+7a<N70lf
z-9nA9K%mx%;`LE-s#CMK_fKRy$H`|W;EvHtUw^3stS%GX))$L!I9cKrT8W;ggAsV4
zqS!Z!+xHqFvyh~D7Aj-+`ml<&mFSa>*1}g9&r8yPP6_@A=DU|8EVZ2^gJ^IFMopCR
z{lD2;bjWr{l`;<<3x8ul9MZkavs*Dy-$A84LNQp@iytJGlnv$7M^c?RYfcLYfq4fp
zTYuQstd0oAN0fVygl34=bV%RapB(?F32DkQPf_+=IiX5h481Lf_=&%Z_V#+XR$+@L
zQd?joMNx!%{yEvZ3JA)!Fs?ZyrG$HT5c#o@@hbB|(G$ZrpRp=Hb-oI~4vINTzYBd0
z3UV}r*}$o#=P=|T@)wmW>qx66>QVtT1b@=BWJWoVcDPlrn47tOwxwbnZ;a&}xcbMR
z56+}??XKdfyvG79xj~1rM#*bwoRtgfnICGbd{(*IK7a=Wn~*i{1a268N}ebI*{fxF
z&gxmb`>bXadGHN1O3f+(aNQ!F#6l&D7#XNm_6EA8YUOkGx|(H`A08k$iW{H=N`KFZ
z5y>ZL*Ss@m-Ah>^iDVZDy`N#zEF5OWr5or15!ZY8Uk2D;IU?FpAY<-#%_H6%n~!#U
zcSjb&BY?|I*^nR;t*w5UH>0C{9;|CNKtu*K?`6t>?QDiFr9%Rk*3M{re8aTMMIY<T
z2s{W|O{6vygDd;!sD4kK`h;+&8GoM3%kyBvA+CD#4>Dy~t*!sBAcc#0hPvh*Dtyx>
zUrJFuFf?73cR~o|gw)PI4_uJu(%EksiNj|jNV}k_LrlXa7T_V1d=;9VPDw-DN5w#I
z!UUIwz(QH*xPy#ilhH85k+@3M*^PQC*YWnP+sjJ>W(?-_)n$==YYB=;VSkxF%DmN#
zC!;V<6hHfRe$2YGs&Dx|If>RMhNAUlpA$+*l|{HXZ@GxJUCHi&BEeSe_j=L)5ij1n
z{9XGMSZqv&#~A<9un#parRba0IGt5gbigDaY)%sAbcV@)iCQdN%p5~-$~H=KD;`*H
ztHCZSV_cNW#q8SJn2p^EN`I_2ZUrd)KCm0OE`k1$3EgQTu2ef+OYf=D?`V!$)s)Qi
z9&c_Z7?G3LT2vA!md7ojFE+t;5f`qPU2e}SxG{PKUUfp-aholV&z8V&2B)JlafD(4
zsQ#JB-W0<sm5Mu&2cUho_BB3fkklo8tu<1n6M%o1Zg^nPXdDrN^?&TVTD~^WCb@)x
zmfhaVt1R-sQk%=?-$)~Tup{?_NQ@(S|LZoz_YE1>ewc!vFxCmJ-OqZv{zMJoN@>A5
zV@l&bOW}mvJcvGheuSBFYBI<KBUNIXBSRV$)C+O%QOv*>4z&s{N+-ILunK2Y(^WsA
z1M_5ZB=6VmNL+}{2Y=4->f`6SUG$!rPw#`h;QG}#yau=1kz4WoDy$gYm;$P+i-R%6
zr2U<hv_7WV$wC5AWh7*gCRNCbpYM`<DP~()%5s-TsOR}$G_coxq`DlkEJA|!oiO(}
zXF|sZ*ErhCa)m?HtkTdV8y$UW^g!Ob<eD6*Y4Q=p9DtuNv45ffwFx-G{e6l=bFvo1
z%qxE&$Z*uv%C_ap2nZqDKXMqv&gNW)bY_&9569+Y`j_XK{68>>pt@$KegQ%LjQ0iT
z#f32AG+Di?Y_dEGt|tU6ZSJ%!JB;mCnWU3P`cm7qW}!DAFg*46^UmR40~ugRO{>it
z*?Ajq@OUZ&n14RF@^Ar63HN3VS@#^I3j0dc1r~&TJx9snjeKjXd8&Qqb0PajM4)Kb
z9fKi3!R-thPdZK1ez-AkiW6t8Tp2*#b-xd))KC-ey+)45sL!gbMr%s)QufS9{W=6)
zz#qz}xW2ZPFxsiOI<vS5SpGel7l;QFd%)#-d@dTP(SL=8y1&L6)v2p8eH`tjMpo7k
zkikPPqU<x~aD9zi!HrXg><HdrNB9{C-j~6?Vuglhxrt90q)bDy^6F;QpJYzpPtI;M
zBFo`G>^}_;V@6<rJ|v0x46!SD>i=tgOmE&a)I^vUI7G^A#`74Y5lQb4wdYhaA6Q)E
zPyjc`1b>}2{XS22Un~$SB)!x3C_{3sj~>_kiRp`ntJEj2Q|*lCsH;PyHmWeQtOo}H
zGkZ!#9c#k~%YWP}KQI1yDba0-V}ad;M+)39<K{AgvPyj_;ji7nw0q!URn=M|uBhmL
z=`a&30GIj#kF$tETA*yqx_sw8Cl8%)evfA$UVk%*yz6#bnV9I9uvish6rChSGQfXh
zFACcqI;^(WO;J&e>e%*BDDUFwo?eC@)Ri%;Zup2PG-}qOaqSGJ1e$})jOUMluaA}w
zVowg-qk*7_feDy%)(L&R|5k`bu&?a{w^Hfb4DHY2vXT2V$BtKkC^F3<6D%?*G7ZG{
zEPt!OjgZ<MVxd8+-emhdow>nla`&eanKH`C3&#;WuZ)*!HtGk3DHCLtlWYI%K|cAo
z^a4G0h#$;Ubb7nz74%Vyc#G^lt*vm=!Kj{l8?1k-A!J5N@i6cy-z)M84|r66B=(_b
z^&I92>w*8{Z1Klz;ffkVdo$K}-r~$-^ndO)+It!PWZdT6L)BRqr-t!eL@)(*W#`|g
zU{-vcaWBS-EOH-#v(G-U-lu-*5YG%!3R|}8qGJxo4#PLIKu;cS$d(W9^h|(wIox`|
zkgK(%Cfin4M5jM0x<d~oaBbh^G27=$_hiF=b%7c_Tm~$jFy(&Zmh2_Nz6N@kE`O7O
zx5rvt#H~aCHD|Bk^kK`H-|jqzW(s8)Uh`$#DYd*2^4l#AsR2aW8Gw2!7;MYR{BEsL
zk7F$RTxg=a(p(dZ?b}iD=`!W6(LI3+mG;lOYUl~%iBxe?FO&LS49L{Ka7*<U<E<u-
z*fE`UZw>T6`2hslqZ*&Adh2v0h=1PA?{Q>bCWMl7E!&<$v!NHM1wlA4eJ5Ad1Xm(P
zXjpb1L}GM}Q|ZJh>~?WDk(M+mC+#lZQ-0y6C8nnSXB+39xX$;Rk*A<rl~{8V!wTEk
zs|=PtTk2A+2!5z)MZsw=!6P}8j8b-72=x;J9C&a_^d^gPvLVAH+ixhHWPkqHT?}b7
z0pmMxOia^C=Fam}Mc<3BNd9_2nciFxj8TE#9DYqz2Rd!@n$Oou(Y7o#po3_l4U$(~
zzY%yTt2B~qREL+{_KhjdmF?YKD|pcFU=iisM%@pnV%%h&tT$5X#JfwLS#k-R`?y(0
zx2!jpjBNPMM=GA;*-hRszkleR8O2UuumtY@jQk0luJvFGRH$vg1%9(P53<?5VIFH=
zn^UVRp5q}sGnoS{Lc4KNxRJGAeAj+YiCVD=gd0F;kksx^p15WDys#h6fBrZI!(1rS
zRIb6^5=re#M+Yo9|D~mR(~@@jRvfc-CY#CMZD6j;P~YSO1tQE$e}DT7RXJ@CO9B%r
ziM(uGx1fVx^PE)r?Qyxz&KyH{S+KL>0^i#le%GkI7n5W&18j8_A6B_6%_r?L5`+rU
ziw+tlsqg)y_(ZACU28m8RAmae2VGDcDJYaQZZrUT&nDOKE(s6&yj|6+H)&tvuallg
z63Rm+-_in$TaNRXA%FH^f3zT|mLn&vQL_AT1d|dDS$)_=E+Xk6ePXeAuu1br3<=HE
zmk@NHzuUUmEKbxxIv-hkBH*SfNiuG@Tz$1f>rR!fQxFO0ZLU4KW+Xeaq`q0zw88A0
z1!kCSe}aLWpu=6tSlZKl!v(r@pcwpsO>cDy*cupv4E~@|C4Y_@k8}l{ud{`EqMGUM
zojJfquBLL&zdi}?OmXLV+^W3kE4^X&Khnm{5!?M|!Jp^*Oix}$5%Q<+Ai3G=Uk4Io
zoDn|B_xU86JP_ar<|&XilC5v9FO`2@U!;1@+A}aB4Xk19_;jhFkgaaDajn|A@Z84g
z7HXjmepCt1l7AU}$Mr6_5tnt$KfeT9`{VMLaC3(Nwp-lXB6Z!)IqD`j@PQoZXlr`_
zUavppAL_O2d&1Dg+`4vswLbPM^O3N4F9Ac?3c$`-Tx+b1nk88`5kap)*&P)pu3`8S
zyn~|QR1E!T$Oe@p|59;RInHJ&_{u*tv_wn1+pcA5f`3m7y+2A<M_k`bq6>cxGSkg+
za=sk8KMt@l(F;M?fi)J^|G!9PGb&(%YP38x)Uwt_vemjAFdNVW3DCZ@+uZ3<)^O!t
zkDLgxAYIo@9BorsfvG=aE$gZ(AduCNp!ALgeXb(&KZcqVLyp>vur3%Yzz-|J%HA%s
zr@C{Q0e`m>kkPtf!L`op+Ry@F6wHd<ntjL_S7I^Tn%NK%4nivMFeI{Y#4eH{#;1CF
zLE+zn!7Z>v2(%d8gx~t=tyG_RR5U-Lsoba<LQ`2#|8$$;o?5IEP*xO1yMon>l}<j}
zBk^M$NXC&J>-<zJWaw1CCclGL!qjnYM1$lbbANyo*D-G%vs{88UA|Sw)Lj5mikWp`
zf6!*V1m@@o+I>bP86be#(N8BkxnKwRWUNTNFHotoKex`ANz_)^;FT957{_|F5UXkZ
z<@(Via7PKcM6I27T}Z>odsPg>&+nyuNFC?)=CMRyy+$^4Ah96ed!Z}bq{?*hzw9ub
zUVkyLTT*M$trTOmy~=u!n{sZf9d@xRpeuJ<+BfBcTbw_hPo=mOYEgulO)WkRPzo>G
zq4%>FQ|c8r2>#&0RZ76=xFfxukhZ(ldp#Aaa3@$j`wPgfprjk@!;4$>AjE~Miae9r
z+`qj-KWbz<N(&^7iz6N%%VA@FhDscevVUQaT}XL;-47yuw770;+hJ&L4F&%tK6M%N
z_%^|=_<=jx#XRoBnual%wX?B5TL7^e-Vt^%U3Q7e;x8hxXhU=Jas4xkJiMP?7QrrT
zZEULQaZ<QnG4@fV%>POm?6vRzgj_X~t;t95m*nG8aewGJyr^tWKs(C`(ww*v$bV&F
zRElVZ_UyWkeW?hc+_EWrY`>K%UXE<RkJmO+1cq@Au*>UGAxC6A=7oT~h<U1%hYGWR
zVb8N#V*qcCzTj^trX?B10ZWogn9_&IFZIis)K{xxoQc+X)b$*Cs@G0&660IPrAM|9
ztHoHzmoe=!YU2Llcd?H8pW1l(oPP+Rd}*u~jZJY!TfdU^GZ%tw+1ocp{ErH}7Py4m
z`Z6%hfJd1}ON_+a1dfz$={xUUl=e>Phw`rzq_Uxvi>+K*wWrFTQNz$bmM`6|R!GoC
z2UDx>YUAg;Q=$Zy<t+(XrJz}Kg)_H8w#knGG)F!_ilVAvGYR)zI9zOgPk#h>7;AiY
zhPotmBG-0$=bP=qn6Xz0-gjXR>R9+u{t$y~t^uM%Ohv|l&892J(h+*$Yr$lT&3UWq
zhe<Ec+TFfJ0(7taE#i<qgNtvT*L8&o#1d0Zv}}Dn&hA@t*61yjQld0!iw13&jWlI%
zk5IMU`zJKFt>c^hK#4BTSASdaMZnZJ<{r73kcy_`nz|@3=zh)%cz_+0&W=P*Hezd|
zbK$@*Tk7w~gTuefxFe@pxbbM2y-Zpz+~#95{62D0)rM$5$TZ?u$;Eb#D<nMPJh)lz
zASs9?S!Lz0;+b@h%~|vFCmm@iI{M18;ipnkj+}?_>ybmVcooj!Kz|r~q)JEUrw8Fq
zUR7l#u9LSMbTa)XEnZ1Mv6$`C)b-8lP&#gy72W(e2CftXPS=cUReU0Ik|aN!+}csk
zb>ZogNTdT_#zPLb-2*Q6RQE-;aYb-6p0dCUAu7YJJe^l(IX<&sU*}d>;VwX{Siy15
z3qU{uempmU7%uDkA%6!&!`SEC>^N11RJT}qN=NvwnfW*;bE4~Bcqo|8fm+~gwG3p%
z=9>)w9}&p@J~P1JCJNKrGpvWf0C&84c`2XF%g66biz@7Sl$d{wY5Qk+E*+lC9+=m4
z%owdMWX}Kq#sAPZ%eo$S>{q(0>^A;nk4;1*Q))r9gHhiTHGdA{Wp?jH<j_%3O9|?2
ztURbK<;$@=`we1}=x$>eITB%6g5u7Db8Q?xKj|&JURc_p_G8`IE+j9U<-kCkMDj(N
zkaEDfvohL0B;&22;+MsDI#~MawiH$I>&?;`<2d-~^=hy5y}<H*`8rWJQg#4*Vn6_h
zqx{#{wK^>3rGHHcnR!gB#h(3h14P*xhD_9%I^=%g5GWqLMrD@g>ja_tR`l`ZWKij?
zT*<XPnjin#K6<$q{HNWfgPy^AI^<v?%r0U_E@+PJYLEcaAo_DH$}<E&foy5!KxTUH
z<d;LP%$LzPUifJP_2j3!NEK|Y3&Vm}XQo=n1Hp5=w106obzh7+??1UU%_2iwR$Fn<
z%n}@%p(#vc(`4cR!}UeJU~rv}Qj7_}3vdSeu#tDTVoVAd1h+rnrdZmW%dknr7|)lx
z^Dy<q`OaNB6r05U%GApi?{YUrZcG#myb&NnDStwtj*et??deJ&5RgDBvj44ZYI6;^
zJ(BwjAAb$LMlS!8uw5~AlDBaeUTBiPo~kM9b1(>QuB?=wSA!uC6=)jemDhH1x4Prc
zQ30N)EC7RDBO_v<m8sDFtHbLFfETT}&z8~Hs<p!JV`lV_3iw`RtPrMS8Dr%8Sr95c
zB(YUm871sudEdAr0UQI3+;wKIIgY8QcfaD`t$+I3OIeZXVRygpd#VwTLSn*lP1$7w
zxd*Bqyr$kJYnZS5MygRF{v)L6wUiX0iHLaI_uKiR%jhIr&#a{>rE#DupGCA1>_7VV
zrolq1Zvw&=n}~bqY6%^R;i$xZSE8AKA1*S25j9~22%09st$Q@Hr5D21+K75!>0>g}
zkX*+5tkTrx;n{zAO4}X11P`R1RnL0?s8oTLC5BJW_XpYD6*FIa1WE{4Wf_Z<6fFf$
tVau2ZKS*I!&&Nd^@DqFF;=MF4KgTg9`cXU=B2kj#bvTfpB!|aupk`%uHeCP!

delta 6876
zcmV<28YAVlHh?#fBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-02*eIc}g4r
z;s5{u5O8UDX#fBK00RgJ2mk;83}JRLLxCWX-!BwyZDe6|5&#MbI3?#E77!57X)@N6
zAORGAN3Oq1m*RzLK{Z)C8Gp24ogvsGb@t^uW9#=sEmXed1l}BQlkrdZreShb#*7H*
zPtCJt#B0?1NgaGgJ!H5*z3M+88I&`0^x!BVJ(*HETVb=^=O7^FE}Mtzeo^z+@btz0
z|5JJ14h71G@qDP=doOrTr^d{?k1mzZG7p)532#fE_7?jcQ&J(FZMd=!Qg&tH;QRUE
zxbhu+;&z~#QhA$L)ghR-+8#xqELlK%Uyc<|aMYKA>)cBI23JL`Uwg&2$@YNxkBj9%
zPM+m<RcYxW1aY}+M|Ct3PppNt1Iqe<USDS}VH`i?5oEELiNO=f>~*=U)?CBbQ7G+y
zVHYh9QTCa*{>f65f6!TWyMwN#D3_0KhA;d)8b+z`IQsG0sqM5pT>@6|al}GH=JSVV
z#|vt)RtKO)K18T0G!BTU`l048)n!_DGOooI?80Bk4ZOjziXS4M)nYERzb4rEJle5l
z1)fZbvtiN6jmcpUrS?pdVzCT19dg5eBh#M>j`gAGmIJ!pPQIfocF^uC?!g7NZ-v~H
zX%(P??62-&1W5=nk4ON$Ow6O0mp|e=AZ?djq~*joh-~eSnx|rP2w97g9QVvx#+tKg
zfP^8nb8%H&Qs?u;^x8@$H{F!eMYYKnZri+9$Z&nPDMy@ciASD%TaeMhkp6jp@By=g
zIT#1~z=tca5>lrZG8B6NWrT?!HM8X0rF4R?cWv&E46deL_A_sdr$5&pM*N|{A5s=g
zmN3=x^YP)FfAvDr&XqE;fF4jh6qP$D&L}p%BGqE|2H1aRxr_^)juhjlFAwC=(Tzq|
zoi9*mT9oQV(>l}#{w;68?gh(#o1y0>S{BSNpMyFz$JH)`Kqn6+MzUf0@Q1VNRNb0_
z6(?KJ%oY8^@BFMwrdf2eFtEc1aLNbNJwa}jA3%cpmdn~YjL(SU$-JZ@iYL?!tfPW9
z;8L_L2TY1z9DoA6q(sv45L^`e99G|tNBj1>+DI>^iH{wn0CY5L?*bBkabj&)?HXG-
zGqg#PdN;&BTj>?2@a4)UC{z+!XjNtdTIT=dbZFsihqU;2r3O!HF?&xv<-wlr2|iN^
zv<OEk6zS9&uer*g*I5!;wEngM#zQ77+Aj86E{R%6FL{kx;4Q(rL+e+;tEbX&idn?X
zg|=kJphpEs5qUwv@n2JaDWUbM90WX1gqy3)`Ln0TWVScqorXF$Y60*|9w=0Wwgh8H
zA$6jM!!13Gu@2~fh<$<;BikcY0c;7__Y2N0+fzDFX{1|v$3cHIrQfM83t_di%sgbk
zOU2*u@|;o4Q~|ey&@`OxAyLaG#Xpd@Ud_CuZydz+0a@gHB|ffy!UguMfmP7`eg`do
z^_WR`+mQFJ&Aw>dDc(JU91mUXT%HTIYNUYSWHI_)fW#?mWu`TivU0a+G>f*q6&hdf
zpQU*n!j!YG(+5MsB;NG>HEr_$!pnrW0S7TqcKW{R`!M#BH%UQfOPnj>qjc?p0MR=^
zG0~Eev|tmX-=edBVzFmcuXC6&3F9#0s<BxioxdJqgvJqf47cN+a<bu5tO?!Ti@aqq
z27=$tf#1N|MHP71;|?b=vsM5MN|2fVb0@0}2~|k`Kn<s8QNmG-aOu9#klca$1b!^p
z^&YX~iZ{ea4Wf1Y&?vopVudQod~GE_53GjJ9Uz5LAWMXQYuc=`h2SpzQkpllg|R``
zU0Po=hTen9<s~pUlrH*Usi6GSiUE*oQVez1%r)8M?>!MPHuD-hpz~(HXtc6R{_P#l
zP}8p?Uia&~I_vt-82Wuw80jG=y*^*XiQ72juQO9&TZ!{Kc8wIHMUb=&C)5nJV#Qx^
z$v_m9PuCZJ8ZJ1(yf}HkO%5#8Q8&i)>83@>^Y)#;r-3Lgd@@I!>W?t`^zWNfv^42I
z))ti0>PAac_T3tZHxvEVIyL3*t$K<i_jI}3p33-;DaAN*Ad#}w3Om(D5ba(0>ONd$
zp|`SfREB(RqPZwb!_m+-n!Ncyawk8;Fln^JG%-GZ)%^M6SvnDkrO4mk85-17sF>MC
zD<MX+Ebt?<|5r<gb8=hvP|($KCz$Pd3G(ZZ1bMc%J#BUW_Q04N;av=`p93_8y`G~+
zybo};b}l>j4@DQGUoSVFU_th}gwCU~&?jU+Vxkt?s)K^mXYAS|dv9fW;zTl)l~h(t
zk$ZlB52}s}la}n50w%ksSTJh4wH3Sh>7?dWmZ0mGWan{gPeS$y-Joq6ONymJ^c+bn
zs&e4&6JUoNs-6wFztw>5N{BDK;-T3t!~-8-F?Z%Fl*S?}Hbi+b7A`J0z65f|q0Kdo
zhK;bpzB;s5X!pLtrlRSyRQ!d8yT1naKXm$kB$@CHN*f}`bhSycpgH>!6L2BGgSP1*
z)wJ8!X}>4Fe<D0`+#AdnsnbJm;vKNN1UDh|H@*ffYQX;iI{v2yOmUm=7vLaK$CVfG
z&?K^?>1?<0C%Xj+{u8<&h8d6m@_mH@?Ol&=d}B{D*bp7+5b{GT8^88^pW(tFN(IS(
z?DA)bm)mBrz25wpXnxKU=!KybZ~Vqnd5Zowx4;<M$7COt2*&Ww+l2BG^J(-(;iZ!s
z_+gCyhXMI_tp(FIuc2g$aZGeor^$^nYxx}<UDE*n5JJd8Yz!+akvyFZ$Dv=UDH*S^
z`^QFYRuC*or>!2ob#So-5Kf|?01F&{^W+;Lu62;p&E-5xu7Q>9SAQ$M)4k4f*RN!*
zK@QM+W@;_iZxZPV+06Uq>1h~JYcJwl*5JFI(8A8*L?BnTtuYm}d{Y7Xrr$9$EOhDx
z3t+Av@x=Zr#|x@sqw?$(o-p`@6&2b0dHB0v!#W3vBM^EZoGnd<J_>4m11y_={6#+e
zt`htr?tNjT_V0g8Z$*R&knZl=slCyzgRsyWb#MbG51P3CEdI=ISbSVxGvpLbx+_!b
zVD5^^nvQs|+;ZHcHia^uq*SwA$;%x^F<j9pNU~$tnM(gm`6nGd1h^aGcd=-*Ld5_v
z-cm`-!+b1f(?dnjrb1qxOU^5QKXRW1220L}tzakhb8SpxhC{0>z>$2#VD-XbqTbeh
zusY79jupMiG#tp&g3FyR5#w}PA&_cQ^F@{^wBf;M&_w8$L8LTq3rBfc*DThwcb{P3
z!$0r|$1KuC!@WTYVzz!@w*}*Cig@7*DKCOfU2z!&I#l-#fq01%sudT1bJ`B{SXeZ|
zD-)XzKlCi{A4OgEd3gmV$<n-m#AJeOK8b<cbPkA+MEbJt?oS^{-9oU}nO_#N`vH6@
z>UDHE>eNPxG)e}o@_d_iXj<wE{g9a5xJKwDtGkA*V>E_1!Not;7QjX^wa<PTNxHg4
z>THH1Z<zDf^b<)VWa>bFR@^2q<>hb*Gocm$qWyUfjwwHw$6m4mz7ZNj8;u1}ipWWC
z*2y#E0&gH6d#MfELs`$RC-SWO*STI*`+*o)-kxEt|HF@_B>Y?eI5Qe{*99N(l`FO$
zx_c7~xFPZdn`V>=Qp!ytrbr&obTW$$1XcIAWyU}H|Gps=1$~}>Ge+1p?DBt}Hfn^%
z#OdQ>^`9Hh!o&r&=+zp#65_u4iAH>QJj)(+0%|d3x5gqgjO4Q&J$*fL)!#ueL`};i
zK!K-~uuJD2IH&nwE}EpWs{WV81p8nn;=+z80!8NOB_v(LP(`#IGS4+@ldA@CE$aD1
zcR*@Hl`jcKi3h8H5C6mfNP|F9i&vSwo{*dQ11&^qY53_549iBW4(sqgt&N1R@SzjR
zb*xMuxiC+im$+67wH?`*$!0>249Ar+09bMxFaN#9JMiSFag>#inn5|Tkp8&xBGv~@
zl?Lx@-)i+q(P}LOC|NGU24AGogyDl_4%YjO5vWinYK@71tzXA)t^;orCmFogPzJ*A
zpwz%c#`A0mWzy?^2Qg(o0qJIn^QbaXh4uEmi<vU32Ygc*)n_iN8#vgyJ5EiJRqBGe
z!!yiWz3CmC_x^+qyP6^EvO?g`^Zj2wkZaN;8<tWW4{F1h4DI>#VJDg?)D51_KEy12
z1aWm$?cNN37~7t3S+YgoYxAi^Jr^MJ8h}zp{D1j@zX-}+B+5rCMOi^C?P~ti;r-rD
zt`{Ymq~+C;c5Pyvb_0CmOlIphFtn@qTVw^&)#_*)`EgDGFx&&R_dz@@;cJPr3ixXx
z971ci+_7&KQCoAUADTJBVDdY6(4BtsMHnm)mkwWlb9U0QdQ*vU**H|wf~Ol8A;sQs
zjqNP@gH9c;Fgak7U~QuyTM9<w$G`dq{HlgQYejL-rR8Rv6pi-t`2(#~e&gko5lz5!
zLA|<7-GbRthytFn?_Hq)s7R{doG_A|>z0$%nU16;*6$tiuLI{(J+BLnGKh<`P4Oj>
zW<qg)kxD3CXBQzr)*`XcrVs;1lVGR?atHP4<SM#r<T?req*R)=;K$}9Vb}Fkm}Bbl
z;QUx*<0W$gxc@t!0OsA5?*$=JuK<5qRK7@|tl90H4j3z^wp*|0q*l+HZ2gHQlP9rg
zqu@p<4PbAF;ny^6+h3snZ*D=Y0bO0JC~%d3Hym8gS=uE=>0(#Usi=G;out^v&*Yh+
zV{q5>(1?IGXl&)=gWR5`zN^o=a&``HrSA!mI^Cg`-+I<1hm7yk&?s~4!5J%dnW)y2
za2Wzn_iuAbW3*3lF%^j}w6I7H(1j9~PyqHj@O=**qQ;A67+#jUYj?id`F;wofuvf0
z3}V`0-m7R-6Ex*Xrl)EM@|w<IMI{piCsL+@W>#N%2t#(X{l=sdsb-d9l<Ht}vN#x1
zPe&N{-)ii@!+&mw)3+YN+jn({!0y~zR$-3tOx4^DR4|yl8!Ty~@1czc#k=`z_DaTX
zgabf@K>m;?Bsl>Se$~J#J=uu#h!<0TSx;w(r2n@Ki9l>2dtY#70ZQ)(R@PY6H||M7
z&Ir_PuFd{I0P%iee-Cl3-~I4R8s*g{=40q^Cc_^bz3KLAnyT~yj_A|#Td7t;q%S;>
zk?^4m0Srz8N2(#*@>&glpx%F}-@F12bhQkzW1r1+?@>rPLCDAfTk*DB;TkW0=%rlR
zqllm`PrRTdXC76S0<T?~zqN#j0CX*5y894up>}t_+5gQYl{Uga7(c0e<ROMA6&PLo
z_tdTi;#mj$!^~QrEW5#+20xtZk*ixtTYSlVrv?)PB}FdiiK;`~2+_%|<&X)IzfH(5
z(niv<IMa4V#eXkZB?*#;3+nuTf{&^3^uC#+C+c^COBfeqSc1Zt2q0On{kT-U@GGmg
z7Es`RZ*MZLJ*xlVt7255XRnGuB1@Zk;m~fIEv>YH(AbS8fZ=+W+^~t{Lm78GnUY3*
zG3dyhQCG?|mSpgycYnRz8P#Y1PE79of0W~DXD<NB-dw93NT<9XIq`gdGY(Yjj5v&R
zLEW!3eO5+?{2qtesY2e*pnZJ0+$jm$?*@yTK|h}FF?8$}m?E)LzKLbKib8z-k;nPM
z*NLAYee?O$VMm^u685O{+pQ9T?{nt-O`J)3>BH2H2r<1bMbEfeAaU)l8iZMKMsSWN
zu#VyGOoW8Bm>_dIO*V*s;k<oV3@VK;g|HV6l&R?V8d^>TpDU&_7Q;qlX0tR#8HAEw
zPcBQq+JsPXtR>;#8V-MNTyFQTdFULc)~F4CP42I8tu%d?e6gR0<}H0}J)V>x1U2&m
zJ0N%R<X<yjG+&*PR4BZ(vz-Vc$6b%lriU1C$^(_=2l^17C!KnKmmj?GXQ*?(a>TA7
z2@~fTL{J<osB+h|2b?kIcp8N7bR>)>r%Iqpyp1*y+Z1*gacvXW|B=6kkQ8}2!K5L>
zW!bq_)Uk;RW_nLuMxOb6r|k7GO-f<tR%QrxVTQn?_EA9ZpL%T^`PCiHcyr)EaaBNR
z$nbw?WIOC+5fE5^fDRe&IMHzFOs^_PbL8B^Q_>1J_xcs+$S-|qTcOof)Ee^v>5BH>
z+xCEzsZ7u$o&(LiAf!+W*Y-9!EYQRf#45`5KS)f;@Ni5Wv2qc@@8OK~e$;_9%s}mN
z`31s#;ct#4tQwYP6*L}IeFgY}xQbdBIfh!-GDDDBnxAcdv(g3h$|Olc0xrpxb75xh
zouRd{+NBPxzk!%kOpxG*)8^vF)k(@}7y^TvltslG9tHSAAH%koA7SEe!uwtK7?z~!
zEm2Qj@_PYdF7QsB$|qAGrRJ&$A%Nvx?T-V0GpsuBQ_J$b!06#cZihnL1)f2KV!3F|
zVN_;jEB>#4AP5NDRjnpM+BtLU@Tu&(Et)?Y!1oA4E-&GoSeyoIseVQG$X)dt+Th>j
zWaV=Y1F~7#;C$pR>u<7i%akka!^U6dqEncXBB`P1u3A5I#dKPEgU62Hs~#kw4dcJc
z9`UO{o|(~LS7jzbdc|k$EvxYQFLuM9@%T}x`s)FIT2h-^x$UIXcS&`AZZbWB+-Rmu
zND4EO@)Q)iI^>_5PUpSDAhB$7Q=#Pe@S#`}$&y>QVi{`_nJ>R-v)Uepgz7)nymV9Y
zuCRS0CWQQ7)#^y(M;zgNY_wd%UkV2dCKav58}w0hmO8JiFQ?FOosUJr^<@;8fE?B9
zJcM9>HNZqihSy^n`jY&$a{FQ$Lf|Qhwt^makA~HN6+76|ZHWr{MR!&5EF>It2>84X
z8^fz<3<i0o-tz3U3sjFxk?!H52bdb%MR6gw4^OxhgP!G~eytAi6EG}6&usnKz%-9R
zoxPinyqdKjfgU4-D$h47(_yQJ((FL3x5R>f+=j?#3uJgQ)#)%D#9RyqJf>vZLr!+n
zD!@3CD}+<~&%^#ZEMx@eGJr}Hy45I+zH0y`p?VK(5l9f*1BVbdv)WD5GD3(6eH`xk
z-r&DpyaCu=WO=Vmn6L|Z!ob`UZBs=wtuzg0X?R_|N3&<UdpUlN%&eysSc<hPxO+)|
zR~@v{)z7V-a=|oQ5(}3C_&brCn0H?$ntEWE5`^ToKts}V&^~*jB#{$t%s6@jUePo0
zLVB^?ns6i?x%Y<_2`e`Gp?`_-)hm;hMG%{jyay6OF5h7U>La%0Pq@n`A0<N3_s}!J
zT{s@5#+Wws)ouS_VX84F&jhtAM!ood>h|bITc;6-nq-UxQxs|ZITgknGBDz6+#&;&
z2Lk?S5@zQ*wKhIPh*78$c&gK^hP+kgI1Dj=I29e}a-h0Y;)=@t0B(#4hXE^8h-1pG
zN&<~NNDvy%r>>F2u}HP8_9i@49_WU~()}DJjfCX7$oO`}rNQ=E9c4v%YFuT1r0Nz(
zOks~R(wVxe^HniTCY8Aaa$A#5J9MN~&no0NhNUHP6O-h?Og#P*Zt?WS2bHrfYfTI!
z>W=3a5G98+tZI67Yw`oj&0%8{6TKGm6W2A|C+R(~%X_l^7`YybANY+tPUPCJknpFV
z`QLQv;b!tHnG(NIS8~NPiqD3B`H{7^>p@y0EEt!)_Tp@myigH@)nBPpI%rq25|_ed
z)PHV{+ucuzCK^uI$YbYs)W}1pa>(vuH9&7%YeKM+X0$qMk5ty(X&^Z5xZ;TVcn|-x
zDO44qvwzhk2&GI$eZilzOw)?3e)3)GaI&kj=V38MmX!bCGGiI@cM?{Ao+lZBbc7C|
zJ6+RLq?>~BvSkse?DM-8Uj;vq_87sjLBB10D*$x1+(>8-@M#4u%cuWr=Nrjg)i!a)
zkmx=R48Zn<V%;s<t}@f=io*o-2Z|9rf2vi4KLK_PHd$sV**+nY6~HA}{_-HD18U1L
z2X5kk--%CKSX_HOgO!?p@%W6FmFOW6H*UbI6}LScvqp&3y4iy-E}Vkg(E=f9;WV!k
zE4$QI-C7OeK(2}h5dsrh1&zSdT1{NN{2m6I^8>%RQPK=X^b_N?Rjl@~!v_++AkNHs
zUTnl^E9{<JQ2@qE<&6W;GZ$<;!4Qttf(-VRT_YSOEp>AISM#8MHT7M}Kmv=F|9Zqt
z+-0pnR?3XfzYVM668eJ~6xkBw`1aJ`rN&8A$=Rz$EOuR*g6+B6?x?Xof34fyLDG$V
zjPX^Ab?lAXz#&Y5=i+EuKsrpAM`*K3$$#xg{KIhA`dI7X_YzM+UwdA5kgl;#V$PO?
zS_a;iguDe_t#mMdO3DxP*RUUY_mldJC6}x{I_0LT=?V-emqdIt0OnR!=OLv_><Vhu
z(SN5*P-tx%U=F|8)<}TR@K&`R&7dbXjO(EZ1mzWyU9@kamhUwUqLCBVwGBP5uRj4w
zLN9Ih5Al8*ORe+0eTI#Zzo<gU@s5%=ONv)FVhuH_^%!!0pJ><+9!C?LEXbR`$=nrV
z+zC2R^m-3{_S1!zvUtJ3bWDb`5{45buUxI!?uR%|za+o!=epRlkG`-gxc0sLtmH&y
zP6VQdw;r6LuQ1~?q`jFBrz*9g+{(2<3Qcv^EI-n^&DJ5eEC6p*ZcLAmj!Pe%kd2l4
zzIcgw%s=aYmK^X1%UK2&oRv*&AbI>g*EQDduhu^pP<ft1MtOUAZ<k}syrjyQ2eq7;
z`J<D=VXA2|_O~i$b+KCOaiu(|6acb16_J1AXS|-DokVu}l(NjCffC*wZo`UFk!Q2e
zclTc#HqWrm+k0^&>P`bmR-f$V%{@Qe8aVIM)@Iy)RwzV_^7nGb?Hxf!qQ$~Q-+IG@
zif@Ckxv|)CZu6+w-qC+B$n$xcn3FwA!y2~_eWmU+!>xpM#}91$(@30teNUP$dwE{w
z_RjhmtSAYw)Dx&HRopn<M}r@+A1HWZ3+nd?eAO>id-gafiUZ7CM%DoY005|~P$V_7
z>Z6f&ED3g|{4AHCt%V)*+=sbQl*C=QGM2b^E*X#T5{!OedA(^>gy0&6r0Uvym>S~~
zcx`h!C4S4n=GhdbBjji67_DoyDqi6=splI|id&3J^w0Vq0Qw3JLG1$!m0tPEY@C=-
W<~l?3K*WXv?KVSdlqL0h-?y-TW@BLh


From b6e72f9a9f03818739271a5e59a172d2735d6318 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:40:31 +0100
Subject: [PATCH 958/988] doc/log-forward: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/log-forward.d/notification-01-info.avif
----- >8 -----
[rsc] 📝️ Log Forwarding

The log on rsc contains these 2 messages after 00:01:19 uptime.

ℹ️ 2025-11-20 16:40:25 system;info router rebooted by ssh:eworm@10.10.0.37
ℹ️ 2025-11-20 16:40:27 script;info global-functions: Loaded on hAP ax^2 with RouterOS 7.20.4 (stable).
----- >8 -----

doc/log-forward.d/notification-02-warn.avif
----- >8 -----
[rsc] 📝️⚠️ Log Forwarding

The log on rsc contains these 3 messages after 01:23:19 uptime.

🟠️ 2025-11-20 17:35:48 dhcp;warning dhcp offering lease 192.168.2.254 for 02:00:BA:DC:AB:1E without success
🔴️ 2025-11-20 17:35:57 dhcp;error pool6 refused acquire: bad preferred prefix! (1)
ℹ️ 2025-11-20 17:36:25 system;info;account user eworm logged in from 10.10.0.37 via ssh
----- >8 -----
---
 doc/log-forward.d/notification-01-info.avif | Bin 0 -> 6833 bytes
 doc/log-forward.d/notification-02-warn.avif | Bin 0 -> 8622 bytes
 doc/log-forward.d/notification.avif         | Bin 6178 -> 0 bytes
 doc/log-forward.md                          |   5 +++--
 4 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 doc/log-forward.d/notification-01-info.avif
 create mode 100644 doc/log-forward.d/notification-02-warn.avif
 delete mode 100644 doc/log-forward.d/notification.avif

diff --git a/doc/log-forward.d/notification-01-info.avif b/doc/log-forward.d/notification-01-info.avif
new file mode 100644
index 0000000000000000000000000000000000000000..6d25467bb4c146e5e90d1cd237c3f2b2484ca381
GIT binary patch
literal 6833
zcmXwbbyyVM^Yzjx-6-ANogzqgD&0#ijYuq=OG!yLEYi{lEZqo5cP}a3ATOWq`~2oU
zcg~qJ=eaX~UH||<W9#_^WZ@081-!<8=nS;wbp~44s>$-ozDh^VHl7y$^<IP4-rC9i
z|5E?}1hn$}KmLD+0|I(F|F1xJ%~U`qSF8W34*&qd>-jGO5C{PP^4wR>0tCAJZ|MIz
z6t9I1;(z8>kA*i6ubius>;Gms0734cS6u}NvT}VzBA^Gz=076<fcT%`_v^(20eyl0
zDM;w(=&yin;ms=-O!LYB075HQCwCVsC*RkX-vCg-uM#N`<ZSU@?=@Z*Lq<RhMSk6?
z)Y;m?lK_B;D#8eVyNAJ-#II_Nxa?90%vvlm%#>P|7NgHAH;?~abXGCwh`1fxV3itu
z&9MkcYDL$tbF_e66MSaX43gh0KUm&q*#sD?3Rq-#x7n-;A{e`Gg*}^qngagC>jD{t
zJMWR{@f3E$r&_!m`(j4OXn;Ok!H$=_*!6Z3pSKE+CCTom6|~c$S4Ro&q?RT3;UC1z
z*zL!L42q6^HXn3}XNz+rpd{qVy7_BOZwO&)eAyv+E0ccma}^7_vsf9&#!nukA0K$y
zg$(B#z(6}2s-Zid!YUMLp4N%!s9f-jy~^p0c1aYp?sVX_+>(r8=Q2}y21VK1Z3#Fb
z)Jy#E6{>`+|4=+9+vtF07ch~k!H*aG@=@dvj&b6mBGrAVa0+bD7o0{EPCSCfGM)PN
zyuM`=ws?))4kqz_mdH{@5Jr#v(GvH`YAiBG1*}EEdEg~WA<Fmevrzk)L-(UfVgI%v
z$~)cW{G{NWJvZLL!URAPBH`avz3^6)9`#G1FK<|+IL@S{(@2|=s&w|*V1?Sk?Brj|
z3g9?(@FKj;8m~P~;TirLW+ZE9Ie+A+hW~e=`De%Zjc#xpf6NJ2^2qKdkp9Qj)SWYT
zZj0<y73Z@fWO#^q_2K978}hZ>IvE-7C1#kr#ddUOxNIAvWeAN55u!;<GUG90U9Ziy
zqVHUI?FccfVjuafqQ7!Ht}2BU`44%CJ`jXnU-d-ypvpAwZasZSZP*K<i!tHRJI}kS
z_v@2z^R;_Qy4e)mE!>fnr&D3>IDX|!=DR1PW+u>Z)21!dKIc2$;vxrEW$5MaF=l^c
z&m_t|gBs`Ei$;YS2tm6)kz9a!WiF>6)rXc0)BMU5>Qb5~J>X0=Ut3pPV16k3c`2hV
z(!gC;;zt^)qj6ka%V=jqzI)x}m2O9sU9p38WAtXvuI5R5gVd|f2X&>B^08X#D?XT)
z8simaRGi$<$~_B_AiS<MKSA1-R6a>{gNlGy!#zAjh_#c<ySO--gW38cgZ9=@>kHWJ
zK$@$i<0)~ttt)GSy;&p>(ImjkVwWn1H++!IZO)GSqaxV2&0|)Ogg!6B&XpoF@k};&
z$#RJO1DlZon<5SAZ0@d^h_?+YR>vhQaRetWU|>S+Kn2tPeZnU{T$>cWg?WJ|%rMmH
zhsaOcdD{*e6=J6K$$^Qd6w@Q1MjJ+`D+|?#WFDT8%#Zc%p4el<Rw3NsX#qoOH|^qB
z`~}teP2{i4R8@$FNw&vTG0`<N*L|U1xVU=Q;4vhgA7C{ou2{jq1hHZHa7ZU#h~wYi
zUCLbS+u7uS7rxQP#$%OcKPhWAU3r~D6M{4?A3O{<!_mT0*_K<WpsT@5Z{gVWn<c8F
z=k}JW>zND7jT=6<*NYf$<T1wyTR?_`Il?@xqtLI+W#;q_bos&JEiDuA5=#|pab74i
zLBi{L9~9phDBw0|8Sa6#B|RylH&}6wx`Ur((g@BfS<3fW<sO}-Z%uuCd-Hmx%mC5>
ztfPU~MI!|JUNx}LM(>14K|9)1Df`(7*3!(9Of~kJ1;KYRgLK}JS*XYBpzPiqC(W@@
zc2%PjrR#ITJ~30<)Q8`A+3cFLv-3_;qcA>~371=%K#y-cg9Xy*$u0XVh*YTJ!xF(S
zT_I}clgL+Eq2}Iy=fX<u3QeTT-*!+QE?P0SJMf(5D6*j~DrEq7??>&t{2YZUS<6pt
zm(r1R1+dA*Z45bQg!L{Sg~^C!vZ@qYDpy`sqeK>^E~U*<GY%t)_2Tq(yCd8u%Vm<;
z@H=<eprTqTUbb<*0Vai4p^nv-8n-{|TVZX20Z%WfdUM!p15SU}=uhW2RTNv{*gXCQ
zX}Uee38ePJs3at0PsDnV=7%o>G(XI12Jfi+IeYq{eg=$eY}_K`!K)n#31}i_dK2Z!
zKh9H(I^uOsp&jaP$H}W@Hn%RgOcd^jeCAk*|31M8MWdY?W{UPZ@UziQlaUv!_;Jvy
z#k!PBF=+!nbD?;=Z+P<&N*WL3-*Pr09FTj$&h|j+cC%@bUUh`v+AnULKo&{Zu3E$l
z<TNfk_j}^rEIjH_i>5#F=&J#CNA5h`UFe0Qo9cJaI5_;-mj%x<D5iV5nEaG*C@=Wr
z0Mvg&2KqTx3O`k!oFh802QVGfzRxk~?TK4j{P~rcvRKxNO|Wwv5ygHnt3vuQ24+{%
z8rx;%sAIS+P%WA&Pr_Wq0e)~re}-sm<2KPc(Df&oYwo<j-8VZvmiedBk2TNGNQ6g^
z2rP>;G@FRk$k$jdS)=-`1RJHpp*a7ji}aM$$E?Xrnw#mCiEqc-`^^G8(9J$nQ4=2l
zhHhpS#Jdvk$gbH>J}H+#OmKVV_zvfApnVSGoJYsEe#S2b);ejy+}_^d@LGdY5sS2_
z3U$AK5}Rby{%FZ(8@aQf=ex8ReyW3svhDPCgPQ}0>4T?|`Q<0dWqxG)>nNL_#Fl*N
zLp+Y6^l^8n-k3x4<SZ{hZpW`lEm?~q5V{PGb&)K!)KR_Tm}G~jx{!?b^7NSuGH(Oh
zAd?gZDhHs<jV~K;3gLp^z)d-|b(UpP^#0*`I);jb@Bna%CdWxyqeRM+cn4lyOubrE
zu`eC3RxsHY*0E!bbTwh}_4OX6zPfktA%7fJ_V)qr>>AmZs3+qWEskr%zTxkp47z42
zLPPWMA+X1F1A_s_ah!B!;(v6Do191}X&<fJ$ri&!-{1-MB9Q!3GDhT7MfJerkK#hY
z`#yqV_A3eMD@l9}N@Z<n_W40fscn+Ml`y4pdhjPJ3Vfy^esxG-9-uo?EPmbhR~_x!
zq-9qJvK~tYp&+>u3vP_!v|=5@EWZ+5V)y4kjxI7U-@UeXupI;6v-iN9vHW{dTmivN
z`G>t3{rew+@fSVw$qPAb`EvA#?=Z-m%=$2%!Z)@LH945fNe7I&Wc3Vxw)9MRe63^J
zy;mJo%_WvBA;eb?bn{^z=8uQWjJkqNeD7$$p2_}!dE7bnoIkrbeJUr2Pj5nEH_8C)
z6d7>z?AA+8t0=D$B2twDoYOyVr$xif1bR4Y<$oe<I)PN0mliEg?oMK7RQjGw-<bcY
z)r+t{&ZnGfg9ZewNgQePi;~uJ5v3HAioUmr&c%Omb5g*@zi&xOET1x(dS-soRP?5A
z?2iA`5R94S>_k%XQe!2XWb(x-FF_%U%6<l0*4a=8L1F&%L55v1x-R^LD-R1xG(kqU
z&mJh78!6jlyc@iXctjnpvuE(t9cJD4?|Mr)M<)*M<>cd0$d9AXs2eez;`S|fX`-#&
zOep?WjOK^OeXwORmI6KT8f8z4591fGI2xf0If4c~%>zrdJ+;fVrRr&Fn`?3yDbBNO
z`Q;;$hcqD{y&mrxLkP_MG!`IBTA>ab#ay<*JUE>BSTKvlJ?-Bz*Gv#2&-jIsqZ$Le
zZVN+k3o-HYx7sJEDGit}&VSzQF8Eeyo=BGEVR?@lu^9Zbwi`HaW5k-q?T{eDR3gGg
z3t&vmPFFg~6^2sq$L`h(uT07FONpg`e7exHN<dA*h0<w?6Wm)TE5P|8E|SFNLrfv<
z`!O1N%yw@1kJrhwcA<Zx4auc<N7-K_h44K;8u|DcdumE&W!u?7yY8s56QpuFb`Bp(
z?@|Uf(ik}YiieOpX@sdKrKN0;aj!mUKypl+=}Dh(Yi09a8Umll{W*>B&ikwGDAf8b
z{qtbI_zU9Jf}SsfNQVZX!lv-$+ABsI4IKp`bEBbM^nl_VGBdJi<1<NZIntgXza81D
zDpX;HAgTeT2QevUKBN229Pb#ZxACA(t25zFHHlRIw#g-H#7!K62BBX5yeMn);y=?V
zyQd$I0()a3{jgff0%&z;$>ymf&2PuUa;e=-*{s1GZf_0Q#B{S~R>_BPfc!9uq*ac-
zcWEwi78*C9aZ?*84~Ip+TYsL&<O-q2&X5^qM)9lZ8rcn-Yq;Nn-vreSDQzt^eFQr;
z=&3#+dAt`)E|YE?o~tjWzjDZMsEgQC$g3^0h7jd{p3Ppk1`p%cB-MdkCE!7(UgcYv
zp43~k1_^@2*+Xq1$k?8)Lf>0j?gQV5o*hiDvtZnHMcSVq7f4s>?-6JkG3)Y5XLmOd
z7?d#soeeyE*`|_f6Gj+^4Ws&36L+}1Vwyc&=0Uu*pM_om$y(jPjZxAQ!6)wXDEz%H
zg{`Kaa@VJe5q7^_{oy>Ss>0Me7(+%krbj(>7prKAOhSIoX9W*M#4s0D7Un6>+V5Wa
zDiPfwEe6Vz_s*Vzf-9!7wN1FtE34=~vM&c3>v8+Z&bB6Q3H3_}p>ZMDVsxLBPdN=Y
z<Nj7dx0eX)@xE#q>&egjN3j*R+T?@6!nBy#EhwrAWM6w%x5;E%zk(ro4XRwcW-qeX
zu14l2``TvoW;*@;eqWhFh0%2TY7!zmF<$HJ^6j6M-15n)o)2^qBF0sC_Y;kwqH)vW
zM)USfUQw@UJMW%GgWo61#`v_D_4Jn(Y|VLyP9}jaSTC6bITiDOpF9owN?OfYBaLGD
zr?j@1H&dxKZgXgpFo&?onncI)hJFGz^E8{6pWfWQZ>G$RO2QZcN7$IbNgvMdpHNRm
zp8aH=vdvj`njRy`U>4!}+Jwmq)gv)c?=$G87IhgUuabwC8-dbo$8Nj;S^I<>w(t{Y
zMFeGv+HK{+P45Dqq|D}<<b^kf61h|4R`$@Z;hjLg1>JaXI$AWR(tU*63k!=aH0P~%
zlvnl4Z`9yNt6zElu;R34=eXM&TpBiz{Oc{#ogNHF5_Y-6DPqd-5ri;N1UsO=PLuVe
z$-)4aQnt|_iqxG0m=7M0g&5mSsv3>4={@`A7aQwat&h6hH}kg6{TT19yQISS#7I%X
zB{Ff6`-ACG;cr65Qys4`emKvlk)4~hmxza!AeTVgbiy-;5v0q7wKp7RYe#xEFL721
ztzCfX9$-jn{8A<w^u9!*iOX(fJ&bM;NfP@f=lAi%_ORTudZpa<h?5XuKva`S5XsuX
z`o#;!Lt>h3RZZOt@pHKokNIF`0u!={O&o`$G4v7mL8+QWUW|y`p;^5R#r5rnKu60?
z5~h_>Rdx9?i>OgW-`rVE#9$7=G}#Rfi^nq)!z;2~lRB^Ntq05R6NSi8-+MC*02yNW
z=9C!YB<UU=@~F_#dR1h;UMV3>Fq~PO?PZ_L`|*jNA?;w|nxo#Sm0)o)EYpP6aFV6@
z9?Urs&M`uS@-KuyvjJN3fZVQppju<7je0_ymSTi~F!H(iVa4W_@^8PhZ`oq#p0RzD
zhV?WvAtC+bsZyHf;UX+hYa;qbHV@C26qzWahOh&mxD;s+CC+>DI!mJ+GbeJS2wF-=
zqo7mFm?hV>e>;>Z=t3ljQ}$ZiIV8}JI_PaG$e`^W{Q-l)?GZ}=mNNh)$EH90U|cik
z6%j{*xRjSgjkXS^+l9?DZ3P^ucdTxb2VhBa)|pX<1ie}30v<H<V_2_yme`=Qr7pq@
z`zH5Yq~^!OXj>w()LDXtUIO1a{S8-Uwmy%=+)<v>LCdvP-?l%r!~6Wbh8eo2^{(#{
zmO+vLwj<RhZk>ZWd9AI7o&c_tqDZkn$F&yNf_A6Ce7y}#X~0{{L9bgkNn7Ra-;qa8
z-AI6&kO+9XA}2!J542KeObO$juPf(aa!<yV3ohY`LwM7QOs-hv?5vS95>}sZk=qTa
zn`IA+4x@(6Ti>S9y`0r=?ff7rH^JP;VEgyB|CWv&<k>o1FsEhC9(BvvJ9fBv^ru?n
z9l6`6&zHK9%I}%QR)sr!r}}dbwSMWoLki<~C#^ahH`md<6-k^Y?Tg6~-QDK*!EvU$
z6Z-S?%y-2l8-9h_nE|lfDPxHRwPwPFkG2DryqGlo(=*st$ImR?%n-Kb2`!^r=3WF&
z#ob|r?avxk_bu$@*+I<^hOjNSRVHx@)X^KT)M-V(15czIN-CM=uTFlQ#1SMz0#Km-
z3(F%abw<FJrCd=l=bJ0PxucE9QoV@j`0v|ovF=;AF(OVOp`0>YTI;9$FdZTXuE#Vp
zI^Z|{fR?k&uLT6{#qsAvXlSA2^Q!+YoVE+@{Z%4!eXs3;wAt&H|0smKJ10C7oTzZ$
z-GFkkbn=g$d~aUBl!~L=)|_Vex?fVFrI&c?ACz}RIoK2xmt#t=hRE*2gtO_d^2rc{
z_nvM+poE6`oo-G6X{&H|P*Z=7ZL9}P3+;!;81eR2H*ZeE1txDFulFSQbcU>~8YmlB
zz&Y6a#$^TDR_qPtwWl#!@Jgua`;=bU$l|0e#{iy$nBFk%mvbBeAra=6IGm({7UTVy
zR1Z?Jz9m|rcT|^G))ghF+W0eEw7vfM-k=MWgJ&4?#^DGtGZpT?WLS+aa}TwBxP*c#
zR`QUHx1T%H-L^X6EamCi$m0HqoA7d%$0^fE76zIE;D|UmQ1vU8U<!9cl+Yz<Bs*Vx
zs#WV7Ztk+I`}d50<g?Cisk=-@pse4gxDV!ClzDL#*|PQwQklepw1|X$T^(jipARlX
zt5@F^uM}7-C&pxzQkQ|XR`9K-BL<#4ZUknh?1@6@<b8StWYpb%YYe{SAwnn)Q-0Ek
zq6np`VRI-;DU;ZWMpI+TqtvvD3e1%*##rF};<j0)Ps(B;f39d0*6D&$Eh|F&`rRGu
zF#jq|gApe!n*XcS5_V&2qK;MJa-5qr@R0r!C&3ootJE+BGdAKW5RJ*M3HW>e?>IMU
z6eu^GzwGz16-M4ohHu&joe3^9k*6BTHYV39*q8R^*or#>yTA9Uc64abYk4tIHu)j5
zSaZ8uDQmy0FA4EU@WZULG@L)#UO5f~eI8U4u~G?b-oxf&*BfuT+r>>~?S*`&mOJm!
z?;JbkkImD$u{)nhT%rLgW=;{P(dwQJ<zZg3c7=?QD9iPrYA*}fS)sip6^38^%kXA+
zpccsKM!ov?r)k%oc{u@N-281j{hw{OPhaJHR>EBv(%vsC!FJmqbP>m;I%#T)!BZEw
z^rITRJ9*(|$lA!{f^<MtA|z3UBa~6S#H~9*-b3;#?S#llPbLs?Om|*aFMU*!qozOK
zKi;ZKZ@fkgph$Mx_7k%*W?XlS;I#Z0#0)x8Sf_z+QNObyOHt@gE9SOA0FAJ-i*AQm
z;oPaFBC1v2j3FjB6MvxWkg?e-N3zKe?=!LX@=N}vR#8;PIWKqq*8<e9H^!P(>yJ8$
zNyjmZO1l-AB}Qy`RHo;5e+=@)0m16eP^5K(YteO#hbJOy?G|Fv$a=Rpw2*O}>`+aw
zmOQ1M$kO7iYMATFv;N5XE61q}B*wL}K#dHvow|agf)gMo^yyi1TcirV-N%n+W{6&<
zaR2NnaMc)O&q5sRk7!m?POeqM;iP6ass~mP@#j!fl(?0m?4}Re(rxGkaOg3Zu0kQ&
zYl*(Ll`R(Fu@~8>u}1khbtsqgT({0%XR|e&JkKqNzUzF~(Mq%d{sU>zd)-fIB8kqi
zT9@ZVyOvGb1$;VJ^r0<^XTZb;(|xLtSjqa$l7Ci%EMUNn0JGRG;HGe1XJj2UwUcyB
z?^%kqo0{na7+tRh=L#{=;;aiDc{;d-us_#`@j`M1fETHlYfcZO654-ETnCcsjiq{-
z@z3@|!*Y>mfB_yoRUbi_L2XiG;vIeKH@XP-@5_F%o&UK{n5I$xgI<viZ=5oq{)2X#
zn5sm<_4SztVv5eRA`SDP<gSmoq<#*iA9Szec=$+H{RR)Q@`(Z;olrY<N91E!6-nzl
zta1bn@-36dZPhDf#0(V~Fd6lG>d{)6uzMCGb4mG*28%}2beONuI!_6vT9-rzm+-Xk
zGtk>VD_Q6@t<P<(t|b%8Uj^Rv2xb^F2s&Mr>wjHJg!BobqLf>VYn&{SAgKh{S7GN!
zqux?XUH7u>b&rdDPbXvoli3Su5y>^^!&n~+77!>H3O@NL;!_zmI*~Gm-K59XnjDQ`
zr~m<AlSmwK7~E`kK)4b|=-TuoTqs~HO1%`fDx2?f{;V8x=J^GE_Ae-z9bZV*FtO=c
z2T6H?idaz8ZH{uZp4H_Ks$9c>P;*xFK{dtp-|?Xvm`vY}yBKeI4QfcmaQ*%!zo+pQ
zHRRQk*;&L6)J7t)<LWC&PbRsixe8y)(T$np{GJi8aBIN#U8U*sr{Oe}XUcHcS>7#(
zUx@8&ty0l^wJcvik=-*KJlScjASl8V9eq+b>`T-j#k}WNSqha(X>_P6i=CkMij<jc
zRu1E-?8)X!HHJ%kOvMo5NEIa{L|Lk_;7us9o>Bw+8s>fU2k@rdo?jz<^I7BGE@Pu@
znQ<W5m>$UFaDVY|FH|B52?$gn74SU@Wr)&)#U&Cm;=R+VLeCx|5saei)uk!A$R21y
zom}#}Pha~j8H&W^cQDoH?VbY_*Vj5gzGzAKH(z6Vq_Ge{lw%Q<rpJ!`aYJfl{GYz+
z<Iz^F>s{`~AL#zH8+1FD!_HBg55VlB)bPc9fZFnCfo-RBfyU^LDso+b8Bs(kf|#1E
zKK97k6w%Tlew;kbBSmR8RX78MQ?pm{9gbt<^D2CPg|<NfK?g6p(V5`60nQ%OAQDaQ
z^UKX+@C}yVuO*W&9$j&N<R>xZcY~blefQ;XM?c3E(;<TM=S2oy)_m?v4ylSE0ym-S
U@M6Q1XDr>J&Qlb|9x28D2k(yPs{jB1

literal 0
HcmV?d00001

diff --git a/doc/log-forward.d/notification-02-warn.avif b/doc/log-forward.d/notification-02-warn.avif
new file mode 100644
index 0000000000000000000000000000000000000000..ff61c0c0441d1cc43df00afa6678030f6ee08a1c
GIT binary patch
literal 8622
zcmXwdWl$VU)9vE!5L^?S#UZ$Ba0nJ$7T92mySuvwcekLy-Q5=_xNDFAH_v<P>#6C}
zefre&{F|Bv002}L&K?jGSFi=(pZ$lnU<(dgu!)6|IEVN@>eLqGZ1P|2pHW+x+c^IJ
z5CDLH&7A)){y)TofSqmsm%#k<6kr>Bv;Q(F008FS`p*Mk@c#A8`WG{R!FK;^`o9Xv
zzXSyPpZK4~#Fd>x(%#1Yf4#ngA&!uLyaE_vX8#ZI!A=m+e?kBN_CLYXzl{w6yMzB@
z;E<7#{{gy*D~DtN^?wWi&&=M&(ay}q{olzL07U<P6d@R5Yw}<1pZ&WSJPd3QJODsd
zXlribj0-?T<O3a2hN5uBiYuDKLhTB`S*wLQnIce8fseUm#<A0dR~5t7uzLYN%~B%n
zSyp2b+K{#CtxbCFarGEg{iJuwj-lJFI{<w}Zj*G^cF+b7jK1S;@T&o&+2<|xE1354
z0B8Bn%1G4|Xm<VItS%z%F<-%UfLEGW(^H0>CkAq(RsLPcT_%Y9;yYs#X5)jfgg-6K
zR*!<|2Cr>GV*0qGSycoyTp44|@}n&3?<b7cN-3-y4}>sm+83KY68&uDxIr0)3Hk(u
zxxX%Z`6ucF#s6|Lk90Uo9K`}3Z_RW}I{2K~-~*hZBDvK1$zi%Kh9u+$3=$?kc}VKe
zNc7+ClgIdLYb^2v^Osuth!3NClE^{-(jjPS=8{qT7PF{)yjw3bun(FuZ7Cmyz?L|K
z0Qm+Zi<k;uqtEK>DLg6I=yLNBKW_&4^5>hdqjD!PMFNLb^bpG$>)nKYOBJDA@H{FT
zR{D&+TSFg#jof<NWDx{BB~>eVmck=<sC+$3x)u)UqUc_Ty@;YIxTr#T%{D^*Y#rq6
z>?u)s@kuZ(mXG+)AGW&7BDeErrhiG1^KHuK)!Fd)wLO)BM%GG9Wy|_lzO&Xc_cmR^
zugyjgei<wX4}Gs7enqcJ5ahP%lSga{nwWfKOMPhvRbu}{8udrjUNy<1uU0%?FO&{b
zT=<sMfJ|w${tjkQF5CTMEnDnsAQW1k-2|_5WdD=+dz{$ScJDZko;i;c@*Jrvkmltc
zPrSYy>-X|;s=J{C67`oecX4kh$BR@&!e(C1Gx43G;MQS!=lp50g7>E&WS%E#BxD%s
z6A5>R@))%MlmkOe?dwBS$zSN)^d~!RGp51p-+vFkfc5&pwTO22A~KO83)k&tmzVtY
z))waI>qX#)e)6tq;omMJtXY<C{p6U%TwDvq--gGM$~UsEF+P~ZF#fWqAp{G0L}Mhz
zlnPr0r;{>L#ZwBFP!xM<k!hN%G8DGQl~ltpA7)1UsBni*CULf!rGOpST~y0&_j}w!
zqBQX0PPQz{of*Q|`tr@aEoxEd$?2>soTw2v0axH$bb`*xuReUBtk9~XbJu6%5pKps
zOLi~TMG9+UeJp5vs>3)fjN;t#v72zFe(~z|Mq2=?pB>~t7|W{B{cWpoIHWEM;T28h
z&xTH8F1!Y1!CCG2Q6RJOFSC3yQ?!;UHtkOB3X`wI+4+{S#AZQW-e?%{0n@qk-?&<R
zd4qqeqBVLed;;MGdnVoWQm67ip^e{G6H@yOuAf$R#3rA#s;{7>=6Yp8^O~pJRQXHH
zUT9lii9&4O{fZ6wb#@4U-J!k-Jns#k|2AS54kgsrnKvIt8&(-Bux$-DM$0J^Lqjoi
zIwF16mhCg&BU&~mhQT-|V5g2(9KvIln0wfIWyw90_$jLqn%vbNk(378CLwH;zxqDK
zu7V=OY!lZF5g+IHezRQM2Glgo9tc?FDs^$})F*DptNYFrys>vz@QxQ|D5v445jy}R
zY6TUjp*wj)vHtA&&9R5TtTDtxLy47*8Ii3olBK9=Cw4!OPTA)p{@%~DbJox$DmY&L
ziMC;)g)BgK;YMmO&T2~r#EnUSgCracxK~_@i72B0mn&=zCt!tn7+#M*6~}}ULN~vx
zk!xtOhDsjie2)C{NnRw4c_l-!f|YO?xqtXt$Kpavn*F9xqFw|poBH%<Hw6>oh1+dS
zRJmc@v%V27p%0ZrmDQgrtTHtG+M&w#zSH>f7!xum93NA?7`Z3d3_f-mZRUtv^{k_J
zzXvUVCyEo^*xy?Aa*&OEC#a#jfhb_T;xfJBe3GYo|G>LQapE+Fz3!~daAd0!0J|4l
zTJ0_FK4_w_s#<cOwOFe2kR@ir4ncfgG-nXQz<y93YS`aAYIR!ZHHT`E8a4kc*xMwJ
zdv}`Slp#I;#VR$M!*~PZvrme{JbHS8G8j!YURCW(hrrMt#c(QD|0sn1mbra^Ej7gG
zeUYCG7M%^N&j}Hd=7+hVS%tm8K)|_6-)3~_%DEM>zQ)RdPaN7JGy}|sn*v@~LNG@%
zYBA2M4ta8Kvyt!FU`e)fO;=3$z}{#+&VlGUb_BVMtTC`-c44+iBqT3(ov=s5c2S<E
zUN!xqyv2Ptb=>2mxgtc5<cUTg)^RrHT(f7b`*)b>k%)Dht@m?`ZB!Ogq`z@3hd&gi
zR0o5Zycz19>8EBH!bYO`f)5kwlg?!*ve}sgDEBL;_Amtqu@zzY7u8g1`<ud>Ckl1q
ziA~){I>(EBJI0|qcT~%9AzjvP9jDIH39>Xvfp^3C4AI(iIv{8$3TPj5OP0>QQjcFR
zrL>EyWcC?c525R<9oES#uU&-X^932RGjF<0(}w1b2pGR_VlPQdj3ZK@4%pm;jE*2j
zsh@mwbM7em>OHQ*aZZHZ7Gw%m2VTs|lfca8Wis|seIrdSvyv?y#_E6J%OT)y!9?d1
z6x$)>`Ch++-Vw*(X&27rZ;4`T{hFkCB$aRznzOb)w7qy{nhnBJ)5-^WnqG4x5@_CZ
zWEESl!2xA4frprWZ<>2e+eG5d24~SECmtS&jBs3J!F~m{4%RPyQGxShnH?XB_dHmw
zXbQVh6tig<%}824pHyoVha7bjzeFoId9yU5(W^Rd(V$(uJryXW2Gt>Nsh{bu$J%Zs
z(5)k#n+#1hR!o`a+N(1_gK{MY$8WJ$L8O;agK`v?+UP<qNFpP)o<kuQl@$a(N#?@{
zE+gY68s*4}TCVp3<_hfy!~`iW+IT<q!3KJmyzLN}T@WJKus8A~Dghr8jYhGk#$>z$
zmNtmVKEhX#eaEqHv@T}V;TS}dO*aS>ki$XXgUhf6^v585lN8orT<!e9rMB76ppT|S
zV>b|AXY|xs@ZokspQv|{0OAW)7e($HzZHwkd?<tP#o<g2cv;aXw!L-y)VCOjmEjIi
z6Q&bB05y`r8E_%CrXX@<ey<44WLnNP-{Xo4F%zbx)?BJS=Dv`_b!xys_e67Dc#yos
zIc5pfVS$hTS%?xqJmlbX4ai*}VuhMyO^;N1KQO{7>ntFx6aDc0nw_VMBcM;ae+G;6
z70=>*F8J;#sG7;Ma4Fd33)AO1+As1t-l1;xQ{fzKZK$P+iu{nkJd}XZ?qu#{uIR4B
zU}4Oe-#WT?J#-Bo7@){13YhSzmms&~jwGx{S6psz87-1pE2P?TEM<Sy&*Md;#s6q!
zKjg3g*0C5C2g1QvcPJ|kCw)rMvyY0K+B(T_Jy3uS<4f7NIKy1I?m-YjKKomYAcH%3
z3SklYT6_)%6i66%E_43Cex1$qY4ocFLVq4j{hgFsJF(dbFT(W%S|}Ei2!sTK!5^-K
z>OGlvoFMnhMhxB8rVY;xl#!DwfigW37fM??mmh@m)_Z6_193~qgK_VJ>Q5#*CmAl&
z7xr$&wzk+Qbw}9?4o+_iR{8jWYcu(qyY~Ge=Pa0q?3Wn`H;B}7LCJlr`d1|gL`Kfy
z0#TPvP#r}Li^o7mqwy)Y?-&$~_u-}pc)k-v!;eyS3%=?#y3bFq0d0u|s>o32Edjc?
zoh9d*f*>5P-poTI!}>E|S%Fhg$>0Ft(1fxLF|IgvDJ|e+H^M!RJ>~>aK?^d7MQac*
zaU?XH!L{SB)!4zyT-=j&Dih|$UWc2sle(r*K(n^9Nfx&?^)5a_9{gil8@_#>H9hu;
z;GD-X-#~3^`5j<UY43q;=h~~%hicGaI?^bX4!aF6?BRk`H_m@@_dF@U_j$jCq9-5T
z;8jxGXt18p>V4H4-h9VYEy#gxz6SjoCKnzMD1%Nh{^_tGsr?<I;|(@&P@CKGU5fwH
zG^3u65i=9B7e)LeNfs{GEUt*|71N*XS0c==E4pI;I#UR;UBm1eln9&8HkjY)n9<KY
zu<&<X82e2{?aIiIh*gm3jkz0eucO`oRV*dbXQvZg-)m<<h6CXtNxkGExzzb@)?7?p
z<1hKCtQn3ljUp)-S)>KKg%36#<4d66n{dhPrdMVq9kc$xmC~LXb)~TDll<c&N<DZ@
z;<ktdh@E%mC%P#Yps;aQp}jucKnY@o@t_f`Bu67nC<Ut#5j>`wKrHyo(u{xnbo*E)
zH%1z)?_5c=bsl8@ZMP_^wEM#-$DZ|3Z%KrDXy0DP>{$eI5j=bBa)0r3gGuzG!$%p$
zglJ?Kl8;p4NFu?7Xl*{n!V*CGIG;|tqrLO7ri0~{9~3+^a0zxtoi3UE4TAnf4gBV7
zQ$M&@Bt7?Wh86Eo)<h**gW);*tKeQ!-8El2h<EW|Ap;K>ot+BcXcArGE0!O|K#R_4
zVV=46=Sc<}yI285MoT`P#OON<cafu%5RriG+I){lWfSxCw<LMd_)%WMy#~L7U$<_d
zBJ|i%Ct2z2zo8XexEAjulye50tU;}opQTTesBA+vL7+d>AMs2%L^)f^s9ZrAQ)TXy
zs``FFN&t*PYd3)JYe>(cy5WEpbgk`U^14jZtfNVW$0yZS%qwI3JHGFk;CMYF{UYOX
zEM0#yjh&ik*dDx@Iq+{+k{nVcqRe2Fb*fLyDUa)ennPo^GIObc>CNM&PSer3=HZeK
z$9Xo`kS`y^2hli$W;>m+V=Jz5*PU_)gWQAK)RyD(4V)BPHeR*jH6Lq{p5zUpBpSRG
zDMRv?_V7?!#9WGhGa&tbPeT2XItwhky|N5}vr$PbMX#HYu>qIBZmR1DdOT)*2u=g?
z60&l;R7zR#M%r3WVpPs=t6Cy!NKlV{H;Xz{NKI~!F;&6LrZ8-9ytfVAPa&n3KbDkw
zVUE2|FU-iUoUqhfomz9es3ogJPngNiIM1SG!j`UE&iz$kWYu7=*mAR#|3213aeqb{
z^p+D^CMw!Jm<gnGxBZaE^cmZmZO`)o0ginL({XOsP^pP=xo94(`6Zimqq{i>d6ooi
zk3GL*vxNL9_h7T_skmBww#||l7^Zw~h>I6SwRb7Hoq`+*doA>`p`@6<P~`JfJt+7H
zACr=fXu%m_b(4Z*fr|vY`E`~9C90t=58Q)3LBIK9!FDZcWB4p^=W%N+V1;Ne-;3ik
zs<JvHpEa<J9T_L<p{(oxSNbrw+ru5ockuC424%&js6HR%Pp?f$!LlLe_7-)Ek3xfh
zHny^_R@6Fw;dl#=%b;fSkGdZOVCd+E!k*2v_UnBORkg2ZrOe`TOb7X=3WNd);0?qK
z+NW~aUt(K70Xc%xGX52SnJGM|G)vr^$hnh&8Zui98ls@n@>fj&D3NeaE`qJFh1Zft
zTI%4~Ya=pj4k{{t7YXxu)W|ozkhAwAmv@`a$a3>pDU3&Ddy#VmnjFgaTC4+YihBaw
zq)9SxspBejN0F^_T9tp$9ToW45q4t~RdyUc!KfUd3;1F014h2hM)N2xi^+aEKalXk
zSonRGxQ2!wQ*}q#crJHkk=}~Ga+nl)q5outa9^0bf5x)<r&8r)o^bB?_9Y8Z61O|t
z*>@8?zhJzy@}>d)a;g;}Qpzpu@UPZY4Miyn{>55Dyn&!=A;|!ERL<Y?S<XidzOHO3
zXP{$c6#vQDirP@?9&>AAufDH=W+%m*pJ+|!B=um#cbQ<cx}ai}o}A?Mx5bmss`|>)
z{phP%<>Uw)_Sv<uMxUw6$Go60r_eB;(~3cU3-Z|k_T&gs%D)MAk3d5BF8PGc0AOwP
z@KX0C0$V9ftbP6WbHpF4zm;xwVUEVx3w`h&EPRrpd<FU`muOVFWsn(?2)c~Ip;q+j
z@F}eIR)wg~bOv2&(%pt2Tf~U$(rMMJwqyynWuH1ZO*EvHchq$3;<j|QBE=rj{l@*-
zEy4kRm5wogUKKvBOj%ytd}ZD+%9_YsYS1@hrt_=`B=(`+{!HdDkVx{^>e$OxSmS7x
z%dx7w`~gq4f?i4-w1Y1lz77NJC2+b_4@;4E^pcu7tV{wcowe?*20q_B=i*L<GB?Fa
z<jT?x(yoCJwNdFbLt@9j!1$O<^OS0oPA3@L!MrDHc7s8M@=SsVK+REd7WfrVpSEK|
z(>g1l^%iwu-5kTyo-~H-ej5f!hYS2H%M-#9suw7Ma2$-sw;mPvjVZ)K`ua0~|I78d
zLB?`3@Jcz6)xJhhc-2UWX+KDoeutoJj=z_px1jbcXO?Q6A{VusT+tMECLGQ|$EI~H
z7-K&O&vqg5asB)=@KNM&A*;Aot{jYDUEY_Z)57A}m%RH;-30$${_Hk&*;CCd^5ymZ
zHtzhrp$)Wt911nN&Mbd^<#c*rmG*eeHDMyOs8R+Bo8Tse`iw)4b(vP=oYru-s5Yr(
zuMoOlr~3xO^YmVrqKo-hq6$oG#^*S6R6_01h0pQg#1e|Cj7}wkG#%UJ3e}gFSHuQN
z#87cI4nCx(XP?r}!`zxS1f3j5enRX{NAh^HlKgEm#VupqC`Gyc9cK}h1BU&VN5LO&
z-NEfK;pz@<viIXrgoRvc)u6CRzqOCqOQta;cIBD{(`HgSUlworc3~9wP)+`R(v8$x
z+Y3c{tr`eCL;X8;K(RnBv|Awe@jZnPK{g7gWwdcp&#ri!xD|qi+1R=+tRZ@r<d0bC
zvo&N&%<CS_{E_rfk^Bw)(yP&TN0!-Zkx0!|6nj;pNYuZ!n=!_07XMq7^I92Uvnb0q
z7nUdMDqPu+14s+Six_{){6=kcarr(uH(It^(AlIARd#9RSLU_#d*C}PN{{?nW)(Iw
zV*j(bU$)|m24s)PlmlP@mMC#`o#YoNd#+qQU6+$6uut!gngP2Icbq|BVMcW2MGZeu
z13UuV%08&ND@4hF+cU9Jq}dad(RmBq7X1R8_vX`3b|H*QtV)dyI5`9y%6$%foW|aT
zvP_^n^4A~HdO6lQhl|{3y9|6^Z$=(lIPy+jV<Z;Ux=p?aIPqn7M)j9;HA7XInA+dB
zi~f@86m=h)2M4-JG1paHzTr03Ad-u)o9+Cud2>jKM%vLwqh35)z!sip!o=(iYlwMK
zAt$f>jMR<x@(2~lTf-<H@}rA5G?6-O!%6W|Og4$!R^r4t;5U8RLQOQyZutQ_F5f>X
zOP7m4iupSZ#9cnDbn$|7r%)>EAfF^Xl3X6Rb3R2KX+-CT)y;9Z?8h;1W|_0eyuG+5
zTL!PD)0zNoebrY{1DG6tm2?0iiywYB<2r3k(=?fN!MxbzlE9{Enx+`0Cw0c}p<z6U
zW@6QP@B9*a-%AORZ|1kx9^G56>fK0t4`}{Lu7z0$bjZy}5`QzDSGDZYIQrSqPs*~t
z4QJA1fYhukvAwkMxJDF`=R_+y<N$l4gb!qSySl1RC;1_6;HIx0@B?$Cvbp(ANxFAG
z`aWhex6{1AgCSYWE`Z+0!evGG?WW8FN}c~e*B}~ICQV1U=Mm%z|5VQbhPUi8JzMuT
z?``6L^IhoAAQ6RcUFxMCWNpE|yU##|WS$x=M69NQ5cKk32EPkdc^~c+OYyrg=3V0F
zm|8f_6@4Z<q+mpP-#(*H=Lyts*O?pP_2x1Yz->k%a?`o9jIP5IL$c8r49B*wWp5?u
z`&oPhch*DOWtVbF;m1$fcWZz#6Nql!CScJ0o50FKacZgF+Oy@|(H2C7EOc<0@1=_7
zsSr6Cg18F9>Ir~qU>I?<1LO2Q5sbMFWq&t&$y1++NMzt<{-72JU8;x+CTfO168Ru#
zxCkf0@e6)5TqB$1C4Y7vRP!+lB0EZiLg5PMB)^80UCZCasi}Jn>I(?P`W1AG<9TLG
zdyemT_B_xJCm<a1_a>%LD-}1SJx$adw|b>h+gm~rvvjj?_<Qo55mAobP5BL<BE+?r
z6`%X>hxP(+35_G(mQU{xZ;rk$wT@9b(pPFnkY?6$+?htyz6B2Mp}`V4#m~P#9c$32
z9dGZ6*z>+H!O5KEU4AZ_y8oUrP^3y$C_0jhDRWfc|Etu}X7F2$Qua}(GQqYW$5)v)
zNVS!Gwwgpp9}6CBd>RUo0qye1?<a>)My_ZqPPAg+7`GZtQhK&hY$nIi%H~W%YoEyU
zCjJvp5iYkA`>UA`8=ZeIk|)J0igIiw(;bbIh<waz6vx;PhC@HTR7Ctt*!4aZI5_j0
z<Uck?TcR9N)BQgu9Ku?Xi5uX0Fj^iEUJAN%o)k-)6>uDmQxscDt9CvQ1{S=zA{A}Z
z2vV<kYYYWo90~o&@ncc$$P+q6h|VT*$?!Ky<p1c&BNCa_{;TUo-Fj#by;ot-0X$b<
zj0P24SGLe=18K=b9zM+ZWh)RK7zRoHxwZK_(hSIptad26<}u~()RHGn8Y)5QJv;lT
z>M{Kk&X16qQDjlVS@d^Nwv}067&%AeIdoC6dJc;LcT?}tYju@VXZK9a?)LRk{KbtW
ze$DJ_qV@uM*WXk!_?%F9)(icW$)aS5sqkHcIVSa8IqB+tQX0MJ&%3TNVjo&<#Y|om
zIs!VqpTZvh>aSbSxMAy#UkARmRsD3IK9cv{6y&?td7Bip{0j*F0wq+VQb_KtO^HI#
zUqXWFxA@k)1%eC|>^c&BF<^+hk*5YxBKe!~PF-$B0Br%)u|1iXH-EE}JtHczN0ee=
z*WE`}YKpiXK<$?{zuesDAB+w(ZK7^=Ptz{+Rn`4Ql6?shj1`|4+~%*XbzReM;IyVN
zH*#`m+psW~(ao5Ov@{=)PugY6t;&Yl18l;KTX;J(6TzBUwOo4&MO%?5Bqsp3tF~x?
zB%|C<bq{KkF{hLDm1@&2{C86~$`#R?{m5c41Ar!bj^avbhFv7WVwnTE51%f}`m%_e
zH7pmNcoHy7Ajda-Ci1(zk#a`Y^J{;(CLYs(W%ttqMwu<u@va_EMswaK_vPj)mX@-m
zL$S=f2D4V4q@o`MscbfNg6R;?^zvF0ZiKSYVT6)7_92hmJgifqd|0NLc87Td^kff>
zCscl`-^VoD_Zg}a*@zNbZNer%KaLqeJ*Z<(reDV_7LJd$q7oH#Rxfor<4cKg*5OCY
zuVj=$ZA~%m7(||M?v^X4*-A*PDzn3|d%t}ZOv_h*ga;<uP(kUt@?`=$g_wppTjygN
zVjO#(j~tQkXkq2NTLMiO(8q4br6DR$*by0}E~`%qyEU(w*h?09_!(;kum*b;D4E5>
zC0e#F9qCxXP}FS_`^1S^7Gq9JM^LA3{I4J$#5ygPzgof!{cg(QBi&z01K9dgOV%Q{
z+Z1*pcr(5A@6*y^v1Q-|fVNs}+7BidJ9|&gL$NVgkblp^62~_{_66u{UN0#@a3|#R
z)#1NCK95vyP`i#EZ`dyP2MOxr^oh9j2T~-3U4*0M1HrMI)n{~~WxiR<!JUhq3-R`w
z3)fH<CA<xFbvt}<dU(90y-pBxp2!3fN<h6m3tYxp5Ip=#{Q$ytHYg^wP>Gh9{BR9J
zdNDEqyz4sV9(98~fH(Gl>P}62bo4PGA`rT?F=~74L#s52zLQ5k0i?GI?GW}M^_3!T
z2dvv<)bcg)#N|nFw}Xk+>}NtG)w_bedfV$-@!DmQF;e6zH9uZm^x&^TB<HT^UwSQK
z7VsQiFzgw`6G$S6=SSLxWmSjceaLxLIsL-!?Oc79%u&IaLf^|jTC<hRU$y^v841|;
z^71?W#cM?=<AVAbnkXW>P;p77I1YtF24|AdNpts^Dbm3NDEFG*I??eryAcVzs1(>F
zj@BlsAQM>%1pU$Ig(6~;4thy^Ga?Ay9`Ri%?atv~`LowN<Z0H(^3C}JRq?wkkCBg_
z{{V}nP_!>5JuQJEj*=m*jp(0do<~$|TGOsC-lM4@SNJYZo+k627XZJq)arPnCdsPS
z+oi^PR8|<wj&Wo|PWn<xWo7hXI=0=o4P%8%EpjXy3Bk`?ShfZweQo+9uXn^4cE0Pu
z;Rh(r=|EE~!wR(*=hWzCqBLC<yUDVjGsC~KWZZGuiEWZwXEaYO_FoEXjYx-O`@;l4
z74wewL)%WS6y1qq;R?u{Qkr)FC9n93xlxjzTh-AOEXNpcI0oHf`Iy|Qo(SGv;d>F}
zq%2x=9Uovf#UF2yjr!OtP{p`eVCchKRv}OlZ?p^-ck-rsK@9LSa<S%&i!k!aGeCk+
zxjkZnbpGOjNKF%R*t}DwFo1=UC2CSkdR^obAs4|4?5$i1NA3gR=&^cGlZ^<~UccNi
zG<B*sx!!%XWIH<i`f&Ot&yL$K611ufCJHRDTk3Z0iJ??6M7XcO$hS05Uh&v8{AQv-
zWq*NA-U-rthk4&Yc(Wgi6jtGFrFi((o#=~kCcNnSNh~*rU?j$hQRlUlnej^E1!K_}
zhJcJhJ<`<w-*j|r!p-`6xXs@nc<S`70N!L$d&|B1TZo-(xLiv_*_I;KSuv84GPD0#
z*@X$W)MqS=?8eM%>+jS93qaC&BibCXMXINScpAe2iEC^M)g7nP7`_$}$`KXguf3f`
z1+JP^`g{F*((DJH(pa;HT;uM7kS!|C!ik*!q{pxSnik?ww0;yAm`do`P!{`{#YTky
zlA|AD2yj)Z$)AhxbW0!O)sfaBvo*J&=dfBS5p(a;rc~^Wf4^D;gkhI%+&toUYX~(|
zi|nY_WB&1b<|Q|`*lvjRn^;d2+SlVO^r()LW6i|uI;3-5%}tjO)PS#iezb~XVim@|
z^yv_vj7z=~3KlDT3MFKG^=2aNQIMdFh0Wokh{)Xh>f88~pl5LP=lJ@3k>76vYUL)R
zjut0nhIkuSo)tTtSaYL`{1Bk)slC@E|HTU<`Sx-8IVq|Q<=2shd!2Mm*-BldXq5AA
z=v1{{iPG}gOd1NagrK_6=En!Oj|V(%ZY{%8sj=Fkd4Q_-x_f3EE=CpewzR1xb!A3h
zupa-b>)%XoLVwef<l?vG=ytcek!lP~JUbiRC~h@*kz2VDFDU$G)lmcga&fBED^mWW
zQ%45IPWPj1j{lhIz1s<S?s0jYaD$6}(tTBOjS|fg$G?Fz;Y|`%9>By!h?Hm-U@L8X
qJbFNJ<mJVd`FKYy&W8B#xJS;v&WBgU5KNPw6-a&CrS6^W|Nj70)^t?>

literal 0
HcmV?d00001

diff --git a/doc/log-forward.d/notification.avif b/doc/log-forward.d/notification.avif
deleted file mode 100644
index a0f9ab339175ae768e1e791bd701a2a91dd5bc57..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 6178
zcmXv|1ymGl(_K;;0cq)$7Le}l5|Hj#U}5QQSU^g;yOwUGlm-Ejkglb>yZQ0`&o|F`
zX71d3&&&V-07@%YFR-aQ&<gMx|0)P*#R&qMS}BWjioa6lAWK)%f7)v>+E~~-|33r(
zz(8}?|KWet9%%NzF<4-rE9gHB?lqGG?H$ekby5HT-0S<70dOP$03pgNW&{Eq{@eYZ
zLh{;J!v8bBdQ9CpI3*qJ9sgTt3j{lZUwK6!*xd28z5}{|E&mw-0Qi4~sn`D&4D<y4
zV-QeK{>{cPb?1}}qI^XF0G_#{y|aV4z31y>OaOA=D@6zdgG~Qvukm^qA{=}O;w$?W
zWMS%x3qV8VquU|-^!DvI@Z&A3k_G&tLjf>zzVJ(i$fBqKO)m7aT&DcX{o7`V$mMh5
zwOS%()$J1dmnSs$rsO*cN?oB`SX&paT$7)9J8Q7?In_tFsTGRvrZCx|tbAUI?Z|r=
zf`jY*&-5ZJwXX+-^)z-%;Fhvkh}8F6&KOX5%!Xb{G?u!gz!)ta!#M=@=cK$owet);
zM*q<iZwEew%=BR%Hnkg@s=b>qheVmx3=cV#bwYeY|4n;jB*q8oL(8nXM6z^8+x0bd
zIz}7437F+s0KXu!JN0~-2_ZOA3pPQ7gIfw5UDAtkOg$3i;sh27c4>IKXq0{xaof;s
zG%1?nz&6!ONnK9}#!M+MlUj5>8zUnR!!%f&Y=S_)QCH8Rj++#-3#*#3nkCC-^LS;)
z%dM${Fj_m+d0(iAl`U)*f;$5k9k^0cP~sl0?Wo_{Uu3v_KMYi;Pz}ZvxMq|k<1E|O
z#2<~qiU_^u`vEnJ_-dnRY>UF(jz7*+hpP2^V1I_`+00ELe}+x(Y_k{P4YR{M(FaQl
z4D2FTJDV{1w4lYiA7_}B&$V{h7e+3#a;=Ku4l$<1#ba5@QJFy}&-%iMe=EPPZ=wT1
z)(n_-oC5VXW%IZPwQ)Nlw8=?C>e*2A$V)E1gq@Z4hPIYdfVKG>W`yVl*OG!%4d)r}
zMcj{L1_}rX4(Jj;{<_7!?}D5Ye>JKPIRIW>Dj1K8N7r1tWz1{JZ8?ABV_&HN+oc$*
z@H~S`Yf`(1#3Wd<xUP26abSFpesSWLIg$iH;%@7))=Xipz4tSrw8hzizYL>s%g|MB
zut}Hl;abE5Oi&xeG_~&xwNwsBOCgnti$8+qT_1Tv6zt(0icvdTR$K`68v52)EWhEt
zYqYpSv<}78NuNvKYq2A{d?c^Q;xV_8Xla&Ti)z+Bo>Sr9|D)6n73R6$*~n`9&`k?0
zQoEoYxgnF9t3h7Vps>i(zV=4Ym}q+t&PIoB2#<3#mOBA)G^Cy{Ln(`?9f|KkZO^=<
zDqG6#L}woAwUGK_I82|jl%0EM*xzxj2Gi&t6#Ou}=5gOnS9oI&9u4=Dx~vgdqnvAo
zR!49?GV^iX@<>I}60>DN9uB!@6n<=yd!cOFe39e9am*x>TCBBY`Iy9wsG)n6`oJ<R
zXIHWV*wLU!F<F%B&0Oegggesgg-c10@M$r+wCz?9l*!X9mQ=#ZA0ECMfsi|pGA6)4
zr>95-zM96JZ(})fkay^?Bp*cr4+i_Px^vx)1+tt=@MG88yxdz{a+P3_YFeq>54W^q
ze>=8fd4^Lc@q>A$ZxSHKfDuRaxTc>e0P7)^-o74IY4H!t$az)nBH8mC9&yDIgTXQd
zD~bdA_yoO5W+cCM^^FQSps+6ja!nQwzgMxZbgrrIF?D}Feb6An>zt*1Bzarm-(KsZ
zDA+{t*-Qw5)rmE>osLQZAAFt4bq2x9^9LlLGT8I06MSVE2VXpe^+QGFjWZ%HF`4#m
zTFNgxv%W-&#8y&!1v9zYlqqnR^EZCVPV?jKw9<6qI^!YzgrUGIo5q80GMsE%&!K{$
zmKsVwuxK$EfCdNk>7pY9IRAD~Nehe8t$ASnM!t@^6P}JH=w)u~a3J+tYWcYq+4vi*
zD)6&ya6J86&YGna82K<l=j$l}8co~l-?@`Rv`Z5a+@0urAFOgERWYv<5u!k>;9C{0
z4*zh5V)Ps)1psb{`2jeQ6aI6nXP`HM(?^UklUs_pV-r&E@u<L{sO2S({6C-@%^85{
zThgh?w&WJ>tRnaV!Y@Y}R%>ZHDt0{^{()^m`BfU2$||>7{M~OVxIN%>DXIg6ym&hM
zwzd%%x|#bYV^j<0OaxyHus%(;?jPW&^454t&-L96d`KDvrrqGs9#C1-A4||mNOHY1
zdvh+FnumF0|Fqr2K&}XVqjBk!1A#IOsAx}h@W_zC?w+ACg+ny`eD#K&(Mc3@OkMqA
zxqKgKU%>D0g&<{ZiO>YM;yvP&iM*XP)%`EsaQL}<*$U!{HE+n5U7jKmMi>Fj&WUZy
zz$;MLfH14fg4{($HI4x&hwdBtk`~XYxmy2*PpzC$a%(&y{@VL6)n!WLBkuKjnW2Xs
z+`wPV@)w3}UYI!Ayt@YbMx3aU<ZGyCS9IvSxU6&*GjBj*KDdz&d)3pzE!oD8!1I^Y
zQkjy=?|A6-h^IB%NFzTA*d|b{nRq?P=$muP;gL!QY>tM@9&uk7TIcm_OJi;1<SIy$
z?lx=GI=WN)8E}6VJ%HCP!Xh|K&qyCu6kMz9X%-@+84WD6Tjjc|RppO%>Rf>3<i#{o
zjAv}&Mc7RB$pj7v{VPu}zteYh$sE~p@An5cNqQ+~?XKDtZzO0Dkkzq9MSm6ObeH^Q
z7kpcd-&`5@yxtS=_<piM3YL;Y0L@Ug{>ULUR_7$o7F2Yv7$JYS@V0_)MEB9<GgJ~I
zu<JTZTix7#zgTwdtU<&;)q>~U;>Gqeo+nXwB^oce6@yO$1O6_5%CTy!3f^a41#Rn<
za1S(^+~WAO6Of>%hMr-F&AG-+>|Y=4y6&;yizabv)=+7x{<^UKyS$v0i#eo|m-JrY
z=o7H55H47;JR_z}1Dj7i!3WG{st$vjHQUF4=QW62SDR81-QixKZct&~``I&G{5F@K
zhU6ZQLpk$wF}nVUcyrA~zc=1h60;OMB@1m#l`#@-lIP5AAN@mH2mdHZ2wB{yVBqyK
zGLk7HZ^Yr|#KK>jBXS}YouX^(h-jiK2g`kHCb!am8IZD#D5~p~koqnyFx8=(Wi^be
z*Mj7jM*aY*^H|ibe)C(w4DKaYH`hci!pl{9Iz?kQPx|8f%PQ<<uvJMeY^mJSmN$`T
zHANHNqWOx5Z3S$~XLuEG;S^1=)KaguDY%*EImqha{+7tsd|arjxC7&aaH~(U^_$~t
z?MBCyv~o?|i6Ol`G6TAxQvf8K)F1a+AQj$y!#i!#nc4UKP!fs<OBfoqRoxSDI@qTw
z7v%R5b7yLP<6E(tjU&_`-Fj4D-$~6uM4upmS7JXaoczV?MJ-zjU1GRxfZlVxm0}xO
z8%p6#Y><Zayo1(b@w6;Ml6+`l@FtNSX+L8wh+t=xM06h`V^IrR)@-+!63(+yU)Ngh
zKx2qB_OT{b(*Ni8>y?Fq4~X%wNZB-uPUOvn9A(r4Udt%isF?`1Jsm?7LSaN1g}jd)
zTM}$L^pU3zPm>7oxkDvP7uO?aKiHs#im}~n+J>0A@O0#4(M5h`Q?m0rQ>w%e!INgR
z0hNMQmq1l^K)-cxQJ<9(@)vCo`=*cS#7SFLvT+uZRl>4lNF?8!#sUlOP_)>ow?qsC
z<Lw-dE&J^r@%q64!I^J$o>txz)tv2yG8iokmEXX8iz(b9y;-VC-Y9#}BT!gT3na~>
zBa^hld#kQ?hewWhkCY>Z4A5in7iE*C6#FgoTbtX<R;EY^<`&&guHcfy!D5~u|4T9L
zG;RXU!bE41AI)Hr!dXzd!$$h&*S60qPK1v<7~-AN4tiDd&HKGZN%;<ll?~xc_DOEn
z8A%%u3EeT8i&Kgv+TA&jO#O9j6orjdDZCPyf}cU<$8(J{Rq338nou$bg9f9XfQ<Xb
z-)~ZOzFizC>(Pwm=5W_>260a|)>H$$O!&S#ex;$9l$U=!89aIB?qvRO#2TwqCD<#G
zlr*F;9AnIcBzTyuc%%r}+AY>JCD}jpbO+3xou}Ji|61SXRh<4l_xu3^9@RI0!Py|q
zW>9NL-VJu)IT}$z$CjEqH&T1$Qi0r5x!>eL*l_-HCK584Hm^PP>1acu<yZN^x!OB+
zDnon$(vJj*sdjP={7Ay_@0t7=G5hs2x2QQRDDcmG!6-14?Y~5;s98$e$4&ucRTN60
zq6a^$mM$w6ZwXMED|Sp490i|`eXYxPFoP<A*W{;=mHvll$kyOMH{WLz(DcMt2iYsz
z!Gb#gF{Kt^x+ANwLqWY9^6|TR-x`Dq_2wrnKl#q>iPMg}q-K|0>J!gv&&kS8_A#Us
z|51FRCHT>NHnHasB5BM%Qe$H7gQ{A8HfPaCt+B30IaG;9QKTqEhulXwCoT4-xZSoE
z^~18PnZ)tAv~Q%EsU2@5a8m!E(sEYXobrNIfmrX;B4%UhB&Cu@lI-3UhSk0YwT?E4
z5KhncWAU3pY@3Y!Nbilyo2rXYyFQVwb76>NU;549fR2PuVSL60s5%dA<Qgg3?;i6`
zW#ctUT;^8^4sg*Jf)*(9e&5hR7dI1$#d!(PVY77k9ktTZi^db@4NDzz{`c~z0uOzT
zT*N^GjBac~PlbZHCx&Y>=V+xORc4>bN$#6m@_#i;PpRrR|H(3#VE^+Lm7S9s?qbd4
z+-P)W(#+z4EXTLfm44nC30<i$crRtXxpJNMlEaJ81aY*x$qQR$HMs|RVT>fPHov%^
z0_isS&{`*=!`Tsw*xiJkD*K59HqxDZu+QZ8bOnb^(5Ni=;rW;fq0Onnz7Jy+Z@a~A
z!Sr&<VUrYBFZq{kwX4s9Fqa!oZOPY0kXcGsi*Fb2MolZ7u3PW1g?|bT?dFR-A8L=E
zhhc{qX-4L!vZRE9b$Apat%6Jyvtnv(4}Pp_ge)i+t9X&YMQaAkaR2+EBP^R)_Lp|R
zbiHB$kN+8_P$ZE|353naufePq?T?<puAt0=0_{nAYv$UQ9`iMnZs~S})&@llpHIno
z;x1&SwY?2?B6H*AuHPbbX6NJI%iHLNI>jFH{aOADA@dxGtFzeY)$JCb73M-Gj>~+%
z+YZC^wq?i)K|LndyJ{nsw()u_M8Xgjac15U%Kk}LupI%&Ho+Ad(Yf^`i@hzlz#HAM
zI{x%D0rS1T7+~-r&`4hK5<W)%e7yNht<R?&@rumC3&S-jCm2pF09N;<%I|xx(iR7&
z(0dh#!zfnw4@*r*Z4fi04N}d;NhjoGX=#A0lce7mzc!2;B6b*|o~Qq?5Es#$e*yq7
zI16Fy^H`z}PM!oRvm!VLe6A7KH9H(XHvh;z;}?5Dm;`K<H;K!~mYv6WM-&RCyJM*;
zXSC=cK!c|W2L>CM@!uZPAY>%UZL-X6#nC?YmzT~lYp^)BL~oDpXSRsewOy?jUv)b9
zO=VqWicD#3;0;^q&W8CW&QrkEr39k<z-<<z;~V}phW+x=MC7+yZRMvXn=TcT@=aNm
zQ)OkfUCMkJ6L8A7-06aPl&H%dWtL%ldva8tz%wOjZUi^>^HB+@yoc5+hkbd^;_ych
zmF2pOcZ$1_uF%DW6N$v(+04vSsY_3TCIRA)pmMMc9h`V1uB@F5zsKi*s=}oPR>S6X
z+2?e}nh2D={nW2pFKHRa!;^_GI-SWUBw6dFz4aU0Thb6$*JBtJ10&7hY6!l%I>R=N
zG6OT)EUH=(0oC-MV}n-0(_xER1EnR>5gH2aNLY8+0D_ZjEh-s&I(;@&Ft##~ityq6
zbQL<$pt?7iw2xpm4r7E*-1o@|a~cQ>hi`06AwUPNWUIWtN0>$$8oY?gFPPkts<_zK
z*esXO+@P6Fge^miXt2m1+;c1@>DK3SM@H?#dN>f)?hRXU<O=U%3suN|%(D5d<5%6o
z4K>cVF9kQZW+s!Dhv0mWR%j=h0~d>N6WL*xsa40iQ#2QaYb4QzEiHBk5gzS3yApc}
zOdFYf<t5gx8wcQiz^q_c2=%ew6^F=AC5-8z1&FMWFH`b)d)`^p!DR~sa7PBowwivw
zX{~l#z_H5+adII$#Psg=h7Qr>4*M-{5s6sF-p5J29MMho>f|X$o%_@)#sX43x^aFD
z7NYM<`8e(Cjdd`1@qZqDb84;MUQF9#$UYOzVV5cjuX2EK3Ao@y@Jpue4$H&kbzjqw
zs^LKudvbT9G0<z<(}7#4c2!svUTfn01(N=`oMOKoocyw*5p5pFvY4?Kd6Q&u-FG|b
zC`xQAz{qELor_War-q`*(Lic3fhh2!Gayook2BqAdEnUD{KlwwIX@(fihckQGxt!H
zWNVX`>%{k&cc2`FI#Ckep@)4FPiLL<Y-!@rg~$IGi9ygq)=0*&%Zcto;k7g8&(N$Q
zSAKaEL?aA}G*&tXyY%&kzJPh5DLB^w)9|!ZFMd69)UX{;7wu@f`DVP4bpS(l9!pO5
z<!)mY(sFIh`Alr>=_dOu<tMESxsl`$Jc>`Ff1P>U=KIm}T74BXcr#3rU>7(FnW~Z%
z`$lnezQG((?)R$XJ!fAqe=DOj(`MpkDJjVmyrWkP>!5#GtEkrw0b9~9?Ti|CbBXv(
zG8;xjf!s(}_X9{U0}V3ajYtW4NQMS)Iu8@`^1bV)=(5&tB$0-kgw<jW7p`I1&39y`
zdHBX+FVAyYgta_(ns|Z4<)yp7MCkA9KJPN_#rEO#QCKrC`i@iannar!)~g3q7Zz^@
zUsPZ*msk$0Y2`@TG#X{$jp&=&I`*p@OcX8ouQ^hw?jP$u2gz*Tcn^7!M4$X%n7IbD
z{C#=69&A4G*<`5T0Xg<>gkK3u)Y-@~?jV`G6DnBK{vts%;-g=-_dYx`0;c(rnz&s{
zKv^oU^~7k((EZ*al%>YUI49<fgSED12U8=e;-XW=tot6?BG3xLhbI7ia$}~~VXPvs
zuF*E;`Gla)3H^jMfy8D(AW=m0h8CC#ZG1vG)3G15<Nmr5Pk=H2kLS+PRfNB?ik!wt
zJJe5_@z~u|Yu%B+-dfE8b?oWYzo6mNoqT>-fq9b+rBQdF{jK?xA6MuM<z^AZP>G7s
zr-LfN&pS~&z~6~js_u`6ypW&H0Mf#BLua>!Lj1mW4tD!F3}vCv)SwFZPHxvKvUU4T
zlvrGI<&)49bc?jy^sJ5!G4>}zQBEWaL)r2i?-s82%o4VoRT2IkQz#VQZevfx@#@(*
z!;Npu+pse|jt|!-pg9cv9c=bHuMI#}UJTk3bN7D;67tk{K`f$X#~qCiF`>1XlCTEA
z<VgkwN{Ji3r=r8eQKMUZM~-+vWxZZF>xaCqgh)@7I9r!UAW=Lptn#JvzOGSHR=Tf|
z`l~`$ROadPacCw{Pd~{nPt)xA7N*2Fib@ZBEJ4Q~KjB3R3iHJkq5~%@V=`9kqZk`y
zkkJR6z#XZ`59SKZ%s?|EYRTWz7qqJa#x~2LARy)?4+k@q;j{Qh4j*SjZEpP^t|he(
zVfFZOH2Z|})1F9@`lBd%6rczm^xpWi=rPnt_!b;j){)yA%@U6;LC^hTHr{2wSyTx*
zwh0}~<O`IAgf(Dn2-AU;Xb2vi{^9R^2(I5KK}EWJa;kK0nu`=7CyzE+-L!n>2Et$S
z4;ieX31wf0a(*wK9{ERp|1yNyzMOhpYQ_S8M4a=06*F9PG9($%)ePGGnQD@(wnF%;
zJ|=^d@S@RnkS)MVy>LeQJ{~n>{9~iQBc%Q$HYgetT4QqYJXXalEYxJVK+k?9tt&7n
zaJ2!M?>8z_9-0e5fO9-SmW<s*O~OQaB1*y{nYWxZC0{WmjDN=6t5{cs_B2$#No8hQ
z^N+Al!$9NaCtJfJoh5K$`tD&tSr;E?1vhf6el#RFA>q{A*3^^Ig-OM*Isfi`2i6Rw
zM={X*9iJ`RCLIyJ41xEhQ=TB-oussS)auANK_($zM3h}JYaUX5Ouhe*qcmF^=@wIz
z5(=ha$lSvZH?G^P<!^?Zn3jqpB#k;cYZnL1V@QaO^&6?v#+*M@0vMSLrx&^4xF53}
i-EGVCJ@T8wf<`eO+fFDCe0t!M;XbKHurz8Z%KRUE3Z!WO

diff --git a/doc/log-forward.md b/doc/log-forward.md
index f6086c85..d5a2f137 100644
--- a/doc/log-forward.md
+++ b/doc/log-forward.md
@@ -35,9 +35,10 @@ The script works around the limitations, for example it does:
 It is intended to be run periodically from scheduler, then collects new
 log messages and forwards them via notification.
 
-### Sample notification
+### Sample notifications
 
-![log-forward notification](log-forward.d/notification.avif)
+![log-forward notification info](log-forward.d/notification-01-info.avif)  
+![log-forward notification warn](log-forward.d/notification-02-warn.avif)
 
 Requirements and installation
 -----------------------------

From 2d0c79160da60c55578be0dc796dcfa85e178ff3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:40:48 +0100
Subject: [PATCH 959/988] doc/netwatch-notify: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/netwatch-notify.d/notification-01-down.avif
----- >8 -----
[rsc] ❌️ Netwatch Notify: ipv6.eworm.de down

The host 'ipv6.eworm.de' (2a01:4f8:222:1e83::80, ipv6.eworm.de) is down since 2025-11-18 11:33:18.
----- >8 -----

doc/netwatch-notify.d/notification-02-up.avif
----- >8 -----
[rsc] ✅️ Netwatch Notify: ipv6.eworm.de up

The host 'ipv6.eworm.de' (2a01:4f8:222:1e83::80, ipv6.eworm.de) is up since 2025-11-18 11:43:15.
It was down for 10 checks since 2025-11-18 11:33:18.
----- >8 -----
---
 .../notification-01-down.avif                 | Bin 4193 -> 5126 bytes
 doc/netwatch-notify.d/notification-02-up.avif | Bin 4744 -> 6057 bytes
 2 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/netwatch-notify.d/notification-01-down.avif b/doc/netwatch-notify.d/notification-01-down.avif
index 894fb23ff4c3fa227e797d8ec03801bb59a61bd2..2257a0d3de2d384348884cb48fd8bf753c892e6a 100644
GIT binary patch
delta 4936
zcmV-O6SwT)AciQABMs|qWprTx00000001G8FdUInC<PM$021?&fJ*^+k<3Vc68mjr
zVRRAz3I;eOrymRwGUg>rWCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_liS;bm
zjgh$sSm1y|W}5b>3FE4XquaMJN~hUM-RsTgl23XysMN1x<Vv_Lf6(ysMO&2Q6e3Z&
z$0)8Jp^0pQs4^0BmWOi+a(PI9l>%1~@FK54U3U#%NvTj$M_1kGUoP~Q_m0*k@*dP`
z0vKQqUx>aPAs#E7!9td0pWFlUsN-dlqdh}K2SoKoEdOcac)^i&DDiDUXBUw(*LO5M
z_uWgKpQsgU?0JQzT)qiV;CI=r@A4bBl`ej5q7XU$OW938GYYm9A{GpPU%X5Aq6$0K
zZQl!5=~2QO8TgA#{g5EWuuNXxCZF4ct~;z#>o=AF-n^$`vb|`;3Kmnaz95xFnBSad
z(uA3^)(gj`^$Je8?kAe=H!Qw|Xuz3Dr#xK5{XWr$GPST?Zze8tFte*MBNK6|pHP04
z@+not7goGtOeW99h16GntNM4cG-E(XHz3A=*E^L7cGsc-24yNr`^)OlEhtHC#8{Uj
z!^tvC0j6PT2zkRI&^!c3dz1)f@u3kMEZ)X}L#DtM>a3cawY4>4wsO>?he#{Yw5B+|
z9zomJUBmnV85Dw3*t!(iTD;%x?CtjuofU|fvW;3PinF4bM`s9sRWE^0n8G{)jWvUF
zq?M(A^PVprOrz&lUF%s-_eEwiw)`{^VXSyW7scrYbz+Dm&7*w2Dkrn66P5Fh>ZqjJ
zq`Kv)s+XxVdr}HP8S-;BZb~i55g0S4f$M0F9PomqlxP6BFhL_6o{|S~l7DugZOK9R
zg_G1|er}7NYH6c?%Nvll#HSV=92l1cBq5C;)_~%imUxP`GqE<9Dj3%U)Jc8aFre(V
zp2tR%<FaDI$Eunno+&tz*}OV=WXLL$=|OkVt>CDtn%ailP&pj^89A=GptDskaR>Ib
zNKBtWCz-ry=!sQm4%opl&I0qJO8q4oGI{8WK*c{3BGcV}T8N38*yG9R7RvmpI3V(y
zUN)NXhwp%hEobfx1+mh#qx(Jo&B(f8q>Me;Xx<6QWO}iFH@GDCs85fMy0YZY?zOeV
zfiQiDXR)m*pqO~lN3Jpv1|EPwK@X=RNt4feMSc)T@?=s*JkI{#T6Zdp6`SX9up)Hq
zC?K`=Scdn190Wc13Xp-c7r4M>+SHZPf*jy`bHw2rxEgsBWAM&A({@4}o1otmzg?x;
zs2n)n{4;FnV)%7=O6UcjFbP7}N*;)Jd+5PmkD(fPQ2*`}EpIR_8a1hFSF93b(-OG*
zN64Wevs$}pf;)D}w;XP5^51idz$LMO=2B<&!yavaDGghz1B{wsj>$A6lWw6Jj-{qB
zu6yh|V%I+WNaQ2Ln@kr{wZ2D*Mup7I3WzcxGy|P6_A{6&WS+GF(zkG#=q_P7VMJw}
zzcPug@CY=yxt$Z}5U@AvECG2QaAOr#D*T0V<KJ4fv&B>zPu^s33My+d!%P1ydb&FW
zw`y8{PxS_Z>~nj-I4i9Pt3|MI2X{|cFu!hKW%!K%d@*Qen-#Zd3n(8(q{T74RkTnM
zkvMLAj3Ga(81}_Y)DiiLGy!QCqfWzQM4n{Im5=()rEa5!5=u(;kK?dG@EBSM|6K2x
zuc=OBg%wg)zGuP@TRhPg@s!QAchC~+fof8J`vo3mFOI?C{{Y+;ditFwx}8sGUe-0)
z{vi;qMrzGvbN*_J@)`0Mm9I)=nLDv~JvDlLSx0e*gV-5d4asyMe{mQdo+yb$f9-QC
z(=sj2#RtzD^ezdFcg{Q2O_*=&+}#&22DY&r(h^4lPP2kyVNm;2^h~g`+a=UmoAp3{
zHT<Jmab2Ng3Si-#f4B8tg<{O|(k!>_bfKrU6^xtHyYl-vl=ZrZEHnFgAWAwV5S9C?
z-e|+qIfz>UXvQ;yRg4lG<xdYXod1>RS^1KSsO{bFVb+?818V;9Oo>z!^(?B0LZ&5f
zd2`H@d^F9bcjDejx~ts|VGQjEG7+zTruG*K7A9Q^3!P)jBppGg!h@l%M-V$+WIUQV
z#v1lWx{(l><PQobwK(&=4v^0WSUP_$kntQw@+o^e=s(29v`EWh5y9kv6ylg30?;X%
z9!_-@WckivG0uTaMaINkfE*?+I;%zL4T{Fu!2m}}7KUt?OLyw6ie0v`1O)GY@>MUF
z^pQ>`SxlaCD1u#Ux=urlU{yb+ks9qmJswk%wMx$o*0GPHzX00ty<xn3cbRTygSPtu
zpP6pV`-i$I8QqK9=Ax2dq}+#!pT393c37ZDO!6NVyM%qh@R5Be*u9B84(ZZb^Z!+y
z&M(Bum(uY4JJ+?ix!p6u!gM@;g`J5DLa~hA7msI1ND`UPgo`#UMXddu!!fMfAR+M6
znw;cmck(h%NxGXFb<svSenQgZ>1S+!8_12xMylPry{*x%V1k)VynbaxtYDp}e|Tr$
z*A)rVJtn=~knhj)Yl5J1V-7di-YF^DGgpkGF%o_W;~=AlCuTLNOd9ilR`=mb-Cql3
zGH;NXPF1(lG7kkYWR-+!(Rk!0X-)@|1rzk?wNJ;Q?Gbg65<Q$aZ_nGg@pYv~{^8lF
zC;!e}QZo@0Bf3JLC?RdG5y(`-M;Q)%%v_Io^-yLWWOdeMnU<L(mI_uYxuOM_M|zBZ
zLeYkTXryz1q>v|)Uia~TO974J9zBb&0@F|O2U%;}Cp(WKf;L5x*RoU`e+}smY@8sK
z;fX_4%h9y3{biCwrQL)C8X4&iT(&ZT6IaH3KsTgoIvI{^mUJ+^%l~L|LKLv|SF*4j
z>Ma)2k=eWFepu?9oVSP2T599~gz(=u9bO0}sr^sCopD*>CXbPSbBaFm!bg4VK51`q
zwDUCERQ0njLC(Y!)4$J6cqZ1BZJ+kyiiJn|L;w&fRiL7q?X`BWaEh7-kbJ(Jj*8uR
zf}b2D-mB-_y79)=y~xcAm3(`em<t3vGMs+i&;_O^CA;Do=;%Ox<Xz{5KZF~eIc2O#
zFf4q9!Ttq%8m%gS_k4NLYyMCnF!U4aRdqWv8ZnGu)2$!Y!IQS^liUXl;Ss*xxRZFm
ztU}p_I=d}WLo{PM=BrSFnSQj<Pyx6GSiaH6Jd@w0OcU2}h+~e4Nc%LN+;!QJ17~L(
z*&?EgJ?TNo2rg5?YdEj6&%q~}-8{i80K`DiZX#vy@@_wW9)@{DGBZDE#SkK@$>7zt
zvoWU}J!TGNQu$wLc#L=gq4vTp4lxn(ATx)|S|>nUgf&F*(wT6fV_!H+Pb|I3ftV-;
z0~E8($Iwotsnlza-n?#N!M{wi)8bhP?1{&pf|kWPX&gP?3Ks^xgBGy%BYv%F*RM3@
zHX*tOU+DvXvYt}<TrncR!x|tQ`zd??*7i)XSE|9lysnIrBWqOfi1O8V*tFb(^?u}X
zH1;u;#*x-b&xsif1DLaQjz{AM`%Yyf^_RoVC~WG&R+!K<X5I9r2V}B4O<WMJ>hIwC
zeY%LIy5>!KRRIO$v1iX!=)}Pp-GeKkNSW5eI`rm$7?BoP8ST^MR&s3WrHK;dN{UdI
zi3fJ~g44NrPjnYL@Vr|O!dro2ONPi9laaB1%h}9Tjwn@^mmp!#HMH$qd(`VtmOoiC
z7Gq=jfg>eOUK;6KXAuhhY~up7pZ7ttAdt%FqV|kYqcVCNAd^oOZ)uT<?zGKbkD4ha
zj>|xQk-gV-FcGrRiyt1BJXED22(O@ekDOmoCq)$xh&5~D>6G6s-j5dWg7L&HKBBj>
zenPIMXKL<rcGv(jpZd{Q)P<0~KE7ueVA72}N>3&Brfg&OThNga4u3L2t%>W;U%+Yx
zDLlm3)V|En{XtzE#Pfo$ZW0lSIPEI<tH*MGYJ2AdkwC>|Ifd;rlGyy8aD@uBT5@4w
zuc~yESXDRZmxQa*49#vhtANJmBAZTQ5?R0xrhcH_!vWkrd*B^G12TkwvD`Z-Ivm|x
z<T$Y$-*%}zEF|2MUYr#<FRL*vmW0~^$E~%q<TXMEhr1m=W#XJ)SW(=Ae1U|V0WffX
z#TPU~;@0|F#3!gO8*{pD4&4Q5n=*g!C?<S)!req)0ue41<I5>|cPz)6j7RsKj^WPD
zm1|UIVZa5iyn`~=8<j(!;FQ1pgmuA4b}PK)=83?P14%d$0jt4l487S<`@eAm?HP;*
zt$r21f^Z!Yp^oA33zeD2%RXce3Ok>FK`iR+@@@><C{&QNUEy!$guj7-$m((UEnUg_
zcnmoWwgRn+8R27wG1wzWt}T3rVah>9u$uXuzds;*+QAFWWSgDp?zRKpoJe1=9~+Sj
zAEi{fvIPTQp=`a%4;uB}Hguuz<F*%rx~p`$+sAT1iS(Ck7T#H13QtDmfQrw5E2O=w
zt^_8yA{g8k=B}!$fuCl)V`U;F5~Tq@Ssc7MrO4^Vgg;jmfzk@Vx3t33PUUwtn%J>v
z7y&ha<dNCxrH2sy^{b^|7Fnpo7J97to!h@bCIg%*rF~HwobKEg2dYF`kn?m*^``F~
z_;Bf}vH3CpikjRE!*svtJD-MsZy}xBaIHMI+!N}aem<>pge#$3yQi@0{0*l@RQJOt
z%Uf#}p1YPsu)|r!G1o3HoF1{th4)rwCNc)d2tJ+D-hYQTbozToefY+T1pX@8y+}^a
ztxp}>;*TrC{p3fK5Snx-)sb38D)@oiL%Bd^N;~=<q>jcd9Oa=F|8DPp&H1k4q4gP(
zTbJvYWiFnrz@X~?@(fFQ#;aPxR+57<ZnzAkxA^DlE2J@svQFD~(FH0=;gYNc?v06q
ziLujH%_5IuA8FG}q#;>app*Xp?6SEv3=;TG7eoZk)NGqS#}X1Y)0Ec?=y<?>cJ&xJ
z^O9&#T*%)_Xr?xiUkluS!0f407h&+R2jl6;C&s1Ki!6qvHi!<k2~mTR?9FYf>Q+n+
zLjmm8y(Qfact*f&UHSJj%6|aA;NS6l25L>uXn@QsH~UF&(?l-n-s46-w-IK4dK*u8
zR=xY-I(>)ev=e!=Q%0^CQ9`^D`dlwSC^o!+2g_1Uo4IS<5|a;qhFJ?QItNN3Z{WoM
zbC+Em!|87XQ>0`a2XDz{el?x|xLDybq|6PEIHwtdC((?x<xT6JszK3PuY5(@?|CR@
z>`Gv;%vmu?%9~2njRk)#-8&^5cJ|LEzzd{CHe|T-Wp47ZvV9^wA!_1<Xtk1Wwqn2>
zpbUQ{ho7x0tnnCsG;a?JVv=H|VI{l%cwch7Nky#4f1f<6^a;S@f+1_YqWX^&pJ=sS
zdw(Gu!)hb^cil3H<Q5+#RbiK1=$FD6`X?p95|;t@k5!8#38RU|@JP1~Ad6H>eAvSX
z0C-&Cl}ijm%!<}3FfU$wtwEqJK_mn4=m4*Be@OJ57w8XvkUBAcmcjbg%Rt|Ta(k5_
zp(gH-q1=Rw(lMw~;!YTD@Xqb)!t=Tdyw;*&wCvyFltCgy*rn7$4PEk5YLCXO-AS|2
z--*>ir3Z?A8mrIyz1K?R9WO}!2Cd1^@E|cX`vO&)A5XdgCP!%PE9|(^hUSjseP6?n
z|L?QYEo&Tq$j9J5;m;?J;sQA`9ag2CKW2FKaAC@6vOAJjDoe7mn!S54mI&=xHwqaX
zUJN#rIpf3h3>aI|xk^}>utw3I?xaU^L$yd{iwT(=B8?_r?<LjA<JNOD$v}Q@$n-1N
zs-;<8yYD5+US;z5#SQ@(Q20Zb!x!~6d(COAPl%m=l21R0hCMsx4f&r-*+yfq^ozU#
zXllZj`6SOHA8v082AtCSV=a*w_eKfxz&5Via`9A%EAcvSq|`RH`BNunEX(us&LhTf
zRJSaa5e!=tkJp2vSS-F&MM3UX7RsXDt<2x@EA`_H@FV$1>m63X`bb}p?B+z=y7#JR
z_yb*kFE@MzT8f9gF}hq#QoBwvOa%PIp>$iet3Yc+z?X~`?UkvegjKQLiKD%_R<P*u
zmZwNXsjED3oVklKB9Ir#GH$IG4bSZ@$O=KSG%R`WC3xL95C>0{h-~H)a>$<VJjMn8
zrh|2G#nUw9iWYYLX7xsjq;ALu(j7DyX_A9~V-lf-u;oDEQi>*c4V;%;bKO@2Yf?om
zaF_DJE}U~NkeZrnHz%ewiTV7bHoB~W2EliEC7kFgRP--c^6Rqziq?Fu9r9{788ku^
z4D)i6Y?=9hV-_0(ldOreA!_(Wq_ye)@M}i^H~Q3bX$C_YDfT8d#PjY%(>5zLchEF{
z{t-~UTA%g>(lzA<f4?Mf{e8hgagSSStltN{-&IJ(rzZRB%7qUfZ07$P9txb_fer!0
zC0X&#vx0-MJR!eC4N{h$eJFvjt9TJQ4z*u4zp5!jgc;1`+$T9q1!%_(2U1&)feEGU
zVZ{>C^Lhs2?yLLKA@a2@dv#<AR)&rr7|II$UI(7_X_ZRsrn2%`aRt3EujO&~F^1cK
G5eHbO28jXy

delta 3996
zcmV;N4`c9#DB&QGBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01rozc}oFg
zk;O=V4^M4mVRRAz3JEwRryOh`A)wMSw;oJn0^4q)X`9)jSeicDKRP3ys7J29OPAt>
zYC;N{>4(B%T?rPxkN@tSp;Y%h3F}lLwKkVF@vh%%>XjW<<fC$#wZ+JAk~f7u0Z}xw
zJuq0Fi5hOp4U7bV$`M_3c0_HNfG#R^;gKzW{tRPVVdHq#rK1CsP|mZ-1j+oNxAVK|
ztflY#LgQBd7)1HNrH5F4_ILF<Bc;{4B(?!Y^6ld6n#B&O%JUe7vP123WmSaDn>l2h
zn`bC2eS4*skg1krGab$WH7(e`>-T;0*ds*a&9Jket5H#6F~M@a47PFNt-qn~iUFd3
z9#L;pxIVA+)K88JMjLPxJ?`@yLYLuv7d<7*BE-uG75Vt0R4Wt|CK~9^1g+MTlE%8{
zqQK6t`mQZ7Aj9u6(PPxQle^c~{1O1{=438(kRO7vAEfEE;QY3?C3kSEA2I)t1*UJ+
z>moB!y5)FRuRQuK4R|2(Zl;++_zNn3a27}Rm6uBP$zkk*frScT{v$b+X-dGp6?8yX
zWzx)qFJpN{Tkpq)VPUCJyIz<b*;AY<Yr_2hznNRGW7DV9QLY^*ROhi93nqRO$L<&g
zf1=iaz@pCqishY7pBHaD21f308rMtE^YOCeuKKhJFro|6kh--sybK43$aukj;)io!
zER-*#vY@az`Fz48kk&lHInOQu8qiD#?R_}`iV*_yuY9ESZxN*$|F6YoR~qPOWk}#4
z04SvG^f8ju*6|+hZ%D{GOB0pgMgurHpIN|&b)BBceKK*)-esdb84(T?{`MlnQo44<
zHg(xxdNDCSW#OKPek!xE(Me!`{s!tP<U!>W=~<mfXztzYke8C!9rm`oa!BN?)(<J0
zThS0&83^47yJo=2HIhrA#VYw|c<;pvYU~BOZj-t2nq`#0l|ccvuSUL#4cluhQ*2Sj
zo$n0F`&AR2yP|SSdnLz-!P&H#TwsYqn;i^IrtZ}oHBroqddBiHROMBF!DrHfIrR(N
zaZ)Dl(QF(9RZrgqAMwC6cbx7D^g$<7Lu$Apiy9aQzV;o>J3VJ;?rl?)7ZE1Kx9PeD
z1yg<#jtHrOu-8&gAs1jC=@OrMrV9T%hNNr0g}uy{*>F9_ogAjYUT`5l+9wu;4EY1G
zv-tm~?LWu~J_>RNZg`r1sVqub_&c4}@Og9(#zT-LMx&gTK}3?fZ5w$b-t}gh`0~(q
zAl|~0WqRk0-{O>yiE`x?bDv<d%fc7g<;ELv3EloKdC<x3z_@XHYMU3>M0HabMB4SY
z6f^@wq%x4Rd*I)g-|^&mpIA{QAVF@~p+O;yXoQu_!LWn_Xt>IMM2;7On;=(f_tGYZ
zyvqwZPS%H18|Yf;Y?9^AstN!*0|cd;WXnp#jQ+aw(k(BNp>@xcqKoRSV({j35j>K|
z*eb2gV^s40waZLm2(=}R9wW4tP!s9~cS2O!HOry-WpeSM-=IZBl6^DHaw6`t6i-kG
zmz4fxEJ}6`*I4*}HvbnUqbvz<aj5RFQrBO)MD&m)NCkyyDP99*gaIa5L%;#Yff94o
zarMqUwQg4mB;L<;l9LEDV%IZ>>1jpii8=6L%qJ>5es;%86t_{qfy7&D-qz%3Vm~1(
zu246x1Y-bh6XaGugjd>f{=qGVyAEcLFp@c%%{I|-NI<iH7X9WOI;8YP!MyLAv6-?3
znqFnVl7gXm=+Z7Y^d5#KIf<kOq(9B`?kF&)xkv3ZW#bER?9y^HHh<%lMPeZ^JEIPL
zZrx_X)sGPkPC4$srG+}q+Ma{d?Et8Cl-PoU9Syt32k!~9?B*i0^PX3B_pNx;uyQb)
z#~6N+frYJq2Ok3>?0*g^$@<GNg*AwM!$lsg1JUTHYPDQoDv~mM6%@}ytJJ$n_r(Jv
z#ViK&jUu#rY5k+TCX3h0=^0G57|UN%!ZAx^uC=vz7IeBnZd)=jx|>%_UHj>JnDbV)
zycykFhCyUk=$!v0|CsmQGxngw%P84pbXj__?Hc=k^GgCmfy5mVb-A&f8r|au5WR4q
z0QDkJuJasVoF++2+GPcbERy;TWO5(=BGFD#HHyw>N!LX{yWtn7!Mu^<(O&wo^NPwk
zxw_HDGvEN!##Ja1BJA=3ZNnrFJ(}o#tPWfSH(S9qE#a}x<n~sUqr*f)(Xv~#c&D4^
zUZA0W7-7in&C4u#PXD`sbpGJvnpboLQ}{Fm=AU=6r(riDYca#N8mABVEasqpZ_PZM
z%**Rc)Z6`}c{N7?f(fk!g}3K;ycR#zr1MRs-lDVp#sU>~pFOZ_DKDc-D&3eQc?lL)
z@8-pd{d8l?qPe28Hh%2@#i{a2lOm|g6V?KMb4ng}Xp5S*e6+54#BNrM)#Q2i(Uk)q
zi8oe3{&mOCH|9&knMNYA)DYNIUkOi;uP0~1?AioRcwCtUU8q6laEDK)p=$tP+Nx}P
zjEp_o2@kj@sk1OKO16k(-B7H*(#FVED=Xp>Nb#~SWKi&uh3cx+sU^XEjW|UF*skq=
zerSFS>antYt-V<<NRs6&|MjwrO!AjF7^>sS@8cW;QHgrawM2=JsimTKIliwTQjOs_
zh*Q$pL#_evv<XEzAIY7(7d0u|iS<#Z;2oUFPHc(Osq(&Vgxc=nQefY$=djeItGzu|
zwJ-!KxKd{Z(VLgAM0Cnv<fCm#=1Kg2oN*PFgTMQpWyMblIK@=bgld&RXR3w_RpNFS
zK}6Et*WX<WJGL>9Tze9mrZrGT$@*R>n7Nm076ScjpIZA5$2@pr8-H>Wcp@mH0r;PD
z4H{Rdz}bl@Ak6@be=F}SsqE}*c<uzU&aVt>^>-`jy5JKrw6}C8n?MDm4|4>6jN##%
z65O>f50#gMBTSwFE*7p4i%pUPF^_??mZiBgOZt2sJ%YVWH`|J*0(h7gD62Kbgy_=3
za^d8@r(?GZ+x0sIO-J=fQQx&y;8UAfX#Je)=V3yXpMSzC>;B69(bS@ew@vrQD6J1k
z#QLVW)|TZNp)N`suD1yZF>Wq@W|-=i_K=@k6H8#>2HQJ$oQjwyPyf2PWR<;59xtb-
zyQ&r=f5BU#{{yMgz_sk7w-a=r2)mNIr&|1%8bkwe=VkxE8O>pzXF>IkPg(X8T{Ps!
zHi$6_-FL9c3_!L@+pM?xow5z|qp*<5RfLIy@eWQf&dGRbhiJku<5}E)f8p_tEO|N5
zI?$z13sO78jMJ#!I)hpNX>jVPvsZqtsi}IbtacoCIdSiFz=^<>`~npZ!cBoTJ{Z}E
zYYs1MIJLYDfyL4+CWh^yc_zs9Js1*6YE|Q6V_ot+#!|iZ!_$3xS119j&Im0+4F~8s
zMRmqZ(V!=ft!D*!jY8Ic@H2PL=6DpX)Ag-=z1?g4jg*XF%i`G=e6jC2o3eO7u-q8s
z5sO6wpJ(qJRyVj-;7nkMgST77kK?6bu$NXA`DHs@j%a%1ww@pt&mc~1WQFB91S*Fw
z&L?b050_9skw&nsO_d>jR?9i&?FqyQcC#b~gSESOb$kkuS>i%}da#fEJqnF$$2wM6
zR$AU;aiKBVdvF>u=Kkw=jX^gu1A%7iWmM&3ih`v70OU3?dQOkAu+4mZcG^1$N6E<k
zma7SZzt(EJbm-z5&A2Ms27PfqrW68(zwixJ=B3BQ|K~vw>ZY~Eep9-r7Rsi8@+x(u
zRW=nq;PNREO!~Ti^;apGI}X~!Dov8rq!py_^LT}GJte0Yz4B%bVRV)dq)j$OH+sSN
z@io9LDvS1C0lIIKX%!%Q-1pI<M~)wSLLTxA<x^O|6LmL?bOXqavrP(>>1<U7@}P8c
zrc`~ET3pjywu2GYX8-@u+ZK;!u1zHUMDXe_`$;Qe3%NOeXDvUQ-CaNp!aJ%OPj6Of
zP{{iBWC4^zxS;{FKY21eac|!vQrgMdsBRI%xu(D$Id`?J^%T6>3V3t6p6{+jQMdSj
z=M5q?l7)1V6^pqx`v}hEjiBBrodk>XIgI5Y#x><!d1A6Z$$-C03)fYEa^a~lfOfA-
zYcLUiwUS?dwu}0-OFldj-`*8_e0K0ZVb|h$JLEXY_T6sUS{Do)b4;B8XUHM6jA?Qv
zGv?cvX?}bUZ=8-@eR9gHn^@s)ug-wX9YB&dhSHPX9%rK1s_9=T65&khi6|;_(YCqP
z^Gq>a+-G&8_JG%l_U8v*)-!{n4qRo{nJKb6ob`8qQj3NJH^lvg9WBXsFW(WV^qHjd
zAq3x{n)_f#$cRNIV|eO*&)Vjz&UoVJRE22=v7w*-ce|yho!%|mVQ<NKX>h&%3K3m+
z`>4H=QjsQH|HSipJeE<Xo1EP??C2w76bmw=c|@9FBHqw|VbIPu>CaKs9V~EU7r-qM
zDlA8Tb%---zgKza%-)btC^RIbV2Dmf8$w_5`lNG&`RT`0NRcx#*`8?Pgw`Ck6F8R0
z&vsz+bAM_jUMyV}H#veR!vq0<4ynIf;FrRh2x_fo1m+T4W45kdp52fE_ACo0-x?If
z^W`QIDU80A>nKnA?)r39oyf;el)><U5G?6`vUR;~1aI{6Nv+i}ms<E*T76!giI+g@
zBj0W`9aEuj2NHfOD=u{`<H23N=^04e(-K5WY)l}++L2h^M}ws@26l%{`pB4%uJK6|
zo9E_OxQ<B6m@#RTZC<SdZa{JXZAp6*H!rcAGLak*6OQZMX{{&29`5k4x<0=(K&YyJ
z%?|LIVG|K>g9~>~Qyda2lNo6$u{)}AssK7m1hdR$wQ2!*fa-yUPc32x?{7Q#C7RM8
zb?c*u8h-s)4y><5ApzR7Rq%Euiz1Q-Va3OOOMK6|NgEKY#&v3Q81TZ8qyk^({@cdG
zaOfjp$s=V!KsYsNcDF@gVt4NM$&UDc9V*EJ?h2$!={vE)8&v^e<aX4e;L&%WD8g9(
z5pXK%15?7u2K?Q`N79r!0`&gckFNWFD3`w{dnsG2z>Qz_icqv<WKKss6DS$?w!H0G
z@;4x8^LHEe%*hnbBnOct<`ZZJ;ANFTN^BP#FUF(8T(TJ0?46Yzz@_Pg>W=1X$F>Mt
zC%+W>M3^Lh0aE1|ODpG2dW&0vTe2`Wh&Dl=SQ4=qvttioKVXQE%_xv<PgyJ>Ywmmy
zLWtm+)kTG{3gywdmhgN}yA0$c1!mJPcQ1IYF3)gz%S~kCk1rZ725OJ%Q3PuSKudt)
Cp2T$k

diff --git a/doc/netwatch-notify.d/notification-02-up.avif b/doc/netwatch-notify.d/notification-02-up.avif
index 9021a93b9c174db32c78586d4dc3bf0f40ef6a4f..4147cb7779a06063d8c6526fa8a6de515f0deae9 100644
GIT binary patch
delta 5874
zcmV<O77gi$C8;lvBMs|qWprTx00000001G8FdUInC<PM$02Y>!fJ*_7k<3Vc7M^Wn
zVRRAz3I;eO=NRS*GKnorWCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_liS;bm
zjgh$sR<Ubg!1WSaDNuh!;i&1`;JD!cTud}!n0C5l-8BJRa^i&jU2wL2{*F{>B{#$}
zskEz#P?g)AvHY997&OX$JGuaWdzV19`I&Bd4G6Pnq4cKonq?jCYALl2v-UkgfF&Z|
zzIc{-l&687Y}ry1ScuYVoI5O!1&^LVaePtI;5H0TdE^!xX9jBd$Cl+d&&s#ApUOoQ
zKTBs#JTFkK%TrGAny`O)(_?=IsgUWIEqOT@Z31x}C|-qH+?u}MKrT&xT4GH{68Nhb
zn=|imOHKDl%T5DM1sD_3{MINSA=SCDj$79k!5vjuCO{5ATikNDbN)tv7y#RU_t--|
znCbC(t8O$eMRZkBsv0W3_HXFJJq9G}g^3bb0@OZp@T%^PW?Q~Yi%5`rhLUMYA7ybu
zvW|I2?c6;Od4s0hyKbR>-JTfy(4zvlH&aw1y8kfE_H`TxAa<@id)t^|m+RiNtjI&m
z3W3UhZ@n_KQsik|1pBKe%+6hf<ADTp6ar1KQcVx-HAUhkE2=h9uhrETR8XRvj@vnu
zL<N;!W*uo*qj$TiW<4hKN%@sAdJ-7bgfdp4rK@6~ziZu)xqWqi^|1<~`Wiw_<ax?_
zzN-RZntAIVj1#g5A79-6X)I2t;`eJurG8yJhOwQs1X$>Av>9rTK=9zf%QahMHAD!~
zA0tA5qfNms4{mUWXnJh{4MUa|M57RHq(_F9kZ6Jdp;*4GLWusNiXLoO=7PucPms`2
z(M4F(`F59Oh$I1jwCV<~`qIBEVBePT3`1_c#xl*KtyC@VNI-)~-KGTU3T40bgSsk`
zV^MNvau!4_RpLu!gr_c(=e>!qNg)Hbwm){zuZzB}o#92h@FW#Ae4~U=a41Pg^XBm3
zaDM=$K(}25?r40fk<UZ6Lg%ZRZsJmf{UYI6n(IrS6@i6+&U)OlE-GHlbp)?)jl{rs
z0%Zg>y*P%qUNXL*T=2~KVISuhD>0J`k(m!%#GO&|=Dfm&?0Nws;kA8X#VaL6zvkmv
zC0Tw*K;sX6I}XY^_$dW?fe~3Ycq{j4X^{0O^Ue;JTtelJ00mvW$*dv^vk%-OVWkoR
z*$tiN{iCLT(n|EB6(60)rNYESk|!aM+BaIuuuW@CY#ve3lgO4R!65_Q#Uo=|7$O|n
z{n1r70>sk~kOoDX%toHM(k~300^@d@KTrq^VKaumn)^soML+F)fB2{bV9#Jr4IJUF
zrvb~x{YCg57L{~(U*unwsU`hE@iwA^epfmLdTcm<L(Q!C67MqwrmY=^IjH*VPdM7^
ztyI#xP$IeTmCv03{o2!+z65gLF%+$#9$VgZ4Nq8I8e)NajxwXXENvAehArWIwE{(0
z#;HBtLkX^R79n4Pilm~GnJ?!-sQx{#PM!C6_T`R*Wp1f!It*ziRz-z%$p$HzSDTk2
z+eLSOrCQN4zQG1>4JbVF*$kH3Au+#&`im}y=`ur|6#U^!d|03YYyB)&E9`J1kF%U-
zCl<5%^XGL%g%1QIMhMsWvEIe%JRUuqDDSm$T}fuNo`Dr07gakFz?}oWwb|&Pd!xzL
z-f=|SWrPX1%Ds2imkZ}9eQ2b)#W?$j2<`EIbLp>ZWBjgAn2dDt;>SkT8m|}DI5FJ=
z(aU}3f5~@;)uoD!SJ{Nxj@Zs1V>=5Np}(BhFXOAi21#|&IC|vXsff@L-PN|gj4~I!
zKQX0Bsb=%1G0fz?$Tyf%nogWj_f)etw{CWTTcjLArfy%jQ7Uz&;O<j$SYU+D)liCm
z`8@n`!i?&+&~iIw1|da})bsFXk2lw7jSzOmnD`vN_~wXDe<Em+kV+NBy&kd-95!=)
z0O(-KJ+w9F=g`_<FU=K@Fl9Cjc<_YV1c(Mh96~ZBNtQr!e9M&1aU*Rq4-<W8N>BLG
zq@^lrtm;LIu^rt;ed$CHD^rQ><?ge85AJ~*N**C9H>d$uk+1l_krK>kg(jbUt#JpG
zR@SzTty~rGUVwjeF)Vr2RL8vcLONW3K_;5M-U8U;Dqq+ajd({9im`v|IBr+j)4x3t
zGFzg#P7)szzndz*0+}8%O#0*s*^j%jb?+UaTi<uylQT}Eaub5iyX6{TiKu;l;Vnw#
z@7KG7F2>~eD>^Po`exa>41KQi(jynlW=6Z4-s@p(H2)pOC8*ES2vMG7I3{7fz=fsU
zNL`q6i+oNu0vnFT#4v^};a|RNaS{9~YHHz2#9}SAEq0D{7jTU4zKMi;K+3qiJDX?i
zY?ei+b6ny1&&~CUTg)8qa{>H+)X=C=fR^{5z4xUr42&b*A|7J13AdD~xsryPnd6O#
zg0TsI{%UaP9;nO&u^6^LfIpwmnRXY>7XrWq4UJR}@lnB^{rRtHfJrQFd%o}Ji@=nm
z!X=KN=zqxz<?D1xrAN`Y>;Kp|FE{oihn$-{x#T_<6$zkZLlC5Sn<;vK_K+teQSoX;
zcfzh@#rPl+@0!{Gg-(|_sDv#3?uY~!PCu#T_BYEMMJ-iAlgsszc9_}|7l5M|?c~jo
zhlowJ7$T<`+bR~wz`X14HI?-Awc8eXD`mrE=lY<*KbtU=G6oYRu8x_sgA)q1Fhxt$
zN_T5AMo%e?Hf4McW3{$_*xIM^2{7(f<|^kdpI@~KA;<a2Dx;&0vPUH_nD=wdubdvD
z(MjJmD%YP2_dw7#Bt=p|KkPo8T&|mTgVr0Il0fnvtyOaAVP%zK*=&bu4!Ar<L;ebX
z9a4T1f$^$ul8)zyTpPhUPT^6pLDs2346gvfyInluti5Wq({|W@+XIf%JIy-cMP=-~
zWVi}x#6XsPIE6+&R>V06G&?~%+F5OSn4DorU`1P)D|n@7vKPXafm;i4q=$R*ZwBAd
zY}E~yM%yimKaX2VWbWA!5y8$B6MswuONyf=xls1^4TE!i%7<)9CE@H_mWj*xjZG|A
zu?0WtQjo_MzjVQWj3%cxTrziPXV;c&tz?<WU_2*4tJlhfYyt}19_Hm8Pvj%Acd&ij
zy%Tvjeo+?VYKZ#lsSz-G;b`dP5^<c(*Pql`xy=4wgytas0MugxPex4ED4~jJABA?o
z>!m2S^nk55*)tU!;{4sRHQ+}pdn?C$?cdGUH_UR7UpzK{F%3gOUXGD)HY?Dq;=!Ga
zYmujyx(N)6Y|~Yjm@wcHhy&PF;M?oTXSXFbycpomhtJs~5`JOK!^|`DUYu80#o$Za
z_9pjvvLl^IOdNYa2K;Wn?R4xlOd#mkK-o(W-_K$~Mp#m1kpGd~+S1VfiW(5T*cCRi
z07I2up)5gv7w8E$d8{^&+5U_)TNlKHxz6Qo%^zzCVt}ugaf_t$RZ|JQ6g;Ynq!!#<
z)NTpfT<CrdO4lc4BuQ#%%s3z&?_L3k$BI8prxKfNh!N}+aTr|lep$Mj=&tJO>wnFF
ztiulN&EA{MHcVFv0$ZYk<x?x1qEd{w4!^hpQu`2p)(Oek5dA$^WLLUumn0rcfLl%$
zqF*gCIbhQLq1~+B&AWT!GZx;K@H<)6ZeVmr*25!RO^JQmPJ?>C&W6SDyJ|ZNbBo5p
z)b}Tff|i<Q%E0x4Y=)PZ@pt0f4=!Mmj#br_P5#5iP%U5qlERDOMhOt3aC0euJ|tXd
zd2*b80e;9Pxi(~3Fb&HeCyE`b^%l3PMb@;B<BX{geK%H9X0c$vDmFML{FR1W&5-fJ
z>8c9NQN$}k9;%B~HhiUWZcFO8TnPwz8y@9eU>L7k2&?D&w54rut4KxlYVyqLz!a}t
zI1=gM6VhUPf1R&)5g75uZ9b!#3GN*UPxVfJ+lfka!+dsVRKp|S4ifyI#gEi3e6n~w
z=?z6)l=&;p>*04%v`dYY0ABj2%3qOqknA6){=&03TCh{uBR~nasi;KkLUwKREOLxX
z0EFdJ{RM)uKJ}SQWS)$vzUg%;h?wCiH+?Zmn=f*t97VRP==d40_ogKJbK&d6T<f2I
zQXqVp1V_$5`*~>ZYC5Ac%pfi^=F7F5DDItr*{AxcTM~5E%te1}mKy-=#GyL{7^QUh
zqyVaFXNi&#?f<>4$!Mo##&Mf&?5f4z2sgo#Fs3u>FyQh23{#73hmd(bfcA;wgr{T<
z6{-thvX#zQYnYPK0F2f2q4w$v7Q8oqL75kDh&%;%coS0Q7!;J+CufHZs4EQ-;s(yU
zEZI{q9fH-oxNN=9_|yCa<gtk?{<AlpnDu^mJsRWe@Hr|c5fy?^EZC`xW2-myD+G2M
zuhF2K)_LD3(Tm%`f~BcBjra3FYtCc9V!c6tecpu@)-=d^c6st{&#~s@!op>L6)$8>
zM2R9zGf(VFw%WQ@_~~&>)d62kWB(p)KY4F2M*-OCD1A82X+2hCRCp@Mn40<6#lwn0
zc$inp^9|x3aiZIe+&*j8v=v@soB#p9sp`&;u}M#ff#b@+F;mw=iA$A^(!8WXIY)!q
zK)(L}G3u3XhLVMERS5SIY9ye4<=LS3z!P~2mbqBysZLYBs70>pUfQ*PZaYwkBd%EN
zNG}UrhaFZc49r~j-Wt}i5-N^y8~*U`w7^+e{~LuFSNt9-N6I?|*RN$#J}^Mow3@3@
zNIzlboxWKm6`V>$SY^1v=1_4Pw;7hmR_2)5UVIyA|7*rMH0M}2k!4<gO*eV09x|MA
zHKbmf_%|~mrgWD+Jz=|JMpAA*c71=Wq=N<2Vl_yP^x~(N&t{+K{Ke=rG8O*rGZ_@_
zI<B|f<xcQ~Ld!&bJo03y?LY$z1Z>l7Fc=>c(kuzcn^QaKWYClU-Xd7q<0a|=|4AhV
zY4sgXrmKoC`LPjPhC20sB0Ic2@iU@u&`8(+6P4Zm?3#V|>%qurb+}@{l9`^4<3_o~
z>-Exc2+^GAv<cr{LYf82twwC_%+3rx9?&M;N)P*Q>M`@19Zx1yjHRHxbvF#2^mT~3
zHmdCd=&kjioQHj2A)yk9+cZ5yEmF$I>CQXTZ6U|*CYC|@-JE8BZIFPP&R<uvb7Fxi
zWsj;V6(PZcU!3vWZ{aXXA2{plb)hWE^Vu^f=%erk_r+1*lw~IR!~Pt&%qHnn23`mx
zgnRBDBbj8yx$mI*D_SL$XL#9;CYbnld4vZVpv`#-S?Kr8nzK>U;KpnwHDYb139nBW
z-hrUu3q<Mm-)jqhYK#aL_W~p2<&(d`Mu@aDEP~1@p-fVEoX|rA6bW{1fs)kD^oF*~
zxI`UY3U?NhEUEg2WOt5zQ)7Pi7bjQYl9GXv=8D4~*0`gQ`;hImH+-RoGbjqjW<xwP
zJ%SdiPPP4K1nPFKp0w&ngB4;^7c57ug@HjhtEpUBPI|U~<m+`E!x;{1L~fgj#qi7(
z%`=yUh5{AgKn7ND{sj?^wKEw65<X!CaIhYMUoU=*ymnj<v>Xxm`8GaqJ4qpw7R_HZ
zvs>8|C?Q954KTtC<iQKh?qw&(c(6|zAMM;G9wVlRYSHqQrwlcqgP{pA2YZmQX-X?}
zQQ*5+ROefNVX{v>Rer~rFu$kLLIoCE^L5pQf#;tuB3M>S`Xg^yBo})WwM0gu`^{I#
ziHQEr=sXd=7+tSD#q5$(Sc=*BdoIA>58eF+=_d`=WQcn7Z>uAeLa=FISwu`!)j+7}
zUswLTSUu4hFTmsKlX;eLX2!9<9fJJOVk1y>=6+j$ga#Ke@~@>_8?`bZaJF4{$tJW+
zp=w{~;gu%9Fj}1Tt37qf6}jTrSCwrp!eGv{M-XcrFAVs7c}IUYl1kg<J#Xp#ROOz{
zGXKU34-<;8WXt}HFq!9@MHTCIK95xO{bU215)x1X#b6{tY!>lf7pggPyw6T!%MKgc
zCF3W5UHS^r!$h;1^B&d)aOU-8`>jl*93RY|bUZ~`I5<4`I5#_Q5#TrPW5hP`YpSdt
zi9Q&C$l+1l*1w01;sy-QNOjz+eY_5ihkh~fi8uRfRR9ySa9rO&usJ_-Nq}8AS49GI
z!Eq%d_ai`XP<JL@Y~y0Yefi(o%iS%tgTqgM{lqyq60#p17IfG;ZIURzTYS;))Dbz@
z;ir=zl<3Q5Yqdt>lf^070N`FtpD;!-(G*k#wncH%VJUe@VSg#cYeoQCUJZ=bgMrWq
z9GeW^FP)rvLtGk1>aB#IkOQ<AWt${edA)=pI|zsG6Y>pp&Mtg$f=g>86en5Tk5@&1
z>6s3xfsw-8O3jpDY#X1r-evqwoZ^NN^{ZN7(-Hv8+lf!x1J8CHIdTqD=Tz*CsV5b4
zIiq<eP*7*oU__2->5?LQ?A(IxM$ii8G)pis=OH2^?5qLjhC}fQ$#;R+CKJbg#YWEA
zK6yNWh*d<9C3)pl3VNZ{1hnA&Y=aSh5_;a(h+=mI#Y~O@`D#Ct=Tf_$x7fw>_Rv{v
zr~*0-4cSib<hHMz9TEKs#^Lr5v;#qdQ;&fp$hMM*+mUm}nf<a~9N!RuNH~1^o-C^M
zbFFH0AJ*~aRkDq*dz02s5+6X$&>R;t1yUH|ejKj~T+G0O&JS-non2^TH4lV;Xa{#D
zV_G)MgwYRfzs=-#_njaMl__mbp^9)z(4lHx9*pdcfYS7(*_XSYNLiD|xHbwK{~r`M
zrNvRDH07^qQ&$H^CjR9Qvb&+MRRjc?7Yw&mb=T~iP5<`p@02ulC#q)HAZQVJVIUD(
z_nl03u;&ip@S<msb*!L84Ap>tt!(4-psC0G4#CB?BU!zRCoq50^r%2-jdPXWu^1NG
z$A6A_mfa|j1c*=jcHkSJtFra@AzYg}Am^|eL4woT9UZgMZO7T=5Y)O^cCu(v6I7+l
zEgxFa5I6nu$04eFpZh_Jy|nR@wC^9g45okEiZxd~Uki0}j{RMc)QW(AbGvfQz_N>|
zEBn1kRFe^q1!376k?pG(e3+)+;Y^}}8~@6*5B48oERX8`n6C-x;jfv{=&XIlaDaOK
zXz%+j=Uoja&!=5oKDz+q3V0%kafm|-H1+9XiyMKc@(i_v6tp=?M_tD$v&x72aHB^_
zEQTNB{chXJ^2j%US-yyWUW*aAxHVrWR$56qospZE4O2MXda}9xH0vrsVloK8(m8Xp
z!oW&YRd%eH!;7LbJy!Jz#xp^EM&ghxrW<rsNeK<r?b;S)J=EmS{{??Ri5e*SMM^E$
z0HYKche9W{n6^skVJqx+%fY2HsH1P-0+f*P5#6DpHSqak4a)m}lZ{=&M!)Byt*UIl
zX&#DIf97E@R&dEqcsg>4<OJ1!t9QkL9732`@!gctS}np^F6J9a4ukM?nbY`#%dHI8
z>ei1=AkNl!1jypPJ^sx4*exIdzaIX$s|gr%j)vxJceV>iL3>5m45IJ=M(q`Dum<JP
zv`H90AXxMD9DMqJMa`0m=fL##%bF_UQOI~+*6gtbqybnEc)%{<c%lH<u>pdVm+w}_
z5xYH1OJ8=qFXCQu6Oo$xx!x|)9dL-5A8B^%+8r`e%Od->r<}lnfUmIS53oR8FOY?B
z$*9Ne22Av$7&np0`X=ty-0EI9vT21?4e3iw(Ps<N<|`XXbScD)z34gc<P4Bn(RGi%
zM}m(=<6!Rvcur_qO&72`;nW8STyz2=n-{i}PM@$Wq7T-8nDI^pQPd?4g=2RytJ!u_
Ij2}<ppj};D8UO$Q

delta 4552
zcmV;(5jXCsFNh_OBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01<AHc}oFw
zk;O=V5q524VRRAz3JEwRrygt|A)wMS-Xct70^4q)X`9)jSeicDKRP3ys8mRsN&or~
zwnB;B@)_Z<7%NZarfmQH3U;-X`5z!zJfGjXz!FHch`hNpS#@4b`m7T&X%p#Gz}VAV
zG6tyyNMF$UXUrY|AA+VNvjs?2SV<{I+)6cnShj26#x=GcH;rmqFgZmG>pYN5pUNA5
zJHD#QUjM`{HE;2RNIE&BVprNi6A`jYWa*DFUmyi)y+xVMn*{D`;;X~UXn-3FEc$|%
zdNxo5d2l!VORsmX)uwUchzn^Oqf`6RZWvp&LJ5En1P5{hH*sn$zF)Nb%*CdR?*U1F
z>CH->DEZfoX3>I^V8A_vYFb~4N(eSus-+Wc%f~!)dK5KtZ%Wo0qCkqfTqi+-l$~z8
zuK9@l5_gw)k12pmBe2UPR6|{HOazRK9Kjzj$$+Q(6K>b+F|7r!o|dQ$kBqPWeiYk$
z$(ZtvdH7Hlffi~oH{liQpmR0Ua|G0Xpm=MvV&kkU4N`TC><ig!an$o8pPOI44$dPl
zcVsO$A`X{P8<G>1vwsb3^IV^WqmiuX)<w&LwT31s9rf1we#^YG8x5LT`t0n_rn$?q
z5AX-a0_GtPrsdae!1Ems#A+9<&B7l!-l=WnN(ECh7n*eCEmaykquAATCWn20#J1g?
z`k=aIY5b-*akI>ymXM?h_w@~hpqcdljod6eh+2@Z8_=CimwOBtT%ftaXM%%4v$R5d
z7a`Z;?(7|t!%6Y3_Z6hBgcTdtQRO@fhCKt$+{XAP#sd#I-ixx<dD<()GhDcx7!S?j
zzNCNc4o2&dMF0*Wyk-IAoLs|yyIpiRiWpSfZVEW=T^Tddlc`xrd(SuLahdK{BHW8W
z0ZwEFmqK14`>IO8d|H>==K|@e1sdk>j)?l1ppFBMXdmQvBohxFC6T<j_pf%KUj189
z@Am#chF<M8XaZ(e+#haW8wcQx<UQd4`>fMZ>-J(CN6Sijpa5-wo{%GdJuoeaHSgxH
zg&mb9E<uquj*$r9BaIMdTvYs@>wVcOg5t)QF#k>_xnU8PiW%Jg4AV_EO~V;>Vp<l(
zfD<^~IrLu-xSiq7O6#KQMv@UeU0G|a_dHTG=g?rb(j;gWTiKnj=}li4F8|O!C#p~i
z>&bKFj>7m{jPhIt%FgM3{oi$$P>E-RdJpi3x7WX^ld9_Rmp=rjFCz_boHlmB#SV!M
z*WD3xt#~dci?euNblCnT;J1dnv}cH1s-4PyV@WL3axbzLJaMtg#I}e|bzG&UlN-?o
ziRjEsj){g9R%s&6noxz*`+O1ORsw#slb4?7Y#w-HkHQb_SB6D@IDpWZyiytqZpZ_p
z$$givr+7ejHeg2B(7ORwjco@G3*4Y$k927<V0n9qfoDqppeqSH|9T%k84lAiZ{>CF
zAMM>>I3jo*U~GcRKTsLc4^&pU|Guq1!|?L;7v-!Ii1Y_M&lDzd#FqXIB_};L7s~|i
z{EG-QZ0+%J`qCqRD|K55Bvi4iL#*Z`Nh`TrC{H?qvBTp}6{6Hqz?v&5&_is0c*m&q
z$_u+Bh|z2C7M~}aejW!GCuhiS@C%hjuImSjEoJ7|DT3CdL4jIK@OuuqTo7sc#=8bc
z&j!_bMor*wvpeJ2Y9!&rP~7|QuW{`bBtj{LOJzagu7I_F%{Zi=fN>%hQ*Iw}hKj1F
z;4xy966swGGtTU7y?E`ZB%3P*auohK?8WHcZ9z3PZFMPa9&aWgq%cKG=SMIRe;{8&
z0e`ArAE&UV=(yE?N%|`l9xuh>ZRQq(;UdOJKs8BSK%YoEN<+72GB;;~=>tdn1jPj7
z@Lj~Bb?6y?GLnqAtM))x+Bu2FONsYvnF%H~5L3ll#x#%mnb4%SSxSgh`>i2w{3wSd
zT?LD(t`+yVXM#N*!vx#j<zNyc?BNS=w@l2FVH?}Y$O}s?k5~NFzOXat3LJDyQ$9mK
z)i^Gj<c|L#FJ5dTh)O?#t7Th(1j(&xQQQ)iKH@2V7;wfpylife)`zg|WhU~X!ANUS
zE&|8w##V#EV<Q_Y;JP##=fS1nd9h(A#@*~VdiS<UaT3vf&OL`q2He3V@R{0n%mO>^
zqF*9fMq$)3YZ9g^YPZFOiEFDYzH^B3lIfh5XZyl;4e9&8W~C^Kmc+j{Pv=Os`T+W9
zz$uJ>^4%INTh5Dnr>M1j1cSzCmgDvoU(*=hD<RF!t4_=^d%Itb4b&5u{oC=SWP)6x
zKoRUf0KNnXFQ*3!xuX&tb-K&~60c}04ATvE&eRJ!ShAv`+gYc6n}zR%g|VFHR+C~W
zIy($QGO&a7wWyeVQv;{Oq)#-bbQ6TsQUD8obI?<IgV^ty^wwFb8B6_wm>umljhxtb
z9zEN6X^LaITeYsxlIfo%wlBn``XfO_CEasYmhcxp6h*Z3+$n-+Y%=i$T9Ev;v;_w{
z{V+aUPz7KEVLd04jhKGoJSz6B1?*H-)(aNaeobg4oWmQm=SD-^+lH!}vP+~OOQimP
z(-L_~E9Wg0`1-XOdTVDxh9-YV;+x&1<WgBaZ~=4EX2$N9R=ZWjE0X)|oUjB~7vti^
zNh+w->~~0i?;9MbPG~P0aaw&R1ghtGjE}#`YyXpA?oztMBy^HsK08OjV29vi%&W5k
z&)1C)L1y<G<6vo!3m6lS*2v`KLr}?odk3oZfdxP{ARpS(6fHRI8}UZM>9Y~cHX%H(
zLB~E#7mt)ct(f3_`B5xo@OYy}$o;UT%sDofNDx}2FP1ZyD2)wI(&0s;-2U_KFndNT
z`}%<hJD8sAlM}>(6UbWPQ_HLx-N%1>!OUn3L?{lMiFYFHw47w^7+uq|#Ec(*3VvsN
z8OieA8h?=$cyKs8Au#FNo-{g3lX${vdiAyUiky5{wXhIr!oSQy+Igr<dn*U`F0(fS
zIf@6@n|=yWWNs%iIq7@pjt;NxT<$sNl`F}MU_S)66@6wRsBoaOBCdVJFhz1DwLDbZ
z^-x3_t%h*?M{4K=GUgur)n|==)%{gTeJUsO&Q?*?J^zi=k$Dk<2Eu+T2}R5KB+ZLs
z3drfiV!f1%U~=juyqk4~YB+J)dPa=fS<={a@h~GNq}cawpE+_Ac%&48bcFO2&G>m4
z(geMzbn_~FP@;Zcq<;-w67lsW>!`vvI}Y79<aT%fON0JM>14FhhM)j{VbDFT5ytFi
zwt7<fI(kn~*|p}Wh&NM=`HpUui#qUQD<`3KVYdI!owbrewLN{yO1epUyc0TtN~!zy
z#RV^q^U}-k?F{3hspn3mtd7~YF_u)U4D{wG{S|(XN0p)q2|17_B)ZGBdVfQCSKZyW
zv%8sbJ8_Kw?0F0K-GW+wuF<9(Mh>UeD*WemU)z6Y8=sXGPeTHEt_k`Y2I?n***dWS
zLk+Dr?RVhjQXrpT#aF3Jj4-k*@4wz;n;2k4k>Q^145{XP*!6W&ehli~i89L+vMAnY
zNJ(yLc99*Kpg&`$st=|*utnVR3%QW{F-_v2=cyyGg<_O<N=eUuxkvtj@Fvo@E`0@t
z!ogXysAD{EF-Ed5nqetYm!(e-tJO^oQev|x`)4CVbL)7r>0MRpH5W0~c%q@!B~p%l
za%aowxjnuMH-yYnANsH6dq5?hdOn5`Zs<2CuAR`=CPxcPpFhdWpqxZEXo>HzWbHru
zOS+50TO<)&n1X?S#WfZlX3^k>&xd{H03|WKtvGfeS_8~P<}Ur*KFl%{{V&p91p}MM
z7V57ufgF}c5vidAPFd%hjfkMODRTE(NhejP&7xBRhe2{e_MD~EB;Ro$>gWnnrOE%W
z&>R7FOU^t5OZdj=XkPfBR(;JdvyA!0a?J$d$|*^}$T+osTFSpHXRPrm%leMb<N_8R
z;%-)YU3{<-yq1R6SXCSj4SVxzj{e5<McFGtmRq{}qXBy_8X;^23V@A(o);r!c%4*A
zr3`gze&S_>J2YF@Vt|?tZd+T+$PUiYZDM<H8PIR+zrCWGJp2fZw9%WNT)sG=8a#W^
zMGv^+HU1@kG>pGMWN@2P$N(GRB_xGiM+P6NTx(%be^#l``nDbtXTT#)mmtC`aEOtO
z;eMC8=$)xapJO;sA?zN3W}HZP<sYr~yV^o+mMZ<1uD+@<-?j;WL*QEZQb$SfE}Dsj
z;Xl@!m;cW9b3qP}o9c#~QIh5+s!8oYb#aOz^3_3qW|U6VM$J_?Sm~xF&#M-lwME1t
zcQp1>lHnl$Q<CK5ba@%&<I!()W$|Mt4~x>rQ^bD=0_6zwCbBe?5WUcfdhsb4$W_&C
z9sAdhUMCEuAsq~9Pd#`g6*$*Y`F7~QX_o^(-ynu&Bn4$o-js75h;c~#DB(HPiK|Ax
zI&UL?4kD}G$8=~qv=|ji4W#Xk7xlUm;*ekea!bpnZsnEUI{9n1tYqthk&hMae>|O3
z3=tmftsLZNjV}SLq*h@_IBNaTGA5Yf5LE&ZXs^R+{ZTIo<v2PEuh5)hc>zLbzklhj
zUxh2@)KiI21DgzPSA!V`N;>jJI|6uA+wXvX_;EVFTkV?u;pp#-Ir2AmhbI~pgdeSd
z6AX(CIkx;ESer&;)VtA|A}(w&^cMvlO9YoA&if0rR}9<K_>6pu-rzD^QVG;(lTgqn
zs<|>BJC@qmpW>^Nu)c0nNp-O}wNuoj1aFo<l%qaN_d8Bnh)*g!@NVaRi}Tgg#{|iL
zbfT~%tQB_UQ+j>l)*HPVtDGnCmqn>r*Q!P)&zpIh7pK*!?r3@l(bH&blxXH6md0LT
z(_0GLn1)D4*PQ|l|4r=`p;UIRZp@{$e_D3ITRMVFoeO5IM{egizhB2zc<ZmmLb~Vj
z?vnPBwk!K!Aia3J0s8$v918(dDj+3)Ov=8#|04Ki957fsF&owWD_{-~AV;a5^?(Jz
zyxN%CA(Ym_Cf$_-ub%|)ib2h+2PL7X57vDwinmkADY6rbYLHcm_j~Kbo^t0sThkKu
z!(zk_!TUawKGkjIwJY1csEO~PL+@e8Pd$V_#rDQg89>xxp>SXle_D^d7S9uZ44uF(
z?tw_3T;;$*BigzT1e9cudR;xq`7#_YjE1!~+z*sgumlYnN)Nvl80y*h&T5i_tKQMy
ziY{k`SoNWToop%GzOo#b&cmgcIc*ZZyrl=4^YXk&6SB%`WV57lU4TaB)g5Clp-?Z&
z*F1Cb67^dsUI+d18#Po2Uny^YIE;$(JVD7nMZkS}twpwy3&c<2FoF|FU%^YHSMW(A
zYRfW~pSjJ^&ZQ8jWF_r_6wPZe(zdPT<ac<M=fZVxxIRe_WZ*Wd+%Thy7bL$%!f16W
zhEGv-Eo63uiW#zOxJ+&nMup0ON?Hf11G<_aih1KK?}z#uH@uu)N}pnXZ~12L9+6)#
z_A;!P@K(ZoA64S{)v{KJGuB>KlGg#sjkaz=Y0)6Oat`?xoQin$F~p&<@!cbrofNG`
zA%T7QsjQ0ybB=MIMpO96is?uaP@TyzOuuLtQ9p2l_e%mQgA0GYad2*K1zuxL)GofG
zVK{d6*8m)XXfH>$X(-fxI$@}G>j!2|Ixc?_dAQiP=vE$ViDSXXPMABQft@)-8408R
zoIHZ@NMT1B{Ew+rTcynNvILq%T`oNa&W?4&+4Wta0)=R7I9O{b+PdLLRw}mgDynCF
z0XDfD@!X<fZG+@=4L<7D+T%hR!g1gL&lIpB*iNnsm-GiZ-JA-4v=x=FrAqaA#|x0F
zPqok>kU1>kvkX95PhoKX)ad$V8cfWfuPzbyg(>UBt}U<@J1V@CdOy>U*0KnL?5{|s
zNrQnrNKKr0h$VhxLWX>&#D^yZT;><CmbU7U8W<{R^&3sI2Fyx>nAB2vJlIaVnyWiB
mWWTLZ4y+F_y<xK#m^Wb#tmuWLB^!+_UZeF^s(nlw>9zPRMy@pg


From 9db7f4494cfbc77697a9a9a21519236cabddb9dc Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 21 Nov 2025 23:41:08 +0100
Subject: [PATCH 960/988] doc/sms-forward: update notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/sms-forward.d/notification.avif
----- >8 -----
[rsc] 📨️ SMS Forwarding from 7277

Received this message by rsc from 7277:

📨️ On 2025-08-20 01:01:15+02:00 type class-0:
Welcome to our network!
----- >8 -----
---
 doc/sms-forward.d/notification.avif | Bin 4619 -> 4966 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/sms-forward.d/notification.avif b/doc/sms-forward.d/notification.avif
index 01eb7ba6713a1bff1b0e55e5c730050724a21477..14764a3cb5cae91932b2e9326f7d7e5d7ce20630 100644
GIT binary patch
delta 4774
zcmV;X5?SqwB<3cNBMs|qWprTx00000001G8FdUInC<PM$01{J?fJ*_Sk<3Vc5?gI#
zVRRAz3I;eO=NdK%GR7oKWCGi6qG_Aiqga|g+dn!ZpQvDt&!h0F$7=%PfwW_liSu;(
zP#Bp(f=Rku2CvnG*u?maF*>U$0kCrqeQw?s0+0Gf=2xZCSkjO=<Mu}7;+;{j|5Ubl
zvbGgtPZBQCkcWu*-6J(?UvS2M412oV!fFb3D=pRXtIXfG50hdBbKmmG^!t;I0-~fd
z+B7Ogdi9kJ1fePS+YWwl3x02|GoTtaOK}`Tj<FdMfO}C(gLI6*2|<MCG#PUQE^X$=
zkFQxa_Zg!hF!zF5igR~r#Nm2drNBe+k>Fu$ctdjh5&0%+XG6OY6q1O47euqOTxX;X
zCBQ)p+7KHWz03NFRmykB3mQ96hR2dm`}u^XK1hAE`9IvI+e2^<?VU7UCX~+(Y+=Ee
zOJ8IbZ<3ixBFU3ve4-1sf*1-y03$dFT)W~}K1%N_x>sB+GTD(Z%h#@0NpNNZS4Bwv
zFUr9pWM{~!A+<XbQ64ydZitbv{m#QVj7x15?z}B3Aetswo1p40JH}A?4)$gmPQ+(6
z*t`?w=zCtiZT%bw6kbBx4IV!RJX)>V@Ka9U{W7b9HRc~`E>gR9)bYuWbsqN0<06di
zb6S(e1fdi8Y~#zcZX1SscMo)qclJ;3-5R9;2uepcTHlc9(VYZ;3!Hmb_lqIE600CO
zcQ7g$T`$e*SJA$s5Ylj7rNx2MrA=mu18&U<rWKUOjV*H_cUFJ(t($1#7i>Jx**gPJ
zAL58^DuehK%yG#bKnv-N_V9^Sz<Ho_6xZbM)chmO3?vr(#t|~UR0U0jw`Lm4l^l1Y
z1P-Ed<$ttK$w_Q~krB+0-L;xJUMH2JR2aa-1gxT=m64WAW)cf>=OkPyBW*q&AN$nx
zZ_zUE`v7m1sH5267z+)7HU`^!uE#So35DCqMEa;NYYT8<Vf&C%56_1<ZPf)gSZk<Z
zevN?w*Pf?y`;#{B3<^~7?mQEqW5WoTf%QD#rAMtb1*7wSAFNP>Ku^?UKw)P_N1J5M
zYX2<YrRB&1iPH5D!9f>u#B?=s=P)@Ue_kXoj{k{ngbD>t5XY58Alqee>=Pfk0|t^z
z_+@XENFa0<BS0mJVEXF7i2)`i8!ZB}DhkjAs5;QT%;^ne=eudh??k#<<4aT9w9pJs
zb^zeer`P6x2F1X5f{UWt9(1x)^)ER(SXxDgU0+K6xkIrN4`<E3XJ2lbVFYHps=ajQ
zH`NFSr`oLtHe&b%g6VmaypzflkIe@-_)5kt>xn$Gs$q{|U#aY@^Xb^yarB;#sT88T
zKGhz~O=1c*HNtX@di*Gk?D{u^RBY-6HG`dNwXYg~&~LAPIF!|KByZeYY14JiE~w@A
z;_6)MNxg3~!a1CpkQP7^=3mtWfQ@q3sbYdghvDymTTNUbE-Lk6XL(VU={2yzsb7*C
zM`^EIWh?~zrVTfR8E0ut6W4(IH1XYV-BP^ztL%(pBz-1`sD59V)r#U6SO=LR0~QlP
zCPpBCQV`DOL$aQNM<v3yDbUAYv*Wp41yy{8g`#bU4>+n4Qko^fS=OPO0(shuiiXu?
z_j@Zf=gyqN$*_&PflY#pUK90u>GW6vAiU{Pe2ugq0VbG?*;Q0XKQXq-LPBF{aRwm~
zR}6H9*$NgO)AwwXU%uZ!z0$4y*v+!fb5hiQ5(<?r(;(k`2Qo~glLf5FvDHm+Xr6>Z
z8Lm)L5!thXd;1ql0S#RNEuT>lPGBfWQDZ#~dcLPyokRk}E==bc>q@>?C}&VM$o>Tr
zV;g;P5P7-<VlV`f-nhcUZtU_q2D1bkX#gaRzJ2Xts#d^?c!hJD&cXg1En_wAml&9T
z7Br^e;P=osG8qDoYYX35gT@Wo0Yt!_QF8$m{w=)<aG2nH0f;q?-!-)!bx)D**y*r;
z?sX&)svHKi=6Kk~?Ij+7N%KK*RfFE$-~C2+ce3dGQISwU&sAKJ!A^;sXLCCvGF+T_
z%G-T|rco;oQqeiY55}Yh!y%e;)LiU;5SlYeccW$D=!2ODM6h9G;z4vG5sMv+4j|Sh
z&N{87nUKxxyJL1KnE=ROe#MTEIq#hA7i<Rnii`V?!KvXHt+UAP*KCgP%6l$yF^@#;
z4BUJ{r=ckuyNlH^Uq{+^O>wu<_9?O-*?FpZtLzW{YKZa8VLOPb1N7JN>r<(JR6<tb
zDnchXja?yU-ByHY-xz$*l$eP)Dx6IglYPcQl|wT=UCU17yP&eo0__0;geVPVy@eIl
z;^!9REYN8ghu+>B{ftYrT<kA~UAy+gqHZgDg9j9IDp-qR;S2zmW4|TbY!i(BkN+<8
zI>6nbR{>DPru5Gw#jCGTODphyyFK07?B;HZ12c!nF46G+N43a#r4C|M3FQhqUdXCD
z=ju|~;Lv_lguE%sX1rQKrs{r}69Z?>{yDoOw#8$4>zO3|mqucU_rCGPP^+evfNa{~
zUIE#i)4eb1;!C<v#E_XEra*<-%mB{Yt`t47)syjvvnYx0uXIP}s!-a0UpB4#RPYMX
zvR$7I3fuWESwbcO(l&mjF*7~y)d2Nk?r90~$ThyC7{qIq5Xvg?H+9EG5tBP?o0_KK
z=W{$$6J|Nd^Fu95@%ux-^G`c58wA!iF<b>3Hd28ss`NYyyP{>w41wYQeVCX%zwMzy
ziY5aA{*YiRiCC);oLWPFc>XF*=hPnP<C7iQPqHF*d57Q!tX)(QL13r8uvn<SWKgLy
z;8*by+*9O#EL87c6-WL6>MXo3hlNR@{J6FEs06dZxoGztOQu`2q|c10J|V$%u}%61
zZ0-vf{Ggt$^OR{$kqb(niwOPi&{{e(=8VC5{Lhk4c?@vmKRe!k7%Vb>{poK@L$qG+
zC#4{vKL9tV4B#%Y6Ut`8QnD;ZtvQfdIY4TgQJx_}zMUFr<_BaKJ5Vk`V67!Dg24>-
z05AT)Yq?cjUTCbGmdz|g252$%#^)#ceh2>5zUsWY2`+?Orc?AWRxH|<U;1;Ge-AXk
zecy|+<~Aoj(kB3a9eVLlS5gG&&d~nkkr=7F#SG(#!2!L_Cp^l1%*s;I1g^@~`_h!y
zGFb=U)3y}9LuuJ-v}%k8YS8CjJ8x=-c()1za)+Z2?#>q2=;QTMvb~bLx%ckS{s*et
zz><Ea>F05u^|Z#kh|tgghEKCN-H6f-m}erI($XV+Z!&v-4$R2UeL&$P%LD|?qymG=
z>o-QO!(54BLTRF;5@YhKEvNq)9}t8WC-Sj<^;@KBk%9>vt>NF?Q1iI?0!$D@OtCv5
zyIBT`a10H7$oO<#^3d$1EI4KUo5vELs%~=CZF%MZF`n-v77^>aRe0~hiRb1d`l!wO
zo5H2_f3-S)FMfIrb`yjW5QY#jTza;p>4-Rrz;dmkMCv8e&!e>CbZV#C$eixGg*ZDH
z&z51XpoD%YF_B`DdQoadjEom>|2_b^)n)Y39WsY+7&d30TFnJg{h_dT3|QPIDaoLL
zQNyZ#W#MIC7Xag{mPF@u1|bwl+p<@cF?gAKyESfqbZL)Q_(NQ*HKzyuVhO1BNs_p~
zKkqU~;8B)o5LNw(0_RB1b&gZTeD(V06<NDy1^=-7mmEWcm!q)cJhDBHun49|O=C-W
zok-hm*_#t)bk&H&OVVU1`A5pQ3YO(k5o=1u!YnM$(0o8Xk7LATL?xa>xkm?1jUesx
zSL1Mhmp{Xk%@3{FK<~GPKQ5OvB#hBG1%vOLKzCmSXA=MjM=&lMuUPyWhiVsH3f_*!
zTP&mmEw9I?yc80`G7UU!BL?U!4+>m_gi<Bvxs3K>KIk9o%WsYxnoe70aB-~lWgAVY
zjaXl26kJ|`B8ufihu@CzKH6`VRiMND6rl`%Vq>P9CpU3Di1ahrM)&+X07$Oqc=lFF
zBQNG!SiOHxf{HcvT#XUOQFdWf9m-q~&ukczDbMIpcV4dz`7o;UT0oF3=UW5<@iADY
zw|w2v9w7R)k)nR_o<;6^FiwOSwRU%UcXgQ!=9_^pd7v!ONUn_&>9&H~RMd%m)i76o
zj24dQbO&=k+q&fjYH07WRhKe8ti=h;DyAM8o;8on9<cNosy8Pey`j~5?oR@;N!02K
zv*7;bQHvhBz&}umQep<cZOc?`SC@SK_u^X3dk{r~j0{MUxm1AXr~96miWAnoB#U<g
z4QP+tzRySC)Gq5B*4NP@>nT4n{FStSk^z)7gAuLU{(oL)C+LJ=`XO!Ofy3&}wHg$S
z8<G}UzZa#bgbct%QIi{=5ZBW@3^?MDk=1!DtGraRO7%H2-z4<kmPbOCVxa0GDaUj5
zm1lU&PG&K?S_-&k(Zzu#G}s&WBM|C!IZ;XGVbt}@r0Ou#pZnU9ePi^&+#rg7`h|+j
z54kb}3(sCv1B!;bPjNei4a)F(WczfU=yN5!`TLUdr$;2y5ucEV9gMsdtzYe}C}3UL
zoM#@5P{tktc3iC}ca|@71~um+IeEqq9J}g{imCb20}7}bL@0_An*`9_Kr^AXJcgRb
z<XC+FnDv#ofG`GSCQ?AMGchiIt0^=}0R$<UJLyrLC2Bb^Bmw!SzOs3&N#YOq`h3$I
z|3&1zmr-q9iRitZQ+!@Js6nDmOtA7D`Wv~4VfSGP#%l9boqX!AKi(rAGukH+U#pWv
zXjIW$Eq}|Dd7CVzm*zuvM0JVrhVFDp>L#(Ts_srvD09<D5c8M?G>r3qxugdUg5gI)
zmk2hkTcNyilH0-_v+%|L8_HefkPI$%hW=n-?Rk`M_67p^WyM69q3F*>Zak4P(>B+$
zmn9&?d+kGE!xr>)7p1?z@-33XB;D6A*cD{^3iQzXxATdig<=?>CJ<4gd4RcG;8n%S
z-<uZr3v3rRKQuVMmsEp)n9L)*?=Z#AJp!q}(`mM)cNTkNNKi}I&nf%8ZUQj|O$b75
zIe$HI85sk!g6n@&A_niNWGlTNeKf?&*}dxw`$9)aYKSNrC@xcP!Z&AUp10<|$9a6c
zHZ3Uwlff;u)Nb|x|1DObCLg$2)vh?0d2j3DIJO-_+9Hd8exjp)dvL|ZT?&C&9Q&RO
zDF=~u-v>C1k<wqaTqzFFcgjFh&{_6mmM!UL4o#rnHK>Z-coG~C8&iQRV1)wRm&lS%
za~#^g{>^NkSNMjIP&9K{oi4@!k`~e{xr78k`G>$)3B}~3QU)q70TP~>ZQ6&rs;}z3
zNc`FjNmEqI=oHj{C)4rn80cxrpVDv^g~FokVmzx=`nN0<U=C39nvP$E0tF~FIb+m=
z*odr}yq|OUNQz>i<Jj!<t$Z)zWp~ZD+e7ys_8_$59uyvYCuk}Pr}GQ#E!f+SC5;bY
z;0WMNNQ~{8l~09oA{WZuiwMaSYBflBuJu5Ey~VCoV5Yl&ErGN`k=NPaql6D5m9<B7
zdoUE}Gee#9Xm@~ouJmOYYMfUhc%tSAL+5KU)Aonz0O7XcqnGDDX<MmQm<g2`@Vf^q
z5H(f|04IEYF>1`R*3L*k$Og;_q2mXJKGAscXQ-!;niBOFQ(Hmq%U>O>(wM3EA-Mq)
z#nD>djAY|~*`Km$+>3#?hIgeJPch0T?0R?P8V3f&0!YUZy_r8LP!u)b*<CK#i$6*k
zo^Y6WE()>|LI@Ysgti_HN@-V5VTV_7bRQ-`yWo%S3&zO-E)O-t;(^?Z{*xkLAB5uu
zD38TTYB@<d>+~F}7_$&%RHIfYt+Ey?x3oWVTdMPacX<s6Vlnvw4ja+nuB*v%_#L0y
zRUpA3{4ZVDpprC%MAA@K$@k8PvZ+8aSw|Uw2)9C5704u!4+0Q4cFvr6^XgT2v^~^X
zual96`lFK;%E?6BcKFG$z)7c7@+2%6+;J|rZ2~g&-OMxoc!KZ1@9QWm&Y#sTfqS@<
zE6c5a13=``bXu3M97u%ImhTX)GC-Z;YE(fX+SKE336w*Zf|>||O6VyQ@5lSp2j5HC
z0RlJj%nl2T`5-a&Pfy-rlm4)j>y`>h$2f!BW;!Kf*T&Y#w0_OD>iTD(L7XFOE8Bp)
z!7ucnT1%*Y!tNM`|Jr;Zp3GLeU-2n2)PIeA5c(KqT_#ORi5FfjjF7qF#xb-8L-j9-
z`j`c+tSXnNAdUey{Wt3Z$}2<+rv7B~gauX<D&goF`5!BEO>XAQVBo6)N1nri;v9uo
zJ>`8ZP7%&?YMKSgv-vTJ9{VC)$+r9}<^i)Kpxi++p2-rE!kwCpVUIlv`=7o~cow`I
AMgRZ+

delta 4426
zcmV-Q5w-5-CW|DHBMtIxWprTx00000001bFFdPSLX<}h^X=ag3C<Ph-01)w!c}oF=
zk;O=V5czFnVRRAz3JEwR=NL8+5YTBd;UP?90^4q)X`9)jSeicDKRP3ys7J29OPAt>
zYC;N{>4(B%T?rPxkN@tSp;Y%h3F}lLwKkVF@vh%%>XjW<<fC$#wZ+JAk~f7u0Z}xw
zJuq0Fi5hOp4U7bV$`M_3c0_HNfG#R^;gKzW{tRPVVdHq#rK1CsP|mZ-1j+oNxAVK|
ztflY#LgQBd7)1HNrH5F4_ILF<Bc;{4B(?!Y^6ld6n#B&O%JUe7vP123WmSaDn>l2h
zn`bC2eS4*skg1krGab$WH7(e`>-T;0*ds*a&9Jket5H#6F~M@a47PFNt-qn~iUFd3
z9#L;pxIVA+)K88JMjLPxJ?`@yLYLuv7d<7*BE-uG75Vt0R4Wt|CK~9^1g+MTlEj(H
zE;L8y+#Gbd)3g(YleCz5`?)Lcft$sW;%Pg7vFJx#KM6V;cUx&TZOq=Fg3{d~?WNS$
z-1Ai6nJV7hY%Z_%GzBbiXAAyd_hH0;%p`@kJIsR=`~`AQ*ODkbhTG3ujMSY?BOkio
zwQpOx+)C!6RXCGuToPX-@Ms3vCe6MXV>zlgnrS5$d4xIKc=MBd1ZiW3KV5Q7mVI~+
zHg;((go}!u_r2rJ6W*~*I~j688RK>F=31D$#ochVT6GP5Gy2O>9g|}-%^HJ$m%DAB
ztQ-|IYT4k>!Lyy<8#;o{2qw1p%poik*EgB01f)tC(iPr<Pw(yicf;;q#YW?QJYlv)
za3iOD%sH8`4-nZ25@(NrwVEN>G9Vxq^1{w&G)q*w%lt9+3`GautzN71PLZ0@%Y}fj
zSXMDo?#Cz<&XUY12u7m{AFYvp6^xx$?=`u8#Ry*?@z<^s8g`hF=}H;{2CX>XJgecK
z*$_s0e+Rf3AFSJQY0VC<|I+KG+#dug;@MgOi#Y~A<V-D-B)*wO6Fr{nHKysv(RpM*
zp5-M#PL(x6MRhu+yDKZrxE%<AKcFq2>oZ8a`i1T|sS~O9&Q1aqYOh#-hR@2ZelE5E
zIRX=WRK_9^&c&&UnoTg3Ss*Cv#tGqB5jN`iZ{@`K<9B?n;8$A~dxgCQdZ!{)K@4RC
z3uH@fl%+I)t`$|Zeth?wiJpLgwf<jSGGH~{c65#Mu(Jks#Y)JewQX<^Q`c%g&QO@_
z9z5I<`+}`TYf~3cBaa4u_oHP2vPrQK^OA^S;2C_fD)rzpO6JKIbm}5zzVaRL0j$aK
zXhc)Ovinv8tgyOS&<-;e^d5D@o*it@M*7A2K(WFCn!0a|hn1ax$V8u=KcC>xM4UkE
zIPpoy0OMc2oW*mnAYs(J-p}T2Xa4^ng}EA=;mJNsBTiP1KW1!yhD)9T^Y^)_m_ZpD
zXAaq0Mov>ZG3;-$Ds<K9G^nu?Q!Pjn$@;Nmscl0vqS7v$IB6xQUSt-mK`~IBP^vsG
zyMw=v=ahBrW_H#%TFZ!gV*$)sY2b+`t(Ut#EDk$L5M@C6vr+t#h3Fi4@%{sO?^!|^
z4J7nBb(wOd{64XNDtAY%_lGd%n?FSI`mNau5TH@!O+T#$NW@|&fPN<Fb{a2_qwy<N
z-JVp;f+TfsuzD+FTI2m?G<0m!5cMz57erj~hq}Y8nf7LM6GYyavq~2)+Cq8N$`VL_
zBzvJR0dWEljYiU~jH6ce(k)3%B+n^pCoifzMZD~aeP0QGYF23l0|FuW*SYp>pEjV=
zTewgNW-cM5*ni;{PZkjQ@*gD>Cf7EeQ57FSfnA1yj1kK&>B7X))(c8FT-!5TAJFKw
zv-j8Lm2f<_aM47h??R#J_sfPZdQS)91*cqa1e=nzjv(@vvwtqh;<wsRyK7VM`H-0<
zwAa>sBO6G69}IpnvHErbO9fqP2m_g8=>XTPs883p4wPeox?g*H!V7uEq&F|&g*5Ct
zn{>N@!s<sAsfxA}<5l?HLU_?kfrcBd&VjR_vFlhT*agBib8LR$w8^Qa5GKK8Pw4@$
zB2}*51YN>!>BFxJdAVFuDn+t^buIzyv41nDza+tbe%{vzsf!H1Op?AO9yZR#kV={v
zdfh0(j1<lAHMs_73-k$`I3nolF=V?{XVflti~J+p+=GXPr*5;oNyl?A1pmo!6a$_d
z>c~Dd5PH5Tg0c*nJh~XDMZxwt^&o$CKkp7CSUcA#!ocNEfuW)sQP_nLw*X;o%A0w>
z4_bbIs)-N`qIf$Y6b1=IICMV2F>17qB=6)9^u<tN2`C^{x=s0%YP*zzniJ?q!}Si0
zp_dK6vomfQGE}f3V1!p8hlp$$tzBFC)3-C|l-X|#r(pxAtMo$VCG3=P^7NH(N30xu
zU-4Gq(hWA=f|;`V5*XlJG+-4Ex|!}g4r<naT}sQX3*-OJxVo&fcPYj)36b3TVvnSX
z8(q_d2Rd9HIX2SNKDX@$a?CL=eEWG0GG^N%X8h$ZsHgC(x}V*ENe!TVL6Z7MVtI7s
zYqGTD@gdDl7xBZKdT-y)DBsMvU%FXOi<-hlB=LXvu<Q&tx!NTDg<~$DRLVykH_@km
z6VP7Rs{rD2!X+*w^xNFJTiV@G@t3_$6Z=;KTn>yt2E`h4^9Ei2l~=Myxk3>sXn5{+
z9M_1MEMsNI3gB5G-i{mw?qk6JU+pDpV(W`rxzvsOf)j(GmaZ)29tq9zav26+8uu5Z
zgCl6cgFX`M@}-RbOtjxnPd9El0rC`ozXDvHdQa*u^A%4cEto(sPINN~f{sqc&*w=*
zL)A;w+GWJ^3aFByNO{kvVPf9u-st!R2nx0yxL^WDe_Be}RHv<mPf}lK2mKY3K92+=
zs0-K6g#)gNsVjgCM(hcQ9fAHLEj>ggn>IC;@=uyT0R{W5F?Ay^{2QLgMVdu_%uDD&
zqVp9}Va1jZE2^qtc*AWIn0Z4ffz7iz5gn?Nlt?=CJj*d}Vkv94E0~var~zu*4CoLW
z)_yxM%NhnQ2R}Rk_27z~bBOX;$t8J_F-!0pE8qV4FIg{{|1YQ+rTUHR5Vv@|Sx$Ku
zZmhd_e?+81O&3xtAQ%7}212BN9VJvoyDBpXttqrI))~=PVxeT<uJjsTI%~n@AIRO6
zImz01>Z6)|@aqutT|DG~iSqtpE*RrjfP$7uyl(s0Z97DpWBqnqFAOA0Rnp^-gYDto
zpjlOCv{rUMO|%A!kR`EUtj8ypS7aIOupxfl^Hk80ZrR;=nn0&KtALw-H`giU3)y|q
zCi?N+7Y$?AcT#98)ps=y%%&wL#M+JouT}21Xsz8EmELmZ%m>gDHw(sFw~J7PPD4Sy
z0%Q~d(enDvjW#icDLX3@L}-J5MQ?syuvwD4Aqw@`ln=6(H91IXaiU2}vNgwe4XUU6
z(6_yiOHYtMq;&l+8s$2Fk9i-KN{O;Wn=)V-VK!&!AZ(o<T3^6)vnHZM2Z<CJEs0~3
zs_u6Tb9WS#kxg>k`wRzeJDh!Wbih;W)pqs@AzgQ0nNwI20Mw2>hE^zQdEkV{hlsXJ
z_E%FXD|C+Gx1K`zFb@&0fkO~H0fnly{{Ks4>rO4=x@6M<{D9Jbr%9m%&=Ad!te#kl
z;Doj<)o)kj7a<T!>+#PLbX-Oqb4COoVLHbJWksG%hBI5&=AURP#Zn7I7;@bz7qKtw
zBz17Wn3T)f>l>}NSyOeqPv+gC%H{a(VvH&+2{9ttm#4u}c<>=|f#_lUX*3Wh6m@A=
z^P8Zo5Ep!h+b)@ZYU(1fUSwu&mi65#<Iu(2dbd$o*|}$CO;I5dMB~`N)NGHwq~!Bf
zO~JsloQU#rc0*K>LxoIBM8=`FB`Ta*@Il|hg_5(@{Ip6nY^9;b3HE9S<@sT~K#wGr
z*a1}at8EYl+@OgwID@3kJm<}UJXit!qG-yKmd$Uw@>WBC*`R|6G!_sU!V}H|oTtuX
zwN`UJ4wJ0$?9(y>OW3b{_PFK7R*#hY!XoqQKwnnvO5CsnRCuXY-^^ubl-K-82f<B0
zk>$4X{eKS3Ova3`Zcc)jr4$GtmwL>1bV?b5Ly44KeMdMQlkj}?IXTxs=mg)s#(r#j
zKsT>$zhfkSK?^cUN&QEwJ-l-wR4XorQF<Gk+)4V(R7exH{Q0H7o=qhdqVE=^$NLy5
z9T*L%b)K!rH=yw_0>{(|!}?nwvD?2A4M=Xo?RJ$B&wn9w3F;p4&SO*g%Op>b*s^{!
ziZed)_6uD$5Gx?D>ZIZ?Uutanq2P&Dw!iRnu}r&vGga2`L@?<P&iR#~Zd9$p^nYHT
z5gdWV1fu;wjh`us*uhiCgK}-*iDR_*nwHcJilmQqn!|vE$C$M{i!QPU0d1^}dT3&w
z)S1?jpFiLeUe$q)3@xs{vs7$5rEgGlnrN=t9}TIr@8S;7m<uiZ3HsAye~(b@UQrR<
zfCvwN-I}mpFPte`Zl;M_Ms$7U$Ig*iwbP2OR$#j0YG2M7P@`at8}3Md$;pcCdnf~N
zL0IcL9|dhw-2rYKpAW)``n4PowJq<Eo*nFZd9N!Yj)npT@1PiGE%;_4qr6UPL$+A)
zYKl_&D^k-#o;nWiyiGw3i#Rp$>};}6Z*%8=N7#5wym8S1>x)5XB$28|s;%OSBq~_{
z-KU&X%AZHyl?B9XSo4HtCRRA`Z#B&Jux}99aPTs`lVIu?8H(j+J2hD&k;njY{8Y5o
z`k~bSw&t`hxxwHDA?4utaAy?y_XwGcTivBO0(~=U(@Fe}Ay$`b%%l4c>#v=(@_jyk
z!y)J<<MH$?^CkPbs@0ttL@R)XTj)~Q5|YgF;=Rom-T}~@>G-`g)dAddogCDyE<j~t
zO%PMhfj_B=4c)!WaENyyVRH1U<X~JbyVE>JirO}V^)+1eLi*%KXph9T7ev6yvE5Lg
zxwt%vH%i0Vqo4*#b6~qsl&g}!(9{KgAtjc6%;n2cl~O8BOM=KE;#9Y^w*)*79(N@Y
zd{Fd^cyGl}+d|8#oli-~J{KimOOq@i$|ZMqGcxd8Auj(~&XOZ+hPJMGQVxu-B(<zU
ztxh9F*O<U*y<8KuV{I-g@9#E+Pq22EdWxVELvg!nw2429``jlU^Zd*>PS4wa$YpdE
z%WgBhy0XJ=wuOpLWEF?6rm1@K4oK7tL!Uoh^6Z;Rz`jmzPG$=$U8911L}uxiKC>vx
zhYo_`_>ErkMC;(}q3`F=S_cfK=e7d`J{twDkAd<<XT-IWO9FX*xBj4l{e1L@Ek;4f
z_TiGnXKD_weM32@19{J^)C2*4cyPFHs^o6mV^@3;C!-zPiR(;%DuS139q8%?zR;l|
zKeBs-kR{!7J#&VFF<+K^O{97DIsceh+I-O*19<rt-J|s{{6}ipH8Z)pLk`z_NOrQ{
zM>Sz=W@l|#%tu(zvOUuXxfmM%NC364uxGO`Sw!d<zAiQpd~2p~BVZMO-}moDXK-{`
z>Qt;o5wKrv(^kx`J^cK^;qe7dkl+4+ypGkq0bz<4monF%>;t6k;(PN?*#Xy9Kc`u4
z-vU3UVLiv&wR}{{KHnazb%lB3yISIX{#MKO!0@V7T1i#>rxl$;KOjy~MLH6*S#mV=
zhRd$%%x#Uw8;(uqg$m+-z-p=;NH^wA5<1!qh%&`hkLnc2$ZCwB5Jr=3&&>uXOT*;t
za;+b;8wLFs+f1KmoI~hk{#yvqBVnajh=n-5cf%0mZQ<(Oiv^Pg&A0CZcYi_tK_IGq
z;~q$f7*LKFeIGbcn(Y(gSu3ECa^YdaQQMeawIi&%Upg48i1>FI8eni}G2h(RlXcdU
QO1BPWb4(1-z}@Qr;6avvkpKVy


From daeb173dbcee7384a6dfa9fc45a1c1da1df3ba1a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 25 Nov 2025 18:44:52 +0100
Subject: [PATCH 961/988] doc/check-routeros-update: add screenshot from
 terminal

---
 doc/check-routeros-update.d/terminal.avif | Bin 0 -> 2163 bytes
 doc/check-routeros-update.md              |   2 ++
 2 files changed, 2 insertions(+)
 create mode 100644 doc/check-routeros-update.d/terminal.avif

diff --git a/doc/check-routeros-update.d/terminal.avif b/doc/check-routeros-update.d/terminal.avif
new file mode 100644
index 0000000000000000000000000000000000000000..af950593e0d63d10e532d01a32b54a6fd1a4d1b7
GIT binary patch
literal 2163
zcmXv|2|N>gA0MIIjLG9%(;Phsxz7^0=bTZ5nQPi?W|muQ6tDI0qDdnmMM%j*2cFz9
zDfdwbLp0||a=g>~d4B)T|M$KApa1U%006*2#ArN{gbo65>IkvuAT2B!83Z%eGUr&!
z*gzukDC5+rkN^zf{}cegqfx|v`M)TFM-#EX1sA6)pfNbqk+K8;xH#vi1Gpprfa87~
zu8Ky7{T})|k>Q9yZjODVkR(kl3mgXbdsZkKPr!40do&(}<Deuu0v~wv5CAx)%4rDB
z6~m*W(7&A%Cr)rs2uaeiNCF=@00|ThLkL4*qBuVb1Nd%otdnRw7I~C$inACG7dM%Q
zvsDN-07(P_1o#Y~FJdZz=LbYA0|3ZWY3I?%Cocu~^Mt?}q?U=2^qqCdt}qC6Q1+NZ
zz2}o=nhkx?=+G3~>Egj41OqnwdF`tz_8e2hZ+jrZQETu>ZbvoHXXaS41?+)71oBJM
zxC5EA&@k>Gsq(UVo{Zs>SGnKdrH0r5d5tRPu`o*pflJ`Ba(Js5-(l((kDrauwM<@R
zvo~hFCVJ8<%T3eWmQgo*)!&`#8?{|_+G#Pc{!o-xW&1w(9_{Lct@jjYS_>L=Xw-P%
z5`?fXH?y4gHI?dts9evFb+3T_60cRoOR_55B=><2iaxrYAK7hLFh!CjqY+AF)HTm8
z#mP^^1B!#DuR>((xv_>&<5lw0`Xr!>X}RANFnHfb&YJDpmA>`Im)_bL8Ji4B0aJ#W
zFtw#mlq{F9pLN-6ia^FMEwr>I$#~tlEG3GYg}6~Y+I8c4UeTLiVK|TH>iRn|MhoDY
zf=Jocsh?N2tc=;N{fqDcUDsVhX|QF(c0$$);ve^Up8%nYamR<`(GG_&rfi0)-bBmv
zGPXk7Ox$W4ITfDnS-K(hv^)CKNquwvmtqTiefr-A;{`}FHR2yuf*Jj}Fh8m^=~5h(
zahAI!MgRFzm9Q=9jp6ujKYxkM5$|?N8|{I4nA9kd0t9CMMSE^8+nUv!@(NRNbBf(K
z>^_-)YX2MAOv@3a>V;_JJJ0G33))&+n{T)^@fI<4c&C5Iq6kBJE}~@JW`9Dg(X15Z
z=;@k;-^uhQJE%d)Ah1;?f(5(nTjhaWE%Lo$wE}g$WLHiX*BYF>Wn1-W=2Z%;&VZQj
z_bRMVH+uYG%sGCYD8$&DND?)*&KK<S?fLEx8zMlDP!ybaQgAO@W^??4RjO0XK?V&1
zyxdg-j+bo)X@X*yXYAz;xeYCfjf;zO3YV?Q<qzO#Z@(@<h>n+ob5@gk;5wUuqr-V2
zL*#putWeRp*hlFd3!eT@E6({|@`?q6W&#ja*<{F@UAun9e0|FjxY-i2nm3PD?abj(
zOVbppSN~kuI&J)MKZ?KRF<Pog#vz8~Xwd&vaCVtJFQ3<ve!cpJO?A)dWEwCNdC@j9
zXZz|Y1Jt3_N7I*@tbV;(t@ReGlB`Rc_Bk}4lveLc(r)}ncglT*!fpX!Z$AqKmbxj#
zcXegBhh76S{YiGdkDk4TEH<>iz1H|#_Ck0CtrQws(&FAAx3;8rE07hxBjh=~!Bp@Z
z>Pl4{xaoXq9dN!oYCyuZN`i%p9Es0y>kn5iy^%YR<RQjZ0Ga&fEYrzHJR%eRZYYAp
z!q1L2FK!ip-G9C5KhwOCQ+x$nm{VF%mEoG5JhNG7>$^id8}&L!-($5eAW7LYd*O_h
zxdT>3X*0;Q{=J?5=TX*(>xl0+9ZF9ad3lBr$a_3|+Buca@R^g&`p8aPF6`}sL&t_t
zy;bJkSAWc>gl+F!A3AvQ>%*l2KI0ZI<<pBPYPI?5`DSWc-7*V}Kigjg^192{R~twf
zfZTVq1pQ`$Y8j(?RYR&)iG$r$y(2(|<9rWg;Lh@#w1lN`ViItMIVO5aG44C6H`|cJ
zOPT9MBGS=loOQH>$i{bF_)utOfGCpr^aFBhvHyd~BdIp}d}Po;tHqvEYsr<ghf29=
zBscgZW;uG<RuJe{E0?F~jca;8Kk*DGFP<)#<byLACx|#)yt><~;RS{BKFNw<!d>`h
zg-rg2B0#yB1em$TkF9o?GW$aKq&abu_TTDzzVD%2bthFjfW#Lfhw;k8n(g~s1F@&6
z{VSBNz1PBtmo+H#G5b|DyO+1G312@juj^AXr7szqSTm*m>Y=@XXHOvh5WX6beVx^&
z7fV<&pnHXw{iQSE(peQiLh4Mc35MJdRWJRX`{S;3E=q<gn<t8??IO<-uEHvbrUC8L
zCRS%7%X0J}HXc5u6|=pT+r=*s$2E<LXz)MZTeK&F^v`}p>8J`{xEJ=o6(sWOi~p_?
z_7hoc%i5-hI^J31(h8Ws!?X`7bT;-%YAM3^hYPjR*povFjZwTEBAcYs+m);A?k1x?
zsV5ADD1Fs`cJ6*T4SyuS<KphVmoQH6vWt_G1g6zv6X7};1nP7Wb>_+d+NCWJVh|B?
zn@8YIrB|DM*#^SpCL<5hb5Oecp-a1elO&4)(3>ieu}t|0f`0J+ptWL0zVG80^s$5l
znY6;!1p@2QXFn?{n~@n4V&5ok0<-E5Yx`xO=>e)L>Kf*qY*~qmNrA$98kC0E<dS<?
z&@YOvk9~?5^U~ENY~{aGQ?={DUKnyK_@|7eh6hI$E~5J21cb#3{asv8IB&Y{Ez4Y8
zH67$&v!`KB8_y<GVSvXvLfg8|6i$#IjnTWsAA_j+v61NszD$wh&0G0{QAQKGlU~Z^
zA?#gCM0=c1;>Bf*!bd7k>^&>n_xV1~c7jWc&@jSt<{>rywN1;&XSNkfZZ+pZ|IFNS
SCOnxfr6sQzgDUsdo&N`(d)jLN

literal 0
HcmV?d00001

diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index 516dc624..029182d3 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -88,6 +88,8 @@ Be notified when run from scheduler or run it manually:
 
 If an update is found you can install it right away.
 
+![Terminal](check-routeros-update.d/terminal.avif)
+
 Installing script [packages-update](packages-update.md) gives extra options.
 
 Tips & Tricks

From 1f11f72d1827748e62c5cac885c5e9c5afdeede6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 27 Nov 2025 08:48:35 +0100
Subject: [PATCH 962/988] global-functions: $SymbolByUnicodeName: add special
 with magic

---
 global-functions.rsc | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index db9eac6b..412bd0b1 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1672,6 +1672,7 @@
 :set SymbolByUnicodeName do={
   :local Name [ :tostr $1 ];
 
+  :global EitherOr;
   :global LogPrintOnce;
 
   :global SymbolsExtra;
@@ -1713,12 +1714,18 @@
     "white-heavy-check-mark"="\E2\9C\85"
   }, $SymbolsExtra);
 
+  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];
+  :local Special {
+    "large-orange-circle-04-01"="\F0\9F\8D\8A";
+    "large-orange-circle-10-31"="\F0\9F\8E\83";
+    "large-red-circle-04-01"="\F0\9F\8D\92" };
+
   :if ([ :len ($Symbols->$Name) ] = 0) do={
     $LogPrintOnce warning $0 ("No symbol available for name '" . $Name . "'!");
     :return "";
   }
 
-  :return (($Symbols->$Name) . "\EF\B8\8F");
+  :return ([ $EitherOr ($Special->($Name . $Magic)) ($Symbols->$Name) ] . "\EF\B8\8F");
 }
 
 # return symbol for notification

From 7caaa6232198ae3c0376b2364c39d9d4372c396b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 27 Nov 2025 11:21:55 +0100
Subject: [PATCH 963/988] check-perpetual-license: add scroll symbol in
 notification
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

doc/check-perpetual-license.d/notification-01-warn.avif
----- >8 -----
[rsc] 📜⚠️ License about to expire!

Your license failed to renew and is about to expire on 2025-09-13 12:12:23 on rsc...
----- >8 -----

doc/check-perpetual-license.d/notification-02-renew.avif
----- >8 -----
[rsc] 📜✅️ License renewed

Your license was successfully renewed on rsc. It is now valid until 2025-10-25 08:42:46.
----- >8 -----
---
 check-perpetual-license.rsc                   |   6 +++---
 .../notification-01-warn.avif                 | Bin 4044 -> 4105 bytes
 .../notification-02-renew.avif                | Bin 3944 -> 4021 bytes
 global-functions.rsc                          |   1 +
 4 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/check-perpetual-license.rsc b/check-perpetual-license.rsc
index c2f0dff0..a88498d2 100644
--- a/check-perpetual-license.rsc
+++ b/check-perpetual-license.rsc
@@ -42,7 +42,7 @@
     $LogPrint warning $ScriptName ("Your license expired on " . ($License->"deadline-at") . "!");
     :if ($SentCertificateNotification != "expired") do={
       $SendNotification2 ({ origin=$ScriptName; \
-        subject=([ $SymbolForNotification "warning-sign" ] . "License expired!"); \
+        subject=([ $SymbolForNotification "scroll,warning-sign" ] . "License expired!"); \
         message=("Your license expired on " . ($License->"deadline-at") . \
           ", can no longer update RouterOS on " . $Identity . "...") });
       :set SentCertificateNotification "expired";
@@ -55,7 +55,7 @@
     $LogPrint warning $ScriptName ("Your license will expire on " . ($License->"deadline-at") . "!");
     :if ($SentCertificateNotification != "warning") do={
       $SendNotification2 ({ origin=$ScriptName; \
-        subject=([ $SymbolForNotification "warning-sign" ] . "License about to expire!"); \
+        subject=([ $SymbolForNotification "scroll,warning-sign" ] . "License about to expire!"); \
         message=("Your license failed to renew and is about to expire on " . \
           ($License->"deadline-at") . " on " . $Identity . "...") });
       :set SentCertificateNotification "warning";
@@ -68,7 +68,7 @@
        [ :totime ($License->"deadline-at") ] - 4w > [ :timestamp ]) do={
     $LogPrint info $ScriptName ("Your license was successfully renewed.");
     $SendNotification2 ({ origin=$ScriptName; \
-      subject=([ $SymbolForNotification "white-heavy-check-mark" ] . "License renewed"); \
+      subject=([ $SymbolForNotification "scroll,white-heavy-check-mark" ] . "License renewed"); \
       message=("Your license was successfully renewed on " . $Identity . \
         ". It is now valid until " . ($License->"deadline-at") . ".") });
     :set SentCertificateNotification;
diff --git a/doc/check-perpetual-license.d/notification-01-warn.avif b/doc/check-perpetual-license.d/notification-01-warn.avif
index fb6b56ab49bada738b2ee356b6a70d890c330d54..aa36e45f11191afea75960cb8fd5a79db50f0ea0 100644
GIT binary patch
delta 3314
zcmV<O3=Q+lABiB4cmej2d6g0VZDe6|5&#MYI3=ea3=%TwvmXI80)IyX3g~Fpn|74f
zjC$A_l|$~D*aa|R!ItR7zF0)A>C-rmL15Iyeha?G(0UzOfn36I0CpA|;u>|R$7cvf
zhh(H5rnzBgXPrWdm|svQitDZrgRoFg*xs==Y;HOfWaivi)wwanN`3|zmc(z~FvC95
z)Q?ny(tP*4v(+b`lYjNWS>s-BCHEHfp}YW&Ww8LrL_a|kVXL``scP?#3TE;hI+TrB
z@OK1mcVOb>Ohdf1X7Zk@W*Af1BoY#Wmm!o+bf+o(yRcwvrBo<6pBX~kfq#hB(ty2H
zXB*}J)LH;}7DD?a3p5~&4?QH0$TNZDwKU;j)Eb+;yv?fsh<}*YUD}8PR77H>p{Y9H
z0Q9~(BP6H5voY~Oajh}(*mK8Isjbqb_GD*kZBZ2ijUK`rM}-R^sLn|upug+a#u33O
z$cNJHxk8*ZNko|(eG$C6g{f@d^~UEQa5>d8lXp9FU`3kWq8?tJa4ZMGLgZFXh&1+d
z>sU)|!@hm+$bSQwzgLJZSQP*J&iVj*b|kSbqqg2ybqUic(+(OFRf8gV+JAuP^!W-Q
z=3@T8_*fdnc0rfJ(j(VU)W=^Cf}m@Uw}=_7*cjdtq!|7bC}TH&drxKhX30>D7OK-Q
zP4$3v8E*lQwo+sjAgoG=V*ID<|LfLJSF@35n$`YvAb&)Ohqr|=ltD+`cZxt~fJK%7
zc$XB~CoSMjC^Kq33aCpkXJGA2&u~hE8}UJ#?b_ma&@)C??q1Q|_Pw6EmHW+Uzrg#M
zB2O19V}ZGmqX4~+dxnD9x5#Ij4Ez{sVdz=X@Sa-kji(2)lw`D0@tNf2{MU*R!R$!#
z!{{!t(|_1V{wUIAAB-^6M3na@1ZD3CI|Rc!9c$KBB0RpVeDWv07NpitXxIe&DgV3=
zkNwO!ICdgTld82N+}o6(I_fQ!av4Z*H3=GX-^=jhH#%8iFE_^?GBUJz1frM6BxKN2
zuCci+V^i2pbqh%MCn<KQ3Ke{K*vc;m2d{%BN`J`UWD8*(q&F5YB%J}rIkMq+G{nKA
zL8ljG4f%q)w)6)6ljwr+oe|X;X@zNlp=O+EG6>-M2Hc?4?Vh6_()FDs8*t3|=c&Hy
zrAzdM0gH41Z0xKX2WyRi%b|5N0b#0~EENWR{7x4`uPAjDCnyP3v}iZ)R0-wpOzF1_
zO@HLmbT0QF4<zQ+LTx$9mY=-V1e;6<pKxUH*4p=!^BR$wv{SPpPL}MGU;qNI&g|x#
zl;cTOikm-Anl5e$G)N+O8KEZ+FZgRz@`JxtW!(0DBz#d_5t*#NoH21MP0^;a52&Hy
z%>hlbT+c(O`QrED&k&)SYk*44VT>u#(SN{eyM&CVo3u8dMj*sQ5$7iyVri9ntXDk9
zmQE##38+ro>=(U_QIV}xUf6kufDSmk7SUv*k-B$@s0qesyXshr68J$EP;90lpqi_o
zSx`A>Xv_StXI|I*im0t7AXKM%5jzX%>(siH`chBJ;T}hBf&T0j_~Y!4GMo_Z;eSXO
z1YQ5;egZ|S#1YsdN5;8+cR(<jQgr$o6gsnWDSH#AF??8aw2bS&M}`nQV#2hJaD0ej
zJuyRXlMD{K@h4>{N%x!ste2qfqiq|zT)~l5dK4`4n4)CD`4wWg)et*nQt3#2%RlLN
zz<6PFn980kpPrQ4+TCGCq|t$3Pk%|&Q;>sC1!oeUxJ2^YQ9qP|nBzZpeB3+<1`%5L
z@kNv`=7<PA8$Q*okDaC1g4~W=GG}1m@!uGN2r#JRdMS`T=?~7l;u9Vlo}5dHJF<3=
zW6x)uHq*0M$&BHx9FTQEeyK`u>~5I`r)2nWwIf%?!=N5Crtr;G$=mk-uYVK7{iox*
zdb?6>hMLKT70VAhSivPyscxb~h%O(vj#0sgba#q)P{BvbseDH)oxtPr+P;cLujx3L
z>mxjMMnlg~k7_)vm@6z1+Npx@RuG8Pf0tk#-Nd;In9~Xxc8(o(qYs^>3nLx7R3L+8
zg~Qfgz~l>rT3J1*&9c-P(tjMHYZ!p*Z5K#O=jnF4YPE<>H*st3Hu>v^@Q2bk$I{kF
zH~o?p1*uvfv;Qt;B)ML;_VvA!X?)W3e=gqSho4*=<w8>Cz>U`q|NF(Kw&58`>4!a?
z)7AH}6I%eH!DFBMKblixcH16c?>r!ngyGsiPec5AK>_QrhN`~JnSZA3l!h4!{r6fw
zD!~u70iO;-z{*ZTzayxp0K5E@R8ku;b~1&U!4moeb{6*~GNmLk4#JZ{Q2RDRLr7vR
zD`)7&@fMZ4gzc9&O-j74CR}L$AkAk73c@#Z7zugolYliVY;gWSETASuo&2nO&}@Yf
zEouRYVd%lM96$8*aDN(%yr7y!S73{E3x{zee4E(G(yX=s;|)%j1{g{3>qVnwZrYl6
z_m%p-z81y+k!z}1NIR=+8d8Idfa`6mbJn>@!`=@3MT?fr1sH|-10pT0+>EJ;^s9HD
z2n~Y*pZHJ>L1VK|<L|G*aU_K2l<5qo@VvApK`Nh{p$s)B8-H?R4cl-nhdxp?#&scA
zn+~$MB@iTP7K~TOYqc}-QbrvVzBIvrb(`~rFrym#V_QL8H${Z@NMzg@SuwQ3fYXX7
z=P5%67Up^=1rlhCBNPouBWWxynQAPSYeD`R!etmfFMm808s^l&Mn|}kpClmC+KFCZ
zFHN{pzBbL47k{QB4hZf@xO%M!@(>9@LyM5<ykcS}!taCJPO6cXMYSH$fX}55(M;3o
zj|>G4a$;MdA4q5jENx2|E$DR&2W%SnZxpr1#GE)xbce5(pU<lBKMKZ*s{!qN_FdN4
zW-`8Ik__0SxAZtsTAbv};=Vvp8Q-NAVfJgt4e;T}NPnR1@3F08l}<iVFI@1I8FdZv
zTW-R!>-I)@3ggk(4y7s}UFStvNp&FPx0ZIezB5BjZaR&9VR#TI@WeSYK%&LRw((@6
zhqjjl3i03RnT1gUku|h(<87l@78o2*D{j=1BCOa(q~0x0l?^)8iY`SkF-1mM2hjLp
zhl9C;On*YEKoMjMZw`s*I@9#IjC-YFk;%oeJsZqG><Xgs(*V8xy`LOvMFST~fT$6r
zU85|xfmnF^v~?#4e~@=Card3*9&DxOQ3X$J_%?QES-oNoU61UNphtH2=fPRO=v!3k
z|6^X4*gzONnopcK4)#Ay&mo@O$m^USS-NKmcYpGF99)<=r=Q9ls(^96gIG+En_fhW
zg=|M`k+w0C0$WTV;V7`Pp4wYOOU#ziz?7yugt)o}s-(YG1AJ2Bx&6_oj<_{;Mapdj
zt#zbv<R0JnF3LN25aFOqxz)SN#uqSZD3yBXckn{rBo&w(7k%SB2k<|DTg8i~tawpr
z)PGglavW3PtzaW794W?m@^<;&z#_-d-=i(srVK5*A72J!`uTpPW3cU~x8jwFI;<#s
z{MjSc%E~K<IGWdO&l62fIt(Xcl7w7iWO)|NKo4GeY(ARhPtrB|0DI;m^Pf3j^Zv7k
z+paMr$UK^&+3(kM*HsaBXCwdP8zgHEUVrhmbq?FG>Al&60bE+|SkV60AfJPkvR+NP
zKo@gv6maG`M*E+yhfrM1F)!s*F5+C4vHxk-h#=}fp@1?n#Bl>9r4-4n^NA&uQ(;0X
z8z8{wi!@cnVZtSZdI{!avO`DF#b{gNa&2myA!lF@^Ac%=QYM_-AGyr<*Q4BSEq|1d
zBAA=Tb80*wtr%xy@#zbu1^sNgG0Q~n*-hN@VZ%6Xl$Y8yhRvQkt)L3Ui4HMh%ir7k
zOW#%mBKiHbHQlXM-S3o&k1U!GBC*MHXu&Y@x1r}UC5MgX5Ab{q4lo-{!i>)3F-;I*
zu8@Nz^g$n3wVfd&E_aCx`o<UVD}U(ZUnORD2nNZDaUZ~5-7k?9_{UYZPNX^awMR49
zV*rih6M*@^zSsM=&)r_XvTIbJDt6l{av-)wdJ<b^=Bt71cfyO%Og$+tdX@Bp!(^k+
zHiKyY$*-}zzY~k^c!z<K559~+tPY+NgaZNi#lJrmpyfF%=ts^L!)Qk)?|&CzZAtu6
zM_Rqp-{9AP+=D)>?Rfb#sGv{x>_6#mMh!IWlQUDR7x20G0i#ukSQe$nK+v4{h_m!d
z@l)DIf;ipTuw)gL_7zWM#bEs_nhbN9c?Jpu5Ab@75z+8HcpAXJGM6n8e68|SDTAXh
z8J}?rfC~aKjlb3fDM<W6gHKSOp&ojP+obmEdA{C9YGhys(bVc2GkqI4eR9p$5p|X|
wfy3Lbz}dBgB8Izrw+6@ZAi@>r4XK)Vk>zPvHW{Kuc23C=Yj)%)Xzs#cfV~@KD*ylh

delta 3253
zcmV;m3`+BfAj}_-cmcVQd6f~tZDe6|5&#MYI3=ea3=%S|vmXI80)L$EoRdP)Er+K=
z_^Y`I!-0~X+#U8v*wKm=V&u@1{Zna=>sY^`#7AaCHhAXF<jIf_?<)Tak3xKvdcdZW
zR%f2O=RBKl-#VYZ{5cAjtjdI2<=G&r#_KnKn&_Nmh{nKcadg)s1ii=;B7@tPDcgEj
zS-6Pwx{wfnSa3P(0e?r&aHT-ET?OuFe5#Sp5d<b!bMq<Ou@ms<G2Zw|c;08QT^;6(
z%s0bCUJJNlfmY=&*#-maNBiA97@n4auI!8~@TS*p>Z~b8)%L+{4-QnUnH5$Dn#pbv
zQ1|2m*4}*Hjc`=je!+?NnYOI@$+^lix`fQIA~ni730#yue}5`tVWNc$Yp^hyRNHFj
z9_l(eVp>gh;&kY7*eF<N<#Ps$jdO?cp>hOhxe3(aMKPR+O%+PC@xj(rB(&AHyA7Uw
z45bPjZAP{t6+Z+oz6T^wwDE{(Mz_Oy>QJRZuO@<AB@oLz)1~#;!cW+NyP-ZRav+?w
zS{X}eqg&cu=YJdiAKqPNFSzH9O9HUH+uy02tcjPhUT8YSjwZ8pXiY7cW?)8(1@=}B
zB{Xb=_k-X{8qqV@US*9WwjZM9&<WIj6?tf22hK?C45-On)<~xksSm_T#9+!XK+3S8
zADf^YWjxwT{-yE>SXFOUB5y=6uDj+rSKsZ(H<}t)zJD`RK#r^P;nz@+zr-L5WG?GO
z%q(nGPSXmq_1L$ApX9?nj9P7ATKX&jSVWGEV95ypD2ba3VuG8tUr5XDz{PG`%lOYK
z8ni9KE}-9~AQ+rH>+$N-!236Jz25Rumw7%0>xhR&v;R&%R(ERYpr89vTZPo1qzemQ
z8V7&=!hdA4laix$x?qHUn<P0LQLXEf8e76)(1?%ubBVEv>aLc?)_Lh#J16V21Hzlt
z=OKr@;G5`8D`*DkfHn;&Cyb8KMAA(hZR*VhC6VLma`E*QfD;aI53wBkj!^}1fJYVM
zj6z0h_ic`Vj8)I*lC@pPVWvM%c#)!erQcdX4u5?v10LI0puPsEq7Ko!#4MmhM^-p@
zyxkc(a4B=^4rYPa3fF;h{zGOegNZeb6(wB6qNQ<%Ob@)>q$-P~4#yhswlH!UTGhQx
zU^%}6f`t^bw<t16&HRM0H9y&xkHW(PFFN5nEN|Ey3AJj?UbKqj4I{IDF=2c92N3O?
z;(v&ZR4^j&&Q|b`d^W3EIE&T`331fb_5TaPospT7xHx?@+5KED-<XhvrMRcfI&s{9
zk1Cmn?^*lb=kBoXsIqRu6eLzf7HT+VOJ3NJ-61u<446D*xf(Pa^dOIhPHkx1EX}k)
z8hzyrys8cf=RtBlDVlDcJz2g5bJssJk$=OvHFIzS$st;Ysyho!`Xv561y>)*de-q6
z!y2Gvm%9D7Pvn)9tQ(mTe&Z|VvauL*_`}|#f<^-p`BPz05&Re0@Lw!Qk#6M_g=nk2
zSmhXuQn(kQU0?eRx3d&!5gqK4m@_*2?+zGQ?Yy6BLE_f}aEPwFnO%W}!W&1$5Pwgv
zxJgp2G%=eFHDPsrG~TqZox;qe6YGMEp5K!+N_P!lceM*R<Or+fx8f_cpmjh&JCB;>
z{^?W(J=YLH_V2N`e(au}4RK>=X}4I0qMOzGdfK)1{C^!Qp)%oSAA9$l*I1AU0*g=@
z$wT6jY0Z<$>h6UQ{Mn3BQG`Z7zJLGX)B{e;1w+mItGIRj;s|5G)oAR_Zg_dh=hle^
zZ3dGq^T}RJ_lSuyn=tSp6X{9-!kP&Pzm}l2)YSgln>Wno%EfNnveiA!#{0z`q#Aq1
zFewV&$!Yz&WXsq2Qgn3y9MRdofZeJ`pbd)+>j;lEqw+nVA?Bb(<3dPr(|?gNtr$}L
zT9^VA)+@zvRt9!RBcMmhxtn#C(G0y~0Q-o)F__w|<L5ss0@-NT)yV&`r?KO4{2>Wd
z&^nb3_e4po;GF0Lp5J@vNFlJ+!_SZhL0VBw0TsXFgsf5yol(eo>l{@3v-I2aVLD{{
zgf3WCheErI>6pRSEqkV$jen8Bs&gRX{|;nJeBlA2$xO^nq#RkZqml-H73PQA{ot1(
zMj3<Bz&I4|RR0AbP89H$Z%|IZh_@;xxQ9|LQ_+}8naN?6?f0wJ99ng;sSB5rBT#@Q
zZ+r?;9mZr|i%0`wZwR?$%>rs1<kdk~XZ)4N$7bTCzIxvLB$)DZ9DjZ|Qw8S;#pg*|
zwNv+NN-lSS1|nE9+4(m2IItO;bRVPwtxQW{i>vSv9$U~_*S+<OLq*0{3<5@e!=MY8
zbM3u8d(U^}a(e0omg^`Tq0q^2fxg4d&KFd4dg`U#mrQLb&>pydwh1nAas(OwaP5E@
z3l;gFb8kV8jKhj!uYUs{I2NxXt!#W^_VIY;j#Fte1vL3Aj*Z_If$uqIBUKf(IUF+X
zc2o|U<|#~)RUq|N{+d1hjM1w)-J&aM?pESL2+dNU2LZ^ld9uD2IL}6QGTV1mTum;`
z__m4PXYOqmWrXj(f<)I*qWhPV4EN1B=@_w$NM;@xzHkYXntvTCQjA1-WTAL(2w*^T
z6z`=boBi#!*Vize$X_{eA3IFxJFk!9H}TX1;S)fQ)NV1)EvN)~)6AX`TrLu@VFx%H
zh!M!iH%e>oR@@(nRJ@i-bogwOgW$6}UU@d>mZ}lwCIb{wQACiyST;5k9<8f`<57-*
zzRo94(PW`>iGOTaHpDBt$^+^44)ld{Z(7dSABd;~=@*YBu*4s*X*S!q4{P4tC6YmB
zY?h~yyC@|Q&TTBP6)uUo7t8(m&j2(Ahj*V?{uWT6bSUj&o&XTup(^c}_VnfEmh?bj
zi_`Ol!BNuNP0*+kN-}-w(}B~uCj{5yQn~jfIm_1mlYgx0do%tlj?)b%u4xt+wh#^d
zL&ma}6jGu_PBNiKX&m;K*44k-$;#1MU)H(nm!C$UM;qvhO&8l;<$aa<Fb~TfrF;sp
zNAYmb;sqg8RZWdc2dA5>{f&i&It;5Qtaxv_z0^}Lqkv$+&jeKN2;B2CCziO3YSLm~
zZ@%aWJ%9a`zfy>tg|mJh4=Q~e2Bp8>-8W5h2;Xc8515zZeF}F#+8db|QVQ2E&p=!<
zr?XYb9d*M){Qef$|4*r~`$*zomwNDlN=Wtm*@E-MTS0?Y^rC!_e>c1aHq~aiR}08A
zuDlpA2fA7y;tWV9c)dXOI*jYw!j$7s6lmA5&VSln`MxTTvYW)F$ScW>!}@v8|E8ga
zA6YS93`JtPY{SC9ag*d_%mb?$UAw0Xy@LbSO8Yu+ONITA9b7<|q8;|k#U9ejsM!gp
zm|qcz-^*cz<lI&429o7wTYAnXF*)&bF*|RlXotPa?vC>f5|OWga|5ioTP5v-6*vmO
zlz%93dQ%P>RmRm5T$Sf@qlClXoA$j=Sq@gBi_R1v06Oo)<VQRR&>volGdS-@dWopW
zWg<DOiu>MO;enHo=hh3_!Iy^qWlG-aCJCj4JseFt;+Q$DfvV6Pzu6IN2Asxa&;wh~
z=;P`g7&tC>pWtPrW&5LP#;-whmOfJL%YT%`9~hlg@Hb%5llq*}kEi+L%?E+0$t%}x
zsB3@J;<wuO#E!O%V_@-Lif3Q9BgMor;?p#y<U6shZ6+qo`9RSFBR;9`ofL-vjDbx7
z(jSrSJstej%Ljtga%+ake-G?z*?J<OU&qtHbBnT<R!K|-#&W$ln9Zi7ohf`d(0?_h
zVe5<f?|<FNZZ0kE&ct&!B44RD($GrjTUN2R>Y04l!Qy7%*ORBbU09s)9`(WVk=$dv
zwoBPS9n}OJ)G}cv!+Hf~D4Kfq9q!9}d<!@3it|UIog?L?LQmC{bIo7LjMP`&8)z&H
z+_B!#a%n#z4<EA&<RBQOkCTyPD}UAD0UyW)#gwD+B4*-+N@R0$oGS!E8ZmqXP(-~q
z#DQj@bVZ0<Z$o>6oB}X<MM|US<9^Or&F-aDA(#_sCA&2E1nSlxNJl-0i1W#Z5F8kB
z_#Pd=u~Imq?K5B|x%SvlLoI!!)T~NY^^+`4^2ZV{0qJ=48gG-i`KEDHAAh>WzW;sn
z(V+<eg<srcY#~W9E*z=Qle(iwpsZ6&$=>Qg{)j>K<gzGhAy?x&&zx4CnA(3hOTU}p
z3Xl4dYs8hI2ptMAQezsEfKq7BSZS1(Dr>mqIPIHFu9Xl^DjZzqR_v`};Fs)*4s)VX
nLE2_%r=8MZVXRk|+aD9q<r0l{BLStlMuPo&ra3tnuR=o7Y(iv1

diff --git a/doc/check-perpetual-license.d/notification-02-renew.avif b/doc/check-perpetual-license.d/notification-02-renew.avif
index 21dfde015624199776061a72e5c160c90d75ba88..471a22e4ede197909e16b69a1999bcf0fd302cfc 100644
GIT binary patch
delta 3232
zcmV;R3}5r;9<?8kcmbl3d6g2XZDe6|5&#MYI3=ea3=%Sx9kU<-F#><$ziPKfzR9)l
zKo5vdzz$rbEtu=I;rgJS7`Mv^mEAgL5$G%$n6JTi*!mAct57SLP9P4#!+b+dwHWN-
z2=MHbgY?%dEe!LhQBw=*1o2&U!Vq=}3L6{NCe4k)uf-nT9t2zz08luVS=t|`x8gN^
z($tSsgVKEWytCCOpOb&}!CB*8ZzcB@^`X1~j%Bd`$V5Lu6k)5miK%MukP2q<9Xgba
zS@3rRZg*hf<xE4ov}W?2s%98d*(4GYf|ntbPIRX!{kyPWY^78vIiDFr8x->2!?r%0
zCv-DPA#lr0?!uT&NI5?Im>j^T5|Vw?UwTc1elHZkeqM};BOHG-K#2a{McsK}*IB6G
zcPTF;Hqtf`a-`Y+)q~1K<Ehlv=~DYLGqtv;ih;(DVGbS#ndsTZVOgg4BneG2X8}H2
zkAj8Gau-hebB_SG55JjinQ+1{1^W@Jw1~@wVU*Hv^P0e>K0_`)Q`6}MFW}-R5)Dmj
z32nG{&!?As(rSMbB`V@#IS4~2xfdas;)?#Na->+w%7hQ^N33FJ=m*UaH0fDJ2Lgu$
zsDTPLT4fX(hp!AOLm)MN-Y2&+X=9puc|!S)%pE3mT7?j2kq?#Lz}^RH=LMAmgl1Y-
zm$HA0c=A%8)Xh$Z!D$J`2&URMM2E(>ncvjeum&N%3Gja+i8l3l1Bgl(y!~&)T0#;@
zDukH6ZV1!b!9Y_vR#zc77mDmwl5`y_Jg*jQR!ldxM)WsU_$NUx2e;*m-Y!tK-uH$*
zK~x;pSNgHv>dO)h>L2F@ifg2vrTH;xve<QZK`3;mq*C6x55EpZB>xLCxU&ghH7s&p
z`pkJ-)LVaZ>;o+p4mL7RI`;3Y5+QshbS2iD)IeUyRulQ7DHp4~3haz>bXs2zL6BjR
z^&V*V&bpD)#UnB=TtjHRqK|X+q9<uiSorM4IwnA%VeZX?MM#fnSj%>zAPewVfn6sK
zW8}xnD3}7Zkv;L=T-mrpA{Ps5=BN4itLk%tQH6hPEo-LHp^gSHsRf}n8COlI^NC5)
zU<oJ>u*`(`>(mAA6--H$_q_fpopO=io6ry@Z`VW!{kvQye9{2qCVfB7HU|-cpx_Z-
z8#R{1mCzY<j&>lOo-papUaE=3=}FfTEeRxh`{V*n-ew<K?^-5thcM(sz-vYzY_W1U
zg5rPkX2_r`XNaiQzpWfK4}wVFrlr3^@5-C|)=y*6L>x+<G|_+rK03Td^!WnN*U;g8
zV64^(S){L4fBeFa^by=e%zC#evbm908t+B49z-8D-c<=5Qtzni#tgSa0Zt$X;dmu?
zN0#`|v+QM?S&uCb)18`5$lAM8QO?I5TBm<y-`b*|`Yhull|K~139L2(yUV!D_57|>
z!fsaY<>Gm~y3`p2RkhITt~wNOIY&PAzNi3*H5ug)u)cqEwpp0dlH-vCl`IbgS$Rkw
z;e@j1^8P#I7bPKgtkf$jzOVTdL^i`Rye{SP4sIYQC$3D}E|^F<vhr_!XpjDU!EJxk
z(bY>*)|YehxKJ)lIf2|sk5u~3d<%g&G5s7_)1L82J@_RjA>%)eiskaB?1y>#*ZLL{
zjEe|-)*OPpyTRp3PD-=H0KuE<hTb%YYGa0%En;bSNn$8<pSLt#P=kq3r6-Yibt5Ft
zbXwR!GG1i=M?w?5F-v~K9UF{99k74Wl6;Fd(#+z;A<vfU653Ax;0br4Q%`K5xXB`i
z@B;d~ko^FW<vI<cYetK<Ej%R#-9Z6FL#r0hG`PF0YA?w0($C8;)lXILc6t^dT!UHe
zEO6SZk*Y0fg_hm>U+i9*8Dg0{7%DV|0Q04nEcCaO(dA`MOZd{*T0R)+!ySK%buMx`
zcg0VNWL!;F%AKcz#R#J-YPD4UeX?7otaX)=CJNWFO&7-uu;41pSPi@Hvg{>&c)H*V
zQanoSJ)9UQ+qqv<#M4Du`3Uk1B~ubYc={7m(usYqLiB)ZuN`N^dQ!a2v@zxQ5sg*I
zr^V*>QFLLeCvrP{`Uw7m=-Yq0)v`6b=){AA#0T5nd7@;bD6)R>3^Q-&{?3Rz)REK2
z;;OYnt^~&m)5-oZ%4_Nk!*;YjJcCmwD3ScSq^X$5i<>cDD^HTmN4^P88T?1)XFt7x
z=>uo>o?awsF<fod(tg+Im^F~ji9nZUrEql>Hnmbh<-N)wUPd-x7$|@6H91#Rzx9A!
z#kPp8^=?g;jf-<$%g%c(Ub1WyV6P1{h=}`~FURRG&+Ch+PI~8lll!t6G#&f(1pGrn
zM02~Ka88p`OVSQ#;watZJWZ^6QQeJ5H_80vlyIix5BxK8znaRjr!j#2L&>*}+(kdQ
z#|g!KYMw#w9YyIQ-)n!L=Szx|ddsmy=_^x^K*`qMqrW?p|Bw7|^Wh8#eZcMWjTsXS
zKDbuG<24Z!B6|_pz!08%LewBVup9Ss0o$akrdl=1>lZC&y6rIWQs|4yzMg{)h>4i4
zQS@hOn8_L8KQRIiE3QxvOZeFdVU=^mez~N^J@g2kL2LqYrRRU;@(oiqvg{+;NBHWm
zxNWWx@BQ>#d5GYd3P?A9yApHEq0XChR(;4#o0*0~h|JVWq;*1*OH&Owa5Gm4*+2%g
zbJt`L31x(!b*pGOlVnX@XhtfF)xb-A&P0`=_prJu-r=yq7zM!$^w8G2gv#ALyZ)W^
zFk9k1u5KXAdA5HH6W%ukqSf}QpDTK|8!i_a{$Dv|bh<ogRyUk5LH|FPQ6mdSLD9mq
z;MwImKaV^Rpr%if1|=@0JaLQV;^DhXc64PH^DFC#M)lh}=@s=1;NuGTs2UvDDI6|f
z0pjhX(UrP^Bqy+~oc=W7)O-=jM`wVdyw&+Uyi6=3?^l0IHp084V;x0(5bTu;=|3xJ
z4-Biec8#0RCgq(|JIKd(kJ;dk43aV||GgkizVZ^VM*10P5`odPIfewY3N;t$?`;!{
z6xpqD!8TZN7hl?=>AhF9X`>V7`L&wWfBtro@4xmZM`#Th&YCB0qIKYuwmprP^hk<C
z+81~uCp>@LAz`NIW;iMuK^T4E`Aw*zocc&e{$3(3P0Y=xhH<<wI0m(G)1A{fcw6kR
zkmyzoaQG3vwXdq*xs$i?G2lyh1v!~Slv`Mbivycli-9mH;X+mAag&=G%!rXefi9;X
z=4i6abVX#=vmU9b@lp5q&y^P2j`#yi@~RU1TL6EqON1HsRv?_A^b3L0osg(pt@Gb=
zwOb$^h%t-6UIR#z-zX0<6FV3=cH@r{Z278K_z8IFym3fLsp=L1enN5I{vXJ$vU%cb
z=MqMGZ~i6MrU@d-6s0W;X}pe;kdc}5AQ(7o15`Bdy~4AWu!P2P(942JPtc5dgZKeZ
z<jH?|ET-zXz(g@V;ib?2x8dF-(zH@fK_hYD`R#@AuAj8D{Pb+>$Aq&QKD~{fnpUG3
znS$5&{7lmG4i6z`j(Tgab^pIT8o&AkKbd3IndeB<M1dFhtPMQVvri6RMQpha&0xn{
z0e7MoA=g(OE@h!2U%HXxkxe-s$q^=;1Ll7mk&>@oqY6S(Uh<#gSHTFiML}nhK>%co
zlK+BHvu$KDSoi=35-%K_T%l`UtNrpZA6?wM;4QcAp;dIeC%}!g#L0o&&Sa*PGTy_n
zG%rL0@=+C69rmc^kT6`M34-xt{llZ?olH7*@#5UdLO5H*w~=g}e$dv{Pl3++o(q4x
zaM1p$#dmA7zC7-<&3>9$$2U2eMbnS#Lo#xRG5e;W<G|m*BNOCFx}FcP4S{)m{|d^q
zFD0pVpz_2Cn3p(3;-Hioy`Y5-naH!i>40S4;{77$s`W$7w>I?59~17_>`vPr=r*^d
zat17DwQPH4l+VNlP>TP;NeS)zqFsNf(%1{1r_iX$B>-IA^}3k>9<gkgi{6vAB#2N)
zPO7?$0-Fgg*+TaE+BRckSU5B%s0>U|?8UaaCPbZp4}Xy%${jp4_szrMcycx2c)W;3
zY*z-0Vp}0Co_bce!$Zto^BI$~u=ga#3!C3`&8^;3xofM9?5$4p?ftC>z2<z@T?dL)
z!;OtktudJ(Lu-s-JkKrA+w#85;>EzEHu8aJ`F{48#U<B;2ybkL3oLU>(tAT3g2VSh
zDAUf4F>ms5<{7m>gJzus`pE_uF+gyYZD>B;`Za;L-7VPMEG8MIw6^-Y-nETemi$zz
SW482}fv&9G?Dwa-2i1_lC09cL

delta 3155
zcmV-Z46O6DALt&CcmY+Bd6g1fZDe6|5&#MYI3=ea3=%TP9J3$+F#><-mUv!52O&!A
zctL#IG5bWSk=~%5`Wf_0JKyJ+z0>QZOME1Q2sQa32M7Tn>Oy#Nsf|&A3Fcl^SMlcx
zL%R$#C+gvM&|-uzYUIcJX<Nf-uLf@QK1PZ@)bYAw@9#OWYi48&+@xvt!yUfQJ>+%B
zE}Lim!y%+h&Oc0ria>u!m5ytreIKks{Q##=PnX(tiSwarA1r~bCds=O<iXJw<$`F?
zD81L#YNjTo3`(*olO9rxUtg4O_aTLRB>D&}t|JQzP+DNjii#WZI3yu5*|4Gk=;7m8
zV1B?4pxS6x1}fY_QnysG9vfHI98$7WTmHJ58!@Y@PA|q3A)bGmL<a{@nc<TRn!)d3
zp6-nrm@@jDa`qs^{pYoBqhI;NapHc|{lgz1gk#mTnN{gBIuK^FcxK+)n)QzVm`5TF
zg!bHsN%y_w*_Fn!H-0DU+*0c*pPzfoA*bY48Xn3u67e<fIqSXDGN&+?veD%TC7yEM
z<7&KL=HM=1WDtKFaC4(S^_}|lZwj^m$<)p5RuOpu9U!<oM$WbQW@mHME9O07iM^_p
zJo@&K&=8h5!Ac0Y{a@d;{UrU?Q6*k%(SFH7oJOJ6B9=B_Dtl#MhOT?)G$cF*J|6%>
zXY0+*!tAdnqauSRAvKd3+Isr2?uc#bZo*tC+Lg6YVmp7tcC!l`UwrERR&|?~(?ea2
z%(3@M#k_AVA1t0B@`KOFhb!wPbjQp2<1((CE?70|W~;l)*qWC2_NV$d{*aEMUk6KI
z|J@3VY<!As&%(nXJ0V0zjnS;8d_E9C4?Si{W1%MYR50j=C0=tbPc^J((dm4mW2&sc
zs4LWEO}l@U+oV(e63>olU@$e639PztdMHI#3j&G%?c~9xWw(e%_}<Y;VVoQIwv<P<
zSkx8z#qC2}>P!z%a+jA<98Wm>n35YWpk|(qy-h*cfI6?zx)DcRPchHHbMHgV;l)Wx
zy;N+voG~uG0@}Xrf5m&XYD+0v9CI3qPsAc1lXrhyA~5iLV)9w_$Zk0Q%ffVPVq8N3
z%C`mbY&)SNpwin69V8YF+qqIX_IvoA`cIjv!tQ3myo4t_3AZqQ(E4q30b`g<fJpN|
zVjG%Wn9@eRUu-!xq4pZ00%|lu_%$od1~Pr2pRPp#zcLVcyu>Ib_RgI)@bTZS95pVJ
zc`1Ju<AaGobn9C-Cxvwov}~!`w04PL^H#qyQ{$V1L==V}m@@r$d{F8tg|;f%O@NN#
z>tp%z=8U477|XIr?Dc+1#fmEGXtuk|?m5q%YRW|`0<7TZHP$<c(7>^`USg{&Zy{st
zN>)t@#w5Z;!ANQBNO}kS#(gA__eg#;Zzz92Kbaz0`HSF(9I|vlmNTphh?ccm{|-!U
zy!x&Ge5I~6hq%kB3tc9^ZYud+n(OtL9`h2M5z$#m?6@?l-4yMR`N2jF4a3m%@#Jlm
z+Z8uWd@X7pNBsGq0|&j@)rbx;iR!#Uo~*bdQpHorFhl4MY$oj3N@b__3$7ja>)C(U
zHnD9K4*|R4au+>M;&3}FgLe@h=Smf3!2I%&k|x<7DG>fQkMnGOeUj7x>4jtzd{eem
zVZTrmW>;Q<!t(NHFnT@a?MjjbLs(dNzdoeK$YSD(3$!qnuqU=~k-7FXa7U(u%1^Gj
zp8LVOjySH0kZG>S)Ifi2d_~f1Wa@veyNo0sBUhZRDZ!Mxg?dg;>+x%ti&5;aEPa7q
z<+_rc8lCY(yXBSq|G;(xVg0aYRf7dD4w!)mD&#2be(p?`h$=5AkxV0}CulLx*|fTe
zTG&Zow+&e88&#8r!<vVYYP~}77q%>ibRft+ohuWbU5bRy8?urw)suavH9&vf0T+m>
z_pa7>ne?g(_8fNCa&_A|%#Y5tb$Qs^5-hY^bNAyt7A~MSq9MoOGu%Lw&^Zun(84J*
zi9Sh^5+@h#QtIe7yQWg-0`?Tjs*a?+Iaid5bQQ4%nWAv=uyu5MtHpGxA1S$F5mvCI
zEtIpei=mpZH@@GBCE>{Au$+JCc?d~4-U)iFrA+ydmY9v3J!0P?b*J4iKc@0hCIz<E
zqT0LX9rG9Ni>Yv6jnX63SCpri)yfWiPqW&E?aBKqA9jS@-Mrq(MU9#K<K*_q#rA|_
ztfL$o?tM~|QXn4d2`Nz%z66tMvPIE|%1#%PM;ecHzHXa(-C?0Sp@@GdlguiB#Fjtm
zvLXw_5tmGI2rQu^3l`3S%ktahL#4F|pFyI_okH~ye)Z-#kojTloXE)80diGCJxJGi
z_OMr&gL+r1RZbthD{w|r9Ku38D9?-QLsbFoX(#j7c$+n#8{|ZN`!ky+(w{>S0^Y7(
zAuS;OC|3DNq9K3TF{OVaZ~|p>xuQ?E&qJR~{3HWZ{J$IowCBssIw#!fx+ZLgjEYjx
zhPj@r)D3`Q<UcG}CH@;cK1h088$1g4UH>n)G_3LBZOa?QauXS61l~&yUL+5@#naUO
z_<a`^;;CDOKi!GzOrz1peYC6I?=9^5U3dcNv2m6$<T<iCJ9&SrHioI8Y@Mgw|FVXZ
zz)7}Qs`C+k33fT}9Qv88_1N-uK%!jHrOBhWMMw7C0PyJ#Z>)rP>RiY3vwEpr_jhVa
z0&49tSQ}OE-3Fe#Bk#lMUXgX*7X&>sgBBL_{JO7wY<m4$Zg8@c(A5bk!_nG2L~CN?
z8$L4qMdY{cbBlkmCCFTRHVE>T)ql_<p<qj!;jMZ3FU>0LvIex%-FqghaQoR8bJ7<e
z>DxZngob;yI`eY8%ekq#C?qk*Q>K;mi0ws~6$J-E(3g$xzb$ow2iyDw@&M6}E(k)b
z5gf&L@q7kHQdA$wri{I6DPciZG`J)2V+A<%wn!zVfUkeECj~?xgqEmNuN4@zU%yfj
z6j(7lQH!iYNswC}E-fP4?EkHJr96wxZOzwQ^%{)w@P2yMYEEmqUex-P5Bl0N9sa~u
ztLUhqc6yUbi+~oxlk!zB@wgx?x$JBrs|*Z=g+Usx<ym)Q+&GRE#6$QRXJ7os3M$4e
zJpShQe$9U&AIiqBaP6>7GS2G5_CHa60|D@(*8w>H^}55f2fX2G9NcLllD&rIbXwmV
zQl~RgX}W}|=<l_9Db<?Qk<t3m1)c-AY*}o`6+hpKS_2SnFu-Vp<7-BFT(oua%^gnJ
zJT7waVIo&-;iK=n;NJ+SAe?Iq!eM2D)#LYU9CUvvLx)#67F0kSIat5TvXrm`KuhPf
z@0HT)m&XS7L?C=0VLr2bFm`U)2qTUt?tdFlLde<p>tZAZ0ny<n8~(FlwpP<@#GGSD
zu!)#;d5LQ%mYiv}CI-gghq>@3t#Fz!?ASys_6HWg{MaJ{gbJO%bo$w4t&cnw_joso
z1~Px4ZP*BsG?{RJ`S06Uf`LQPJdf$cMV*(^Pp#woe>7hmwym;f{YCt?gBsc(is}`s
z`Q<ZIx09W>oCJ0gCn0w4_IL2cU-zW%u^eJMmkvl|#xK$dR*DA=Z#la`PQLbbIU^^k
z^Q}dYMF_#5e4TPV#owMo({B6<sfs1`qKbcyl#Y}R47g<ceEl)g@6_(7MivigN;FP9
z8ny&o`Bo{KgWwo0?e`v=K~TK-`o*IOAg0SJ60&m-NrFYgzp=mo@70OqBQ^KVht-|n
z${pcru>t(?71{ivs;dX&1R7hk8t~3xvdqsIK>^eMV9{2Q#R5Y_*wx?32PVpC-$j4y
z+m|*dkzq(<hQ3eC)MC{X-LYVx@tb~yj8S%_^R5TYlC2{_22Ai=jsP}WljM42ft7u-
zPu-YDlv3*Gj91Rz*iWH*YWE=Zy|PC`?~3$c*)%%c1U<Mav~nGETifpZ1KB`i;z8Ok
zzuI*Vnp~dz8anG)loc*<f0lw^EWLkb4}rm&;!h2al$eDxOVcqkSo=YjX>=SlV$+h6
z-Ei0v2M>xNS`+;T33bCBaC;Rze4rfh4L&%!8rdGP7GOOgU^$td1y-Q?XgoAtHx6YJ
zkLG8&ce43^6@~p=284J}&b8D&MWIUquA{M_V(poWilNq+;WfsNkuW6u-+C|0iF?s%
tE|%W~ueTlFXA8G#69oY?%Up`8*lK*kM!uRM<S@|r4skeBQiJQa-3W&FIimmo

diff --git a/global-functions.rsc b/global-functions.rsc
index 412bd0b1..75eccb9b 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1704,6 +1704,7 @@
     "mobile-phone"="\F0\9F\93\B1";
     "pushpin"="\F0\9F\93\8C";
     "scissors"="\E2\9C\82";
+    "scroll"="\F0\9F\93\9C";
     "smiley-partying-face"="\F0\9F\A5\B3";
     "smiley-smiling-face"="\E2\98\BA";
     "smiley-winking-face-with-tongue"="\F0\9F\98\9C";

From 73350ff3f4ec431f7c14c96b8be1fd6a92064db7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 1 Dec 2025 11:25:00 +0100
Subject: [PATCH 964/988] README: add missing space

---
 README.d/04-import-scripts.avif | Bin 4805 -> 4813 bytes
 README.md                       |   2 +-
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.d/04-import-scripts.avif b/README.d/04-import-scripts.avif
index 27380eba1666633b70e4c4fd2746d27ad2f9205b..c09949ab604d054e2d3d2cef93faf466e3bb0216 100644
GIT binary patch
delta 243
zcmV<P01W@dCCw#}cmcYRd6f~uZDe6|5&#MYI3==ttP(P<vmXK95Pv?{QUWghjydHj
zZ0$#)rEDd5LrTXNoT^r>GHHeuB5)!`^u`ICf{patH(YybZv9onpVOe!uY`)F9ct#T
zI*j5LkXT4D;4*(S?>Qer+I*$-;Qu}QGK-}fDL$}Iu^5#pqV?ic@Qaan=Fwrj1<6lw
zBfWX9Prwvgnf4fn!ceb30Co}{`KmnG=7Vn?G(PB=GD|`TdXOnkIhMJzLF8{`FEaN8
tW^tkXA3eE2DXf0gKL#F<f2(K2U(eWDXbs%mc3M7uSUPdNYc7A`TwEhEaZCUJ

delta 235
zcmV<H02KetCB-F>cmcAJd6f~mZDe6|5&#MYI3==ttP(P%vmXK95Pv|Kv}*>`Dse{r
z!Yyprgb<4s5F#FL-stO0*p;FNSZs6sZ}4+&9BeBhs^#Kkj~iDlEQlfb?nevOz2bZn
z_Ol-&ML*v|s0@&CDm+x-K7`6tmOhe)dwPNXz{pIqhUt#!?2)XUoF2Ea|CnzG!Vp=!
zRcl}V9Vf|59;W=ir$_?_1Rf%$J}Q&oAtZd6s9hLFlM<+%(Cnlhb~helwtnj|F@`iv
lL-(7Q=O=+C8zh6N%|OX30tBS(tu-w{kcY%|Qb_&3n>?&VYhVBX

diff --git a/README.md b/README.md
index 0aedfcf2..d562ada0 100644
--- a/README.md
+++ b/README.md
@@ -128,7 +128,7 @@ date and time is set correctly!
 
 Now let's download the main scripts and add them in configuration on the fly.
 
-    :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={ /system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ("https://rsc.eworm.de/main/" . $Script . ".rsc") output=user as-value]->"data"); };
+    :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={ /system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ("https://rsc.eworm.de/main/" . $Script . ".rsc") output=user as-value ]->"data"); };
 
 ![screenshot: import scripts](README.d/04-import-scripts.avif)
 

From c0678f0501dfccc56b692a64439b4bd1982149a1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 1 Dec 2025 11:25:28 +0100
Subject: [PATCH 965/988] INITIAL-COMMANDS: add missing space

---
 INITIAL-COMMANDS.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index 374f7165..e580bc53 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -41,7 +41,7 @@ Run the complete base installation:
       :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={
         :put "Installing $Script...";
         /system/script/remove [ find where name=$Script ];
-        /system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ($BaseUrl . $Script . ".rsc") output=user as-value]->"data");
+        /system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ($BaseUrl . $Script . ".rsc") output=user as-value ]->"data");
       };
       :put "Loading configuration and functions...";
       /system/script { run global-config; run global-functions; };

From 240decf4195993dbbb05dd39cdabf0e2659a18ed Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 3 Dec 2025 15:43:58 +0100
Subject: [PATCH 966/988] check-perpetual-license: cross-mark on already
 expired license

---
 check-perpetual-license.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-perpetual-license.rsc b/check-perpetual-license.rsc
index a88498d2..ff775c3d 100644
--- a/check-perpetual-license.rsc
+++ b/check-perpetual-license.rsc
@@ -42,7 +42,7 @@
     $LogPrint warning $ScriptName ("Your license expired on " . ($License->"deadline-at") . "!");
     :if ($SentCertificateNotification != "expired") do={
       $SendNotification2 ({ origin=$ScriptName; \
-        subject=([ $SymbolForNotification "scroll,warning-sign" ] . "License expired!"); \
+        subject=([ $SymbolForNotification "scroll,cross-mark" ] . "License expired!"); \
         message=("Your license expired on " . ($License->"deadline-at") . \
           ", can no longer update RouterOS on " . $Identity . "...") });
       :set SentCertificateNotification "expired";

From 830693df79df83c6114e3c8c5878a471d1cf43eb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 3 Dec 2025 17:39:52 +0100
Subject: [PATCH 967/988] global-functions: $SymbolByUnicodeName: extend
 special

---
 global-functions.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 75eccb9b..4bd7128b 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1717,6 +1717,7 @@
 
   :local Magic [ :pick [ /system/clock/get date ] 4 10 ];
   :local Special {
+    "information-04-01"="\F0\9F\9A\BB";
     "large-orange-circle-04-01"="\F0\9F\8D\8A";
     "large-orange-circle-10-31"="\F0\9F\8E\83";
     "large-red-circle-04-01"="\F0\9F\8D\92" };

From 28b00e23a17b91243628b95d50b76bd4867a4fd8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 5 Dec 2025 12:02:29 +0100
Subject: [PATCH 968/988] check-routeros-update: $DoUpdate: drop message...

... as it's either not shown anyway (when rebooting already),
`packages-update` gives reasonable output, or it is simply wrong (when
`packages-update` failed).
---
 check-routeros-update.rsc | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 8b80ddeb..e5b2e181 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -39,14 +39,11 @@
   :local DoUpdate do={
     :local ScriptName [ :tostr $1 ];
 
-    :global LogPrint;
-
     :if ([ :len [ /system/script/find where name="packages-update" ] ] > 0) do={
       /system/script/run packages-update;
     } else={
       /system/package/update/install without-paging;
     }
-    $LogPrint info $ScriptName ("Waiting for system to reboot.");
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={

From 6e37bab48113fb696eca77a339911d6948b2d411 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 8 Dec 2025 09:31:12 +0100
Subject: [PATCH 969/988] netwatch-dns: add active check to keep DoH server

---
 netwatch-dns.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index eee5f854..a379504b 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -94,8 +94,8 @@
         :set ($HostInfo->"doh-url") ("https://" . [ $EitherOr $HostName ($HostVal->"host") ] . "/dns-query");
       }
 
-      :if ($DohCurrent = $HostInfo->"doh-url") do={
-        $LogPrint debug $ScriptName ("Current DoH server is still up: " . $DohCurrent);
+      :if ($DohCurrent = $HostInfo->"doh-url" && [ $IsDNSResolving ] = true) do={
+        $LogPrint debug $ScriptName ("Current DoH server is still up and resolving: " . $DohCurrent);
         :set ExitOK true;
         :error true;
       }

From 96896c37e5bf2dc80941e572c4a93c26ddcaf935 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 8 Dec 2025 09:36:03 +0100
Subject: [PATCH 970/988] netwatch-dns: update wording to reflect the extra
 check

---
 netwatch-dns.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index a379504b..60064057 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -105,7 +105,7 @@
   }
 
   :if ([ :len $DohCurrent ] > 0) do={
-    $LogPrint info $ScriptName ("Current DoH server is down, disabling: " . $DohCurrent);
+    $LogPrint info $ScriptName ("Current DoH server is down or not resolving, disabling: " . $DohCurrent);
     /ip/dns/set use-doh-server="";
     /ip/dns/cache/flush;
   }

From c697c321e6381c60873b49f3cc332351ee758e06 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 9 Dec 2025 21:48:16 +0100
Subject: [PATCH 971/988] netwatch-dns: drop early check...

... as the later check should handle that just fine.
---
 netwatch-dns.rsc | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 60064057..43669fab 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -73,13 +73,6 @@
 
   :local DohCurrent [ /ip/dns/get use-doh-server ];
   :local DohServers ({});
-
-  :if ([ :len $DohCurrent ] > 0 && [ $IsDNSResolving ] = false && [ $IsTimeSync ] = false) do={
-    $LogPrint info $ScriptName ("Time is not sync, disabling DoH: " . $DohCurrent);
-    /ip/dns/set use-doh-server="";
-    :set DohCurrent "";
-  }
-
   :foreach Host in=[ /tool/netwatch/find where comment~"\\bdoh\\b" status="up" ] do={
     :local HostVal [ /tool/netwatch/get $Host ];
     :local HostInfo [ $ParseKeyValueStore ($HostVal->"comment") ];

From 222404535b55c61937a8def152d412ac0a611507 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 10 Dec 2025 16:29:20 +0100
Subject: [PATCH 972/988] netwatch-dns: drop declaration of unused function

---
 netwatch-dns.rsc | 1 -
 1 file changed, 1 deletion(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 43669fab..ab4beb18 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -19,7 +19,6 @@
   :global CertificateAvailable;
   :global EitherOr;
   :global IsDNSResolving;
-  :global IsTimeSync;
   :global LogPrint;
   :global LogPrintOnce;
   :global ParseKeyValueStore;

From 0745f09a8a80adf08094bae5d58ed092547b423d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 22 Dec 2025 09:14:26 +0100
Subject: [PATCH 973/988] global-functions: $FetchHuge: handle missing file
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This should not happen, as download was supposed to be
successful - it does. 🤪
---
 global-functions.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 4bd7128b..eb02ac47 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -518,7 +518,11 @@
     $RmDir $DirName;
     :return false;
   }
-  $WaitForFile $FileName;
+
+  :if ([ $WaitForFile $FileName 5s ] = false) do={
+    $LogPrint debug $0 ("The file downloaded from " . $Url . " did not show up.");
+    :return false;
+  }
 
   :local FileSize [ /file/get $FileName size ];
   :local Return "";

From ee9618014c7e86623ae333460c31e486ce6dbf97 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 12 Dec 2025 18:03:00 +0100
Subject: [PATCH 974/988] introduce contrib/telegram...

... with all the content for Miss Rose.

https://t.me/MissRose_bot
---
 contrib/telegram.md | 274 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 274 insertions(+)
 create mode 100644 contrib/telegram.md

diff --git a/contrib/telegram.md b/contrib/telegram.md
new file mode 100644
index 00000000..f6525054
--- /dev/null
+++ b/contrib/telegram.md
@@ -0,0 +1,274 @@
+Telegram
+========
+
+[![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
+[![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
+[![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
+
+[⬅️ Go back to main README](../README.md)
+
+We have [Miss Rose Bot ↗️](https://t.me/MissRose_bot) in our
+[RouterOS-Scripts ↗️](https://t.me/routeros_scripts) Telegram group,
+always kind and ready to help moderate.
+
+Notes
+-----
+
+### README
+
+    /save readme Please read the [main README](https://rsc.eworm.de/) to understand how things work and to get the base installation right.
+
+### Available scripts
+
+#### accesslist-duplicates
+
+    /save accesslist-duplicates Find and remove access list duplicates with [accesslist-duplicates](https://rsc.eworm.de/doc/accesslist-duplicates.md).
+
+#### backup-cloud
+
+    /save backup-cloud Upload backup to Mikrotik cloud with [backup-cloud](https://rsc.eworm.de/doc/backup-cloud.md).
+
+#### backup-email
+
+    /save backup-email Send backup via e-mail with [backup-email](https://rsc.eworm.de/doc/backup-email.md).
+
+#### backup-partition
+
+    /save backup-partition Save configuration to fallback partition with [backup-partition](https://rsc.eworm.de/doc/backup-partition.md).
+
+#### backup-upload
+
+    /save backup-upload Upload backup to server with [backup-upload](https://rsc.eworm.de/doc/backup-upload.md).
+
+#### capsman-download-packages
+
+    /save capsman-download-packages Download packages for CAP upgrade from CAPsMAN with [capsman-download-packages](https://rsc.eworm.de/doc/capsman-download-packages.md).
+
+#### capsman-rolling-upgrade
+
+    /save capsman-rolling-upgrade Run rolling CAP upgrades from CAPsMAN with [capsman-rolling-upgrade](https://rsc.eworm.de/doc/capsman-rolling-upgrade.md).
+
+#### certificate-renew-issued
+
+    /save certificate-renew-issued Renew locally issued certificates with [certificate-renew-issued](https://rsc.eworm.de/doc/certificate-renew-issued.md).
+
+#### check-certificates
+
+    /save check-certificates Renew certificates and notify on expiration with [check-certificates](https://rsc.eworm.de/doc/check-certificates.md).
+
+#### check-health
+
+    /save check-health Notify about health state with [check-health](https://rsc.eworm.de/doc/check-health.md).
+
+#### check-lte-firmware-upgrade
+
+    /save check-lte-firmware-upgrade Notify on LTE firmware upgrade with [check-lte-firmware-upgrade](https://rsc.eworm.de/doc/check-lte-firmware-upgrade.md).
+
+#### check-perpetual-license
+
+    /save check-perpetual-license Check perpetual license on CHR with [check-perpetual-license](https://rsc.eworm.de/doc/check-perpetual-license.md).
+
+#### check-routeros-update
+
+    /save check-routeros-update Notify on RouterOS update with [check-routeros-update](https://rsc.eworm.de/doc/check-routeros-update.md).
+
+#### collect-wireless-mac
+
+    /save collect-wireless-mac Collect MAC addresses in wireless access list with [collect-wireless-mac](https://rsc.eworm.de/doc/collect-wireless-mac.md).
+
+#### daily-psk
+
+    /save daily-psk Use wireless network with [daily-psk](https://rsc.eworm.de/doc/daily-psk.md).
+
+#### dhcp-lease-comment
+
+    /save dhcp-lease-comment Comment DHCP leases with [dhcp-lease-comment](https://rsc.eworm.de/doc/dhcp-lease-comment.md).
+
+#### dhcp-to-dns
+
+    /save dhcp-to-dns Create DNS records for DHCP leases with [dhcp-to-dns](https://rsc.eworm.de/doc/dhcp-to-dns.md).
+
+#### firmware-upgrade-reboot
+
+    /save firmware-upgrade-reboot Automatically upgrade firmware and reboot with [firmware-upgrade-reboot](https://rsc.eworm.de/doc/firmware-upgrade-reboot.md).
+
+#### fw-addr-lists
+
+    /save fw-addr-lists Download, import and update firewall address-lists with [fw-addr-lists](https://rsc.eworm.de/doc/fw-addr-lists.md).
+
+#### global-wait
+
+    /save global-wait Wait for global functions und modules with [global-wait](https://rsc.eworm.de/doc/global-wait.md).
+
+#### gps-track
+
+    /save gps-track Send GPS position to server with [gps-track](https://rsc.eworm.de/doc/gps-track.md).
+
+#### hotspot-to-wpa
+
+    /save hotspot-to-wpa Use WPA network with [hotspot-to-wpa](https://rsc.eworm.de/doc/hotspot-to-wpa.md).
+
+#### ipsec-to-dns
+
+    /save ipsec-to-dns Create DNS records for IPSec peers with [ipsec-to-dns](https://rsc.eworm.de/doc/ipsec-to-dns.md).
+
+#### ipv6-update
+
+    /save ipv6-update Update configuration on IPv6 prefix change with [ipv6-update](https://rsc.eworm.de/doc/ipv6-update.md).
+
+#### ip-addr-bridge
+
+    /save ip-addr-bridge Manage IP addresses with [ip-addr-bridge](https://rsc.eworm.de/doc/ip-addr-bridge.md).
+
+#### lease-script
+
+    /save lease-script Run other scripts on DHCP lease with [lease-script](https://rsc.eworm.de/doc/lease-script.md).
+
+#### leds-mode
+
+    /save leds-mode Manage LEDs dark mode with [leds-mode](https://rsc.eworm.de/doc/leds-mode.md).
+
+#### log-forward
+
+    /save log-forward Forward log messages via notification with [log-forward](https://rsc.eworm.de/doc/log-forward.md).
+
+#### mode-button
+
+    /save mode-button Mode button with [mode-button](https://rsc.eworm.de/doc/mode-button.md).
+
+#### netwatch-dns
+
+    /save netwatch-dns Manage DNS and DoH servers from netwatch with [netwatch-dns](https://rsc.eworm.de/doc/netwatch-dns.md).
+
+#### netwatch-notify
+
+    /save netwatch-notify Notify on host up and down with [netwatch-notify](https://rsc.eworm.de/doc/netwatch-notify.md).
+
+#### ospf-to-leds
+
+    /save ospf-to-leds Visualize OSPF state via LEDs with [ospf-to-leds](https://rsc.eworm.de/doc/ospf-to-leds.md).
+
+#### packages-update
+
+    /save packages-update Manage system update with [packages-update](https://rsc.eworm.de/doc/packages-update.md).
+
+#### ppp-on-up
+
+    /save ppp-on-up Run scripts on ppp connection with [ppp-on-up](https://rsc.eworm.de/doc/ppp-on-up.md).
+
+#### sms-action
+
+    /save sms-action Act on received SMS with [sms-action](https://rsc.eworm.de/doc/sms-action.md).
+
+#### sms-forward
+
+    /save sms-forward Forward received SMS with [sms-forward](https://rsc.eworm.de/doc/sms-forward.md).
+
+#### super-mario-theme
+
+    /save super-mario-theme Play Super Mario theme with [super-mario-theme](https://rsc.eworm.de/doc/super-mario-theme.md).
+
+#### telegram-chat
+
+    /save telegram-chat Chat with [telegram-chat](https://rsc.eworm.de/doc/telegram-chat.md).
+
+#### unattended-lte-firmware-upgrade
+
+    /save unattended-lte-firmware-upgrade Install LTE firmware upgrade with [unattended-lte-firmware-upgrade](https://rsc.eworm.de/doc/unattended-lte-firmware-upgrade.md).
+
+#### update-gre-address
+
+    /save update-gre-address Update GRE configuration with [update-gre-address](https://rsc.eworm.de/doc/update-gre-address.md).
+
+#### update-tunnelbroker
+
+    /save update-tunnelbroker Update tunnelbroker configuration with [update-tunnelbroker](https://rsc.eworm.de/doc/update-tunnelbroker.md).
+
+### Available modules
+
+#### mod/bridge-port-to
+
+    /save mod/bridge-port-to Manage ports in bridge with [mod/bridge-port-to](https://rsc.eworm.de/doc/mod/bridge-port-to.md).
+
+#### mod/bridge-port-vlan
+
+    /save mod/bridge-port-vlan Manage VLANs on bridge ports with [mod/bridge-port-vlan](https://rsc.eworm.de/doc/mod/bridge-port-vlan.md).
+
+#### mod/inspectvar
+
+    /save mod/inspectvar Inspect variables with [mod/inspectvar](https://rsc.eworm.de/doc/mod/inspectvar.md).
+
+#### mod/ipcalc
+
+    /save mod/ipcalc IP address calculation with [mod/ipcalc](https://rsc.eworm.de/doc/mod/ipcalc.md).
+
+#### mod/notification-email
+
+    /save mod/notification-email Send notifications via e-mail with [mod/notification-email](https://rsc.eworm.de/doc/mod/notification-email.md).
+
+#### mod/notification-gotify
+
+    /save mod/notification-gotify Send notifications via Gotify with [mod/notification-gotify](https://rsc.eworm.de/doc/mod/notification-gotify.md).
+
+#### mod/notification-matrix
+
+    /save mod/notification-matrix Send notifications via Matrix with [mod/notification-matrix](https://rsc.eworm.de/doc/mod/notification-matrix.md).
+
+#### mod/notification-ntfy
+
+    /save mod/notification-ntfy Send notifications via Ntfy with [mod/notification-ntfy](https://rsc.eworm.de/doc/mod/notification-ntfy.md).
+
+#### mod/notification-telegram
+
+    /save mod/notification-telegram Send notifications via Telegram with [mod/notification-telegram](https://rsc.eworm.de/doc/mod/notification-telegram.md).
+
+#### mod/scriptrunonce
+
+    /save mod/scriptrunonce Download script and run it once with [mod/scriptrunonce](https://rsc.eworm.de/doc/mod/scriptrunonce.md).
+
+#### mod/ssh-keys-import
+
+    /save mod/ssh-keys-import Import ssh keys for public key authentication with [mod/ssh-keys-import](https://rsc.eworm.de/doc/mod/ssh-keys-import.md).
+
+### Other
+
+#### Installing from branches
+
+    /save branches Living on the edge or testing new features? Learn how to [switch specific scripts or the complete installation to different branches](https://rsc.eworm.de/BRANCHES.md).
+
+#### Certificate name from browser
+
+    /save certificate-name-from-browser Running or accessing a custom service and looking for the CA certificate? Get the [certificate name from browser](https://rsc.eworm.de/CERTIFICATES.md).
+
+#### Debug output and logs
+
+    /save debug Enable [debug output and logs](https://rsc.eworm.de/DEBUG.md) for more information on what happens.
+
+#### Donate
+
+    /save donate This project is developed in private spare time and usage is free of charge for you. If you like the scripts and think this is of value for you or your business [please consider a donation](https://rsc.eworm.de/#donate). Thanks!
+
+#### Fix existing installation
+
+    /save fix-installation [Fix existing installation] Your installation broke and you do not know back and forth? See how to [fix an existing installation](https://rsc.eworm.de/INITIAL-COMMANDS.md#fix-existing-installation).
+
+#### Next!
+
+    /save next Another satisfied user. 😊 Next, please!
+
+#### Off-topic
+
+    /save off-topic Please note this group is not about MikroTik RouterOS in general, but [RouterOS Scripts](https://rsc.eworm.de/). Your request is not about scripting at all, so please discuss somewhere else. See the [MikroTik RouterOS users (english)](https://t.me/RouterOS_users_english) group or official Mikrotik forums (https://forum.mikrotik.com/).
+
+Greeting
+--------
+
+    /setwelcome Hello {mention} and welcome to {chatname}!
+    Please note this group is not about RouterOS in general, but [RouterOS Scripts](https://rsc.eworm.de/). Also pay attention to [rules](https://t.me/routeros_scripts/4), thanks!
+
+---
+[⬅️ Go back to main README](../README.md)  
+[⬆️ Go back to top](#top)

From aa0b5a9ca248cf14d8f596f62a1c672ca7fe7c45 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 29 Dec 2025 19:21:29 +0100
Subject: [PATCH 975/988] README: add a brief description

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index d562ada0..746390bf 100644
--- a/README.md
+++ b/README.md
@@ -8,6 +8,8 @@ RouterOS Scripts
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
+**a collection of scripts for MikroTik RouterOS**
+
 ![RouterOS Scripts Logo](logo.svg)
 
 [RouterOS ↗️](https://mikrotik.com/software) is the operating system developed

From 623f96d94a90327d06eed9612c4387cf404e85b1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 1 Jan 2026 13:47:40 +0100
Subject: [PATCH 976/988] update copyright for 2026

---
 accesslist-duplicates.capsman.rsc      | 2 +-
 accesslist-duplicates.local.rsc        | 2 +-
 accesslist-duplicates.template.rsc     | 2 +-
 accesslist-duplicates.wifi.rsc         | 2 +-
 backup-cloud.rsc                       | 2 +-
 backup-email.rsc                       | 2 +-
 backup-partition.rsc                   | 2 +-
 backup-upload.rsc                      | 2 +-
 capsman-download-packages.capsman.rsc  | 2 +-
 capsman-download-packages.template.rsc | 2 +-
 capsman-download-packages.wifi.rsc     | 2 +-
 capsman-rolling-upgrade.capsman.rsc    | 2 +-
 capsman-rolling-upgrade.template.rsc   | 2 +-
 capsman-rolling-upgrade.wifi.rsc       | 2 +-
 certificate-renew-issued.rsc           | 2 +-
 check-certificates.rsc                 | 2 +-
 check-health.d/state.rsc               | 2 +-
 check-health.d/temperature.rsc         | 2 +-
 check-health.d/voltage.rsc             | 2 +-
 check-health.rsc                       | 2 +-
 check-lte-firmware-upgrade.rsc         | 2 +-
 check-perpetual-license.rsc            | 2 +-
 check-routeros-update.rsc              | 2 +-
 collect-wireless-mac.capsman.rsc       | 2 +-
 collect-wireless-mac.local.rsc         | 2 +-
 collect-wireless-mac.template.rsc      | 2 +-
 collect-wireless-mac.wifi.rsc          | 2 +-
 contrib/html.sh.d/foot.html            | 2 +-
 contrib/logo-color.html                | 2 +-
 contrib/notification.html              | 2 +-
 daily-psk.capsman.rsc                  | 2 +-
 daily-psk.local.rsc                    | 2 +-
 daily-psk.template.rsc                 | 2 +-
 daily-psk.wifi.rsc                     | 2 +-
 dhcp-lease-comment.capsman.rsc         | 2 +-
 dhcp-lease-comment.local.rsc           | 2 +-
 dhcp-lease-comment.template.rsc        | 2 +-
 dhcp-lease-comment.wifi.rsc            | 2 +-
 dhcp-to-dns.rsc                        | 2 +-
 firmware-upgrade-reboot.rsc            | 2 +-
 fw-addr-lists.rsc                      | 2 +-
 global-config-overlay.rsc              | 2 +-
 global-config.rsc                      | 2 +-
 global-functions.rsc                   | 2 +-
 global-wait.rsc                        | 2 +-
 gps-track.rsc                          | 2 +-
 hotspot-to-wpa-cleanup.capsman.rsc     | 2 +-
 hotspot-to-wpa-cleanup.template.rsc    | 2 +-
 hotspot-to-wpa-cleanup.wifi.rsc        | 2 +-
 hotspot-to-wpa.capsman.rsc             | 2 +-
 hotspot-to-wpa.template.rsc            | 2 +-
 hotspot-to-wpa.wifi.rsc                | 2 +-
 ip-addr-bridge.rsc                     | 2 +-
 ipsec-to-dns.rsc                       | 2 +-
 ipv6-update.rsc                        | 2 +-
 lease-script.rsc                       | 2 +-
 leds-day-mode.rsc                      | 2 +-
 leds-night-mode.rsc                    | 2 +-
 leds-toggle-mode.rsc                   | 2 +-
 log-forward.rsc                        | 2 +-
 mod/bridge-port-to.rsc                 | 2 +-
 mod/bridge-port-vlan.rsc               | 2 +-
 mod/inspectvar.rsc                     | 2 +-
 mod/ipcalc.rsc                         | 2 +-
 mod/notification-email.rsc             | 2 +-
 mod/notification-gotify.rsc            | 2 +-
 mod/notification-matrix.rsc            | 2 +-
 mod/notification-ntfy.rsc              | 2 +-
 mod/notification-telegram.rsc          | 2 +-
 mod/scriptrunonce.rsc                  | 2 +-
 mod/ssh-keys-import.rsc                | 2 +-
 mode-button.rsc                        | 2 +-
 netwatch-dns.rsc                       | 2 +-
 netwatch-notify.rsc                    | 2 +-
 news-and-changes.rsc                   | 2 +-
 ospf-to-leds.rsc                       | 2 +-
 packages-update.rsc                    | 2 +-
 ppp-on-up.rsc                          | 2 +-
 sms-action.rsc                         | 2 +-
 sms-forward.rsc                        | 2 +-
 super-mario-theme.rsc                  | 2 +-
 telegram-chat.rsc                      | 2 +-
 unattended-lte-firmware-upgrade.rsc    | 2 +-
 update-gre-address.rsc                 | 2 +-
 update-tunnelbroker.rsc                | 2 +-
 85 files changed, 85 insertions(+), 85 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index 1da03661..0d7a4386 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates.capsman
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index 03a97241..080ce72d 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates.local
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index bf231475..15e96a99 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates%TEMPL%
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index 528a73ce..7696f6cc 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: accesslist-duplicates.wifi
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index e41db275..4d8830b6 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: backup-cloud
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=40
diff --git a/backup-email.rsc b/backup-email.rsc
index 8015beaa..317242b1 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: backup-email
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=20
diff --git a/backup-partition.rsc b/backup-partition.rsc
index ae7ad030..5f8a635e 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: backup-partition
-# Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2022-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=70
diff --git a/backup-upload.rsc b/backup-upload.rsc
index e6b9f92f..f27032c4 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: backup-upload
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=50
diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 2ea16674..ff91e7ca 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-download-packages.capsman
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index f95212a4..7f0a4b47 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-download-packages%TEMPL%
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 03fd9e73..d65a4aec 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-download-packages.wifi
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index 0d4114a3..81ce0152 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-rolling-upgrade.capsman
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index 690d73d8..9789d2f3 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-rolling-upgrade%TEMPL%
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index 8e32ab20..bc0d4d38 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: capsman-rolling-upgrade.wifi
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index 14917e4c..807f0606 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: certificate-renew-issued
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/check-certificates.rsc b/check-certificates.rsc
index 93641eec..db1e2d45 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-certificates
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/check-health.d/state.rsc b/check-health.d/state.rsc
index 5e4cbb82..ab32e41b 100644
--- a/check-health.d/state.rsc
+++ b/check-health.d/state.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-health.d/state
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/check-health.d/temperature.rsc b/check-health.d/temperature.rsc
index 9f3f1a5e..6ce3e959 100644
--- a/check-health.d/temperature.rsc
+++ b/check-health.d/temperature.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-health.d/temperature
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/check-health.d/voltage.rsc b/check-health.d/voltage.rsc
index 5891fb4f..59dd23c3 100644
--- a/check-health.d/voltage.rsc
+++ b/check-health.d/voltage.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-health.d/voltage
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/check-health.rsc b/check-health.rsc
index 760636db..4cb5baa0 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-health
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index 9f4b6562..ced827e2 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-lte-firmware-upgrade
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/check-perpetual-license.rsc b/check-perpetual-license.rsc
index ff775c3d..0e66bccc 100644
--- a/check-perpetual-license.rsc
+++ b/check-perpetual-license.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-perpetual-license
-# Copyright (c) 2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2025-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index e5b2e181..4a6925d0 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: check-routeros-update
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index 06b8d844..2572acc9 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac.capsman
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index 6716582d..ae9a3395 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac.local
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index 53e6b0a8..54b113ec 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac%TEMPL%
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index 43ac8519..20bbb100 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: collect-wireless-mac.wifi
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
diff --git a/contrib/html.sh.d/foot.html b/contrib/html.sh.d/foot.html
index d3041520..9e28e115 100644
--- a/contrib/html.sh.d/foot.html
+++ b/contrib/html.sh.d/foot.html
@@ -1,5 +1,5 @@
 
 <p class="foot">RouterOS Scripts documentation generated on <i>__DATE__</i> for <i>__VERSION__</i><br />
-Copyright &copy; 2013-2025 Christian Hesse &lt;mail@eworm.de&gt;</p>
+Copyright &copy; 2013-2026 Christian Hesse &lt;mail@eworm.de&gt;</p>
 
 </body></html>
diff --git a/contrib/logo-color.html b/contrib/logo-color.html
index e5bfb71e..3e9c05fe 100644
--- a/contrib/logo-color.html
+++ b/contrib/logo-color.html
@@ -57,6 +57,6 @@ a profile photo</a> for your Telegram bot.</p>
 <p><a href="../README.md">⬅️ Go back to main README</a><br/>
 <a href="#top">⬆️ Go back to top</a></p>
 
-<p class="foot">Copyright &copy; 2013-2025 Christian Hesse &lt;mail@eworm.de&gt;</p>
+<p class="foot">Copyright &copy; 2013-2026 Christian Hesse &lt;mail@eworm.de&gt;</p>
 
 </body></html>
diff --git a/contrib/notification.html b/contrib/notification.html
index baa659c3..239bc52c 100644
--- a/contrib/notification.html
+++ b/contrib/notification.html
@@ -52,6 +52,6 @@ notification and download it.</p>
 <p><a href="../README.md">⬅️ Go back to main README</a><br/>
 <a href="#top">⬆️ Go back to top</a></p>
 
-<p class="foot">Copyright &copy; 2013-2025 Christian Hesse &lt;mail@eworm.de&gt;</p>
+<p class="foot">Copyright &copy; 2013-2026 Christian Hesse &lt;mail@eworm.de&gt;</p>
 
 </body></html>
diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 3ecd6b66..30781d33 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: daily-psk.capsman
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index d496350c..730c52f0 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: daily-psk.local
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 5a1df2f1..51bc4754 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: daily-psk%TEMPL%
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index c441e581..91f323d1 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: daily-psk.wifi
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 3615bb9b..54dcc799 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment.capsman
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index 9da53336..8a54ef68 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment.local
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 62cace12..3bc30723 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment%TEMPL%
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index 667708cd..f9f1f048 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-lease-comment.wifi
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index a9c91e1c..7a823d24 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: dhcp-to-dns
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=20
diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index e3ca55b3..bd3aa174 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: firmware-upgrade-reboot
-# Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2022-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index e5a71aa6..a9c75d65 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: fw-addr-lists
-# Copyright (c) 2023-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2023-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.16
diff --git a/global-config-overlay.rsc b/global-config-overlay.rsc
index 88bb4d99..5bfc3031 100644
--- a/global-config-overlay.rsc
+++ b/global-config-overlay.rsc
@@ -1,5 +1,5 @@
 # Overlay for global configuration by RouterOS Scripts
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # global configuration, custom overlay
diff --git a/global-config.rsc b/global-config.rsc
index 86d528aa..31250418 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: global-config
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # global configuration
diff --git a/global-functions.rsc b/global-functions.rsc
index eb02ac47..ff663c7c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: global-functions
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/global-wait.rsc b/global-wait.rsc
index 23b56298..746974e7 100644
--- a/global-wait.rsc
+++ b/global-wait.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: global-wait
-# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/gps-track.rsc b/gps-track.rsc
index 6a090bfe..fb403e65 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: gps-track
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index e4ac9678..585c7924 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa-cleanup.capsman
-# Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2021-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index d51e1d03..0aac42fe 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa-cleanup%TEMPL%
-# Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2021-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 8bb2631b..6803a449 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa-cleanup.wifi
-# Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2021-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index 8977cee1..cbe0a791 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa.capsman
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index c5d977d1..4169d6de 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa%TEMPL%
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index 6a97e460..d90be359 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: hotspot-to-wpa.wifi
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/ip-addr-bridge.rsc b/ip-addr-bridge.rsc
index 68ff4a41..0f2bf8ab 100644
--- a/ip-addr-bridge.rsc
+++ b/ip-addr-bridge.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ip-addr-bridge
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # enable or disable ip addresses based on bridge port state
diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index 1b5ed133..90a8215c 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ipsec-to-dns
-# Copyright (c) 2021-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2021-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index 580a426c..0cbb2dc0 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ipv6-update
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/lease-script.rsc b/lease-script.rsc
index ab449568..7f9eaa97 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: lease-script
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/leds-day-mode.rsc b/leds-day-mode.rsc
index 7344fde7..d2341bfd 100644
--- a/leds-day-mode.rsc
+++ b/leds-day-mode.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: leds-day-mode
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # enable LEDs
diff --git a/leds-night-mode.rsc b/leds-night-mode.rsc
index 8bd028e7..87094fad 100644
--- a/leds-night-mode.rsc
+++ b/leds-night-mode.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: leds-night-mode
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # disable LEDs
diff --git a/leds-toggle-mode.rsc b/leds-toggle-mode.rsc
index b55e3514..b6118513 100644
--- a/leds-toggle-mode.rsc
+++ b/leds-toggle-mode.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: leds-toggle-mode
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # toggle LEDs mode
diff --git a/log-forward.rsc b/log-forward.rsc
index 3d7d0547..96edc11d 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: log-forward
-# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index 93eedcef..7046ff86 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/bridge-port-to
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 6deee994..65c11fce 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/bridge-port-vlan
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index fc1b366f..d0473a9d 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/inspectvar
-# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index d65d4724..93ea8a30 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/ipcalc
-# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 668dabac..5f45e663 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-email
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/mod/notification-gotify.rsc b/mod/notification-gotify.rsc
index d8eafbe0..464b4272 100644
--- a/mod/notification-gotify.rsc
+++ b/mod/notification-gotify.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-gotify
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 #                         Leonardo David Monteiro <leo@cub3.xyz>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index e9b42a0d..5203e0fb 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-matrix
-# Copyright (c) 2013-2025 Michael Gisbers <michael@gisbers.de>
+# Copyright (c) 2013-2026 Michael Gisbers <michael@gisbers.de>
 #                         Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index dd10812e..03a2d420 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-ntfy
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index b1996a32..959924f0 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/notification-telegram
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 1d6aaf1f..0242b16e 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/scriptrunonece
-# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 8bea64ee..fb0cc0fe 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mod/ssh-keys-import
-# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.16
diff --git a/mode-button.rsc b/mode-button.rsc
index d82f8995..b7a7b85f 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: mode-button
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index ab4beb18..c55f09e5 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: netwatch-dns
-# Copyright (c) 2022-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2022-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.16
diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 1fcc2034..d4a9123f 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: netwatch-notify
-# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/news-and-changes.rsc b/news-and-changes.rsc
index dbfb1b9b..53f3e7b6 100644
--- a/news-and-changes.rsc
+++ b/news-and-changes.rsc
@@ -1,5 +1,5 @@
 # News, changes and migration by RouterOS Scripts
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 
 :global IDonate;
diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index 26f8aa37..10d35307 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ospf-to-leds
-# Copyright (c) 2020-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/packages-update.rsc b/packages-update.rsc
index 379e818e..b0bf5478 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: packages-update
-# Copyright (c) 2019-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index f16d73f3..bb09c856 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: ppp-on-up
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/sms-action.rsc b/sms-action.rsc
index 47e19223..35f4cfa7 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: sms-action
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/sms-forward.rsc b/sms-forward.rsc
index 161ae6be..e3d2d2e7 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: sms-forward
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 #                         Anatoly Bubenkov <bubenkoff@gmail.com>
 # https://rsc.eworm.de/COPYING.md
 #
diff --git a/super-mario-theme.rsc b/super-mario-theme.rsc
index 726c5267..318f1d9c 100644
--- a/super-mario-theme.rsc
+++ b/super-mario-theme.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: super-mario-theme
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # play Super Mario theme
diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 54872fb9..1c949e8f 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: telegram-chat
-# Copyright (c) 2023-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2023-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index 237c2d83..6f1ac024 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: unattended-lte-firmware-upgrade
-# Copyright (c) 2018-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index dd7d63e4..cde6aa0a 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: update-gre-address
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
 # requires RouterOS, version=7.15
diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index 5372f4c2..ee7f6f9c 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -1,6 +1,6 @@
 #!rsc by RouterOS
 # RouterOS script: update-tunnelbroker
-# Copyright (c) 2013-2025 Christian Hesse <mail@eworm.de>
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #

From 4af18ced9e6d035c36cab2d34d4caa486a45c092 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 5 Jan 2026 10:07:27 +0100
Subject: [PATCH 977/988] global-config: fix regex to load overlay snippets

---
 global-config.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-config.rsc b/global-config.rsc
index 31250418..a36dbaac 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -276,7 +276,7 @@
 #
 # load custom settings from overlay and snippets
 :foreach Script in=([ /system/script/find where name="global-config-overlay" ], \
-                    [ /system/script/find where name~"^global-config-overlay.d/" ]) do={
+                    [ /system/script/find where name~"^global-config-overlay\\.d/." ]) do={
   :onerror Err {
     /system/script/run $Script;
   } do={

From 8528ca376cb8faf182af9e6e7ec7f7531f6fc9c4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 5 Jan 2026 10:08:09 +0100
Subject: [PATCH 978/988] global-config: support loading custom config snippets

This may be interesting for custom scripts which can drop their own
default global configuration.
---
 global-config.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/global-config.rsc b/global-config.rsc
index a36dbaac..25254123 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -275,7 +275,8 @@
 #  /_()_\      Things *will* break!
 #
 # load custom settings from overlay and snippets
-:foreach Script in=([ /system/script/find where name="global-config-overlay" ], \
+:foreach Script in=([ /system/script/find where name~"^global-config\\.d/." ], \
+                    [ /system/script/find where name="global-config-overlay" ], \
                     [ /system/script/find where name~"^global-config-overlay\\.d/." ]) do={
   :onerror Err {
     /system/script/run $Script;

From 8fa17d4b3b2ede5694f3f9e053d82e2491a9a77b Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 5 Jan 2026 11:08:58 +0100
Subject: [PATCH 979/988] check-health: fix regex to load plugins

---
 check-health.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-health.rsc b/check-health.rsc
index 4cb5baa0..90d8c841 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -74,7 +74,7 @@
     :set CheckHealthRAMUtilizationNotified false;
   }
 
-  :local Plugins [ /system/script/find where name~"^check-health.d/." ];
+  :local Plugins [ /system/script/find where name~"^check-health\\.d/." ];
   :if ([ :len $Plugins ] = 0) do={
     $LogPrint debug $ScriptName ("No plugins installed.");
     :set ExitOK true;

From 8878449b0be665f0c0df1b4ad48d20e2bb53efe9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 5 Jan 2026 11:37:58 +0100
Subject: [PATCH 980/988] global-functions: support modules (or snippets) in
 global-functions.d/

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ff663c7c..05c232ad 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1900,7 +1900,7 @@
 }
 
 # load modules
-:foreach Script in=[ /system/script/find where name ~ "^mod/." ] do={
+:foreach Script in=[ /system/script/find where name ~ "^(global-functions\\.d|mod)/." ] do={
   :local ScriptVal [ /system/script/get $Script ];
   :if ([ $ValidateSyntax ($ScriptVal->"source") ] = true) do={
     :onerror Err {

From 7dc230cceb6166632cd1513dd294b5f6b6bb0226 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 Jan 2026 00:48:49 +0100
Subject: [PATCH 981/988] contrib/telegram: add Oxford Comma in greeting

---
 contrib/telegram.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/telegram.md b/contrib/telegram.md
index f6525054..355a9cdd 100644
--- a/contrib/telegram.md
+++ b/contrib/telegram.md
@@ -266,7 +266,7 @@ Notes
 Greeting
 --------
 
-    /setwelcome Hello {mention} and welcome to {chatname}!
+    /setwelcome Hello {mention}, and welcome to {chatname}!
     Please note this group is not about RouterOS in general, but [RouterOS Scripts](https://rsc.eworm.de/). Also pay attention to [rules](https://t.me/routeros_scripts/4), thanks!
 
 ---

From 6990084d98f6063002fbfc7a500b8edead6a8309 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 Jan 2026 13:41:59 +0100
Subject: [PATCH 982/988] global-functions: $CharacterMultiply: use local
 variables for parameters

---
 global-functions.rsc | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 05c232ad..d99e216f 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -240,9 +240,12 @@
 
 # multiply given character(s)
 :set CharacterMultiply do={
+  :local Str [ :tostr $1 ];
+  :local Num [ :tonum $2 ];
+
   :local Return "";
-  :for I from=1 to=$2 do={
-    :set Return ($Return . $1);
+  :for I from=1 to=$Num do={
+    :set Return ($Return . $Str);
   }
   :return $Return;
 }

From 0ceedab5db11314ed0e275f2129d602ba20e81d0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 Jan 2026 13:43:11 +0100
Subject: [PATCH 983/988] global-functions: $CharacterMultiply: return early on
 length zero...

... as :for loop counts backwards and would return two
character otherwise.
---
 global-functions.rsc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index d99e216f..3b5db905 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -243,6 +243,10 @@
   :local Str [ :tostr $1 ];
   :local Num [ :tonum $2 ];
 
+  :if ($Num = 0) do={
+    :return "";
+  }
+
   :local Return "";
   :for I from=1 to=$Num do={
     :set Return ($Return . $Str);

From 33061fea21ab6c7e081948a3a71763b27f16233e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 Jan 2026 13:54:35 +0100
Subject: [PATCH 984/988] mod/inspectvar: indent by two characters

---
 mod/inspectvar.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index d0473a9d..63f35ba1 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -36,7 +36,7 @@
 
     :global CharacterMultiply;
 
-    :return ([ $CharacterMultiply " " $Level ] . "-" . $Prefix . "-> " . $Value);
+    :return ([ $CharacterMultiply " " ($Level * 2) ] . "-" . $Prefix . "-> " . $Value);
   }
 
   :local TypeOf [ :typeof $Input ];

From 0d71cd5b3bcb2ebf0a6d43ca74c04f0166ef5b24 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 6 Jan 2026 13:56:35 +0100
Subject: [PATCH 985/988] doc/mod/inspectvar: update screenshot...

... with fix from $CharacterMultiply and doubled indention.
---
 doc/mod/inspectvar.d/01-inspectvar.avif | Bin 4232 -> 4243 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/doc/mod/inspectvar.d/01-inspectvar.avif b/doc/mod/inspectvar.d/01-inspectvar.avif
index 1be1358008388ec650c82e8974859237a0a5846f..e4e9bd5ab16c330adfc3d4775f65d3c6199a6288 100644
GIT binary patch
delta 3799
zcmV;|4k+=6A(J7HcmaTsd6gN6ZDe6|5&#MZIVLiEs|0{D@*YkWKp+58lP3XXf6xPR
z<e`}`<NnO|lS@tKBhepdacA_Og06g?RRO)v%#SvN2+Gb{F;EXXmv}KJ^g*apcU9=q
z;q<C-i<hQkiF)KJe?&<$62}4cva2)vo&I(CHw;bHNtGU2Aq~<E6}-ICFzt;-`r&ec
zFKrvQu?)l~uWSimS>t!KPAgd)e-kNl!Mkgfj4K<{Qs^fqOovvo-+VD*l%OhoXKeg2
zk4^d^g)MJ=$(Mh%y8f>4e?0P58C0%F@riK4&V2cBUW-DhAf&4+huNun7TG-Xb-~-L
z&73NQ*F6&|wkfh!z3dqKnM9~4`%;d0a$1T3TgbkhYgO#=FwH?pNr%SEf2uZ40XbOF
zmd59eO_mL?qmfPL5;MM$a-H2?bCt{jM9omShGzTNks@f}I$7~c>21lCW+^N0TccUN
z-utOBaXv3P<2BleEx^E2(;lbA8J{&+RKD-Qbw<2&BX;XrI5_BX*cq{Y9jl#grtqe_
zCPCD}8&|6}W%I{9J^!DXfBK1tRXN`$K_YF;JtwqU1%Ebn;<li=qYVx?g}b5{Go%{x
z2`Ign&o;}U_LI)%!H89LeU4anpBNeLCLac$FYHs0<*&UQKnM%|^364DC)4u6<c@EY
zLu>tflmt+m2z8>eC11j1tR5jUPw(jnuBoz%DW0Ux-hpH%yrV*<f371lGPK&}SAsKt
zTxvpncGN6?+G8Zn$N6y%RqKCSHZvFu@5oR?m`aN&*5UkG?!z&L#SEUOH>}fue^`ah
z-;%z0R%Im*H-NsHO@-yMmBd7nTFXm-{IQNXO`7RF^G+s{%bH<a<GO8%8-ubzDdDf8
zx|Kj9r#?&li+_T~e+qeQ^A#KP^B{YXBXK1wKKs{WnQLI}5ay4Ik^{3bBHk2nQEU_Y
zW#$aFUPmMwEJ%1hoGG$FP0~cLW`|!)^8}jGttdC@H{@hBcH~-+O8~(kJEvYSrRL0v
zETB}SVZ^aV0@jM&ceYf*jJJUUl7SeK-C^TRR|i>l_N(2fe@jpgT)%`UQLeEj&MduJ
zaRN3Sb2(gFPZgD>a>OOvY(065U;a?^pY`i2r~EZUqoqCZ2fGUVFVY$PDLIHs`T7#0
zY&?k{Y98Jvf#vJeIe}HwYZyJDUESnPqn_rgm+SX|V%pn6dr2h(9zMuOzd2F_{g7V7
zqH!a`eqSzCf5!R4ny3W43PGxEBw_hTBvj5DE>S*TXDP>y+Iw~w(3&f&*}E%ygc$KH
zR7bUJPOr~$zMIri0@NbIBx@YjU%jMx3M54mCEErueZDK=GAY}A+46<)ZP*t0&chpn
zsHkl=?8cDjiu68+A5f+eI%vV8kpKq@XX~asXdKwSf3G&e-9u<`x9&RTXB!A#(?N5}
zV4+j~r7rMK#!=vG@tTSa`q(urmL{^!c)ZQ8HP-?ix49(Z>oYCjxuclqV8<C+Dr_|K
zw#91O)NL<J{zZy(09~N8sh024-+O*KHB%UYbL8L1PHs_B4uB=0OF>LXS6MnLZ^xH@
z|9g<je<D>SY}vqWxUmPj`N6DjU9`-Wv9-kH48d+F=aLkr97$r*H_`QxKa22SeQ<Ja
zFMIljyZ6x{b<yPV&q^B#{*C6c9u6j&JS6Z++Jx(cG_%;s?J~kF>lcimNTHFn+ICoK
z+w%+IAs<nJR`@}WRT?L*1V}9dM_SklvjD(@e~LYOT|W$Nio75JrgVw#0CB2OB?z2e
z|ByLGVi%YbF;)wHs!|{y#r?c1hD-T%A~a7iU((yv%Bh+nkm!gbl`f|8C#}~qa5(!y
z{U5PAxFl4<WY<U7hAhMxKyJ@9jT!QR5hT>8lV}u;jk0PrQ;r{=*=$`s&x`oE%_fT3
ze{zs|l0tjt2Ocl%N8=mX_eJ=b?oI*J@FS$}ihFmj<*1~DQN)QxDa9dhH{{!W?Ov8~
zDu&!KadXP|nk1(QlL?HfZ{J%E(?ADY(BE;e6?*b(6qJWh7oK6^f;*#tl<hMj?9fv+
z#`;?FH_!IaX~g{qE~(T@RLMBPxh<sNf1n$z<-vB!1;aQ}BI~<lZSGCA?S<_nn%EFl
zx^t^%It0LVF_58ZC?6FC=>AWY{jODL&pHKfq{zSbS-TUX9)y^1j;-HfLFQv4ib!>i
zGRw%*nBcky)M(?@c@GgEi5i+5QD}7ON69G>0q$jN5*^rWDVzmOf+9<dqlbcee?<~=
z&y!`~e|VGyZ<j6;B8;uV1O)|(+2hLssjOORdu3jUZn$|&dAnr6lM3&r2WG`IyI(g0
zJ0eoP!gu^?T-Fi11vCBALUkpY6pgrUk7XeUK#uhz8vZ=M*lVyvXIrnCYU#;19j|H<
z5!MX>;nmIh@5$Up@1bw=sekAHe`a*Nrg+l51WCb?Ra|P6XK83llN^l^(>DMWK*XsX
zh?aXZcvI5Xb7{k$JeA%uHqBj@MEVGGLULyT%da+3?`MK1I^biwzuOLsCnWoeKR`L)
zXGzUCdx}ouX__T50P={lstTB}dkxu_9G6<fOLGuwdA`ZU(c#T_74_M=e}b6Ima;+9
zG6P&F#iB`Ge`JP?rb-6gYW6_Y?TfiuT%*D^%LHro7kmIZngz!lK`XENM{gYl1NV!L
z_D5h07v6sH|FA2xw^?gvd5V|u_RBl<l)pW((Z_FA=*x@m-^(fibH9cAUpP6Auh0+r
zj=fs7w0ss_*L8ettT45Ne}M&jW_osHsMz>V&c<y{W2de1l)DVb?lorqVI14q?GB!<
z?6^sZ4s#jCIe;`}ESX|oz*o%onyibMw0c99LCUKrf;G5I$Lk*(_^}cbSmun_ND*=N
zv^eWIwOEA42gIMO7^pVIf7Kw<Pcw4-{@e#ViBGbzzqR06&OIM{f1Y)f??-Wc*hp%K
z*Mv}g6l+>J8-oUqjL7fJswFjBM!;Re;~uB!-I{U=!?k1X-i*3BcUcJ{@tADB-KV~V
zL!M8xR3RiO3(QxT_Jv04SIS_VMZ*SMju2t~Vi{0qAyvjaRu~hFl4Rfdkn_;g8#7gy
z$uMaFy;vK3_Vpe{e-HxXzIikPEGth-FZ;ZsxmOjz=fFa=GNKM0a`$uK{<`I7R4><0
zxiGf$7Xlsvv0i0bi6|Q%cKVHbY99%P=I2LQoI<lMv8IXtt?w4ekI18P42iKoOOEF1
zfupO*g1lIxQ7(K}(JXp4CQLx0o621X-tZnY?=Z&TTlKPdfBfauDY97E^XFp7A8J;8
z4m^+ETU`;qkRhjB^u@7*1r5^F@y}dYo&#WgUMBbKjiO9YqpL*V+oLC5(b)V5n5r$)
zYfa%X_&B`2-%G*})_D&tU7u95Q31d^vFW`qf%O{xW57yW@aTK1#o2d}95_R%rQzsa
zXTl%+9k4UKe;-E-z<pxVEg6{+vU%4Y=WBGu!IlFXvYjdssgA!;Wg|IkNP$yDt)*oG
z_{FaVoWn(Np1PQN9%{3Pa9?={DBx!ZR)BK>**hS-IdLbHz35CFpMZ}ao{k-JXV{np
z=Wd`fSg@Fn5;4qTaa{fhaNXn2cD0+wMdh*pTk#xje|ts^=4M#T$!nsa!bS<)r4iH2
zkgUAqHqo%K3rLSAZp-(@(%t)GBJ^kZ#uEvA7YG4JzJ}Ll+aVjpONXiwJk{lU;`f1V
z8RAM7DGvLkP#MvG43}JygoQ<+yhwF82xqS;tatD&dY&9pXq1ZM3I}tW<8<siy)2iG
zE80o%e@5_=G~sM?=LLjf)ZmYqq%lH9JznCsE0?=yF2<So;{jvi^EB3U3yd!|%VOS*
zi54LZ5E0I?AhD7o_`P0e6&NsyG^&ww&m&RfN9O~qA>A@u;e1l`+8wL{bsr=c(l~+Z
zr2L@HmdmqpQG5{tR>iTv1?T*R4E;kUw#y0ue+5p!A{wq+mr?73-F{;Cqf7FP@FMBT
zxn*DoSPFe#J&*1ZVHx1sv14e@TKr!s>w7;@lt<Cv`olzPEoCrC&bgp$S)2NhFyPHT
zP8q!BpjC+<O7-hmb;5W8VpCa?WpP5x+(-8=tJSTX9{jS3j*<OwL3dd7x*6I?e$RLQ
z29BQ-rc)V{l?{A<o9+2aaK8&As4ELNq4xg$>)F+ttdhzuZ}?#s^b{^{#!(`{Q)8+t
z5XqrpveOV(4f()n2y?Ya(5+kRgctCMy<WzHB)yFAg6i}EqW0@)eti6B#eczFt`z)7
z6t+~5gSjk)AvitMtj<Fi^T@HPJ=)x_8#h%N2#8I)m3LTw1ap(_nKvqR8k5+c%u#dd
zmyP*zT`L*WvXTp6z;?Fu;-YK^ONp~fOqbz;yn0Ec8?S@nS2GS?Zu>u%YaMbhq@}jX
z5^TDH@h@4vkiqR8wYSaGa)ZNo7+0WY0hFE&<sFy1=95PRZwl$8){D^)L?@1a6|DMZ
zRxvb(!li<LG(lwp-D#_@>FH#L{2>7;XoKmlq*JZ!ZQFP;XXHTckD0ATn#Yx0TzCL$
zq9-!-V{k{_RWFOAg)2h)PprB(6J3;Eas>@8p2z+Q57_URnG!SNXm$$P&%C0$H9A+B
z2;u4va(5)G@h$C;0Z$r>D~p1aw;RN2*Ob$i%FKm-KPNDBtAhV`PfL4jh#}(|*nC+`
z9!w^*s7)eIdKKRO>!*@DTo6}3|H<DLDir}d7*!RT13_MgEl8K&JN2;9f6&iMo)xX+
z&cW3_C7*gKecqu#dg>&h9|Z`=JA}2V_AoBioNo0t-}Ur<bmO2WdOlI1th^diyOV1I
zS#OVjL(@1?r9-6Y4EB+k$~iJ-rcg#I1J@KW1z9M(HRz#}+GG7Q+W7t9#Rr>3h<MJa
z3%Yu|pseeymn)4KwF{rJXt?oR7`chkIX*UR*!KC^`i#FC6J^@&=X&~#$=#`pOs4Rc
z%?@Pye|o92Dkl3ECSl|f90dNO%eX6$>K}L_MkcKreB_N^VJha}&wHDr@i_=UfB>&a
Ns2toksDS!{ISW0#U5Eex

delta 3787
zcmV;+4m9zTA&4Q6cmZ{hd6gM`ZDe6|5&#MZIVLiEs|0{D=N?WLKp+5ZlP3XXf6xAK
zrtboukLj>ju#)V`egV|rW-^?@p^_pMR(?6s{k(%PKd;VDg1V1hLQHzx_)&({`)J<k
z;o914H6v$83b`|A&gyFEZFjQ3?za<#*v;Qj&lJg)mX4;QjhQ~+x~Z9xy4=ohWq3=Y
z#4Q_8Pry#?^!RiJ`DGhLw$kUAf4xx>h`1!tCWC^URyi+34et%Q?kSuqKDY7(c9(?B
z!p3h()w5j+8T4O+H>!YS8bysu8bB2h-N911;r<TUSFx8i7=z9)wS~A|5gh~CUX}v0
z!)Qf=REs~^&FjhSn<15S`r-xgdR)u`7BTLUv7R#>)eqgk^3`GF1FOVEe`aYf^$hrH
zQggGMNY462%6D~n&Q~xA6E#BS8Jq87LS&Pr7ha2jsZ5VlA4iZf)Qu2^u@~udfdjkL
zIJ~8Cc9(5Ym4T}HKN<AOrG)@Ux}M;U++E)Ux-AGTUrXJ-xH7>0Uy&&gwSi0*;J=f2
z<!i+|9Scdk3`!pMIhZ_ge@<4|l$5^=m-I8R$6~l&rO5JF5akEOHR7wpyF$4U7s;F5
zi<#3`^%_tXIdzt%5<f#qzw4}V|G#Xx1LZ_?)S?b`%+M_y_n)S$!o4~&Q)H4FMq*;0
zGOcj&kN_blwr2#O!}<hVB#4*@gU+EPA@-PVr1}nL38(A?<C!?Uf9#@wgx<7qB>3w>
z+$<%)&}4;@`Klw&df8bFsQ(veGAs<_BhD~dzLYy7a03N3(0$qd_LcPvz?2BH$%mEu
zIz@m5F54kMJ<F3CTx7vc9_%{5e&QIRwts+FfVc!4U6$RCZk@0bcxvfR9&7DLNJt0y
z9<d@@1Dhc13<(W{e*`@_yXZ%lSCU0)TEJ5Q++$DCn)wZ~;Q9^bduJf!J~67+&aBCK
z%a(%Qyl(qsv0JH<J+9-a#fzw%UZK(<DzSx>$(F_&Q@{ES8t*kXBzMEP^+OkSRKy&S
zu_GP|X;eDtRV955?bXM^2X^6f>Gybm4Mvq=u=@PU8hLDTe`Cq20fzxWNip$gl}1Lq
zT}%k?TXS^E^>xhUY*+i@wtwXh-T2q>8|5J`J<m8Swd!{C!Xn4vfa&Y<uh)VMF4OLT
zsj5m<QV5Z}HHM~fzZI8#gz@_kHdk?YNmUuPY|;#*Kcz3ZlKn}IR)9vzW_2FRO|Ta}
z_!9{5-{;IkfACaUoft*!_gVYqp6!gNSjCdW*O{q-;i!}=U+W5_?&%u7c2WG6V?X@G
z<gpzWH2;&GuqCy{OWr_Hnmtl6s2RfQVOCRQ;ChvmG?k-%2%+X^xR-XAAx#FQVE-12
z8S*5Vq;=LJi;9nR8!e#@)%wt6@v*I!7_|qPf@!eaf8qfX`7lFG$_xnGv_Qx&jLtR?
zzovrcl)*x${YqWnpNylu19)+|33uMtI41Se=pk&MN{-YFSr*B7Lz==iISzwE9k@|Z
z6QD4e@)~Rr;NuH3GmSa7H9dxP#0^@4?6I6~5|>V9xh*KS)M6~)n6dztgwwRdhu-Aq
zsl%Bkf7vkbiFYP<lrw*{izf&@-_8wVdhMoUwT-2^+?^hz=pDD<ms<zu-hto7NMNib
z*S`okq<e1$jH}H=@mR+7s92i<X;PCzv%V9jZ))eX3C+fVE9iRUd1Ul>aFrFmylC+6
zyau>FA$4fs;D&wcnqPswD-j-Nwot)Qd5H37e|w`5IV$`6cWd&RHT*#V?2gDdq*kMJ
z3=t~O^wy6**Lm7_)?;?852Um<lpCHbhzuzalEtS$xvl96#&?oZ&Z<r5SlYEVnnY0{
zxPJq?V*1EHZdeOyhS?Tw<KujB^jB@dbSM)?XQ_h(H286+_*({tFX7d*R&j}Zn4I1f
ze_>TxkDDC+c!GgHpfBezwA?to@)6$5fpFl$h+Abygo6z?TyD4o{#X&~bBaxKaK}9>
zi$lDJp#ez>UMI69Cp#+29444d!gLB7`crzWQk1F8w|42ie_yds3i{4%UPMt%ZC%(K
zZ2M`j%4+w_;PA24;kDs2BqjVG?CwX{f0U6gDRWCRM-5sA1)U*7%Nho}(^Z>lpq;@7
zV&08c8d*+GX92UqczpTS%}3HjP(VGoO(lzbFsp*N#Ji}d$2uD(KHK0%98{$y4iA>3
zQ!uthBT<l0klKE`^=|b<GwS*!|Eocz!afHejgax!bH}K>Anc7L%nT2=Lm&Jxf9rv~
zJHxu|&NrRs@r-ETr1pvxS8@8Eie;zp;n8n2PY|l-f4d}-&Dn=4JPhH|WF_`c2<WG}
z`v4`wIg?mN&6!u50e$%iZ&yy!*o$mh^zk5*5&Z~2%D=QV&o@2=zsoE{bPQ#EW`@DX
zdlBV>JD5%?^rZiihNK((N!6H^f87l2gK&>Sz>p8Rm2h=J$1z;q;&8hjZ4PlgVz5G4
z<v!wmvIftH25>$(Z{R&y>D;rJf-YyW@wU9-s6Q4u_2lhNEvDB`Ee-O6i^{4jV*O9a
z%jdkqoC!kRGRCQTd!tM%A2KR{pjpSzJ^L?ZvSy6_*_F_!6B?p>nM;^Ze?>YJ4bXO;
z*~A;(q(+|$a#`G8qei;VUsL`J&)+`VU5d^2aVth{3}mrN_urmOg(jFgkkY@iYCm4_
zHU?Uzf3_YsxbyGw2t7!LSd@HQ2g!w?9+IC2lP4smZ*&8mg<oHBU3E!<kFHgWYkZ->
zOCoSXahFu!2f&wxb|i2Sf3B6m3S+|u224CIarniHv*1~qI=!9Omww8vAKr&v7B5^*
zA})~Wiw!{U)wa1}cZ6W;!iJaAhcF?c7rBRc2*ox`tDZN`k0%bi3Vq4>*`Qn7h1w}!
z;!$-_2Ex^NG*4r(3>z}9E@`}}{I#77dm%ljwoFywCmS2ULN!ejf3?~u^|BH6byrp!
z#P!Z2R{CR2yar&bSo?u<M(wuh9C-|F;I^}l2~x`|p)sOEkK&}+rcwCL(e4Y!$J$d4
zd-+V0{}JPZ1);H{99I~~X6<$cUh|?aFIdC@c9!TytLQr$oxOq2N_5|Rp+J9lmsA}P
zt~<eg5`(rAxWeUxf5Jl{0d<!aK|(0x9Jl{lrmU|OM=nzV31$qANL!B{=Th0moo`7s
z{MnBnL#Rm&Ke1|*LjY50Q~b=d)fwoz_ay%^@1oPm0IgBiVBa>pqW*GgVO2lejkPy)
zs4N+Jh*HkDg2|OJef@Z5_OmHcYbPpjTBRQ%H{KZ>1_$_xe;WVaw{cPa#FULXqB+>a
zB|*4Wxyr^|sQ&LZLE)~H+Nj~l06fu&ocI0GcDTf-l-O;@{TN@xJ|-Ka{){*TZtZ}k
z>v9*n@tmV5l(0Ik=97mFX*{LiOB<}t{lDn@8Z>qjQKT-D{E3a`dNn&0(q*=t+VAg{
z7rKiqvBLCge|nYjs@_A~fyBK71HbP5$S+h!)zuS$Xt1mYT>%`Yku7DdG6i}hsE{L{
zI2_DTpBcRO-b7EO$0!I@MqA<4GB>g+2+Iks;mI~5;bo}|{p}k7UHu8;dRgWqe;9&|
z@wbYN)yXP|7_B%5zG;qmn%U*n4ISzL!}7B}Jk7E)f2cy67RfWrdDkj{89u{r{nbtE
z)iE3?WqsRI7eL^ADa6fjr5lV#!yQ`fD(7;ZEmXHM-L5GL8UC%3-Je`@^<`686wiFa
zFjg#0`A+H^t`zIX07vC;f1>eRsMXB)_EjN_eL(s%B+8A|^Qpg+sHAEdg~x*&pu=R4
zD)GT*e+;<WyTTrhpFhnYxp9tJjXU8KsbP^;02~(6mvLKM7i9|u47p~>I~f^|2y$t7
zq!K9(5s2mJv8SxmcX|zikXY~^<lKN{7#eNTTxlAblpY}yycN#osMYsAqoWzJWC^jM
z<V^474UhP7U$pt*b7*owpie7a2!6a`Qkh%xe<H1ZQd(N?^vR5>^=Oz-X}WgNTK@l%
zdY1_-S9AU+uQ?fVhlgvsZ}C~mL>fKs!S%$;I-$YFG|7p0r(J3wmSmdkJe<_bdC_;e
z%Vzg#oMw)zyU4BFWVv>gyh@iO{K~>Vz4jwkDo3o0rMlyL#-|PVLm1Lfd9`X~z-wo4
zA?RLXXX=dDc7~tRy;M+CJ?jA~J6V{^`%H|F2Pb?12IP}^4Sau`11lr*G5z2NALQJs
zN>y>8wV(*>^c{l!Ly2P7k_WVEEuURflX@X0w?4d5!Hi>O&&4994^{Rg2*vKDCSEp2
zCmF^m_Frs)CT8?Adjf;Ogr$+PqoH09S%N{BbzQFk%nKb{ZD(5j5F5;K`JQs#@C&*v
z)c?lQVp$-!sdazkk7sjV)s*a+B-zrLH;4FL1wTDTM~7F4@~o6*{7k=gh7vNqlr6wK
zSoUDsZuD6yIZK3w7*-kWn=pY;u`7S~@x+~oyP`-)M=;qeayr(~&R1W4I3fo%upC9^
z`6+k2VdzON;2^=ph`>=9^TW%z*z!l-`|MLg{PJeZB{P3QE=QrM$}c81PvS}jGYLHb
zjEu9HwR1w!;kVS@YXM~2e<hb=?}FC5mOhR5|09A*CXuU{@S)W)ro`QrX^A?2exz$n
zt(vf!uM`yW>j4)^o*&0F?!q9g%rwafu@%ZU3xbQ&ZWibZnR-LVb?ItKjth<T^k9)~
z{)j4(^O}EL!_o?UG1(-r&W(#(VIa+EiRwTc2Lacty+`I4*N&C+u_<=#Ekpv(_UP%&
z)|x3bOS#A5AJEZ0T`$QJDKB!6ZqT468gNo2(k*arDJ^T!VL`?=$Mp!35Hn#4nP#D5
zV0L7>9$Lh-%uUBvmK5pPkH#?($jJIG(vJe9)@OUoi9RV+LV=wt7!ZX`)AaDm$9(Gx
zM^Mdb)S|xuzB~8j4a1&@K%eH8D&rz`K?_Wh-c;K=XF2+(_tN|QLMg|C9FQ4ro{VZV
zbEPkKVXbLjqoBfkLV)Io>xE3CL&BAmbF3Nn#ZU^??M+_AS<Ze++jth753x-W#(#Et
BYkU9z


From 3c62536f878208a52eb26b5c84a34acc5d5a01d6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 9 Jan 2026 14:02:27 +0100
Subject: [PATCH 986/988] README: make prerequisite configuration a sub-section

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index 746390bf..b11c4d09 100644
--- a/README.md
+++ b/README.md
@@ -37,6 +37,8 @@ Specific scripts may require even newer RouterOS version.
 > ℹ️ **Info**: The `main` branch is now RouterOS v7 only. If you are still
 > running RouterOS v6 switch to `routeros-v6` branch!
 
+#### Prerequisite configuration
+
 Starting with RouterOS 7.17 the
 [device-mode ↗️](https://help.mikrotik.com/docs/spaces/ROS/pages/93749258/Device-mode)
 has been extended to give more fine-grained control over what features are

From 377e196cb0a8dcc8902465ea6b8569ead6e3f3c7 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 9 Jan 2026 16:01:58 +0100
Subject: [PATCH 987/988] =?UTF-8?q?README:=20long-term=20channel=20is=20ba?=
 =?UTF-8?q?ck!=20=F0=9F=8E=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md | 24 +++++++++++++++++++-----
 1 file changed, 19 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index b11c4d09..c08ce0a9 100644
--- a/README.md
+++ b/README.md
@@ -27,12 +27,26 @@ Requirements
 ### Software (RouterOS)
 
 Latest version of the scripts require recent RouterOS to function properly.
-Make sure to install latest updates before you begin. If new functionality
-or a breaking change in RouterOS `7.n` is used in my scripts I push my
-change some time after `7.(n+1)` was released. At any time you should have
-at least two minor and their bugfix releases to choose from.
+Make sure to install latest updates before you begin. This is supposed to
+work flawlessly with these channels:
 
-Specific scripts may require even newer RouterOS version.
+* `stable` - the latest version considered stable for daily use, including
+   new features
+* `long-term` - a version considered rock-solid, usually one minor version
+   behind `stable` (`7.(n-1)`)
+
+New functionality or breaking changes in RouterOS are adopted fairly quick.
+These changes are pushed for general availability once a version of
+RouterOS supporting this had been released to the `long-term` channel a
+reasonable time ago.
+
+At any time you should have at least two minor versions and their bugfix
+releases to choose from. Often way older versions of RouterOS work just
+fine.
+
+On the other hand in seldom cases and for good reasons *specific* scripts
+may require an even newer RouterOS version, so only `stable` is supported
+temporarily.
 
 > ℹ️ **Info**: The `main` branch is now RouterOS v7 only. If you are still
 > running RouterOS v6 switch to `routeros-v6` branch!

From 927edc639cc20ea2598fcbdf25ed1d27cb1a8354 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sun, 11 Jan 2026 21:53:37 +0100
Subject: [PATCH 988/988] README: hint on the badge regarding required RouterOS
 version

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index c08ce0a9..d111b8e7 100644
--- a/README.md
+++ b/README.md
@@ -48,6 +48,10 @@ On the other hand in seldom cases and for good reasons *specific* scripts
 may require an even newer RouterOS version, so only `stable` is supported
 temporarily.
 
+> 💡️ **Hint**: If in doubt have a look at the badge at the top of each
+> page showing the minimum version required:
+> ![required RouterOS version](https://img.shields.io/badge/RouterOS-7.15-yellow?style=flat)
+
 > ℹ️ **Info**: The `main` branch is now RouterOS v7 only. If you are still
 > running RouterOS v6 switch to `routeros-v6` branch!