mirror of
https://github.com/eworm-de/routeros-scripts.git
synced 2026-01-11 03:29:32 +00:00
3.7 KiB
3.7 KiB
Initial commands
⚠️ Warning: These command are inteneded for initial setup. If you are not aware of the procedure please follow the long way in detail.
Run the complete base installation:
{
:local localScriptUpdatesBaseUrl "https://git.eworm.de/cgit/routeros-scripts/plain/";
:local localBaseUrlCert "ISRG-Root-X2.pem";
:local localCertName "ISRG Root X2";
:local localCertFilename "isrg-root-x2.pem";
:local localCertFingerprint "69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
/tool/fetch ( $localScriptUpdatesBaseUrl . "certs/" . $localBaseUrlCert ) dst-path=$localCertFilename as-value;
:delay 1s;
/certificate/import file-name=$localCertFilename passphrase="";
:if ([ :len [ /certificate/find where fingerprint=$localCertFingerprint ] ] != 1) do={
:error "Something is wrong with your certificates!";
} else={
:put "Certificate validated with fingerprint";
};
:delay 1s;
:put "Backup global-config-overlay...";
/system/script/set name=("global-config-overlay-" . [ /system/clock/get date ] . "-" . [ /system/clock/get time ]) [ find where name="global-config-overlay" ];
:foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={
:put "Install $Script ...";
/system/script/remove [ find where name=$Script ];
/system/script/add name=$Script owner=$Script source=([ /tool/fetch check-certificate=yes-without-crl ($localScriptUpdatesBaseUrl . $Script . ".rsc") output=user as-value]->"data");
};
:put "Run new scripts ...";
/system/script { run global-config; run global-functions; };
/system/scheduler/remove [ find where name="global-scripts" ];
:put "Schedule run scripts on startup";
/system/scheduler/add name="global-scripts" start-time=startup on-event="/system/script { run global-config; run global-functions; }";
:put "Rename certificate by its common-name ..."
:global CertificateNameByCN;
$CertificateNameByCN $localCertName;
};
Then continue setup with scheduled automatic updates or editing configuration.
Fix existing installation
The initial commands above allow to fix an existing
installation in case it ever breaks. If global-config-overlay did exist
before it is renamed with a date and time suffix (like
global-config-overlay-2024-01-25-09:33:12). Make sure to restore the
configuration overlay if required.