aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2024-12-09daily-psk.capsman: use $ExitError to indicate unintentional errorGravatar Christian Hesse4-4/+20
2024-12-09collect-wireless-mac: use $ExitError to indicate unintentional errorGravatar Christian Hesse4-4/+20
2024-12-09check-routeros-update: use $ExitError to indicate unintentional errorGravatar Christian Hesse1-2/+25
2024-12-09check-lte-firmware-upgrade: use $ExitError to indicate unintentional errorGravatar Christian Hesse1-1/+5
2024-12-09check-health: use $ExitError to indicate unintentional errorGravatar Christian Hesse1-1/+6
2024-12-09check-certificates: use $ExitError to indicate unintentional errorGravatar Christian Hesse1-1/+5
2024-12-09certificate-renew-issued: use $ExitError to indicate unintentional errorGravatar Christian Hesse1-1/+5
2024-12-09capsman-rolling-upgrade: use $ExitError to indicate unintentional errorGravatar Christian Hesse3-3/+15
2024-12-09capsman-download-packages: use $ExitError to indicate unintentional errorGravatar Christian Hesse3-3/+21
2024-12-09backup-upload: use $ExitError to indicate unintentional errorGravatar Christian Hesse1-1/+7
2024-12-09backup-partition: use $ExitError to indicate unintentional errorGravatar Christian Hesse1-1/+11
2024-12-09accesslist-duplicates: use $ExitError to indicate unintentional errorGravatar Christian Hesse4-4/+16
2024-12-09backup-email: use $ExitError to indicate unintentional errorGravatar Christian Hesse1-1/+9
2024-12-09backup-cloud: use $ExitError to indicate unintentional errorGravatar Christian Hesse1-1/+6
2024-12-09global-functions: $ExitError: give script name in messageGravatar Christian Hesse1-1/+1
2024-12-09global-functions: introduce $ExitError...•••... as a simple macro to print error message on unintentional error. Gravatar Christian Hesse1-0/+13
2024-12-09global-functions: $FetchHuge: passing boolean to function is still broken... ...Gravatar Christian Hesse1-4/+4
2024-11-27netwatch-dns: explicitly expect type=A...•••... which is provided since 7.16beta7 (but require next stable release 7.16 as that is available meanwhile). routeros-7.16-7Gravatar Christian Hesse2-3/+3
2024-11-27dhcp-to-dns: explicitly expect type=A...•••... which is provided since 7.16beta7 (but require next stable release 7.16 as that is available meanwhile). I had this on my wishlist for a long time, and opened an issue in March 2023 about it (SUP-111312). Back then I changed the code to support both, see commit 779b3b8872b23b784c331d7a454c86439046f5d3. routeros-7.16-6Gravatar Christian Hesse2-5/+5
2024-11-27mod/ssh-keys-import: require RouterOS 7.16•••Actually the requirement bumped with the change in commits: * 9c945b1a3283bb352707c69630c579cf82484dcb mod/ssh-keys-import: $SSHKeysImportFile: simplify looping lines * 1f526b356121749991fee69cee5a6c728855c8f2 mod/ssh-keys-import: $SSHKeysImport: split with `:deserialize` routeros-7.16-5Gravatar Christian Hesse2-2/+2
2024-11-27fw-addr-lists: require RouterOS 7.16•••Actually the requirement bumped with the change in commit: * 084c246ef0cab329fe981732089277fa8398800b fw-addr-lists: simplify looping lines routeros-7.16-4Gravatar Christian Hesse2-2/+2
2024-11-22fw-addr-lists: spamhaus.org returned to 'GTS Root R4'Gravatar Christian Hesse2-3/+3
2024-11-15mode-button: do not act on disabled LEDGravatar Christian Hesse1-1/+2
2024-11-15mode-button: catch runtime errors in executed codeGravatar Christian Hesse1-1/+5
2024-11-15mode-button: fix the caller parameter to $LogPrint•••This is inside a function, so use just $0 here. Gravatar Christian Hesse1-3/+3
2024-11-14packages-update: drop check for device-mode downgrade...•••... as things have been revised and this specific setting was removed. routeros-7.17beta5-1Gravatar Christian Hesse1-6/+0
2024-11-13hotspot-to-wpa-cleanup: revert display of timeout value...•••... as the timeout is a time value, and showing "4w00:00:00" (with lots of zeros) is not any better. 😜 This reverts commit f1533b8962bc67d17e9f6b5666ae51ee4d1e1ff4. Gravatar Christian Hesse3-3/+3
2024-11-13hotspot-to-wpa-cleanup: prepare real timeout value in variable...•••... to make sure it is not re-calculated for every single lease. Gravatar Christian Hesse3-6/+6
2024-11-12hotspot-to-wpa-cleanup: clean up daily onlyGravatar Christian Hesse3-3/+6
2024-11-12hotspot-to-wpa-cleanup: use the timeout in message...•••... not the actual value. Gravatar Christian Hesse3-3/+3
2024-11-12check-routeros-update: always exit early if up to date...•••... and just make the output and log dependent on terminal. Gravatar Christian Hesse1-2/+4
2024-11-12check-routeros-update: make invalid version string a warningGravatar Christian Hesse1-1/+1
2024-11-12check-routeros-update: add specific message for empty version stringGravatar Christian Hesse1-0/+5
2024-11-12check-routeros-update: replace hard-coded versionGravatar Christian Hesse1-1/+1
2024-11-08mod/ssh-keys-import: $SSHKeysImport: split with `:deserialize`routeros-7.16-3Gravatar Christian Hesse1-2/+1
2024-11-08mod/ssh-keys-import: $SSHKeysImportFile: let `:deserialize` split the fieldsGravatar Christian Hesse1-6/+3
2024-11-08mod/ssh-keys-import: $SSHKeysImportFile: simplify looping linesrouteros-7.16-2Gravatar Christian Hesse1-5/+4
2024-11-06fw-addr-lists: simplify looping lines•••With `:deserialize` the **record** separator is always a new line. The property `delimiter=` is a **field** reparator, so you can parse a lines into an array. We do not want (or need) that, so use new line as field separator. This will result in an array with just one element, and we use that. Also convert the data to line feed explicitly, just to be sure. routeros-7.16-1Gravatar Christian Hesse1-4/+3
2024-11-02doc/netwatch-dns: link to 'certificate name from browser'Gravatar Christian Hesse2-2/+4
2024-11-02doc/fw-addr-lists: link to 'certificate name from browser'Gravatar Christian Hesse2-3/+8
2024-11-02doc/mod/notification-ntfy: link to 'certificate name from browser'Gravatar Christian Hesse2-0/+6
2024-11-02doc/mod/notification-matrix: link to 'certificate name from browser'Gravatar Christian Hesse2-0/+8
2024-11-02introduce CERTIFICATES, guide to find root certificateGravatar Christian Hesse5-0/+74
2024-10-30global-functions: $CertificateAvailable: fail without CommonNameGravatar Christian Hesse1-0/+5
2024-10-29certs: check cert for matrix.orgGravatar Christian Hesse1-0/+1
2024-10-29doc/mod/notification-matrix: better document certificate importGravatar Christian Hesse1-0/+7
2024-10-25ipv6-update: create a dynamic address-list entry only•••This should make sure that the script runs once after reboot, even if the prefix does not change. An existing static entry needs to be removed to make this work! https://github.com/eworm-de/routeros-scripts/issues/85 Gravatar Christian Hesse2-6/+10
2024-10-23ipv6-update: ignore if address was acquired•••https://github.com/eworm-de/routeros-scripts/issues/85 Gravatar Christian Hesse1-0/+6
2024-10-23fw-addr-lists: spamhaus.org requires 'ISRG Root X1' nowGravatar Christian Hesse2-3/+3
2024-10-23packages-update: check for explicit state...•••... as all device-mode properties are given since RouterOS 7.14beta4. Let's assume we do not have to care about RouterOS 7.14beta2 any more... As older versions will not match the check we can now merge right away. routeros-7.17beta4-2Gravatar Christian Hesse1-3/+1
2024-10-22backup-partition: drop warning on lock in device-mode•••... as switching partitions is possible again in RouterOS 7.17beta4. routeros-7.17beta4-1Gravatar Christian Hesse1-8/+0
2024-10-10doc/netwatch-notify: fix typo(s)Gravatar Christian Hesse1-3/+3
2024-10-10doc/netwatch-notify: give an extra example for resolving AAAA recordsGravatar Christian Hesse1-1/+6
2024-10-10doc/netwatch-notify: always give a host...•••... as that is a required property. Any ip address is fine, it is changed anyway. Gravatar Christian Hesse1-2/+2
2024-10-09backup-partition: log the warning just onceGravatar Christian Hesse1-1/+2
2024-10-02update list of contributorsGravatar Christian Hesse1-0/+1
2024-10-01update list of contributorsGravatar Christian Hesse1-0/+1
2024-10-01mod/notification-ntfy: fix ntfy overridesGravatar Ignacio Serrano1-2/+2
2024-09-30log-forward: get last message from log...•••... not only from matched massages. Gravatar Christian Hesse1-2/+3
2024-09-30packages-update: give warning on lock in device-mode•••RouterOS 7.17beta2 introduced some extra security measures, including some to prevent downgrade attacks for the installation. Detect early and exit with message and error. https://help.mikrotik.com/docs/display/ROS/Device-mode routeros-7.17beta2-2Gravatar Christian Hesse1-0/+8
2024-09-30backup-partition: give warning on lock in device-mode•••RouterOS 7.17beta2 introduced some extra security measures, including some to prevent downgrade attacks for the installation. Thus switching partitions (which can hold quite old installations) is denied by device-mode now by default. Warn about that... https://help.mikrotik.com/docs/display/ROS/Device-mode routeros-7.17beta2-1Gravatar Christian Hesse1-0/+7
2024-09-26global-functions: $CertificateDownload: add another check...•••... that the certificate is really available. Turns out that mkcert.org ships certificates where OU or whatever matches - that's not what we want. Gravatar Christian Hesse1-0/+6
2024-09-25hotspot-to-wpa-cleanup: only match access-list with mac-addressGravatar Christian Hesse3-3/+3
2024-09-16check-routeros-update: use $VersionToNum to calculate bitmaskGravatar Christian Hesse1-2/+5
2024-09-13backup-partition: use $VersionToNum to calculate bitmaskGravatar Christian Hesse1-1/+2
2024-09-13global-functions: $VersionToNum: support "zero"...•••... to have a clean way to generate bitmasks. [admin@mikrotik] > :put [ $VersionToNum 0.255zero0 ] 16711680 [admin@mikrotik] > :put 0x00ff0000 16711680 Once implemented everywhere the internal calculation could be changed easily. Gravatar Christian Hesse1-1/+2
2024-09-11fw-addr-lists: use lists in JSON format for spamhaus.orgGravatar Christian Hesse1-1/+3
2024-09-11fw-addr-lists: handle JSON format from spamhaus.org•••Closes: https://github.com/eworm-de/routeros-scripts/issues/79 Gravatar Christian Hesse1-1/+6
2024-09-05netwatch-dns: give warning on CRL useGravatar Christian Hesse1-0/+4
2024-09-04certs: add poor man's check 😜Gravatar Christian Hesse1-0/+31
2024-08-28certs: drop 'Baltimore CyberTrust Root'Gravatar Christian Hesse1-28/+0
2024-08-28fw-addr-lists: drop edrop.txt, which does no longer existGravatar Christian Hesse1-2/+0
2024-08-28fw-addr-lists: spamhaus.org requires 'GTS Root R4' now•••Fixes: https://github.com/eworm-de/routeros-scripts/issues/78 Gravatar Christian Hesse1-2/+2
2024-08-27certs: drop 'DigiCert Global Root CA'Gravatar Christian Hesse1-29/+0
2024-08-27doc/netwatch-dns: 'DigiCert Global Root G3' for Quad9Gravatar Christian Hesse1-1/+1
2024-08-27certs: add 'DigiCert Global Root G3'...•••... for quad9.net which can be used for DoH: $CertificateAvailable "DigiCert Global Root G3"; /ip/dns/set use-doh-server=https://9.9.9.9/dns-query verify-doh-cert=yes; Gravatar Christian Hesse1-0/+22
2024-08-20check-routeros-update: support switching to stable channel...•••... with a feature update in testing channel. Gravatar Christian Hesse1-0/+9
2024-08-19netwatch-dns: disable DoH if time not sync...•••... as it is possible that time is off, DNS via DoH fails (cert invalid), and finally syncing time fails due to failing DNS. Gravatar Christian Hesse1-0/+8
2024-08-19INITIAL-COMMANDS: match the certificate file name from Let's Encrypt website...•••... and our README. 😜 Gravatar Christian Hesse1-2/+2
2024-08-19README: match the certificate file name from Let's Encrypt website...•••... so import from manually downloaded and transferred file works out of the box as well. Gravatar Christian Hesse2-2/+2
2024-08-19README: make the QR code a linkGravatar Christian Hesse1-1/+1
2024-07-25telegram-chat: drop extra conversion•••The JSON parser was actually fixed in RouterOS 7.15beta4, but let's bump the required version to next stable release instead. routeros-7.15-3Gravatar Christian Hesse2-3/+3
2024-07-25daily-psk: drop workaround for old RouterOSrouteros-7.15-2Gravatar Christian Hesse5-11/+7
2024-07-25netwatch-notify: do not switch type when resolving•••This requires RouterOS 7.15beta4, but let's bump the required version to next stable release instead. routeros-7.15-1Gravatar Christian Hesse2-3/+4
2024-07-25INITIAL-COMMANDS: drop command to remove certificate file...•••... as this is done automatically with RouterOS 7.15rc1 and later. Gravatar Christian Hesse1-1/+0
2024-07-25README: drop command to remove certificate file...•••... as this is done automatically with RouterOS 7.15rc1 and later. Not bumping the required RouterOS version (badge) here... Worst thing that can happen is a stale certificate file left on storage. Gravatar Christian Hesse2-2/+1
2024-07-22global-functions: $EitherOr: revert...•••... but leave a comment. Gravatar Christian Hesse1-3/+1
2024-07-22global-functions: $EitherOr: pass boolean value•••Note that literal "true" or "false" (even without quotes) is converted to string. So you may have to enclose it in parentheses for a boolean value: > :put [ :typeof [ $EitherOr true false ] ]; str > :put [ :typeof [ $EitherOr (true) (false) ] ]; bool Gravatar Christian Hesse1-0/+3
2024-07-16Merge branch 'line-breaks' into nextrouteros-7.14-1Gravatar Christian Hesse123-152/+140
2024-07-16bump RouterOS requirement for all scripts and modules...•••... now that global-functions requires RouterOS 7.14 anyway. Gravatar Christian Hesse116-116/+116
2024-07-16mod/ipcalc: use :tocrlfGravatar Christian Hesse2-5/+4
2024-07-16mod/inspectvar: use :tocrlfGravatar Christian Hesse2-4/+3
2024-07-16global-functions: $Unix2Dos: use :tocrlfGravatar Christian Hesse1-6/+1
2024-07-16global-functions: $PrettyPrint: use :tocrlfGravatar Christian Hesse1-5/+1
2024-07-16global-functions: $Dos2Unix: use :tolfGravatar Christian Hesse1-5/+1
2024-07-16global-functions: $ScriptInstallUpdate: support storing with CRLF•••Adding this in `global-config-overlay` make the scripts being stored with CRLF line breaks: :global ScriptUpdatesCRLF true; Handle with care, I do not recommend it. Thus it's just a hidden setting. Gravatar Christian Hesse1-1/+3
2024-07-16ppp-on-up: support scripts with CRLF line breaksGravatar Christian Hesse1-1/+1
2024-07-16news-and-changes: support scripts with CRLF line breaksGravatar Christian Hesse1-1/+1
2024-07-16capsman-download-packages: support scripts with CRLF line breaksGravatar Christian Hesse3-3/+3
2024-07-16global-functions: $ScriptInstallUpdate: allow CRLF on deviceGravatar Christian Hesse1-1/+2