You have an invalid security profile:
/interface wireless
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=
20/40/80mhz-XXXX country="czech republic" default-forwarding=no distance=
indoors installation=indoor mode=ap-bridge name=wlan2-WIFI5
security-profile=*1 ssid=wifi-doma5g wireless-protocol=802.11
point #21:
GP & CSA (Good Practice and Common Sense Advice) for Mikrotik devices
Unrelated, but this:
/interface detect-internet
set detect-interface-list=all
is not advised, see Rule #5:
The twelve Rules of Mikrotik Club
The device is an AC3.
It is possible to run on it wifi-qcom-ac (i.e. "wifi" as opposed to "wireless"), it is said that the new drivers are more stable/faster, so - once the issue is solved - you might want to consider using the new drivers.