- name: Firefox setup
  hosts: all
  tasks:

    - name: Install Firefox
      apt:
        name:
          - firefox
#          - firefox-locale-de

    - name: Install Flatpaks
      community.general.flatpak:
        name:
          - io.gitlab.librewolf-community

    - name: create LibreWolf /etc/librewolf/policies dir structure
      file:
        path: /etc/librewolf/policies
        state: directory

    - name: Firefox policy
      ansible.builtin.copy:
        src: policies.json
        dest: "{{ item }}"
        owner: root
        group: root
        mode: '0444'
        backup: yes
      with_items:
        - "/usr/lib/firefox/distribution/policies.json"
        - "/etc/librewolf/policies/policies.json"
    
    - name: Get sha256
      shell: wget -q https://gitlab.com/api/v4/projects/24386000/packages/generic/librewolf/latest/LibreWolf.x86_64.AppImage.sha256 -O - | cut -d" " -f1
      register: command_output

    - set_fact:
        librewolf_sha256: "{{ command_output.stdout }}"

    - name: Download LibreWolf as Appimage (flatpak ignores policies.json)
      ansible.builtin.get_url:
        url: https://gitlab.com/api/v4/projects/24386000/packages/generic/librewolf/latest/LibreWolf.x86_64.AppImage
        dest: /usr/local/bin/librewolf
        checksum: sha256:{{ librewolf_sha256 }}
        mode: "0555"

    - name: /usr/local/sbin/autoupdate.d/video-download-helper.update
      blockinfile:
        path: /usr/local/sbin/autoupdate.d/video-download-helper.update
        mode: "0400"
        owner: root
        group: root
        create: yes
        marker: "# {mark} ANSIBLE MANAGED BLOCK"
        block: |
          wget -q $(curl -s https://api.github.com/repositories/108186071/releases/latest | jq -r '.assets[].browser_download_url' | grep linux-x86_64.deb | head -n1) -O /tmp/vdh.deb
          dpkg -i /tmp/vdh.deb
          rm /tmp/vdh.deb
        backup: yes
        validate: /bin/bash -n %s

    - name: Install video-download-helper
      command: bash -e /usr/local/sbin/autoupdate.d/video-download-helper.update
      args:
        creates: /opt/net.downloadhelper.coapp