- name: Add Firefox not-a-snap repository
  block:
    - name: add Mozilla apt key
      ansible.builtin.get_url:
        url: https://packages.mozilla.org/apt/repo-signing-key.gpg
        dest: /etc/apt/keyrings/packages.mozilla.org.asc

    - name: add Mozilla apt source
      ansible.builtin.apt_repository:
        repo: "deb [signed-by=/etc/apt/keyrings/packages.mozilla.org.asc] https://packages.mozilla.org/apt mozilla main"
        state: present

    #- name: Add Firefox PPA
    #  apt_repository:
    #    repo: ppa:mozillateam/ppa
    #    state: present
    #    update_cache: True
    #    validate_certs: False
    - name: Pin Firefox PPA package priority
      template:
        src: mozilla-firefox-apt-preferences
        dest: /etc/apt/preferences.d/mozilla-firefox
    - name: Enable Firefox unattended upgrades
      template:
        src: mozilla-firefox-unattended-upgrades 
        dest: /etc/apt/apt.conf.d/51unattended-upgrades-firefox

- name: Install Firefox
  apt:
    name:
      - firefox
    state: latest
    allow_downgrade: True