---
- name: Enable Google Chrome repository
  ansible.builtin.yum_repository:
    name: google-chrome
    baseurl: https://dl.google.com/linux/chrome/rpm/stable/x86_64
    description: google-chrome
    gpgcheck: true
    gpgkey: https://dl.google.com/linux/linux_signing_key.pub
    enabled: true

- name: Install packages
  ansible.builtin.package:
    name: google-chrome-stable
    state: present

- name: Create policy directories
  ansible.builtin.file:
    path: "{{ item }}"
    state: directory
    mode: "0755"
    owner: root
    group: root
  with_items:
    - /etc/opt/chrome/policies/managed
    - /etc/opt/chrome/policies/recommended

- name: Install managed settings
  ansible.builtin.copy:
    dest: /etc/opt/chrome/policies/managed/foo.sh.json
    src: managed.json
    mode: "0644"
    owner: root
    group: root

- name: Install recommended settings
  ansible.builtin.copy:
    dest: /etc/opt/chrome/policies/recommended/foo.sh.json
    src: recommended.json
    mode: "0644"
    owner: root
    group: root

- name: Install custom startup scripts
  ansible.builtin.copy:
    dest: "/usr/local/bin/{{ item }}"
    src: "{{ item }}.sh"
    mode: "0755"
    owner: root
    group: "{{ ansible_wheel }}"
  with_items:
    - google-chrome-incognito
    - google-chrome-socksproxy