debianito-post-install/modules/extras/internet/internet.sh

#!/usr/bin/env bash
# internet.sh — Browsers, email, VPN
# extrepo-powered: mozilla, floorp, palemoon, librewolf, tailscale, mullvad, protonvpn
# firefox-esr from Debian repos (with locale auto-detect)

# ── Helpers extrepo ──
_ensure_extrepo() {
    if ! command -v extrepo &>/dev/null; then
        _run_cmd "extrepo" "sudo apt install -y extrepo" "Installing extrepo..."
    fi
}

_enable_mozilla_repo() {
    if [ ! -f /etc/apt/sources.list.d/extrepo_mozilla.sources ]; then
        _ensure_extrepo
        _run_cmd "Mozilla" "sudo extrepo enable mozilla" "Enabling Mozilla repository..."
    fi
    if [ ! -f /etc/apt/preferences.d/mozilla ]; then
        sudo tee /etc/apt/preferences.d/mozilla >/dev/null <<'EOF'
Package: *
Pin: origin packages.mozilla.org
Pin-Priority: 1000
EOF
    fi
    _ensure_apt_updated
}

_enable_floorp_repo() {
    if [ ! -f /etc/apt/sources.list.d/extrepo_floorp.sources ]; then
        _ensure_extrepo
        _run_cmd "Floorp" "sudo extrepo enable floorp" "Enabling Floorp repository..."
    fi
    _ensure_apt_updated
}

install_palemoon() {
    if [ "$DEBIAN_VERSION" -lt 12 ] 2>/dev/null; then
        _msg "Pale Moon" "Pale Moon is only available on\nDebian 12 (Bookworm) and 13 (Trixie).\n\nSkipping installation." 10 60
        return 1
    fi

    local cpu_flags cpu_label REPO_PALEMOON
    cpu_flags=$(grep -m1 '^flags' /proc/cpuinfo 2>/dev/null)

    if echo "$cpu_flags" | grep -q 'avx2'; then
        REPO_PALEMOON="palemoon_avx2_gtk3"
        cpu_label="AVX2"
    elif echo "$cpu_flags" | grep -q 'avx'; then
        REPO_PALEMOON="palemoon_avx_gtk3"
        cpu_label="AVX"
    else
        REPO_PALEMOON="palemoon_sse2_gtk3"
        cpu_label="SSE2"
    fi

    _msg "Pale Moon" "CPU detected: ${cpu_label} support.\n\nEnabling optimized repository:\n  ${REPO_PALEMOON}" 10 60

    if ls /etc/apt/sources.list.d/extrepo_palemoon_*.sources &>/dev/null; then
        echo "Pale Moon repository already enabled."
    else
        _ensure_extrepo
        _run_cmd "Pale Moon" "sudo extrepo enable ${REPO_PALEMOON}" "Enabling ${REPO_PALEMOON}..."
        _ensure_apt_updated
    fi

    if ! is_installed "palemoon"; then
        _run_cmd "Pale Moon" "sudo apt install -y palemoon" "Installing Pale Moon..."
        echo -e "${GREEN}Pale Moon installed.${NC}"
    else
        echo "Pale Moon already installed."
    fi
}

_enable_librewolf_repo() {
    if [ ! -f /etc/apt/sources.list.d/extrepo_librewolf.sources ]; then
        _ensure_extrepo
        _run_cmd "LibreWolf" "sudo extrepo enable librewolf" "Enabling LibreWolf repository..."
    fi
    _ensure_apt_updated
}

_enable_tailscale_repo() {
    if [ ! -f /etc/apt/sources.list.d/extrepo_tailscale.sources ]; then
        _ensure_extrepo
        _run_cmd "Tailscale" "sudo extrepo enable tailscale" "Enabling Tailscale repository..."
    fi
    _ensure_apt_updated
}

_enable_mullvad_repo() {
    if [ ! -f /etc/apt/sources.list.d/extrepo_mullvad.sources ]; then
        _ensure_extrepo
        _run_cmd "Mullvad" "sudo extrepo enable mullvad" "Enabling Mullvad repository..."
    fi
    _ensure_apt_updated
}

install_protonvpn() {
    if [ ! -f /etc/apt/sources.list.d/extrepo_protonvpn.sources ]; then
        _ensure_extrepo
        _run_cmd "ProtonVPN" "sudo extrepo enable protonvpn stable" "Enabling ProtonVPN repository (stable suite)..."
        _ensure_apt_updated
    else
        echo "ProtonVPN repository already enabled."
    fi

    if ! is_installed "proton-vpn-gtk-app"; then
        _msg "ProtonVPN" "Installing Proton VPN GTK client\nfrom the official Proton repository." 10 60
        _run_cmd "ProtonVPN" "sudo apt install -y proton-vpn-gtk-app" "Installing Proton VPN GTK app..."
        echo -e "${GREEN}ProtonVPN installed.${NC}"
    else
        echo "Proton VPN GTK app already installed."
    fi
}

# ── Categories ──
_cat_internet() {
    local headless=false
    _is_headless && headless=true
    local -a items=()
    if ! $headless; then
        local chromium_state
        chromium_state=$(_state "chromium")
        local dillo_state
        dillo_state=$(_state "dillo")
        local epiphany_state
        epiphany_state=$(_state "epiphany-browser")
        local falkon_state
        falkon_state=$(_state "falkon")
        local firefox_state="OFF"
        if command -v firefox &>/dev/null && ! is_installed "firefox-esr"; then
            firefox_state="ON"
        fi
        local firefox_esr_state
        firefox_esr_state=$(_state "firefox-esr")
        local floorp_state
        floorp_state=$(_state "floorp")
        local konqueror_state
        konqueror_state=$(_state "konqueror")
        local librewolf_state
        librewolf_state=$(_state "librewolf")
        local palemoon_state
        palemoon_state=$(_state "palemoon")
        local privacybrowser_state
        privacybrowser_state=$(_state "privacybrowser")
        local qutebrowser_state
        qutebrowser_state=$(_state "qutebrowser")
        local thunderbird_state
        thunderbird_state=$(_state "thunderbird")
        local torbrowser_state
        torbrowser_state=$(_state "torbrowser-launcher")
        local mullvadbrowser_state
        mullvadbrowser_state=$(_state "mullvad-browser")
        local protonvpn_state
        protonvpn_state=$(_state "protonvpn")
        items+=(
            "chromium" "Chromium web browser" "$chromium_state"
            "dillo" "Lightweight graphical browser" "$dillo_state"
            "epiphany-browser" "GNOME web browser" "$epiphany_state"
            "falkon" "KDE web browser (QtWebEngine)" "$falkon_state"
            "firefox" "Firefox from Mozilla (replaces ESR)" "$firefox_state"
            "firefox-esr" "Firefox ESR (official Debian + locale auto)" "$firefox_esr_state"
            "floorp" "Firefox-based browser (extrepo)" "$floorp_state"
            "konqueror" "KDE file manager / web browser" "$konqueror_state"
            "librewolf" "Privacy-focused Firefox fork (extrepo)" "$librewolf_state"
            "palemoon" "Classic Firefox-derived browser (extrepo)" "$palemoon_state"
            "privacybrowser" "Privacy-focused web browser" "$privacybrowser_state"
            "qutebrowser" "Keyboard-driven browser (Qt)" "$qutebrowser_state"
            "thunderbird" "Email client" "$thunderbird_state"
            "torbrowser-launcher" "Tor Browser launcher" "$torbrowser_state"
            "mullvad-browser" "Mullvad privacy browser" "$mullvadbrowser_state"
            "protonvpn" "ProtonVPN client" "$protonvpn_state"
        )
    fi
    local elinks_state
    elinks_state=$(_state "elinks")
    local riseupvpn_state
    riseupvpn_state=$(_state "riseup-vpn")
    local w3m_state
    w3m_state=$(_state "w3m")
    local tailscale_state
    tailscale_state=$(_state "tailscale")
    local mullvad_state
    mullvad_state=$(_state "mullvad-vpn")
    items+=(
        "elinks" "Text-mode web browser" "$elinks_state"
        "riseup-vpn" "Riseup VPN client" "$riseupvpn_state"
        "w3m" "Text-mode browser + deps (w3m-img)" "$w3m_state"
        "tailscale" "Zero-config VPN & mesh networking" "$tailscale_state"
        "mullvad-vpn" "Mullvad VPN client (WireGuard)" "$mullvad_state"
    )

    local item_count=${#items[@]}
    local lista_alto=$((item_count > TUI_ALTO_LISTA ? TUI_ALTO_LISTA : item_count))
    local choices
    choices=$(
        _checklist "Internet" "Check [*] the packages you want installed/updated on your system.\n" $TUI_ALTO $TUI_ANCHO $lista_alto \
            "${items[@]}"
    )
    clear

    [ -z "$choices" ] && return

    local cleaned
    cleaned=$(echo "$choices" | tr -d '"')

    local has_firefox=false
    local has_firefox_esr=false
    local fchoice=""
    # BH-004: Convert to array to avoid word splitting and injection.
    local -a _pkgs=()
    while IFS= read -r _pkg; do
        [ -n "$_pkg" ] && _pkgs+=("$_pkg")
    done < <(echo "$cleaned" | tr ' ' '\n')
    for _p in "${_pkgs[@]}"; do
        [ "$_p" = "firefox" ] && has_firefox=true
        [ "$_p" = "firefox-esr" ] && has_firefox_esr=true
    done

    if $has_firefox && $has_firefox_esr; then
        fchoice=$(_menu "Firefox" "You selected both Firefox (Mozilla) and Firefox ESR.\nWhat do you want to do?" 12 60 3 \
            "mozilla" "Remove Firefox ESR — keep Firefox" \
            "esr" "Remove Firefox — keep Firefox ESR" \
            "both" "Keep both variants")
        [ -z "$fchoice" ] && return
        case "$fchoice" in
        mozilla) cleaned=$(printf '%s\n' "${_pkgs[@]}" | grep -vx "firefox-esr" | tr '\n' ' ') ;;
        esr) cleaned=$(printf '%s\n' "${_pkgs[@]}" | grep -vx "firefox" | tr '\n' ' ') ;;
        esac
    fi

    # BH-004: Convert to array to avoid word splitting and injection.
    local -a _pkgs=()
    while IFS= read -r _pkg; do
        [ -n "$_pkg" ] && _pkgs+=("$_pkg")
    done < <(echo "$cleaned" | tr ' ' '\n')

    # Pre-apply summary: confirm the selection once,
    # before any apt transaction starts.
    _confirm_install_list "Internet" "${_pkgs[@]}" || return
    for pkg in "${_pkgs[@]}"; do
        case $pkg in
        firefox)
            install_firefox_mozilla "$fchoice"
            ;;
        firefox-esr)
            install_firefox_esr "$fchoice"
            ;;
        floorp)
            _enable_floorp_repo
            _run_install floorp
            echo -e "${GREEN}Floorp installed.${NC}"
            ;;
        librewolf)
            _enable_librewolf_repo
            _run_install librewolf
            echo -e "${GREEN}LibreWolf installed.${NC}"
            ;;
        palemoon)
            install_palemoon
            ;;
        tailscale)
            _enable_tailscale_repo
            _run_install tailscale
            echo -e "${GREEN}Tailscale installed.${NC}"
            ;;
        mullvad-vpn)
            _enable_mullvad_repo
            _run_install mullvad-vpn
            echo -e "${GREEN}Mullvad VPN installed.${NC}"
            ;;
        mullvad-browser)
            _enable_mullvad_repo
            _run_install mullvad-browser
            echo -e "${GREEN}Mullvad Browser installed.${NC}"
            ;;
        protonvpn)
            install_protonvpn
            ;;
        riseup-vpn)
            install_backports_or_stable riseup-vpn
            ;;
        w3m)
            local need=()
            ! is_installed "w3m" && need+=("w3m")
            ! is_installed "w3m-img" && need+=("w3m-img")
            ! is_installed "ca-certificates" && need+=("ca-certificates")
            ! is_installed "xsel" && need+=("xsel")
            if [ ${#need[@]} -gt 0 ]; then
                _run_install_batch "${need[@]}"
            else
                echo "w3m already installed."
            fi
            ;;
        *)
            if ! is_installed "$pkg"; then
                _run_install "$pkg"
            else
                echo "$pkg already installed."
            fi
            ;;
        esac
    done

    # Release the per-package prompt suppression.
    _SELECTION_CONFIRMED=0

    echo -e "${GREEN}Internet tools installed.${NC}"
}

install_firefox_mozilla() {
    local fchoice="${1:-}"
    if [ "$DEBIAN_VERSION" -lt 12 ] 2>/dev/null; then
        _msg "Firefox" "Mozilla Firefox is only available on\nDebian 12 (Bookworm) and 13 (Trixie).\n\nSkipping installation." 10 60
        return 1
    fi

    if command -v firefox &>/dev/null && ! is_installed "firefox-esr"; then
        echo "Firefox (Mozilla) is already installed."
        return
    fi

    if is_installed "firefox-esr"; then
        case "$fchoice" in
        both)
            echo -e "${CYAN}[INFO] Keeping Firefox ESR (both selected).${NC}"
            ;;
        mozilla)
            echo "Removing Firefox ESR (as selected)..."
            sudo apt remove -y firefox-esr
            ;;
        *)
            if _confirm "Firefox ESR" "Firefox ESR is installed.\nRemove it before installing Mozilla Firefox?"; then
                echo "Removing Firefox ESR..."
                sudo apt remove -y firefox-esr
            else
                echo "Keeping Firefox ESR."
                return
            fi
            ;;
        esac
    fi

    _enable_mozilla_repo
    _run_cmd "Firefox" "sudo apt install -y firefox" "Installing Firefox (Mozilla)..."
    echo -e "${GREEN}Firefox (Mozilla) installed.${NC}"
}

install_firefox_esr() {
    local fchoice="${1:-}"
    if is_installed "firefox-esr"; then
        echo "Firefox ESR is already installed."
        return
    fi

    if command -v firefox &>/dev/null; then
        case "$fchoice" in
        both)
            echo -e "${CYAN}[INFO] Keeping Mozilla Firefox (both selected).${NC}"
            ;;
        esr)
            echo "Removing Mozilla Firefox (as selected)..."
            sudo apt remove -y firefox
            ;;
        *)
            if _confirm "Firefox" "Mozilla Firefox is installed.\nRemove it before installing Firefox ESR?"; then
                echo "Removing Mozilla Firefox..."
                sudo apt remove -y firefox
            else
                echo "Keeping Mozilla Firefox."
                return
            fi
            ;;
        esac
    fi

    _run_cmd "Firefox ESR" "sudo apt install -y firefox-esr" "Installing Firefox ESR..."

    local lang_pkg
    lang_pkg=$(_detect_lang_pkg "firefox-esr-l10n")
    if [ -n "$lang_pkg" ]; then
        _run_cmd "Firefox ESR Locale" "sudo apt install -y ${lang_pkg}" \
            "Installing locale: ${lang_pkg}..."
    else
        echo "No matching locale package found for your language."
    fi

    echo -e "${GREEN}Firefox ESR installed.${NC}"
}