central: Specify credentials for change hook authentication

roles/central/default.nix

@@ -62,6 +62,9 @@ let
     buildbot = {
       url = "https://dolphin.ci/";
 
+      change_hook_username = "!FileInclude ${config.age.secrets.central-change-hook-username.path}";
+      change_hook_password = "!FileInclude ${config.age.secrets.central-change-hook-password.path}";
+
       pr_builders = [
         "pr-android"
         "pr-deb-x64"
@@ -107,6 +110,14 @@ in {
   options.my.roles.central.enable = lib.mkEnableOption "Dolphin Central server";
 
   config = lib.mkIf cfg.enable {
+    age.secrets.central-change-hook-username = {
+      file = ../../secrets/central-change-hook-username.age;
+      owner = "central";
+    };
+    age.secrets.central-change-hook-password = {
+      file = ../../secrets/central-change-hook-password.age;
+      owner = "central";
+    };
     age.secrets.gh-app-priv-key = {
       file = ../../secrets/gh-app-priv-key.age;
       owner = "central";

secrets/central-change-hook-password.age

@@ -0,0 +1,17 @@
+age-encryption.org/v1
+-> ssh-ed25519 QNIwVA Db+VsLc4c/MgaMsD5j68R19FmdKZ8fjE6KZpcRBC7i0
+XJE4SgKnYNX8SJ7ix9Tw2N4ok/4gFS5LBYFt6fjG59I
+-> ssh-ed25519 nDu9FA ML9lMjG/7nTZz0IiQ7PrHgI8CIrGvNMmud4rcJnnXVU
+p01O9nLzGNazFHpa0ILZpLP3k/FGfRVwhOUVWYQtPf4
+-> ssh-ed25519 tX+N9g DerHbUW12UTQzy7ypFaXVNgGQ5Xbo3V7jTMtlNMa0yg
+kxLafjlU2v7qOVH4qlsPqNcajzMZ3/O1kQG94hD96mg
+-> ssh-ed25519 nE7g2A SggyVXe3XxtcpBpvuWLu3vi3mA1zBLB/B7WRzVvWk30
+IhXZqsNp2Lf+OZVNU8VB6fGGfz8YQ7Sdkm+abDGkrJE
+-> ssh-ed25519 eddTNw pbKYBFdHZBeaF2+18i6y2Wg2XtmMSQqDlxiqVjM8JCs
+wi+ASr1GpjlZQ1pgp3q9MEs7L0tB0tM5HsHItmrSmVI
+-> TKpes`-grease
+Wa6ukdgsows8xBNfVKTQghAx+cJGa6c8rI5/zhacZ1+jKZmjxCASuvymKbLzBJQ/
+tNki9NscT2jDcSWXvCKq48UzaqjnWee2jNQsRA7B
+--- xdLr5xzxA4SNInc4I6q5BbOu3SoQ9DJ4wGzTMi3KBY0
+<EFBFBD>Kuc%;<3B>0<17><><EFBFBD>,:<3A>kf<6B>.S)t<>5p[<5B>I<EFBFBD><49>Nr3<1C><><EFBFBD>0<EFBFBD><30><06><>#6;Rҡ<52>y<0B>b<><62><EFBFBD>
+-*<2A>0

secrets/central-change-hook-username.age

@@ -0,0 +1,15 @@
+age-encryption.org/v1
+-> ssh-ed25519 QNIwVA afFDC+Bv5VIQS+7vzSKxcYCen2dqFgqsnIhzfIzyZGE
+aesSdjUBojklzIS7QBF4VjXEBEDmvA7XZStsIQb6mck
+-> ssh-ed25519 nDu9FA aRRJPwiaqb2QgV4lsoc5EenSzenjZLz6XlM6ok9UnU8
+zMSBuUcOrG3Gvy3+XhZ2NcbZ3i7APBjzGGO1nqryWNg
+-> ssh-ed25519 tX+N9g mdWMz1j7R/Rdfcm7BO4cFsSl81i4RDGOcJtSHKyDHjM
+6v1iBAr737OQOptbxdrCj2PrNJrVfxwTaHxjbLWCNI8
+-> ssh-ed25519 nE7g2A OedEdfSAqHljVq0iW+OFs8vYew/w6zIJgp33l33aOFc
+lmrihHroTadACiaLDTSgyn22R9MTB+h96p3OTB49+dM
+-> ssh-ed25519 eddTNw FI/ILhPexzRi92q/5p4mDQ0wPbmPx3oz0eJf/Ueaems
+dvNyE+EVatrC5tt8I2/kftG8phOtZakeMMOksxqhuuU
+-> x`5{-grease YPQ!.ak1 %uBk`xg
+N/eCom8weuLdEdc5taUn
+--- hL91Pi/SQVUuz0rwlWgst77MO9tqsboRxJR4XYx0/Ng
+<EFBFBD>0<EFBFBD><EFBFBD>&ڎ<>VQg<><67>KKU<4B>;<3B>ԗ<><D497>]'v<>p7<70><37><EFBFBD><EFBFBD>Oä<4F>~

secrets/secrets.nix

@@ -27,6 +27,8 @@ let
     "buildbot-steam-username.age"
     "buildbot-steam-password.age"
     "buildbot-workers-passwords.age"
+    "central-change-hook-username.age"
+    "central-change-hook-password.age"
     "container-builder-env.age"
     "etherpad-apikey.age"
     "etherpad-sessionkey.age"