nix/coordinator.nix

@@ -38,6 +38,10 @@ in
         type = lib.types.path;
         description = "File containing a list of nix workers";
       };
+      oauth2SecretFile = lib.mkOption {
+        type = lib.types.path;
+        description = "File containing an OAuth 2 client secret";
+      };
       buildSystems = lib.mkOption {
         type = lib.types.listOf lib.types.str;
         default = [ pkgs.hostPlatform.system ];
@@ -144,6 +148,7 @@ in
         # in master.py we read secrets from $CREDENTIALS_DIRECTORY
         LoadCredential = [
           "buildbot-nix-workers:${cfg.workersFile}"
+          "buildbot-oauth2-secret:${cfg.oauth2SecretFile}"
         ]
         ++ lib.optional (cfg.cachix.signingKeyFile != null)
           "cachix-signing-key:${builtins.toString cfg.cachix.signingKeyFile}"