diff --git a/hack/deploy.sh b/hack/deploy.sh
index 28a06a4dbc..4a18716ae0 100755
--- a/hack/deploy.sh
+++ b/hack/deploy.sh
@@ -6,8 +6,6 @@
 
 set -euo pipefail
 
-./hack/populate_secrets.sh
-
 ssh_cmd="ssh -o StrictHostKeyChecking=accept-new"
 
 if [ ! -z ${2+x} ]; then ssh_cmd="$ssh_cmd $2"; fi
diff --git a/nix/gitlab-ci/default.nix b/nix/gitlab-ci/default.nix
index 47d3c39723..4d1425e18c 100644
--- a/nix/gitlab-ci/default.nix
+++ b/nix/gitlab-ci/default.nix
@@ -45,7 +45,7 @@ let
       ];
       timeout = "6h";
       artifacts = {
-        paths = [ "systems.json" "hack/populate_secrets.sh" "hack/deploy.sh" ];
+        paths = [ "systems.json" "hack/deploy.sh" ];
         expire_in = "30 days";
       };
       tags = [ "cacher" ];