diff --git a/modules/age-secrets.nix b/modules/age-secrets.nix
index ab99044..116b4b7 100644
--- a/modules/age-secrets.nix
+++ b/modules/age-secrets.nix
@@ -152,25 +152,7 @@
       group = "gitea-runner";
     };
 
-    # Git-crypt symmetric key for dotfiles repo
-    git-crypt-key-dotfiles = {
-      file = ../secrets/server/git-crypt-key-dotfiles.age;
-      mode = "0400";
-      owner = "gitea-runner";
-      group = "gitea-runner";
-    };
-
-    # Git-crypt symmetric key for server-config repo
-    git-crypt-key-server-config = {
-      file = ../secrets/server/git-crypt-key-server-config.age;
-      mode = "0400";
-      owner = "gitea-runner";
-      group = "gitea-runner";
-    };
     # Git-crypt symmetric key for the unified nixos repo.
-    # Added additively in Phase 5 — the two legacy entries above stay until
-    # muffin has deployed this config at least once and the new CI pipeline
-    # is green end-to-end. Phase 6 removes them.
     git-crypt-key-nixos = {
       file = ../secrets/server/git-crypt-key-nixos.age;
       mode = "0400";
diff --git a/secrets/server/git-crypt-key-dotfiles.age b/secrets/server/git-crypt-key-dotfiles.age
deleted file mode 100644
index 9d58c61..0000000
Binary files a/secrets/server/git-crypt-key-dotfiles.age and /dev/null differ
diff --git a/secrets/server/git-crypt-key-server-config.age b/secrets/server/git-crypt-key-server-config.age
deleted file mode 100644
index 87fe901..0000000
Binary files a/secrets/server/git-crypt-key-server-config.age and /dev/null differ